last executing test programs: 4m37.44002458s ago: executing program 1 (id=3897): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x3, 0x0, 0x0) ioctl$PIO_SCRNMAP(r4, 0x4b52, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000340)={@broadcast, @multicast, @val={@void}, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @broadcast, {[@timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}]}}}}}}, 0x0) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) sendmmsg$inet6(r5, &(0x7f0000003440)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="ae5d41c61790a7c951eea7fc6ba3ee9d3dba25663da55fbed0fd56edb7dd618d247b282ba97dd6ea6877733ca435d40279b0b7f746d77510f0525605e699476c87047b087ab1f478da0154f354682190c07d099836a2b4118f01a641b34a7338a90ea530c280880d21723d9e8733369289c81199ec5b434e757003c5b64aa964decc7df5e603ec36345d06a6a8b6f323273bac67f8e79b39c7eee7020457f97d82facc46bbae70657726cbce4ce5e56369dc693a7d683f58fbd5ce6cb2eae2a157cee32e34b37f85531810", 0xcb}, {&(0x7f0000000580)}, {&(0x7f0000000480)="230d0d2c0890639b63de67b2d8caf06173e6fae6431acee4cd1b4d56cfe5f40e0f7436b869421d4764d369fbc9728ab87bd29693b60367ab58c1a1739d5aafa1363ad0480de95ac263ec7d9d00e2497dfbd307e7f7e1cf9ac9ae939c19a43a6cf8b8471a720f07b95480a081025883a05a3fb5a5ae7a2f393aaacb765e6de919016f76b96a7edd98b652a8b8e3", 0x8d}], 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="140000000080448445f0e51300000000000000000080000900000200000000"], 0x18}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x7ed, @loopback, 0x7fffffff}, 0x1c, &(0x7f0000001980)=[{&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="6b536245586dd48a4082ebe59055a2c2a6", 0x11}, {&(0x7f00000016c0)="c38c992a2e14bfd21cb55a4e633d2bf9e285d3e7877b9e0d69c0bd7f557b990c89d551f826698365761e498ddfd52a2965dded2ebf9999e47e42823211732888b9360501e99f2613b995063e956ed830b0fc4932d1233cfd1fbe37b3e4c7448f0c866aaaa6f05bfc869121177a6967defb35f585adf31aec1c9df66ee92f1a245627ccecf86fbc26bb380a949642b6177a392446764d809af3eedd1977b26e31a659cb94216e4ee618ad4bb44596074044b47c24bd32704ef50d29c7eb8f81722ec1c957032df41d184a54344e26e975e95a8cf409edda5ccd82adb61b8d4203228d8473940f3353670bd55bca2998b7", 0xf0}, {&(0x7f00000017c0)="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", 0xfa}, {&(0x7f00000018c0)="d2099f996fc41ec17634d115bb722047bf59fd1f87972a1ab103c14e69b9ffb982ff40333000ab5560536e182b2c1de5f0b8d6ffbf3181cfe61a9699800f0523774245432b2c375645c0b5e1ec2c6e03a8a9821f2ac6e289a6b13e800d69676157aa4e24ec8623435bc0e4e4da39b6c5e3d9b1538417f317416a92bafd0cc7c301838cbf5f62a7af5f647d8b5efaf2728fbc8b7e1d18c67cd3b86169b63942a393513b3bf38108c6ea4ab640a7", 0xad}], 0x5, &(0x7f0000001a00)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x84, 0x0, 0x0, 0xf3}}}, @tclass={{0x14, 0x29, 0x43, 0x8}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}], 0x48}}, {{&(0x7f0000001ac0)={0xa, 0x4e23, 0x240, @remote, 0x3}, 0x1c, &(0x7f0000001c40)=[{&(0x7f0000001b00)="9e9dc007beaa", 0x6}, {&(0x7f0000001b40)="e917abc2b364fc3b7dba52f8e52027dbcbaddeea2c2e7b4b564461241ec3a0b488bc3f15a2073f7caddfed9a8d4e5194d1b127c21228b1fcb6da525f809f611b1b800b85e4552da3e7cde6aa88520388888d0d49dd6c8d88ea4df0b3682184b8ac18fa5245e73e1e28fbbbab68d05796efbdcab118ca9f4e4dbda96db5cd15d34eafa5996f4c3818e0aa185f108ba9e872688abe23196777bbd579a68727e8286f5c05a9abd8fed4b87fd2c3f514072d5b7ccbf6d82c632f24ac67c8efe1ae0f6687", 0xc2}], 0x2}}, {{&(0x7f0000001c80)={0xa, 0x4e20, 0x10000, @empty, 0x800}, 0x1c, &(0x7f0000003140)=[{&(0x7f0000001cc0)="cfe4912a66eff9e6bbcbb76f48bbdca1b99d74cc116510ca583e3f7df6bf38e94f4835170d3626d2a3f1c2fa8d75b329e5196673cf92dbb76611ddaff981114bb195dd312c1dc6ee6fda8e342a0220e078cfc8e778661e5e2b825e4be1d657692354bc6009d06fe4325096259e7120f7d43331d6f22bcda3af2bc36e6411c43956c5d7f2460d02606bcdbc1a4e9b09c875f2d1d745183735a0141ee82c3d7a4eebed3070ccd0d5900de59178e9e1c3fb8dcab53adc149d17f5bb370a71fae9b73ce7687fd1f2207ac4b69ca75b9de9e2e7cc0d4a95bc6e8eb2af273d97c5db377e99e8598892badaaff0ef840f0e784f462b9bc5", 0xf4}, {&(0x7f0000001dc0)="b749868485abb79840f02a78380d81ef394c2a0547f0efa3de3f8524387eff67a82fe37e7fd84c7fb33c559b8a288d24080a410bc2ce3070116e75c979842f9fd486a081d6b2576839cbac3e7464657429b1eed372fb25ccc7a8b1ec0fb1d0b2c97c9b3240cf375e54adc09420fc4b096140953a8d687eb3042211cf965e92207683d0119ee448a88eb9be4adc99a590c9df2de515664a31eb152272b5dd73", 0x9f}, {&(0x7f0000001e80)="c2111d3e6d5fa97cfdaf10ede71f77b14ef30b82b98ccce3bc9e5732dff8868cc4bfe4d76a802516a94bc0bfc06acabbdc881db5fa4dec3fc57475c9ae5ead03ae038c5bc4be6e9b93e4079cdaa4acaddbaae3e8009632ce6e56b20aa05d5928fcad98f1c5db8e2294db415ef1a5d7cf2a309de5bb434128629203f7319a56b108007fee78168b06aee12ae229d8667de8635043ce6086e198d1678100b988382fee728bbd121e20d5fc30a6", 0xac}, {&(0x7f0000001f40)="dbee3373f21f9031494d807dc00b6164f4055dba", 0x14}, {&(0x7f0000002000)="cb0ec97bbfc85228648d33606c6b2a1fd30f44c1cbc3d720624f8120fede2383df306b3eb9749779b5c06959d7cfb756fc099b930635a298ce727f2891e263f517ac5f0c4db05c1cd85bfe5713f877e751b88b15a525fb161e05df1fcaf15afa3b", 0x61}, {&(0x7f00000020c0)="4d4eaaf3cd5821d0725b526653e75113b3e4c77b5f166d8eadb533aa161fa3ab42e161bdb2d77716d2ad0b6c59eb64e91c7df67cd13e3ae695967fe49e0ee6ae30d804623f3e946d02056f846ddf468b7ac6747db4fb980d65e072806e86e1339d025494de45c0ef357a3a471947fae8c1cea7fd861a13a32419e27d564446db93b138606649c724cb942ebe4aba8b8ddc07bf870e0a30107d59113f4ac192b4d64591ac2f323dbe5511037b65bd30fe9d4c01fadbd712a4988e77c0c7c4781c24ea9ce5bbb2459c06ab1253c5af0d10da0b20db46f6923c1b95528bfe6566c0880dfbac51d34d767cfcfb5895026526c0a6c35d912fed25fcf96f301e323051fd589a6ecc88e3edc47dbf9906f7b68f793bc6c17fd40703fb55852bcdd1cfb564f7b2270141af3ef52fb5ec334e4f921ecd9f74dbd3ac74477859c80634d9975c0e9c86ad1a8bbb6455a2e0489313446980c71efeeb7871c001b027f20313520677714d96a61e24b2ebee88e20e06f464eba3bd972b9ee9cc03ff9f0b818cc587d4661a8b2e3b44bd948e3f75300123ba2a29cd43e73b1ac49e389069a3f582c9fc660d5e874f1438f465588a43d22c8ab820b35b50d159677db4c7a63ce01a5cf345624f331f93e1841bdcdabd42c3095364d08a6dc8fc588977211c406fd6630270ad0ea763fe663a6862cfbf302997a9704a2d71d12c9a00db2cc4d4bcdabd395b84c6ea07bcdc52f578cbb13965f495270deef419c651b9956cf8134466eb961322bfd7e7007ae2a63eb6e376f5b07a16b806210ba099ef6b9055ac7603909fd1accd258f46f2d1bfbcce27944d768799fc0708dc11496305e88fd78d61921474957720bceacc1368040e4416c636cdf2d1640334cbdae69605a886ba48d6c6a856940e417096d76f588a6f6ba9427e503758c515d1db3c782d4d5bdf31fbbf8d680cd8543e203422a56fb02e70483e7a1a09f694b5f5ab75d3de6b776f2ede4dfef91c4007d4a2c4ce0fa125a2e804f0cc7d62d743acc40271202198d67541b4ca19519293918648c1dca7cd4cdd228a7eb83fb7e0577879b2236274076f2855a07c6a30273e9d7b41e9f4d35a27be34365bd98f9f4b5413bc3d44cd5e50917be2bf33912071630d5a1b06231e720c715a1852130395cc6da4a31ca3fe02ac26678b5498889d94470093bad236a953fc63dcbb4a8c3f6201ddeffe7991a511f66585ebf5a08f09fc0bdf4567069c59d5f3697e23b83f523e35d5def97bbee9f5f413134229fb8fd3c953f719d816763b842a408288e9ef9f768d6407c7b7df05fe52e38179267e1dc1c0619f48b1c3dd8b54844a153fd05b15a8820335e7ba8c10c1281b47a1e43358e1e560dc5bd29ce42997050c0ad442d04f9c66ad764e1e7cfab9a794d73b0477a2214553009f0ff8b2556c5632c917b264d12a97484430e8050854efd5bcd004f6f58efec08fdcb1f04ec497a4f264227eca0e304d6c21836a7a6c70246730ee798008d7b2b4610550872fe9aae984299b8bdc8721e2ba80017c507a3dfd2e3d64d4463ba773f654d95d81328879c00bd55095907005d7c34ee37827de34dbcd8e29646d26cd1ee45a9eb1475a2576f51e23ac529cb07c95cb517f9e9ae690f4184bd3aaf5d4a1fb161eb4db1966202875c9faa978e82308aab9877559a8ac6e9e21b17d4f51dc0d062ef5cadc2b66ac994dc2325d265854ac116e1629a8d56a59bf493902da8cf014f5f4f52d37e9dbdf9c2e37a2032830f36a089be47a2dcd3fbb45a92bc7867642108a83d0506851d3825340128d081bd106938d8a546f8663934172d5c25e3adf9abd4a9b4b8faf706d65bddd0e8dd6cd3055993a69c174c3a36cf6343e389ee541be193526d9510f12577d19677f7b57e21bc170f3ab60d168d7baa9ab6072bfb95ca7f2b7b052a0d8dcb564fd1372bf0984bfcf04baaaffa8aabc4fa43c339cdd82c47bf2f118115c88b4fea2b0de17ebbf23aa678092fc42421f5e0e0a94e7de54146b088a3411bc4ad6561c3c2c50aea7516f6166b3e34800a4fc744bffc4f545c6d85b869c6c17b3578f45b661f8fcce84d4d93745f200535f8c321ac2d3cfc9ae6967ddaa48533b0823f7ce9f03561fef8500013dd3f87444addd88527176f3f18b84f1ba314683fc8931c5d85ac389b001ee1228b373cb0504f0195c9f1b1cd35ee669170966c8292d61d31f62fbe15e2fcea47194d149c08f79f3b76ed33c606e7c3911102a51e34552ba33588dd69555399e7c735565571d285f31d1c4394e8a87a50f32fcff1ffeda94667a14a93263c3bba6482fd79d4541af04c183a129b2342639740ed8f8287028a6ad094ea62bace06a981a333a6960a8006647d56a0c2f911b1dd8c96301188e0c10375991129a45ef0857f7f24a4d71158ad1e030ca306d3b0378d870a9d4379ae23c1c24fbb32815c6d184da24ae2a1000a94329a94bcf56699f53f00f08c7e513526d6394f95cf6f51cfd30dcc4f3e4beb7323855a6297607cea1ec2cd1e6330cf8ec4d9a38f28fdce2c4d24e663ecc064f8e66dc679aab7575a6282b5c45c66d0e32457b3351c3d753a0cb03b951e71556f10e9618aa830dc208ecc4b8aae621766e20db9b4978cc55d47daacbc9fc43e210a7e6bd8b72fec69578e5254430386552c4a2f90d09a3746fd4e25d147400375f447df3732c13aeecb4abd3177d34171ddb9273a8eadde1040c36610f0ee86c2383cd04fdf07def984ca1e8dcffe38208455db7906383f493730e628b4ec56dde4c49c2ece5c7e50d5cf05ec0301e0e90b03485da6de4ae352715e508d47765009816edcc3a714e85827cd48c41fcc0ccee912addcb98abbeb2ff1a9dafc46767d96b1f2d6eb240f2544d18f144936509a29abb590dbe07729e6178d0ab2851bfc4a820d45fa6903a531804c736c8d5d4623f14ac8dacc9d5325a451f189536bc9bad59dd9916125bc3c3d259553e3445770f97567d7c8207b6ca4d0b1c5d1568faa5cc567abf4f525dae70a324bfcd931195f8e63ee5c9cb9a69ff82e44b5539b0ab0c1117706b9d9c36b57d776fe2968e13226507fd5d6f7c2e9e8a855071778b57cc84b8142ec4495ff194679bbe0178bc6b817145e347b575011aadc41cd093cc03c7c25f8314914ea3c905636ea04210046935149e82529d9f6281b4bf3843e45bbe4e7bbca65d983d8cb5dec50c2c45f7576454a588efe324d5f289d22ad91d2345faa4620fbfcb8e27aee71df97973b10e36c5aa333da1bf2d7b157496d3d207f75d8697781c739912b3e84575bb77d1359a302a6a5f014315c8e00cfe7ead0f6a162c00bae53b222a326b039a51940a4fd3b613433788b7b7170d706d9a1d390e5d4b1d6f3487b080171549620232975b335d8322a0c3ed3caa744d34707930a45cb48bf1f7f7aec5eff27d9bb4e3fccfe96a1037a156889c92cd61f12da7bda572ca05493334d985acfcbf925327a044500de8ab6e1529eed849ab66e83547de7f37db5b2ddaba31531316e1738cda0c6a37ce57f6ee6317ca3dc2b31e3683307de301532e25b41c9698d29acab68d459b3080c9ddbea74b75210148d93142e7d454ecf12ad8bf24b87592178791ae86c9ee37d61e2256dcec1cc66a433c6096d51cd206239b61ef4c8aa624ca58ac75db0cbbbe8d027b6e8a19e9de8ca8430ca6e9b6ade6348e851289adfa90a88adb02c1eab2ba00d8d2ee9ad3dd0670c2780114a968915079fb4a7d161207567746cd65bebcd1ac585ca869d40d0b2307f601c397d73aa58b23057f49b0748426bd502689bd4c3c16c75b26af19480dc196e5fcc5d4fa73afdddbc713d900c5fd3b22f5d1bb13803ff5e2c165b9371f7e1b04a060455adfb94eaea6ddbcfbe11c86c3480375c52d5c9e7da94cc78c7f9ef27cd6d46a8eac6bda87acd450c6409b8a2eda537d81ccb03a6d07105df2963b4659c9f4ca29cf530fe63423790545b2b42db89ca2672bf26de8d54525e48b5871e54c03c824c1eb5b405bbc087a47a695ab749f24a3c2fde2a40cc2e9092617fbf098b21956ca8e314c502515238300a8614b71a5910b09800ee4b38618b3ee857f65d0aa7d482786b90c944c50b77ff93dac47e609507ef510bf13eae50f4ed5cc64ddda306abf0c44eede9085dc58a2272c2df7d97eba5404117ec75e83ee3ce950e06ef86f6748335fc100ad535d944cf93ffd5db12bc7eb4b34aef739d35b8740640543c401570b2b2468ecce7ab17888c20009471b63c2fbda4d352c85783a4e3afa6c74f34c91fb4401aa884f875c8d0d76c11649fea8e89d01f783e60e55332486b15b525c372c9a638592db8b54427563df52bd2b59929a0caf4c2331eb0814c97c215d4680ffb6b8b2bf97c3a8b3a4f9b787d8b599020eda3ffd782379adc7cd4a58df947a76a78da0976bb22b716190d7fe1604534d98fe46666bd5fd4d3d9c7d502fc2f6a1fc3b18c739b774b73beeccd42513a27f76d789b04e541510b26a816a40ca80b7e3de4391842ae188226bdcabd84a252dcc6a38c9e9ff8bddda142b6703cdddb10c0f70e95ef1fdd4039a6ed14155e2063cc77170cb5ea9f561d14dd6ac7544025e3c046e80a1c045fc36b29b20aac0e0392f8bf4c57c74105ffda5946a20e30bac4ed15ce9d69ec40c8737823b4f7340148d0f6c1f3583216208e970f424c5bbc29ec6f5bf080326ef3807f151341e9ce6d18203ade02cb488cf4298a06bd1364f96edccd2e77aef7ed9f7d9c0daefcdc6433850b114997d1e32a623615f626d52d41bda88a6fecc2a499afb924d9c8bd49924dbddc57c1f3b8a5f2a0dfc3877c79d44f91a988d99efa5c870be18973bc6e0c671381f0477805fafb830656f5f88f01f3045fac9b434552d7e4de4d742a1ed045a8d75c294a179356bdc259a4a42f0ee38714a4bfd836b1f34e811b1903825c25f6ede56ce7e81e39658fb6277538c7ff069090af0db6b21cbccbd3458ed434b52434d059e202ca072a765989e70be0ce396eca9a207387b60e86f3262d30bd1bf98d3277f3205f79ecb6eae3441c2e06c016b2fc31ebfb91437e070f969b9d89a504648682c32fc08485c604204d3a0fdb42668eeb491165efc6367ac8385c273440d35b5e9eb4dea2551d634ce71cc87d70da1a7f3e048ef210948ff6e4a5801e8ddda2353dca4ec58ca7a36ee592b00673107f1831bdd1c56668ed38377ea682b06a1a1636cc625b73f184ef378a05e34e0d3a87037e6886ec9677d3ac7ee9854bfa790817fad0d13c85a7ed04184700db8e7242479774c6f307333498956590e6e98899901bc4ff7deb2adcc50ecfc16e29591bd4b5508a9fb7ad84edc3dcd457e19bd5a5cd562964c74183630d5d07d25d52809fcd879bccd926509a987f5e322ca84b7329f7e2dc6203f7144f430b095a72a1aa1d639f3ae74ebfcb232accbaa6091946c96668a7ce2ce366e27583c118c459fdfce1db2083c997290c7657a2936c7eb5a26817edf6f13fa54e1ac49e3d1423c206d89399892eac1ddddebbd5b2f04afdd503d13e7c50a9e353f1709ec04c95b5acdf52176676107715dd9e093e590c1c5b37e88289cde697143bc4fa6f51f7a5a458700a70cde922cc95172ce5df2db165b48e7d036ba5255a1763f528cd1d91b7a405aaf532e17f51c61368ad822af84a48449a8a73ad18d8370f29b08872e62727a688e19798e92c1241b1b5a15f16d04866d195a02c96d0d83c80e324e1287db23466d8f16063b8b62463fb976a23f68", 0x1000}, {&(0x7f00000030c0)="17d555f8e1f93f2f1f4ef0d7678790df57586433a3630e076426acfd372e345625c8787ba39cb5d69a3bfcb6386224bfd4cf1281c16ba641b0ac713f5176824ba7ac577e745e5223cc3e0067bb0ff0b142431fcc1479", 0x56}], 0x7, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], 0x260}}], 0x4, 0x4000040) getsockopt$inet6_tcp_buf(r5, 0x6, 0xb, 0x0, &(0x7f0000000580)) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_CLEAR_HALT(r6, 0x80045515, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="02aaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a00142c00fe8000000000000000000000000000000000000000000000aa2c", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0xfeffff, 0x10b, 0x0, &(0x7f0000000700)="c45c57ce395de5b289f07d637a2239a0f181c2e57d71483cfb80a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0}, 0x50) 4m36.441433344s ago: executing program 1 (id=3899): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 4m36.407591379s ago: executing program 1 (id=3901): syz_open_dev$vim2m(0x0, 0x0, 0x2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) io_setup(0x9, 0x0) mount$afs(&(0x7f0000000000)=ANY=[@ANYBLOB='#syr0'], &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x2020, 0x0) io_submit(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000002040)=0x1, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x4004000) timerfd_settime(0xffffffffffffffff, 0x2, 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) r3 = fanotify_init(0xf00, 0x2) fanotify_mark(r3, 0x105, 0x8971, r2, 0x0) readv(r3, &(0x7f0000000480)=[{&(0x7f0000000180)=""/50, 0xff97}], 0x1) rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='./file1\x00') ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 4m34.974408s ago: executing program 1 (id=3904): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='dyn']) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f00000006c0)='svc_process\x00', r1, 0x0, 0x4}, 0x18) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x3}, {0xa, 0xffe0}, {0xc, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x13}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008814}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4048841) r3 = syz_usb_connect(0x2, 0x46, &(0x7f0000000580)=ANY=[@ANYBLOB="120101027def4410490b4f06896a010203010902340001bf0fa0030904df06037a8978d909050c000800020d0109050b04000402003c0725010003f8ff09050000008104f3cc8bb7773ad9182f184d229616f2e246498eaeec5e8fcbb20c96fd3f4d2b6a9191a0f38ae0195498bcf15009a04af65023f23fe7706bdbe00f0948ba2249aa8d2cfd81bf1028ced5c0cb6a173b1ce5e145f5b607fd3c4f4b2d"], &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_usb_connect(0x2, 0x24, &(0x7f0000001140)=ANY=[@ANYBLOB="120100020000000870270c936a8d0102030109021200faff00000009040000802abe9800"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) sendmsg$nl_generic(r4, 0x0, 0x400c0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x5a6f, &(0x7f0000000040)={0x0, 0xc8a1, 0x10000, 0x8, 0xbe}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000004c0)="cd65a7874f3080fae8f1a10beebfb21bc9032eb1edabb2bca53948a2b6f37a3fe1c3eeaf2f75b6ad126ed59e058380652c29014a37489a23a456846346e3b10e63761cdf30daf5c82c65af9e1214648e1d7997bae9bfb94942bd5a95484bf282f469715976c4461c21ea97a1ec264d86399fe2592e30bdcd1d358a536b97bb2ed846290ebb5ef10f111cc64f037dff3a1b35ed3773a264c532e27c2037e4d4bba487521a4a84f261a30f5aa816e51741445bdf2a3791c02b7a9aa7acee", 0xbd, r1}, 0x68) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="364c00000400000001"], 0x48) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m32.927931918s ago: executing program 1 (id=3916): syz_open_dev$vim2m(0x0, 0x0, 0x2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) io_setup(0x9, 0x0) mount$afs(&(0x7f0000000000)=ANY=[@ANYBLOB='#syr0'], &(0x7f0000000080)='./file1\x00', 0x0, 0x2020, &(0x7f0000000200)={[{@flock_openafs}, {@dyn}, {@flock_openafs}], [{@smackfsdef={'smackfsdef', 0x3d, 'fowner'}}]}) io_submit(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000002040)=0x1, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x4004000) timerfd_settime(0xffffffffffffffff, 0x2, 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) r3 = fanotify_init(0xf00, 0x2) fanotify_mark(r3, 0x105, 0x8971, r2, 0x0) readv(r3, &(0x7f0000000480)=[{&(0x7f0000000180)=""/50, 0xff97}], 0x1) rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='./file1\x00') ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 4m32.341813153s ago: executing program 1 (id=3920): sched_setscheduler(0x0, 0x1, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000080)=""/121) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000f, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r4}, 0x18) r5 = syz_io_uring_setup(0x3288, &(0x7f00000005c0)={0x0, 0xac22, 0x10, 0xfffffffc, 0x30d}, &(0x7f0000000140), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0xa, 0x3, 0x0, 0x0, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r6, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4) sendto$inet(r6, &(0x7f0000000000)="f461c5bb", 0x4, 0x4004000, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) recvmmsg(r6, &(0x7f000000e280), 0x58a, 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 4m32.045696264s ago: executing program 32 (id=3920): sched_setscheduler(0x0, 0x1, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000080)=""/121) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000f, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r4}, 0x18) r5 = syz_io_uring_setup(0x3288, &(0x7f00000005c0)={0x0, 0xac22, 0x10, 0xfffffffc, 0x30d}, &(0x7f0000000140), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0xa, 0x3, 0x0, 0x0, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r6, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4) sendto$inet(r6, &(0x7f0000000000)="f461c5bb", 0x4, 0x4004000, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) recvmmsg(r6, &(0x7f000000e280), 0x58a, 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 11.313337942s ago: executing program 2 (id=4798): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000800070000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10001}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x82) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, r5, 0x1, {0x0, 0xf0, 0x3}, 0xff}, 0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f00000004c0)=0x1, 0x4) sendto$inet6(r6, &(0x7f0000000340)='G', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) shutdown(r6, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f00004c4000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/205, 0xcd, 0x0, 0x0}, &(0x7f0000000100)=0x40) 10.454410511s ago: executing program 4 (id=4799): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x198, r2, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x100, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'geneve0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8000, @mcast1, 0x8000}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f2f}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5e8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x7fff}}}}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9a}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x269b}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x1040, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1014, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "fc654c187d6eb5f0ca15095cc8787b50b96435ad3147dd10e867248d37187c2a131a62d105462ce34d5cf8ded36159aea612a3460534d8c298556e91590238f40dd2c7148d365ab6cdd5f2a7f74bac8d59f731c655a46917f18b28ed05e58b70287d26677601258a5c0ab9f679e2e520228c3a1f1aede04c6ba82cc38cc2ab6b35a24fb20e032dedf6f6caf4bfea5435f746f746fd46ca192e3744eb6908b358c10833bf484237ba654641e6186a45957c6345e61ea620fdc74383ce1df4a24e7044bae596f018736424a5bfa438865044e7026fa37a3540fadd0e89d87aecd3bc127e0cb10274991d6127224a0f2a4ef19e2c4dedbe45f2471abcc38c584ead0e3df3f9211022b2421fb6b327361e8f58f2b73134fc5444b350ede95ecef5bbbf9950e75c9f772a3ff0180d2cfac287228709726a6abbab2971982de7f1a9149d71dcbfd212e89ff17cf284b7f8ad82a469cb1c1e3d9d1d3689271c8dad0ba89dda651d4242062ac0bc5877e397236fa9476ac5fac7c2c896babca09d74720004cd0e634327de4fd87ed72ae069c095d2c70caed52e3335478c1c3719925e24f2fd7755baebd5cde385727a0f0440dd3b662248c43ff5afc4f186ff0051ba8eaa07623b79c4bb6985f14c5ac15041a6ff7584f921982e5414481d4db4c76798d70a59b5aeccb6e7882aefe70993758b55b4dc4039c2b1c98452113aaf23ccdf68cb6eff6e048f9da6f39a2def3caaf80cdcbadb83b029b8738391f02fec90c8a8b6f036aae8ceaff5dca7d3e0098423fedc676c6774ab0e6a72bd246c0b3004d1988f802b846d62ca59e9a63ce12814176ec4380e1cf29d27e7b2f7e7eadcaae8f182498ad32e67323fe6ef9508fec40dd38897652053ef92e44a909060c237890c196f0c26ab10248f999001f6231813a81313971bea77a5470f312d185dce689adc99e430e4010a3a341482c51fb71c23c3cdf92303c7580c73775f9a74685a61ce9849eaca52b97ee7ffe2e672dc1be5267c285a102711b1b5d81d6dbb76494f2892fd4f85244ade3cdd3809fd5fdfce5157fc1658f0bceb379489732583707c170fc6392aa4f5b94843aeb18da58e0156e029c2b722918b1b3dc7c151cb9c248ddd18423629b53cd4b0ab2693b0df29c88c04657f4eccdc41357de8186fdc0ec86f92950734975921a2fde57c3e7176b57c871d76ff8a8f36520b67e64930cf34bcde9ad92d057a359ca022b646df18e2b7202845bd8ac4be5e5ebae436dc4b93dfaaf2778a53e7e4be937e83dac7d1d481bdbd8081ab0ac08af067e62580bbdbf397cbc629db9b023734b6fad7824d1a8b3257c1c18d6ebc928140060f004ec484b183560f830a1eb0c527c8600bb2600d761e847454e677aa29486aa407a9e9a5e9dc9542de038e3e55fdfec13184cdb16716556f972eef5c56230c43d146c86a9147265c309a279db6d138647920410896c5397c5f83634fa5e92b5161f786482d84830864388b91c2c1e3e9f9f038d5fa66f7fe904e14df0a60d46066c6b1f37cec6e13c35832f512be21da21a5921b81cc452b0076c2ec10fc5481cd0e1ca917b40cb3aa839b120ce6eb9773e942b74ececac6bdcd22eb8dd6cd9f148e0ebe5ef3094f42adc39bc5ca2259e1eab5059ccf5e82bb57b97d4d13a90747299b2e6b64f962aabf222e4f287503181de3c3a68fb2b0068583f3b97e40ce06e9805a7121eccac0527b8f1b18a62762efe0a9ce4114b7d1ba942bc93533ee0b1bd7f0a607207b976dfa1fbe3ce0868e7f4e31b41a0aada0ac6b291aefe22ea5338f07e57b981b8e4e4a121f231d2f46989fd5dd09a7c1d198f5886b4f1a222eccdabff096a81fef3c9e497621128562880938fe05a1f1c4da81daba55bf326f1e3a1712d79f01fbef2ee230615d4e454be67f0ad4dc2bfffaecbb683742925738b45854ab713ae548b9709e9ea2e28224ef466bced79e3ec6c163d45db187bc01c75afa85f78003927dcd122086acc8dd1b1224de41d62b83e34083dd39fe68aa5a479ba403f5dbddf9b763ca521b7efca6234be16484f1e0112d963672a6d24cdac15e80bcb82b3b22231670c41fe7e8a0a083b6df768e7fb0d94a004f8372f5cf8b9b45cc679eb67828a94d0ffabfe09d95ad2789cb8657f7ea86a46260416a72e6fc7b44e549a2e39fe015c7647cc0bec15fa63d26894be1cc5326331e7e0b1c505934182accf049bab033b026d48fda51de740afc0666e6c891e0c5192f4b2df21493477ff45319d7d8b816f0b73ccfa12d6846362feb4b85063ca42e950eb577c630300dc52698a38ca19cbbb398404a1e8e27d0be49985e59caef03da096d1ccbeed73bd7c9588325b747ab77f4d7c1c1f18388ce1771882ee680ed737ad197ff92f1052e5e79f6ffa5b85ba3fac5db13e0d0046c9dca0ab4b74b20299ba6bdd758940e088df31e1382cee6901503299028467a864d27affae30fd9aef5a6ff948c052124511a75a46d5a316e28fb6c5bfac787be5833c63c535557235b0e09f9a78a338aa8864613fca77a7e252d1975af2c4a6bcc969d1e20e3cd4dfc1b2fe34b70fd7804dbfde4fa4d950e5fb4eb926dece9e4601b12efe322bb42ac808158fef0a26900000000726654987e7de20d1e41e82c607c33c6bae7bb234744b51dc683d5857afd6ba8246cebc734e393806ef102a6baaf04f3a7c3cb888d5830e1c6ae170c5c920e806b4f518be4416b216cdf9b1658a412d9e4eab6c9b20ce99960f27e77fdf9a2e98b35c63859f9db6bdcbef1001a19e12e41370f9358531987851ab64c250e68a8569ace4418e2118caff7d3d4caf1c87bc50a8ae75770fdae88a8490c041b39d08190d8b7c908caddd66331a508929d53dd6bc2dbc86f97115ff0a364b70f96918e6ed354c97e59ea5e2c7b149cd51d7c85a27ac658e78b99326857858df0ac0ee240cbb6ee9d9ee6c2c2ff7c29dd25fd337dc08bddeb50305ed48b9f5d89c55ffedde29ce0412ea8e2c976f961eb0c4966d2a8be0b657a5e51048a8a10005c488e1f637ce208a35b5aed0c2067465191dc42ebf6e4853cc89998bdf2ef755f38a3cd985b62df36a5ebc3b47df32423ee46857f9db9d756ff69ecd4ef2f307dcaefd4a1f399543952df972269c28200df8ebacad4eed1c00b9ce9841799bea583cafdeaa8d4a371a8ae55d8ffe4846833985975d8b234adff63eace9d2c4d1680c370827ebe1831ef311077607e8c4920506e03528861085dcfdb918f1efe91420c390fbca0a38377e1635c402ec1c34eddae986ffa8756b27f6c340907bae99f4a6b328fca8177b4dfaceea5ad3ceb901dbcefc15ded322bece4e750969e81935764ebe88749464af7e692e3d324c519b456013daae93bd63215540380a7fe08f0e050cdeb25db2a8b9b6f5720ad1e7d2c5b6d609712eccd321d6211fb642a4cdf72504aabd017a9b4827d1e0e0264435a5e1045dbe33834968d2db503972995559b1efe1b9ce475405118346b63f637b1abf8e8374e7100d6b41c9c672d2b244c7a82ffb882522efd9e903fc69db14c469685780005843856c6623591f305d383eae55a1a1d5619dfff0027413f26fa6a793a348ba8b192e1b088745a2175d55517a75d4b63cce41cc0dcaca9002cd37a1ccc6710ba2a099297b0824f976919e8abf3b1510b1305a95241fefbd036afa9d4538affc82f005d29b9f2c0e60d6c20f673b8ca28cb088e1e89efe334f25ffe1a3fb3581e5aa63b9a4a49f269b5538788aacbbc04d49902ae2af1f59d2484ab6ba7a9b477be0d92e221fc48cdbc00bef7125bfe36f9afb1cbd58fef21625ec99ffd2e35fb00767e3f22dba7d36163203cfaf1860a8b1afe0d878ea00fe08f68fd592a6395fb357acbdc2834c8ac85571527dbf1dbaaccede3d583e2b9bf076737716785f44aebc7ba917fb426d5541adff1e75836ab70fb0b43565ab5e24c5902879f31701cc006b4ee2f57be0916cf0b6cd489c4fa9129031a4af75a00048f20eb962f0c6f68cda0d7756a4e83f7d065c4a00b8263d95f6b979507b7ca01735e83a5e5ff0b76f077ef6e4c1150f9202b5311a231b76111d48a387e09075edb2448fb19d2869ae420ada8ee7577fe980ed7e057dc963c0a98db790bb5b7920220f8a55213b6530637b832abdf3c6fefdefb712a2c2c9eba8087ce39335ddabdadb86f493061e593981c6b2d70b4bac3b58885787c46f85c1022f5ff6cec16ba227aa5dac2e0be30522c08369f18d170b9cb454f3ebf86d1e923fdd65245d8e0c476bfedddcb772453f4d0e70d059e79b8811c379c9eff6e45d99f81186930b32b24cdcb906a41fe29c147ed834b37e77800a33c15e65d121ee85a924ef6bbc1c8f4a423fbc5d14645a08178227f4c7f111fa318823a6c075ddf9e131c9bca8d56dec4a68fbab9a0c1a128880d8b4dec59b89ec33c19eb76f09f31ad730cba735b60deba54c399119949e45af4de5c758281945fe6b6a25ac1cd57a81b48f11a6575e79b82e529d4ba1b2a1175cfa03ef6d149b165195fa64736b302e28ee6444368fb395a2d89c8747348b546a07ed0306682971539f0031d88ffa020d0b3d40369e0a3d2238293a75a155eb5c0749f64ed37a9af5be26d5a4322a55a23c33d176280bd0e4c5168f2e66bca925304d0f32074f5e68d7c43f9e2e3f14a6bcf3e77e6b71737131c3e90208072e37c8a6cad1cabd756aa694e85b86256ce13b43541a26438374b6029ee461d223ed34ed1e9a3e580cec7b2b41bc9823b3729e683f079a498636d022799dd94c5e870b6aa7f3d36fb51ffb6c5e317fcde6b5ae45073f8e90ee0fc1fa0641ff6f0b789dcc6df2fe9a3b5e6ed9d2be3403f5af96e7c6019b0a0ce4f8342323638a52c121956de068069fe5c44946b5023e1db7742fec29cb749bcdc09d795b683c553dbae1298540b2cf1bc3e5e52adf252bca47ba2182c80541daf1d11b1c67675171e69c1abe3c0bc3a0f2d1a6e2165ca1647c394970a404a6002621a258cef01e2ca12a138888dace9ad06d2f0c0209f286c11b289626aa557cc201560651054a6042e84c6fc5e345e2f702d61851fed5ffa36ade652f76db815dabb7b8eee016ea0836d0086f2a2f7bd1c4a4ceb1d706817b41347a891c34b45eb06a9ecb19041d5a39f050cb0413662dc4700385fac2e1823e1ce4d08c66692fde0862a057f2aa2425d511735fff53d0e3d88bfb245e7724ba4ba8452e469862d333dad5c63bfa778809c043132db3a57e122d0495441f7a07034a3ac1024b8fc063694d8316c29639cb6605ff362a853f976c763f6d10e4e0972760e60f08acdd8a73607e7311819fe24ad8b670bbf0adede086f91bd0839ce37927f43a263e3e8369932db9ab786ba66e1bba664bfa8aa50d98ed18fc90e560933c2e8da72757a4539756740a73c41180cf97fde47cf3e9e6005302459d831eea7a03157e0c3178776e4d4add3999b9a1efca7c99b8234ff9d33492431dd9bd0814301ee49260e30b8b6afc46ce8a733bc9d7850c789e5e98cdefbfb11131a85bc24e75453a16c6780ab4229b985d1fe7a255f71cfe18398e881d493ded88300b54f6c4a5567fd84a6e1f11835433448a00420ab1b3a49fcc0e9938da52b68f9409c94a0de61f0beb69532c4f7a11fae6a9ffd10db7de01e3272448b517ad795a06f3fef8148b7196cb81a80aed42e395c1ac346dd27f9bce87661e19f957a17d54d59b68e023c1516ae9ba4d75f18d4b8fc7e9fe6f74e38597b0e520000000000"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x1040}}, 0x0) 10.32560281s ago: executing program 4 (id=4800): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x5, 0x40, 0x4, 0xe, {0x401, 0x2, 0x9, 0xc36, 0x9, 0xaf9c, 0xf, 0x800, 0x3552, 0x1, 0x5, 0x3, 0xf, 0x9, "5775ee89a207e16268b709d6f0195905f22efe96d3b07281f1ffb04f78fec4f9"}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4000884}, 0x6040) syz_genetlink_get_family_id$nl80211(0x0, r2) r3 = io_uring_setup(0x1148, &(0x7f0000000300)={0x0, 0xc95e, 0x80, 0x2, 0x30f}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_open_procfs(0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x28040085) bind$alg(0xffffffffffffffff, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) timerfd_create(0x7, 0x80000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[], 0x44}}, 0x0) ioprio_set$pid(0x3, r4, 0x4000) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) 10.305432707s ago: executing program 2 (id=4801): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0x1d, 0x2, 0x6) socket(0x1, 0x1, 0x0) epoll_create(0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x240303, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff]}) 10.178521606s ago: executing program 2 (id=4802): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0) r0 = socket(0x3, 0x2, 0x5) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001180)={0x4, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}, {0x80a0000, 0x30, &(0x7f0000001240)=""/48}, {0xffff1000, 0x43, &(0x7f00000010c0)=""/67}, {0x0, 0x23, &(0x7f0000001140)=""/35}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) 8.929808677s ago: executing program 2 (id=4808): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000240)={@private1={0xfc, 0x1, '\x00', 0x1}, @private1, @mcast2, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x280}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYBLOB="04000100"], 0x9) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000c40)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @local}], 0x20) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket(0x2, 0x80805, 0x0) add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x52b281, 0x0) fcntl$dupfd(r5, 0x0, r5) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000d4a1ce4e9de42536000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fccbdf250900000005000700020000000800010001000000050008"], 0x2c}, 0x1, 0x0, 0x0, 0x24084001}, 0x0) 8.269629682s ago: executing program 4 (id=4809): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x5, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000400)={0x0, 0x0, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000440)={0x0}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f00000000c0)={0x0, 0x0, 0x0}) r3 = getpid() io_uring_setup(0x3fe0, &(0x7f0000000480)={0x0, 0xe9a6, 0x4000, 0x2, 0x373}) r4 = syz_pidfd_open(r3, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r6, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000640)=[{&(0x7f00000009c0)=""/4078, 0xfee}], 0x1}, 0x4000) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e901b1bdbdaf6", 0x11}], 0x1, 0x0, 0x0, 0x40010}, 0x0) open_by_handle_at(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe0000"], 0x56100) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) add_key$keyring(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x20000810}, 0x4000004) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000003a64d3a1c16508e523e2bb9fa30406010100000000006e79a9e691a3dd7bc02f7af3b93e0000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010) 7.035662828s ago: executing program 5 (id=4815): mkdir(&(0x7f0000000000)='./file0\x00', 0x6) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2001040, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRES32=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="5acdda925538da7db47e500fbdc61e1a2a46182bcc11a974d819fab4dca1731a5a83b182a5bca3cd08a66d82e3a6e1e25f261ccf03a8f9a76bcfc6aaeda5823aa0f6ac1e51cac0440bb85e931866b69e245e1d5fae1e82f51cf84b1be2517aad4e977bc553c9d3ccda4f669ef964655b1dc23810710f", @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffe}}, 0x50) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x19) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0x2}, 0x18) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffffe, 0x0, {0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x81, 0x0, 0x0, {0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) read$FUSE(r3, 0x0, 0x0) 6.253300505s ago: executing program 5 (id=4816): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs$namespace(r0, &(0x7f00000002c0)='ns/pid_for_children\x00') 5.186308467s ago: executing program 5 (id=4818): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0) r0 = socket(0x3, 0x2, 0x5) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001180)={0x4, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}, {0x80a0000, 0x30, &(0x7f0000001240)=""/48}, {0xffff1000, 0x43, &(0x7f00000010c0)=""/67}, {0x0, 0x23, &(0x7f0000001140)=""/35}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) 5.112963186s ago: executing program 3 (id=4819): syz_usb_connect(0x3, 0x34, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000092df5510ac05269289b20102030109022200"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000040)={0x2, 0x4, 0x2, 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x8410}, 0x2004c850) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}}, 0x4000000) read$msr(0xffffffffffffffff, &(0x7f0000000400)=""/239, 0xef) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000000c0)=0x81) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0xe1}], 0x1, 0x80) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24006414}, 0x40040d4) r6 = socket$can_bcm(0x1d, 0x2, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000003e000701feffffff00000000017c0000040042800c00018006000600800a0000110002800c0014800800"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) connect$can_bcm(r6, &(0x7f0000000280), 0x10) sendmsg$can_bcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x48}}, 0x0) 4.975360072s ago: executing program 2 (id=4820): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x800) sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f00000002c0)) syz_emit_ethernet(0x32, &(0x7f0000000040)={@broadcast, @random="0408fcc67af2", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x0, 0x88be, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)=""/62, 0x3e) 4.779356241s ago: executing program 0 (id=4821): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_setup(0x7dda, &(0x7f00000005c0)={0x0, 0x8001000, 0x20, 0x0, 0x20803, 0x0, r0}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeec, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005c00)=[{{&(0x7f0000000440), 0x6e, &(0x7f0000000580)=[{&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000180)}, {&(0x7f0000002880)=""/4096, 0x1000}], 0x4, &(0x7f00000005c0)}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000640)=""/56, 0x38}, {&(0x7f0000005ec0)=""/252, 0xfc}, {&(0x7f0000000780)=""/171, 0xab}, {&(0x7f0000005fc0)=""/4109, 0x100d}], 0x4}}, {{&(0x7f0000000880), 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000900)=""/181, 0xb5}, {&(0x7f0000000a00)=""/126, 0x7e}, {&(0x7f0000000680)=""/74, 0x4a}], 0x3, &(0x7f0000000b40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000000c40)=@abs, 0x6e, &(0x7f0000001040)=[{&(0x7f0000000cc0)=""/157, 0x9d}, {&(0x7f0000000d80)=""/209, 0xd1}, {&(0x7f0000000e80)=""/104, 0x68}, {&(0x7f0000000f00)=""/182, 0xb6}, {&(0x7f0000004880)=""/4096, 0x1000}, {&(0x7f0000000fc0)=""/70, 0x46}], 0x6, &(0x7f00000010c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{&(0x7f0000001200)=@abs, 0x6e, &(0x7f0000001380)=[{&(0x7f0000001280)=""/231, 0xe7}], 0x1, &(0x7f00000013c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000001480), 0x6e, &(0x7f0000001740)=[{&(0x7f0000005e40)=""/109, 0x6d}, {&(0x7f0000001580)=""/17, 0x11}, {&(0x7f00000015c0)=""/115, 0x73}, {&(0x7f0000001640)=""/212, 0xd4}], 0x4, &(0x7f0000003880)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000005880)=""/96, 0x60}, {&(0x7f0000005900)=""/202, 0xca}, {&(0x7f0000005a00)=""/113, 0x71}], 0x3, &(0x7f0000005a80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{0x0, 0x0, &(0x7f0000005b80)=[{&(0x7f0000005b00)=""/68, 0x44}], 0x1, &(0x7f0000005bc0)=[@rights={{0x10}}], 0x10}}], 0x8, 0x2, &(0x7f0000005e00)={0x0, 0x3938700}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(r5, 0x1, &(0x7f0000000000)=0x6) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r8 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$isdn_base(0x22, 0x3, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x240040c0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x8000, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) accept4$rose(r10, 0x0, &(0x7f0000000080), 0x0) r11 = syz_open_dev$loop(&(0x7f0000000140), 0x9, 0xc801) close_range(r11, r7, 0x2) sendfile(r9, r10, 0x0, 0x20000023896) syz_open_dev$evdev(0x0, 0x2, 0xf03601) 3.955385806s ago: executing program 4 (id=4822): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x1) mount(0x0, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f000015bffc)='nfs\x00', 0x1, &(0x7f0000000000)) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) syz_io_uring_setup(0x49f, &(0x7f0000000080)={0x0, 0xe7a8, 0x1, 0x7ffc, 0x8040024e}, &(0x7f0000000140), &(0x7f0000000100)) mkdir(&(0x7f0000000540)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f00000001c0)='./file0\x00') setuid(0xee01) syz_open_dev$video4linux(&(0x7f0000000000), 0x79, 0x80) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="124437675b30efcddf090f05b7c2000000010902120001000000000904000000d8b96e0080b27ccdb369225f4642cf2c283a3f252a03"], 0x0) 3.84952495s ago: executing program 0 (id=4823): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x800000000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) write$binfmt_script(r4, &(0x7f0000000180), 0x4) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000780)={[&(0x7f0000000280)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01\x00\x00\x00\x00\x00\x00', 0x0, 0x0, &(0x7f0000000580)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, &(0x7f0000000a80)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x80000000}, {0x60, 0x8}, {}, {0x2}, {0x6, 0x0, 0x0, 0x10000000}]}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'xfrm0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010025bd7000ffdbdf25120000006400018008000300010000001400020073797a6b616c6c65723000000000000008000100", @ANYRES32=r7, @ANYBLOB="08000300070000001400020069703667726530000000000000000000080003000100000008000300020000000800030001ed1fa108000100", @ANYRES32=r8, @ANYBLOB="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"], 0x78}}, 0x20008880) 3.093415845s ago: executing program 5 (id=4824): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x1) mount(0x0, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f000015bffc)='nfs\x00', 0x1, &(0x7f0000000000)) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) syz_io_uring_setup(0x49f, &(0x7f0000000080)={0x0, 0xe7a8, 0x1, 0x7ffc, 0x8040024e}, &(0x7f0000000140), &(0x7f0000000100)) mkdir(&(0x7f0000000540)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f00000001c0)='./file0\x00') setuid(0xee01) syz_open_dev$video4linux(&(0x7f0000000000), 0x79, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x12) 3.092364739s ago: executing program 3 (id=4825): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0x1d, 0x2, 0x6) socket(0x1, 0x1, 0x0) epoll_create(0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x240303, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff]}) 3.002587004s ago: executing program 3 (id=4826): syz_open_dev$vim2m(0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0xa4000021) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/34, 0x22}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x14, &(0x7f0000000040)=0x6) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB], 0xb) r3 = syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffb, 0x400000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000280), &(0x7f0000000200), 0x0, 0x0, 0x82}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bind$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) sendfile(r6, r6, 0x0, 0x9) 2.557113043s ago: executing program 0 (id=4827): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000070000002a0000000500000000000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000000090000000000bc4cce42ab6cb183b426ad41caac3b2c0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000abaa00"/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0xc, &(0x7f0000001940)=ANY=[@ANYRES8=0x0, @ANYRESHEX=r0, @ANYRES8=r0, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRESOCT=r1, @ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="b3411337c869622ee8ce288449ea48a32f6792b4a424c0fe4a2a6de5096eabd3defc936a86417bd123935876d9348b5559a06d3bd0a1ddc774b72af1eceb6bc51b7615e58d38a5dd88e15f7cac9631fc3835e548c4c962f264e3b0cb57356228ab0bf4b2d2b8222ccac7f1475086e53edec475a8619df4c02c4ce0f272dbd80bdc9c43c5bafc1786f2d6108c21d0cef9da7593a4ebe7ea348757b3c5586c8d24f96f2486b3e4affbeba65de1c77444e26ccc290471ca3182fbcf3230f8f55f3990b0b0c5eec1ca6b8b04265eb8affb62fed3036e4b55ab03bde353e517e9d2984087354015c5fdfb33005c49c3b6c3e87b215ec141fb2b75d0d757e03e71f7f2462da40eb7020a647674553870abead329161f5807c51654a968bd368223e4f8e7c1b0c2c3dcae30773a93b17b76e7b5a48b73dac67a62ca3e13fbb90adc74bdf6795db34ba0f21959f377408fb635bbe11ccaebc3079e34a6bc21dbb4357532ae575d29422cfb90c712c44b946ccb4f0ccb18c745da4988d8655abb9660b322455562c5cd8f2f61779716a72052e0027583f48df16995683a4c58604ccf1f0c0897a653aad6f8702753425f17e163b69a3a79f131cabd0b035ac5cbeccdb61693d963bbcf1f9c5651ffdb04ff227c94c0bd02974259809d3383c379cc264c4d53fba9c12e7ae54e22eaf4ec0cd2c2104fc84067e70f6ea2e6d269ac2db89b67103d16904499731ae76e9aa6ba282b3c609caedca1c67790dc531a18fef7e5ae9582ddd07d7b9955c0f2b0c9c9f87b390f084d8726606ac5c9508c26028a8b9dc5ae5a0f31f7a6b6fa0304f605bddce03a0be6d516ce1b323c3d4299dc64b4e8fdf554925426368602ce406ac5fdd9a49a400b014d032b45bb35f7cdb94040aa4b9f369e09c1ac6d1c30dc34ef22b50cc2b3913366ab56a418a28802938b17fc798a6882c597471e4999c804f67dcc5842ede06a1d0cc95c53d81e99957a0a0ec28fec4ca953f788d2f5a21552d20c94db0981c558c4dfc9a331f24ee0d82e59310382bd935adf7374440fe4499a2027c2e79f95a919af6ca6d5af4c599af7bb80734ef44b970a5a4843b43121729b07333942885a751b6fe9199e939b1a62bced10619c9d6b32039502b1d3c7fa59e38299f12826287f573813d7c8b29c91bcc04548624c235c9ec5259950dcc67307be23709b0b5c6d778e51e34368fdaf220ddf1a9dd8203392a69176b244c737ddfe1d4d5c586a7adfefbf05c28daaf5c0664b03cfddfb34a27f4ee67343a1f5e436bf7afd196b8bea8018eae61064dfab852066dcd459c4af978fe218b8c847f91843752b8963cbedda6a757d3a6bb07aaf9f162397189d906f1723b30660ca16dada573227f2dccfee2db0387605f451e93dce4f5487255660b9d912a0c0dba3dc2590732629c21abfcca45cb468a628bf693a4a6ca189d7c0e835c72ebc5092f5f96580bf09a20eb40d0fa0ffd7882ee097f512a7f7cc6d6fc51d9eb518af2279efa8a4f51e096686597b7df91447adde2b5a1fa30b76a2412c00e49a74ace18401ad2f72bbc543702fd2c608772d8344d5b4b5347f7754e529f79e6b933a0fbebbbbbb6450b110e5c1a974a92a75cc60dbedcbd8f1c03bd2a089cebb09e305c8b3d2292f47c1fdf30c75e9fecf3ebb9390cfabf4c02286ed850ff0a3ec441ab76cf67dabef8b00edd929be7c6cb044ef6dd5ca52c0eacebc1ad53b7a130f4abbbba06326c25d58c567e5ddf4460b15b5117860f3d360f8ffca629f5b2b11b7047b7134faab2b3df9e9bb6c9eb8bc552e44a7560a6e470cb488d19ad981c0e9159fd3575735feddafdf82ca4239ca1221e2460fd4b6927504562361730c6c6338625c4dd686c06f9e6113fd76e371e026fcac3cffd5917daa963ec418193b0a947ec1043953781c78f179597e91302c54d3f5f9c67d150d862461f339a37f61bd875e0f2b4fee606e84bc93b8cd50272020585926975346129794716e030df765510313f35749f94fa9683c6b4cc5a44b10161e4c8be586228c5c51b071d6fdde042bdb076237b0d8d1c877ee520f52fad109ce9ddf813292638c6e85b44aaf613dca2d35cda0da8ec2dc63e570d47595be8a7e5f5a65dda7acda287fe92b41d52f0e91cb7fbee010eab173033bd797d76b57458dbf5bc3cddb017434e5b1d598a47031bad65b227729050c0689fc70882bc26a70f4c66df4d292882b0c50a5ec78146d01b18581a2b58f9966675d56a106b2b1d5fcdd20287774b3be52874d05b670d365c1ef514a4ff3f22dbf42fa73cfc82da5c22a3805adb9a815cf232626ba54b403698bca1b96c560cbc1d25ff8b29a0506f7bc5e268c2271ab67f0c917c9c54d782ffdda9f8e158e85b5b1eb23c071a71f6af98b254f8e02b1172d4aa5f84088da12ce56b5f45365c9def51bd293b95f5b7eb71cd9d06f340a2862ce0eb68c6e1f4fef67f43cd83598fb80aa8a4f08a21ff508727a1891976cc9759c2967e7bac5205858e91c96d8f8bda4bed1a4db0352ed05ab661fda556048558e03cee8023519c0489df79a7ee1e52aa1436e6ec2f2a4a4183c4c647f2015d4b72b298fe92dcd4d8bd4d9b086cf362105b765d8084062a9854b0455ebc5781f62d1133aac5c0139d60ae4e3126b7ba7b692ad0c7b41adcda3d91ce9cc74eea8579a46271f63a49fd9178777fbe1e0e144086cc9296a95de90213ff8386c38250ac25500708cc6675bc0398a99551c4816c6c305c4220aaca871dd522da8c1c0466ae5c5aafa9887727c9fa90c94e144821d9af10706f020557b16e88c08483fb2a331a2e5af49df25a1956328025a5083ef660fb306729501ff89ad4639a5f3e6fc8e63fbfa69ee581be254fce4326dc1ad3f863446aba77ae4456e464acfba83c3fc80e365899edd7d2f96c8a76f9a505f0d9d86e1b64c52ac296520322c948cde0d9ca38f927e33da19b04af0f48b6975b5a7ef4492aaf438af022f70fa78f735c5f7a487fe42ba6ffc7858269c10f7ce2858c86cb7c407b20b5818f81d50405b02dfc6519dcf44ccdf28ef55705e31835db19714291294acaa10a3073186cebd1cdacbdaf0168145b1d85fa0ca8ec7117406d56d6ae78fd334ec48ebdd6a4ecc36976a86115bf7f764d080eceabc331533136b6d24d08c1f3547bedbb8076a3c724ff47092ba3bec4077b44ddba838653d36a8dc6ca805b1c3070e90f224674cb4b388e3034d358f141833fcea9117a76e358366f3f414a8a9e50513117c13b9eec8614614025d6f37aa382440ea8d167c5cdb611ca677aeec63a1f10a3da806ec7cbcd5d11e408f855ffe1bb3d71fdbe6afbc999804f94b6bb11d136691b5d15d6f6d0f9cea9311ce88fbed15b9499c11c849928daaa9da4a51d8a17c2b13c5b62b8de22c0062fe4c8a3afe23be94aec9c5d16bf6b50c91315f48052a27895a1346df6461b5e66e5c31dfd929373d3496251b2d847562869a9c9ed7bf2d5fda4c2162d6a741f174b74758c39293fdfbd9b1d81853b53513e130446e9542577a3d52760f0dfde8149730289fbdfd10d7069bba8a4e22db7be579e4ec73e66b8e65aec36f44c8683e3b5d5d2bd808ea2b5179d69290abbe12e242c0f5bd30fcfc6d18301bed6571b351b67ae7589399aeabf5ce51676a7d7458c4b38164f38ebfb9620c254142470d111465fc428e2c0f169f822e6ad21dca3dcc99a30e9ad3ae3fe2aa2687f020dc9f67954f81273ff55891b519b616cfd97f15d2caa8997c461cf42ed2306b27d87012f9473ccc8a21623c0d442e7fad8b636cbd6693af9da14b6d5563ea298f26417b4f3d91939d3e02028b710f56ed96718ca1d951206d022b3aad1a703ee45ffef3c23be7b7fb8833148d1a9baef3fdccd0407614d2efffdba00275e89881143bd086b5ccc6c5b42cd467a021a1a992243a3859258bba2db2d176aaa1cf678d544419ae7a3af7e0943b1b2e57d39b9c2b84483a9626d521c2bcffe8ee87a323e3622eabb2f0462f0fd88654ec7985a7fa0f9232efc3d00cfda066600ba357beeb0c128f2a9d58cbf5613f79cd47f30b1520a45820aadbe1c39f82867ca06231e270c98335254241e4c2489e1b9b98cac1a57ba7cb94e12dbeb9d8ca1b14860784b83a12b536b0f9a3f8564b79a819143b12040484e5d3769d1e12de636f0e32eb6288713db38b83510806ed68e375fbd75e8fb5ce4765faae6f11275ca367bc1e6c79b7929bbd7ecb75cd3ac419182eb0d6953f66fb7cb2b4c1f7ba1afdac408807ce6334a981b8c5ac0cf92bf529b27384d6b1dc5521d8fb0b39c855081006c30414619162bf5152cdfffa1f03550229f21cd9dcda144401f712c26f494753e48347dbce9321afd29bd5539d239a845428d1c4ed096b838286e89352d48d1cd823af4f2fff9ad7a8b72bb483e71e3c37cff88575952bbe7ab9d1834136862f68724b7d600bd52c5a993112323bb24573a36686b43122af5a14dd35048c4fe9803b8dd33b64428c238c0a3f359888decb38399f0643f5695baf1d988dc0b62a29a10e4692b1f4ea16204d7cb1803a4bfe8406960b1161ca66fb2e8edd88c015626cad10dc0d3cbe8c6388c83e2c7ce7d2f03721500fe1d973fa48fda5ecf18941aa1dd10bf11cdfeec2052539c78910ad456e6112d24acd261a10f723bb1b6a2ec2c168457a9423db867d491e429e829265de6582fe65eb8bffe76f38046254f5ec2d0491d76348588f11ad716346142324fa5cadbd93fc50d511bdeb1f37d655dbdd9d8ab3be9858e9260a35fb67b257107dd4dbea2c4da81e62cc84eb747280517e73c06d75c0f996e72856ddd3b1b3b1ade2a3362c98e95a821f99d55e96a7a24e1877fb613288e069caae89344af9126e7c960b71402c89ed16e28c5673eaddc7633c5e0febca9a28ebdf81cbcc4bcef92ff06d92b78998a6c91d14b21cbcc7083bbc4e53468dae99492a765281badd1478a5bd3bfa78642ea3dcc433009f0d03ec57000885d2c945c1a6be012d9b45aea2b6df67bafd00a1699548fa747235b7ac149e569cd52d0778db98b6f2c9bd7890afaa754393ecaedaec86ffbcee0c1c71013f7d31605939ac895133132a8b2b94ff0d89170950492cab1ea3cf1cf1872e052f7658a95cce3cb314d1aa5a2c8cbaf3ac8cb9a492b27b1245022ab66b720e379a3b7e1aa81881d0daed9e649c2b5a4ed5b177b70c5957729e30b735fb8c7c75c5e5ff33bfad1f423459b2be79663c22e37fe3b87074bb9e3ca60c6da8629d7c31e219f8573e70fe00c98e43e3633df8681d89a49c1d6a2165b0333f964b5a3bc69aed51bbaad905cf5926c0234ebd6ddefdae5b6be49dd67960d3bd48b04fdde74a5e8783a3633c64a3ff38d8ac0a2f4c696334ef61d2815de92acfa98c4154abca7dda4b7d52e9d094f8f979cbc3bd7669bc9804bbe5009bae185f76cd559dec6901a61bb5ed06686ed1ad252d6d80e319f02ba857df997bda74bd485c37851ced78d90f7683f4352f50158a529a0150fc9d72b953f2f7ce7f006d1c94d13588d0674022dbd1beb1c8949095d1f40d9d86c77e02175186332ee38a92a1bc32b11d0a06c9bacabab9b353db2f583a3a08c235d4447d993e7a0aaf8e9c16f1f0e07bd7cddf7aa9b705effd1ceb7d3d88a87e8b375a24c35c73724adfc25723ab6e2817208cc57447f51764e4ec78ee90685f8448d3db44ae636601c80e3bc5b8cf10858fc43592270ac45ae62bc5475b4f2777e7759986f093d88edc003ce9683f37"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$vim2m(0x0, 0xf, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x5202) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x6) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000180)={0x400, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0), 0x0, 0x0, 0x0, 0xbfffffffffffffff}) request_key(0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bind$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001240), 0x111, 0xc}}, 0x3) close(0x3) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000380)={0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r2}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r7) 2.42427706s ago: executing program 2 (id=4828): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRES8=r0, @ANYRESDEC=r2], 0x74}}, 0x0) sendmmsg$unix(r1, &(0x7f00000001c0), 0x0, 0x2402c855) recvmmsg(r1, &(0x7f00000000c0), 0x54, 0x2103, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r3, 0x0, 0x0, 0x1001f0) fallocate(0xffffffffffffffff, 0x63, 0x4, 0x100000000102ffe) write$6lowpan_enable(r3, &(0x7f0000000040)='1', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x1e, 0x5, 0x8, 0x8001, 0xfffffffe, 0x9, 0x6, 0xfffffe0000000001, 0xfa0f, 0xffffffff}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prlimit64(0x0, 0xb, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sched_getscheduler(r5) fchdir(r8) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x80, 0x4d) getdents(r9, &(0x7f0000000080)=""/255, 0xff) r10 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r10, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 2.015914495s ago: executing program 3 (id=4829): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xc}}}, 0x24}}, 0x0) syz_open_dev$loop(0x0, 0x75f, 0xa382) sched_setscheduler(0x0, 0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x101403, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000009ad90602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) memfd_create(0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) 1.551669814s ago: executing program 5 (id=4830): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0xc9f}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={&(0x7f0000000180)="ea381f974191cd4253e9d3143c29fed9069c8b84f30cc14e4e56d01ac6fd39e1d9f5dbd01043e00b9b0351b89152c887bd34da320c3df2f4954a15460b842e235a67391efd79873b516b9fec162ac4fd159815f25cbe5fd327919af919d41389edbb4ff405ff74e3b51d15feb0e06adeaa2832dfa4a99880e198b7b1c2aa380416e57c8ef733df5ec193f599f9ecaf814d541d3c9a5746dfbeee34dcecc7ef3adcccf44d202b179330c7d86479980d32ba6eed55cfa2facb28", &(0x7f00000000c0)=""/59, &(0x7f0000000480)="253c088a0676b790bb2e09ff5c9c640c33bfe63a0596d0bbdfe428516c2d5050cf1aae6c6133a45e041d48da46b8fe8013c9e860f02613b68440d077a2683e806647f17f19188aebd4fae3919e3f12b377ccdba1c4f607987b87da3a13ffd52f4b4576f2049b819bbfa617452134c5837ef4d53ff0244db04eb9f524c4c3ce7778dc5b1695", &(0x7f0000000240)="a1c0d5845badaf6b983e184d84791d4538058abbffe68f972bcbab15d1e77a17c3b6b9e2890f330dd27e02c1bc47e551e15c0f48638259c27ad07354eac54ad404018b23dce4cb1269579918457cce08f304eede0f1e860792064eadb7d11ac9e3a21c0a7b772b59815f4712213ee7f1", 0x5, r2, 0x4}, 0x38) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0xdaa0, 0x20, 0x0, 0x1e}, &(0x7f0000000340)=0x0, &(0x7f0000000580)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x18) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc0189436, 0xf0ff1f00000000) 1.408373815s ago: executing program 3 (id=4831): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$loop(&(0x7f0000000180), 0x4e, 0x101240) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0xa, 0x0) read$msr(r0, &(0x7f0000002240)=""/102400, 0x19000) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000b300004000000000e0"]) open(0x0, 0x12100, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x865}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_setup(0x1de0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='sched\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000001c0)='sockfs\x00', 0x0, 0x0) r6 = gettid() syz_open_procfs(r6, &(0x7f0000000040)='timerslack_ns\x00') 1.077075358s ago: executing program 3 (id=4832): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x20000285, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000007839614332c202f7db138bedefb510000000000"], &(0x7f0000000000)='GPL\x00', 0x2000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000000000000000000000000000000000001"], 0x4c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x18811}, 0x4040844) r3 = socket(0x10, 0x3, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(r4) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c9, &(0x7f0000000100)) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000040)=""/61) syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x141, 0x30, 0xf5, 0x69, 0x20, 0x5ac, 0x219, 0xf072, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x55, 0x7, 0x1, 0x3, 0x49, 0x2, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x400, 0x0, 0x33, 0x81}}]}}]}}]}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000004800050825bd7000fcdbdf250a000000", @ANYRES32=0x0, @ANYBLOB="0300008014000100ff010000000000000000020000000001a2d03f082622efa4553087d7ec40a4a5b23c22d688af8fecc2c7cb534eab93a8d4df290654ac85430c4fb803ed58af60ee91876596292dbf3d5fc43818efe48cccd0cb9fdd9651d516698e35ea916222822fa0043a85db6b6a658d7c4dd07665a328a107f4358fa52a5b69fbf2ca8de8fd9b327ee40e5f38fc40671327df6f42692644eb8973c1acabecd2caa85f2974f6a7e4f0c0f22af7dbb515d5ca3c02ab4e0130c4596d1c78a638b38582e06ec9c70f92becb7c00df"], 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x10) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="120100006e383a10d00701415cec01020301090224000100000000090423"], 0x0) flock(r1, 0x3) 877.517977ms ago: executing program 0 (id=4833): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000001b40)={'bond0\x00', {0x2, 0x4e20, @empty}}) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x2000010, &(0x7f0000000100)='barrier') r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40046f41, &(0x7f0000000440)=0x40000000) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000200)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) syz_open_dev$sndpcmp(&(0x7f00000010c0), 0x0, 0x1a7e24) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, 0x0) writev(0xffffffffffffffff, &(0x7f000009de80), 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e25, @private=0xa010101}, 0x10) sendmsg$NFT_BATCH(r0, 0x0, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b00010062726964676500"], 0x6c}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') pread64(r6, &(0x7f0000000040)=""/4096, 0x1000, 0x7ffffffffffff8) 822.824763ms ago: executing program 4 (id=4834): r0 = syz_open_dev$loop(0x0, 0x100047ffffa, 0x122c43) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, 0x0, 0x0) getpgrp(0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x800) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0) r2 = socket(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x401}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x14, 0x11, 0xa, 0x3, 0x70bd2d, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000000000000000000008000400", 0x20) 408.670708ms ago: executing program 5 (id=4835): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0) r0 = socket(0x3, 0x2, 0x5) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) 146.011712ms ago: executing program 4 (id=4836): syz_usb_connect(0x3, 0x34, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000092df5510ac05269289b20102030109022200"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000040)={0x2, 0x4, 0x2, 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x8410}, 0x2004c850) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}}, 0x4000000) read$msr(0xffffffffffffffff, &(0x7f0000000400)=""/239, 0xef) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000000c0)=0x81) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0xe1}], 0x1, 0x80) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24006414}, 0x40040d4) r6 = socket$can_bcm(0x1d, 0x2, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000003e000701feffffff00000000017c0000040042800c00018006000600800a0000110002800c001480080007"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) connect$can_bcm(r6, 0x0, 0x0) sendmsg$can_bcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x48}}, 0x0) 120.084094ms ago: executing program 0 (id=4837): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_procfs$namespace(r0, &(0x7f00000002c0)='ns/pid_for_children\x00') 0s ago: executing program 0 (id=4838): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0xc9) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x9, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r4}, 0x10) io_setup(0x3, &(0x7f0000000340)) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000040)={0x7f}, 0x4) r6 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x28444, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x401, 0x181, 0x2, 0x3, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x404, 0x2, 0x8000013, 0xa7, 0xffffffa7, 0x8000b, 0x34d, 0x6e, 0x0, 0x4000009, 0x200, 0xe2df, 0x9, 0x20000001, 0x4, 0x505e, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r6, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d80)={0xffffffffffffffff}) getsockopt$sock_timeval(r7, 0x1, 0x3c, 0x0, &(0x7f0000002e00)) pipe2$watch_queue(&(0x7f0000000000), 0x80) kernel console output (not intermixed with test programs): known main item tag 0x0 [ 1524.835537][T16062] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1524.856637][T10370] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0017/input/input37 [ 1524.908947][T16062] usb 6-1: config 1 has no interface number 1 [ 1524.932027][T16062] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1524.978324][T10370] microsoft 0003:045E:07DA.0017: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1525.018819][T16062] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1525.036961][T16062] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1525.092120][ T30] audit: type=1400 audit(2000000068.623:1583): avc: denied { setopt } for pid=25048 comm="syz.3.4296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1525.181253][T16062] usb 6-1: Product: syz [ 1525.271729][T25053] mkiss: ax0: crc mode is auto. [ 1526.542942][T16062] usb 6-1: Manufacturer: syz [ 1526.570772][T16062] usb 6-1: SerialNumber: syz [ 1526.798371][ T30] audit: type=1400 audit(2000000070.343:1584): avc: denied { listen } for pid=25048 comm="syz.3.4296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1526.826961][ T30] audit: type=1400 audit(2000000070.343:1585): avc: denied { accept } for pid=25048 comm="syz.3.4296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1527.030136][T20647] usb 5-1: USB disconnect, device number 78 [ 1527.893101][T16062] usb 6-1: USB disconnect, device number 7 [ 1528.513830][T16062] usb 1-1: USB disconnect, device number 87 [ 1528.634893][ T30] audit: type=1400 audit(2000000072.174:1586): avc: denied { block_suspend } for pid=25084 comm="syz.0.4305" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1528.836601][ T6007] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1528.946877][T22703] Bluetooth: hci1: command 0x0405 tx timeout [ 1529.002116][ T6007] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1529.039512][ T6007] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1529.053665][ T30] audit: type=1400 audit(2000000072.564:1587): avc: denied { setattr } for pid=25090 comm="syz.4.4306" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1529.059167][ T6007] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1529.113614][ T6007] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1529.134974][ T6007] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1529.160792][ T6007] usb 3-1: config 0 descriptor?? [ 1529.208195][T16062] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1529.382192][T16062] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 1529.399303][T16868] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1529.436334][T16062] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1529.461394][T16062] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1529.647761][T16868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1529.665910][T16868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1529.676144][T16062] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1529.696238][T16062] usb 1-1: Manufacturer: syz [ 1529.701872][ T6007] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1529.707345][T16868] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1529.735632][T16062] usb 1-1: config 0 descriptor?? [ 1529.755749][T16868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.786273][T16868] usb 4-1: Product: syz [ 1529.816233][T16868] usb 4-1: Manufacturer: syz [ 1529.831307][T16868] usb 4-1: SerialNumber: syz [ 1529.853895][T16868] usb 4-1: config 0 descriptor?? [ 1529.882462][T16868] usb 4-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 1529.895436][ T30] audit: type=1400 audit(2000000073.434:1588): avc: denied { bind } for pid=25103 comm="syz.5.4311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1529.918450][T16062] rc_core: IR keymap rc-hauppauge not found [ 1529.924415][T16062] Registered IR keymap rc-empty [ 1529.930113][T25106] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4303'. [ 1529.946662][ T30] audit: type=1400 audit(2000000073.474:1589): avc: denied { nlmsg_read } for pid=25076 comm="syz.2.4303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1529.973196][T16062] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1529.995187][T16062] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input38 [ 1530.399867][T16868] usb 4-1: USB disconnect, device number 82 [ 1530.702706][T24901] udevd[24901]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1531.663384][T20647] usb 1-1: USB disconnect, device number 88 [ 1532.150653][T24879] usb 3-1: USB disconnect, device number 72 [ 1532.398915][T16708] Bluetooth: hci1: command 0x0405 tx timeout [ 1532.765807][ T30] audit: type=1400 audit(2000000076.304:1590): avc: denied { create } for pid=25152 comm="syz.3.4321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1533.108778][ T30] audit: type=1400 audit(2000000076.304:1591): avc: denied { ioctl } for pid=25152 comm="syz.3.4321" path="socket:[89034]" dev="sockfs" ino=89034 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1533.158031][T25158] tipc: Enabling of bearer rejected, failed to enable media [ 1533.413817][ T30] audit: type=1400 audit(2000000076.524:1592): avc: denied { mount } for pid=25147 comm="syz.0.4320" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1533.436416][T24879] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1533.517276][ T30] audit: type=1400 audit(2000000076.534:1593): avc: denied { mounton } for pid=25147 comm="syz.0.4320" path="/251/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 1533.565385][T25161] sp0: Synchronizing with TNC [ 1533.661206][T24879] usb 3-1: Using ep0 maxpacket: 16 [ 1533.691568][T24879] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1533.709741][T24879] usb 3-1: config 0 has no interfaces? [ 1533.837306][T24879] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1533.855403][T24879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1533.876361][T24879] usb 3-1: Product: syz [ 1533.880562][T24879] usb 3-1: Manufacturer: syz [ 1534.007142][T25169] futex_wake_op: syz.3.4321 tries to shift op by 32; fix this program [ 1534.036193][T24879] usb 3-1: SerialNumber: syz [ 1534.315383][T24879] usb 3-1: config 0 descriptor?? [ 1534.455980][ T30] audit: type=1400 audit(2000000077.984:1594): avc: denied { unmount } for pid=19389 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1534.742859][T20647] usb 3-1: USB disconnect, device number 73 [ 1535.633182][T25183] netlink: 'syz.4.4328': attribute type 10 has an invalid length. [ 1537.097795][T10370] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1537.131448][T25201] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4334'. [ 1537.140552][T25201] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4334'. [ 1537.231053][T25212] all (unregistering): Released all slaves [ 1537.269939][T10370] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1538.139767][T10370] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1538.207774][T10370] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1538.256886][T10370] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1538.298677][T10370] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1538.326236][T10370] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1538.333466][T25229] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1538.364602][T10370] usb 1-1: config 0 descriptor?? [ 1538.666194][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1539.100301][T10370] hdpvr 1-1:0.0: firmware version 0x1e dated [ 1539.316051][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1539.333451][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1539.354075][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1539.366847][T25244] binder: 25197:25244 ioctl c0306201 200000000040 returned -22 [ 1539.385520][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1539.421371][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1539.449960][ T24] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1539.469030][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1539.488152][ T24] usb 6-1: Product: syz [ 1539.497169][ T24] usb 6-1: Manufacturer: syz [ 1539.510254][ T24] usb 6-1: SerialNumber: syz [ 1539.519393][T10370] hdpvr 1-1:0.0: device init failed [ 1539.542891][ T24] usb 6-1: config 0 descriptor?? [ 1539.559397][ T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input40 [ 1539.584098][ T5206] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1539.705154][T10370] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 1539.724389][ C1] xpad 6-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 1539.748003][ T5206] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1539.784368][T10370] usb 1-1: USB disconnect, device number 89 [ 1539.897974][ T5206] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1539.991956][ C1] xpad 6-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 1540.324461][T21291] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1540.357629][ T5206] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1540.382108][ T5206] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1540.493088][ T30] audit: type=1400 audit(2000000083.914:1595): avc: denied { mount } for pid=25259 comm="syz.4.4352" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1540.515472][ C0] vkms_vblank_simulate: vblank timer overrun [ 1540.652783][ T5206] xpad 6-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1540.696001][T24879] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1540.912930][T24879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1540.939609][T24879] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1540.953051][T24879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1541.096083][T25267] netlink: 'syz.0.4353': attribute type 6 has an invalid length. [ 1541.106971][T24879] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1541.130982][T24879] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1541.140514][T24879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1541.155196][T24879] usb 4-1: config 0 descriptor?? [ 1541.433967][T24879] hdpvr 4-1:0.0: firmware version 0x1e dated [ 1541.456119][ T24] usb 6-1: USB disconnect, device number 8 [ 1541.680141][T25279] binder: 25250:25279 ioctl c0306201 200000000040 returned -22 [ 1541.736000][ T30] audit: type=1400 audit(2000000085.124:1596): avc: denied { mounton } for pid=25269 comm="syz.4.4354" path="/newroot/288/cgroup" dev="tmpfs" ino=1536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 1541.810826][T24879] hdpvr 4-1:0.0: device init failed [ 1541.832630][T24879] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 1542.136516][T24879] usb 4-1: USB disconnect, device number 83 [ 1543.410839][T25297] FAULT_INJECTION: forcing a failure. [ 1543.410839][T25297] name failslab, interval 1, probability 0, space 0, times 0 [ 1543.495972][T25297] CPU: 1 UID: 0 PID: 25297 Comm: syz.3.4361 Not tainted syzkaller #0 PREEMPT(full) [ 1543.495990][T25297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1543.495996][T25297] Call Trace: [ 1543.496000][T25297] [ 1543.496005][T25297] dump_stack_lvl+0x16c/0x1f0 [ 1543.496024][T25297] should_fail_ex+0x512/0x640 [ 1543.496036][T25297] ? __kmalloc_noprof+0xbf/0x510 [ 1543.496049][T25297] ? video_usercopy+0x1a0/0x1720 [ 1543.496061][T25297] should_failslab+0xc2/0x120 [ 1543.496074][T25297] __kmalloc_noprof+0xd2/0x510 [ 1543.496086][T25297] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1543.496101][T25297] video_usercopy+0x1a0/0x1720 [ 1543.496114][T25297] ? __pfx___video_do_ioctl+0x10/0x10 [ 1543.496125][T25297] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1543.496143][T25297] ? __pfx_video_usercopy+0x10/0x10 [ 1543.496164][T25297] v4l2_ioctl+0x1bd/0x250 [ 1543.496174][T25297] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1543.496185][T25297] __x64_sys_ioctl+0x18b/0x210 [ 1543.496208][T25297] do_syscall_64+0xcd/0x4c0 [ 1543.496222][T25297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1543.496234][T25297] RIP: 0033:0x7f426378ebe9 [ 1543.496243][T25297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1543.496254][T25297] RSP: 002b:00007f42646d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1543.496265][T25297] RAX: ffffffffffffffda RBX: 00007f42639c5fa0 RCX: 00007f426378ebe9 [ 1543.496272][T25297] RDX: 00002000000007c0 RSI: 00000000c0845657 RDI: 0000000000000003 [ 1543.496279][T25297] RBP: 00007f42646d0090 R08: 0000000000000000 R09: 0000000000000000 [ 1543.496285][T25297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1543.496292][T25297] R13: 00007f42639c6038 R14: 00007f42639c5fa0 R15: 00007ffce7721d18 [ 1543.496306][T25297] [ 1543.787917][T25304] tipc: Failed to remove unknown binding: 66,1,1/0:1776661081/1776661083 [ 1543.798350][T25304] tipc: Failed to remove unknown binding: 66,1,1/0:1776661081/1776661083 [ 1544.051015][ T30] audit: type=1400 audit(2000000087.584:1597): avc: denied { read } for pid=25308 comm="syz.2.4365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1544.076299][ T24] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1544.226012][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 1544.386556][ T24] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 1544.394742][ T24] usb 5-1: config 0 has no interface number 0 [ 1544.415631][ T24] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1544.481073][ T24] usb 5-1: config 0 interface 85 has no altsetting 0 [ 1544.516788][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1544.568314][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.848729][ T24] usb 5-1: Product: syz [ 1545.022530][ T24] usb 5-1: Manufacturer: syz [ 1545.033894][ T24] usb 5-1: SerialNumber: syz [ 1545.065276][ T24] usb 5-1: config 0 descriptor?? [ 1545.274363][T25304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1545.355791][ T6007] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1545.670188][T25304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1545.672746][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.699442][ T24] appletouch 5-1:0.85: Failed to read mode from device. [ 1545.708045][ T24] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 1545.781442][ T24] usb 5-1: USB disconnect, device number 79 [ 1545.855759][ T6007] usb 6-1: Using ep0 maxpacket: 16 [ 1545.864467][ T6007] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1545.876518][ T6007] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1545.892495][ T6007] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1545.920005][ T6007] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1545.930623][ T6007] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.986166][ T6007] usb 6-1: Product: syz [ 1546.005465][ T6007] usb 6-1: Manufacturer: syz [ 1546.018888][ T6007] usb 6-1: SerialNumber: syz [ 1546.322650][T25335] netlink: 'syz.2.4372': attribute type 4 has an invalid length. [ 1546.330787][T25335] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4372'. [ 1547.079843][T25339] sctp: [Deprecated]: syz.2.4374 (pid 25339) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1547.079843][T25339] Use struct sctp_sack_info instead [ 1547.435674][ T6007] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 1547.510000][ T30] audit: type=1400 audit(2000000091.045:1598): avc: denied { append } for pid=25344 comm="syz.3.4376" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1547.965791][ T24] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1548.233667][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 1548.309101][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1548.340574][ T24] usb 1-1: config 0 has no interfaces? [ 1548.352765][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1548.376508][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1548.384616][ T24] usb 1-1: Product: syz [ 1548.388957][ T24] usb 1-1: Manufacturer: syz [ 1548.394724][ T24] usb 1-1: SerialNumber: syz [ 1548.407376][ T24] usb 1-1: config 0 descriptor?? [ 1549.087986][ T6007] usb 6-1: USB disconnect, device number 9 [ 1549.210805][ T24] usb 1-1: USB disconnect, device number 90 [ 1550.887143][T25386] lo speed is unknown, defaulting to 1000 [ 1553.853280][ T30] audit: type=1326 audit(2000000097.385:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25430 comm="syz.2.4396" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f54d8ebe9 code=0x0 [ 1553.949602][T25438] FAULT_INJECTION: forcing a failure. [ 1553.949602][T25438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1553.962916][ T6003] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1554.013878][T25438] CPU: 1 UID: 0 PID: 25438 Comm: syz.2.4396 Not tainted syzkaller #0 PREEMPT(full) [ 1554.013905][T25438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1554.013916][T25438] Call Trace: [ 1554.013922][T25438] [ 1554.013929][T25438] dump_stack_lvl+0x16c/0x1f0 [ 1554.013957][T25438] should_fail_ex+0x512/0x640 [ 1554.013981][T25438] _copy_to_user+0x32/0xd0 [ 1554.014006][T25438] simple_read_from_buffer+0xcb/0x170 [ 1554.014027][T25438] proc_fail_nth_read+0x197/0x240 [ 1554.014049][T25438] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1554.014071][T25438] ? rw_verify_area+0xcf/0x6c0 [ 1554.014098][T25438] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1554.014119][T25438] vfs_read+0x1e1/0xcf0 [ 1554.014145][T25438] ? __pfx___mutex_lock+0x10/0x10 [ 1554.014167][T25438] ? __pfx_vfs_read+0x10/0x10 [ 1554.014192][T25438] ? __fget_files+0x20e/0x3c0 [ 1554.014220][T25438] ksys_read+0x12a/0x250 [ 1554.014238][T25438] ? __pfx_ksys_read+0x10/0x10 [ 1554.014256][T25438] ? fput+0x9b/0xd0 [ 1554.014284][T25438] do_syscall_64+0xcd/0x4c0 [ 1554.014305][T25438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1554.014322][T25438] RIP: 0033:0x7f8f54d8d5fc [ 1554.014336][T25438] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1554.014353][T25438] RSP: 002b:00007f8f55b7d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1554.014369][T25438] RAX: ffffffffffffffda RBX: 00007f8f54fc6090 RCX: 00007f8f54d8d5fc [ 1554.014380][T25438] RDX: 000000000000000f RSI: 00007f8f55b7d0a0 RDI: 0000000000000005 [ 1554.014389][T25438] RBP: 00007f8f55b7d090 R08: 0000000000000000 R09: 0000000000000000 [ 1554.014399][T25438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1554.014409][T25438] R13: 00007f8f54fc6128 R14: 00007f8f54fc6090 R15: 00007fffe0962438 [ 1554.014433][T25438] [ 1554.205159][ T30] audit: type=1400 audit(2000000097.555:1600): avc: denied { ioctl } for pid=25435 comm="syz.5.4397" path="socket:[90722]" dev="sockfs" ino=90722 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1554.325156][ T6003] usb 4-1: Using ep0 maxpacket: 16 [ 1554.342517][ T6003] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1554.353673][ T6003] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1554.363611][ T6003] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1554.416880][ T6003] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1554.427701][ T6003] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.439232][ T6003] usb 4-1: Product: syz [ 1554.595193][ T6003] usb 4-1: Manufacturer: syz [ 1554.646004][ T6003] usb 4-1: SerialNumber: syz [ 1555.019097][T25444] ubi: mtd0 is already attached to ubi7 [ 1555.390824][ T6003] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 1557.161744][ T6003] usb 4-1: USB disconnect, device number 84 [ 1557.231328][T23036] udevd[23036]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1557.251402][ T30] audit: type=1400 audit(2000000100.785:1601): avc: denied { write } for pid=25481 comm="syz.2.4409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1557.658820][ T30] audit: type=1400 audit(2000000101.195:1602): avc: denied { create } for pid=25484 comm="syz.4.4410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1557.771120][ T30] audit: type=1400 audit(2000000101.205:1603): avc: denied { create } for pid=25483 comm="syz.2.4411" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1557.840127][ T30] audit: type=1400 audit(2000000101.215:1604): avc: denied { write } for pid=25483 comm="syz.2.4411" name="file0" dev="tmpfs" ino=1701 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1557.912748][T25496] netlink: 'syz.0.4415': attribute type 10 has an invalid length. [ 1557.955060][T10370] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1557.974988][ T30] audit: type=1400 audit(2000000101.215:1605): avc: denied { open } for pid=25483 comm="syz.2.4411" path="/322/file0" dev="tmpfs" ino=1701 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1558.045129][ T30] audit: type=1400 audit(2000000101.345:1606): avc: denied { create } for pid=25491 comm="syz.3.4414" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1558.104311][ T30] audit: type=1400 audit(2000000101.355:1607): avc: denied { write } for pid=25491 comm="syz.3.4414" name="file0" dev="tmpfs" ino=1358 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1558.136797][T10370] usb 3-1: Using ep0 maxpacket: 8 [ 1558.303182][T10370] usb 3-1: config 11 has an invalid interface number: 95 but max is 0 [ 1558.323062][ T30] audit: type=1400 audit(2000000101.355:1608): avc: denied { open } for pid=25491 comm="syz.3.4414" path="/257/file0" dev="tmpfs" ino=1358 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1558.391848][T10370] usb 3-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config [ 1558.419059][T10370] usb 3-1: config 11 has no interface number 0 [ 1558.702045][T10370] usb 3-1: config 11 interface 95 altsetting 64 endpoint 0xD has invalid wMaxPacketSize 0 [ 1558.741790][T25511] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4418'. [ 1558.815158][T10370] usb 3-1: config 11 interface 95 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1558.943072][T10370] usb 3-1: config 11 interface 95 has no altsetting 0 [ 1558.952254][T10370] usb 3-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 1558.963829][T10370] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.973907][T10370] usb 3-1: Product: syz [ 1558.983542][T10370] usb 3-1: Manufacturer: syz [ 1558.988376][T10370] usb 3-1: SerialNumber: syz [ 1558.994607][T25507] netlink: 'syz.3.4418': attribute type 1 has an invalid length. [ 1559.003399][T25507] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4418'. [ 1559.275432][ T30] audit: type=1400 audit(2000000102.775:1609): avc: denied { ioctl } for pid=25515 comm="syz.0.4420" path="socket:[91658]" dev="sockfs" ino=91658 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1559.459716][ T30] audit: type=1400 audit(2000000102.775:1610): avc: denied { accept } for pid=25515 comm="syz.0.4420" lport=36591 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1559.594364][ T30] audit: type=1400 audit(2000000102.775:1611): avc: denied { setopt } for pid=25515 comm="syz.0.4420" lport=36591 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1559.721779][T10370] usb 3-1: USB disconnect, device number 74 [ 1559.808953][ T30] audit: type=1400 audit(2000000102.775:1612): avc: denied { write } for pid=25515 comm="syz.0.4420" lport=36591 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1560.034547][ T30] audit: type=1400 audit(2000000102.785:1613): avc: denied { mount } for pid=25515 comm="syz.0.4420" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1560.089776][T25540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4425'. [ 1560.160329][T25540] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4425'. [ 1560.296122][ T30] audit: type=1400 audit(2000000103.245:1614): avc: denied { ioctl } for pid=25483 comm="syz.2.4411" path="/dev/ptyq9" dev="devtmpfs" ino=128 ioctlcmd=0x540a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1560.407875][T25542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4425'. [ 1560.497214][ T30] audit: type=1400 audit(2000000103.375:1615): avc: denied { ioctl } for pid=25533 comm="syz.4.4423" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0x5878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1560.893203][ T30] audit: type=1400 audit(2000000104.425:1616): avc: denied { unlink } for pid=18471 comm="syz-executor" name="file0" dev="tmpfs" ino=1701 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1562.615573][T20647] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1562.947338][T20647] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1562.963911][T20647] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1563.004363][T20647] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1563.043956][T20647] usb 3-1: config 0 descriptor?? [ 1563.061926][T20647] pwc: Askey VC010 type 2 USB webcam detected. [ 1563.465035][T25588] nfs: Unknown parameter './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 1563.779134][T20647] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1563.789862][ T30] audit: type=1400 audit(2000000107.095:1617): avc: denied { mounton } for pid=25583 comm="syz.3.4436" path="/263/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1563.984073][ T30] audit: type=1400 audit(2000000107.516:1618): avc: denied { load_policy } for pid=25590 comm="syz.4.4437" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1564.005682][T25594] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 1564.016308][T25594] SELinux: failed to load policy [ 1564.026295][T25595] netlink: 'syz.5.4438': attribute type 10 has an invalid length. [ 1564.326206][T20647] pwc: recv_control_msg error -71 req 04 val 1000 [ 1564.359976][T20647] pwc: recv_control_msg error -71 req 04 val 1300 [ 1564.392220][T20647] pwc: recv_control_msg error -71 req 04 val 1400 [ 1564.407216][T20647] pwc: recv_control_msg error -71 req 02 val 2000 [ 1564.419380][T20647] pwc: recv_control_msg error -71 req 02 val 2100 [ 1564.426396][T20647] pwc: recv_control_msg error -71 req 04 val 1500 [ 1564.459547][T20647] pwc: recv_control_msg error -71 req 02 val 2500 [ 1564.466527][T20647] pwc: recv_control_msg error -71 req 02 val 2400 [ 1564.477408][T25599] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4440'. [ 1564.489459][T25599] netlink: 'syz.5.4440': attribute type 1 has an invalid length. [ 1564.497225][T25599] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4440'. [ 1564.509604][T20647] pwc: recv_control_msg error -71 req 02 val 2600 [ 1564.640210][T20647] pwc: recv_control_msg error -71 req 02 val 2900 [ 1564.687486][ T30] audit: type=1400 audit(2000000108.226:1619): avc: denied { unmount } for pid=19763 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1564.725023][T20647] pwc: recv_control_msg error -71 req 02 val 2800 [ 1564.763020][T20647] pwc: recv_control_msg error -71 req 04 val 1100 [ 1564.909746][T20647] pwc: recv_control_msg error -71 req 04 val 1200 [ 1564.985084][T20647] pwc: Registered as video103. [ 1565.001298][T20647] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input45 [ 1565.015652][T25608] loop6: detected capacity change from 0 to 2560 [ 1565.030520][T21291] buffer_io_error: 16 callbacks suppressed [ 1565.030535][T21291] Buffer I/O error on dev loop6, logical block 0, async page read [ 1565.068713][T20647] usb 3-1: USB disconnect, device number 75 [ 1565.096160][T21291] Buffer I/O error on dev loop6, logical block 0, async page read [ 1565.110106][T21291] Buffer I/O error on dev loop6, logical block 0, async page read [ 1565.118609][T21291] Buffer I/O error on dev loop6, logical block 0, async page read [ 1565.127625][T21291] Buffer I/O error on dev loop6, logical block 0, async page read [ 1565.138627][T21291] Buffer I/O error on dev loop6, logical block 0, async page read [ 1565.147841][T21291] Buffer I/O error on dev loop6, logical block 0, async page read [ 1565.182179][T21291] Buffer I/O error on dev loop6, logical block 0, async page read [ 1565.190914][T21291] ldm_validate_partition_table(): Disk read failed. [ 1565.200213][T21291] Buffer I/O error on dev loop6, logical block 0, async page read [ 1565.209042][T21291] Buffer I/O error on dev loop6, logical block 0, async page read [ 1565.231040][T21291] Dev loop6: unable to read RDB block 0 [ 1565.237735][T21291] loop6: unable to read partition table [ 1565.248267][T25608] ldm_validate_partition_table(): Disk read failed. [ 1565.264574][ T6003] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1565.335023][T25608] Dev loop6: unable to read RDB block 0 [ 1565.341238][T25608] loop6: unable to read partition table [ 1565.351708][T25608] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1565.464525][ T6003] usb 4-1: Using ep0 maxpacket: 16 [ 1565.471390][ T6003] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1565.482877][ T6003] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1565.493794][ T6003] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1565.507179][ T6003] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1565.516577][ T6003] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1565.524878][ T6003] usb 4-1: Product: syz [ 1565.530121][ T6003] usb 4-1: Manufacturer: syz [ 1565.537242][ T6003] usb 4-1: SerialNumber: syz [ 1566.100759][ T6003] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 1566.787408][T25634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4449'. [ 1566.801622][T25634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4449'. [ 1567.458315][ T6003] usb 4-1: USB disconnect, device number 85 [ 1567.573327][T25641] tipc: Failed to remove unknown binding: 66,1,1/0:779277831/779277833 [ 1567.612599][T25641] tipc: Failed to remove unknown binding: 66,1,1/0:779277831/779277833 [ 1567.965005][T24879] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1568.093623][T10370] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1568.274441][T10370] usb 6-1: Using ep0 maxpacket: 32 [ 1568.297673][T24879] usb 1-1: Using ep0 maxpacket: 32 [ 1568.472487][T24879] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 1568.480828][T24879] usb 1-1: config 0 has no interface number 0 [ 1568.488880][T24879] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1568.609250][T10370] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1568.618757][T24879] usb 1-1: config 0 interface 85 has no altsetting 0 [ 1568.626052][T10370] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1568.635880][T24879] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1568.656080][T10370] usb 6-1: config 0 descriptor?? [ 1568.661098][T24879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1568.689478][T24879] usb 1-1: Product: syz [ 1568.693664][T24879] usb 1-1: Manufacturer: syz [ 1568.704538][T24879] usb 1-1: SerialNumber: syz [ 1568.744887][T24879] usb 1-1: config 0 descriptor?? [ 1568.803327][T25658] tipc: Failed to remove unknown binding: 66,1,1/0:2580108282/2580108284 [ 1568.812676][T25658] tipc: Failed to remove unknown binding: 66,1,1/0:2580108282/2580108284 [ 1568.885352][T10370] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1568.903957][T10370] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1568.919999][T10370] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1568.944441][T10370] usb 6-1: media controller created [ 1569.058226][ T30] audit: type=1400 audit(2000000112.596:1620): avc: denied { connect } for pid=25659 comm="syz.4.4458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1569.264740][T20647] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1569.265037][T25641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1569.302671][T10370] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1569.317114][T25641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1569.330100][ T30] audit: type=1400 audit(2000000112.786:1621): avc: denied { ioctl } for pid=25659 comm="syz.4.4458" path="socket:[91055]" dev="sockfs" ino=91055 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1569.355166][ C0] vkms_vblank_simulate: vblank timer overrun [ 1569.381866][T24879] appletouch 1-1:0.85: Failed to read mode from device. [ 1569.390219][T24879] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 1569.405169][T24879] usb 1-1: USB disconnect, device number 91 [ 1569.445080][T20647] usb 4-1: Using ep0 maxpacket: 32 [ 1569.451421][T20647] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 1569.459594][T20647] usb 4-1: config 0 has no interface number 0 [ 1569.466321][T20647] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1569.477776][T20647] usb 4-1: config 0 interface 85 has no altsetting 0 [ 1569.486513][T20647] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1569.502270][T20647] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.526537][T20647] usb 4-1: Product: syz [ 1569.533004][T20647] usb 4-1: Manufacturer: syz [ 1569.541906][T20647] usb 4-1: SerialNumber: syz [ 1569.556164][T20647] usb 4-1: config 0 descriptor?? [ 1569.564896][T10370] az6027: usb out operation failed. (-71) [ 1569.570746][T10370] stb0899_attach: Driver disabled by Kconfig [ 1569.577630][T10370] az6027: no front-end attached [ 1569.577630][T10370] [ 1569.591050][T10370] az6027: usb out operation failed. (-71) [ 1569.598044][T10370] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1569.608725][T10370] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input48 [ 1569.623917][T10370] dvb-usb: schedule remote query interval to 400 msecs. [ 1569.631493][T10370] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1569.646528][T10370] usb 6-1: USB disconnect, device number 10 [ 1569.833653][T25674] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4461'. [ 1569.841323][T20647] appletouch 4-1:0.85: Failed to read mode from device. [ 1569.850739][T25674] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4461'. [ 1569.851000][T20647] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 1570.086399][T20647] usb 4-1: USB disconnect, device number 86 [ 1570.147910][T10370] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1571.599517][T25677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4462'. [ 1571.608516][T25677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4462'. [ 1572.523374][T25710] FAULT_INJECTION: forcing a failure. [ 1572.523374][T25710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1572.536543][T25710] CPU: 0 UID: 0 PID: 25710 Comm: syz.4.4470 Not tainted syzkaller #0 PREEMPT(full) [ 1572.536569][T25710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1572.536580][T25710] Call Trace: [ 1572.536587][T25710] [ 1572.536594][T25710] dump_stack_lvl+0x16c/0x1f0 [ 1572.536620][T25710] should_fail_ex+0x512/0x640 [ 1572.536646][T25710] strncpy_from_user+0x3b/0x2e0 [ 1572.536668][T25710] getname_flags.part.0+0x8f/0x550 [ 1572.536698][T25710] getname_flags+0x93/0xf0 [ 1572.536717][T25710] user_path_at+0x24/0x60 [ 1572.536737][T25710] __x64_sys_mount+0x1fc/0x310 [ 1572.536760][T25710] ? __pfx___x64_sys_mount+0x10/0x10 [ 1572.536792][T25710] do_syscall_64+0xcd/0x4c0 [ 1572.536814][T25710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1572.536832][T25710] RIP: 0033:0x7fb2ddb8ebe9 [ 1572.536846][T25710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1572.536864][T25710] RSP: 002b:00007fb2dea89038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1572.536882][T25710] RAX: ffffffffffffffda RBX: 00007fb2dddc6180 RCX: 00007fb2ddb8ebe9 [ 1572.536893][T25710] RDX: 0000200000000040 RSI: 0000200000000140 RDI: 0000000000000000 [ 1572.536905][T25710] RBP: 00007fb2dea89090 R08: 0000000000000000 R09: 0000000000000000 [ 1572.536915][T25710] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 1572.536926][T25710] R13: 00007fb2dddc6218 R14: 00007fb2dddc6180 R15: 00007ffc2d7c42e8 [ 1572.536951][T25710] [ 1573.028946][T25714] FAULT_INJECTION: forcing a failure. [ 1573.028946][T25714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1573.059113][T25714] CPU: 1 UID: 0 PID: 25714 Comm: syz.2.4471 Not tainted syzkaller #0 PREEMPT(full) [ 1573.059130][T25714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1573.059137][T25714] Call Trace: [ 1573.059141][T25714] [ 1573.059145][T25714] dump_stack_lvl+0x16c/0x1f0 [ 1573.059163][T25714] should_fail_ex+0x512/0x640 [ 1573.059178][T25714] _copy_from_user+0x2e/0xd0 [ 1573.059193][T25714] bpf_prog_test_run_xdp+0x11b9/0x1590 [ 1573.059213][T25714] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1573.059226][T25714] ? __might_fault+0xc0/0x190 [ 1573.059240][T25714] ? fput+0x9b/0xd0 [ 1573.059256][T25714] ? __bpf_prog_get+0x97/0x2a0 [ 1573.059269][T25714] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1573.059281][T25714] __sys_bpf+0x1050/0x4de0 [ 1573.059298][T25714] ? __pfx___sys_bpf+0x10/0x10 [ 1573.059313][T25714] ? ksys_write+0x190/0x250 [ 1573.059327][T25714] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1573.059348][T25714] ? fput+0x9b/0xd0 [ 1573.059362][T25714] ? ksys_write+0x1ac/0x250 [ 1573.059373][T25714] ? __pfx_ksys_write+0x10/0x10 [ 1573.059387][T25714] __x64_sys_bpf+0x78/0xc0 [ 1573.059401][T25714] ? lockdep_hardirqs_on+0x7c/0x110 [ 1573.059414][T25714] do_syscall_64+0xcd/0x4c0 [ 1573.059427][T25714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1573.059439][T25714] RIP: 0033:0x7f8f54d8ebe9 [ 1573.059448][T25714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1573.059460][T25714] RSP: 002b:00007f8f55b9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1573.059471][T25714] RAX: ffffffffffffffda RBX: 00007f8f54fc5fa0 RCX: 00007f8f54d8ebe9 [ 1573.059478][T25714] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1573.059485][T25714] RBP: 00007f8f55b9e090 R08: 0000000000000000 R09: 0000000000000000 [ 1573.059491][T25714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1573.059498][T25714] R13: 00007f8f54fc6038 R14: 00007f8f54fc5fa0 R15: 00007fffe0962438 [ 1573.059512][T25714] [ 1573.432616][T25720] overlayfs: missing 'lowerdir' [ 1573.499043][ T30] audit: type=1400 audit(2000000117.026:1622): avc: denied { create } for pid=25716 comm="syz.0.4472" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 1573.640892][ T30] audit: type=1400 audit(2000000117.036:1623): avc: denied { link } for pid=25716 comm="syz.0.4472" name="file1" dev="ramfs" ino=92095 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 1573.775835][T25725] binder: 25721:25725 unknown command 0 [ 1573.878994][T25725] binder: 25721:25725 ioctl c0306201 200000000080 returned -22 [ 1573.972723][T25731] binder: 25721:25731 ioctl 400c620e 200000001200 returned -22 [ 1574.134533][T25731] binder: 25721:25731 ioctl 8933 2000000005c0 returned -22 [ 1575.656708][ T30] audit: type=1400 audit(2000000117.886:1624): avc: denied { read } for pid=25734 comm="syz.3.4477" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1575.812792][ T30] audit: type=1400 audit(2000000117.896:1625): avc: denied { open } for pid=25734 comm="syz.3.4477" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1575.836788][ T30] audit: type=1400 audit(2000000117.896:1626): avc: denied { ioctl } for pid=25734 comm="syz.3.4477" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1575.864109][ T30] audit: type=1326 audit(2000000117.896:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25734 comm="syz.3.4477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426378ebe9 code=0x7ffc0000 [ 1575.930045][T25742] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1575.939716][T25742] SELinux: failed to load policy [ 1575.950421][ T30] audit: type=1326 audit(2000000117.896:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25734 comm="syz.3.4477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426378ebe9 code=0x7ffc0000 [ 1576.109284][ T30] audit: type=1326 audit(2000000117.906:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25734 comm="syz.3.4477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f426378ebe9 code=0x7ffc0000 [ 1576.182902][ T30] audit: type=1326 audit(2000000117.906:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25734 comm="syz.3.4477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426378ebe9 code=0x7ffc0000 [ 1576.221882][ T30] audit: type=1326 audit(2000000117.906:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25734 comm="syz.3.4477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426378ebe9 code=0x7ffc0000 [ 1576.403947][T25747] netlink: 'syz.3.4480': attribute type 12 has an invalid length. [ 1577.287232][T25770] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4483'. [ 1578.442408][T25783] 9pnet_fd: Insufficient options for proto=fd [ 1578.613762][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1578.613776][ T30] audit: type=1400 audit(2000000121.976:1647): avc: denied { write } for pid=25780 comm="syz.2.4486" path="socket:[93210]" dev="sockfs" ino=93210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1579.884229][T25804] tipc: Failed to remove unknown binding: 66,1,1/0:2517528907/2517528909 [ 1579.892750][T25804] tipc: Failed to remove unknown binding: 66,1,1/0:2517528907/2517528909 [ 1580.000038][T25808] binder: 25799:25808 unknown command 0 [ 1580.532324][T25808] binder: 25799:25808 ioctl c0306201 200000000080 returned -22 [ 1580.542902][T25813] binder: 25799:25813 ioctl 400c620e 200000001200 returned -22 [ 1580.869191][T25813] binder: 25799:25813 ioctl 8933 2000000005c0 returned -22 [ 1580.925411][T25817] netlink: zone id is out of range [ 1580.937648][T25817] netlink: zone id is out of range [ 1580.943729][T10370] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1580.953051][T25817] netlink: zone id is out of range [ 1580.991713][T25817] netlink: zone id is out of range [ 1581.104665][T25817] netlink: zone id is out of range [ 1581.110000][T25817] netlink: zone id is out of range [ 1581.115686][T25817] netlink: zone id is out of range [ 1581.153741][T10370] usb 1-1: Using ep0 maxpacket: 32 [ 1581.173841][T10370] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 1581.182847][T10370] usb 1-1: config 0 has no interface number 0 [ 1581.203662][T10370] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1581.215437][T10370] usb 1-1: config 0 interface 85 has no altsetting 0 [ 1581.233341][T10370] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1581.260538][T10370] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1581.296885][T10370] usb 1-1: Product: syz [ 1581.321448][T10370] usb 1-1: Manufacturer: syz [ 1581.486787][T10370] usb 1-1: SerialNumber: syz [ 1581.504412][T10370] usb 1-1: config 0 descriptor?? [ 1581.688620][T25833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4498'. [ 1581.774019][T25804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1581.782889][T25804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1582.016732][T10370] appletouch 1-1:0.85: Failed to read mode from device. [ 1582.034626][T10370] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 1582.070506][T10370] usb 1-1: USB disconnect, device number 92 [ 1582.110872][ T30] audit: type=1400 audit(2000000125.647:1648): avc: denied { connect } for pid=25836 comm="syz.2.4500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1582.130624][ C1] vkms_vblank_simulate: vblank timer overrun [ 1582.171439][ T30] audit: type=1400 audit(2000000125.707:1649): avc: denied { shutdown } for pid=25836 comm="syz.2.4500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1582.282136][T25848] netlink: 188 bytes leftover after parsing attributes in process `syz.5.4501'. [ 1582.501591][ T30] audit: type=1400 audit(2000000126.037:1650): avc: denied { setattr } for pid=25853 comm="syz.2.4504" name="NETLINK" dev="sockfs" ino=92581 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1582.540826][T25858] netlink: 'syz.3.4505': attribute type 4 has an invalid length. [ 1582.650445][T25858] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4505'. [ 1582.709730][T25862] binder: 25860:25862 unknown command 0 [ 1582.719342][T25862] binder: 25860:25862 ioctl c0306201 200000000080 returned -22 [ 1582.741892][T25862] binder: 25860:25862 ioctl 400c620e 200000001200 returned -22 [ 1582.833626][T25862] binder: 25860:25862 ioctl 8933 2000000005c0 returned -22 [ 1582.923643][T19065] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1583.105545][T19065] usb 4-1: config 14 has an invalid interface number: 21 but max is 0 [ 1583.122757][T19065] usb 4-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1583.171350][T19065] usb 4-1: config 14 has no interface number 0 [ 1583.192960][T19065] usb 4-1: config 14 interface 21 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1583.229136][T19065] usb 4-1: config 14 interface 21 has no altsetting 0 [ 1583.240383][T19065] usb 4-1: string descriptor 0 read error: -22 [ 1583.250117][T19065] usb 4-1: New USB device found, idVendor=c880, idProduct=760e, bcdDevice=35.fc [ 1583.260472][T19065] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1583.329499][T19065] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1583.363370][T19065] usb 4-1: MIDIStreaming interface descriptor not found [ 1583.576125][T19065] usb 4-1: USB disconnect, device number 87 [ 1583.663735][T24879] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1583.823537][T24879] usb 5-1: Using ep0 maxpacket: 16 [ 1583.855431][T24879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1583.868133][T24879] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1583.879166][T24879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1583.893458][T24879] usb 5-1: Product: syz [ 1583.964032][T24879] usb 5-1: Manufacturer: syz [ 1584.100107][T24879] usb 5-1: SerialNumber: syz [ 1584.125034][T24879] usb 5-1: config 0 descriptor?? [ 1584.134710][T24879] hub 5-1:0.0: bad descriptor, ignoring hub [ 1584.145338][T24879] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1584.162852][T24879] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input52 [ 1584.383504][ T30] audit: type=1400 audit(2000000127.897:1651): avc: denied { read } for pid=25877 comm="syz.4.4513" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1584.436793][ T30] audit: type=1400 audit(2000000127.897:1652): avc: denied { open } for pid=25877 comm="syz.4.4513" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1584.536694][T16062] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1584.636768][T19065] usb 5-1: USB disconnect, device number 80 [ 1584.793605][T16062] usb 3-1: Using ep0 maxpacket: 8 [ 1584.814302][T16062] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1584.834068][T16062] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1584.843731][T16062] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1584.860716][T16062] usb 3-1: Product: syz [ 1584.878017][T16062] usb 3-1: Manufacturer: syz [ 1584.889281][T16062] usb 3-1: SerialNumber: syz [ 1585.118633][T16062] usb 3-1: palm_os_3_probe - error -71 getting connection information [ 1585.134667][T16062] visor 3-1:1.0: probe with driver visor failed with error -71 [ 1585.148250][T16062] usb 3-1: USB disconnect, device number 76 [ 1585.205912][T25895] 9pnet_fd: Insufficient options for proto=fd [ 1585.394282][ T30] audit: type=1400 audit(2000000128.927:1653): avc: denied { write } for pid=25897 comm="syz.0.4518" path="socket:[93394]" dev="sockfs" ino=93394 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1585.417788][ C1] vkms_vblank_simulate: vblank timer overrun [ 1586.055394][ T30] audit: type=1400 audit(2000000129.597:1654): avc: denied { bind } for pid=25913 comm="syz.3.4522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1586.627432][T25910] netlink: 'syz.0.4521': attribute type 4 has an invalid length. [ 1586.635262][T25910] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4521'. [ 1587.290561][ T30] audit: type=1400 audit(2000000130.807:1655): avc: denied { watch } for pid=25920 comm="syz.3.4524" path="/proc/1006/fdinfo" dev="proc" ino=93442 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1587.320244][T25923] ptrace attach of "./syz-executor exec"[25927] was attempted by "./syz-executor exec"[25923] [ 1587.365400][T25923] lo speed is unknown, defaulting to 1000 [ 1587.423390][ T30] audit: type=1400 audit(2000000130.827:1656): avc: denied { setopt } for pid=25924 comm="syz.4.4527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1588.728498][ T30] audit: type=1400 audit(2000000132.257:1657): avc: denied { write } for pid=25947 comm="syz.0.4532" path="socket:[92766]" dev="sockfs" ino=92766 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1590.057241][T25962] FAULT_INJECTION: forcing a failure. [ 1590.057241][T25962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1590.114054][T25962] CPU: 1 UID: 0 PID: 25962 Comm: syz.0.4536 Not tainted syzkaller #0 PREEMPT(full) [ 1590.114082][T25962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1590.114093][T25962] Call Trace: [ 1590.114099][T25962] [ 1590.114106][T25962] dump_stack_lvl+0x16c/0x1f0 [ 1590.114132][T25962] should_fail_ex+0x512/0x640 [ 1590.114158][T25962] _copy_to_user+0x32/0xd0 [ 1590.114183][T25962] simple_read_from_buffer+0xcb/0x170 [ 1590.114204][T25962] proc_fail_nth_read+0x197/0x240 [ 1590.114227][T25962] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1590.114249][T25962] ? rw_verify_area+0xcf/0x6c0 [ 1590.114276][T25962] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1590.114297][T25962] vfs_read+0x1e1/0xcf0 [ 1590.114318][T25962] ? __pfx___mutex_lock+0x10/0x10 [ 1590.114340][T25962] ? __pfx_vfs_read+0x10/0x10 [ 1590.114365][T25962] ? __fget_files+0x20e/0x3c0 [ 1590.114392][T25962] ksys_read+0x12a/0x250 [ 1590.114409][T25962] ? __pfx_ksys_read+0x10/0x10 [ 1590.114435][T25962] do_syscall_64+0xcd/0x4c0 [ 1590.114458][T25962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1590.114476][T25962] RIP: 0033:0x7f217c78d5fc [ 1590.114491][T25962] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1590.114507][T25962] RSP: 002b:00007f217d68f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1590.114524][T25962] RAX: ffffffffffffffda RBX: 00007f217c9c5fa0 RCX: 00007f217c78d5fc [ 1590.114535][T25962] RDX: 000000000000000f RSI: 00007f217d68f0a0 RDI: 0000000000000004 [ 1590.114546][T25962] RBP: 00007f217d68f090 R08: 0000000000000000 R09: 0000000000000000 [ 1590.114556][T25962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1590.114567][T25962] R13: 00007f217c9c6038 R14: 00007f217c9c5fa0 R15: 00007ffee5b64e08 [ 1590.114591][T25962] [ 1590.584094][T16062] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1590.612847][T25973] input: syz1 as /devices/virtual/input/input53 [ 1590.745730][T16062] usb 6-1: Using ep0 maxpacket: 16 [ 1590.758557][T16062] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1590.771971][T16062] usb 6-1: config 0 has no interfaces? [ 1590.787730][T16062] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1590.800916][T25979] loop6: detected capacity change from 0 to 2576 [ 1590.867520][T16062] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1590.924742][T25979] buffer_io_error: 27 callbacks suppressed [ 1590.924759][T25979] Buffer I/O error on dev loop6, logical block 0, async page read [ 1590.933129][T16062] usb 6-1: Product: syz [ 1590.953101][T16062] usb 6-1: Manufacturer: syz [ 1590.957761][T16062] usb 6-1: SerialNumber: syz [ 1590.982390][T16062] usb 6-1: config 0 descriptor?? [ 1591.009625][T25979] Buffer I/O error on dev loop6, logical block 0, async page read [ 1591.106220][T25979] Buffer I/O error on dev loop6, logical block 0, async page read [ 1591.131952][T25979] Buffer I/O error on dev loop6, logical block 0, async page read [ 1591.240911][T25979] Buffer I/O error on dev loop6, logical block 0, async page read [ 1591.488855][T25979] Buffer I/O error on dev loop6, logical block 0, async page read [ 1591.501838][T25965] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4538'. [ 1591.510926][T25965] openvswitch: netlink: Flow key attr not present in new flow. [ 1591.528838][T25979] Buffer I/O error on dev loop6, logical block 0, async page read [ 1591.537020][T25979] Buffer I/O error on dev loop6, logical block 0, async page read [ 1591.558549][T25979] ldm_validate_partition_table(): Disk read failed. [ 1591.565724][T25979] Buffer I/O error on dev loop6, logical block 0, async page read [ 1591.573845][T25979] Buffer I/O error on dev loop6, logical block 0, async page read [ 1591.582216][T25979] Dev loop6: unable to read RDB block 0 [ 1591.588903][T25979] loop6: unable to read partition table [ 1591.597781][T25979] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1591.602475][ T6003] usb 6-1: USB disconnect, device number 11 [ 1591.689595][ T30] audit: type=1400 audit(2000000135.227:1658): avc: denied { map } for pid=25989 comm="syz.3.4544" path="socket:[92901]" dev="sockfs" ino=92901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 1591.713406][ C0] vkms_vblank_simulate: vblank timer overrun [ 1592.249256][T25996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4545'. [ 1592.259686][T25996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4545'. [ 1592.301642][T25997] netlink: 'syz.4.4545': attribute type 1 has an invalid length. [ 1592.309653][T25997] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4545'. [ 1593.291498][ T30] audit: type=1400 audit(2000000136.827:1659): avc: denied { create } for pid=26009 comm="syz.4.4550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 1593.939545][T26007] ubi: mtd0 is already attached to ubi7 [ 1594.067558][ T30] audit: type=1400 audit(2000000137.607:1660): avc: denied { map } for pid=26027 comm="syz.3.4554" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1594.091413][ C0] vkms_vblank_simulate: vblank timer overrun [ 1594.104451][T26030] binder_alloc: binder_alloc_mmap_handler: 26027 200000ffd000-200001000000 already mapped failed -16 [ 1594.197491][T26028] binder: BINDER_SET_CONTEXT_MGR already set [ 1594.213201][T26028] binder: 26027:26028 ioctl 4018620d 200000000040 returned -16 [ 1594.277349][T26029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1594.333281][T26029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1594.375657][ T30] audit: type=1400 audit(2000000137.917:1661): avc: denied { audit_write } for pid=26033 comm="syz.0.4555" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1594.554337][T19065] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1594.751071][T19065] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1594.777502][T19065] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1594.812954][T19065] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1594.834108][T19065] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.844173][T19065] usb 4-1: config 0 descriptor?? [ 1595.057987][ T6003] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1595.223003][ T6003] usb 1-1: Using ep0 maxpacket: 16 [ 1595.234622][ T6003] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1595.250373][ T6003] usb 1-1: config 0 has no interfaces? [ 1595.262768][T19065] hid-steam 0003:28DE:1142.0019: reserved main item tag 0xe [ 1595.282579][T19065] hid-steam 0003:28DE:1142.0019: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 1595.302139][ T6003] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1595.312160][ T6003] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1595.328241][ T6003] usb 1-1: Product: syz [ 1595.336646][ T6003] usb 1-1: Manufacturer: syz [ 1595.341454][ T6003] usb 1-1: SerialNumber: syz [ 1595.366353][ T6003] usb 1-1: config 0 descriptor?? [ 1595.493159][ T6003] usb 4-1: USB disconnect, device number 88 [ 1595.667496][T26058] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4558'. [ 1595.682300][T26058] openvswitch: netlink: Flow key attr not present in new flow. [ 1595.839731][T16062] usb 1-1: USB disconnect, device number 93 [ 1595.884143][T10370] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1596.043075][T10370] usb 5-1: Using ep0 maxpacket: 16 [ 1596.074662][T10370] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1596.088214][T10370] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1596.095284][T10370] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1596.105876][T10370] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1596.118591][T10370] usb 5-1: config 0 descriptor?? [ 1596.987751][T10370] nzxt-smart2 0003:1E71:2009.001A: item fetching failed at offset 4/5 [ 1597.168636][T10370] nzxt-smart2 0003:1E71:2009.001A: probe with driver nzxt-smart2 failed with error -22 [ 1597.604149][T19065] usb 5-1: USB disconnect, device number 81 [ 1598.360348][ T30] audit: type=1400 audit(2000000141.897:1662): avc: denied { ioctl } for pid=26091 comm="syz.3.4570" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1598.591514][ T6003] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1599.798623][ T6003] usb 5-1: Using ep0 maxpacket: 8 [ 1600.501030][ T6003] usb 5-1: config index 0 descriptor too short (expected 57, got 36) [ 1600.545272][ T6003] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1600.587759][ T6003] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1600.904809][ T6003] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1601.457385][ T6003] usb 5-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 1601.467255][ T6003] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1601.485668][ T6003] usb 5-1: config 0 descriptor?? [ 1601.514297][ T6003] usb 5-1: can't set config #0, error -71 [ 1601.584124][ T6003] usb 5-1: USB disconnect, device number 82 [ 1601.691336][T26120] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4579'. [ 1601.742708][T26125] netlink: 'syz.3.4579': attribute type 1 has an invalid length. [ 1601.751826][T26125] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4579'. [ 1602.469154][T19065] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1602.712097][T19065] usb 3-1: Using ep0 maxpacket: 16 [ 1602.787286][T19065] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 1602.837307][T19065] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1602.854145][T19065] usb 3-1: config 0 descriptor?? [ 1602.860900][T19065] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1603.042513][T10370] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1603.069966][T19065] usb 3-1: Detected FT232B [ 1603.222519][T10370] usb 5-1: Using ep0 maxpacket: 16 [ 1603.246602][T10370] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1603.265763][T10370] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1603.275971][T10370] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1603.291423][T10370] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1603.302905][T10370] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1603.318605][T10370] usb 5-1: Product: syz [ 1603.332409][T10370] usb 5-1: Manufacturer: syz [ 1603.353136][T10370] usb 5-1: SerialNumber: syz [ 1603.832558][ T30] audit: type=1400 audit(2000000147.268:1663): avc: denied { mount } for pid=26149 comm="syz.0.4587" name="/" dev="rpc_pipefs" ino=93881 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1604.038533][T10370] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 1604.070247][T10370] usb 5-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 1604.166495][T10370] usb 5-1: USB disconnect, device number 83 [ 1604.351843][T23036] udevd[23036]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1604.885251][T19065] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1605.661804][T19065] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1605.670958][T19065] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1605.769850][T19065] usb 3-1: USB disconnect, device number 77 [ 1605.791713][T19065] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1605.902863][T19065] ftdi_sio 3-1:0.0: device disconnected [ 1605.963610][ T30] audit: type=1400 audit(2000000149.478:1664): avc: denied { create } for pid=26172 comm="syz.0.4592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1605.993136][T26175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4592'. [ 1606.082488][ T30] audit: type=1400 audit(2000000149.538:1665): avc: denied { write } for pid=26172 comm="syz.0.4592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1607.134309][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.332541][T26213] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1608.340872][T26213] /dev/nullb0: Can't open blockdev [ 1608.352350][T26213] : Can't lookup blockdev [ 1608.445351][ T30] audit: type=1400 audit(2000000151.868:1666): avc: denied { append } for pid=26197 comm="syz.0.4599" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1608.529813][ T30] audit: type=1400 audit(2000000151.868:1667): avc: denied { ioctl } for pid=26197 comm="syz.0.4599" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1610.824309][T26241] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4608'. [ 1610.835445][T26241] netlink: 'syz.0.4608': attribute type 1 has an invalid length. [ 1610.843318][T26241] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4608'. [ 1612.675916][T26277] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4611'. [ 1612.689350][T26277] netlink: 'syz.0.4611': attribute type 1 has an invalid length. [ 1612.697591][T26277] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4611'. [ 1613.111711][ T30] audit: type=1400 audit(2000000156.628:1668): avc: denied { read } for pid=26278 comm="syz.3.4614" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1613.143124][T26289] sctp: [Deprecated]: syz.3.4614 (pid 26289) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1613.143124][T26289] Use struct sctp_sack_info instead [ 1613.182158][ T30] audit: type=1400 audit(2000000156.628:1669): avc: denied { open } for pid=26278 comm="syz.3.4614" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1613.512262][T26284] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1613.519027][T26284] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1613.674442][T26284] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1613.685765][T26284] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1613.692591][T26284] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1613.743082][T26284] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1613.760816][T26284] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1613.789956][T26284] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1613.829562][T26284] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1615.262858][T22703] Bluetooth: hci5: command 0x0406 tx timeout [ 1615.357595][T26323] netlink: 'syz.0.4623': attribute type 1 has an invalid length. [ 1615.382615][T26323] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4623'. [ 1615.404324][T26323] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4623'. [ 1615.413896][T26323] FAULT_INJECTION: forcing a failure. [ 1615.413896][T26323] name failslab, interval 1, probability 0, space 0, times 0 [ 1615.428467][T26323] CPU: 0 UID: 0 PID: 26323 Comm: syz.0.4623 Not tainted syzkaller #0 PREEMPT(full) [ 1615.428492][T26323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1615.428503][T26323] Call Trace: [ 1615.428509][T26323] [ 1615.428517][T26323] dump_stack_lvl+0x16c/0x1f0 [ 1615.428543][T26323] should_fail_ex+0x512/0x640 [ 1615.428563][T26323] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1615.428586][T26323] should_failslab+0xc2/0x120 [ 1615.428606][T26323] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1615.428625][T26323] ? __alloc_skb+0x2b2/0x380 [ 1615.428653][T26323] __alloc_skb+0x2b2/0x380 [ 1615.428671][T26323] ? __pfx___alloc_skb+0x10/0x10 [ 1615.428689][T26323] ? genl_rcv_msg+0x4bb/0x800 [ 1615.428720][T26323] netlink_ack+0x15d/0xb80 [ 1615.428747][T26323] netlink_rcv_skb+0x332/0x420 [ 1615.428766][T26323] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1615.428787][T26323] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1615.428815][T26323] ? netlink_deliver_tap+0x1ae/0xd30 [ 1615.428832][T26323] ? selinux_netlink_send+0x578/0x830 [ 1615.428853][T26323] ? is_vmalloc_addr+0x86/0xa0 [ 1615.428872][T26323] genl_rcv+0x28/0x40 [ 1615.428892][T26323] netlink_unicast+0x5a7/0x870 [ 1615.428915][T26323] ? __pfx_netlink_unicast+0x10/0x10 [ 1615.428934][T26323] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1615.428961][T26323] netlink_sendmsg+0x8d1/0xdd0 [ 1615.428985][T26323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1615.429014][T26323] ____sys_sendmsg+0xa95/0xc70 [ 1615.429038][T26323] ? copy_msghdr_from_user+0x10a/0x160 [ 1615.429056][T26323] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1615.429091][T26323] ___sys_sendmsg+0x134/0x1d0 [ 1615.429110][T26323] ? __pfx____sys_sendmsg+0x10/0x10 [ 1615.429162][T26323] __sys_sendmsg+0x16d/0x220 [ 1615.429180][T26323] ? __pfx___sys_sendmsg+0x10/0x10 [ 1615.429214][T26323] do_syscall_64+0xcd/0x4c0 [ 1615.429236][T26323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1615.429252][T26323] RIP: 0033:0x7f217c78ebe9 [ 1615.429266][T26323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1615.429281][T26323] RSP: 002b:00007f217d68f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1615.429297][T26323] RAX: ffffffffffffffda RBX: 00007f217c9c5fa0 RCX: 00007f217c78ebe9 [ 1615.429308][T26323] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1615.429316][T26323] RBP: 00007f217d68f090 R08: 0000000000000000 R09: 0000000000000000 [ 1615.429326][T26323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1615.429336][T26323] R13: 00007f217c9c6038 R14: 00007f217c9c5fa0 R15: 00007ffee5b64e08 [ 1615.429360][T26323] [ 1615.685850][ C0] vkms_vblank_simulate: vblank timer overrun [ 1615.745663][T16708] Bluetooth: hci0: command 0x0406 tx timeout [ 1615.752320][T22703] Bluetooth: hci3: command 0x0406 tx timeout [ 1615.837452][T16708] Bluetooth: hci4: command 0x0406 tx timeout [ 1615.843645][T22703] Bluetooth: hci1: command 0x0405 tx timeout [ 1616.193320][T10370] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1616.334258][T10370] usb 6-1: device descriptor read/64, error -71 [ 1616.581887][T10370] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1616.711778][T10370] usb 6-1: device descriptor read/64, error -71 [ 1616.838395][T10370] usb usb6-port1: attempt power cycle [ 1617.181837][T10370] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1617.212365][T10370] usb 6-1: device descriptor read/8, error -71 [ 1617.351593][T22703] Bluetooth: hci5: command 0x0406 tx timeout [ 1617.581902][T10370] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1617.644663][T10370] usb 6-1: device descriptor read/8, error -71 [ 1617.752458][T10370] usb usb6-port1: unable to enumerate USB device [ 1617.821623][T22703] Bluetooth: hci3: command 0x0406 tx timeout [ 1617.901614][T22703] Bluetooth: hci1: command 0x0405 tx timeout [ 1617.907709][T16708] Bluetooth: hci4: command 0x0406 tx timeout [ 1618.178496][T26363] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 1618.185128][T26363] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1618.201621][T26363] vhci_hcd vhci_hcd.0: Device attached [ 1618.251715][T10370] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1618.268992][T26375] nfs: Unknown parameter './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 1618.716611][T26373] vhci_hcd: connection closed [ 1618.716837][ T6473] vhci_hcd: stop threads [ 1618.725953][ T6473] vhci_hcd: release socket [ 1618.730434][ T6473] vhci_hcd: disconnect device [ 1618.731570][T16062] usb 37-1: new high-speed USB device number 7 using vhci_hcd [ 1618.751155][T16062] usb 37-1: enqueue for inactive port 0 [ 1618.762264][T10370] usb 1-1: Using ep0 maxpacket: 16 [ 1618.769201][T10370] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1618.791882][T10370] usb 1-1: config 0 has no interfaces? [ 1618.803829][T10370] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1618.815278][T10370] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.839245][T16062] vhci_hcd: vhci_device speed not set [ 1618.848007][T10370] usb 1-1: Product: syz [ 1618.855443][T10370] usb 1-1: Manufacturer: syz [ 1618.864267][T10370] usb 1-1: SerialNumber: syz [ 1618.993112][T10370] usb 1-1: config 0 descriptor?? [ 1619.565937][T26387] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4633'. [ 1619.594963][T26387] openvswitch: netlink: Flow actions attr not present in new flow. [ 1619.639636][ T6003] usb 1-1: USB disconnect, device number 94 [ 1620.770930][T26406] fuse: Bad value for 'user_id' [ 1620.780117][T26406] fuse: Bad value for 'user_id' [ 1621.991613][T26413] futex_wake_op: syz.2.4637 tries to shift op by 32; fix this program [ 1622.579164][ T30] audit: type=1400 audit(2000000166.119:1670): avc: denied { read } for pid=26425 comm="syz.0.4644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1623.008944][T26435] FAULT_INJECTION: forcing a failure. [ 1623.008944][T26435] name failslab, interval 1, probability 0, space 0, times 0 [ 1623.022462][T26435] CPU: 0 UID: 0 PID: 26435 Comm: syz.5.4645 Not tainted syzkaller #0 PREEMPT(full) [ 1623.022479][T26435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1623.022486][T26435] Call Trace: [ 1623.022490][T26435] [ 1623.022495][T26435] dump_stack_lvl+0x16c/0x1f0 [ 1623.022513][T26435] should_fail_ex+0x512/0x640 [ 1623.022526][T26435] ? __kmalloc_noprof+0xbf/0x510 [ 1623.022539][T26435] ? watch_queue_set_size+0x469/0x6b0 [ 1623.022551][T26435] should_failslab+0xc2/0x120 [ 1623.022564][T26435] __kmalloc_noprof+0xd2/0x510 [ 1623.022578][T26435] watch_queue_set_size+0x469/0x6b0 [ 1623.022603][T26435] pipe_ioctl+0xab/0x2b0 [ 1623.022615][T26435] ? __pfx_pipe_ioctl+0x10/0x10 [ 1623.022628][T26435] __x64_sys_ioctl+0x18b/0x210 [ 1623.022646][T26435] do_syscall_64+0xcd/0x4c0 [ 1623.022661][T26435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1623.022672][T26435] RIP: 0033:0x7f3802b8ebe9 [ 1623.022681][T26435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1623.022692][T26435] RSP: 002b:00007f38039fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1623.022703][T26435] RAX: ffffffffffffffda RBX: 00007f3802dc6090 RCX: 00007f3802b8ebe9 [ 1623.022710][T26435] RDX: 0000000000000001 RSI: 0000000000005760 RDI: 0000000000000006 [ 1623.022717][T26435] RBP: 00007f38039fb090 R08: 0000000000000000 R09: 0000000000000000 [ 1623.022724][T26435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1623.022730][T26435] R13: 00007f3802dc6128 R14: 00007f3802dc6090 R15: 00007ffdcc74f3a8 [ 1623.022744][T26435] [ 1623.083616][T26437] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4646'. [ 1623.441330][T16062] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1623.549533][T26443] tipc: Failed to remove unknown binding: 66,1,1/0:830411470/830411472 [ 1623.558203][T26443] tipc: Failed to remove unknown binding: 66,1,1/0:830411470/830411472 [ 1623.601277][T16062] usb 4-1: Using ep0 maxpacket: 16 [ 1623.608670][T16062] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1623.620652][T16062] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1623.631120][T16062] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 1623.644449][T16062] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1623.654287][T16062] usb 4-1: config 0 descriptor?? [ 1623.811455][T20647] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1623.875207][ T30] audit: type=1400 audit(2000000167.419:1671): avc: denied { ioctl } for pid=26436 comm="syz.3.4646" path="socket:[94878]" dev="sockfs" ino=94878 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1624.021354][T20647] usb 1-1: Using ep0 maxpacket: 32 [ 1624.037971][T20647] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 1624.052415][T20647] usb 1-1: config 0 has no interface number 0 [ 1624.058953][T20647] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1624.074993][T20647] usb 1-1: config 0 interface 85 has no altsetting 0 [ 1624.090412][T20647] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1624.103506][T16062] playstation 0003:054C:05C4.001B: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.3-1/input0 [ 1624.117769][T20647] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1624.145567][T20647] usb 1-1: Product: syz [ 1624.157703][T20647] usb 1-1: Manufacturer: syz [ 1624.176984][T20647] usb 1-1: SerialNumber: syz [ 1624.220426][T20647] usb 1-1: config 0 descriptor?? [ 1624.464324][T16062] playstation 0003:054C:05C4.001B: Failed to retrieve feature with reportID 18: -71 [ 1624.601200][T16062] playstation 0003:054C:05C4.001B: Failed to retrieve DualShock4 pairing info: -71 [ 1624.640215][T16062] playstation 0003:054C:05C4.001B: Failed to get MAC address from DualShock4 [ 1624.655492][T26443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1624.664298][T26443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1624.683427][T16062] playstation 0003:054C:05C4.001B: Failed to create dualshock4. [ 1624.685162][T20647] appletouch 1-1:0.85: Failed to read mode from device. [ 1624.700340][T20647] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 1624.713558][T16062] playstation 0003:054C:05C4.001B: probe with driver playstation failed with error -71 [ 1624.718840][T20647] usb 1-1: USB disconnect, device number 95 [ 1624.760690][T16062] usb 4-1: USB disconnect, device number 89 [ 1625.792197][T26471] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9017 sclass=netlink_route_socket pid=26471 comm=syz.2.4656 [ 1626.028716][ T30] audit: type=1400 audit(2000000169.399:1672): avc: denied { mounton } for pid=26467 comm="syz.3.4655" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1626.188303][T26475] bridge0: port 2(bridge_slave_1) entered disabled state [ 1626.195643][T26475] bridge0: port 1(bridge_slave_0) entered disabled state [ 1626.214461][T26475] team0: left promiscuous mode [ 1626.219281][T26475] team_slave_0: left promiscuous mode [ 1626.224890][T26475] team_slave_1: left promiscuous mode [ 1626.608089][T26475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1626.619646][T26475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1626.669962][T26475] bond1: left promiscuous mode [ 1626.674800][T26475] bond1: left allmulticast mode [ 1626.907327][T18588] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.051637][T18588] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.060556][T18588] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.070922][T18588] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.441783][T16062] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1627.623692][T26486] ubi: mtd0 is already attached to ubi7 [ 1627.639634][T16062] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1627.652221][T16062] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1627.670664][T16062] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1627.682544][T16062] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1627.692854][T16062] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1627.840700][T16062] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1627.916672][T16062] usb 3-1: config 0 descriptor?? [ 1628.000247][ T30] audit: type=1400 audit(2000000171.539:1673): avc: denied { create } for pid=26498 comm="syz.5.4663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1628.040613][ T30] audit: type=1400 audit(2000000171.569:1674): avc: denied { setopt } for pid=26498 comm="syz.5.4663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1628.146347][T16062] hdpvr 3-1:0.0: firmware version 0x1e dated [ 1628.401189][T26485] binder: 26481:26485 ioctl c0306201 200000000040 returned -22 [ 1628.482245][T16062] hdpvr 3-1:0.0: device init failed [ 1628.487545][T16062] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 1628.506637][T16062] usb 3-1: USB disconnect, device number 78 [ 1628.706258][ T30] audit: type=1400 audit(2000000172.229:1675): avc: denied { setattr } for pid=26478 comm="syz.4.4657" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1628.786292][ T30] audit: type=1400 audit(2000000172.229:1676): avc: denied { getopt } for pid=26478 comm="syz.4.4657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1628.944758][ T30] audit: type=1400 audit(2000000172.329:1677): avc: denied { mount } for pid=26505 comm="syz.5.4665" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1628.956206][T20647] Process accounting resumed [ 1629.172230][ T30] audit: type=1400 audit(2000000172.329:1678): avc: denied { append } for pid=26505 comm="syz.5.4665" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1629.502161][ T30] audit: type=1800 audit(2000000173.039:1679): pid=26510 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.4665" name="/" dev="9p" ino=2 res=0 errno=0 [ 1630.940890][T26538] mkiss: ax0: crc mode is auto. [ 1630.966285][ T30] audit: type=1400 audit(2000000174.499:1680): avc: denied { map } for pid=26536 comm="syz.0.4671" path="/dev/ttyprintk" dev="devtmpfs" ino=621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 1631.211060][T20647] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1631.212847][T26542] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4671'. [ 1631.302421][T26542] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4671'. [ 1631.325112][T26542] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4671'. [ 1631.334238][T26542] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4671'. [ 1631.470163][ T30] audit: type=1400 audit(2000000175.009:1681): avc: denied { ioctl } for pid=26551 comm="syz.4.4676" path="socket:[95096]" dev="sockfs" ino=95096 ioctlcmd=0x8948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1631.498271][T26552] FAULT_INJECTION: forcing a failure. [ 1631.498271][T26552] name failslab, interval 1, probability 0, space 0, times 0 [ 1631.501003][T20647] usb 3-1: Using ep0 maxpacket: 16 [ 1631.523034][T26552] CPU: 0 UID: 0 PID: 26552 Comm: syz.4.4676 Not tainted syzkaller #0 PREEMPT(full) [ 1631.523061][T26552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1631.523071][T26552] Call Trace: [ 1631.523078][T26552] [ 1631.523086][T26552] dump_stack_lvl+0x16c/0x1f0 [ 1631.523111][T26552] should_fail_ex+0x512/0x640 [ 1631.523132][T26552] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1631.523154][T26552] should_failslab+0xc2/0x120 [ 1631.523175][T26552] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1631.523193][T26552] ? __alloc_skb+0x2b2/0x380 [ 1631.523216][T26552] __alloc_skb+0x2b2/0x380 [ 1631.523233][T26552] ? __pfx___alloc_skb+0x10/0x10 [ 1631.523254][T26552] ? __pfx_get_current_settings+0x10/0x10 [ 1631.523281][T26552] mgmt_send_event+0x44/0x180 [ 1631.523310][T26552] __mgmt_power_off+0x19c/0x2c0 [ 1631.523334][T26552] ? __pfx___mgmt_power_off+0x10/0x10 [ 1631.523356][T26552] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1631.523381][T26552] ? lockdep_hardirqs_on+0x7c/0x110 [ 1631.523401][T26552] ? 0xffffffff81000000 [ 1631.523421][T26552] hci_dev_close_sync+0xce1/0x11d0 [ 1631.523445][T26552] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 1631.523474][T26552] hci_dev_do_close+0x2e/0x90 [ 1631.523493][T26552] hci_dev_close+0x185/0x1e0 [ 1631.523515][T26552] hci_sock_ioctl+0x2b3/0x7d0 [ 1631.523532][T26552] ? __pfx_hci_sock_ioctl+0x10/0x10 [ 1631.523557][T26552] sock_do_ioctl+0x115/0x280 [ 1631.523590][T26552] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1631.523621][T26552] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1631.523649][T26552] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1631.523682][T26552] sock_ioctl+0x227/0x6b0 [ 1631.523707][T26552] ? __pfx_sock_ioctl+0x10/0x10 [ 1631.523730][T26552] ? hook_file_ioctl_common+0x145/0x410 [ 1631.523756][T26552] ? selinux_file_ioctl+0x180/0x270 [ 1631.523779][T26552] ? selinux_file_ioctl+0xb4/0x270 [ 1631.523805][T26552] ? __pfx_sock_ioctl+0x10/0x10 [ 1631.523830][T26552] __x64_sys_ioctl+0x18b/0x210 [ 1631.523859][T26552] do_syscall_64+0xcd/0x4c0 [ 1631.523881][T26552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1631.523899][T26552] RIP: 0033:0x7fb2ddb8ebe9 [ 1631.523913][T26552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1631.523930][T26552] RSP: 002b:00007fb2deacb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1631.523947][T26552] RAX: ffffffffffffffda RBX: 00007fb2dddc5fa0 RCX: 00007fb2ddb8ebe9 [ 1631.523959][T26552] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 000000000000000c [ 1631.523969][T26552] RBP: 00007fb2deacb090 R08: 0000000000000000 R09: 0000000000000000 [ 1631.523979][T26552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1631.523990][T26552] R13: 00007fb2dddc6038 R14: 00007fb2dddc5fa0 R15: 00007ffc2d7c42e8 [ 1631.524015][T26552] [ 1631.537993][T20647] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1631.880482][T20647] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1631.910830][T20647] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1631.918863][T20647] usb 3-1: Product: syz [ 1631.931026][T20647] usb 3-1: Manufacturer: syz [ 1631.935683][T20647] usb 3-1: SerialNumber: syz [ 1631.952688][T20647] usb 3-1: config 0 descriptor?? [ 1631.989326][T20647] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1632.690031][T26572] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4682'. [ 1632.719722][T26572] netlink: 'syz.0.4682': attribute type 1 has an invalid length. [ 1632.731410][T26572] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4682'. [ 1633.021031][ T3609] usb 3-1: Failed to submit usb control message: -110 [ 1633.040564][ T3609] usb 3-1: unable to send the bmi data to the device: -110 [ 1633.138967][ T3609] usb 3-1: unable to get target info from device [ 1633.287964][ T3609] usb 3-1: could not get target info (-110) [ 1633.312016][ T3609] usb 3-1: could not probe fw (-110) [ 1633.679553][T26577] ubi: mtd0 is already attached to ubi7 [ 1633.892919][T16062] usb 3-1: USB disconnect, device number 79 [ 1633.916359][T26585] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4681'. [ 1633.939610][T26585] netlink: 'syz.3.4681': attribute type 1 has an invalid length. [ 1633.949472][T26585] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4681'. [ 1634.013663][T26589] ubi: mtd0 is already attached to ubi7 [ 1634.063655][T16708] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1634.306535][T26597] serio: Serial port ptm0 [ 1634.390224][T26599] binder: 26598:26599 unknown command 0 [ 1634.405522][T26599] binder: 26598:26599 ioctl c0306201 200000000080 returned -22 [ 1634.424482][T26599] binder: 26598:26599 ioctl 400c620e 200000001200 returned -22 [ 1634.438096][T26599] binder: 26598:26599 ioctl c0306201 200000000280 returned -11 [ 1634.502488][T26601] binder: 26598:26601 ioctl 8933 2000000005c0 returned -22 [ 1634.932495][T26609] FAULT_INJECTION: forcing a failure. [ 1634.932495][T26609] name failslab, interval 1, probability 0, space 0, times 0 [ 1634.964596][T26609] CPU: 0 UID: 0 PID: 26609 Comm: syz.4.4690 Not tainted syzkaller #0 PREEMPT(full) [ 1634.964623][T26609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1634.964634][T26609] Call Trace: [ 1634.964641][T26609] [ 1634.964648][T26609] dump_stack_lvl+0x16c/0x1f0 [ 1634.964668][T26609] should_fail_ex+0x512/0x640 [ 1634.964682][T26609] ? __kmalloc_noprof+0xbf/0x510 [ 1634.964694][T26609] ? fuse_io_alloc+0x92/0x150 [ 1634.964707][T26609] should_failslab+0xc2/0x120 [ 1634.964721][T26609] __kmalloc_noprof+0xd2/0x510 [ 1634.964735][T26609] fuse_io_alloc+0x92/0x150 [ 1634.964748][T26609] fuse_direct_io+0x2fa/0x24f0 [ 1634.964775][T26609] ? __pfx_fuse_direct_io+0x10/0x10 [ 1634.964791][T26609] ? lockdep_init_map_type+0x5c/0x280 [ 1634.964805][T26609] fuse_direct_IO+0x624/0xf40 [ 1634.964827][T26609] ? __pfx_aio_complete_rw+0x10/0x10 [ 1634.964842][T26609] ? __pfx_fuse_direct_IO+0x10/0x10 [ 1634.964857][T26609] ? __pfx___might_resched+0x10/0x10 [ 1634.964870][T26609] ? generic_write_check_limits+0x1f1/0x290 [ 1634.964893][T26609] ? arch_stack_walk+0xa6/0x100 [ 1634.964909][T26609] fuse_direct_write_iter+0x4c7/0x840 [ 1634.964924][T26609] ? register_lock_class+0x41/0x4c0 [ 1634.964937][T26609] ? __pfx_fuse_direct_write_iter+0x10/0x10 [ 1634.964963][T26609] ? __lock_acquire+0xb97/0x1ce0 [ 1634.965004][T26609] fuse_file_write_iter+0x5c9/0x990 [ 1634.965031][T26609] aio_write+0x3b9/0x910 [ 1634.965052][T26609] ? __pfx_aio_write+0x10/0x10 [ 1634.965071][T26609] ? __lock_acquire+0xb97/0x1ce0 [ 1634.965114][T26609] ? __might_fault+0xe3/0x190 [ 1634.965131][T26609] ? __might_fault+0x13b/0x190 [ 1634.965154][T26609] ? io_submit_one+0x1243/0x1df0 [ 1634.965175][T26609] io_submit_one+0x1243/0x1df0 [ 1634.965200][T26609] ? __lock_acquire+0xb97/0x1ce0 [ 1634.965232][T26609] ? __pfx_io_submit_one+0x10/0x10 [ 1634.965263][T26609] ? __might_fault+0xe3/0x190 [ 1634.965280][T26609] ? __might_fault+0x13b/0x190 [ 1634.965303][T26609] ? __x64_sys_io_submit+0x1a9/0x350 [ 1634.965324][T26609] __x64_sys_io_submit+0x1a9/0x350 [ 1634.965349][T26609] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 1634.965382][T26609] do_syscall_64+0xcd/0x4c0 [ 1634.965406][T26609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1634.965426][T26609] RIP: 0033:0x7fb2ddb8ebe9 [ 1634.965440][T26609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1634.965456][T26609] RSP: 002b:00007fb2deaaa038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1634.965473][T26609] RAX: ffffffffffffffda RBX: 00007fb2dddc6090 RCX: 00007fb2ddb8ebe9 [ 1634.965484][T26609] RDX: 0000200000000780 RSI: 0000000000000020 RDI: 00007fb2dea60000 [ 1634.965494][T26609] RBP: 00007fb2deaaa090 R08: 0000000000000000 R09: 0000000000000000 [ 1634.965504][T26609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1634.965514][T26609] R13: 00007fb2dddc6128 R14: 00007fb2dddc6090 R15: 00007ffc2d7c42e8 [ 1634.965535][T26609] [ 1637.462013][T16062] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1637.730954][T16062] usb 6-1: Using ep0 maxpacket: 32 [ 1637.737558][T16062] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 1638.186596][T16062] usb 6-1: config 0 has no interface number 0 [ 1638.206025][T16062] usb 6-1: config 0 interface 89 has no altsetting 0 [ 1638.224584][T16062] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1638.269163][T16062] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1638.285281][T16062] usb 6-1: Product: syz [ 1638.291400][T16062] usb 6-1: Manufacturer: syz [ 1638.297129][T16062] usb 6-1: SerialNumber: syz [ 1638.309664][T16062] usb 6-1: config 0 descriptor?? [ 1638.324420][T16062] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1638.367498][T16062] em28xx 6-1:0.89: Video interface 89 found: bulk [ 1638.600447][T20647] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1638.681045][ T30] audit: type=1400 audit(2000000182.230:1682): avc: denied { ioctl } for pid=26655 comm="syz.4.4704" path="socket:[96390]" dev="sockfs" ino=96390 ioctlcmd=0x9419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1638.751616][T20647] usb 4-1: Using ep0 maxpacket: 16 [ 1638.968306][T16062] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 1638.977578][T20647] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1638.992706][T20647] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1639.003149][T20647] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1639.014297][T20647] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1639.043677][T20647] usb 4-1: config 0 descriptor?? [ 1639.736960][T20647] hid-multitouch 0003:1FD2:6007.001C: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 1639.802757][T26672] FAULT_INJECTION: forcing a failure. [ 1639.802757][T26672] name failslab, interval 1, probability 0, space 0, times 0 [ 1639.818256][T26672] CPU: 1 UID: 0 PID: 26672 Comm: syz.2.4708 Not tainted syzkaller #0 PREEMPT(full) [ 1639.818281][T26672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1639.818292][T26672] Call Trace: [ 1639.818298][T26672] [ 1639.818305][T26672] dump_stack_lvl+0x16c/0x1f0 [ 1639.818331][T26672] should_fail_ex+0x512/0x640 [ 1639.818352][T26672] ? __pfx_skb_network_protocol+0x10/0x10 [ 1639.818382][T26672] should_failslab+0xc2/0x120 [ 1639.818404][T26672] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1639.818424][T26672] ? skb_clone+0x190/0x3f0 [ 1639.818446][T26672] skb_clone+0x190/0x3f0 [ 1639.818465][T26672] dev_queue_xmit_nit+0x3e7/0xca0 [ 1639.818493][T26672] dev_hard_start_xmit+0x5c3/0x740 [ 1639.818519][T26672] ? skb_clone+0x190/0x3f0 [ 1639.818544][T26672] __dev_queue_xmit+0xa46/0x4490 [ 1639.818580][T26672] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1639.818631][T26672] ? __skb_clone+0x570/0x760 [ 1639.818665][T26672] netlink_deliver_tap+0xa87/0xd30 [ 1639.818693][T26672] netlink_unicast+0x64c/0x870 [ 1639.818720][T26672] ? __pfx_netlink_unicast+0x10/0x10 [ 1639.818740][T26672] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1639.818768][T26672] netlink_sendmsg+0x8d1/0xdd0 [ 1639.818793][T26672] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1639.818825][T26672] ____sys_sendmsg+0xa95/0xc70 [ 1639.818850][T26672] ? copy_msghdr_from_user+0x10a/0x160 [ 1639.818871][T26672] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1639.818907][T26672] ___sys_sendmsg+0x134/0x1d0 [ 1639.818929][T26672] ? __pfx____sys_sendmsg+0x10/0x10 [ 1639.818983][T26672] __sys_sendmsg+0x16d/0x220 [ 1639.819004][T26672] ? __pfx___sys_sendmsg+0x10/0x10 [ 1639.819040][T26672] do_syscall_64+0xcd/0x4c0 [ 1639.819063][T26672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1639.819082][T26672] RIP: 0033:0x7f8f54d8ebe9 [ 1639.819097][T26672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1639.819113][T26672] RSP: 002b:00007f8f55b9e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1639.819131][T26672] RAX: ffffffffffffffda RBX: 00007f8f54fc5fa0 RCX: 00007f8f54d8ebe9 [ 1639.819143][T26672] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 1639.819153][T26672] RBP: 00007f8f55b9e090 R08: 0000000000000000 R09: 0000000000000000 [ 1639.819163][T26672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1639.819173][T26672] R13: 00007f8f54fc6038 R14: 00007f8f54fc5fa0 R15: 00007fffe0962438 [ 1639.819200][T26672] [ 1640.059927][ C1] vkms_vblank_simulate: vblank timer overrun [ 1640.076187][T26672] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4708'. [ 1640.088284][ T30] audit: type=1400 audit(2000000183.630:1683): avc: denied { bind } for pid=26632 comm="syz.5.4698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1640.111831][ T30] audit: type=1400 audit(2000000183.630:1684): avc: denied { setopt } for pid=26632 comm="syz.5.4698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1640.160787][ T30] audit: type=1400 audit(2000000183.700:1685): avc: denied { write } for pid=26632 comm="syz.5.4698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1640.247532][T10370] usb 4-1: USB disconnect, device number 90 [ 1640.302994][T26633] IPv6: NLM_F_CREATE should be specified when creating new route [ 1640.384434][T16062] em28xx 6-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 1640.405209][T16062] em28xx 6-1:0.89: board has no eeprom [ 1640.472905][T16062] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 1640.482698][T16062] em28xx 6-1:0.89: analog set to bulk mode. [ 1640.489427][T10370] em28xx 6-1:0.89: Registering V4L2 extension [ 1640.525037][T16062] usb 6-1: USB disconnect, device number 16 [ 1640.550185][T16062] em28xx 6-1:0.89: Disconnecting em28xx [ 1640.602898][T10370] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 1640.610858][T10370] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 1640.617967][T10370] em28xx 6-1:0.89: No AC97 audio processor [ 1640.682227][T10370] usb 6-1: Decoder not found [ 1640.686864][T10370] em28xx 6-1:0.89: failed to create media graph [ 1640.694311][T10370] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 1640.745256][T10370] em28xx 6-1:0.89: Registering snapshot button... [ 1640.794666][T10370] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input61 [ 1640.897444][T10370] em28xx 6-1:0.89: Remote control support is not available for this card. [ 1640.917572][T16062] em28xx 6-1:0.89: Closing input extension [ 1640.938417][T16062] em28xx 6-1:0.89: Deregistering snapshot button [ 1641.338981][T16062] em28xx 6-1:0.89: Freeing device [ 1642.918896][T26667] bridge0: port 2(bridge_slave_1) entered disabled state [ 1642.926849][T26667] bridge0: port 1(bridge_slave_0) entered disabled state [ 1642.946536][T26667] team0: left promiscuous mode [ 1642.951349][T26667] team_slave_0: left promiscuous mode [ 1642.956803][T26667] team_slave_1: left promiscuous mode [ 1643.003530][T26667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1643.015756][T26667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1643.208051][ T61] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1643.263857][T26710] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4712'. [ 1643.301850][T20927] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1643.404918][T20927] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1643.407294][T26716] netlink: 'syz.4.4712': attribute type 1 has an invalid length. [ 1643.416698][T20927] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1643.421961][T26716] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4712'. [ 1644.499738][T26736] tipc: Failed to remove unknown binding: 66,1,1/10005162:3252559310/3252559312 [ 1644.533930][T26736] tipc: Failed to remove unknown binding: 66,1,1/10005162:3252559310/3252559312 [ 1644.810182][T19065] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1644.900076][ T6003] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1644.961516][T19065] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1644.981439][T19065] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1645.003943][T19065] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1645.020120][T19065] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1645.030702][T19065] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1645.040408][T19065] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1645.050858][ T6003] usb 6-1: Using ep0 maxpacket: 32 [ 1645.057736][ T6003] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 1645.066081][ T6003] usb 6-1: config 0 has no interface number 0 [ 1645.072586][ T6003] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1645.093538][T19065] usb 1-1: config 0 descriptor?? [ 1645.100254][ T6003] usb 6-1: config 0 interface 85 has no altsetting 0 [ 1645.125040][ T6003] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1645.137951][ T6003] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.154299][ T6003] usb 6-1: Product: syz [ 1645.161179][ T6003] usb 6-1: Manufacturer: syz [ 1645.188758][ T6003] usb 6-1: SerialNumber: syz [ 1645.200077][ T6003] usb 6-1: config 0 descriptor?? [ 1645.338571][T19065] hdpvr 1-1:0.0: firmware version 0x1e dated [ 1645.415330][T26736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1645.682373][T26736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1645.717810][T26757] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4725'. [ 1645.731829][ T6003] appletouch 6-1:0.85: Failed to read mode from device. [ 1645.738375][T26757] netlink: 'syz.4.4725': attribute type 1 has an invalid length. [ 1645.752132][T26757] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4725'. [ 1645.752418][ T6003] appletouch 6-1:0.85: probe with driver appletouch failed with error -5 [ 1645.861255][T19065] hdpvr 1-1:0.0: device init failed [ 1645.866638][T19065] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 1645.877927][ T6003] usb 6-1: USB disconnect, device number 17 [ 1646.076178][T19065] usb 1-1: USB disconnect, device number 96 [ 1648.131386][T26790] netlink: 'syz.0.4735': attribute type 1 has an invalid length. [ 1648.334575][T26790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4735'. [ 1648.523149][T19065] kernel write not supported for file [eventfd] (pid: 19065 comm: kworker/1:2) [ 1648.780141][T26798] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 1649.835655][T26813] nfs: Unknown parameter './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 1649.923400][T26812] overlayfs: overlapping lowerdir path [ 1650.529936][T19065] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 1650.692627][T19065] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1650.860990][T19065] usb 4-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 1650.892414][T19065] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.917800][T19065] usb 4-1: Product: syz [ 1650.988657][T19065] usb 4-1: Manufacturer: syz [ 1651.010372][T19065] usb 4-1: SerialNumber: syz [ 1652.010179][T26860] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 1652.016710][T26860] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1652.095074][T26860] vhci_hcd vhci_hcd.0: Device attached [ 1652.106854][T26861] vhci_hcd: connection closed [ 1652.116592][T20927] vhci_hcd: stop threads [ 1652.212632][T20927] vhci_hcd: release socket [ 1652.249893][T20927] vhci_hcd: disconnect device [ 1652.289799][ T6003] vhci_hcd: vhci_device speed not set [ 1653.125748][T26880] openvswitch: netlink: VXLAN extension 2 out of range max 1 [ 1654.069683][T19065] usb 4-1: selecting invalid altsetting 1 [ 1654.159838][T19065] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 1654.159927][T19065] dvb_usb_lmedm04 4-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 1654.209659][T16062] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1654.478144][T19065] usb 4-1: USB disconnect, device number 91 [ 1654.549951][T16062] usb 5-1: Using ep0 maxpacket: 8 [ 1654.583741][T16062] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1654.630735][T16062] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1654.641915][T16062] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1654.655021][T16062] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1654.885242][T16062] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1654.894594][T16062] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1655.649469][ T37] Bluetooth: hci2: Frame reassembly failed (-84) [ 1656.014790][T16062] usb 5-1: usb_control_msg returned -71 [ 1656.100350][T16062] usbtmc 5-1:16.0: can't read capabilities [ 1656.285504][T26922] syz_tun: entered allmulticast mode [ 1656.318194][T26922] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4769'. [ 1656.358115][ T30] audit: type=1326 audit(2000000199.881:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26919 comm="syz.0.4769" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f217c78ebe9 code=0x0 [ 1656.592560][T16062] usb 5-1: USB disconnect, device number 84 [ 1656.757469][ T30] audit: type=1804 audit(2000000200.301:1687): pid=26924 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.4771" name="/newroot/371/file0" dev="tmpfs" ino=1970 res=1 errno=0 [ 1656.819719][ T30] audit: type=1804 audit(2000000200.341:1688): pid=26926 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.4770" name="/newroot/154/file0" dev="tmpfs" ino=816 res=1 errno=0 [ 1657.351405][T26938] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4774'. [ 1657.360728][T26938] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4774'. [ 1657.406643][T26939] netlink: 'syz.4.4774': attribute type 1 has an invalid length. [ 1657.414609][T26939] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4774'. [ 1657.631065][T26942] FAULT_INJECTION: forcing a failure. [ 1657.631065][T26942] name failslab, interval 1, probability 0, space 0, times 0 [ 1657.633221][ T30] audit: type=1804 audit(2000000201.181:1689): pid=26942 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.4776" name="/newroot/156/file0" dev="tmpfs" ino=827 res=1 errno=0 [ 1657.673657][T22703] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1657.683383][T26942] CPU: 0 UID: 0 PID: 26942 Comm: syz.5.4776 Not tainted syzkaller #0 PREEMPT(full) [ 1657.683408][T26942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1657.683418][T26942] Call Trace: [ 1657.683424][T26942] [ 1657.683430][T26942] dump_stack_lvl+0x16c/0x1f0 [ 1657.683462][T26942] should_fail_ex+0x512/0x640 [ 1657.683480][T26942] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1657.683502][T26942] should_failslab+0xc2/0x120 [ 1657.683522][T26942] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1657.683540][T26942] ? __lock_acquire+0xb97/0x1ce0 [ 1657.683564][T26942] ? mpol_new+0x11b/0x2d0 [ 1657.683583][T26942] mpol_new+0x11b/0x2d0 [ 1657.683600][T26942] do_mbind+0x218/0xf30 [ 1657.683625][T26942] ? find_held_lock+0x2b/0x80 [ 1657.683644][T26942] ? __might_fault+0xe3/0x190 [ 1657.683661][T26942] ? __might_fault+0xe3/0x190 [ 1657.683678][T26942] ? __pfx_do_mbind+0x10/0x10 [ 1657.683714][T26942] ? __pfx_get_nodes+0x10/0x10 [ 1657.683732][T26942] ? __fget_files+0x20e/0x3c0 [ 1657.683758][T26942] kernel_mbind+0x1e3/0x1f0 [ 1657.683784][T26942] ? __pfx_kernel_mbind+0x10/0x10 [ 1657.683816][T26942] do_syscall_64+0xcd/0x4c0 [ 1657.683839][T26942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1657.683857][T26942] RIP: 0033:0x7f3802b8ebe9 [ 1657.683872][T26942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1657.683890][T26942] RSP: 002b:00007f3803a1c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1657.683908][T26942] RAX: ffffffffffffffda RBX: 00007f3802dc5fa0 RCX: 00007f3802b8ebe9 [ 1657.683920][T26942] RDX: 0000000000000002 RSI: 0000000000004000 RDI: 0000200000ffa000 [ 1657.683931][T26942] RBP: 00007f3803a1c090 R08: 0000000000000008 R09: 0000000000000000 [ 1657.683942][T26942] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 1657.683953][T26942] R13: 00007f3802dc6038 R14: 00007f3802dc5fa0 R15: 00007ffdcc74f3a8 [ 1657.683977][T26942] [ 1657.879810][ C0] vkms_vblank_simulate: vblank timer overrun [ 1659.207097][T26949] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4779'. [ 1659.216519][T26949] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4779'. [ 1659.428279][T26976] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4784'. [ 1659.480134][T26977] netlink: 'syz.0.4784': attribute type 1 has an invalid length. [ 1659.488065][T26977] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4784'. [ 1659.686145][ T30] audit: type=1400 audit(2000000203.231:1690): avc: denied { mount } for pid=26972 comm="syz.4.4783" name="/" dev="hugetlbfs" ino=96868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1659.709192][ C0] vkms_vblank_simulate: vblank timer overrun [ 1660.028764][T16062] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1660.236604][T26986] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4786'. [ 1660.379355][T16062] usb 5-1: Using ep0 maxpacket: 32 [ 1660.388953][T16062] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1660.397643][T16062] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1660.475053][T16062] usb 5-1: config 0 has no interface number 0 [ 1660.487000][T16062] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1660.496295][T16062] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1660.505737][T16062] usb 5-1: Product: syz [ 1660.510313][T16062] usb 5-1: Manufacturer: syz [ 1660.514929][T16062] usb 5-1: SerialNumber: syz [ 1660.522622][T16062] usb 5-1: config 0 descriptor?? [ 1660.541202][T16062] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1661.118320][ T30] audit: type=1400 audit(2000000204.661:1691): avc: denied { accept } for pid=26972 comm="syz.4.4783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1661.235107][T16062] usb 5-1: qt2_setup_urbs - submit read urb failed -8 [ 1661.281134][T16062] quatech2 5-1:0.51: probe with driver quatech2 failed with error -8 [ 1662.340597][T19065] usb 5-1: USB disconnect, device number 85 [ 1662.363699][T27009] tipc: Failed to remove unknown binding: 66,1,1/0:3298808706/3298808708 [ 1662.375844][T27009] tipc: Failed to remove unknown binding: 66,1,1/0:3298808706/3298808708 [ 1662.390925][T27010] tipc: Failed to remove unknown binding: 66,1,1/0:3981780152/3981780154 [ 1662.400149][T27010] tipc: Failed to remove unknown binding: 66,1,1/0:3981780152/3981780154 [ 1662.429814][T27013] FAULT_INJECTION: forcing a failure. [ 1662.429814][T27013] name failslab, interval 1, probability 0, space 0, times 0 [ 1662.442523][T27013] CPU: 0 UID: 0 PID: 27013 Comm: syz.2.4795 Not tainted syzkaller #0 PREEMPT(full) [ 1662.442549][T27013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1662.442560][T27013] Call Trace: [ 1662.442567][T27013] [ 1662.442574][T27013] dump_stack_lvl+0x16c/0x1f0 [ 1662.442599][T27013] should_fail_ex+0x512/0x640 [ 1662.442619][T27013] ? __pfx_skb_network_protocol+0x10/0x10 [ 1662.442649][T27013] should_failslab+0xc2/0x120 [ 1662.442669][T27013] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1662.442688][T27013] ? skb_clone+0x190/0x3f0 [ 1662.442711][T27013] skb_clone+0x190/0x3f0 [ 1662.442731][T27013] dev_queue_xmit_nit+0x3e7/0xca0 [ 1662.442758][T27013] dev_hard_start_xmit+0x5c3/0x740 [ 1662.442784][T27013] ? skb_clone+0x190/0x3f0 [ 1662.442805][T27013] __dev_queue_xmit+0xa46/0x4490 [ 1662.442842][T27013] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1662.442892][T27013] ? __skb_clone+0x570/0x760 [ 1662.442925][T27013] netlink_deliver_tap+0xa87/0xd30 [ 1662.442951][T27013] netlink_unicast+0x64c/0x870 [ 1662.442976][T27013] ? __pfx_netlink_unicast+0x10/0x10 [ 1662.442994][T27013] ? __asan_memset+0x23/0x50 [ 1662.443020][T27013] ? __build_skb_around+0x278/0x3b0 [ 1662.443051][T27013] netlink_sendmsg+0x8d1/0xdd0 [ 1662.443076][T27013] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1662.443106][T27013] ____sys_sendmsg+0xa95/0xc70 [ 1662.443130][T27013] ? copy_msghdr_from_user+0x10a/0x160 [ 1662.443149][T27013] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1662.443184][T27013] ___sys_sendmsg+0x134/0x1d0 [ 1662.443204][T27013] ? __pfx____sys_sendmsg+0x10/0x10 [ 1662.443255][T27013] __sys_sendmsg+0x16d/0x220 [ 1662.443275][T27013] ? __pfx___sys_sendmsg+0x10/0x10 [ 1662.443310][T27013] do_syscall_64+0xcd/0x4c0 [ 1662.443332][T27013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1662.443350][T27013] RIP: 0033:0x7f8f54d8ebe9 [ 1662.443365][T27013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1662.443382][T27013] RSP: 002b:00007f8f55b9e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1662.443399][T27013] RAX: ffffffffffffffda RBX: 00007f8f54fc5fa0 RCX: 00007f8f54d8ebe9 [ 1662.443410][T27013] RDX: 0000000000000000 RSI: 0000200000002540 RDI: 0000000000000003 [ 1662.443428][T27013] RBP: 00007f8f55b9e090 R08: 0000000000000000 R09: 0000000000000000 [ 1662.443439][T27013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1662.443449][T27013] R13: 00007f8f54fc6038 R14: 00007f8f54fc5fa0 R15: 00007fffe0962438 [ 1662.443472][T27013] [ 1662.692507][ C0] vkms_vblank_simulate: vblank timer overrun [ 1663.119095][T16062] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1663.126892][T10370] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1663.446156][T27017] bridge0: port 2(bridge_slave_1) entered disabled state [ 1663.453478][T27017] bridge0: port 1(bridge_slave_0) entered disabled state [ 1663.491153][T27017] team0: left promiscuous mode [ 1663.495986][T27017] team_slave_0: left promiscuous mode [ 1663.502241][T27017] team_slave_1: left promiscuous mode [ 1663.597751][T27017] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1663.609950][T27017] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1663.649028][T16062] usb 4-1: Using ep0 maxpacket: 32 [ 1663.660494][T10370] usb 1-1: Using ep0 maxpacket: 32 [ 1663.676094][T16062] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 1663.688364][T10370] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 1663.697265][T16062] usb 4-1: config 0 has no interface number 0 [ 1663.704168][T10370] usb 1-1: config 0 has no interface number 0 [ 1663.711107][T16062] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1663.722259][T10370] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1663.733878][T16062] usb 4-1: config 0 interface 85 has no altsetting 0 [ 1663.741014][T10370] usb 1-1: config 0 interface 85 has no altsetting 0 [ 1663.750583][T10370] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1663.759999][T10370] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.768352][T10370] usb 1-1: Product: syz [ 1663.773473][T10370] usb 1-1: Manufacturer: syz [ 1663.778437][T10370] usb 1-1: SerialNumber: syz [ 1663.784151][T16062] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1663.790069][T27017] bond2: left promiscuous mode [ 1663.794965][T16062] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.797939][T27017] vcan1: left promiscuous mode [ 1663.800099][T27017] ipvlan2: left allmulticast mode [ 1663.806340][T16062] usb 4-1: Product: syz [ 1663.810749][T27017] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1663.833128][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1663.917619][T10370] usb 1-1: config 0 descriptor?? [ 1663.924951][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1664.002653][T16062] usb 4-1: Manufacturer: syz [ 1664.008384][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1664.110010][T16062] usb 4-1: SerialNumber: syz [ 1664.166781][T20927] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1664.167108][T16062] usb 4-1: config 0 descriptor?? [ 1664.793580][T27009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1664.804063][T27009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1664.818523][T10370] appletouch 1-1:0.85: Failed to read mode from device. [ 1664.919036][T10370] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 1664.936060][T10370] usb 1-1: USB disconnect, device number 97 [ 1664.975338][T27010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1664.984489][T27010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1664.999461][T16062] appletouch 4-1:0.85: Failed to read mode from device. [ 1665.006609][T16062] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 1665.039686][T16062] usb 4-1: USB disconnect, device number 92 [ 1668.549480][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.150129][T27097] netlink: 'syz.3.4817': attribute type 10 has an invalid length. [ 1669.158343][T27097] team0: entered promiscuous mode [ 1669.163687][T27097] team_slave_0: entered promiscuous mode [ 1669.171482][T27097] team_slave_1: entered promiscuous mode [ 1670.438725][T16062] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1670.608700][T16062] usb 4-1: Using ep0 maxpacket: 16 [ 1670.630379][T16062] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1670.644617][T16062] usb 4-1: config 0 has no interfaces? [ 1670.676023][T16062] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1670.879282][T16062] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1670.879711][ T3609] Bluetooth: hci2: Frame reassembly failed (-84) [ 1670.887458][T16062] usb 4-1: Product: syz [ 1670.899095][T16062] usb 4-1: Manufacturer: syz [ 1670.903803][T16062] usb 4-1: SerialNumber: syz [ 1670.916233][T16062] usb 4-1: config 0 descriptor?? [ 1671.208391][T27115] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1671.283540][T16062] usb 4-1: USB disconnect, device number 93 [ 1671.615338][T27121] nfs: Unknown parameter './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 1671.680456][ C0] vkms_vblank_simulate: vblank timer overrun [ 1672.536904][T27135] nfs: Unknown parameter './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 1672.699931][T22703] Bluetooth: hci2: command 0x1003 tx timeout [ 1672.706537][T16708] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1673.399603][T27144] netlink: 'syz.3.4829': attribute type 10 has an invalid length. [ 1674.443797][T27155] tipc: Failed to remove unknown binding: 66,1,1/0:2416470586/2416470588 [ 1674.486034][T27155] tipc: Failed to remove unknown binding: 66,1,1/0:2416470586/2416470588 [ 1675.148404][T16062] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1675.298956][T16062] usb 4-1: Using ep0 maxpacket: 32 [ 1675.323457][T16062] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 1675.331877][T16062] usb 4-1: config 0 has no interface number 0 [ 1675.346695][T16062] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1675.378405][T10370] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1675.485575][T16062] usb 4-1: config 0 interface 85 has no altsetting 0 [ 1675.509335][T16062] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1675.606316][T27176] comedi comedi1: c6xdigio: I/O port conflict (0x401,3) [ 1675.613559][T27176] ================================================================== [ 1675.621614][T27176] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x63/0x70 [ 1675.629600][T27176] Read of size 8 at addr ffff88807765f230 by task syz.0.4838/27176 [ 1675.637477][T27176] [ 1675.639793][T27176] CPU: 1 UID: 0 PID: 27176 Comm: syz.0.4838 Not tainted syzkaller #0 PREEMPT(full) [ 1675.639818][T27176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1675.639831][T27176] Call Trace: [ 1675.639842][T27176] [ 1675.639851][T27176] dump_stack_lvl+0x116/0x1f0 [ 1675.639876][T27176] print_report+0xcd/0x630 [ 1675.639900][T27176] ? __virt_addr_valid+0x81/0x610 [ 1675.639928][T27176] ? __phys_addr+0xe8/0x180 [ 1675.639954][T27176] ? sysfs_remove_file_ns+0x63/0x70 [ 1675.639978][T27176] kasan_report+0xe0/0x110 [ 1675.639999][T27176] ? sysfs_remove_file_ns+0x63/0x70 [ 1675.640021][T27176] sysfs_remove_file_ns+0x63/0x70 [ 1675.640040][T27176] driver_remove_file+0x4a/0x60 [ 1675.640064][T27176] bus_remove_driver+0x224/0x2c0 [ 1675.640082][T27176] driver_unregister+0x76/0xb0 [ 1675.640104][T27176] comedi_device_detach_locked+0x12f/0xa50 [ 1675.640128][T27176] comedi_device_detach+0x67/0xb0 [ 1675.640148][T27176] comedi_device_attach+0x43d/0x900 [ 1675.640171][T27176] do_devconfig_ioctl+0x1b1/0x710 [ 1675.640196][T27176] ? __mutex_lock+0x1c5/0x1060 [ 1675.640219][T27176] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 1675.640253][T27176] ? rcu_is_watching+0x12/0xc0 [ 1675.640276][T27176] ? finish_task_switch.isra.0+0x221/0xc10 [ 1675.640299][T27176] ? lockdep_hardirqs_on+0x7c/0x110 [ 1675.640319][T27176] ? finish_task_switch.isra.0+0x221/0xc10 [ 1675.640345][T27176] comedi_unlocked_ioctl+0x165d/0x2f00 [ 1675.640377][T27176] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1675.640414][T27176] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1675.640437][T27176] ? do_vfs_ioctl+0x128/0x14f0 [ 1675.640466][T27176] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1675.640493][T27176] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1675.640524][T27176] ? rcu_is_watching+0x12/0xc0 [ 1675.640547][T27176] ? irqentry_exit+0x3b/0x90 [ 1675.640567][T27176] ? lockdep_hardirqs_on+0x7c/0x110 [ 1675.640591][T27176] ? security_file_ioctl+0x5b/0x240 [ 1675.640618][T27176] ? security_file_ioctl+0x5b/0x240 [ 1675.640644][T27176] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1675.640672][T27176] __x64_sys_ioctl+0x18b/0x210 [ 1675.640701][T27176] do_syscall_64+0xcd/0x4c0 [ 1675.640723][T27176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1675.640742][T27176] RIP: 0033:0x7f217c78ebe9 [ 1675.640757][T27176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1675.640776][T27176] RSP: 002b:00007f217d64d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1675.640793][T27176] RAX: ffffffffffffffda RBX: 00007f217c9c6180 RCX: 00007f217c78ebe9 [ 1675.640805][T27176] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000007 [ 1675.640817][T27176] RBP: 00007f217c811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1675.640828][T27176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1675.640839][T27176] R13: 00007f217c9c6218 R14: 00007f217c9c6180 R15: 00007ffee5b64e08 [ 1675.640857][T27176] [ 1675.640864][T27176] [ 1675.766207][T16062] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.771760][T27176] Allocated by task 23035: [ 1675.771784][T27176] kasan_save_stack+0x33/0x60 [ 1675.771807][T27176] kasan_save_track+0x14/0x30 [ 1675.771822][T27176] __kasan_kmalloc+0xaa/0xb0 [ 1675.771838][T27176] __kmalloc_noprof+0x223/0x510 [ 1675.771853][T27176] security_inode_init_security+0x13f/0x390 [ 1675.771870][T27176] shmem_symlink+0x135/0x9f0 [ 1675.771886][T27176] vfs_symlink+0x400/0x680 [ 1675.771912][T27176] do_symlinkat+0x261/0x310 [ 1675.771932][T27176] __x64_sys_symlink+0x75/0x90 [ 1675.771953][T27176] do_syscall_64+0xcd/0x4c0 [ 1675.771973][T27176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1675.778030][T16062] usb 4-1: Product: syz [ 1675.783221][T27176] [ 1675.783230][T27176] Freed by task 23035: [ 1675.783240][T27176] kasan_save_stack+0x33/0x60 [ 1675.783262][T27176] kasan_save_track+0x14/0x30 [ 1675.783276][T27176] kasan_save_free_info+0x3b/0x60 [ 1675.783297][T27176] __kasan_slab_free+0x60/0x70 [ 1675.783313][T27176] kfree+0x2b4/0x4d0 [ 1675.789347][T16062] usb 4-1: Manufacturer: syz [ 1675.793924][T27176] security_inode_init_security+0x2eb/0x390 [ 1675.793948][T27176] shmem_symlink+0x135/0x9f0 [ 1675.793965][T27176] vfs_symlink+0x400/0x680 [ 1675.799094][T16062] usb 4-1: SerialNumber: syz [ 1675.805822][T27176] do_symlinkat+0x261/0x310 [ 1675.805849][T27176] __x64_sys_symlink+0x75/0x90 [ 1676.060480][T27176] do_syscall_64+0xcd/0x4c0 [ 1676.064974][T27176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1676.070847][T27176] [ 1676.073150][T27176] The buggy address belongs to the object at ffff88807765f200 [ 1676.073150][T27176] which belongs to the cache kmalloc-256 of size 256 [ 1676.087180][T27176] The buggy address is located 48 bytes inside of [ 1676.087180][T27176] freed 256-byte region [ffff88807765f200, ffff88807765f300) [ 1676.100866][T27176] [ 1676.103168][T27176] The buggy address belongs to the physical page: [ 1676.109554][T27176] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7765e [ 1676.118291][T27176] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1676.126766][T27176] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1676.134634][T27176] page_type: f5(slab) [ 1676.138596][T27176] raw: 00fff00000000040 ffff88801b841b40 ffffea0000bdca00 dead000000000003 [ 1676.147159][T27176] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1676.155720][T27176] head: 00fff00000000040 ffff88801b841b40 ffffea0000bdca00 dead000000000003 [ 1676.164370][T27176] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1676.173023][T27176] head: 00fff00000000001 ffffea0001dd9781 00000000ffffffff 00000000ffffffff [ 1676.181673][T27176] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1676.190334][T27176] page dumped because: kasan: bad access detected [ 1676.196718][T27176] page_owner tracks the page as allocated [ 1676.202408][T27176] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5957, tgid 5957 (syz-executor), ts 74481797582, free_ts 74468471560 [ 1676.222962][T27176] post_alloc_hook+0x1c0/0x230 [ 1676.227717][T27176] get_page_from_freelist+0x132b/0x38e0 [ 1676.233239][T27176] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1676.239111][T27176] alloc_pages_mpol+0x1fb/0x550 [ 1676.243955][T27176] new_slab+0x247/0x330 [ 1676.248094][T27176] ___slab_alloc+0xcf2/0x1740 [ 1676.252755][T27176] __slab_alloc.constprop.0+0x56/0xb0 [ 1676.258111][T27176] __kmalloc_noprof+0x2f2/0x510 [ 1676.262940][T27176] security_inode_init_security+0x13f/0x390 [ 1676.268814][T27176] shmem_symlink+0x135/0x9f0 [ 1676.273389][T27176] vfs_symlink+0x400/0x680 [ 1676.277790][T27176] do_symlinkat+0x261/0x310 [ 1676.282274][T27176] __x64_sys_symlinkat+0x93/0xc0 [ 1676.287194][T27176] do_syscall_64+0xcd/0x4c0 [ 1676.291679][T27176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1676.297565][T27176] page last free pid 15 tgid 15 stack trace: [ 1676.303518][T27176] __free_frozen_pages+0x7d5/0x10f0 [ 1676.308702][T27176] rcu_core+0x799/0x1530 [ 1676.312923][T27176] handle_softirqs+0x219/0x8e0 [ 1676.317669][T27176] run_ksoftirqd+0x3a/0x60 [ 1676.322065][T27176] smpboot_thread_fn+0x3f7/0xae0 [ 1676.326986][T27176] kthread+0x3c2/0x780 [ 1676.331032][T27176] ret_from_fork+0x5d4/0x6f0 [ 1676.335601][T27176] ret_from_fork_asm+0x1a/0x30 [ 1676.340347][T27176] [ 1676.342649][T27176] Memory state around the buggy address: [ 1676.348252][T27176] ffff88807765f100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1676.356288][T27176] ffff88807765f180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1676.364324][T27176] >ffff88807765f200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1676.372359][T27176] ^ [ 1676.377968][T27176] ffff88807765f280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1676.386005][T27176] ffff88807765f300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1676.394042][T27176] ================================================================== [ 1676.402834][T27176] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1676.410034][T27176] CPU: 1 UID: 0 PID: 27176 Comm: syz.0.4838 Not tainted syzkaller #0 PREEMPT(full) [ 1676.419406][T27176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1676.429464][T27176] Call Trace: [ 1676.432733][T27176] [ 1676.435646][T27176] dump_stack_lvl+0x3d/0x1f0 [ 1676.440221][T27176] vpanic+0x6e8/0x7a0 [ 1676.444192][T27176] ? __pfx_vpanic+0x10/0x10 [ 1676.448685][T27176] ? sysfs_remove_file_ns+0x63/0x70 [ 1676.453868][T27176] panic+0xca/0xd0 [ 1676.457580][T27176] ? __pfx_panic+0x10/0x10 [ 1676.461987][T27176] ? sysfs_remove_file_ns+0x63/0x70 [ 1676.467168][T27176] ? preempt_schedule_common+0x44/0xc0 [ 1676.472608][T27176] ? preempt_schedule_thunk+0x16/0x30 [ 1676.477971][T27176] check_panic_on_warn+0xab/0xb0 [ 1676.482926][T27176] end_report+0x107/0x170 [ 1676.487258][T27176] kasan_report+0xee/0x110 [ 1676.491675][T27176] ? sysfs_remove_file_ns+0x63/0x70 [ 1676.496855][T27176] sysfs_remove_file_ns+0x63/0x70 [ 1676.501868][T27176] driver_remove_file+0x4a/0x60 [ 1676.506696][T27176] bus_remove_driver+0x224/0x2c0 [ 1676.511607][T27176] driver_unregister+0x76/0xb0 [ 1676.516350][T27176] comedi_device_detach_locked+0x12f/0xa50 [ 1676.522136][T27176] comedi_device_detach+0x67/0xb0 [ 1676.527135][T27176] comedi_device_attach+0x43d/0x900 [ 1676.532309][T27176] do_devconfig_ioctl+0x1b1/0x710 [ 1676.537319][T27176] ? __mutex_lock+0x1c5/0x1060 [ 1676.542065][T27176] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 1676.547591][T27176] ? rcu_is_watching+0x12/0xc0 [ 1676.552332][T27176] ? finish_task_switch.isra.0+0x221/0xc10 [ 1676.558116][T27176] ? lockdep_hardirqs_on+0x7c/0x110 [ 1676.563287][T27176] ? finish_task_switch.isra.0+0x221/0xc10 [ 1676.569070][T27176] comedi_unlocked_ioctl+0x165d/0x2f00 [ 1676.574511][T27176] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1676.580298][T27176] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1676.586175][T27176] ? do_vfs_ioctl+0x128/0x14f0 [ 1676.590948][T27176] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1676.595986][T27176] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1676.602855][T27176] ? rcu_is_watching+0x12/0xc0 [ 1676.607638][T27176] ? irqentry_exit+0x3b/0x90 [ 1676.612231][T27176] ? lockdep_hardirqs_on+0x7c/0x110 [ 1676.617444][T27176] ? security_file_ioctl+0x5b/0x240 [ 1676.622659][T27176] ? security_file_ioctl+0x5b/0x240 [ 1676.627890][T27176] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1676.633685][T27176] __x64_sys_ioctl+0x18b/0x210 [ 1676.638430][T27176] do_syscall_64+0xcd/0x4c0 [ 1676.642910][T27176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1676.648787][T27176] RIP: 0033:0x7f217c78ebe9 [ 1676.653172][T27176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1676.672761][T27176] RSP: 002b:00007f217d64d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1676.681156][T27176] RAX: ffffffffffffffda RBX: 00007f217c9c6180 RCX: 00007f217c78ebe9 [ 1676.689112][T27176] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000007 [ 1676.697066][T27176] RBP: 00007f217c811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1676.705007][T27176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1676.712950][T27176] R13: 00007f217c9c6218 R14: 00007f217c9c6180 R15: 00007ffee5b64e08 [ 1676.720908][T27176] [ 1676.724102][T27176] Kernel Offset: disabled [ 1676.728399][T27176] Rebooting in 86400 seconds..