last executing test programs: 7m18.606590221s ago: executing program 0 (id=1215): r0 = socket$inet(0x2, 0x2, 0x1) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000200)=[{&(0x7f00000000c0)="ee", 0xfe23}], 0x1}}], 0x400000000000181, 0x9200000000000080) recvmmsg(r5, 0x0, 0x0, 0x7ffeedc0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) 7m17.670569857s ago: executing program 0 (id=1220): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = fanotify_init(0xf00, 0x0) fanotify_mark(r4, 0x105, 0x40009975, r3, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x6d6b, 0x480) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x2}) ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f0000000000)={0x980900, 0x81, @value=0x327}) syz_usb_connect$cdc_ecm(0x2, 0x8f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12015002020000102505a1a440000102030109027d000101aa200d090400f70302060007052406000005240003000000000900ffff0905240100021524120500a317a88b045e4f01a607c0ffcb7e392a0a2407000400060008001524120300a317a88b045e4f01a607c0ffcb7e392a090581030004fd080809"], &(0x7f0000000400)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x93, 0x1, 0x8, 0x10, 0x55}, 0x10c, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x3, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x439}}]}) 7m14.324624745s ago: executing program 0 (id=1226): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x2000}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {0x0, r4, 0x2}}, 0x18) 7m11.816441539s ago: executing program 0 (id=1236): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x10001011, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xdffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0xa, 0x401) getpid() r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_REAPURB(r4, 0x4004550c, 0x0) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x4, 0x40, &(0x7f0000000480)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x8, 0x20000, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01008a8741733541f9e6319a1800000000000000000000000000000009000000005f2e615f30300000a4aab3c7ba0565d251316e838da78dd5260e0203ba0ea305a0dc5e45a3b4e173de35bba2cfae71dd620cc9bb2ef57600120a7826413de613e0"], &(0x7f0000000600)=""/233, 0x21, 0xe9, 0x0, 0x3}, 0x28) setsockopt$inet6_buf(r3, 0x29, 0x39, 0x0, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x34, 0x0, 0x1, 0x0, 0x200004, {0x2, 0x2, 0x2}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r6, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x3, 0x0, 0x2, 0xb, 0x18, "fee8a2ab78fc976c89056a92072000081ea89de2b7fb0001e60080b8785d960001000000000000000000000000c88fb2fe00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ce00", "f48e000001efd6804e3300a1db0200000000fbe400000000000000000200", [0x6838, 0x6]}}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) close(r8) socket$inet6(0xa, 0x805, 0x0) 7m11.249583166s ago: executing program 0 (id=1238): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4400, 0x3, @dev={0xfe, 0x80, '\x00', 0x23}, 0x3}, 0x1c) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r2, 0x8b2c, &(0x7f0000000040)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r4 = io_uring_setup(0x4f41, &(0x7f0000000080)={0x0, 0xfffffffc, 0x800, 0xfffffffe, 0x800001b4}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000003740)=""/4096, 0x1900}], 0x0, 0x11a}, 0x20) fallocate(r3, 0x0, 0x0, 0x1001f0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8b27, &(0x7f0000000040)) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, 0x0}, 0x3000c041) socket$kcm(0x10, 0x2, 0x4) inotify_init1(0x0) 7m10.118161919s ago: executing program 0 (id=1245): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x801, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0xaed0, 0x0, 0x3}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES64=r0], 0xb8}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000000008000000000", @ANYRES32, @ANYBLOB="002cb28e60a16f5e3400000000000000000000000000000042d5245a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRESDEC=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000020008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37eef4f73fc2e703, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_CAPBSET_READ(0x17, 0x2000003) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = dup(r1) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r6}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r11, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r11, 0x0) r12 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r12, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write$binfmt_elf64(r12, &(0x7f0000000240)=ANY=[], 0x40000) r13 = accept4$unix(r11, 0x0, 0x0, 0x0) recvfrom$unix(r13, &(0x7f0000000280)=""/66, 0x42, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8b04, &(0x7f0000000100)={'veth1_to_bond\x00', @random="0a0300000600"}) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000b00000a50000000060a0b0400000000000000000200fffe2400048020000180070001006374000014f70180080002400000000d080004400000000c0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000500000a"], 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r7, 0x2ded, 0xef92, 0x0, 0x0, 0x0) 6m54.831354265s ago: executing program 32 (id=1245): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x801, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0xaed0, 0x0, 0x3}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES64=r0], 0xb8}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000000008000000000", @ANYRES32, @ANYBLOB="002cb28e60a16f5e3400000000000000000000000000000042d5245a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRESDEC=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000020008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37eef4f73fc2e703, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_CAPBSET_READ(0x17, 0x2000003) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = dup(r1) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r6}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r11, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r11, 0x0) r12 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r12, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write$binfmt_elf64(r12, &(0x7f0000000240)=ANY=[], 0x40000) r13 = accept4$unix(r11, 0x0, 0x0, 0x0) recvfrom$unix(r13, &(0x7f0000000280)=""/66, 0x42, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8b04, &(0x7f0000000100)={'veth1_to_bond\x00', @random="0a0300000600"}) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000b00000a50000000060a0b0400000000000000000200fffe2400048020000180070001006374000014f70180080002400000000d080004400000000c0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000500000a"], 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r7, 0x2ded, 0xef92, 0x0, 0x0, 0x0) 11.454434469s ago: executing program 2 (id=2464): r0 = socket$inet(0x2, 0x2, 0x1) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) r5 = socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000200)=[{&(0x7f00000000c0)="ee", 0xfe23}], 0x1}}], 0x400000000000181, 0x9200000000000080) recvmmsg(r6, 0x0, 0x0, 0x7ffeedc0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000200), 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040800}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) 9.810230058s ago: executing program 2 (id=2468): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f751ae40510410341eef010203010902240001000000000904000010aa0f6000090504020000000000090582020000000000"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x183842, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000000)={0x3, 0x2, 0x1}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x5, 0x1, 0x9, 0x2, 0x0, 0x1}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xd, 0x2, 0x4, 0x4, 0x1, r3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x8, &(0x7f0000000140)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x19}, 0x94) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f00000000c0), 0x4) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000380)="48000000150081fb0259ae08040204000aff0f110000000401d174a4ffa4d8643aec0caa94bd9a5f5901546fabca1b4e7d06a6bd7c493872f750375ed08a562af5740700b8c11941", 0x48}], 0x1}, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x2400}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x56}]}}]}, 0x38}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000480)=0x1, 0x4) connect$inet(r1, &(0x7f00000004c0)={0x2, 0x4e22, @local}, 0x10) sendmmsg$alg(r0, &(0x7f0000001c40)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)="d5280b29be015cd8e83de3fcb3948ac20773beda542fcb5dd3a443899a02a9e4f7c4fbba4217a158e80b1b51622b7dc43f0868f014071b09fa31900635c4aa43389ac41cc81590b2302e67089b1742f687f9d7bf8731fcdf7f2836f2902a6de2c2ed827bab273fc9", 0x68}, {&(0x7f00000000c0)="ff5332a8280f061fb1d96fa9bd80ed17a41e451746c341b5afab7e35b5415618ed9eebbb417668edef657bcfb792438ac96426ff5e5ec64bc7bec532248fbc644315c8ecba222b46f0b59b31713f335413368bd8377a1b0b5143081b53d50b7f9cfbeb26a53b9d0e082348ec4eda7d1c86568db3068a11008021d1ef08228f9a3b77e6", 0x83}, {&(0x7f0000000180)="e4fb86bd9b48545297164c0d1fa2e01c99f0293ce2705a99915c829a724edfc0335a317eaa98d3bd028cb8d5897c8d4054187bd7dacf1b18113627b183fa999267ecafe589294b88556da5a31c7fbf0ce67bbdeeabea9fb462ac86582e24459a1f0b7a04e46390fff093e128", 0x6c}, {&(0x7f0000000200)="cefda49659af87b66dc60bc9073e19c67eb194d01f26b72469a5288ba033248b40233a574927b213a002b51dc10c8f7f7c7ed1d03bbd028eb39823e7caeafd9aa5ebf871d26f34663eba87f74c8b1669af6b6433e2c41121357c3cc3023be1b93ef8783031f82d36f95536ccee469eda98a7573b08550c34e58020", 0x7b}, {&(0x7f0000000280)="3ed15bce9f6e60e6acc2a845d5df82f454e5bfc0c682f7e5446aca16b7361245", 0x20}, {&(0x7f00000002c0)="521b92e9504c58037df47bf4d4ea09c4dd88554d090b8b4ce120ee023021bbe533edc1681b58f88c23723f75e8e7fa15accbfed86eb49baea30c855dbbada8e748aa6fad64bd6a6a912f1e4ec79c1aa404d05b220e6a4edd91f2ad4bdd97f96da548c97b60bd4bcde2ed4676b29a3fef8cd7f8c6250d5a5ab050a6ccb023118a796cd6e7c07ea03084f68ab61ef86393a8144e5f6431ad443109ebe26c4fc81a409a9ae5cb6f32bc1aa0beff0ce084937caa80a2cf4eb38f75ac1722ba6dd95731e6105a218dd175b97b90", 0xcb}, {&(0x7f00000003c0)="f1bf5daa519fdbb5ae2310f95411058d611c4d5703b93e0a4e8bfd6dbe3caf62b43a49bd05ea2f9d3e06320f39068153b2ab0a878448290ad4262e5accfeff0037681242d02d1ac18b8c58902a07cd0b6525cf2ecc5e685ce196cb7e1cd929d55c58f33c", 0x64}, {&(0x7f0000000440)="6a3275a8a9c8cc29ee720c152deccfc877d72b48df846b730d1a8ce3cf670bf5b90f0180de3c3df0a7b8b3942d0d3d926904e039138c2099bd582dc7d7c77413337a4e599bc2cff23fda940707afd39640266c91", 0x54}, {&(0x7f00000004c0)="c649b67877285260110c07f59e2a9aa636dd05490f6602fa4903e60ff1b8611a06b1eae726ba9f7e49", 0x29}, {&(0x7f0000000500)="4ffbc8963788ae81381304302985bb7a9b3eb3563c81ec8beb0105361246f7769d441c", 0x23}], 0xa, &(0x7f0000000600)=[@assoc={0x18, 0x117, 0x4, 0x5}], 0x18, 0x4000}, {0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000640)="09e0ed1d93c1bcccbee6aee438a9394a08a033ba90741e96dcf88d2a5bc41deb021e103d69495a4b405063f15d08e0b93e30e14374c85b51bbe1c2247e70a5a8a30d7d0b37216a9d4161b61c713c18fa312af8629cf7b61712774b882cbc200eae32d29824d2143241eee37ff1c981b1d86ca775b8b8574dbc8cf5fcd31028fa6c953cea7b", 0x85}, {&(0x7f0000000700)="b5e5002816bd4155a28c1a8940e2cc0bc09ec09911abb7ed55875f05e01d", 0x1e}, {&(0x7f0000000740)="ca781635bdd76e31fe23e6d6b71d7c769925bd7861435181091a6a88116497e177029f033fb1001e8f30ef36ff3b9529521196727b3077773b5931d9293e83e06ccb420a64794d0c65f8c2e9c6b5b3777c6d28fb3bbc7dca4d28491457aaff3388b9c51028b1699f4a7b88035f31ef89d8866de34489bedd844ab35d5fc2d22651a5a54c1632f642340420988bd72bc0f9ccf4e7086cd2799cdb32e24f7e0975ccdb173584fe07c4f16481c5752cb8293fce7558209fcd347ae8fd4ccc95f51d4586848eae10d3bab9ba57e04edde8596f48b07df1cab819ebaf78a3d37ae3d9141d2003a01c8d203cc40848e4722a", 0xef}, {&(0x7f0000000840)="1c013f929eae95c82b94944dfe81694888653a9a29f96bb44cd5a9955e5d37a9fc82a8caf2fb15ce8af1cb702d7df77762fa6909fb05163627a81b7a68771b8b8fbf9dfc0a2de667f7644a33b6e383edd46564bb0a0b7e430804706a65f07144cd6cd1", 0x63}], 0x4, 0x0, 0x0, 0x4000800}, {0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000900)="3218c1c7d9b32a435e5b910f25401adf17d99b51c5051a064dbba012d9d44f031bcd383f16974fe486e57e4dc29058fb88971e822e360957abd1cea25e3ee9b8003f11e67351ceac353ed5b94ffa9779d70907e7b20ef8428142ea9ed724071e926aa76d673578716b6371eeaa6fe249ab9913f1caf624a13b9a1d39bc61a6b85eaa08e9fb2e2340fe2535c49c389c91a848c09a9d47fc2ab381b48b6b9ed5591a3ac4c8a6f765224aac5f76ccf174458649485ccc03d91ee9dcd64c41b79bc60359a35fa28a874349192dba73f34b", 0xcf}, {&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000001a00)="a6faa1357cb1625516b27484ab728db1c29a8626340870e882a0516f1f57", 0x1e}], 0x3, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001a80)="80491e77dac16273a1933d88b66fa0a67cd0ebdf23b2720d02d8c303c8dd24bd772accdf8b80dcb3ef1e9348f2fca33ca961c340dded04456fc58db50de29f8e9c39a4f0b7e8a6b888e2654b15af216ce0197d5299176fcc86584184b29c1d0d495bba65e1b4a2ace35ed8a675e47c", 0x6f}], 0x1, &(0x7f0000001d80)=[@iv={0x38, 0x117, 0x2, 0x20, "5c26902e7b3f7e7d8c057a261da4ed2ca78d0e0e84a0b9551e3ab6dcdfde795e"}], 0x38, 0x4000840}, {0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001b80)="6c366e877419af7464362df890d7af6c319057b59173947ed16ab85685adcc881f2382e330c0be81b941566c03cd55594dd241f4802a1780339f8ac5638768cda81b3fb096604a2ae063a54333668b36ade70205a70c830d3ac276d61249413b24322dd343", 0x65}], 0x1, 0x0, 0x0, 0x20040050}], 0x5, 0x800) 9.790947194s ago: executing program 5 (id=2469): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000200), 0x200080, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r3, 0x80044d18, &(0x7f0000000040)) r4 = fcntl$getown(r2, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x2, r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1401, 0x0) writev(r5, &(0x7f0000000080)=[{&(0x7f00000000c0)="5bffd08307d80c79b1cb7b5f0c5b4d719c69c8513f748fbe425a7bc388c9019bef114779f7a10dc03a883d6e16a0a704f74297f381ff1db75098a9b38bb67206a7ff22e6ca46dc760bdad8a79d5951988c55a368dd1132ba7f129c2e65441eaa27492c069488df0881f123ca01ae873f5b36eb0fddb8f07420f5484d81cabde167c87ffbab6a94b24b5537bb1a08d56469f516fd4b7c66e2ac50d5ff4e52c628d0a89e53d0e78582a5ab2a2c714f66", 0xfe7c}], 0x1) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0, 0xffffffffffffffff}) read$rfkill(r6, &(0x7f0000000140), 0x8) openat$vcs(0xffffff9c, 0x0, 0x6a201, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) rseq(0x0, 0x1f00, 0x0, 0x0) preadv(r0, &(0x7f0000000440)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1, 0x8c0, 0x2bd6) 7.446652555s ago: executing program 4 (id=2473): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x80001) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2, 0x0, 0x36}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x1, 0x7, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22903) r8 = socket(0x40000000015, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x2719, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c05, 0xfffffffa, 0x1, 0x9, 0xfffffffd, 0x0, 0x0, 0x7bc90ea9e968aeb5, 0x8}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"e50d1af80100007ea25edd00ff000000080000f6907ff16b7e00"}) epoll_create1(0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r9) sendmsg$NL802154_CMD_SET_CHANNEL(r9, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x2c, r10, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x5}]}, 0x2c}}, 0x64000) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000380)={0xfe, 0xa, 0x6, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="b9ff0300600d698cff9e14f08edd", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff}, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) getrandom(&(0x7f0000000440)=""/50, 0x32, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) 6.852640456s ago: executing program 3 (id=2474): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x2000090) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = epoll_create1(0x80000) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000006000000000000000100008d"], 0x0, 0x32, 0x0, 0x1, 0x1}, 0x28) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYBLOB="0978ffff00"/20, @ANYRES32=r2, @ANYRES32, @ANYRES16=r1], 0x50) r3 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f0000000840)={{0x2, @name="53093a1e6031f1f8d194c96dd8fdd176d3ff381c81c2974e9bbffa15687ba984"}, "4516bcf37cc8c9efde2deedc3e086c39cecc5aa6e015689828468eb9f8bc43c5", 0x3}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@private2={0xfc, 0x2, '\x00', 0x1}}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x1000) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r5], 0x10c}, 0x1, 0x0, 0x0, 0x40008d1}, 0x408d4) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r8, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r0, &(0x7f0000000340)={0xa000001c}) 6.436357207s ago: executing program 1 (id=2475): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 6.227223472s ago: executing program 4 (id=2476): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x80002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x2000}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 5.986144467s ago: executing program 5 (id=2477): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001d00010000000000000000000700", @ANYRES32=r1, @ANYBLOB="000096000a000200aaaaaaaaaa0c00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 5.936914416s ago: executing program 3 (id=2478): r0 = socket$inet(0x2, 0x2, 0x1) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) r5 = socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000200)=[{&(0x7f00000000c0)="ee", 0xfe23}], 0x1}}], 0x400000000000181, 0x9200000000000080) recvmmsg(r6, 0x0, 0x0, 0x7ffeedc0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000200), 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) 5.920469959s ago: executing program 1 (id=2479): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4400, 0x3, @dev={0xfe, 0x80, '\x00', 0x23}, 0x3}, 0x1c) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r1, 0x8b2c, &(0x7f0000000040)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8, 0x1b, 0x1}]}, 0x28}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r4 = io_uring_setup(0x4f41, &(0x7f0000000080)={0x0, 0xfffffffc, 0x800, 0xfffffffe, 0x800001b4}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000003740)=""/4096, 0x1900}], 0x0, 0x11a}, 0x20) fallocate(r3, 0x0, 0x0, 0x1001f0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8b27, &(0x7f0000000040)) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, 0x0}, 0x3000c041) socket$kcm(0x10, 0x2, 0x4) 5.830330911s ago: executing program 2 (id=2480): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1}) close(r0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r6, &(0x7f00000003c0)="dbe0429219cae15cd11b56786a578f7bcef5f4483210e810f124684394f0ffd499f353824e9b4b21b7e5979c58fc88c88da968ddcd22", &(0x7f0000000180)=@udp6=r0, 0x5}, 0x20) r7 = socket$rxrpc(0x21, 0x2, 0x2) r8 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xfe1e, 0x0, 0x1, 0xb5}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000040)=0xfffffff9, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r8, 0x47f6, 0x0, 0x2, 0x0, 0x0) setsockopt$sock_int(r7, 0x1, 0x20, &(0x7f0000000080)=0xffff3759, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) 5.71991824s ago: executing program 5 (id=2481): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4400, 0x3, @dev={0xfe, 0x80, '\x00', 0x23}, 0x3}, 0x1c) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r2, 0x8b2c, &(0x7f0000000040)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8, 0x1b, 0x1}]}, 0x28}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r5 = io_uring_setup(0x4f41, &(0x7f0000000080)={0x0, 0xfffffffc, 0x800, 0xfffffffe, 0x800001b4}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000003740)=""/4096, 0x1900}], 0x0, 0x11a}, 0x20) fallocate(r4, 0x0, 0x0, 0x1001f0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000300)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r7, 0x8b27, &(0x7f0000000040)) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, 0x0}, 0x3000c041) socket$kcm(0x10, 0x2, 0x4) inotify_init1(0x0) 4.768865515s ago: executing program 3 (id=2482): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r1}, 0x18) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x40187013, 0x0) read(r0, &(0x7f0000000180)=""/65, 0x41) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r2, 0x8800000) open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53) socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) read$eventfd(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f00000002c0)={0x2, 0x2, {0x2, 0x0, 0x6, 0x0, 0x8}, 0x101}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x1003, r6, &(0x7f0000000480)="e4b5eea546", 0x5, 0x494}]) 4.687289984s ago: executing program 2 (id=2483): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000180)=0x200, 0x12) futex(0x0, 0x18d, 0x2, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x3a2, &(0x7f00000006c0)={{0x12, 0x1, 0x300, 0xc0, 0xc5, 0x1, 0x10, 0x20df, 0x1, 0x87c8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x390, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x5e, 0xfb, 0x6, 0x56, 0x2c, 0xff, 0x8, [], [{{0x9, 0x5, 0xa, 0x1, 0x400, 0xe, 0x4, 0x0, [@generic={0x71, 0x10, "6c39a7d15452c9251813f6c331045200945a3cc1775a689d3031c3763f5ed7b323d2dfebcc1b31fe4603de127a86e001f4a6fb0b24ac812d604c8ecf5e443e001c9ef5fd397f5b505ea19c36b64d0df727746612a36b1eb883069f828351c320956e21828a5d3e11935ca5d66ecf8f"}, @generic={0xe7, 0x7, "94379adebb6fc25862f4ab7b14ab0afd16377c3913cad0bf07a4dfb20ddb77711624be6eb321c87178449470173926a3250551c0790b5a09cafe64b31e7db964039ffcde0f4eeca212a234a6c50ab2ceadf869ad1afd2d5d6a205a44fef53386cd955b685ddd27061fc7050e4ed419c51e0658df697e0e3689d7b5160481354b8ad74e18e65c154d446deab8b57288400032b2193c7169947537e2b620d8751546a1a886c2c075fb3b52035b41e5e54e76fb474545829ec9428a41b024ebdd47bf657aeef2068b8d134664b896e118b5b42b926789e57eeb0029b9300bc19688763c5a0486"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x31, 0x0, 0xd, [@generic={0xd6, 0x4, "d8ff8d97b06341a47e764076d7e92e9b22ca1b537741bd833af62e1264f8a1b9cd3eac53b76bca8fce12e645360023d0694e50a60feb859b26e143ce22a9f760a23afd7846b2aa974beece3320387537cc5bd059fefba641096967233c0f769b231c2d975f64c46ec8fe9a9fad0bb403f4b0c41017cd227ce666d19b23abe0b9655dafa9216613f280ca5d59a0b75410df9721e560368ea2cbb5c2af8b4c48d008c20e7e42f3dce60ffb3efeb43ec1c7a56a92bf5a3fc7d30369b0a5fefd6353aa06a69930c69b68bd7543280179264813bb5eb5"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xeb, 0x401}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x8, 0x6, 0x6, [@generic={0x4b, 0x2, "efaef70b90321da279769c0cd786c1b2f33aef1c53eea85467b98b810f7be1ac4be65a552b9cbe8d86f31b0af53671985702226cf0aee37aaf35e47f34e3934c9312c67700110d46d5"}, @generic={0xc8, 0x1, "12868cdf40432f10c545daa71ab515d090d87c85b065364e4128991d69fdac8730b5ff95926c91ff66c206df8c908b927b34bb0036d51df389417c56d55769e7a0d104ec2ec2430c0213da8cc470eb9ec3bdd6098d4066bc027f989f35ddf4b11622b1b501e32de1b7ecae8913ed11ce9cfc41b6d32a3bf0f163fb73d05c4910f5deaa8747ff99c3d4a825925bbbbd4e1ec8637e28343ab3657e1434721f0705e02ae6ecf0e8975ebefdac4f8831f242ae653f71e3a84d107896b8376daf83c07667a50c9e89"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x6, 0x5, 0x31}}, {{0x9, 0x5, 0xd, 0x2, 0x10, 0x0, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x41, 0xa8, 0x6}}]}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x81d}}, {0x13, &(0x7f0000000000)=@string={0xed, 0x3, "e1f626ec02553a7617e983c09cc8d0f2e98f0c18fa6a5df2a1bc1d891f7610908f868cc779730c25b9855c26338bd19ce8dc83db3eee6d814fd6ef9b22ee3246ecf543471aed33bbb5a52d09a40bab5bab579b1c55057afa51970145b33945809eb8afd1df75c2aef4d171f5fc7aa14db1bd4f32af2e5c175733a0d96f73ca5538eddb46b5df34949bae234066a518913ec555a11177a63a36da4ef3fa662f10c49f35e8a45beaa63ca758d5358dca7c1840fecc96de3fc9b6184115eb373f0ff2c81c680952b7eb5f2812000fbad9baecfc590e948a35b7af585df8cfbd67f153fde9405dfaa1fe33902455bf0c2d795a"}}]}) 4.641048709s ago: executing program 1 (id=2484): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000240)={0x56c, 0x6072, 0x2f74d985, 0x2}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @remote}, 0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000000540)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, &(0x7f0000000740)) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000100)}, 0xa28}], 0x1, 0x1, 0x0) getrlimit(0xa, 0x0) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0) read(r5, &(0x7f0000000080)=""/186, 0xba) socket$pppl2tp(0x18, 0x1, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x501180, 0x80) 4.602184302s ago: executing program 4 (id=2485): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c000004"], 0x26c0}}, 0x4010) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1_to_bond\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x60, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x40d0) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4c0}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0xa, [{{0x2, 0x0, @broadcast}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e20, @private=0xa010102}}, {{0x2, 0x4e21, @private=0xa010100}}, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}}, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e22, @empty}}, {{0x2, 0x4e20, @broadcast}}, {{0x2, 0x4e22, @remote}}]}, 0x590) setsockopt$inet_group_source_req(r9, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) ioctl$KVM_RUN(r8, 0xae80, 0x0) 3.714605879s ago: executing program 3 (id=2486): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001dc00)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) socket(0x2, 0x80805, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) close(r3) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x80, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x104}}, 0x0) 3.637149559s ago: executing program 1 (id=2487): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000200), 0x200080, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r3, 0x80044d18, &(0x7f0000000040)) r4 = fcntl$getown(r2, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x2, r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1401, 0x0) writev(r5, &(0x7f0000000080)=[{&(0x7f00000000c0)="5bffd08307d80c79b1cb7b5f0c5b4d719c69c8513f748fbe425a7bc388c9019bef114779f7a10dc03a883d6e16a0a704f74297f381ff1db75098a9b38bb67206a7ff22e6ca46dc760bdad8a79d5951988c55a368dd1132ba7f129c2e65441eaa27492c069488df0881f123ca01ae873f5b36eb0fddb8f07420f5484d81cabde167c87ffbab6a94b24b5537bb1a08d56469f516fd4b7c66e2ac50d5ff4e52c628d0a89e53d0e78582a5ab2a2c714f66", 0xfe7c}], 0x1) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0, 0xffffffffffffffff}) read$rfkill(r6, &(0x7f0000000140), 0x8) openat$vcs(0xffffff9c, 0x0, 0x6a201, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) rseq(0x0, 0x1f00, 0x0, 0x0) preadv(r0, &(0x7f0000000440)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1, 0x8c0, 0x2bd6) 3.126837508s ago: executing program 5 (id=2488): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$6lowpan_enable(r3, &(0x7f0000000200)='0', 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) ioctl$FICLONE(r0, 0x40049409, r2) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000000780)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0xbc0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffdfffffffff, 0x0, 0x0, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000002000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2c5, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x100000000000, 0x0, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode', @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB]) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) 2.953561082s ago: executing program 3 (id=2489): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001dc00)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) socket(0x2, 0x80805, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f670600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe326c2ed0a432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1b172191d359645fae2d074ea5724ab77ea04fe507938b1213cdd4a92860e59808689382734d24b3123dd40c6d612c8a19948cd257748b1e7324adddbe61d51013f7d6b313c6df7b7b29678d70fc94dcc3e99e2472e78968ed94e7a54988656e8fff6b1d9b9993c71edd5cc10a2bea8d94d751b77fa7c48c712af35a9ffe670e8fa451942f48741119496bc30137e1202aed6bb5cd5c2d0256d049e4a335e2ea5545e5624be2391c37c0a2ae3bbb5b58778b85424bcdb84358359b2cb2782fc0e82f17b12d641ce6a72ab0ac794f878140897703bebe4420115d26675f27598841965fa91088252"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) close(r3) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x80, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x104}}, 0x0) 2.560904977s ago: executing program 4 (id=2490): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 2.147396253s ago: executing program 4 (id=2491): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001d00010000000000000000000700", @ANYRES32=r1, @ANYBLOB="000096000a000200aaaaaaaaaa0c00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 1.717984028s ago: executing program 2 (id=2492): r0 = memfd_create(&(0x7f0000000840)='\x01\x00\x00\x00\x00\x00\x00\x00\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xce\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1j$S\xfc\xb1[N\x8d\xcfI\xc8\x91\x87\x1fuYG7}%)\xb9\x00\x00\x00\x00\x00\x00\x00\x80W\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]^\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1f2\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x9e\x035\x8a@\xd4\x1c\xe0\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf}\x0e\a\x00\x91U\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8Y26\xa6u<\xca@H\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb16\xb9\x12v\x1dN\xe1,_3\xa9\xa36\xaa.Cj\xd4\ah\x92j\x86\xe1\x1f\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6\x8fn\xa0m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xc3\xe0\xf2\x10\xe00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, 0x0, 0x0) r5 = io_uring_setup(0x4c0c, &(0x7f0000000140)={0x0, 0x2637, 0x80, 0x2, 0x10001d4}) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, 0x0, 0x1) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r6) accept$unix(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) fallocate(r0, 0x0, 0x0, 0x8) ftruncate(r0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x8, 0x7fe2, 0x1}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) r9 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r9, 0x0) 1.669006368s ago: executing program 4 (id=2493): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000200), 0x200080, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r3, 0x80044d18, &(0x7f0000000040)) r4 = fcntl$getown(r2, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x2, r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1401, 0x0) writev(r5, &(0x7f0000000080)=[{&(0x7f00000000c0)="5bffd08307d80c79b1cb7b5f0c5b4d719c69c8513f748fbe425a7bc388c9019bef114779f7a10dc03a883d6e16a0a704f74297f381ff1db75098a9b38bb67206a7ff22e6ca46dc760bdad8a79d5951988c55a368dd1132ba7f129c2e65441eaa27492c069488df0881f123ca01ae873f5b36eb0fddb8f07420f5484d81cabde167c87ffbab6a94b24b5537bb1a08d56469f516fd4b7c66e2ac50d5ff4e52c628d0a89e53d0e78582a5ab2a2c714f66", 0xfe7c}], 0x1) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0, 0xffffffffffffffff}) read$rfkill(r6, &(0x7f0000000140), 0x8) openat$vcs(0xffffff9c, 0x0, 0x6a201, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) rseq(0x0, 0x1f00, 0x0, 0x0) preadv(r0, &(0x7f0000000440)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1, 0x8c0, 0x2bd6) 960.887872ms ago: executing program 5 (id=2494): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4400, 0x3, @dev={0xfe, 0x80, '\x00', 0x23}, 0x3}, 0x1c) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r1, 0x8b2c, &(0x7f0000000040)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8, 0x1b, 0x1}]}, 0x28}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r4 = io_uring_setup(0x4f41, &(0x7f0000000080)={0x0, 0xfffffffc, 0x800, 0xfffffffe, 0x800001b4}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000003740)=""/4096, 0x1900}], 0x0, 0x11a}, 0x20) fallocate(r3, 0x0, 0x0, 0x1001f0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8b27, &(0x7f0000000040)) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, 0x0}, 0x3000c041) socket$kcm(0x10, 0x2, 0x4) 867.285053ms ago: executing program 1 (id=2495): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000f000008000000180001801400020073797a5f74756e0000000000000000001800028004000100100003800c00018008000100000000001df25dce4b69754a11c5f8b27e767c39afa4d3b320719589c4721c9e6a6f606af3604b539e493c13ca67747cc6b75d9107c96c2971f9d6752c5b840f529ff5"], 0x44}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newqdisc={0xcc, 0x10, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, 0x0, {}, {}, {0xe}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0xa, {0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x70, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc, 0x2, 0x9, 0x3e, 0x1, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x81, 0x7, 0x2, 0x7, 0x2, 0x3, 0x80000001, 0x2}}, {0x8, 0x2, [0x7db5, 0x6]}}, {{0x1c, 0x1, {0x9, 0x2, 0x3, 0x7, 0x0, 0x5, 0x7fff, 0x3}}, {0xa, 0x2, [0x1000, 0xd23, 0x6]}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x14}, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x189900, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x5100, 0x0) munlock(&(0x7f000043a000/0x4000)=nil, 0x4000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x80) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x58}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000b00000008000300000000000c000180"], 0x28}}, 0x0) r5 = socket$caif_stream(0x25, 0x1, 0x5) setsockopt$CAIFSO_LINK_SELECT(r5, 0x116, 0x7f, &(0x7f00000000c0)=0x80000001, 0x4) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000004"], 0x114}], 0x1}, 0x0) 730.800627ms ago: executing program 3 (id=2496): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r1}, 0x18) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x40187013, 0x0) read(r0, &(0x7f0000000180)=""/65, 0x41) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r2, 0x8800000) open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53) socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) read$eventfd(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f00000002c0)={0x2, 0x2, {0x2, 0x0, 0x6, 0x0, 0x8}, 0x101}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x1003, r6, &(0x7f0000000480)="e4b5eea546", 0x5, 0x494}]) 723.595645ms ago: executing program 2 (id=2497): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x2000090) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = epoll_create1(0x80000) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000006000000000000000100008d"], 0x0, 0x32, 0x0, 0x1, 0x1}, 0x28) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYBLOB="0978ffff00"/20, @ANYRES32=r2, @ANYRES32, @ANYRES16=r1], 0x50) r3 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f0000000840)={{0x2, @name="53093a1e6031f1f8d194c96dd8fdd176d3ff381c81c2974e9bbffa15687ba984"}, "4516bcf37cc8c9efde2deedc3e086c39cecc5aa6e015689828468eb9f8bc43c5", 0x3}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@private2={0xfc, 0x2, '\x00', 0x1}}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x1000) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="28010000100007000000000200000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb24000900"], 0x128}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r5], 0x10c}, 0x1, 0x0, 0x0, 0x40008d1}, 0x408d4) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r8, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r0, &(0x7f0000000340)={0xa000001c}) 49.630669ms ago: executing program 1 (id=2498): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x8f}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) (fail_nth: 2) 0s ago: executing program 5 (id=2499): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x2040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) bind$inet(r4, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r5, &(0x7f0000001380)={0x2020}, 0x2020) vmsplice(r6, &(0x7f0000000240)=[{&(0x7f0000001340)}], 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='veth1_vlan\x00', 0x10) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)="08001efbb0", 0x5}, {&(0x7f0000000180)="d0849e", 0x3}], 0x2, 0x0, 0x0, 0x60000000}, 0x20000004) timer_getoverrun(0x0) read$FUSE(r3, &(0x7f0000000880)={0x2020}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x182) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101343) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r7, 0x400454a4, &(0x7f00000000c0)) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40094}, 0x20000804) kernel console output (not intermixed with test programs): name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 802.568011][ T30] audit: type=1400 audit(2000000323.005:12352): avc: denied { write } for pid=15071 comm="syz.4.2192" path="/dev/bus/usb/008/001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 802.592420][ C0] vkms_vblank_simulate: vblank timer overrun [ 802.612856][T15099] netlink: 'syz.1.2194': attribute type 6 has an invalid length. [ 802.634041][ T30] audit: type=1400 audit(2000000323.005:12353): avc: denied { create } for pid=15071 comm="syz.4.2192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 802.653785][ C0] vkms_vblank_simulate: vblank timer overrun [ 802.664690][ T30] audit: type=1400 audit(2000000323.035:12354): avc: denied { read write } for pid=15064 comm="syz.2.2191" name="vbi9" dev="devtmpfs" ino=1007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 802.688202][ C0] vkms_vblank_simulate: vblank timer overrun [ 802.734012][ T30] audit: type=1400 audit(2000000323.035:12355): avc: denied { open } for pid=15064 comm="syz.2.2191" path="/dev/vbi9" dev="devtmpfs" ino=1007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 802.757464][ C0] vkms_vblank_simulate: vblank timer overrun [ 802.766070][ T30] audit: type=1400 audit(2000000323.035:12356): avc: denied { ioctl } for pid=15064 comm="syz.2.2191" path="/dev/vbi9" dev="devtmpfs" ino=1007 ioctlcmd=0x5647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 802.790989][ C0] vkms_vblank_simulate: vblank timer overrun [ 802.850264][ T30] audit: type=1400 audit(2000000323.035:12357): avc: denied { map_create } for pid=15064 comm="syz.2.2191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 802.869553][ C0] vkms_vblank_simulate: vblank timer overrun [ 802.904295][ T30] audit: type=1400 audit(2000000323.065:12358): avc: denied { ioctl } for pid=15071 comm="syz.4.2192" path="socket:[47187]" dev="sockfs" ino=47187 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 803.035728][ T30] audit: type=1400 audit(2000000323.065:12359): avc: denied { prog_load } for pid=15071 comm="syz.4.2192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 803.825027][ T9] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 804.121359][ T9] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 804.129919][ T9] usb 2-1: config 0 has no interface number 0 [ 804.137892][ T9] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 804.498876][ T5908] hid-generic 0401:0009:0002.0023: item fetching failed at offset 6/131 [ 804.539382][ T9] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 804.625018][ T5908] hid-generic 0401:0009:0002.0023: probe with driver hid-generic failed with error -22 [ 804.647019][ T9] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 804.661700][ T9] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 804.673420][ T9] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 804.684209][ T9] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 804.697639][ T9] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 804.706706][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.718602][ T9] usb 2-1: config 0 descriptor?? [ 804.737804][T15112] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 804.746060][T15112] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 804.787053][ T9] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 805.282187][T15112] ldusb 2-1:0.55: Write buffer overflow, 140 bytes dropped [ 805.308250][ T9] usb 2-1: USB disconnect, device number 32 [ 805.319249][ T9] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 805.810791][T15169] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2566 sclass=netlink_xfrm_socket pid=15169 comm=syz.5.2206 [ 806.414218][T15181] FAULT_INJECTION: forcing a failure. [ 806.414218][T15181] name failslab, interval 1, probability 0, space 0, times 0 [ 806.474931][T15181] CPU: 0 UID: 0 PID: 15181 Comm: syz.1.2209 Not tainted syzkaller #0 PREEMPT(full) [ 806.474956][T15181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 806.474967][T15181] Call Trace: [ 806.474973][T15181] [ 806.474979][T15181] dump_stack_lvl+0x16c/0x1f0 [ 806.475009][T15181] should_fail_ex+0x512/0x640 [ 806.475027][T15181] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 806.475048][T15181] should_failslab+0xc2/0x120 [ 806.475071][T15181] kmem_cache_alloc_noprof+0x75/0x6e0 [ 806.475088][T15181] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 806.475107][T15181] ? getname_flags.part.0+0x4c/0x550 [ 806.475128][T15181] ? getname_flags.part.0+0x4c/0x550 [ 806.475143][T15181] getname_flags.part.0+0x4c/0x550 [ 806.475162][T15181] getname_flags+0x93/0xf0 [ 806.475182][T15181] user_path_at+0x24/0x60 [ 806.475203][T15181] __x64_sys_chmod+0xe7/0x1c0 [ 806.475228][T15181] ? __pfx___x64_sys_chmod+0x10/0x10 [ 806.475251][T15181] ? xfd_validate_state+0x61/0x180 [ 806.475278][T15181] do_syscall_64+0xcd/0xfa0 [ 806.475299][T15181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.475317][T15181] RIP: 0033:0x7f935f78eec9 [ 806.475332][T15181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 806.475347][T15181] RSP: 002b:00007f9360624038 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 806.475365][T15181] RAX: ffffffffffffffda RBX: 00007f935f9e6090 RCX: 00007f935f78eec9 [ 806.475376][T15181] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000200000000280 [ 806.475386][T15181] RBP: 00007f9360624090 R08: 0000000000000000 R09: 0000000000000000 [ 806.475395][T15181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 806.475405][T15181] R13: 00007f935f9e6128 R14: 00007f935f9e6090 R15: 00007fff6fe6aab8 [ 806.475430][T15181] [ 806.665041][ C0] vkms_vblank_simulate: vblank timer overrun [ 806.918521][ T5960] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 807.044746][ T870] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 807.074728][ T5960] usb 4-1: Using ep0 maxpacket: 8 [ 807.094816][ T5960] usb 4-1: config 0 has an invalid interface number: 151 but max is 1 [ 807.103757][ T5960] usb 4-1: config 0 has no interface number 1 [ 807.142555][ T5960] usb 4-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 807.204836][ T870] usb 6-1: Using ep0 maxpacket: 16 [ 807.249054][ T870] usb 6-1: unable to get BOS descriptor or descriptor too short [ 807.292346][ T5960] usb 4-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 807.330650][ T870] usb 6-1: config 4 has an invalid interface number: 94 but max is 0 [ 807.347557][ T30] kauditd_printk_skb: 243 callbacks suppressed [ 807.347572][ T30] audit: type=1400 audit(2000000328.005:12603): avc: denied { read } for pid=15197 comm="syz.2.2213" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 807.379295][ T30] audit: type=1400 audit(2000000328.005:12604): avc: denied { open } for pid=15197 comm="syz.2.2213" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 807.381660][ T870] usb 6-1: config 4 has an invalid interface number: 216 but max is 0 [ 807.403053][ C0] vkms_vblank_simulate: vblank timer overrun [ 807.420132][ T5960] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 807.421213][ T30] audit: type=1400 audit(2000000328.035:12605): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 807.457642][ T30] audit: type=1400 audit(2000000328.105:12606): avc: denied { shutdown } for pid=15197 comm="syz.2.2213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 807.459283][ T5960] usb 4-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 807.512796][ T30] audit: type=1400 audit(2000000328.145:12607): avc: denied { read write } for pid=5809 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 807.537028][ C0] vkms_vblank_simulate: vblank timer overrun [ 807.547563][ T30] audit: type=1400 audit(2000000328.145:12608): avc: denied { open } for pid=5809 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 807.571730][ C0] vkms_vblank_simulate: vblank timer overrun [ 807.582419][ T870] usb 6-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 807.591808][ T5960] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 807.607439][ T30] audit: type=1400 audit(2000000328.145:12609): avc: denied { ioctl } for pid=5809 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 807.607958][ T870] usb 6-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 807.699567][ T30] audit: type=1400 audit(2000000328.355:12610): avc: denied { read write } for pid=5811 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 807.723836][ C0] vkms_vblank_simulate: vblank timer overrun [ 807.951280][ T5960] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 807.963548][ T5960] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 807.969047][ T30] audit: type=1400 audit(2000000328.385:12611): avc: denied { read write open } for pid=5811 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 808.017875][ T5960] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 808.029374][ T870] usb 6-1: config 4 has 2 interfaces, different from the descriptor's value: 1 [ 808.038939][ T870] usb 6-1: config 4 has no interface number 0 [ 808.046053][ T870] usb 6-1: config 4 has no interface number 1 [ 808.054784][ T5960] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 808.066068][ T5960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.074037][ T5960] usb 4-1: Product: syz [ 808.078386][ T5960] usb 4-1: Manufacturer: syz [ 808.083022][ T5960] usb 4-1: SerialNumber: syz [ 808.088008][ T870] usb 6-1: config 4 interface 94 altsetting 251 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 808.184188][ T870] usb 6-1: config 4 interface 94 altsetting 251 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 808.205698][ T5960] usb 4-1: config 0 descriptor?? [ 808.211090][ T870] usb 6-1: too many endpoints for config 4 interface 216 altsetting 255: 141, using maximum allowed: 30 [ 808.223649][T15180] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 808.232946][ T5960] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 808.249884][ T9] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 808.256150][ T5960] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 808.259092][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.270940][ T870] usb 6-1: config 4 interface 216 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 808.270950][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.288372][ T30] audit: type=1400 audit(2000000328.385:12612): avc: denied { ioctl } for pid=5811 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 808.349858][ T870] usb 6-1: config 4 interface 216 altsetting 255 bulk endpoint 0xD has invalid maxpacket 16 [ 808.442275][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 808.654017][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 808.669626][ T9] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 808.684514][ T870] usb 6-1: config 4 interface 216 altsetting 255 has a duplicate endpoint with address 0x3, skipping [ 808.693333][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.716482][ T9] usb 5-1: config 0 descriptor?? [ 808.717719][ T5960] usb 4-1: USB disconnect, device number 39 [ 808.758790][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 808.764678][ T870] usb 6-1: config 4 interface 216 altsetting 255 has 4 endpoint descriptors, different from the interface descriptor's value: 141 [ 808.789773][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 808.835369][ T870] usb 6-1: config 4 interface 94 has no altsetting 0 [ 808.849867][ T5812] udevd[5812]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 808.855717][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 808.885926][ T870] usb 6-1: config 4 interface 216 has no altsetting 0 [ 808.940477][ T870] usb 6-1: New USB device found, idVendor=20df, idProduct=0001, bcdDevice=87.c8 [ 808.966696][ T870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.981630][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 808.985547][ T870] usb 6-1: Product: syz [ 808.999854][ T870] usb 6-1: Manufacturer: 唂瘺삃좜 [ 809.010714][ T870] usb 6-1: SerialNumber: syz [ 809.405294][ T9] usb 5-1: media controller created [ 809.412567][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 809.429422][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 809.440447][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 809.461847][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input38 [ 809.484011][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 809.496865][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 809.668205][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 809.704990][ T9] dvb-usb: error while querying for an remote control event. [ 809.803481][ T870] cdc_acm 6-1:4.94: skipping garbage [ 809.865866][ T870] cdc_acm 6-1:4.94: skipping garbage [ 809.895183][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 809.915858][ T870] cdc_acm 6-1:4.216: skipping garbage [ 809.917922][ T9] dvb-usb: error while querying for an remote control event. [ 809.934354][ T5892] usb 5-1: USB disconnect, device number 41 [ 809.959482][ T870] usb 6-1: USB disconnect, device number 14 [ 810.125592][ T5892] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 810.152270][T15295] netlink: 'syz.5.2220': attribute type 6 has an invalid length. [ 810.310554][T15314] FAULT_INJECTION: forcing a failure. [ 810.310554][T15314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 810.348609][T15314] CPU: 0 UID: 0 PID: 15314 Comm: syz.1.2221 Not tainted syzkaller #0 PREEMPT(full) [ 810.348633][T15314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 810.348643][T15314] Call Trace: [ 810.348648][T15314] [ 810.348655][T15314] dump_stack_lvl+0x16c/0x1f0 [ 810.348680][T15314] should_fail_ex+0x512/0x640 [ 810.348703][T15314] _copy_from_user+0x2e/0xd0 [ 810.348724][T15314] copy_msghdr_from_user+0x98/0x160 [ 810.348743][T15314] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 810.348780][T15314] ___sys_sendmsg+0xfe/0x1d0 [ 810.348800][T15314] ? __pfx____sys_sendmsg+0x10/0x10 [ 810.348818][T15314] ? __lock_acquire+0x622/0x1c90 [ 810.348870][T15314] __sys_sendmsg+0x16d/0x220 [ 810.348890][T15314] ? __pfx___sys_sendmsg+0x10/0x10 [ 810.348923][T15314] do_syscall_64+0xcd/0xfa0 [ 810.348945][T15314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.348962][T15314] RIP: 0033:0x7f935f78eec9 [ 810.348975][T15314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 810.348991][T15314] RSP: 002b:00007f9360645038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 810.349007][T15314] RAX: ffffffffffffffda RBX: 00007f935f9e5fa0 RCX: 00007f935f78eec9 [ 810.349018][T15314] RDX: 0000000000044004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 810.349027][T15314] RBP: 00007f9360645090 R08: 0000000000000000 R09: 0000000000000000 [ 810.349036][T15314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 810.349046][T15314] R13: 00007f935f9e6038 R14: 00007f935f9e5fa0 R15: 00007fff6fe6aab8 [ 810.349068][T15314] [ 810.514670][ C0] vkms_vblank_simulate: vblank timer overrun [ 810.676494][T15320] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2223'. [ 811.229986][T15337] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2226'. [ 811.240184][T15337] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2226'. [ 811.266593][T15337] ubi: mtd0 is already attached to ubi31 [ 811.781321][T15343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2228'. [ 811.881591][T15348] netlink: 'syz.2.2230': attribute type 1 has an invalid length. [ 811.890651][T15348] netlink: 'syz.2.2230': attribute type 3 has an invalid length. [ 811.899572][T15348] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2230'. [ 811.975056][ T9] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 812.059146][T15353] netlink: 'syz.2.2231': attribute type 6 has an invalid length. [ 812.142178][ T9] usb 6-1: config 54 has an invalid interface number: 154 but max is 0 [ 812.164727][ T9] usb 6-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 812.195048][ T9] usb 6-1: config 54 has no interface number 0 [ 812.208671][ T9] usb 6-1: config 54 interface 154 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 812.335904][T15362] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 812.342525][T15362] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 812.344621][ T9] usb 6-1: config 54 interface 154 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 812.364106][T15362] vhci_hcd vhci_hcd.0: Device attached [ 812.533653][ T30] kauditd_printk_skb: 265 callbacks suppressed [ 812.542808][ T30] audit: type=1400 audit(2000000333.105:12878): avc: denied { read } for pid=15359 comm="syz.2.2234" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 812.770485][ T9] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 812.789367][ T30] audit: type=1400 audit(2000000333.115:12879): avc: denied { open } for pid=15359 comm="syz.2.2234" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 812.790429][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.814193][ T30] audit: type=1400 audit(2000000333.405:12880): avc: denied { ioctl } for pid=15321 comm="syz.5.2224" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 812.852100][ T30] audit: type=1400 audit(2000000333.505:12881): avc: denied { prog_load } for pid=15357 comm="syz.3.2233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 812.872704][ T30] audit: type=1400 audit(2000000333.505:12882): avc: denied { bpf } for pid=15357 comm="syz.3.2233" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 812.898819][ T30] audit: type=1400 audit(2000000333.505:12883): avc: denied { execmem } for pid=15357 comm="syz.3.2233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 812.923294][T15363] usbip_core: unknown command [ 812.928974][T15363] vhci_hcd: unknown pdu 1953853036 [ 812.934433][T15363] usbip_core: unknown command [ 812.939440][ T9] usb 6-1: Product: syz [ 812.943785][ T2964] vhci_hcd: stop threads [ 812.948746][ T2964] vhci_hcd: release socket [ 812.953325][ T2964] vhci_hcd: disconnect device [ 812.958286][ T9] usb 6-1: Manufacturer: syz [ 812.963011][ T9] usb 6-1: SerialNumber: syz [ 813.120074][T12134] usb 40-1: enqueue for inactive port 0 [ 813.126806][ T30] audit: type=1400 audit(2000000333.635:12884): avc: denied { ioctl } for pid=15321 comm="syz.5.2224" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 813.155934][ T30] audit: type=1400 audit(2000000333.635:12885): avc: denied { ioctl } for pid=15321 comm="syz.5.2224" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 813.183340][ T30] audit: type=1400 audit(2000000333.685:12886): avc: denied { allowed } for pid=15354 comm="syz.4.2232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 813.202859][ C0] vkms_vblank_simulate: vblank timer overrun [ 813.277522][ T30] audit: type=1400 audit(2000000333.685:12887): avc: denied { create } for pid=15354 comm="syz.4.2232" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 813.315100][T15322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.335738][T15322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.383117][ T9] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 813.386398][ T13] usb 6-1: Failed to submit usb control message: -71 [ 813.419959][ T9] usb 6-1: USB disconnect, device number 15 [ 813.426479][ T13] usb 6-1: unable to send the bmi data to the device: -71 [ 813.443270][ T13] usb 6-1: unable to get target info from device [ 813.464667][ T13] usb 6-1: could not get target info (-71) [ 813.492359][ T13] usb 6-1: could not probe fw (-71) [ 813.610278][ T5892] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 813.628417][T12134] usb usb40-port1: attempt power cycle [ 813.829898][ T5892] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 813.848119][ T5892] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 813.941228][ T5892] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 813.964838][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.986758][ T5892] usb 5-1: config 0 descriptor?? [ 814.008807][ T5892] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 814.104762][ T5892] dvb-usb: bulk message failed: -22 (3/0) [ 814.572319][T12134] usb usb40-port1: unable to enumerate USB device [ 814.601444][ T5892] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 814.606283][T15407] FAULT_INJECTION: forcing a failure. [ 814.606283][T15407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 814.617026][ T5892] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 814.974365][ T5892] usb 5-1: media controller created [ 814.986834][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 815.015142][ T5892] dvb-usb: bulk message failed: -22 (6/0) [ 815.024747][T15407] CPU: 0 UID: 0 PID: 15407 Comm: syz.3.2239 Not tainted syzkaller #0 PREEMPT(full) [ 815.024776][T15407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 815.024783][T15407] Call Trace: [ 815.024788][T15407] [ 815.024792][T15407] dump_stack_lvl+0x16c/0x1f0 [ 815.024810][T15407] should_fail_ex+0x512/0x640 [ 815.024828][T15407] _copy_from_user+0x2e/0xd0 [ 815.024852][T15407] copy_msghdr_from_user+0x98/0x160 [ 815.024874][T15407] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 815.024894][T15407] ___sys_sendmsg+0xfe/0x1d0 [ 815.024912][T15407] ? __pfx____sys_sendmsg+0x10/0x10 [ 815.024923][T15407] ? __lock_acquire+0x622/0x1c90 [ 815.024953][T15407] __sys_sendmsg+0x16d/0x220 [ 815.024966][T15407] ? __pfx___sys_sendmsg+0x10/0x10 [ 815.024987][T15407] do_syscall_64+0xcd/0xfa0 [ 815.025001][T15407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.025013][T15407] RIP: 0033:0x7f376118eec9 [ 815.025022][T15407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 815.025033][T15407] RSP: 002b:00007f37620ea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 815.025044][T15407] RAX: ffffffffffffffda RBX: 00007f37613e5fa0 RCX: 00007f376118eec9 [ 815.025051][T15407] RDX: 0000000040004000 RSI: 0000200000000840 RDI: 0000000000000005 [ 815.025059][T15407] RBP: 00007f37620ea090 R08: 0000000000000000 R09: 0000000000000000 [ 815.025065][T15407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 815.025071][T15407] R13: 00007f37613e6038 R14: 00007f37613e5fa0 R15: 00007fffcd988f08 [ 815.025086][T15407] [ 815.193861][ C0] vkms_vblank_simulate: vblank timer overrun [ 815.209501][ T5892] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 815.245863][ T5892] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input39 [ 815.257957][ T5892] dvb-usb: schedule remote query interval to 150 msecs. [ 815.264910][ T5892] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 815.425860][ T5892] dvb-usb: bulk message failed: -22 (1/0) [ 815.431623][ T5892] dvb-usb: error while querying for an remote control event. [ 815.582095][ T5865] usb 5-1: USB disconnect, device number 42 [ 815.674648][T15434] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2242'. [ 815.683646][T15434] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2242'. [ 815.737163][T15434] ubi: mtd0 is already attached to ubi31 [ 815.810663][ T5892] dvb-usb: bulk message failed: -22 (1/0) [ 816.066507][ T5892] dvb-usb: error while querying for an remote control event. [ 816.118702][ T5865] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 816.169664][T15450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2245'. [ 817.556501][ T30] kauditd_printk_skb: 185 callbacks suppressed [ 817.556541][ T30] audit: type=1400 audit(2000000338.205:13073): avc: denied { write } for pid=15502 comm="syz.5.2252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 818.132910][ T30] audit: type=1400 audit(2000000338.215:13074): avc: denied { write } for pid=15475 comm="syz.2.2251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 818.235851][ T30] audit: type=1400 audit(2000000338.245:13075): avc: denied { execmem } for pid=15475 comm="syz.2.2251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 818.340772][ T30] audit: type=1400 audit(2000000338.335:13076): avc: denied { map_create } for pid=15505 comm="syz.4.2253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 818.367823][ T5826] Bluetooth: hci4: unexpected event for opcode 0x2042 [ 818.440878][ T30] audit: type=1400 audit(2000000338.335:13077): avc: denied { bpf } for pid=15505 comm="syz.4.2253" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 818.538690][ T30] audit: type=1400 audit(2000000338.335:13078): avc: denied { map_read map_write } for pid=15505 comm="syz.4.2253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 818.560947][ T30] audit: type=1400 audit(2000000338.365:13079): avc: denied { read } for pid=15502 comm="syz.5.2252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 818.588961][ T30] audit: type=1400 audit(2000000338.455:13080): avc: denied { create } for pid=15475 comm="syz.2.2251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 818.638441][T15516] FAULT_INJECTION: forcing a failure. [ 818.638441][T15516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 818.654293][T15516] CPU: 0 UID: 0 PID: 15516 Comm: syz.2.2255 Not tainted syzkaller #0 PREEMPT(full) [ 818.654317][T15516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 818.654328][T15516] Call Trace: [ 818.654335][T15516] [ 818.654342][T15516] dump_stack_lvl+0x16c/0x1f0 [ 818.654371][T15516] should_fail_ex+0x512/0x640 [ 818.654394][T15516] _copy_from_user+0x2e/0xd0 [ 818.654416][T15516] copy_msghdr_from_user+0x98/0x160 [ 818.654438][T15516] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 818.654472][T15516] ___sys_sendmsg+0xfe/0x1d0 [ 818.654495][T15516] ? __pfx____sys_sendmsg+0x10/0x10 [ 818.654514][T15516] ? __lock_acquire+0x622/0x1c90 [ 818.654571][T15516] __sys_sendmsg+0x16d/0x220 [ 818.654597][T15516] ? __pfx___sys_sendmsg+0x10/0x10 [ 818.654634][T15516] do_syscall_64+0xcd/0xfa0 [ 818.654657][T15516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.654681][T15516] RIP: 0033:0x7f6ad838eec9 [ 818.654695][T15516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 818.654712][T15516] RSP: 002b:00007f6ad91b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 818.654729][T15516] RAX: ffffffffffffffda RBX: 00007f6ad85e5fa0 RCX: 00007f6ad838eec9 [ 818.654740][T15516] RDX: 0000000040004000 RSI: 0000200000000840 RDI: 0000000000000005 [ 818.654755][T15516] RBP: 00007f6ad91b1090 R08: 0000000000000000 R09: 0000000000000000 [ 818.654766][T15516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 818.654777][T15516] R13: 00007f6ad85e6038 R14: 00007f6ad85e5fa0 R15: 00007fff3c87e128 [ 818.654803][T15516] [ 818.816452][ T30] audit: type=1400 audit(2000000338.455:13081): avc: denied { getopt } for pid=15475 comm="syz.2.2251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 818.838583][ T30] audit: type=1400 audit(2000000338.465:13082): avc: denied { read } for pid=15475 comm="syz.2.2251" dev="nsfs" ino=4026533081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 819.223713][T15521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2250'. [ 819.232814][T15521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2250'. [ 819.256915][T15521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2250'. [ 819.265996][T15521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2250'. [ 819.670155][T15532] FAULT_INJECTION: forcing a failure. [ 819.670155][T15532] name failslab, interval 1, probability 0, space 0, times 0 [ 819.701272][T15532] CPU: 0 UID: 0 PID: 15532 Comm: syz.5.2260 Not tainted syzkaller #0 PREEMPT(full) [ 819.701300][T15532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 819.701311][T15532] Call Trace: [ 819.701318][T15532] [ 819.701325][T15532] dump_stack_lvl+0x16c/0x1f0 [ 819.701351][T15532] should_fail_ex+0x512/0x640 [ 819.701373][T15532] ? __kmalloc_cache_noprof+0x5f/0x780 [ 819.701396][T15532] should_failslab+0xc2/0x120 [ 819.701423][T15532] __kmalloc_cache_noprof+0x72/0x780 [ 819.701443][T15532] ? alloc_pipe_info+0x10e/0x590 [ 819.701473][T15532] ? alloc_pipe_info+0x10e/0x590 [ 819.701498][T15532] alloc_pipe_info+0x10e/0x590 [ 819.701526][T15532] splice_direct_to_actor+0x77d/0xa30 [ 819.701551][T15532] ? __pfx_direct_splice_actor+0x10/0x10 [ 819.701577][T15532] ? find_held_lock+0x2b/0x80 [ 819.701594][T15532] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 819.701615][T15532] ? get_pid_task+0xfc/0x250 [ 819.701644][T15532] do_splice_direct+0x174/0x240 [ 819.701667][T15532] ? __pfx_do_splice_direct+0x10/0x10 [ 819.701691][T15532] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 819.701719][T15532] ? rw_verify_area+0xcf/0x6c0 [ 819.701741][T15532] do_sendfile+0xb06/0xe50 [ 819.701767][T15532] ? __pfx_do_sendfile+0x10/0x10 [ 819.701788][T15532] ? __fget_files+0x20e/0x3c0 [ 819.701816][T15532] __x64_sys_sendfile64+0x1d8/0x220 [ 819.701846][T15532] ? ksys_write+0x1ac/0x250 [ 819.701867][T15532] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 819.701901][T15532] do_syscall_64+0xcd/0xfa0 [ 819.701924][T15532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.701942][T15532] RIP: 0033:0x7f791dd8eec9 [ 819.701958][T15532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 819.701975][T15532] RSP: 002b:00007f791ec31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 819.701993][T15532] RAX: ffffffffffffffda RBX: 00007f791dfe5fa0 RCX: 00007f791dd8eec9 [ 819.702005][T15532] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 819.702015][T15532] RBP: 00007f791ec31090 R08: 0000000000000000 R09: 0000000000000000 [ 819.702026][T15532] R10: 0000000000fffe80 R11: 0000000000000246 R12: 0000000000000001 [ 819.702037][T15532] R13: 00007f791dfe6038 R14: 00007f791dfe5fa0 R15: 00007fff512e2de8 [ 819.702096][T15532] [ 820.102258][T15544] FAULT_INJECTION: forcing a failure. [ 820.102258][T15544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 820.116974][T15544] CPU: 0 UID: 0 PID: 15544 Comm: syz.1.2262 Not tainted syzkaller #0 PREEMPT(full) [ 820.116998][T15544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 820.117008][T15544] Call Trace: [ 820.117014][T15544] [ 820.117021][T15544] dump_stack_lvl+0x16c/0x1f0 [ 820.117046][T15544] should_fail_ex+0x512/0x640 [ 820.117072][T15544] _copy_from_user+0x2e/0xd0 [ 820.117095][T15544] copy_msghdr_from_user+0x98/0x160 [ 820.117117][T15544] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 820.117140][T15544] ? rcu_is_watching+0x12/0xc0 [ 820.117159][T15544] ? __pv_queued_spin_lock_slowpath+0x28d/0xcf0 [ 820.117183][T15544] ___sys_sendmsg+0xfe/0x1d0 [ 820.117204][T15544] ? __pfx____sys_sendmsg+0x10/0x10 [ 820.117237][T15544] ? find_held_lock+0x2b/0x80 [ 820.117270][T15544] __sys_sendmmsg+0x200/0x420 [ 820.117295][T15544] ? __pfx___sys_sendmmsg+0x10/0x10 [ 820.117349][T15544] __x64_sys_sendmmsg+0x9c/0x100 [ 820.117371][T15544] do_syscall_64+0xcd/0xfa0 [ 820.117393][T15544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.117412][T15544] RIP: 0033:0x7f935f78eec9 [ 820.117427][T15544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 820.117443][T15544] RSP: 002b:00007f9360624038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 820.117460][T15544] RAX: ffffffffffffffda RBX: 00007f935f9e6090 RCX: 00007f935f78eec9 [ 820.117472][T15544] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000007 [ 820.117482][T15544] RBP: 00007f9360624090 R08: 0000000000000000 R09: 0000000000000000 [ 820.117492][T15544] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 820.117502][T15544] R13: 00007f935f9e6128 R14: 00007f935f9e6090 R15: 00007fff6fe6aab8 [ 820.117528][T15544] [ 821.475183][T15558] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2266'. [ 822.400452][ T5826] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 822.411451][ T5826] Bluetooth: hci4: Injecting HCI hardware error event [ 822.677605][ T30] kauditd_printk_skb: 183 callbacks suppressed [ 822.677620][ T30] audit: type=1400 audit(2000000344.326:13266): avc: denied { read write } for pid=5819 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 822.708053][ C1] vkms_vblank_simulate: vblank timer overrun [ 822.725524][ T5826] Bluetooth: hci4: hardware error 0x00 [ 822.763900][ T30] audit: type=1400 audit(2000000344.366:13267): avc: denied { create } for pid=15570 comm="syz.4.2268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 822.785360][ T30] audit: type=1400 audit(2000000344.386:13268): avc: denied { read write } for pid=10841 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 822.809673][ C1] vkms_vblank_simulate: vblank timer overrun [ 822.826620][ T30] audit: type=1400 audit(2000000344.386:13269): avc: denied { open } for pid=10841 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 822.854567][ T30] audit: type=1400 audit(2000000344.386:13270): avc: denied { ioctl } for pid=10841 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 822.937459][ T30] audit: type=1400 audit(2000000344.396:13271): avc: denied { read write open } for pid=5819 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 823.070300][ T30] audit: type=1400 audit(2000000344.396:13272): avc: denied { ioctl } for pid=5819 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 823.315696][T15590] binder: Unknown parameter 'uid<00000000000000000000' [ 823.429920][ T30] audit: type=1400 audit(2000000344.406:13273): avc: denied { module_request } for pid=15551 comm="syz.2.2264" kmod="net-sch-cbq" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 823.484066][T15601] siw: device registration error -23 [ 823.489790][ T30] audit: type=1400 audit(2000000344.536:13274): avc: denied { write } for pid=15570 comm="syz.4.2268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 823.601065][T15609] fuse: Unknown parameter '> .Nvб{1LE0x0000000000000003' [ 823.615678][ T30] audit: type=1400 audit(2000000344.546:13275): avc: denied { read write } for pid=5811 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 823.814863][ T870] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 824.399555][ T870] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 824.415007][ T870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.467378][ T870] usb 3-1: config 0 descriptor?? [ 824.612549][T15642] befs: (nbd3): No write support. Marking filesystem read-only [ 824.691327][T15642] bond1: entered promiscuous mode [ 824.697204][T15642] bond1: entered allmulticast mode [ 824.707888][T15642] 8021q: adding VLAN 0 to HW filter on device bond1 [ 824.784879][ T9] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 824.795294][ T5826] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 825.103616][T15687] FAULT_INJECTION: forcing a failure. [ 825.103616][T15687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 825.118530][T15687] CPU: 0 UID: 0 PID: 15687 Comm: syz.3.2284 Not tainted syzkaller #0 PREEMPT(full) [ 825.118553][T15687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 825.118563][T15687] Call Trace: [ 825.118570][T15687] [ 825.118577][T15687] dump_stack_lvl+0x16c/0x1f0 [ 825.118608][T15687] should_fail_ex+0x512/0x640 [ 825.118633][T15687] _copy_from_user+0x2e/0xd0 [ 825.118656][T15687] copy_msghdr_from_user+0x98/0x160 [ 825.118678][T15687] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 825.118710][T15687] ___sys_sendmsg+0xfe/0x1d0 [ 825.118724][T15687] ? __pfx____sys_sendmsg+0x10/0x10 [ 825.118735][T15687] ? __lock_acquire+0x622/0x1c90 [ 825.118767][T15687] __sys_sendmsg+0x16d/0x220 [ 825.118786][T15687] ? __pfx___sys_sendmsg+0x10/0x10 [ 825.118823][T15687] do_syscall_64+0xcd/0xfa0 [ 825.118844][T15687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.118859][T15687] RIP: 0033:0x7f376118eec9 [ 825.118869][T15687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 825.118879][T15687] RSP: 002b:00007f37620ea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 825.118890][T15687] RAX: ffffffffffffffda RBX: 00007f37613e5fa0 RCX: 00007f376118eec9 [ 825.118897][T15687] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 825.118904][T15687] RBP: 00007f37620ea090 R08: 0000000000000000 R09: 0000000000000000 [ 825.118910][T15687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 825.118916][T15687] R13: 00007f37613e6038 R14: 00007f37613e5fa0 R15: 00007fffcd988f08 [ 825.118931][T15687] [ 825.209937][ T870] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 825.304701][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 825.311214][ T9] usb 5-1: config 0 has an invalid interface number: 151 but max is 1 [ 825.319795][ T9] usb 5-1: config 0 has no interface number 1 [ 825.326126][ T9] usb 5-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 825.345049][ T9] usb 5-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 825.363890][ T9] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 825.382924][ T9] usb 5-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 825.393775][ T9] usb 5-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 825.409285][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 825.419470][ T870] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 825.437708][ T870] [drm] Initialized udl on minor 2 [ 825.463096][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 825.500245][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 825.576729][ T9] usb 5-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 825.584806][ T870] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 825.594484][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.627917][ T870] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 825.631658][ T9] usb 5-1: Product: syz [ 825.650707][ T9] usb 5-1: Manufacturer: syz [ 825.664625][ T9] usb 5-1: SerialNumber: syz [ 825.665668][ T5960] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 825.678559][ T9] usb 5-1: config 0 descriptor?? [ 825.695346][ T870] usb 3-1: USB disconnect, device number 53 [ 825.698058][T15635] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 825.711717][ T5960] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 825.716260][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 826.033622][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 826.191851][ T9] usb 5-1: USB disconnect, device number 43 [ 826.359084][ T6764] udevd[6764]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 827.693541][T15781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2292'. [ 827.713772][T15781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2292'. [ 827.740224][ T30] kauditd_printk_skb: 313 callbacks suppressed [ 827.740253][ T30] audit: type=1400 audit(2000000349.316:13565): avc: denied { create } for pid=15771 comm="syz.2.2292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 827.989108][ T30] audit: type=1400 audit(2000000349.326:13566): avc: denied { bind } for pid=15771 comm="syz.2.2292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 828.033903][ T30] audit: type=1400 audit(2000000349.336:13567): avc: denied { setopt } for pid=15771 comm="syz.2.2292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 828.243923][ T30] audit: type=1400 audit(2000000349.336:13568): avc: denied { write } for pid=15771 comm="syz.2.2292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 828.266199][ T30] audit: type=1400 audit(2000000349.376:13569): avc: denied { setopt } for pid=15771 comm="syz.2.2292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 828.358254][ T30] audit: type=1400 audit(2000000349.526:13570): avc: denied { prog_load } for pid=15777 comm="syz.4.2293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 828.436149][ T30] audit: type=1400 audit(2000000349.526:13571): avc: denied { bpf } for pid=15777 comm="syz.4.2293" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 828.672059][ T30] audit: type=1400 audit(2000000349.526:13572): avc: denied { perfmon } for pid=15777 comm="syz.4.2293" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 828.696159][ T30] audit: type=1400 audit(2000000349.536:13573): avc: denied { execmem } for pid=15777 comm="syz.4.2293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 829.210700][ T30] audit: type=1400 audit(2000000349.566:13574): avc: denied { write } for pid=15771 comm="syz.2.2292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 829.292134][T12257] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 829.352777][T12257] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 829.452799][T15794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2295'. [ 829.464149][T15794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2295'. [ 829.657128][ T9] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 829.815055][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 829.821500][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 829.833568][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 829.843325][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.851925][ T9] usb 3-1: Product: syz [ 829.856335][ T9] usb 3-1: Manufacturer: syz [ 830.272639][ T5960] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 830.292468][ T9] usb 3-1: SerialNumber: syz [ 830.306555][ T9] usb 3-1: config 0 descriptor?? [ 830.319510][ T9] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 830.333856][ T9] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 830.424659][ T5960] usb 6-1: Using ep0 maxpacket: 8 [ 830.450489][ T5960] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 830.488117][ T5960] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 830.498641][ T5960] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.511661][ T5960] usb 6-1: config 0 descriptor?? [ 830.668289][T15836] binder: Unknown parameter 'uid<00000000000000000000' [ 830.715513][ T5892] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 830.754496][T15841] siw: device registration error -23 [ 830.944825][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 830.958496][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 830.977781][ T5892] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 831.147898][ T9] em28xx 3-1:0.0: chip ID is em2874 [ 831.394686][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.411752][ T5892] usb 5-1: Product: syz [ 831.424082][ T5892] usb 5-1: Manufacturer: syz [ 831.429031][ T5892] usb 5-1: SerialNumber: syz [ 831.440664][ T5892] usb 5-1: config 0 descriptor?? [ 831.471149][T15844] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 831.477748][T15844] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 831.491419][T15844] vhci_hcd vhci_hcd.0: Device attached [ 831.505944][ T5892] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 831.570186][ T5892] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 831.679735][T15846] usbip_core: unknown command [ 831.684635][T15846] vhci_hcd: unknown pdu 1953853036 [ 831.691483][T15846] usbip_core: unknown command [ 831.699298][ T50] vhci_hcd: stop threads [ 831.708048][ T50] vhci_hcd: release socket [ 831.712785][ T50] vhci_hcd: disconnect device [ 831.809547][T15799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.836527][T15799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.868795][ T9] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 831.877651][ T9] em28xx 3-1:0.0: board has no eeprom [ 831.938649][T15855] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 832.100623][ T5892] em28xx 5-1:0.0: chip ID is em2765 [ 832.416318][ T870] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 832.577168][ T870] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 832.587906][ T870] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 832.606816][ T870] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 832.639186][ T5908] usb 6-1: USB disconnect, device number 16 [ 832.644883][T12134] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 832.653384][ T870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.683933][ T870] usb 4-1: config 0 descriptor?? [ 832.708062][ T870] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 832.723309][ T870] dvb-usb: bulk message failed: -22 (3/0) [ 832.738991][ T5892] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 832.763520][ T870] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 832.764275][ T5892] em28xx 5-1:0.0: board has no eeprom [ 832.790946][ T30] kauditd_printk_skb: 261 callbacks suppressed [ 832.790960][ T30] audit: type=1400 audit(2000000354.436:13836): avc: denied { ioctl } for pid=15824 comm="syz.4.2301" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 832.823301][ T870] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 832.832024][ T870] usb 4-1: media controller created [ 832.838380][T12134] usb 2-1: Using ep0 maxpacket: 8 [ 832.847301][ T30] audit: type=1400 audit(2000000354.496:13837): avc: denied { ioctl } for pid=15872 comm="syz.1.2307" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 832.849281][T12134] usb 2-1: config 0 has an invalid interface number: 151 but max is 1 [ 832.881187][ T870] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 832.891160][T12134] usb 2-1: config 0 has no interface number 1 [ 832.900450][T12134] usb 2-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 832.909207][ T30] audit: type=1400 audit(2000000354.546:13838): avc: denied { ioctl } for pid=15872 comm="syz.1.2307" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 832.912799][ T870] dvb-usb: bulk message failed: -22 (6/0) [ 832.956106][T12134] usb 2-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 833.050365][ T9] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 833.201972][ T9] em28xx 3-1:0.0: dvb set to bulk mode. [ 833.204166][T15799] em28xx 3-1:0.0: reading from i2c device at 0xfffe failed (error=-5) [ 833.218284][T12257] em28xx 3-1:0.0: Binding DVB extension [ 833.232235][ T870] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 833.242476][T12134] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 833.304128][ T870] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input40 [ 833.306603][T15829] FAULT_INJECTION: forcing a failure. [ 833.306603][T15829] name failslab, interval 1, probability 0, space 0, times 0 [ 833.534978][T15829] CPU: 1 UID: 0 PID: 15829 Comm: syz.4.2301 Not tainted syzkaller #0 PREEMPT(full) [ 833.535003][T15829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 833.535014][T15829] Call Trace: [ 833.535020][T15829] [ 833.535027][T15829] dump_stack_lvl+0x16c/0x1f0 [ 833.535053][T15829] should_fail_ex+0x512/0x640 [ 833.535074][T15829] ? fs_reclaim_acquire+0xae/0x150 [ 833.535102][T15829] should_failslab+0xc2/0x120 [ 833.535128][T15829] __kmalloc_noprof+0xdd/0x880 [ 833.535147][T15829] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 833.535177][T15829] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 833.535200][T15829] tomoyo_realpath_from_path+0xc2/0x6e0 [ 833.535227][T15829] ? tomoyo_profile+0x47/0x60 [ 833.535256][T15829] tomoyo_path_number_perm+0x245/0x580 [ 833.535277][T15829] ? tomoyo_path_number_perm+0x237/0x580 [ 833.535300][T15829] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 833.535322][T15829] ? find_held_lock+0x2b/0x80 [ 833.535362][T15829] ? find_held_lock+0x2b/0x80 [ 833.535377][T15829] ? hook_file_ioctl_common+0x145/0x410 [ 833.535399][T15829] ? __fget_files+0x20e/0x3c0 [ 833.535431][T15829] security_file_ioctl+0x9b/0x240 [ 833.535456][T15829] __x64_sys_ioctl+0xb7/0x210 [ 833.535477][T15829] do_syscall_64+0xcd/0xfa0 [ 833.535499][T15829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.535517][T15829] RIP: 0033:0x7f4a8bd8eec9 [ 833.535532][T15829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 833.535548][T15829] RSP: 002b:00007f4a8cb4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 833.535566][T15829] RAX: ffffffffffffffda RBX: 00007f4a8bfe5fa0 RCX: 00007f4a8bd8eec9 [ 833.535578][T15829] RDX: 0000200000000080 RSI: 0000000000000707 RDI: 0000000000000004 [ 833.535589][T15829] RBP: 00007f4a8cb4f090 R08: 0000000000000000 R09: 0000000000000000 [ 833.535599][T15829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 833.535610][T15829] R13: 00007f4a8bfe6038 R14: 00007f4a8bfe5fa0 R15: 00007ffedaa0f958 [ 833.535635][T15829] [ 833.535677][T15829] ERROR: Out of memory at tomoyo_realpath_from_path. [ 833.757777][T12134] usb 2-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 833.769125][T12134] usb 2-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 833.779515][ T30] audit: type=1400 audit(2000000354.606:13839): avc: denied { map_create } for pid=15889 comm="syz.5.2309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 833.785005][ T870] dvb-usb: schedule remote query interval to 150 msecs. [ 833.808564][T12134] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 833.820145][T12134] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 833.831124][ T870] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 833.853207][T15829] em28xx 3-1:0.0: reading from i2c device at 0xfffe failed (error=-5) [ 833.868514][ T30] audit: type=1400 audit(2000000354.606:13840): avc: denied { read write } for pid=15889 comm="syz.5.2309" name="sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 833.926335][T12134] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 833.937562][ T5892] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 833.955788][ T5892] em28xx 5-1:0.0: dvb set to bulk mode. [ 833.984177][ T870] usb 3-1: USB disconnect, device number 54 [ 834.014951][ T30] audit: type=1400 audit(2000000354.606:13841): avc: denied { open } for pid=15889 comm="syz.5.2309" path="/dev/sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 834.018691][ T870] em28xx 3-1:0.0: Disconnecting em28xx [ 834.044555][ T5865] dvb-usb: bulk message failed: -22 (1/0) [ 834.053697][ T5865] dvb-usb: error while querying for an remote control event. [ 834.059722][ T5892] usb 5-1: USB disconnect, device number 44 [ 834.068366][T12134] usb 2-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 834.085955][T12257] em28xx 3-1:0.0: Registering input extension [ 834.101629][T12134] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.110956][ T5892] em28xx 5-1:0.0: Disconnecting em28xx [ 834.137931][T12134] usb 2-1: Product: syz [ 834.161695][ T30] audit: type=1400 audit(2000000354.606:13842): avc: denied { ioctl } for pid=15889 comm="syz.5.2309" path="/dev/sg0" dev="devtmpfs" ino=756 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 834.164710][T12134] usb 2-1: Manufacturer: syz [ 834.229561][ T9] usb 4-1: USB disconnect, device number 40 [ 834.267209][ T30] audit: type=1400 audit(2000000354.606:13843): avc: denied { create } for pid=15889 comm="syz.5.2309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 834.277724][T12134] usb 2-1: SerialNumber: syz [ 834.354534][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 834.363067][T12257] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 834.394869][T12134] usb 2-1: config 0 descriptor?? [ 834.405218][T12257] Registered IR keymap rc-empty [ 834.411856][T15873] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 834.568021][T12257] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 834.581244][ T30] audit: type=1400 audit(2000000354.606:13844): avc: denied { setopt } for pid=15889 comm="syz.5.2309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 834.611472][T12134] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 834.650739][T12134] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 834.653644][T12257] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input41 [ 834.695933][ T30] audit: type=1400 audit(2000000354.606:13845): avc: denied { execmem } for pid=15889 comm="syz.5.2309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 834.723825][T12257] em28xx 3-1:0.0: Input extension successfully initialized [ 834.754409][ T5908] em28xx 5-1:0.0: Binding DVB extension [ 834.824260][T12134] usb 2-1: USB disconnect, device number 33 [ 834.931392][ T5908] em28xx 5-1:0.0: Registering input extension [ 834.984865][ T870] em28xx 3-1:0.0: Closing input extension [ 835.640145][ T5892] em28xx 5-1:0.0: Closing input extension [ 835.797705][ T870] em28xx 3-1:0.0: Freeing device [ 835.854167][ T5892] em28xx 5-1:0.0: Freeing device [ 836.746145][ T5908] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 837.697680][ T5908] usb 3-1: device descriptor read/64, error -71 [ 837.823250][ T30] kauditd_printk_skb: 170 callbacks suppressed [ 837.823266][ T30] audit: type=1400 audit(2000000359.396:14016): avc: denied { read write } for pid=5809 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 837.856244][ T30] audit: type=1400 audit(2000000359.396:14017): avc: denied { open } for pid=5809 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 837.882822][ T30] audit: type=1400 audit(2000000359.396:14018): avc: denied { ioctl } for pid=5809 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 837.944847][ T30] audit: type=1400 audit(2000000359.426:14019): avc: denied { prog_load } for pid=15994 comm="syz.4.2317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 837.974945][ T30] audit: type=1400 audit(2000000359.426:14020): avc: denied { bpf } for pid=15994 comm="syz.4.2317" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 838.009983][ T5908] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 838.014691][ T30] audit: type=1400 audit(2000000359.426:14021): avc: denied { perfmon } for pid=15994 comm="syz.4.2317" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 838.064857][ T30] audit: type=1400 audit(2000000359.426:14022): avc: denied { prog_run } for pid=15994 comm="syz.4.2317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 838.104981][ T30] audit: type=1400 audit(2000000359.446:14023): avc: denied { bind } for pid=15994 comm="syz.4.2317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 838.144709][ T30] audit: type=1400 audit(2000000359.446:14024): avc: denied { setopt } for pid=15994 comm="syz.4.2317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 838.155333][ T5908] usb 3-1: device descriptor read/64, error -71 [ 838.176450][ T30] audit: type=1400 audit(2000000359.446:14025): avc: denied { map_create } for pid=15994 comm="syz.4.2317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 838.285749][ T5908] usb usb3-port1: attempt power cycle [ 838.567769][T16073] FAULT_INJECTION: forcing a failure. [ 838.567769][T16073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 838.581393][T16073] CPU: 1 UID: 0 PID: 16073 Comm: syz.3.2325 Not tainted syzkaller #0 PREEMPT(full) [ 838.581422][T16073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 838.581432][T16073] Call Trace: [ 838.581438][T16073] [ 838.581445][T16073] dump_stack_lvl+0x16c/0x1f0 [ 838.581470][T16073] should_fail_ex+0x512/0x640 [ 838.581494][T16073] _copy_from_user+0x2e/0xd0 [ 838.581516][T16073] io_submit_one+0xbb/0x1df0 [ 838.581544][T16073] ? __lock_acquire+0xb8a/0x1c90 [ 838.581571][T16073] ? __pfx_io_submit_one+0x10/0x10 [ 838.581605][T16073] ? __might_fault+0xe3/0x190 [ 838.581623][T16073] ? __might_fault+0x13b/0x190 [ 838.581648][T16073] ? __x64_sys_io_submit+0x1a9/0x350 [ 838.581673][T16073] __x64_sys_io_submit+0x1a9/0x350 [ 838.581709][T16073] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 838.581749][T16073] do_syscall_64+0xcd/0xfa0 [ 838.581772][T16073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.581790][T16073] RIP: 0033:0x7f376118eec9 [ 838.581804][T16073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 838.581821][T16073] RSP: 002b:00007f37620c9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 838.581838][T16073] RAX: ffffffffffffffda RBX: 00007f37613e6090 RCX: 00007f376118eec9 [ 838.581849][T16073] RDX: 0000200000000780 RSI: 0000000000000001 RDI: 00007f37620a0000 [ 838.581859][T16073] RBP: 00007f37620c9090 R08: 0000000000000000 R09: 0000000000000000 [ 838.581869][T16073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 838.581879][T16073] R13: 00007f37613e6128 R14: 00007f37613e6090 R15: 00007fffcd988f08 [ 838.581903][T16073] [ 838.755686][ T5908] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 838.845991][ T5908] usb 3-1: device descriptor read/8, error -71 [ 839.494955][ T5960] hid-generic 0401:0009:0002.0025: item fetching failed at offset 6/131 [ 839.506200][ T5960] hid-generic 0401:0009:0002.0025: probe with driver hid-generic failed with error -22 [ 839.627969][ T5908] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 839.854714][ T5908] usb 3-1: device not accepting address 58, error -71 [ 839.868683][ T5908] usb usb3-port1: unable to enumerate USB device [ 840.274847][ T5960] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 840.459786][ T5960] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 840.498652][ T5960] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 840.606729][ T5960] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 840.653018][ T5960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.773799][ T5960] usb 2-1: config 0 descriptor?? [ 840.832105][ T5960] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 840.856333][ T5960] dvb-usb: bulk message failed: -22 (3/0) [ 840.881708][ T5960] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 840.891959][ T5960] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 840.920689][ T5960] usb 2-1: media controller created [ 840.945865][ T5960] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 841.084639][T16134] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2336'. [ 841.104211][ T5960] dvb-usb: bulk message failed: -22 (6/0) [ 841.236427][ T5960] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 841.482125][ T5960] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input43 [ 841.901574][ T5960] dvb-usb: schedule remote query interval to 150 msecs. [ 842.044728][ T5960] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 842.288038][ T5960] dvb-usb: bulk message failed: -22 (1/0) [ 842.294260][ T5960] dvb-usb: error while querying for an remote control event. [ 842.811963][ T5960] dvb-usb: bulk message failed: -22 (1/0) [ 842.817762][ T5960] dvb-usb: error while querying for an remote control event. [ 842.937834][ T30] kauditd_printk_skb: 242 callbacks suppressed [ 842.937850][ T30] audit: type=1400 audit(2000000364.496:14268): avc: denied { execmem } for pid=16167 comm="syz.3.2340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 842.988968][ T30] audit: type=1400 audit(2000000364.586:14269): avc: denied { create } for pid=16168 comm="syz.4.2341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 843.076015][ T5960] dvb-usb: bulk message failed: -22 (1/0) [ 843.081927][ T5960] dvb-usb: error while querying for an remote control event. [ 843.090054][ T30] audit: type=1400 audit(2000000364.616:14270): avc: denied { create } for pid=16167 comm="syz.3.2340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 843.373573][ T30] audit: type=1400 audit(2000000364.626:14271): avc: denied { bpf } for pid=16171 comm="syz.5.2342" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 843.422225][ T5960] usb 2-1: USB disconnect, device number 34 [ 843.464258][ T30] audit: type=1400 audit(2000000364.626:14272): avc: denied { map_create } for pid=16171 comm="syz.5.2342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 843.483563][ C0] vkms_vblank_simulate: vblank timer overrun [ 843.578108][ T30] audit: type=1400 audit(2000000364.626:14273): avc: denied { read write } for pid=16171 comm="syz.5.2342" name="video2" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 843.579633][ T5960] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 843.601741][ C0] vkms_vblank_simulate: vblank timer overrun [ 843.602877][ T30] audit: type=1400 audit(2000000364.626:14274): avc: denied { open } for pid=16171 comm="syz.5.2342" path="/dev/video2" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 843.645302][ T30] audit: type=1400 audit(2000000364.626:14275): avc: denied { ioctl } for pid=16171 comm="syz.5.2342" path="/dev/video2" dev="devtmpfs" ino=932 ioctlcmd=0x5666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 843.670313][ C0] vkms_vblank_simulate: vblank timer overrun [ 843.796446][T16195] FAULT_INJECTION: forcing a failure. [ 843.796446][T16195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 843.814978][T16195] CPU: 1 UID: 0 PID: 16195 Comm: syz.5.2344 Not tainted syzkaller #0 PREEMPT(full) [ 843.815000][T16195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 843.815008][T16195] Call Trace: [ 843.815012][T16195] [ 843.815017][T16195] dump_stack_lvl+0x16c/0x1f0 [ 843.815034][T16195] should_fail_ex+0x512/0x640 [ 843.815049][T16195] _copy_from_user+0x2e/0xd0 [ 843.815064][T16195] copy_msghdr_from_user+0x98/0x160 [ 843.815077][T16195] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 843.815092][T16195] ? __pfx__kstrtoull+0x10/0x10 [ 843.815112][T16195] ___sys_sendmsg+0xfe/0x1d0 [ 843.815125][T16195] ? __pfx____sys_sendmsg+0x10/0x10 [ 843.815143][T16195] ? find_held_lock+0x2b/0x80 [ 843.815162][T16195] __sys_sendmmsg+0x200/0x420 [ 843.815176][T16195] ? __pfx___sys_sendmmsg+0x10/0x10 [ 843.815193][T16195] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 843.815213][T16195] ? fput+0x9b/0xd0 [ 843.815223][T16195] ? ksys_write+0x1ac/0x250 [ 843.815236][T16195] ? __pfx_ksys_write+0x10/0x10 [ 843.815252][T16195] __x64_sys_sendmmsg+0x9c/0x100 [ 843.815264][T16195] ? lockdep_hardirqs_on+0x7c/0x110 [ 843.815277][T16195] do_syscall_64+0xcd/0xfa0 [ 843.815290][T16195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.815302][T16195] RIP: 0033:0x7f791dd8eec9 [ 843.815312][T16195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 843.815322][T16195] RSP: 002b:00007f791ec31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 843.815333][T16195] RAX: ffffffffffffffda RBX: 00007f791dfe5fa0 RCX: 00007f791dd8eec9 [ 843.815340][T16195] RDX: 000000000000005f RSI: 0000200000000d00 RDI: 0000000000000006 [ 843.815346][T16195] RBP: 00007f791ec31090 R08: 0000000000000000 R09: 0000000000000000 [ 843.815353][T16195] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 843.815359][T16195] R13: 00007f791dfe6038 R14: 00007f791dfe5fa0 R15: 00007fff512e2de8 [ 843.815373][T16195] [ 844.019076][ T30] audit: type=1400 audit(2000000364.636:14276): avc: denied { read } for pid=16171 comm="syz.5.2342" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 844.508157][ T30] audit: type=1400 audit(2000000364.636:14277): avc: denied { open } for pid=16171 comm="syz.5.2342" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 844.531908][ C0] vkms_vblank_simulate: vblank timer overrun [ 846.404735][T16238] netlink: 'syz.2.2355': attribute type 6 has an invalid length. [ 847.169016][ T5826] Bluetooth: hci3: unexpected event for opcode 0x2006 [ 847.260357][T16250] FAULT_INJECTION: forcing a failure. [ 847.260357][T16250] name failslab, interval 1, probability 0, space 0, times 0 [ 847.287169][T16250] CPU: 0 UID: 0 PID: 16250 Comm: syz.4.2358 Not tainted syzkaller #0 PREEMPT(full) [ 847.287192][T16250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 847.287202][T16250] Call Trace: [ 847.287208][T16250] [ 847.287216][T16250] dump_stack_lvl+0x16c/0x1f0 [ 847.287241][T16250] should_fail_ex+0x512/0x640 [ 847.287261][T16250] ? fs_reclaim_acquire+0xae/0x150 [ 847.287287][T16250] should_failslab+0xc2/0x120 [ 847.287319][T16250] __kmalloc_noprof+0xdd/0x880 [ 847.287338][T16250] ? tomoyo_encode2+0x100/0x3e0 [ 847.287366][T16250] ? tomoyo_encode2+0x100/0x3e0 [ 847.287387][T16250] tomoyo_encode2+0x100/0x3e0 [ 847.287414][T16250] tomoyo_encode+0x29/0x50 [ 847.287435][T16250] tomoyo_realpath_from_path+0x18f/0x6e0 [ 847.287461][T16250] ? tomoyo_profile+0x47/0x60 [ 847.287489][T16250] tomoyo_path_number_perm+0x245/0x580 [ 847.287509][T16250] ? tomoyo_path_number_perm+0x237/0x580 [ 847.287531][T16250] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 847.287553][T16250] ? find_held_lock+0x2b/0x80 [ 847.287595][T16250] ? find_held_lock+0x2b/0x80 [ 847.287611][T16250] ? hook_file_ioctl_common+0x145/0x410 [ 847.287634][T16250] ? __fget_files+0x20e/0x3c0 [ 847.287661][T16250] security_file_ioctl+0x9b/0x240 [ 847.287686][T16250] __x64_sys_ioctl+0xb7/0x210 [ 847.287706][T16250] do_syscall_64+0xcd/0xfa0 [ 847.287729][T16250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.287745][T16250] RIP: 0033:0x7f4a8bd8eec9 [ 847.287760][T16250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 847.287777][T16250] RSP: 002b:00007f4a8cb4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 847.287796][T16250] RAX: ffffffffffffffda RBX: 00007f4a8bfe5fa0 RCX: 00007f4a8bd8eec9 [ 847.287808][T16250] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 847.287819][T16250] RBP: 00007f4a8cb4f090 R08: 0000000000000000 R09: 0000000000000000 [ 847.287830][T16250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 847.287841][T16250] R13: 00007f4a8bfe6038 R14: 00007f4a8bfe5fa0 R15: 00007ffedaa0f958 [ 847.287867][T16250] [ 847.287883][T16250] ERROR: Out of memory at tomoyo_realpath_from_path. [ 847.449449][ C0] vkms_vblank_simulate: vblank timer overrun [ 847.539307][T16265] No source specified [ 847.587808][T16265] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2360'. [ 847.900895][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 847.972027][ T30] kauditd_printk_skb: 309 callbacks suppressed [ 847.972038][ T30] audit: type=1400 audit(2000000369.616:14575): avc: denied { read write } for pid=5819 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 848.002560][ C0] vkms_vblank_simulate: vblank timer overrun [ 848.116518][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 848.196753][T16283] FAULT_INJECTION: forcing a failure. [ 848.196753][T16283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 848.307056][ T30] audit: type=1400 audit(2000000369.656:14576): avc: denied { open } for pid=5819 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 848.340807][ T9] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 848.344816][T16283] CPU: 1 UID: 0 PID: 16283 Comm: syz.3.2365 Not tainted syzkaller #0 PREEMPT(full) [ 848.344836][T16283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 848.344846][T16283] Call Trace: [ 848.344852][T16283] [ 848.344858][T16283] dump_stack_lvl+0x16c/0x1f0 [ 848.344880][T16283] should_fail_ex+0x512/0x640 [ 848.344903][T16283] _copy_to_user+0x32/0xd0 [ 848.344924][T16283] simple_read_from_buffer+0xcb/0x170 [ 848.344945][T16283] proc_fail_nth_read+0x197/0x240 [ 848.344969][T16283] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 848.344993][T16283] ? rw_verify_area+0xcf/0x6c0 [ 848.345010][T16283] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 848.345033][T16283] vfs_read+0x1e4/0xcf0 [ 848.345055][T16283] ? __pfx___mutex_lock+0x10/0x10 [ 848.345074][T16283] ? __pfx_vfs_read+0x10/0x10 [ 848.345099][T16283] ? __fget_files+0x20e/0x3c0 [ 848.345127][T16283] ksys_read+0x12a/0x250 [ 848.345145][T16283] ? __pfx_ksys_read+0x10/0x10 [ 848.345172][T16283] do_syscall_64+0xcd/0xfa0 [ 848.345192][T16283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.345207][T16283] RIP: 0033:0x7f376118d8dc [ 848.345221][T16283] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 848.345235][T16283] RSP: 002b:00007f37620ea030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 848.345251][T16283] RAX: ffffffffffffffda RBX: 00007f37613e5fa0 RCX: 00007f376118d8dc [ 848.345261][T16283] RDX: 000000000000000f RSI: 00007f37620ea0a0 RDI: 0000000000000003 [ 848.345270][T16283] RBP: 00007f37620ea090 R08: 0000000000000000 R09: 0000000000000000 [ 848.345280][T16283] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 848.345290][T16283] R13: 00007f37613e6038 R14: 00007f37613e5fa0 R15: 00007fffcd988f08 [ 848.345321][T16283] [ 848.534871][ T30] audit: type=1400 audit(2000000369.656:14577): avc: denied { ioctl } for pid=5819 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 848.565249][ T9] usb 6-1: config 179 has no interface number 0 [ 848.568792][ T30] audit: type=1400 audit(2000000369.666:14578): avc: denied { ioctl } for pid=16267 comm="syz.5.2362" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 848.571517][ T9] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 848.639602][ T30] audit: type=1400 audit(2000000369.696:14579): avc: denied { create } for pid=16276 comm="syz.4.2363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 848.697408][ T30] audit: type=1400 audit(2000000369.706:14580): avc: denied { setopt } for pid=16276 comm="syz.4.2363" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 848.726288][ T30] audit: type=1400 audit(2000000369.706:14581): avc: denied { connect } for pid=16276 comm="syz.4.2363" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 848.747318][ T9] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 848.792336][ T30] audit: type=1400 audit(2000000369.726:14582): avc: denied { read } for pid=16276 comm="syz.4.2363" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 848.873657][ T9] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 848.916380][ T30] audit: type=1400 audit(2000000369.726:14583): avc: denied { read open } for pid=16276 comm="syz.4.2363" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 848.972205][ T30] audit: type=1400 audit(2000000369.866:14584): avc: denied { prog_load } for pid=16280 comm="syz.2.2364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 848.984948][ T9] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 849.124853][ T9] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 849.178420][ T9] usb 6-1: config 179 interface 65 has no altsetting 0 [ 849.214765][ T9] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 849.258989][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.329856][ T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input44 [ 849.756560][T16316] virt_wifi0 speed is unknown, defaulting to 1000 [ 849.944312][T16325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 849.954544][T16325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 850.573355][T16325] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 851.101096][T16373] rdma_rxe: rxe_newlink: failed to add tunl0 [ 853.084988][ T30] kauditd_printk_skb: 184 callbacks suppressed [ 853.085026][ T30] audit: type=1400 audit(2000000374.586:14769): avc: denied { write } for pid=16395 comm="syz.1.2378" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 853.130661][ T30] audit: type=1400 audit(2000000374.626:14770): avc: denied { setopt } for pid=16395 comm="syz.1.2378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 853.183432][ T30] audit: type=1400 audit(2000000374.826:14771): avc: denied { read write } for pid=5811 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 853.253662][ T30] audit: type=1400 audit(2000000374.826:14772): avc: denied { open } for pid=5811 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 853.299050][ T30] audit: type=1400 audit(2000000374.826:14773): avc: denied { ioctl } for pid=5811 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 853.445289][ T30] audit: type=1400 audit(2000000375.096:14774): avc: denied { create } for pid=16400 comm="syz.4.2379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 853.556944][ T30] audit: type=1400 audit(2000000375.116:14775): avc: denied { prog_load } for pid=16400 comm="syz.4.2379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 853.584968][ T30] audit: type=1400 audit(2000000375.116:14776): avc: denied { bpf } for pid=16400 comm="syz.4.2379" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 853.643205][ T30] audit: type=1400 audit(2000000375.116:14777): avc: denied { perfmon } for pid=16400 comm="syz.4.2379" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 853.670492][ T5908] usb 6-1: USB disconnect, device number 17 [ 853.723355][ T30] audit: type=1400 audit(2000000375.116:14778): avc: denied { prog_run } for pid=16400 comm="syz.4.2379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 853.804373][T16405] overlay: Unknown parameter '/' [ 853.905406][T16423] FAULT_INJECTION: forcing a failure. [ 853.905406][T16423] name failslab, interval 1, probability 0, space 0, times 0 [ 854.546486][T16405] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 854.554065][T16423] CPU: 1 UID: 0 PID: 16423 Comm: syz.5.2383 Not tainted syzkaller #0 PREEMPT(full) [ 854.554089][T16423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 854.554099][T16423] Call Trace: [ 854.554106][T16423] [ 854.554113][T16423] dump_stack_lvl+0x16c/0x1f0 [ 854.554139][T16423] should_fail_ex+0x512/0x640 [ 854.554166][T16423] ? fs_reclaim_acquire+0xae/0x150 [ 854.554194][T16423] should_failslab+0xc2/0x120 [ 854.554221][T16423] __kmalloc_noprof+0xdd/0x880 [ 854.554240][T16423] ? tomoyo_encode2+0x100/0x3e0 [ 854.554269][T16423] ? tomoyo_encode2+0x100/0x3e0 [ 854.554291][T16423] tomoyo_encode2+0x100/0x3e0 [ 854.554317][T16423] tomoyo_encode+0x29/0x50 [ 854.554337][T16423] tomoyo_realpath_from_path+0x18f/0x6e0 [ 854.554366][T16423] tomoyo_path_number_perm+0x245/0x580 [ 854.554384][T16423] ? tomoyo_path_number_perm+0x237/0x580 [ 854.554404][T16423] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 854.554448][T16423] ? find_held_lock+0x2b/0x80 [ 854.554463][T16423] ? hook_file_ioctl_common+0x145/0x410 [ 854.554484][T16423] ? __fget_files+0x20e/0x3c0 [ 854.554509][T16423] security_file_ioctl+0x9b/0x240 [ 854.554532][T16423] __x64_sys_ioctl+0xb7/0x210 [ 854.554551][T16423] do_syscall_64+0xcd/0xfa0 [ 854.554575][T16423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.554590][T16423] RIP: 0033:0x7f791dd8eec9 [ 854.554604][T16423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 854.554619][T16423] RSP: 002b:00007f791ec31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 854.554635][T16423] RAX: ffffffffffffffda RBX: 00007f791dfe5fa0 RCX: 00007f791dd8eec9 [ 854.554646][T16423] RDX: 0000200000000440 RSI: 0000000040046f41 RDI: 0000000000000003 [ 854.554656][T16423] RBP: 00007f791ec31090 R08: 0000000000000000 R09: 0000000000000000 [ 854.554665][T16423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 854.554674][T16423] R13: 00007f791dfe6038 R14: 00007f791dfe5fa0 R15: 00007fff512e2de8 [ 854.554698][T16423] [ 854.799844][T16423] ERROR: Out of memory at tomoyo_realpath_from_path. [ 854.893370][T16423] ubi31: detaching mtd0 [ 854.971604][T16423] ubi31: mtd0 is detached [ 856.512596][T16461] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2566 sclass=netlink_xfrm_socket pid=16461 comm=syz.1.2389 [ 858.175818][ T30] kauditd_printk_skb: 242 callbacks suppressed [ 858.175831][ T30] audit: type=1400 audit(2000000379.556:15021): avc: denied { create } for pid=16473 comm="syz.2.2396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 858.254567][ T30] audit: type=1400 audit(2000000379.866:15022): avc: denied { allowed } for pid=16471 comm="syz.1.2395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 858.473174][T16476] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 858.479812][T16476] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 858.491560][T16476] vhci_hcd vhci_hcd.0: Device attached [ 858.573142][ T30] audit: type=1400 audit(2000000379.866:15023): avc: denied { create } for pid=16471 comm="syz.1.2395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 859.045378][ T5908] usb 36-1: SetAddress Request (7) to port 0 [ 859.157433][ T5908] usb 36-1: new SuperSpeed USB device number 7 using vhci_hcd [ 859.174337][ T30] audit: type=1400 audit(2000000379.866:15024): avc: denied { connect } for pid=16471 comm="syz.1.2395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 859.202689][T16477] vhci_hcd: connection closed [ 859.214695][ T2964] vhci_hcd: stop threads [ 859.216004][ T30] audit: type=1400 audit(2000000379.906:15025): avc: denied { read write } for pid=5822 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 859.219456][ T2964] vhci_hcd: release socket [ 859.248051][ C0] vkms_vblank_simulate: vblank timer overrun [ 859.295836][ T2964] vhci_hcd: disconnect device [ 859.402780][ T30] audit: type=1400 audit(2000000379.906:15026): avc: denied { read write open } for pid=5822 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 859.538341][ T30] audit: type=1400 audit(2000000379.906:15027): avc: denied { ioctl } for pid=5822 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 859.564093][ C0] vkms_vblank_simulate: vblank timer overrun [ 859.598070][ T30] audit: type=1400 audit(2000000379.936:15028): avc: denied { prog_load } for pid=16471 comm="syz.1.2395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 859.634037][ T30] audit: type=1400 audit(2000000379.936:15029): avc: denied { bpf } for pid=16471 comm="syz.1.2395" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 859.853391][T16507] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2401'. [ 859.862612][T16507] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2401'. [ 859.889103][T16507] audit: audit_backlog=65 > audit_backlog_limit=64 [ 859.905441][T16507] ubi31: attaching mtd0 [ 859.915705][T16507] ubi31: scanning is finished [ 860.306562][T16507] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 860.314205][T16507] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 860.322232][T16507] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 860.329362][T16507] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 860.336904][T16507] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 860.343765][T16507] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 860.351905][T16507] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3967902338 [ 860.362391][T16507] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 860.376094][T16511] ubi31: background thread "ubi_bgt31d" started, PID 16511 [ 860.664891][ T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 860.875636][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 861.002049][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 861.027383][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 861.064136][ T9] usb 6-1: config 0 has no interfaces? [ 861.100338][ T9] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 861.146865][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.159006][ T9] usb 6-1: Product: syz [ 861.163820][ T9] usb 6-1: Manufacturer: syz [ 861.168945][ T9] usb 6-1: SerialNumber: syz [ 861.181428][ T9] usb 6-1: config 0 descriptor?? [ 861.349200][T16528] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2407'. [ 861.447831][T12257] usb 6-1: USB disconnect, device number 18 [ 863.358440][ T30] kauditd_printk_skb: 243 callbacks suppressed [ 863.358456][ T30] audit: type=1400 audit(2000000385.006:15262): avc: denied { prog_load } for pid=16552 comm="syz.2.2413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 863.405702][ T30] audit: type=1400 audit(2000000385.006:15263): avc: denied { bpf } for pid=16552 comm="syz.2.2413" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 863.806477][ T30] audit: type=1400 audit(2000000385.006:15264): avc: denied { perfmon } for pid=16552 comm="syz.2.2413" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 863.922388][ T30] audit: type=1400 audit(2000000385.016:15265): avc: denied { create } for pid=16561 comm="syz.5.2414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 864.025973][ T30] audit: type=1400 audit(2000000385.016:15266): avc: denied { prog_load } for pid=16561 comm="syz.5.2414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 864.314740][ T5908] usb 36-1: device descriptor read/8, error -110 [ 864.427341][ T30] audit: type=1400 audit(2000000385.016:15267): avc: denied { bpf } for pid=16561 comm="syz.5.2414" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 864.797287][ T5908] usb usb36-port1: attempt power cycle [ 864.855831][ T30] audit: type=1400 audit(2000000385.016:15268): avc: denied { perfmon } for pid=16561 comm="syz.5.2414" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 864.904695][ T30] audit: type=1400 audit(2000000385.036:15269): avc: denied { create } for pid=16564 comm="syz.3.2415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 864.954857][ T30] audit: type=1400 audit(2000000385.036:15270): avc: denied { bpf } for pid=16561 comm="syz.5.2414" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 865.000509][ T30] audit: type=1400 audit(2000000385.036:15271): avc: denied { prog_run } for pid=16561 comm="syz.5.2414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 865.595623][ T5908] usb usb36-port1: unable to enumerate USB device [ 865.719911][T16595] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 866.404923][ T5960] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 866.644927][ T5960] usb 5-1: Using ep0 maxpacket: 8 [ 866.923122][ T5960] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 866.933783][ T5960] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 866.990447][ T5960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.019333][ T5960] usb 5-1: config 0 descriptor?? [ 868.446327][ T30] kauditd_printk_skb: 167 callbacks suppressed [ 868.446342][ T30] audit: type=1400 audit(2000000389.176:15439): avc: denied { execmem } for pid=16631 comm="syz.5.2427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 868.496642][ T30] audit: type=1400 audit(2000000389.626:15440): avc: denied { map_create } for pid=16608 comm="syz.4.2423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 868.522688][ T30] audit: type=1400 audit(2000000389.626:15441): avc: denied { bpf } for pid=16608 comm="syz.4.2423" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 868.694393][ T30] audit: type=1400 audit(2000000389.626:15442): avc: denied { map_read map_write } for pid=16608 comm="syz.4.2423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 868.775081][ T30] audit: type=1400 audit(2000000389.766:15443): avc: denied { prog_load } for pid=16608 comm="syz.4.2423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 868.794343][ C0] vkms_vblank_simulate: vblank timer overrun [ 868.803922][ T30] audit: type=1400 audit(2000000389.986:15444): avc: denied { perfmon } for pid=16608 comm="syz.4.2423" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 868.830124][ T30] audit: type=1400 audit(2000000389.986:15445): avc: denied { prog_run } for pid=16608 comm="syz.4.2423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 868.851671][ T30] audit: type=1400 audit(2000000390.136:15446): avc: denied { create } for pid=16631 comm="syz.5.2427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 868.878587][ T30] audit: type=1400 audit(2000000390.326:15447): avc: denied { read write } for pid=5822 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 868.905146][ T30] audit: type=1400 audit(2000000390.326:15448): avc: denied { open } for pid=5822 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 868.929603][ C0] vkms_vblank_simulate: vblank timer overrun [ 869.621601][ T5908] usb 5-1: USB disconnect, device number 45 [ 869.679559][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.685937][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.984894][T16685] binder: Unknown parameter 'uid<00000000000000000000' [ 872.777220][T16726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2439'. [ 873.394496][T16718] tmpfs: Unknown parameter 'mp' [ 873.457507][ T30] kauditd_printk_skb: 178 callbacks suppressed [ 873.457519][ T30] audit: type=1400 audit(2000000395.099:15627): avc: denied { create } for pid=16731 comm="syz.4.2441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 873.558973][ T30] audit: type=1400 audit(2000000395.159:15628): avc: denied { read write } for pid=5811 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 873.788856][ T30] audit: type=1400 audit(2000000395.159:15629): avc: denied { open } for pid=5811 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 874.200990][ T30] audit: type=1400 audit(2000000395.159:15630): avc: denied { ioctl } for pid=5811 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 874.315386][ T30] audit: type=1400 audit(2000000395.159:15631): avc: denied { connect } for pid=16721 comm="syz.5.2440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 874.335064][ C1] vkms_vblank_simulate: vblank timer overrun [ 874.342016][ T30] audit: type=1400 audit(2000000395.169:15632): avc: denied { read } for pid=16721 comm="syz.5.2440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 874.362095][ T30] audit: type=1400 audit(2000000395.169:15633): avc: denied { write } for pid=16721 comm="syz.5.2440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 874.382013][ T30] audit: type=1400 audit(2000000395.249:15634): avc: denied { read } for pid=16721 comm="syz.5.2440" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 874.405068][ C1] vkms_vblank_simulate: vblank timer overrun [ 874.413375][ T30] audit: type=1400 audit(2000000395.249:15635): avc: denied { open } for pid=16721 comm="syz.5.2440" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 874.568695][ C1] vkms_vblank_simulate: vblank timer overrun [ 874.629836][T16763] tipc: Can't bind to reserved service type 2 [ 875.031180][T16763] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2444'. [ 875.367640][ T30] audit: type=1400 audit(2000000395.259:15636): avc: denied { create } for pid=16721 comm="syz.5.2440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 877.432935][T16788] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 877.444380][T16788] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 877.470964][T16788] FAULT_INJECTION: forcing a failure. [ 877.470964][T16788] name failslab, interval 1, probability 0, space 0, times 0 [ 877.484465][T16788] CPU: 1 UID: 0 PID: 16788 Comm: syz.4.2451 Not tainted syzkaller #0 PREEMPT(full) [ 877.484489][T16788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 877.484500][T16788] Call Trace: [ 877.484506][T16788] [ 877.484514][T16788] dump_stack_lvl+0x16c/0x1f0 [ 877.484540][T16788] should_fail_ex+0x512/0x640 [ 877.484565][T16788] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 877.484588][T16788] should_failslab+0xc2/0x120 [ 877.484614][T16788] kmem_cache_alloc_noprof+0x75/0x6e0 [ 877.484635][T16788] ? alloc_empty_file+0x55/0x1e0 [ 877.484658][T16788] ? alloc_empty_file+0x55/0x1e0 [ 877.484673][T16788] alloc_empty_file+0x55/0x1e0 [ 877.484692][T16788] dentry_open+0x46/0xd0 [ 877.484708][T16788] ovl_path_open+0x198/0x1f0 [ 877.484728][T16788] ovl_dir_read_merged+0x2e6/0x780 [ 877.484761][T16788] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 877.484801][T16788] ? __pfx_ovl_fill_merge+0x10/0x10 [ 877.484845][T16788] ovl_iterate+0x8ae/0x1000 [ 877.484865][T16788] ? __pfx_down_read_killable+0x10/0x10 [ 877.484893][T16788] ? __pfx_ovl_iterate+0x10/0x10 [ 877.484915][T16788] wrap_directory_iterator+0xa2/0xe0 [ 877.484938][T16788] iterate_dir+0x296/0xaf0 [ 877.484962][T16788] __x64_sys_getdents+0x13c/0x2b0 [ 877.484983][T16788] ? __pfx___x64_sys_getdents+0x10/0x10 [ 877.485004][T16788] ? __pfx_filldir+0x10/0x10 [ 877.485035][T16788] do_syscall_64+0xcd/0xfa0 [ 877.485058][T16788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.485075][T16788] RIP: 0033:0x7f4a8bd8eec9 [ 877.485091][T16788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 877.485108][T16788] RSP: 002b:00007f4a89fd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 877.485126][T16788] RAX: ffffffffffffffda RBX: 00007f4a8bfe6180 RCX: 00007f4a8bd8eec9 [ 877.485138][T16788] RDX: 0000000020002078 RSI: 0000200000001fc0 RDI: 0000000000000006 [ 877.485149][T16788] RBP: 00007f4a89fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 877.485159][T16788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 877.485169][T16788] R13: 00007f4a8bfe6218 R14: 00007f4a8bfe6180 R15: 00007ffedaa0f958 [ 877.485197][T16788] [ 877.699736][ C1] vkms_vblank_simulate: vblank timer overrun [ 878.808182][ T30] kauditd_printk_skb: 127 callbacks suppressed [ 878.808200][ T30] audit: type=1400 audit(2000000400.419:15764): avc: denied { read } for pid=16782 comm="syz.3.2449" dev="nsfs" ino=4026533098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 878.920429][T16801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2452'. [ 879.038536][ T30] audit: type=1400 audit(2000000400.419:15765): avc: denied { open } for pid=16782 comm="syz.3.2449" path="net:[4026533098]" dev="nsfs" ino=4026533098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 879.065057][ T30] audit: type=1400 audit(2000000400.419:15766): avc: denied { create } for pid=16782 comm="syz.3.2449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 879.193345][ T30] audit: type=1400 audit(2000000400.429:15767): avc: denied { connect } for pid=16782 comm="syz.3.2449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 879.230015][T16808] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2454'. [ 879.324200][ T30] audit: type=1400 audit(2000000400.509:15768): avc: denied { bpf } for pid=16796 comm="syz.2.2452" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 879.928846][ T30] audit: type=1400 audit(2000000400.509:15769): avc: denied { prog_run } for pid=16796 comm="syz.2.2452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 880.025136][ T30] audit: type=1400 audit(2000000400.519:15770): avc: denied { create } for pid=16796 comm="syz.2.2452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 880.089688][T16807] delete_channel: no stack [ 880.134721][ T30] audit: type=1400 audit(2000000400.519:15771): avc: denied { setopt } for pid=16796 comm="syz.2.2452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 880.371504][ T30] audit: type=1400 audit(2000000400.519:15772): avc: denied { write } for pid=16796 comm="syz.2.2452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 880.557270][ T30] audit: type=1400 audit(2000000400.529:15773): avc: denied { create } for pid=16782 comm="syz.3.2449" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 881.503618][T16808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 881.534760][ T24] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 881.545746][T16808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 881.684634][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 881.712827][ T24] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 881.728159][ T24] usb 5-1: config 179 has no interface number 0 [ 881.744026][ T24] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 881.769743][ T24] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 881.797286][ T24] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 881.820841][ T24] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 881.843539][ T24] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 881.873785][ T24] usb 5-1: config 179 interface 65 has no altsetting 0 [ 881.890722][ T24] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 881.910404][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.962808][ T24] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input45 [ 882.775438][T16865] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 882.821284][ T36] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.075250][ T36] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.174645][T16864] virt_wifi0 speed is unknown, defaulting to 1000 [ 883.417278][ T36] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.455236][ T36] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.812724][ T24] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 883.820548][ T30] kauditd_printk_skb: 129 callbacks suppressed [ 883.820583][ T30] audit: type=1400 audit(2000000405.429:15903): avc: denied { prog_load } for pid=16895 comm="syz.2.2464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 883.911441][T16904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2464'. [ 884.155042][ T30] audit: type=1400 audit(2000000405.439:15904): avc: denied { bpf } for pid=16895 comm="syz.2.2464" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 884.182214][ T30] audit: type=1400 audit(2000000405.439:15905): avc: denied { perfmon } for pid=16895 comm="syz.2.2464" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 884.206837][ T30] audit: type=1400 audit(2000000405.439:15906): avc: denied { prog_run } for pid=16895 comm="syz.2.2464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 884.229294][ T30] audit: type=1400 audit(2000000405.459:15907): avc: denied { create } for pid=16895 comm="syz.2.2464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 884.261565][ T30] audit: type=1400 audit(2000000405.459:15908): avc: denied { setopt } for pid=16895 comm="syz.2.2464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 884.287428][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 884.308917][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 884.338576][ T24] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 884.354375][ T30] audit: type=1400 audit(2000000405.459:15909): avc: denied { write } for pid=16895 comm="syz.2.2464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 884.379129][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.388419][ T30] audit: type=1400 audit(2000000405.549:15910): avc: denied { create } for pid=16895 comm="syz.2.2464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 884.483519][ T24] usb 4-1: config 0 descriptor?? [ 884.531974][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 884.541023][ T30] audit: type=1400 audit(2000000405.559:15911): avc: denied { bind } for pid=16895 comm="syz.2.2464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 884.565869][ T30] audit: type=1400 audit(2000000405.559:15912): avc: denied { setopt } for pid=16895 comm="syz.2.2464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 884.592225][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 884.612145][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 884.631595][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 884.649314][ T24] usb 4-1: media controller created [ 884.665397][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 884.693441][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 884.700764][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 884.720227][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input46 [ 884.742516][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 884.745050][ T9] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 884.757755][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 884.874932][T16818] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 884.915111][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 884.922812][ T24] dvb-usb: error while querying for an remote control event. [ 885.066637][T16818] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 885.077855][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 885.081535][T16818] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 885.096777][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 885.109354][ T24] dvb-usb: error while querying for an remote control event. [ 885.124149][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 885.146125][T16818] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 885.153386][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 885.182014][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 885.183753][T16818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.257628][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 885.260735][T16818] usb 6-1: config 0 descriptor?? [ 885.284695][T16819] dvb-usb: bulk message failed: -22 (1/0) [ 885.290760][T16819] dvb-usb: error while querying for an remote control event. [ 885.330910][T16818] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 885.339300][T16818] dvb-usb: bulk message failed: -22 (3/0) [ 885.397390][ T9] usb 3-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 885.423517][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.436574][T16819] usb 4-1: USB disconnect, device number 41 [ 885.441904][ T9] usb 3-1: Product: syz [ 885.450650][ T9] usb 3-1: Manufacturer: syz [ 885.454943][T16818] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 885.510750][T12257] usb 5-1: USB disconnect, device number 46 [ 885.517444][T16818] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 885.527706][T16819] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 885.580125][T16818] usb 6-1: media controller created [ 885.598525][T16818] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 885.612146][ T9] usb 3-1: SerialNumber: syz [ 886.184549][ T9] usb 3-1: config 0 descriptor?? [ 886.196767][T16818] dvb-usb: bulk message failed: -22 (6/0) [ 886.200491][ T9] ti_usb_3410_5052 3-1:0.0: TI USB 3410 1 port adapter converter detected [ 886.211197][T16818] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 886.238318][ T9] usb 3-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 886.238778][T16818] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input47 [ 886.425095][T16818] dvb-usb: schedule remote query interval to 150 msecs. [ 886.465646][T16818] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 886.530630][T16818] usb 6-1: USB disconnect, device number 19 [ 887.308588][T16818] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 887.457507][T12257] usb 3-1: USB disconnect, device number 59 [ 887.480637][T12257] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 887.534178][T12257] ti_usb_3410_5052 3-1:0.0: device disconnected [ 888.369503][T17055] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2477'. [ 889.021320][ T30] kauditd_printk_skb: 203 callbacks suppressed [ 889.038338][ T30] audit: type=1400 audit(2000000410.359:16116): avc: denied { read write } for pid=17050 comm="syz.4.2476" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 889.198168][T17075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2478'. [ 889.277386][ T30] audit: type=1400 audit(2000000410.359:16117): avc: denied { open } for pid=17050 comm="syz.4.2476" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 889.308985][ T30] audit: type=1400 audit(2000000410.409:16118): avc: denied { prog_load } for pid=17057 comm="syz.3.2478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 889.350723][ T30] audit: type=1400 audit(2000000410.409:16119): avc: denied { bpf } for pid=17057 comm="syz.3.2478" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 889.396270][ T30] audit: type=1400 audit(2000000410.409:16120): avc: denied { perfmon } for pid=17057 comm="syz.3.2478" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 889.442000][ T30] audit: type=1400 audit(2000000410.409:16121): avc: denied { bpf } for pid=17057 comm="syz.3.2478" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 889.588037][ T30] audit: type=1400 audit(2000000410.409:16122): avc: denied { prog_run } for pid=17057 comm="syz.3.2478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 889.763394][T17090] audit: audit_backlog=65 > audit_backlog_limit=64 [ 889.770350][T17090] audit: audit_lost=138 audit_rate_limit=0 audit_backlog_limit=64 [ 889.789161][T17088] audit: audit_backlog=65 > audit_backlog_limit=64 [ 890.113354][ T5865] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 890.132138][T17101] netlink: 9896 bytes leftover after parsing attributes in process `syz.4.2485'. [ 890.320833][ T5865] usb 3-1: Using ep0 maxpacket: 16 [ 890.383363][ T5865] usb 3-1: unable to get BOS descriptor or descriptor too short [ 890.392389][ T5865] usb 3-1: config 4 has an invalid interface number: 94 but max is 0 [ 890.402360][ T5865] usb 3-1: config 4 has an invalid interface number: 216 but max is 0 [ 890.412081][ T5865] usb 3-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 890.442866][ T5865] usb 3-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 890.451958][ T5865] usb 3-1: config 4 has 2 interfaces, different from the descriptor's value: 1 [ 890.550353][ T5865] usb 3-1: config 4 has no interface number 0 [ 890.570975][ T5865] usb 3-1: config 4 has no interface number 1 [ 890.592169][ T5865] usb 3-1: config 4 interface 94 altsetting 251 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 890.643720][ T5865] usb 3-1: config 4 interface 94 altsetting 251 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 890.704638][ T5865] usb 3-1: too many endpoints for config 4 interface 216 altsetting 255: 141, using maximum allowed: 30 [ 890.724694][ T5865] usb 3-1: config 4 interface 216 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 891.005598][ T5865] usb 3-1: config 4 interface 216 altsetting 255 bulk endpoint 0xD has invalid maxpacket 16 [ 891.190325][ T5865] usb 3-1: config 4 interface 216 altsetting 255 has a duplicate endpoint with address 0x3, skipping [ 891.204980][ T5865] usb 3-1: config 4 interface 216 altsetting 255 has 4 endpoint descriptors, different from the interface descriptor's value: 141 [ 891.223202][ T5865] usb 3-1: config 4 interface 94 has no altsetting 0 [ 891.234883][ T5865] usb 3-1: config 4 interface 216 has no altsetting 0 [ 891.234987][T12257] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 891.243906][ T5865] usb 3-1: New USB device found, idVendor=20df, idProduct=0001, bcdDevice=87.c8 [ 891.260405][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.293366][ T5865] usb 3-1: Product: syz [ 891.298075][ T5865] usb 3-1: Manufacturer: 唂瘺삃좜 [ 891.328165][ T5865] usb 3-1: SerialNumber: syz [ 891.475510][T12257] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 891.490706][T12257] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 891.525754][T12257] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 891.563943][ T5865] cdc_acm 3-1:4.94: skipping garbage [ 891.577016][ T5865] cdc_acm 3-1:4.94: skipping garbage [ 891.587099][ T5865] cdc_acm 3-1:4.216: skipping garbage [ 891.619722][ T5865] usb 3-1: USB disconnect, device number 60 [ 891.665573][T12257] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.714323][T12257] usb 2-1: config 0 descriptor?? [ 891.768104][T12257] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 891.819750][T12257] dvb-usb: bulk message failed: -22 (3/0) [ 891.931062][T12257] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 892.281979][T12257] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 892.343328][T12257] usb 2-1: media controller created [ 892.403021][T17148] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2491'. [ 892.406124][T12257] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 892.526336][T12257] dvb-usb: bulk message failed: -22 (6/0) [ 892.532462][T12257] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 892.585264][T12257] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input48 [ 892.656974][T12257] dvb-usb: schedule remote query interval to 150 msecs. [ 892.689403][T12257] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 892.731985][T12257] usb 2-1: USB disconnect, device number 35 [ 893.236500][T12257] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 893.244684][ T5865] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 893.415676][ T5865] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 893.437510][ T5865] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 893.463833][ T5865] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 893.498799][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.523229][T17186] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2495'. [ 893.562970][ T5865] usb 5-1: config 0 descriptor?? [ 893.614941][ T5865] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 893.630770][ T5865] dvb-usb: bulk message failed: -22 (3/0) [ 893.719517][T17189] netlink: 'syz.1.2495': attribute type 1 has an invalid length. [ 893.727405][T17189] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2495'. [ 893.900444][ T5865] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 894.065856][ T30] kauditd_printk_skb: 256 callbacks suppressed [ 894.065899][ T30] audit: type=1400 audit(2000000415.719:16376): avc: denied { create } for pid=17188 comm="syz.2.2497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 894.233348][ T5865] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 894.288109][ T5865] usb 5-1: media controller created [ 894.306440][ T5865] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 894.381316][ T30] audit: type=1400 audit(2000000415.759:16377): avc: denied { write } for pid=17188 comm="syz.2.2497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 894.430545][ T5865] dvb-usb: bulk message failed: -22 (6/0) [ 894.436707][ T5865] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 894.444475][ T30] audit: type=1400 audit(2000000415.759:16378): avc: denied { nlmsg_write } for pid=17188 comm="syz.2.2497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 894.457818][T17205] dvb-usb: bulk message failed: -22 (4/0) [ 894.479364][ T5865] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input49 [ 894.501664][ T30] audit: type=1400 audit(2000000415.769:16379): avc: denied { block_suspend } for pid=17188 comm="syz.2.2497" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 894.523219][ C0] vkms_vblank_simulate: vblank timer overrun [ 894.562502][ T30] audit: type=1400 audit(2000000415.869:16380): avc: denied { read write } for pid=5809 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 894.586788][ C0] vkms_vblank_simulate: vblank timer overrun [ 894.630096][ T5865] dvb-usb: schedule remote query interval to 150 msecs. [ 894.641916][ T5865] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 894.794925][ T5865] dvb-usb: bulk message failed: -22 (1/0) [ 894.800730][ T5865] dvb-usb: error while querying for an remote control event. [ 894.833963][T17211] FAULT_INJECTION: forcing a failure. [ 894.833963][T17211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 894.835547][T17211] [ 894.835554][T17211] ====================================================== [ 894.835560][T17211] WARNING: possible circular locking dependency detected [ 894.835567][T17211] syzkaller #0 Not tainted [ 894.835574][T17211] ------------------------------------------------------ [ 894.835580][T17211] syz.1.2498/17211 is trying to acquire lock: [ 894.835589][T17211] ffffffff8e2d1680 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 894.835636][T17211] [ 894.835636][T17211] but task is already holding lock: [ 894.835641][T17211] ffff8880b843a398 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 894.835682][T17211] [ 894.835682][T17211] which lock already depends on the new lock. [ 894.835682][T17211] [ 894.835688][T17211] [ 894.835688][T17211] the existing dependency chain (in reverse order) is: [ 894.835693][T17211] [ 894.835693][T17211] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 894.835713][T17211] _raw_spin_lock_nested+0x31/0x40 [ 894.835728][T17211] raw_spin_rq_lock_nested+0x29/0x130 [ 894.835750][T17211] task_rq_lock+0xcf/0x490 [ 894.835761][T17211] cgroup_move_task+0x81/0x2a0 [ 894.835776][T17211] css_set_move_task+0x288/0x5f0 [ 894.835796][T17211] cgroup_post_fork+0x201/0x9d0 [ 894.835809][T17211] copy_process+0x602d/0x76a0 [ 894.835822][T17211] kernel_clone+0xfc/0x930 [ 894.835834][T17211] user_mode_thread+0xc8/0x110 [ 894.835847][T17211] rest_init+0x23/0x2b0 [ 894.835866][T17211] start_kernel+0x3f6/0x4e0 [ 894.835881][T17211] x86_64_start_reservations+0x18/0x30 [ 894.835898][T17211] x86_64_start_kernel+0x130/0x190 [ 894.835913][T17211] common_startup_64+0x13e/0x148 [ 894.835933][T17211] [ 894.835933][T17211] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 894.835952][T17211] _raw_spin_lock_irqsave+0x3a/0x60 [ 894.835967][T17211] try_to_wake_up+0xb7/0x1870 [ 894.835990][T17211] __wake_up_common+0x135/0x1f0 [ 894.836013][T17211] __wake_up+0x31/0x60 [ 894.836029][T17211] tty_port_default_wakeup+0x47/0x60 [ 894.836054][T17211] serial8250_tx_chars+0x68e/0x860 [ 894.836069][T17211] serial8250_handle_irq+0x761/0xcb0 [ 894.836085][T17211] serial8250_default_handle_irq+0x9e/0x270 [ 894.836101][T17211] serial8250_interrupt+0xf8/0x1d0 [ 894.836119][T17211] __handle_irq_event_percpu+0x236/0x920 [ 894.836145][T17211] handle_irq_event+0xab/0x1e0 [ 894.836159][T17211] handle_edge_irq+0x3ca/0x9e0 [ 894.836181][T17211] __common_interrupt+0xd0/0x2f0 [ 894.836197][T17211] common_interrupt+0xba/0xe0 [ 894.836219][T17211] asm_common_interrupt+0x26/0x40 [ 894.836234][T17211] pv_native_safe_halt+0xf/0x20 [ 894.836250][T17211] default_idle+0x13/0x20 [ 894.836270][T17211] default_idle_call+0x6c/0xb0 [ 894.836290][T17211] do_idle+0x38d/0x500 [ 894.836302][T17211] cpu_startup_entry+0x4f/0x60 [ 894.836315][T17211] start_secondary+0x21d/0x2b0 [ 894.836331][T17211] common_startup_64+0x13e/0x148 [ 894.836351][T17211] [ 894.836351][T17211] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 894.836372][T17211] _raw_spin_lock_irqsave+0x3a/0x60 [ 894.836387][T17211] __wake_up+0x1c/0x60 [ 894.836401][T17211] tty_port_default_wakeup+0x47/0x60 [ 894.836425][T17211] serial8250_tx_chars+0x68e/0x860 [ 894.836439][T17211] serial8250_handle_irq+0x761/0xcb0 [ 894.836453][T17211] serial8250_default_handle_irq+0x9e/0x270 [ 894.836470][T17211] serial8250_interrupt+0xf8/0x1d0 [ 894.836487][T17211] __handle_irq_event_percpu+0x236/0x920 [ 894.836511][T17211] handle_irq_event+0xab/0x1e0 [ 894.836524][T17211] handle_edge_irq+0x3ca/0x9e0 [ 894.836547][T17211] __common_interrupt+0xd0/0x2f0 [ 894.836562][T17211] common_interrupt+0xba/0xe0 [ 894.836585][T17211] asm_common_interrupt+0x26/0x40 [ 894.836599][T17211] pv_native_safe_halt+0xf/0x20 [ 894.836616][T17211] default_idle+0x13/0x20 [ 894.836636][T17211] default_idle_call+0x6c/0xb0 [ 894.836658][T17211] do_idle+0x38d/0x500 [ 894.836671][T17211] cpu_startup_entry+0x4f/0x60 [ 894.836685][T17211] start_secondary+0x21d/0x2b0 [ 894.836701][T17211] common_startup_64+0x13e/0x148 [ 894.836722][T17211] [ 894.836722][T17211] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 894.836743][T17211] _raw_spin_lock_irqsave+0x3a/0x60 [ 894.836758][T17211] serial8250_console_write+0x181/0x1890 [ 894.836775][T17211] console_flush_all+0x801/0xc60 [ 894.836798][T17211] console_unlock+0xd8/0x210 [ 894.836820][T17211] vprintk_emit+0x3d7/0x680 [ 894.836834][T17211] _printk+0xc7/0x100 [ 894.836852][T17211] register_console+0xc2d/0x11b0 [ 894.836867][T17211] univ8250_console_init+0x5f/0x90 [ 894.836888][T17211] console_init+0x152/0x680 [ 894.836906][T17211] start_kernel+0x29f/0x4e0 [ 894.836922][T17211] x86_64_start_reservations+0x18/0x30 [ 894.836939][T17211] x86_64_start_kernel+0x130/0x190 [ 894.836955][T17211] common_startup_64+0x13e/0x148 [ 894.836977][T17211] [ 894.836977][T17211] -> #0 (console_owner){-.-.}-{0:0}: [ 894.836998][T17211] __lock_acquire+0x126f/0x1c90 [ 894.837024][T17211] lock_acquire+0x179/0x350 [ 894.837043][T17211] console_lock_spinning_enable+0x72/0x80 [ 894.837068][T17211] console_flush_all+0x7aa/0xc60 [ 894.837092][T17211] console_unlock+0xd8/0x210 [ 894.837115][T17211] vprintk_emit+0x3d7/0x680 [ 894.837128][T17211] _printk+0xc7/0x100 [ 894.837147][T17211] should_fail_ex+0x4e7/0x640 [ 894.837166][T17211] strncpy_from_user+0x3b/0x2e0 [ 894.837183][T17211] strncpy_from_user_nofault+0x7f/0x180 [ 894.837203][T17211] bpf_bprintf_prepare+0xe90/0x13f0 [ 894.837224][T17211] bpf_trace_printk+0xda/0x190 [ 894.837247][T17211] bpf_prog_930ede9872f2967c+0x3e/0x44 [ 894.837260][T17211] bpf_trace_run2+0x239/0x590 [ 894.837283][T17211] __bpf_trace_contention_begin+0xc9/0x110 [ 894.837302][T17211] trace_contention_begin.constprop.0+0xde/0x160 [ 894.837324][T17211] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 894.837343][T17211] do_raw_spin_lock+0x20e/0x2b0 [ 894.837365][T17211] raw_spin_rq_lock_nested+0x7e/0x130 [ 894.837389][T17211] __schedule+0x307/0x5de0 [ 894.837405][T17211] preempt_schedule_irq+0x51/0x90 [ 894.837422][T17211] irqentry_exit+0x36/0x90 [ 894.837439][T17211] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 894.837455][T17211] ____sys_sendmsg+0x30/0xc70 [ 894.837479][T17211] ___sys_sendmsg+0x134/0x1d0 [ 894.837496][T17211] __sys_sendmsg+0x16d/0x220 [ 894.837513][T17211] do_syscall_64+0xcd/0xfa0 [ 894.837531][T17211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.837547][T17211] [ 894.837547][T17211] other info that might help us debug this: [ 894.837547][T17211] [ 894.837552][T17211] Chain exists of: [ 894.837552][T17211] console_owner --> &p->pi_lock --> &rq->__lock [ 894.837552][T17211] [ 894.837575][T17211] Possible unsafe locking scenario: [ 894.837575][T17211] [ 894.837580][T17211] CPU0 CPU1 [ 894.837584][T17211] ---- ---- [ 894.837589][T17211] lock(&rq->__lock); [ 894.837598][T17211] lock(&p->pi_lock); [ 894.837609][T17211] lock(&rq->__lock); [ 894.837619][T17211] lock(console_owner); [ 894.837629][T17211] [ 894.837629][T17211] *** DEADLOCK *** [ 894.837629][T17211] [ 894.837633][T17211] 4 locks held by syz.1.2498/17211: [ 894.837643][T17211] #0: ffff8880b843a398 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 894.837688][T17211] #1: ffffffff8e3c4460 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1bc/0x590 [ 894.837734][T17211] #2: ffffffff8e3b1ac0 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 894.837774][T17211] #3: ffffffff8e3b1b30 (console_srcu){....}-{0:0}, at: console_flush_all+0x158/0xc60 [ 894.837819][T17211] [ 894.837819][T17211] stack backtrace: [ 894.837827][T17211] CPU: 0 UID: 0 PID: 17211 Comm: syz.1.2498 Not tainted syzkaller #0 PREEMPT(full) [ 894.837845][T17211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 894.837856][T17211] Call Trace: [ 894.837862][T17211] [ 894.837868][T17211] dump_stack_lvl+0x116/0x1f0 [ 894.837889][T17211] print_circular_bug+0x275/0x350 [ 894.837909][T17211] check_noncircular+0x14c/0x170 [ 894.837932][T17211] __lock_acquire+0x126f/0x1c90 [ 894.837958][T17211] lock_acquire+0x179/0x350 [ 894.837977][T17211] ? console_lock_spinning_enable+0x61/0x80 [ 894.838010][T17211] ? console_lock_spinning_enable+0x4a/0x80 [ 894.838037][T17211] console_lock_spinning_enable+0x72/0x80 [ 894.838063][T17211] ? console_lock_spinning_enable+0x61/0x80 [ 894.838088][T17211] console_flush_all+0x7aa/0xc60 [ 894.838117][T17211] ? __pfx_console_flush_all+0x10/0x10 [ 894.838146][T17211] ? is_printk_cpu_sync_owner+0x32/0x40 [ 894.838165][T17211] console_unlock+0xd8/0x210 [ 894.838191][T17211] ? __pfx_console_unlock+0x10/0x10 [ 894.838216][T17211] ? do_raw_spin_unlock+0xe0/0x230 [ 894.838241][T17211] ? _printk+0xc7/0x100 [ 894.838262][T17211] ? __down_trylock_console_sem+0xb0/0x140 [ 894.838286][T17211] vprintk_emit+0x3d7/0x680 [ 894.838302][T17211] ? __pfx_vprintk_emit+0x10/0x10 [ 894.838321][T17211] _printk+0xc7/0x100 [ 894.838340][T17211] ? __pfx__printk+0x10/0x10 [ 894.838362][T17211] ? bpf_trace_printk+0x126/0x190 [ 894.838386][T17211] ? __pfx____ratelimit+0x10/0x10 [ 894.838405][T17211] should_fail_ex+0x4e7/0x640 [ 894.838427][T17211] strncpy_from_user+0x3b/0x2e0 [ 894.838446][T17211] strncpy_from_user_nofault+0x7f/0x180 [ 894.838468][T17211] bpf_bprintf_prepare+0xe90/0x13f0 [ 894.838493][T17211] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 894.838518][T17211] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 894.838543][T17211] ? bpf_trace_run2+0x3e1/0x590 [ 894.838567][T17211] bpf_trace_printk+0xda/0x190 [ 894.838591][T17211] ? __pfx_bpf_trace_printk+0x10/0x10 [ 894.838615][T17211] ? rcu_is_watching+0x12/0xc0 [ 894.838633][T17211] ? bpf_trace_run2+0x3e1/0x590 [ 894.838662][T17211] bpf_prog_930ede9872f2967c+0x3e/0x44 [ 894.838676][T17211] bpf_trace_run2+0x239/0x590 [ 894.838702][T17211] ? __pfx_bpf_trace_run2+0x10/0x10 [ 894.838728][T17211] ? rb_read_data_buffer.constprop.0+0x184/0x430 [ 894.838752][T17211] ? __sanitizer_cov_trace_pc+0x3b/0x70 [ 894.838780][T17211] __bpf_trace_contention_begin+0xc9/0x110 [ 894.838801][T17211] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 894.838825][T17211] ? __pfx_check_buffer+0x10/0x10 [ 894.838846][T17211] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 894.838874][T17211] trace_contention_begin.constprop.0+0xde/0x160 [ 894.838899][T17211] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 894.838922][T17211] ? __lock_acquire+0xb8a/0x1c90 [ 894.838943][T17211] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 894.838969][T17211] do_raw_spin_lock+0x20e/0x2b0 [ 894.838993][T17211] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 894.839022][T17211] ? rcu_qs+0x2b/0xe0 [ 894.839037][T17211] ? rcu_note_context_switch+0x192/0x1e00 [ 894.839066][T17211] raw_spin_rq_lock_nested+0x7e/0x130 [ 894.839093][T17211] ? preempt_schedule_irq+0x51/0x90 [ 894.839111][T17211] __schedule+0x307/0x5de0 [ 894.839133][T17211] ? __lock_acquire+0xb8a/0x1c90 [ 894.839154][T17211] ? __pfx___schedule+0x10/0x10 [ 894.839173][T17211] ? __lock_acquire+0xb8a/0x1c90 [ 894.839195][T17211] ? find_held_lock+0x2b/0x80 [ 894.839212][T17211] preempt_schedule_irq+0x51/0x90 [ 894.839231][T17211] irqentry_exit+0x36/0x90 [ 894.839248][T17211] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 894.839267][T17211] RIP: 0010:____sys_sendmsg+0x30/0xc70 [ 894.839291][T17211] Code: 49 89 cd 41 54 49 bc 00 00 00 00 00 fc ff df 55 48 89 fd 53 48 89 f3 48 81 ec c8 00 00 00 4c 8d 74 24 28 89 14 24 49 c1 ee 03 <44> 89 44 24 08 48 c7 44 24 28 b3 8a b5 41 4b 8d 04 26 48 c7 44 24 [ 894.839308][T17211] RSP: 0018:ffffc9000c89faf0 EFLAGS: 00000a06 [ 894.839321][T17211] RAX: 0000000000000000 RBX: ffffc9000c89fe30 RCX: 0000000000000000 [ 894.839332][T17211] RDX: 0000000000000000 RSI: ffffc9000c89fe30 RDI: ffff88807c751140 [ 894.839343][T17211] RBP: ffff88807c751140 R08: 0000000000000000 R09: 0000000000000000 [ 894.839354][T17211] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 894.839364][T17211] R13: 0000000000000000 R14: 1ffff92001913f63 R15: dffffc0000000000 [ 894.839382][T17211] ? copy_msghdr_from_user+0x10a/0x160 [ 894.839402][T17211] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 894.839427][T17211] ___sys_sendmsg+0x134/0x1d0 [ 894.839446][T17211] ? __pfx____sys_sendmsg+0x10/0x10 [ 894.839464][T17211] ? __lock_acquire+0x622/0x1c90 [ 894.839499][T17211] __sys_sendmsg+0x16d/0x220 [ 894.839518][T17211] ? __pfx___sys_sendmsg+0x10/0x10 [ 894.839545][T17211] do_syscall_64+0xcd/0xfa0 [ 894.839565][T17211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.839581][T17211] RIP: 0033:0x7f935f78eec9 [ 894.839594][T17211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 894.839610][T17211] RSP: 002b:00007f9360645038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 894.839625][T17211] RAX: ffffffffffffffda RBX: 00007f935f9e5fa0 RCX: 00007f935f78eec9 [ 894.839636][T17211] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 894.839646][T17211] RBP: 00007f9360645090 R08: 0000000000000000 R09: 0000000000000000 [ 894.839656][T17211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 894.839666][T17211] R13: 00007f935f9e6038 R14: 00007f935f9e5fa0 R15: 00007fff6fe6aab8 [ 894.839683][T17211] [ 894.843340][ T30] audit: type=1400 audit(2000000415.869:16381): avc: denied { open } for pid=5809 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 894.852697][T17211] CPU: 0 UID: 0 PID: 17211 Comm: syz.1.2498 Not tainted syzkaller #0 PREEMPT(full) [ 894.852718][T17211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 894.852729][T17211] Call Trace: [ 894.852735][T17211] [ 894.852741][T17211] dump_stack_lvl+0x116/0x1f0 [ 894.852763][T17211] should_fail_ex+0x512/0x640 [ 894.852783][T17211] strncpy_from_user+0x3b/0x2e0 [ 894.852800][T17211] strncpy_from_user_nofault+0x7f/0x180 [ 894.852820][T17211] bpf_bprintf_prepare+0xe90/0x13f0 [ 894.852844][T17211] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 894.852866][T17211] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 894.852889][T17211] ? bpf_trace_run2+0x3e1/0x590 [ 894.852912][T17211] bpf_trace_printk+0xda/0x190 [ 894.852932][T17211] ? __pfx_bpf_trace_printk+0x10/0x10 [ 894.852953][T17211] ? rcu_is_watching+0x12/0xc0 [ 894.852969][T17211] ? bpf_trace_run2+0x3e1/0x590 [ 894.852995][T17211] bpf_prog_930ede9872f2967c+0x3e/0x44 [ 894.853013][T17211] bpf_trace_run2+0x239/0x590 [ 894.853035][T17211] ? __pfx_bpf_trace_run2+0x10/0x10 [ 894.853058][T17211] ? rb_read_data_buffer.constprop.0+0x184/0x430 [ 894.853079][T17211] ? __sanitizer_cov_trace_pc+0x3b/0x70 [ 894.853106][T17211] __bpf_trace_contention_begin+0xc9/0x110 [ 894.853125][T17211] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 894.853146][T17211] ? __pfx_check_buffer+0x10/0x10 [ 894.853165][T17211] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 894.853190][T17211] trace_contention_begin.constprop.0+0xde/0x160 [ 894.853213][T17211] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 894.853233][T17211] ? __lock_acquire+0xb8a/0x1c90 [ 894.853251][T17211] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 894.853274][T17211] do_raw_spin_lock+0x20e/0x2b0 [ 894.853295][T17211] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 894.853315][T17211] ? rcu_qs+0x2b/0xe0 [ 894.853328][T17211] ? rcu_note_context_switch+0x192/0x1e00 [ 894.853354][T17211] raw_spin_rq_lock_nested+0x7e/0x130 [ 894.853377][T17211] ? preempt_schedule_irq+0x51/0x90 [ 894.853393][T17211] __schedule+0x307/0x5de0 [ 894.853413][T17211] ? __lock_acquire+0xb8a/0x1c90 [ 894.853432][T17211] ? __pfx___schedule+0x10/0x10 [ 894.853448][T17211] ? __lock_acquire+0xb8a/0x1c90 [ 894.853467][T17211] ? find_held_lock+0x2b/0x80 [ 894.853483][T17211] preempt_schedule_irq+0x51/0x90 [ 894.853499][T17211] irqentry_exit+0x36/0x90 [ 894.853516][T17211] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 894.853532][T17211] RIP: 0010:____sys_sendmsg+0x30/0xc70 [ 894.853554][T17211] Code: 49 89 cd 41 54 49 bc 00 00 00 00 00 fc ff df 55 48 89 fd 53 48 89 f3 48 81 ec c8 00 00 00 4c 8d 74 24 28 89 14 24 49 c1 ee 03 <44> 89 44 24 08 48 c7 44 24 28 b3 8a b5 41 4b 8d 04 26 48 c7 44 24 [ 894.853569][T17211] RSP: 0018:ffffc9000c89faf0 EFLAGS: 00000a06 [ 894.853582][T17211] RAX: 0000000000000000 RBX: ffffc9000c89fe30 RCX: 0000000000000000 [ 894.853592][T17211] RDX: 0000000000000000 RSI: ffffc9000c89fe30 RDI: ffff88807c751140 [ 894.853601][T17211] RBP: ffff88807c751140 R08: 0000000000000000 R09: 0000000000000000 [ 894.853611][T17211] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 894.853620][T17211] R13: 0000000000000000 R14: 1ffff92001913f63 R15: dffffc0000000000 [ 894.853637][T17211] ? copy_msghdr_from_user+0x10a/0x160 [ 894.853654][T17211] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 894.853675][T17211] ___sys_sendmsg+0x134/0x1d0 [ 894.853692][T17211] ? __pfx____sys_sendmsg+0x10/0x10 [ 894.853708][T17211] ? __lock_acquire+0x622/0x1c90 [ 894.853739][T17211] __sys_sendmsg+0x16d/0x220 [ 894.853755][T17211] ? __pfx___sys_sendmsg+0x10/0x10 [ 894.853779][T17211] do_syscall_64+0xcd/0xfa0 [ 894.853798][T17211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.853812][T17211] RIP: 0033:0x7f935f78eec9 [ 894.853823][T17211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 894.853838][T17211] RSP: 002b:00007f9360645038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 894.853851][T17211] RAX: ffffffffffffffda RBX: 00007f935f9e5fa0 RCX: 00007f935f78eec9 [ 894.853862][T17211] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 894.853871][T17211] RBP: 00007f9360645090 R08: 0000000000000000 R09: 0000000000000000 [ 894.853881][T17211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 894.853890][T17211] R13: 00007f935f9e6038 R14: 00007f935f9e5fa0 R15: 00007fff6fe6aab8 [ 894.853905][T17211] [ 894.853956][ C0] vkms_vblank_simulate: vblank timer overrun [ 894.874613][ T30] audit: type=1400 audit(2000000415.869:16382): avc: denied { ioctl } for pid=5809 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 896.646047][ T5865] dvb-usb: bulk message failed: -22 (1/0) [ 896.651846][ T5865] dvb-usb: error while querying for an remote control event. [ 896.739826][ T30] audit: type=1400 audit(2000000415.899:16383): avc: denied { read } for pid=17157 comm="syz.4.2493" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 896.763826][ T30] audit: type=1400 audit(2000000415.899:16384): avc: denied { open } for pid=17157 comm="syz.4.2493" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 896.824660][ T5865] dvb-usb: bulk message failed: -22 (1/0) [ 896.830744][ T5865] dvb-usb: error while querying for an remote control event. [ 897.738740][ T30] audit: type=1400 audit(2000000415.899:16385): avc: denied { prog_load } for pid=17198 comm="syz.3.2496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 897.803975][ T5908] usb 5-1: USB disconnect, device number 47 [ 897.968882][ T5908] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.