last executing test programs: 23m30.323257288s ago: executing program 0 (id=384): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000380)={0x0, 0xff00, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000500050007000000000008000900000000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r6 = add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000004c0), 0x100) r7 = socket$can_j1939(0x1d, 0x2, 0x7) tkill(r0, 0x26) recvmsg$can_j1939(r7, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x2040) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r6}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) 23m29.200165327s ago: executing program 0 (id=390): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) syz_open_dev$vcsn(0x0, 0x1, 0x12000) mkdir(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0xd6741, 0x2fb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x10001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) getresuid(0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0xfe80, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x401, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1, 0x80}, [@IFLA_AF_SPEC={0x4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'ip_vti0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x58840}, 0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$mouse(&(0x7f0000000000), 0x8, 0x40200) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x13, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0a00fe005e8b9da7cba69d917de2ce3e0e2d000000bda10600000026010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020c31af8ffa1000000bfa10000000000000701000000feffffb702000008000000b70300000000000085000000ca0000275b000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet(0x2, 0x4000000000000001, 0x3) epoll_create1(0x0) r4 = io_uring_setup(0x669, &(0x7f00000002c0)) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) ioctl$SCSI_IOCTL_DOORUNLOCK(r4, 0x5381) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) 23m26.79119012s ago: executing program 0 (id=394): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ef"}]}], {0x14}}, 0xd0}}, 0x0) 23m26.625054833s ago: executing program 0 (id=398): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (fail_nth: 11) 23m25.673057342s ago: executing program 0 (id=399): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x8000000010, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) uname(0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) write(r1, &(0x7f00000002c0)="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", 0xfc) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) 23m25.389484643s ago: executing program 0 (id=402): socket$inet_sctp(0x2, 0x1, 0x84) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, &(0x7f0000000200)={0x0, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000740), &(0x7f0000001b40), 0x80, r5, 0x0, 0x7}, 0x38) 23m9.185237781s ago: executing program 32 (id=402): socket$inet_sctp(0x2, 0x1, 0x84) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, &(0x7f0000000200)={0x0, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000740), &(0x7f0000001b40), 0x80, r5, 0x0, 0x7}, 0x38) 22m51.901097741s ago: executing program 3 (id=458): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x8000000010, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) uname(0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) setxattr$system_posix_acl(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {0x1, 0x6}, [{0x2, 0x7}, {0x2, 0x2}], {}, [], {0x10, 0x3}}, 0x34, 0x0) write(r1, &(0x7f00000002c0)="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", 0xfc) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000240)={0x3c, r6, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}]}, 0x3c}}, 0x40890) 22m47.683428038s ago: executing program 3 (id=466): syz_open_dev$dri(&(0x7f00000008c0), 0x1fffffffffffffe, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0x1fffffffffffffe, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x4, 0x1, 0x81}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c643c, &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c643c, &(0x7f0000000300)) 22m47.144319346s ago: executing program 3 (id=468): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) recvmmsg$unix(r6, &(0x7f0000005b80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000005c0)=""/79, 0x4f}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001880), 0x6e, 0x0}}], 0x7, 0x1, &(0x7f00000014c0)={0x77359400}) sendmsg$nl_route_sched(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtclass={0x24, 0x28, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xa}, {0x5, 0xa}, {0xe, 0xffe0}}}, 0xfdef}, 0x1, 0x0, 0x0, 0x40d1}, 0x40d8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x250, 0xa8, 0xfeffffff, 0x250, 0x1a8, 0x2f8, 0x2f8, 0xffffffff, 0x2f8, 0x2f8, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @private=0xa010102, @rand_addr=0x640100ff, @gre_key=0x4, @icmp_id=0x68}}}}, {{@ip={@private=0xa010101, @multicast2, 0xffffff00, 0xffffffff, 'vxcan1\x00', 'veth1_to_team\x00', {0xff}, {}, 0x34, 0x2, 0x20}, 0x0, 0x70, 0xa8, 0x0, {0x0, 0x7}}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xe, @private=0xa010100, @empty, @port=0x4e24, @port=0x4e23}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @loopback, @multicast2, @icmp_id=0x68, @icmp_id=0x66}}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x27}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'veth0_macvtap\x00', {}, {}, 0x8, 0x1, 0x10}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xe, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @port=0x9, @gre_key=0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001d00000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRES16=r0, @ANYBLOB="010800040000000000000b00200008000300", @ANYRES32=r8, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f40000000800070000000000050002"], 0x58}}, 0x0) 22m45.717023205s ago: executing program 3 (id=472): r0 = socket(0x840000000002, 0x3, 0xfb) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r1, &(0x7f00000002c0)=""/173, 0xad) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x800000, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000140)=0xc) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000080)='./file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000100)=""/173, 0x73) 22m44.243107082s ago: executing program 3 (id=477): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x10, 0x803, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x840000000002, 0x3, 0x100) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = socket$netlink(0x10, 0x3, 0x15) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x1000000}, 0xc) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) 22m43.876530789s ago: executing program 3 (id=479): r0 = socket(0x2, 0x4, 0x243c) socket$packet(0x11, 0x3, 0x300) r1 = openat(0xffffffffffffff9c, 0x0, 0x64040, 0xd0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4000000000000001, 0x0, 0x1, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) socket$inet(0x2, 0x2, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000200)) write$P9_RGETLOCK(r1, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f933a3c92b", 0x14}], 0x1}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r5, 0x29, 0x6, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, {0x1, @link_local}, 0x4a, {0x2, 0x4e23, @private=0xa010102}, 'veth0_to_bond\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x2b1e}, 0x0) r9 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r9, 0xc0405602, &(0x7f0000000040)={0x10001, 0x8, 0x4, "7f6b96f3dd58b99fb04e525effc7e40566f5d5cd6819362aeac26cb7d6a0b5cd", 0x34325842}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000010004b04fcff", @ANYRES32=0x0, @ANYBLOB="000004000000000008002300040000001400140076657468315f746f5f62617461057600140003006272696467655f736c6176655f310000"], 0x50}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) socket$nl_route(0x10, 0x3, 0x0) 22m43.874103632s ago: executing program 2 (id=480): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x8}, &(0x7f00000000c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2a020400) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0xa, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x5c, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) read$msr(r1, &(0x7f0000002240)=""/102400, 0x19000) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x0, 0x2, 0x0, {0xa, 0x4e22, 0x1, @mcast1, 0x400}}}, 0x32) chown(&(0x7f0000000100)='./file0\x00', r2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff5000/0x9000)=nil, 0x9000, &(0x7f0000000400)='!!(-\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000021b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d04000d40080003400000001008000840000000010c0009800800014000000009140000001000010000000000000000000084100a"], 0xa4}}, 0x0) 22m42.907670739s ago: executing program 33 (id=479): r0 = socket(0x2, 0x4, 0x243c) socket$packet(0x11, 0x3, 0x300) r1 = openat(0xffffffffffffff9c, 0x0, 0x64040, 0xd0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4000000000000001, 0x0, 0x1, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) socket$inet(0x2, 0x2, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000200)) write$P9_RGETLOCK(r1, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f933a3c92b", 0x14}], 0x1}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r5, 0x29, 0x6, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, {0x1, @link_local}, 0x4a, {0x2, 0x4e23, @private=0xa010102}, 'veth0_to_bond\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x2b1e}, 0x0) r9 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r9, 0xc0405602, &(0x7f0000000040)={0x10001, 0x8, 0x4, "7f6b96f3dd58b99fb04e525effc7e40566f5d5cd6819362aeac26cb7d6a0b5cd", 0x34325842}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000010004b04fcff", @ANYRES32=0x0, @ANYBLOB="000004000000000008002300040000001400140076657468315f746f5f62617461057600140003006272696467655f736c6176655f310000"], 0x50}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) socket$nl_route(0x10, 0x3, 0x0) 22m42.892429079s ago: executing program 2 (id=482): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000380), 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000000c0)="00b8dc6fa8fccfa8e4d20154b28e615bab3cb6fccf3bddedff87efef8cb39e9e3680e2dcacca105746a3f07c9c6ee72f555ef9ab3617b9f815bf8bd7f2d9766f21a7bf3e", 0x44}], 0x1}}], 0x1, 0x3404c8d4) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004800)='/proc/diskstats\x00', 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x40102) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f0000000140)={0xd5, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) ppoll(0x0, 0x0, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) 22m41.948808562s ago: executing program 2 (id=483): r0 = getpid() syz_open_dev$sndctrl(&(0x7f0000000240), 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SOUND_MIXER_READ_CAPS(r2, 0x80044dfc, &(0x7f0000000080)) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xc491, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180), &(0x7f00000001c0)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000800)={{0x4, 0x0, 0x8, 0x8001, 'syz0\x00', 0xc22}, 0x2, 0x206, 0xff, r0, 0x0, 0x7fff, 'syz1\x00', 0x0}) 22m40.044978772s ago: executing program 2 (id=486): r0 = socket(0x840000000002, 0x3, 0xfb) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r1, &(0x7f00000002c0)=""/173, 0xad) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x800000, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000140)=0xc) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000080)='./file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000100)=""/173, 0x73) 22m39.988410148s ago: executing program 2 (id=487): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) timer_create(0x9, 0x0, &(0x7f0000000500)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x20004840) shutdown(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x7ba558d3, 0x8}}, './cgroup/../file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r4, 0x0, 0x81}, 0x18) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x801, 0x0) syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x4) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80202, 0x0) 22m39.385093799s ago: executing program 2 (id=489): syz_usb_connect(0x3, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf5000905", @ANYRES8], 0x0) 22m39.100024086s ago: executing program 34 (id=489): syz_usb_connect(0x3, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf5000905", @ANYRES8], 0x0) 22m36.216822264s ago: executing program 5 (id=426): r0 = socket(0x840000000002, 0x3, 0xfb) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r1, &(0x7f00000002c0)=""/173, 0xad) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x800000, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000140)=0xc) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x3) chdir(&(0x7f0000000480)='./cgroup\x00') r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000100)=""/173, 0x73) 22m36.08166822s ago: executing program 5 (id=495): r0 = socket(0x840000000002, 0x3, 0xfb) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r1, &(0x7f00000002c0)=""/173, 0xad) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x800000, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000140)=0xc) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000080)='./file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000100)=""/173, 0x73) 22m35.928861503s ago: executing program 5 (id=496): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x5, {0x3, 0x1, 0x0, 0x400000000000000, 0xfffffffd, 0x0, {0x1, 0x8, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x7, 0xc000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x1001a}}, 0x50) syz_io_uring_setup(0x2b0b, &(0x7f0000000240)={0x0, 0x0, 0x20, 0x100004, 0xef}, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r2, 0x0, 0x0, 0x2000, 0x0) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) clock_nanosleep(0xb, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) clock_adjtime(0x0, &(0x7f0000000040)={0x2000000d4c, 0x0, 0x0, 0x1, 0x3, 0xffffffffffffffff, 0x80000000000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x2}) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x4000082) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0) pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x4eb) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x2, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5e, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xbc, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x92, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x9, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x4002, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0xd, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400000], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7ffe, 0x0, 0x1, 0xb, 0xa, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x8000, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0xfffffffe, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x100, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x4, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 22m35.545844802s ago: executing program 5 (id=500): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_sctp(0x2, 0x1, 0x84) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, &(0x7f0000000200)={0x0, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000740), &(0x7f0000001b40), 0x80, r4, 0x0, 0x7}, 0x38) 22m35.210252693s ago: executing program 35 (id=500): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_sctp(0x2, 0x1, 0x84) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, &(0x7f0000000200)={0x0, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000740), &(0x7f0000001b40), 0x80, r4, 0x0, 0x7}, 0x38) 18.998192995s ago: executing program 8 (id=4448): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x54}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0, 0x800, r3}, 0x38) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x3a, 0xffff, [0x4, 0x80]}}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8880}, 0x0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, 0x0, 0x40) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c800008", @ANYRES16=0x0, @ANYBLOB="10002dbd7000fddbdf257900000008000300", @ANYBLOB="0c009900000000002b0000000400f4000400f4000400f4000400f4000400f400"], 0x3c}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(r6, &(0x7f0000000500)=[{{&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0xbf, 0x0}}], 0x73d, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r8, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1010}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)={0x268, 0x1, 0x5, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [{{0x254, 0x1, {{0x0, 0x6}, 0xfd, 0x2, 0x6, 0x6, 0xa, 'syz1\x00', "8e486e8c738f0a8e2561af37ce014710e5850f77b21b4d0f199f941f56f96c5c", "5f74f4b7a8c9f77c2c6e54614323ab10f651bb17237c81c39af0f9642f75d745", [{0x81, 0x7, {0x1, 0x9}}, {0x229, 0x9, {0x3}}, {0xff, 0xfff, {0x1, 0x5}}, {0x0, 0x4, {0x0, 0x6}}, {0x7f, 0x4, {0x2, 0x2}}, {0x1000, 0x6, {0x3, 0x1}}, {0xfffb, 0xff80, {0x1, 0x5}}, {0x81, 0x0, {0x3, 0xffffffff}}, {0x8, 0x6faf}, {0xeeaf, 0x3, {0x1, 0xe9b}}, {0x0, 0xe, {0x2, 0xb3}}, {0xff, 0x3, {0x2, 0x1000}}, {0x1000, 0xc3eb, {0x1, 0x7}}, {0x1, 0x1, {0x1, 0x7}}, {0x1, 0x4, {0x3, 0xccf}}, {0x8, 0xfff2, {0x3, 0x5}}, {0x5, 0x1, {0x0, 0x80000000}}, {0xd72f, 0x2, {0x3, 0x1}}, {0xc0, 0x4, {0xaea5b7bb50dfb4f, 0x3}}, {0x3, 0x2, {0x1, 0x7fffffff}}, {0x84, 0x8, {0x0, 0x10001}}, {0x2, 0x7, {0x2, 0xb}}, {0x9, 0x0, {0x1, 0x3}}, {0x6, 0xf3, {0x3, 0xae}}, {0x1, 0x6, {0x3, 0xfdd}}, {0x6, 0xa4, {0x2, 0x2}}, {0x6, 0xdac, {0x0, 0x7}}, {0x8, 0x5, {0x1, 0x80000001}}, {0x4, 0x4c, {0x2, 0x3}}, {0x7, 0x4, {0x1, 0xb70}}, {0x5, 0x0, {0x0, 0xfffffffd}}, {0x514, 0x10, {0x3, 0x8}}, {0x5, 0x1ff, {0x3, 0x78a6}}, {0x431, 0xbe2, {0x3}}, {0x1, 0x4, {0x0, 0x6}}, {0x0, 0xa, {0x1, 0x8}}, {0x7, 0x7fa7, {0x2, 0xfffffff7}}, {0x8011, 0x4, {0x3, 0x2}}, {0x7, 0x708, {0x2, 0xfff}}, {0x1, 0x6, {0x2, 0x8}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x44004}, 0x20008004) 17.458994927s ago: executing program 7 (id=4457): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000ec0)={{0x12, 0x1, 0x0, 0xef, 0xaa, 0x6e, 0x10, 0x1397, 0xbd, 0xc566, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe6, 0x2b, 0x3d}}]}}]}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a00"/42], 0xd0060) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xdff3429ccf58974d, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./cgroup\x00', &(0x7f0000000300), 0x20088a8, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYBLOB="4780bfac1e340f6b7b14a0fd599e468fa6761ac27b0e0dd79fefa6c13ab6f26e8d115d7e7eddb3f81c9bb580362c585708fd657ad512a286a630068c21c6567a7672b2f903b34cf6b98e58bf3f3b35bc90a1c8f8c47a67886feebc5ceb55776e9c004e3e9082ef83bc787f390eccd460f1a58f7820022232fa2dd21868e772085099ca8835c39157c02bf8a5844bd7943fcf151615b3cfba1eda5853ec429e52f7fd66874c0d308a8d57af33366ee3708095d49e804dc5e031d32e085de5957eaa9d94cba56b2c56cb266ee85fbc23f67e7807be2e8fa933f614f9d3e0674e8e7518de2ee87d4602aab2ace0accad1c0a16d", @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYBLOB="4fe3e7801beb9ba146c8e0f90ae7dc29eb0115079462509d95ee2a7ed86db3b3efe71d", @ANYRES64=r3, @ANYRESHEX=r0, @ANYBLOB=',\x00']) shmctl$IPC_RMID(0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000640)=""/79, 0x4f}], 0x1, &(0x7f00000006c0)=""/87, 0x57}, 0x2020) 16.980262807s ago: executing program 8 (id=4460): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r1, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, 0x0, 0x0) read$msr(r2, &(0x7f00000018c0)=""/102400, 0x19000) r4 = socket$netlink(0x10, 0x3, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) openat$vmci(0xffffff9c, &(0x7f0000001180), 0x2, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000040)='autofs\x00', 0x140000, &(0x7f0000000500)='\xebZt\x15\x8d\xa5W&\xae\xfb\xf73\xa6\xf5\x05\xf7\xdfcG!u\x9emB\xbc\xf78&\x1c.Ng>\xe6\x9b\x8f\xf6\xdfbrd9\xea\xca\'\xe1\x91\xf4\xb6\x1e\xb9Tp\xf9\x97\x16\xc7F\x1c\x80W(\\Q\t\xfd\xad\xe4\x8d\xa1\xb4\x8f\xed\x00\xeb\x17\xbf\x8e\xdb\xdf\xf6V\x18\xd9&L\xc5]\x89\xc1p\xc6\xe2Z[\x95\x02sk\xab\a*\xb1\x14*KKa\xa5\x9f+zSP<\xbc\x0e\x9a\xa6B\xf5ED|\x8a\a\x96\xdc*a\xd1t3\x97\xbc1[\x02\xe8!7\xcb}\n\xe2\xdc\x98\x89\x89g\xcdE\xe8\xa9\xdfH\xb3&+?e\xdb\xf7\xb2\x06\xbcm\f\xea\x87\x91z\x12\x91^\x1ds\x86or\xe5_\xa6A\x9ar\x1b{@AV\x8c;SE\v\xd5\x9c\x9f\xb9\xef\x824f\xe2\xd2$\xbbo\xd6\x81{z\x9c\xa1Y\xb2') chdir(&(0x7f0000000140)='./file1\x00') r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r5, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = open(&(0x7f00000002c0)='./file0\x00', 0x800002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x40049366, &(0x7f0000000180)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r4, @ANYRESHEX=r1], 0x0, 0x6, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.579227167s ago: executing program 1 (id=4463): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) (async) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x7}}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x34, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xfe}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009805}, 0x4000080) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000001, 0x32, 0xffffffffffffffff, 0xeffae000) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x12, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x41da}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x6}, @jmp={0x5, 0x0, 0xd, 0x0, 0x0, 0xfffffffffffffff4, 0xfffffffffffffffc}, @generic={0x40, 0x5, 0x4, 0x1fc, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) ptrace$getregset(0x4204, 0xffffffffffffffff, 0x4, &(0x7f0000000040)={&(0x7f0000000400)=""/155, 0x9b}) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000004c00)=""/102392, 0x18ff8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, r7}) 15.021208653s ago: executing program 1 (id=4464): r0 = socket(0xa, 0x2, 0x200) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='O', 0x1, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 14.862969901s ago: executing program 1 (id=4467): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x101}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x13) landlock_create_ruleset(&(0x7f0000000200)={0x1824, 0x2}, 0x18, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, &(0x7f0000000780)}, 0x20) 13.574763561s ago: executing program 7 (id=4470): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x3121, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 13.456815606s ago: executing program 1 (id=4471): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000002c0)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x10000}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x1, 0x3}}, @sco={0x1f, @none}, 0x101, 0x0, 0x0, 0x0, 0xff57, &(0x7f0000000240)='virt_wifi0\x00', 0x7, 0x9, 0x6}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000690000000000000100000094"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x400, 0x802, 0xff, 0x29d0, 0x600, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) 13.233929827s ago: executing program 7 (id=4472): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000008000000000000007e1b1f2995"], &(0x7f0000000000)='GPL\x00', 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, &(0x7f0000000380)='\x00', 0x0, 0x2}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_access\x00', 0x0, 0x9, 0x1) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @private=0xa010102, {[@generic={0x7, 0x7, "0446b64df3"}, @rr={0x7, 0x3, 0xd0}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, r8}) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(0xffffffffffffffff, 0xc004ae0a, &(0x7f00000000c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r7, 0x1002fff, &(0x7f0000392000/0x3000)=nil, 0x3000, 0xab1a}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000680)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x749bc}) 9.853581428s ago: executing program 1 (id=4474): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000100)=[{0x84, 0x77, 0x0, 0x0, @time={0x6, 0x1}, {}, {}, @raw32}, {0x7b, 0x7, 0x6, 0xc, @time={0x6, 0x8}, {0x7f, 0x8}, {0x3, 0xe}, @connect={{0x9c, 0x3}, {0x3, 0x5}}}], 0x38) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x32b, @time={0x5, 0xc0}, 0xff, {0x3}, 0x0, 0x0, 0x4}) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 9.8530786s ago: executing program 7 (id=4475): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x4000800) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="71337b0b689353ec5a2d5e31632c4a12ceb5a80e5d63acc6890e3cb8d2cb37bd00d4fd03e0c27c64da4a73f75f394d4acd01a26ac0cb06819502a0ffba63890a06c86288ac0313f6fb4c6b90"], &(0x7f0000000280)='syzkaller\x00', 0x200, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='fib6_table_lookup\x00', r1}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f00000000c0)={0x800, 0x4, 0x7, 0x6, 0xf97}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000600)) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) sendmsg$802154_dgram(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20044005}, 0x0) 9.718268955s ago: executing program 4 (id=4476): socket(0x10, 0x803, 0x0) syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x40}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000140)=ANY=[@ANYBLOB="010000"]) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000001800)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @address_request={0x11, 0x0, 0x0, 0x8}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}}, 0x0) 9.60821065s ago: executing program 8 (id=4477): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e0001000200"], 0x8) 8.931744884s ago: executing program 8 (id=4478): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1f, 0x12, 0xffffffffffffffff, 0x2000) 8.051636062s ago: executing program 8 (id=4479): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x690, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB=',roo', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000006300)={0x2020}, 0x2020) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x101102, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETA(r4, 0x8924, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x0, 0x13, "4feda26323b172e0"}) 8.050938578s ago: executing program 4 (id=4480): r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00f6ff0106030000000000000000000000008005000100070000000c000780080012400000000005000500020000000500edffffff000011000300686173683a69702c6d61726b00000000"], 0x4c}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xb0000001}) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r5, r5, &(0x7f0000000000)=0x2eb4, 0x2000007ff) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000240)="d3aa4b68854c7a4b23c40ab215ec518a50d1f072aac9ae601a8ab9ac35bbb74a1feb2974ed33643891e627fb7e03d04b5d38d84c75ca800872ffa47061cdf26781dc031309155e03ccc61f873a83a14f9b3faf533a2c093f9b8d5305943072be10a71406eb7f41d14e18ec57a1f43e86f0e286578d0db26efc1fade3", 0x7c, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x1c0000000020000, {0x1, 0x5, 0x0, '\x00', {0x4000, 0xad4, 0x5, 0x8, r8, r9, 0x4000, '\x00', 0x1, 0xffffffffffffffff, 0x100000000, 0x200737, {0x7, 0x6}, {0x33}, {0x3, 0x9}, {0x800000000000008, 0xa04}, 0x4, 0x80000b, 0xffffffff, 0x5}}}}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0x0, r7, {0x7, 0x2b, 0x0, 0x0, 0x0, 0xc5ca, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) shutdown(r6, 0x1) recvmmsg(r6, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x6) socket$nl_route(0x10, 0x3, 0x0) 5.351223021s ago: executing program 7 (id=4483): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'caif0\x00', 0x400}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x4, 0x1e, 0xf, 0x204, 0x71, @dev={0xfe, 0x80, '\x00', 0xb}, @remote, 0x40, 0x7800, 0x4, 0xfffffffc}}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="08000000000000f75802"]) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000100)=ANY=[]) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x24, r6, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x4, 0x5, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000080) 5.183609621s ago: executing program 4 (id=4484): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000002c0)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x10000}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x1, 0x3}}, @sco={0x1f, @none}, 0x101, 0x0, 0x0, 0x0, 0xff57, &(0x7f0000000240)='virt_wifi0\x00', 0x7, 0x9, 0x6}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e85"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x400, 0x802, 0xff, 0x29d0, 0x600, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) 4.431434334s ago: executing program 8 (id=4485): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) r1 = open(&(0x7f0000000280)='.\x00', 0x6420c0, 0x0) r2 = socket$inet6(0xa, 0x800, 0x8) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000040)=0xfffffff7, 0x4) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448d4, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000340)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000400), 0x40000000007f4, 0x0) read$msr(r3, &(0x7f0000004340)=""/102376, 0x18fe8) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x10a, &(0x7f0000000380)={0x0, 0xe51f, 0x0, 0x80, 0x1}, &(0x7f0000000340), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, 0x0, 0x1) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xff) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @remote}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r6, 0x6, 0x24, &(0x7f0000000080)=""/204, &(0x7f0000000180)=0xcc) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa05aaaaaaaabb88a80000"], 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xe, 0x0, &(0x7f0000000240)="250d26f288476d2610054c6588a8", 0x0, 0xd01, 0x2a0, 0x48, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x0) 3.078843835s ago: executing program 7 (id=4487): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r1, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, 0x0, 0x0) read$msr(r2, &(0x7f00000018c0)=""/102400, 0x19000) r4 = socket$netlink(0x10, 0x3, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) openat$vmci(0xffffff9c, &(0x7f0000001180), 0x2, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000040)='autofs\x00', 0x140000, &(0x7f0000000500)='\xebZt\x15\x8d\xa5W&\xae\xfb\xf73\xa6\xf5\x05\xf7\xdfcG!u\x9emB\xbc\xf78&\x1c.Ng>\xe6\x9b\x8f\xf6\xdfbrd9\xea\xca\'\xe1\x91\xf4\xb6\x1e\xb9Tp\xf9\x97\x16\xc7F\x1c\x80W(\\Q\t\xfd\xad\xe4\x8d\xa1\xb4\x8f\xed\x00\xeb\x17\xbf\x8e\xdb\xdf\xf6V\x18\xd9&L\xc5]\x89\xc1p\xc6\xe2Z[\x95\x02sk\xab\a*\xb1\x14*KKa\xa5\x9f+zSP<\xbc\x0e\x9a\xa6B\xf5ED|\x8a\a\x96\xdc*a\xd1t3\x97\xbc1[\x02\xe8!7\xcb}\n\xe2\xdc\x98\x89\x89g\xcdE\xe8\xa9\xdfH\xb3&+?e\xdb\xf7\xb2\x06\xbcm\f\xea\x87\x91z\x12\x91^\x1ds\x86or\xe5_\xa6A\x9ar\x1b{@AV\x8c;SE\v\xd5\x9c\x9f\xb9\xef\x824f\xe2\xd2$\xbbo\xd6\x81{z\x9c\xa1Y\xb2') chdir(&(0x7f0000000140)='./file1\x00') r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r5, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = open(&(0x7f00000002c0)='./file0\x00', 0x800002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x40049366, &(0x7f0000000180)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r4, @ANYRESHEX=r1], 0x0, 0x6, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.078206289s ago: executing program 4 (id=4488): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r1, 0x2285, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x49, 0x0, 0x0, @tick=0x200000, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @connect={{0x40, 0x7}, {0x80, 0x1}}}], 0x38) madvise(&(0x7f00001d7000/0x2000)=nil, 0x2000, 0xa) write$sndseq(r2, &(0x7f0000000200)=[{0x0, 0x2, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x1, 0x0, @time={0xffffffff}, {0x4, 0x3}, {0x0, 0x4}, @time=@tick=0x5}, {0xff, 0x0, 0x0, 0x0, @time={0x7, 0x7}, {0x0, 0x3}, {}, @control={0x0, 0x0, 0x800}}, {0x0, 0x0, 0x0, 0x5, @time, {0x2}, {0x0, 0x49}, @addr={0x1, 0x7f}}, {0x0, 0x1, 0x1, 0x0, @tick=0x401, {}, {}, @quote={{0x2, 0x2}, 0x9}}], 0x8c) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000000)={0x230, r0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000abb7e32ee90c9b200000002000000000000000003000084080000000600000001000000030000000000000000002e00d6d4f4875705e0c395c36389617e28e4d94e9d935100"/103], &(0x7f0000000380)=""/2, 0x46, 0x2, 0x1}, 0x28) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, &(0x7f00000000c0)) read$snapshot(r2, 0x0, 0xfda6) socket$kcm(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(Ou\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000fedbdf251600000008000300", @ANYRES32=r5, @ANYBLOB="0a0006000802110000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000041}, 0x4008040) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key(&(0x7f0000000140)='ceph\x00', 0x0, &(0x7f00000001c0)="bcfdc195f8b8fff0d7d38cebc3", 0xd, 0xfffffffffffffffe) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) write(r6, &(0x7f0000000000)="240000001a00590214f9f407000904101f00000000000020000000000800040001000000", 0x24) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r8, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) socket$inet6(0xa, 0x80000, 0x7) 3.00102249s ago: executing program 6 (id=4489): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0) 2.851153077s ago: executing program 6 (id=4490): socket(0x10, 0x803, 0x0) syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x40}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000140)=ANY=[@ANYBLOB="010000"]) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000001800)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @address_request={0x11, 0x0, 0x0, 0x8}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}}, 0x0) 2.525413055s ago: executing program 4 (id=4491): openat$sequencer(0xffffffffffffff9c, 0x0, 0x400, 0x0) r0 = open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x67) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2.243444931s ago: executing program 4 (id=4492): syz_usb_connect(0x2, 0x24, &(0x7f0000000ec0)={{0x12, 0x1, 0x0, 0xef, 0xaa, 0x6e, 0x10, 0x1397, 0xbd, 0xc566, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe6, 0x2b, 0x3d}}]}}]}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a00"/42], 0xd0060) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xdff3429ccf58974d, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000640)=""/79, 0x4f}], 0x1, &(0x7f00000006c0)=""/87, 0x57}, 0x2020) 2.216211198s ago: executing program 6 (id=4493): syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x1004082, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB="67727e10ea340180c200000086dd6012000800183a9a7a6c107fc22144f2aa2701000000000000000000000000000000010000000000000000000000000000000183009078000b36c0fe80000000000000000000000000bfa827edf9ef890d1369c4e2fbc600bb"], 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) splice(r6, 0x0, r8, 0x0, 0x8000f28, 0x8) splice(r7, 0x0, r4, 0x0, 0x6, 0xa) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) 1.195317238s ago: executing program 6 (id=4494): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r2, 0x11, 0x0, 0x0, @void, @value=r1}, 0x20) 1.052987436s ago: executing program 6 (id=4495): r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000440)={0x0, 0x0, {0x5, 0x6, 0x6, 0xba3}}) syz_io_uring_setup(0x7585, &(0x7f00000003c0)={0x0, 0x43c9, 0x2, 0x3, 0x261}, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x19, &(0x7f0000000340), 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(0xffffffffffffffff, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 57.683381ms ago: executing program 6 (id=4496): syz_open_dev$vim2m(&(0x7f00000000c0), 0x253, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10, &(0x7f0000000100), 0xfe, 0x458, &(0x7f00000001c0)="$eJzs3MtvG8UfAPDvOnH6/iW/Uh4tLYSXqHgkTfqgBy5FIHEACQkORZxMmlalboOaINGqgoJQOaJK3BFHJP4CLpQLAk5IXOGOkCqUC4XTorV3UzexnThx4hJ/PtImM95xZr67O/F4xusA+tZo9iOJ2BkRv0bEcD17Z4HR+q9b81em/p6/MpVEmr7+Z1Ir99f8lamiaPG8HfVMOtCm3mtvRVSq1emLeX587vy747OXLj979nzlzPSZ6QuTx48fOXxg6Njk0a7EuStr674PZvbvffnN669Onbz+9o9fZ+3dme9vjKNbRutHt6knul1Zj+1qSCeDPWwIHcn6aHa6yrX+PxwDsW1h33C89HFPGwesqzQtpVta776apmm6tVYO2HwSfRv6VPFCn73/LbYNGnrcFW6eiIV5jFv5Vt8zGKW8THkd6x+NiJNX//ki22Kd5iEAABrdOBERzzQb/5XivoZy/8vXhkYi4v8RsTsi7omIPRFxb0St7P0R8UCH9S9eIVk6/kmHVxXYCmXjv+fzta07x3/F6C9GBvLcrlr85eT02er0ofyYHIzyliw/0aaO71785bNW+xrHf9mW1V+MBfN2/DG4aILuVKVcWUvMjW5+FBHJSJP4kyiWcbLx8d6I2Nfh3y7WhM4+9dX+VmWWj7+NLqwzpV9GPFk//1djUfyFpOX65MRzxyaPjm+N6vSh8eKqWOqnn6+91qr+NcXfBTdvpLG96fW/EP9IsjVi9tLlc7X12tnO67j226ct39Os7vqfqwwlb9TSQ/lj71fm5i5ORAwlryx9fPL2c4t8UT67/g8+1rz/747bR+LBiMgu4gMR8VBEPJy3/ZGIeDQiPmkT/w8vPP5O5/G3mZXvoiz+U8ud/2g8/50nBs59/03n8Rey83+kljqYP5Kd/+XiWmkD13LsAAAA4L+iVPsMfFIaW0iXSmNj9c/w74ntperM7NzTp2feu3Cq/ln5kSiXipmu4Yb50Il8brjITy7KH87njT8f2FbLj03NVDudKwa6a0eL/p/5vd0NPMDm4H4t6F/6P/Qv/R/6l/4P/Uv/h/7VrP9/2IN2ABtvmdf/bRvVDmDjGf9D/9L/oX/p/9CXWt4bX1rTLf8SPUp8O7S272pYeSJKd0nImyZRjqa7Blf8ZRarTGxpuqvX/5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6498AAAD//+qa3cY=") r0 = syz_usb_connect$uac1(0x0, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) syz_usb_control_io(r0, &(0x7f0000001bc0)={0x2c, 0x0, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x84c}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)={0x20, 0xc, 0x68, {0x68, 0x6, "cbcc36cfcb825f01989f29b5b3a2b54a72ea1da401cf0a360d1fa0054f57f45d16dfa23b7a21bae4528c35f5ccca117337060ea1f5b7a81294ab7aaa086f45f71f522f2ef54a05a4c5f54deaa90979935fe92b55683a5d39fcd07f5827527329bbf4556d14ed"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x401}}, &(0x7f00000006c0)={0x0, 0xf, 0x56, {0x5, 0xf, 0x56, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x0, 0x5, 0xf7a5, 0xd2}, @ssp_cap={0xc, 0x10, 0xa, 0x3, 0x0, 0x7, 0xf0f, 0x40}, @generic={0x3a, 0x10, 0x3, "53266e61e6c2bf27a37036d6b2ed93c9cf7f814d2ff770c8ac015c8b9b23676017445f3b65d3f47d2c4defb2d534988190ac970ab794b9"}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0xe0, 0x7f, 0x9, "f6ae3fa8", "54c5db74"}}, &(0x7f0000000740)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x0, 0xe, 0x5, 0x8, 0x46, 0x7}}}, &(0x7f0000000d00)={0x84, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000900)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0xa}, &(0x7f00000009c0)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000a00)={0x20, 0x0, 0x4, {0x40, 0x2}}, &(0x7f0000000a40)={0x40, 0x7, 0x2, 0xb20d}, &(0x7f0000000a80)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000ac0)={0x40, 0xb, 0x2, "99e4"}, &(0x7f0000000b00)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000b40)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000b80)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000bc0)={0x40, 0x19, 0x2, 'aT'}, &(0x7f0000000c00)={0x40, 0x1a, 0x2, 0xff95}, &(0x7f0000000c40)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000c80)={0x40, 0x1e, 0x1, 0x23}, &(0x7f0000000cc0)={0x40, 0x21, 0x1, 0xfa}}) 0s ago: executing program 1 (id=4497): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi1\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x10) ioctl$SNDCTL_DSP_POST(r2, 0x5008, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, &(0x7f0000000200)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) r7 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet(r1, &(0x7f0000000500)="e6ed559df854ea6753be1b08da33516b4aef6e8bc57f906afa4e3b83ca245b2c46ac89156c551cb5fa585daf39ab1764e2c97604927ed97b6bd90aaa1c1110655842d91c9b4ffd1d9af9bd60371953b6a29a5d1debbe4e1cf1489d1a51cfedbedbd8a45a1bda33e25dbe637cb370158868ac4c4303fe1c09db7c1eb39c84844f0532fdecf3be8f1d860a01ba6bade18fe0f1de07b6c09f2b10cf2adc61e7783a35639c738ec7f4c614f7ca6a82efd1fa3b54e53bed7b3d16f6e7cca7e964fe016c71fce5ea9717297b0196c09aec79441106f7060cc99ae8c339cde06d4c0b955a72a17eda1b2b5ff15e4e05341ab97491ebd2", 0xf3, 0x10, 0x0, 0x0) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ptrace$ARCH_SHSTK_ENABLE(0x1e, 0xffffffffffffffff, 0x3, 0x5001) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x300, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x4, 0xcc7, 0x8, 0x7, 0xd, 0x100, 0x2, 0x1, 0x1, 0x1, 0x2745, 0x8, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0x9, 0xe69, 0x3c, 0x8, 0x6, 0x7, 0x2]}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r8, 0x942e, 0x0) kernel console output (not intermixed with test programs): 0 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1344.851794][T20032] RSP: 002b:00007f8246d8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1344.851813][T20032] RAX: ffffffffffffffda RBX: 00007f82461e5fa0 RCX: 00007f8245f8eec9 [ 1344.851827][T20032] RDX: 0000200000000080 RSI: 00000000c01c64ad RDI: 0000000000000005 [ 1344.851839][T20032] RBP: 00007f8246d8c090 R08: 0000000000000000 R09: 0000000000000000 [ 1344.851851][T20032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1344.851867][T20032] R13: 00007f82461e6038 R14: 00007f82461e5fa0 R15: 00007ffd956e6408 [ 1344.851900][T20032] [ 1345.093780][T20032] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1345.361438][T19889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1345.391757][T19889] 8021q: adding VLAN 0 to HW filter on device team0 [ 1345.410092][ T2912] bridge0: port 1(bridge_slave_0) entered blocking state [ 1345.417239][ T2912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1345.437855][T18225] bridge0: port 2(bridge_slave_1) entered blocking state [ 1345.445070][T18225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1346.481284][T19889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1346.734322][T20064] FAULT_INJECTION: forcing a failure. [ 1346.734322][T20064] name failslab, interval 1, probability 0, space 0, times 0 [ 1346.749374][T20064] CPU: 0 UID: 0 PID: 20064 Comm: syz.6.3610 Not tainted syzkaller #0 PREEMPT(full) [ 1346.749398][T20064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1346.749409][T20064] Call Trace: [ 1346.749417][T20064] [ 1346.749425][T20064] dump_stack_lvl+0x189/0x250 [ 1346.749450][T20064] ? __pfx____ratelimit+0x10/0x10 [ 1346.749470][T20064] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1346.749489][T20064] ? __pfx__printk+0x10/0x10 [ 1346.749515][T20064] ? __pfx___might_resched+0x10/0x10 [ 1346.749537][T20064] ? fs_reclaim_acquire+0x7d/0x100 [ 1346.749559][T20064] should_fail_ex+0x414/0x560 [ 1346.749585][T20064] should_failslab+0xa8/0x100 [ 1346.749605][T20064] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1346.749629][T20064] ? ptlock_alloc+0x20/0x70 [ 1346.749649][T20064] ? set_page_refcounted+0xa0/0x1e0 [ 1346.749670][T20064] ptlock_alloc+0x20/0x70 [ 1346.749693][T20064] pte_alloc_one+0x7a/0x310 [ 1346.749706][T20064] ? __pte_alloc+0x1d/0x1a0 [ 1346.749724][T20064] __pte_alloc+0x25/0x1a0 [ 1346.749745][T20064] __handle_mm_fault+0x4985/0x5400 [ 1346.749784][T20064] ? __pfx___handle_mm_fault+0x10/0x10 [ 1346.749826][T20064] ? find_vma+0xe7/0x160 [ 1346.749847][T20064] ? __pfx_find_vma+0x10/0x10 [ 1346.749871][T20064] handle_mm_fault+0x40a/0x8e0 [ 1346.749903][T20064] do_user_addr_fault+0x764/0x1380 [ 1346.749941][T20064] exc_page_fault+0x82/0x100 [ 1346.749972][T20064] asm_exc_page_fault+0x26/0x30 [ 1346.749988][T20064] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1346.750012][T20064] Code: 2e 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 8f 2e 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1346.750027][T20064] RSP: 0018:ffffc900001f7b78 EFLAGS: 00050202 [ 1346.750043][T20064] RAX: 00007ffffffff001 RBX: 0000000000000050 RCX: 0000000000000050 [ 1346.750055][T20064] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffc900001f7bc0 [ 1346.750067][T20064] RBP: ffffc900001f7c90 R08: ffffc900001f7c0f R09: 1ffff9200003ef81 [ 1346.750080][T20064] R10: dffffc0000000000 R11: fffff5200003ef82 R12: ffffc900001f7bc0 [ 1346.750093][T20064] R13: 1ffff9200003ef74 R14: ffffc900001f7bc0 R15: 0000200000000080 [ 1346.750124][T20064] _copy_from_user+0x7a/0xb0 [ 1346.750143][T20064] inet6_ioctl+0x180/0x280 [ 1346.750165][T20064] ? __pfx_inet6_ioctl+0x10/0x10 [ 1346.750195][T20064] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1346.750225][T20064] sock_do_ioctl+0xdc/0x300 [ 1346.750250][T20064] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1346.750290][T20064] sock_ioctl+0x576/0x790 [ 1346.750315][T20064] ? __pfx_sock_ioctl+0x10/0x10 [ 1346.750340][T20064] ? __fget_files+0x3a0/0x420 [ 1346.750356][T20064] ? __fget_files+0x2a/0x420 [ 1346.750377][T20064] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1346.750396][T20064] ? __pfx_sock_ioctl+0x10/0x10 [ 1346.750418][T20064] __se_sys_ioctl+0xfc/0x170 [ 1346.750439][T20064] do_syscall_64+0xfa/0xfa0 [ 1346.750456][T20064] ? lockdep_hardirqs_on+0x9c/0x150 [ 1346.750473][T20064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.750489][T20064] ? clear_bhb_loop+0x60/0xb0 [ 1346.750510][T20064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.750525][T20064] RIP: 0033:0x7f8245f8eec9 [ 1346.750541][T20064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1346.750555][T20064] RSP: 002b:00007f8246d8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1346.750573][T20064] RAX: ffffffffffffffda RBX: 00007f82461e5fa0 RCX: 00007f8245f8eec9 [ 1346.750585][T20064] RDX: 0000200000000080 RSI: 000000000000890c RDI: 0000000000000003 [ 1346.750597][T20064] RBP: 00007f8246d8c090 R08: 0000000000000000 R09: 0000000000000000 [ 1346.750608][T20064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1346.750619][T20064] R13: 00007f82461e6038 R14: 00007f82461e5fa0 R15: 00007ffd956e6408 [ 1346.750649][T20064] [ 1347.169993][T19889] veth0_vlan: entered promiscuous mode [ 1347.208834][T19889] veth1_vlan: entered promiscuous mode [ 1347.259586][T19889] veth0_macvtap: entered promiscuous mode [ 1347.272250][T19889] veth1_macvtap: entered promiscuous mode [ 1347.294911][T19889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1347.323574][T19889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1348.202225][T18225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1348.543675][T18225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1348.619818][T18225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1348.640311][T18225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1349.454901][T20105] overlayfs: failed to clone upperpath [ 1349.462437][T20106] fuse: Unknown parameter '߸.sI:/xއMy XCm<[W&Xt3s0x0000000000000005' [ 1349.462435][T20105] fuse: Unknown parameter '߸.sI:/xއMy XCm<[W&Xt3s0x0000000000000005' [ 1349.517750][ T24] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 1350.145234][T20116] program syz.1.3626 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1350.155275][T20116] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1350.573888][ T24] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1350.596100][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.608753][ T24] usb 7-1: config 0 descriptor?? [ 1350.616081][ T24] cp210x 7-1:0.0: cp210x converter detected [ 1350.653372][T20118] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3627'. [ 1350.663304][T20118] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3627'. [ 1351.264178][T20121] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3628'. [ 1351.431344][ T24] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1351.541118][T20126] program syz.1.3629 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1351.551338][T20126] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1351.998707][ T24] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1352.207639][ T24] usb 7-1: USB disconnect, device number 76 [ 1352.230901][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1352.377581][ T24] cp210x 7-1:0.0: device disconnected [ 1353.948631][T20157] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3638'. [ 1353.960271][T20157] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1353.968567][T20157] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1353.982101][ T8671] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 1354.234496][T20163] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.3639'. [ 1354.246804][T20163] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1354.264734][ T8671] usb 7-1: Using ep0 maxpacket: 32 [ 1354.320991][ T8671] usb 7-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1354.365378][ T8671] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1354.416528][ T8671] usb 7-1: Product: syz [ 1354.456445][ T8671] usb 7-1: Manufacturer: syz [ 1354.485812][ T8671] usb 7-1: SerialNumber: syz [ 1354.611288][ T8671] usb 7-1: config 0 descriptor?? [ 1355.289367][ T8671] peak_usb 7-1:0.0 can0: unable to request usb[type=0 value=0] err=-32 [ 1355.356370][ T8671] peak_usb 7-1:0.0: unable to read PCAN-USB Pro bootloader info (err -32) [ 1355.662334][ T8671] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -32 [ 1355.952940][ T8671] usb 7-1: USB disconnect, device number 77 [ 1358.034844][T20194] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3649'. [ 1358.043776][T20194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1358.151996][T20194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1358.208690][T20194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1358.233973][T20194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1360.134566][ T982] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 1360.308340][ T982] usb 7-1: Using ep0 maxpacket: 16 [ 1360.459547][ T982] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 1360.478369][ T982] usb 7-1: config 0 has no interface number 0 [ 1360.491699][ T982] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1361.085250][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 1361.085268][ T30] audit: type=1326 audit(1758571849.042:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20218 comm="syz.7.3657" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f15a2b8eec9 code=0x0 [ 1361.096892][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.096955][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.133221][ T982] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1361.156597][ T982] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1361.283864][ T982] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1361.292166][ T982] usb 7-1: Product: syz [ 1361.298788][ T982] usb 7-1: SerialNumber: syz [ 1361.353984][ T982] usb 7-1: config 0 descriptor?? [ 1361.386605][ T982] usbhid 7-1:0.8: couldn't find an input interrupt endpoint [ 1361.583533][T20232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3663'. [ 1361.872638][T20242] program syz.7.3660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1361.882552][T20242] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1362.778723][ T24] usb 9-1: new high-speed USB device number 78 using dummy_hcd [ 1362.889041][ T1567] usb 7-1: USB disconnect, device number 78 [ 1362.901588][T20250] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1362.915575][T20250] EXT4-fs (loop7): unable to read superblock [ 1363.126969][ T24] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1363.146458][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.173817][ T24] usb 9-1: config 0 descriptor?? [ 1363.288488][T20259] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 1363.299722][T20259] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1363.964573][T20261] FAULT_INJECTION: forcing a failure. [ 1363.964573][T20261] name failslab, interval 1, probability 0, space 0, times 0 [ 1363.977291][T20261] CPU: 0 UID: 0 PID: 20261 Comm: syz.6.3667 Not tainted syzkaller #0 PREEMPT(full) [ 1363.977313][T20261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1363.977322][T20261] Call Trace: [ 1363.977330][T20261] [ 1363.977338][T20261] dump_stack_lvl+0x189/0x250 [ 1363.977366][T20261] ? __pfx____ratelimit+0x10/0x10 [ 1363.977386][T20261] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1363.977404][T20261] ? __pfx__printk+0x10/0x10 [ 1363.977426][T20261] ? __pfx___might_resched+0x10/0x10 [ 1363.977447][T20261] ? fs_reclaim_acquire+0x7d/0x100 [ 1363.977467][T20261] should_fail_ex+0x414/0x560 [ 1363.977493][T20261] should_failslab+0xa8/0x100 [ 1363.977514][T20261] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1363.977537][T20261] ? prepare_kernel_cred+0x31/0x500 [ 1363.977554][T20261] ? _raw_spin_unlock+0x28/0x50 [ 1363.977577][T20261] prepare_kernel_cred+0x31/0x500 [ 1363.977594][T20261] ? _request_firmware+0x43f/0x15b0 [ 1363.977617][T20261] _request_firmware+0x454/0x15b0 [ 1363.977642][T20261] ? __mutex_lock+0x335/0x1350 [ 1363.977669][T20261] ? __rtnl_unlock+0xc8/0xf0 [ 1363.977693][T20261] ? __pfx__request_firmware+0x10/0x10 [ 1363.977718][T20261] ? __pfx_netdev_run_todo+0x10/0x10 [ 1363.977743][T20261] request_firmware+0x36/0x50 [ 1363.977762][T20261] reg_reload_regdb+0x8f/0x480 [ 1363.977780][T20261] ? __nla_parse+0x40/0x60 [ 1363.977803][T20261] ? __pfx_reg_reload_regdb+0x10/0x10 [ 1363.977823][T20261] ? nl80211_pre_doit+0x4d5/0x8e0 [ 1363.977856][T20261] genl_family_rcv_msg_doit+0x215/0x300 [ 1363.977883][T20261] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1363.977905][T20261] ? bpf_lsm_capable+0x9/0x20 [ 1363.977917][T20261] ? security_capable+0x7e/0x2e0 [ 1363.977933][T20261] genl_rcv_msg+0x60e/0x790 [ 1363.977959][T20261] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1363.977987][T20261] ? ref_tracker_free+0x63a/0x7d0 [ 1363.978008][T20261] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1363.978029][T20261] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 1363.978040][T20261] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1363.978054][T20261] ? ____sys_sendmsg+0x505/0x830 [ 1363.978065][T20261] ? ___sys_sendmsg+0x21f/0x2a0 [ 1363.978075][T20261] ? __x64_sys_sendmsg+0x19b/0x260 [ 1363.978085][T20261] ? do_syscall_64+0xfa/0xfa0 [ 1363.978101][T20261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1363.978128][T20261] netlink_rcv_skb+0x208/0x470 [ 1363.978145][T20261] ? __lock_acquire+0xab9/0xd20 [ 1363.978168][T20261] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1363.978186][T20261] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1363.978206][T20261] ? down_read+0x1ad/0x2e0 [ 1363.978221][T20261] genl_rcv+0x28/0x40 [ 1363.978234][T20261] netlink_unicast+0x82f/0x9e0 [ 1363.978266][T20261] ? __pfx_netlink_unicast+0x10/0x10 [ 1363.978292][T20261] ? netlink_sendmsg+0x642/0xb30 [ 1363.978309][T20261] ? skb_put+0x11b/0x210 [ 1363.978330][T20261] netlink_sendmsg+0x805/0xb30 [ 1363.978346][T20261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1363.978358][T20261] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1363.978372][T20261] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1363.978382][T20261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1363.978397][T20261] __sock_sendmsg+0x21c/0x270 [ 1363.978423][T20261] ____sys_sendmsg+0x505/0x830 [ 1363.978450][T20261] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1363.978479][T20261] ? import_iovec+0x74/0xa0 [ 1363.978492][T20261] ___sys_sendmsg+0x21f/0x2a0 [ 1363.978505][T20261] ? __pfx____sys_sendmsg+0x10/0x10 [ 1363.978537][T20261] ? __fget_files+0x2a/0x420 [ 1363.978553][T20261] ? __fget_files+0x3a0/0x420 [ 1363.978581][T20261] __x64_sys_sendmsg+0x19b/0x260 [ 1363.978604][T20261] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1363.978631][T20261] ? __pfx_ksys_write+0x10/0x10 [ 1363.978648][T20261] ? do_syscall_64+0xbe/0xfa0 [ 1363.978661][T20261] do_syscall_64+0xfa/0xfa0 [ 1363.978671][T20261] ? lockdep_hardirqs_on+0x9c/0x150 [ 1363.978683][T20261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1363.978697][T20261] ? clear_bhb_loop+0x60/0xb0 [ 1363.978719][T20261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1363.978735][T20261] RIP: 0033:0x7f8245f8eec9 [ 1363.978752][T20261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1363.978767][T20261] RSP: 002b:00007f8246d4a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1363.978782][T20261] RAX: ffffffffffffffda RBX: 00007f82461e6180 RCX: 00007f8245f8eec9 [ 1363.978789][T20261] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000006 [ 1363.978795][T20261] RBP: 00007f8246d4a090 R08: 0000000000000000 R09: 0000000000000000 [ 1363.978801][T20261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1363.978806][T20261] R13: 00007f82461e6218 R14: 00007f82461e6180 R15: 00007ffd956e6408 [ 1363.978823][T20261] [ 1364.433377][T20261] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3667'. [ 1364.489454][ T24] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1364.705166][ T24] [drm:udl_init] *ERROR* Selecting channel failed [ 1364.923855][ T24] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 2 [ 1364.945224][ T30] audit: type=1326 audit(1758571852.614:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20273 comm="syz.6.3671" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8245f8eec9 code=0x0 [ 1364.947568][ T24] [drm] Initialized udl on minor 2 [ 1365.102888][ T24] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1365.111419][ T24] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 1365.119269][ T8671] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1365.127366][ T8671] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 1365.137356][ T24] usb 9-1: USB disconnect, device number 78 [ 1366.266789][ T24] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 1366.431445][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1366.441531][ T8671] usb 9-1: new high-speed USB device number 79 using dummy_hcd [ 1366.449379][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1366.463007][ T24] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1366.472243][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.483251][ T24] usb 7-1: config 0 descriptor?? [ 1366.626338][ T8671] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1366.639850][ T8671] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.655410][ T8671] usb 9-1: config 0 descriptor?? [ 1366.664337][ T8671] cp210x 9-1:0.0: cp210x converter detected [ 1367.266417][ T24] kovaplus 0003:1E7D:2D50.0024: unknown main item tag 0x0 [ 1367.273681][ T8671] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1367.281299][ T24] kovaplus 0003:1E7D:2D50.0024: unknown main item tag 0x0 [ 1367.288536][ T24] kovaplus 0003:1E7D:2D50.0024: unknown main item tag 0x0 [ 1367.296125][ T24] kovaplus 0003:1E7D:2D50.0024: unknown main item tag 0x0 [ 1367.303343][ T24] kovaplus 0003:1E7D:2D50.0024: unknown main item tag 0x0 [ 1367.312439][ T24] kovaplus 0003:1E7D:2D50.0024: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.6-1/input0 [ 1367.517360][ T8671] cp210x 9-1:0.0: failed to get vendor val 0x370c size 15: -32 [ 1367.526227][ T8671] cp210x 9-1:0.0: GPIO initialisation failed: -32 [ 1367.540093][T20302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1367.550702][ T8671] usb 9-1: cp210x converter now attached to ttyUSB0 [ 1367.559669][ T8671] usb 9-1: USB disconnect, device number 79 [ 1367.567257][T20302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1367.578024][ T8671] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1367.586229][ T8671] cp210x 9-1:0.0: device disconnected [ 1367.593918][ T24] kovaplus 0003:1E7D:2D50.0024: couldn't init struct kovaplus_device [ 1367.603941][ T24] kovaplus 0003:1E7D:2D50.0024: couldn't install mouse [ 1367.615562][ T24] kovaplus 0003:1E7D:2D50.0024: probe with driver kovaplus failed with error -5 [ 1367.812751][ T8671] usb 7-1: USB disconnect, device number 79 [ 1368.226746][T20306] I/O error, dev loop8, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 1368.236388][T20306] EXT4-fs (loop8): unable to read superblock [ 1368.452526][T20312] vlan2: entered allmulticast mode [ 1368.458060][T20312] veth0_to_bond: entered allmulticast mode [ 1368.469902][T20312] netlink: 71 bytes leftover after parsing attributes in process `syz.1.3683'. [ 1368.789041][T20317] befs: (nullb0): invalid magic header [ 1371.027230][T20339] ntfs3: Unknown parameter '' [ 1371.043607][ T24] usb 9-1: new high-speed USB device number 80 using dummy_hcd [ 1371.091749][T20339] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1371.359068][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 1371.372758][ T24] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1371.391382][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1371.724819][ T24] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1371.756383][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.782803][ T24] usb 9-1: config 0 descriptor?? [ 1372.165869][T20351] Invalid ELF header type: 0 != 1 [ 1373.965158][ T24] usbhid 9-1:0.0: can't add hid device: -71 [ 1373.972443][ T24] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1374.034552][ T24] usb 9-1: USB disconnect, device number 80 [ 1375.366568][T20381] trusted_key: encrypted_key: insufficient parameters specified [ 1375.592183][ T30] audit: type=1326 audit(1758571862.398:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20382 comm="syz.4.3702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1feab8eec9 code=0x7ffc0000 [ 1375.619938][T20391] program syz.6.3701 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1375.645175][ T30] audit: type=1326 audit(1758571862.398:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20382 comm="syz.4.3702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1feab8eec9 code=0x7ffc0000 [ 1375.797346][ T30] audit: type=1326 audit(1758571862.398:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20382 comm="syz.4.3702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f1feab8eec9 code=0x7ffc0000 [ 1375.989457][ T30] audit: type=1326 audit(1758571862.398:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20382 comm="syz.4.3702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1feab8eec9 code=0x7ffc0000 [ 1376.336621][ T30] audit: type=1326 audit(1758571862.398:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20382 comm="syz.4.3702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f1feab8eec9 code=0x7ffc0000 [ 1376.538808][ T30] audit: type=1326 audit(1758571862.398:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20382 comm="syz.4.3702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1feab8eec9 code=0x7ffc0000 [ 1376.699104][ T30] audit: type=1326 audit(1758571862.398:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20382 comm="syz.4.3702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f1feab8eec9 code=0x7ffc0000 [ 1376.942472][ T30] audit: type=1326 audit(1758571862.398:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20382 comm="syz.4.3702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1feab8eec9 code=0x7ffc0000 [ 1376.965881][ T30] audit: type=1326 audit(1758571862.398:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20382 comm="syz.4.3702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1feab8d710 code=0x7ffc0000 [ 1376.988512][ T30] audit: type=1326 audit(1758571862.407:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20382 comm="syz.4.3702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1feab8eec9 code=0x7ffc0000 [ 1378.544187][T20434] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1378.572194][T20434] EXT4-fs (loop1): unable to read superblock [ 1378.663321][T20437] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1378.689750][T20437] overlayfs: failed to set xattr on upper [ 1378.709416][T20437] overlayfs: ...falling back to redirect_dir=nofollow. [ 1378.732358][T20437] overlayfs: ...falling back to index=off. [ 1378.739686][T20437] overlayfs: ...falling back to uuid=null. [ 1378.772283][T20437] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1378.795303][T20437] overlayfs: failed to set xattr on upper [ 1378.804085][T20437] overlayfs: ...falling back to redirect_dir=nofollow. [ 1378.811078][T20437] overlayfs: ...falling back to index=off. [ 1378.817392][T20437] overlayfs: ...falling back to uuid=null. [ 1378.832208][T20437] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1379.070493][T20423] vlan2: left promiscuous mode [ 1379.086135][T20423] macvtap0: left promiscuous mode [ 1379.444347][T20447] netlink: 'syz.7.3718': attribute type 1 has an invalid length. [ 1379.465176][T20447] netlink: 'syz.7.3718': attribute type 3 has an invalid length. [ 1379.484453][T20447] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3718'. [ 1380.699647][T20463] overlayfs: failed to clone upperpath [ 1382.112136][ T8671] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 1382.323143][ T8671] usb 7-1: Using ep0 maxpacket: 16 [ 1382.621536][ T8671] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1383.008156][ T8671] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1383.025847][ T8671] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.045407][ T8671] usb 7-1: Product: syz [ 1383.056572][ T8671] usb 7-1: Manufacturer: syz [ 1383.065695][ T8671] usb 7-1: SerialNumber: syz [ 1383.096879][ T8671] usb 7-1: config 0 descriptor?? [ 1383.113283][ T8671] hub 7-1:0.0: bad descriptor, ignoring hub [ 1383.133315][ T8671] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1383.171788][ T8671] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input52 [ 1383.841303][ T8671] usb 7-1: USB disconnect, device number 80 [ 1384.424880][ T1567] usb 9-1: new high-speed USB device number 81 using dummy_hcd [ 1384.708313][ T1567] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1384.738992][ T1567] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1384.747956][ T1567] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1384.774277][ T1567] usb 9-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 1384.793163][ T1567] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.801261][ T1567] usb 9-1: Product: syz [ 1384.812166][ T1567] usb 9-1: Manufacturer: syz [ 1384.823080][ T1567] usb 9-1: SerialNumber: syz [ 1384.842871][ T1567] usb 9-1: config 0 descriptor?? [ 1385.517920][T20515] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 1386.310327][ T1567] uvcvideo 9-1:0.0: Found UVC 34.00 device syz (8086:0b5b) [ 1386.351295][ T1567] uvcvideo 9-1:0.0: No valid video chain found. [ 1386.370714][ T1567] usb 9-1: USB disconnect, device number 81 [ 1386.813405][T20511] ntfs3: Unknown parameter '' [ 1386.836563][T20511] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1389.848416][T20542] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1389.870926][T20542] overlayfs: failed to set xattr on upper [ 1389.886345][T20542] overlayfs: ...falling back to redirect_dir=nofollow. [ 1389.923414][T20542] overlayfs: ...falling back to index=off. [ 1389.955320][T20542] overlayfs: ...falling back to uuid=null. [ 1390.225047][T20550] FAULT_INJECTION: forcing a failure. [ 1390.225047][T20550] name failslab, interval 1, probability 0, space 0, times 0 [ 1390.246980][T20550] CPU: 1 UID: 0 PID: 20550 Comm: syz.6.3748 Not tainted syzkaller #0 PREEMPT(full) [ 1390.247027][T20550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1390.247051][T20550] Call Trace: [ 1390.247059][T20550] [ 1390.247068][T20550] dump_stack_lvl+0x189/0x250 [ 1390.247095][T20550] ? __pfx____ratelimit+0x10/0x10 [ 1390.247116][T20550] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1390.247136][T20550] ? __pfx__printk+0x10/0x10 [ 1390.247162][T20550] ? __pfx___might_resched+0x10/0x10 [ 1390.247186][T20550] ? fs_reclaim_acquire+0x7d/0x100 [ 1390.247208][T20550] should_fail_ex+0x414/0x560 [ 1390.247236][T20550] should_failslab+0xa8/0x100 [ 1390.247257][T20550] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1390.247282][T20550] ? perf_event_alloc+0x1c4/0x2be0 [ 1390.247308][T20550] perf_event_alloc+0x1c4/0x2be0 [ 1390.247329][T20550] ? __pfx_ptrace_triggered+0x10/0x10 [ 1390.247361][T20550] ? __lock_acquire+0xab9/0xd20 [ 1390.247391][T20550] ? __pfx_perf_event_alloc+0x10/0x10 [ 1390.247410][T20550] ? perf_event_create_kernel_counter+0xeb/0x630 [ 1390.247437][T20550] ? perf_event_create_kernel_counter+0xeb/0x630 [ 1390.247458][T20550] ? __pfx_ptrace_triggered+0x10/0x10 [ 1390.247480][T20550] perf_event_create_kernel_counter+0x12c/0x630 [ 1390.247503][T20550] ? perf_event_create_kernel_counter+0xeb/0x630 [ 1390.247526][T20550] ptrace_set_debugreg+0x911/0xba0 [ 1390.247559][T20550] ? __pfx_ptrace_set_debugreg+0x10/0x10 [ 1390.247592][T20550] ? __lock_acquire+0xab9/0xd20 [ 1390.247619][T20550] ? __lock_acquire+0xab9/0xd20 [ 1390.247665][T20550] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1390.247701][T20550] ? lockdep_hardirqs_on+0x9c/0x150 [ 1390.247728][T20550] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1390.247747][T20550] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1390.247771][T20550] ? do_raw_spin_unlock+0x122/0x240 [ 1390.247795][T20550] ? wait_task_inactive+0x45e/0x7e0 [ 1390.247831][T20550] ? __pfx_wait_task_inactive+0x10/0x10 [ 1390.247866][T20550] arch_ptrace+0x361/0x410 [ 1390.247894][T20550] __se_sys_ptrace+0x150/0x3a0 [ 1390.247915][T20550] ? __pfx___se_sys_ptrace+0x10/0x10 [ 1390.247936][T20550] ? do_syscall_64+0xbe/0xfa0 [ 1390.247960][T20550] do_syscall_64+0xfa/0xfa0 [ 1390.247978][T20550] ? lockdep_hardirqs_on+0x9c/0x150 [ 1390.247997][T20550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.248014][T20550] ? clear_bhb_loop+0x60/0xb0 [ 1390.248036][T20550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.248052][T20550] RIP: 0033:0x7f8245f8eec9 [ 1390.248068][T20550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1390.248084][T20550] RSP: 002b:00007f8246d8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 1390.248102][T20550] RAX: ffffffffffffffda RBX: 00007f82461e5fa0 RCX: 00007f8245f8eec9 [ 1390.248115][T20550] RDX: 0000000000000388 RSI: 00000000000000a0 RDI: 0000000000000006 [ 1390.248126][T20550] RBP: 00007f8246d8c090 R08: 0000000000000000 R09: 0000000000000000 [ 1390.248137][T20550] R10: 0000000041d9fda7 R11: 0000000000000246 R12: 0000000000000001 [ 1390.248148][T20550] R13: 00007f82461e6038 R14: 00007f82461e5fa0 R15: 00007ffd956e6408 [ 1390.248181][T20550] [ 1391.163379][T20565] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 1391.690639][T20565] Falling back ldisc for ttyprintk. [ 1393.146491][T20569] mmap: syz.6.3752 (20569): VmData 25972736 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 1394.762256][T20592] syzkaller0: entered promiscuous mode [ 1394.767752][T20592] syzkaller0: entered allmulticast mode [ 1395.369106][T20606] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 1395.445360][T20606] sp0: Synchronizing with TNC [ 1395.761758][T20602] [U] [ 1398.684265][T20650] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 1398.717127][T20650] sp0: Synchronizing with TNC [ 1399.205557][T20646] [U] [ 1399.560936][ T982] usb 9-1: new high-speed USB device number 82 using dummy_hcd [ 1399.814281][ T982] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1399.825240][ T982] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.837889][ T982] usb 9-1: Product: syz [ 1399.844600][ T982] usb 9-1: Manufacturer: syz [ 1399.850225][ T982] usb 9-1: SerialNumber: syz [ 1399.974344][T17489] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 1399.996237][T20663] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1400.034594][T20663] EXT4-fs (loop7): unable to read superblock [ 1400.318316][T17489] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1400.327664][T17489] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.352810][T17489] usb 7-1: config 0 descriptor?? [ 1400.449403][T20665] overlayfs: failed to resolve './file1': -2 [ 1401.434952][T17489] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1402.737961][T17489] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 1402.747413][T17489] [drm] Initialized udl on minor 2 [ 1403.025800][T17489] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1403.038397][T17489] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1403.045720][T17491] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1403.059955][T17489] usb 7-1: USB disconnect, device number 81 [ 1403.066725][T17491] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1403.125315][ T982] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 1404.084863][ T982] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1404.095594][ T982] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1404.184448][ T982] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 1404.304362][ T982] usb 9-1: USB disconnect, device number 82 [ 1404.345606][T20693] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1404.453842][T20680] : renamed from bridge_slave_0 [ 1404.545481][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 1404.545493][ T30] audit: type=1800 audit(1758571889.174:2226): pid=20698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3789" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1404.851624][T20702] program syz.7.3790 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1404.861812][T20702] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1405.581883][ T30] audit: type=1326 audit(1758571890.125:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20703 comm="syz.4.3791" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1feab8eec9 code=0x0 [ 1410.217898][T20736] sp0: Synchronizing with TNC [ 1410.389069][T20730] [U] [ 1411.032554][T20749] input: syz0 as /devices/virtual/input/input53 [ 1411.889677][ T30] audit: type=1326 audit(1758571895.940:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20763 comm="syz.7.3807" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f15a2b8eec9 code=0x0 [ 1412.460828][T20773] FAULT_INJECTION: forcing a failure. [ 1412.460828][T20773] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1412.479691][T20773] CPU: 1 UID: 0 PID: 20773 Comm: syz.8.3808 Not tainted syzkaller #0 PREEMPT(full) [ 1412.479716][T20773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1412.479728][T20773] Call Trace: [ 1412.479736][T20773] [ 1412.479744][T20773] dump_stack_lvl+0x189/0x250 [ 1412.479769][T20773] ? __pfx____ratelimit+0x10/0x10 [ 1412.479790][T20773] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1412.479810][T20773] ? __pfx__printk+0x10/0x10 [ 1412.479833][T20773] ? __might_fault+0xb0/0x130 [ 1412.479867][T20773] should_fail_ex+0x414/0x560 [ 1412.479894][T20773] _copy_from_user+0x2d/0xb0 [ 1412.479914][T20773] get_timespec64+0x8e/0x1a0 [ 1412.479936][T20773] ? __pfx_get_timespec64+0x10/0x10 [ 1412.479968][T20773] __x64_sys_recvmmsg+0x143/0x240 [ 1412.479995][T20773] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1412.480020][T20773] ? do_syscall_64+0xbe/0xfa0 [ 1412.480044][T20773] do_syscall_64+0xfa/0xfa0 [ 1412.480060][T20773] ? lockdep_hardirqs_on+0x9c/0x150 [ 1412.480079][T20773] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1412.480095][T20773] ? clear_bhb_loop+0x60/0xb0 [ 1412.480115][T20773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1412.480132][T20773] RIP: 0033:0x7f99fc58eec9 [ 1412.480148][T20773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1412.480164][T20773] RSP: 002b:00007f99fd429038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1412.480182][T20773] RAX: ffffffffffffffda RBX: 00007f99fc7e5fa0 RCX: 00007f99fc58eec9 [ 1412.480194][T20773] RDX: 0400000000000ec0 RSI: 0000200000002ec0 RDI: 0000000000000003 [ 1412.480207][T20773] RBP: 00007f99fd429090 R08: 00002000000001c0 R09: 0000000000000000 [ 1412.480218][T20773] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1412.480228][T20773] R13: 00007f99fc7e6038 R14: 00007f99fc7e5fa0 R15: 00007fff10ce2de8 [ 1412.480258][T20773] [ 1414.221247][T20792] sp0: Synchronizing with TNC [ 1414.565225][T20783] [U] [ 1415.704803][T20794] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 1416.899016][T20810] FAULT_INJECTION: forcing a failure. [ 1416.899016][T20810] name failslab, interval 1, probability 0, space 0, times 0 [ 1417.114208][T20810] CPU: 0 UID: 0 PID: 20810 Comm: syz.1.3816 Not tainted syzkaller #0 PREEMPT(full) [ 1417.114233][T20810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1417.114244][T20810] Call Trace: [ 1417.114252][T20810] [ 1417.114260][T20810] dump_stack_lvl+0x189/0x250 [ 1417.114285][T20810] ? __pfx____ratelimit+0x10/0x10 [ 1417.114306][T20810] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1417.114326][T20810] ? __pfx__printk+0x10/0x10 [ 1417.114354][T20810] ? __pfx___might_resched+0x10/0x10 [ 1417.114374][T20810] ? fs_reclaim_acquire+0x7d/0x100 [ 1417.114396][T20810] should_fail_ex+0x414/0x560 [ 1417.114421][T20810] should_failslab+0xa8/0x100 [ 1417.114440][T20810] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1417.114464][T20810] ? __alloc_skb+0x112/0x2d0 [ 1417.114485][T20810] ? __build_skb_around+0x262/0x3f0 [ 1417.114505][T20810] __alloc_skb+0x112/0x2d0 [ 1417.114528][T20810] tipc_buf_acquire+0x2b/0xe0 [ 1417.114549][T20810] tipc_msg_build+0x785/0xcf0 [ 1417.114579][T20810] ? __pfx_tipc_msg_build+0x10/0x10 [ 1417.114606][T20810] ? tipc_group_bc_cong+0x41/0x210 [ 1417.114627][T20810] ? tipc_group_bc_cong+0x15f/0x210 [ 1417.114652][T20810] tipc_send_group_bcast+0x76c/0xa70 [ 1417.114692][T20810] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 1417.114724][T20810] ? __pfx_woken_wake_function+0x10/0x10 [ 1417.114749][T20810] ? finish_task_switch+0x266/0x950 [ 1417.114776][T20810] __tipc_sendmsg+0x2d7/0x2960 [ 1417.114791][T20810] ? rcu_is_watching+0x15/0xb0 [ 1417.114816][T20810] ? trace_sched_exit_tp+0x36/0x110 [ 1417.114836][T20810] ? __schedule+0x17ae/0x4cc0 [ 1417.114869][T20810] ? __pfx___tipc_sendmsg+0x10/0x10 [ 1417.114899][T20810] ? __pfx___schedule+0x10/0x10 [ 1417.114915][T20810] ? __schedule+0x17ae/0x4cc0 [ 1417.114936][T20810] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1417.114969][T20810] ? rcu_is_watching+0x15/0xb0 [ 1417.114994][T20810] ? trace_irq_disable+0x37/0x110 [ 1417.115014][T20810] ? preempt_schedule_irq+0xde/0x150 [ 1417.115040][T20810] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1417.115063][T20810] ? __lock_acquire+0xab9/0xd20 [ 1417.115100][T20810] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1417.115124][T20810] ? lockdep_hardirqs_on+0x9c/0x150 [ 1417.115144][T20810] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1417.115167][T20810] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1417.115201][T20810] tipc_sendmsg+0x55/0x70 [ 1417.115219][T20810] ? __pfx_tipc_sendmsg+0x10/0x10 [ 1417.115238][T20810] __sock_sendmsg+0x21c/0x270 [ 1417.115266][T20810] ____sys_sendmsg+0x52d/0x830 [ 1417.115293][T20810] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1417.115324][T20810] ? import_iovec+0x74/0xa0 [ 1417.115346][T20810] ___sys_sendmsg+0x21f/0x2a0 [ 1417.115367][T20810] ? __pfx____sys_sendmsg+0x10/0x10 [ 1417.115422][T20810] ? __fget_files+0x2a/0x420 [ 1417.115438][T20810] ? __fget_files+0x3a0/0x420 [ 1417.115466][T20810] __sys_sendmmsg+0x227/0x430 [ 1417.115490][T20810] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1417.115520][T20810] ? trace_irq_disable+0x37/0x110 [ 1417.115553][T20810] ? lockdep_hardirqs_on+0x9c/0x150 [ 1417.115585][T20810] __x64_sys_sendmmsg+0xa0/0xc0 [ 1417.115607][T20810] do_syscall_64+0xfa/0xfa0 [ 1417.115628][T20810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1417.115644][T20810] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1417.115660][T20810] ? clear_bhb_loop+0x60/0xb0 [ 1417.115681][T20810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1417.115697][T20810] RIP: 0033:0x7f2257b8eec9 [ 1417.115714][T20810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1417.115729][T20810] RSP: 002b:00007f2258a19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1417.115748][T20810] RAX: ffffffffffffffda RBX: 00007f2257de6090 RCX: 00007f2257b8eec9 [ 1417.115761][T20810] RDX: 0400000000000181 RSI: 00002000000030c0 RDI: 0000000000000005 [ 1417.115773][T20810] RBP: 00007f2258a19090 R08: 0000000000000000 R09: 0000000000000000 [ 1417.115784][T20810] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1417.115795][T20810] R13: 00007f2257de6128 R14: 00007f2257de6090 R15: 00007ffdf3814338 [ 1417.115827][T20810] [ 1417.802891][T17489] usb 9-1: new high-speed USB device number 83 using dummy_hcd [ 1418.482644][T17489] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1418.491970][T17489] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1418.503988][T17489] usb 9-1: config 0 descriptor?? [ 1419.367675][T17489] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1419.387041][T20803] Bluetooth: hci1: command 0x0406 tx timeout [ 1419.459849][T20828] team0: Port device bridge_slave_0 added [ 1419.599891][T17489] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 2 [ 1419.617765][T17489] [drm] Initialized udl on minor 2 [ 1419.656962][T20837] vfat: Unknown parameter 'shorwin95' [ 1419.887681][T17489] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 1419.900355][T17489] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 1420.443461][T20841] sp0: Synchronizing with TNC [ 1420.663470][T20838] [U] [ 1421.229925][T17488] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1421.230254][ T982] usb 9-1: USB disconnect, device number 83 [ 1421.251059][T17488] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 1422.395087][T20866] EXT4-fs: Ignoring removed oldalloc option [ 1422.402196][T20866] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1422.412072][T20866] EXT4-fs (loop7): unable to read superblock [ 1423.054748][T20869] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3833'. [ 1425.528260][ T982] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 1425.562854][T20891] 9pnet_fd: Insufficient options for proto=fd [ 1425.708271][T20894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3841'. [ 1425.757792][ T982] usb 7-1: Using ep0 maxpacket: 16 [ 1425.772470][ T982] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1425.785576][ T982] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1425.930197][ T982] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1425.973468][ T982] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.013983][ T982] usb 7-1: config 0 descriptor?? [ 1426.919960][T20907] FAULT_INJECTION: forcing a failure. [ 1426.919960][T20907] name failslab, interval 1, probability 0, space 0, times 0 [ 1426.935138][T20907] CPU: 0 UID: 0 PID: 20907 Comm: syz.7.3845 Not tainted syzkaller #0 PREEMPT(full) [ 1426.935162][T20907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1426.935173][T20907] Call Trace: [ 1426.935181][T20907] [ 1426.935190][T20907] dump_stack_lvl+0x189/0x250 [ 1426.935216][T20907] ? __pfx____ratelimit+0x10/0x10 [ 1426.935234][T20907] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1426.935246][T20907] ? __pfx__printk+0x10/0x10 [ 1426.935263][T20907] ? __pfx___might_resched+0x10/0x10 [ 1426.935280][T20907] should_fail_ex+0x414/0x560 [ 1426.935301][T20907] should_failslab+0xa8/0x100 [ 1426.935322][T20907] __kmalloc_noprof+0xcb/0x7f0 [ 1426.935345][T20907] ? kfree+0x4d/0x6d0 [ 1426.935363][T20907] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1426.935387][T20907] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1426.935401][T20907] ? tomoyo_domain+0xd9/0x130 [ 1426.935417][T20907] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1426.935428][T20907] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1426.935442][T20907] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1426.935503][T20907] ? __fget_files+0x2a/0x420 [ 1426.935525][T20907] ? __fget_files+0x3a0/0x420 [ 1426.935536][T20907] ? __fget_files+0x2a/0x420 [ 1426.935550][T20907] security_file_ioctl+0xcb/0x2d0 [ 1426.935562][T20907] __se_sys_ioctl+0x47/0x170 [ 1426.935577][T20907] do_syscall_64+0xfa/0xfa0 [ 1426.935591][T20907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1426.935606][T20907] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1426.935624][T20907] ? clear_bhb_loop+0x60/0xb0 [ 1426.935645][T20907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1426.935662][T20907] RIP: 0033:0x7f15a2b8eec9 [ 1426.935678][T20907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1426.935687][T20907] RSP: 002b:00007f15a39c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1426.935699][T20907] RAX: ffffffffffffffda RBX: 00007f15a2de6090 RCX: 00007f15a2b8eec9 [ 1426.935706][T20907] RDX: 0000200000000140 RSI: 00000000c1485544 RDI: 0000000000000003 [ 1426.935712][T20907] RBP: 00007f15a39c9090 R08: 0000000000000000 R09: 0000000000000000 [ 1426.935718][T20907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1426.935724][T20907] R13: 00007f15a2de6128 R14: 00007f15a2de6090 R15: 00007fffe4b9fe48 [ 1426.935745][T20907] [ 1426.935753][T20907] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1427.693478][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1427.722670][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1427.813256][T20915] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1428.069289][T20915] EXT4-fs (loop1): unable to read superblock [ 1428.427455][T20950] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1428.833828][ T982] usbhid 7-1:0.0: can't add hid device: -71 [ 1428.855338][ T982] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1428.954496][ T982] usb 7-1: USB disconnect, device number 82 [ 1430.078667][T20971] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3852'. [ 1430.162191][T20974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1433.515975][T20982] delete_channel: no stack [ 1434.372120][T20995] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 1434.497152][T20995] sp0: Synchronizing with TNC [ 1434.882092][T20991] [U] [ 1436.345181][T21000] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3860'. [ 1437.960638][T17489] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 1438.693207][T17489] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1438.715659][T17489] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1438.780402][T17489] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1438.789466][T17489] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1438.827471][T17489] usb 7-1: config 0 descriptor?? [ 1439.662120][T17489] kovaplus 0003:1E7D:2D50.0025: unknown main item tag 0x0 [ 1439.687377][T17489] kovaplus 0003:1E7D:2D50.0025: unknown main item tag 0x0 [ 1439.692286][T21041] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3870'. [ 1440.028502][T21043] sp0: Synchronizing with TNC [ 1440.126033][T17489] kovaplus 0003:1E7D:2D50.0025: unknown main item tag 0x0 [ 1440.126069][T17489] kovaplus 0003:1E7D:2D50.0025: unknown main item tag 0x0 [ 1440.126319][T17489] kovaplus 0003:1E7D:2D50.0025: unknown main item tag 0x0 [ 1440.674522][T21038] [U] [ 1440.971148][T17489] kovaplus 0003:1E7D:2D50.0025: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.6-1/input0 [ 1440.999561][T21045] Device name cannot be null; rc = [-22] [ 1441.864192][T21019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1441.865328][T21019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1442.070174][T17489] kovaplus 0003:1E7D:2D50.0025: couldn't init struct kovaplus_device [ 1442.236209][T17489] kovaplus 0003:1E7D:2D50.0025: couldn't install mouse [ 1442.259118][T17489] kovaplus 0003:1E7D:2D50.0025: probe with driver kovaplus failed with error -5 [ 1442.335689][T17489] usb 7-1: USB disconnect, device number 83 [ 1443.283670][T21060] sp0: Synchronizing with TNC [ 1443.735580][T21052] [U] [ 1443.938713][T21048] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3871'. [ 1446.988927][T21083] I/O error, dev loop8, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1447.041023][T21083] EXT4-fs (loop8): unable to read superblock [ 1447.328283][T21088] overlayfs: failed to resolve './file1': -2 [ 1451.220196][T21112] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3889'. [ 1451.250321][T21112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3889'. [ 1452.289994][ T6040] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 1452.539538][ T6040] usb 7-1: Using ep0 maxpacket: 32 [ 1452.871634][ T6040] usb 7-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1452.897090][ T6040] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.918782][ T6040] usb 7-1: Product: syz [ 1452.934039][ T6040] usb 7-1: Manufacturer: syz [ 1452.938667][ T6040] usb 7-1: SerialNumber: syz [ 1452.957501][ T6040] usb 7-1: config 0 descriptor?? [ 1453.146469][T21141] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1453.157570][T21141] EXT4-fs (loop7): unable to read superblock [ 1454.153151][ T6040] peak_usb 7-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 1454.163297][ T6040] peak_usb 7-1:0.0 can0: sending command failure: -22 [ 1454.171367][ T6040] peak_usb 7-1:0.0 can0: sending command failure: -22 [ 1454.220916][ T6040] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -22 [ 1454.322159][ T982] usb 7-1: USB disconnect, device number 84 [ 1456.873478][T21168] tipc: Started in network mode [ 1456.878376][T21168] tipc: Node identity 0a4ddc2149a, cluster identity 4711 [ 1457.670759][T21168] tipc: Enabled bearer , priority 0 [ 1457.708085][T21168] syzkaller0: entered promiscuous mode [ 1457.721246][T21168] syzkaller0: entered allmulticast mode [ 1457.985878][T21168] tipc: Resetting bearer [ 1459.007998][ T982] tipc: Node number set to 1139661857 [ 1459.029766][T21167] tipc: Resetting bearer [ 1461.446047][T21167] tipc: Disabling bearer [ 1461.612749][T21196] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3918'. [ 1461.622475][T21196] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3918'. [ 1461.632162][T21196] comedi comedi3: comedi_config --init_data is deprecated [ 1462.476255][T21206] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 1462.560612][T21206] sp0: Synchronizing with TNC [ 1463.044313][T21202] [U] [ 1464.996882][T21227] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1465.008705][T21227] EXT4-fs (loop6): unable to read superblock [ 1465.354852][T21227] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1465.478792][T21234] netlink: 196 bytes leftover after parsing attributes in process `syz.7.3930'. [ 1466.180627][T21227] exFAT-fs (loop6): unable to read boot sector [ 1466.245821][T21227] exFAT-fs (loop6): failed to read boot sector [ 1466.304223][T21227] exFAT-fs (loop6): failed to recognize exfat type [ 1466.510897][T21227] bridge0: port 2(bridge_slave_1) entered disabled state [ 1466.536295][T21227] bridge_slave_1: left allmulticast mode [ 1466.542133][T21227] bridge_slave_1: left promiscuous mode [ 1466.582421][T21227] bridge0: port 2(bridge_slave_1) entered disabled state [ 1467.127773][ T30] audit: type=1326 audit(1758571946.889:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21249 comm="syz.4.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1feab8eec9 code=0x7ffc0000 [ 1467.179282][ T30] audit: type=1326 audit(1758571946.889:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21249 comm="syz.4.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1feab8eec9 code=0x7ffc0000 [ 1467.222677][ T30] audit: type=1326 audit(1758571946.889:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21249 comm="syz.4.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f1feab8eec9 code=0x7ffc0000 [ 1467.269491][ T30] audit: type=1326 audit(1758571946.889:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21249 comm="syz.4.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1feab8eec9 code=0x7ffc0000 [ 1467.424035][ T30] audit: type=1326 audit(1758571946.889:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21249 comm="syz.4.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1feab8eec9 code=0x7ffc0000 [ 1467.474671][ T30] audit: type=1326 audit(1758571946.889:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21249 comm="syz.4.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f1feab8eec9 code=0x7ffc0000 [ 1467.549015][ T30] audit: type=1326 audit(1758571946.889:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21249 comm="syz.4.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1feab8eec9 code=0x7ffc0000 [ 1467.688575][T21261] fuse: Bad value for 'fd' [ 1467.993029][ T30] audit: type=1326 audit(1758571946.889:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21249 comm="syz.4.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1feab8eec9 code=0x7ffc0000 [ 1468.028526][ T30] audit: type=1326 audit(1758571946.889:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21249 comm="syz.4.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f1feab8eec9 code=0x7ffc0000 [ 1468.261090][ T30] audit: type=1326 audit(1758571946.889:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21249 comm="syz.4.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1feab8eec9 code=0x7ffc0000 [ 1468.939816][T20803] Bluetooth: hci5: command 0x0406 tx timeout [ 1471.246543][T21288] trusted_key: encrypted_key: insufficient parameters specified [ 1471.323377][T21290] program syz.8.3944 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1472.485529][T21302] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 1472.492484][T21302] cramfs: wrong magic [ 1474.099693][ T982] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 1474.303644][ T982] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1474.343957][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 1474.343973][ T30] audit: type=1326 audit(1758571953.590:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21321 comm="syz.4.3953" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1feab8eec9 code=0x0 [ 1474.372186][ T982] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.372214][ T982] usb 7-1: Product: syz [ 1474.372229][ T982] usb 7-1: Manufacturer: syz [ 1474.372243][ T982] usb 7-1: SerialNumber: syz [ 1474.387536][ T982] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1474.458596][ T5874] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1475.642941][T17488] usb 7-1: USB disconnect, device number 85 [ 1475.676803][ T5874] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1475.704603][ T5874] ath9k_htc: Failed to initialize the device [ 1475.757090][T17488] usb 7-1: ath9k_htc: USB layer deinitialized [ 1475.842017][T21336] netlink: 'syz.4.3955': attribute type 4 has an invalid length. [ 1476.731235][T21340] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 1478.035420][T21352] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3960'. [ 1479.405997][T21388] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3975'. [ 1480.391481][T21356] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1480.400653][T21356] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1480.409183][T21356] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1480.418859][T21356] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 1480.432507][T21356] tipc: Enabled bearer , priority 0 [ 1480.457822][T21356] syzkaller0: entered promiscuous mode [ 1480.467043][T21356] syzkaller0: entered allmulticast mode [ 1480.839425][T21405] tipc: Resetting bearer [ 1480.876900][T21355] tipc: Resetting bearer [ 1480.896342][T21355] tipc: Disabling bearer [ 1482.855788][T21418] FAULT_INJECTION: forcing a failure. [ 1482.855788][T21418] name failslab, interval 1, probability 0, space 0, times 0 [ 1482.918716][T21418] CPU: 0 UID: 0 PID: 21418 Comm: syz.1.3982 Not tainted syzkaller #0 PREEMPT(full) [ 1482.918742][T21418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1482.918752][T21418] Call Trace: [ 1482.918760][T21418] [ 1482.918768][T21418] dump_stack_lvl+0x189/0x250 [ 1482.918792][T21418] ? __pfx____ratelimit+0x10/0x10 [ 1482.918811][T21418] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1482.918830][T21418] ? __pfx__printk+0x10/0x10 [ 1482.918855][T21418] ? __pfx___might_resched+0x10/0x10 [ 1482.918873][T21418] ? fs_reclaim_acquire+0x7d/0x100 [ 1482.918895][T21418] should_fail_ex+0x414/0x560 [ 1482.918925][T21418] should_failslab+0xa8/0x100 [ 1482.918945][T21418] __kvmalloc_node_noprof+0x158/0x910 [ 1482.918964][T21418] ? bpf_test_run_xdp_live+0x1bf/0x1b20 [ 1482.918990][T21418] bpf_test_run_xdp_live+0x1bf/0x1b20 [ 1482.919011][T21418] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1482.919038][T21418] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1482.919069][T21418] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1482.919087][T21418] ? bpf_dispatcher_xdp+0x800/0x1000 [ 1482.919105][T21418] ? bpf_dispatcher_xdp+0x800/0x1000 [ 1482.919165][T21418] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1482.919191][T21418] ? _copy_from_user+0x94/0xb0 [ 1482.919209][T21418] ? bpf_test_init+0x133/0x170 [ 1482.919225][T21418] ? xdp_convert_md_to_buff+0x5b/0x340 [ 1482.919247][T21418] bpf_prog_test_run_xdp+0x713/0x1000 [ 1482.919282][T21418] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1482.919305][T21418] ? __fget_files+0x2a/0x420 [ 1482.919328][T21418] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1482.919348][T21418] bpf_prog_test_run+0x2c7/0x340 [ 1482.919375][T21418] __sys_bpf+0x581/0x870 [ 1482.919398][T21418] ? __pfx___sys_bpf+0x10/0x10 [ 1482.919433][T21418] ? ksys_write+0x22a/0x250 [ 1482.919458][T21418] ? __pfx_ksys_write+0x10/0x10 [ 1482.919488][T21418] __x64_sys_bpf+0x7c/0x90 [ 1482.919508][T21418] do_syscall_64+0xfa/0xfa0 [ 1482.919526][T21418] ? lockdep_hardirqs_on+0x9c/0x150 [ 1482.919545][T21418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1482.919570][T21418] ? clear_bhb_loop+0x60/0xb0 [ 1482.919591][T21418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1482.919608][T21418] RIP: 0033:0x7f2257b8eec9 [ 1482.919623][T21418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1482.919639][T21418] RSP: 002b:00007f2258a3a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1482.919658][T21418] RAX: ffffffffffffffda RBX: 00007f2257de5fa0 RCX: 00007f2257b8eec9 [ 1482.919672][T21418] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1482.919683][T21418] RBP: 00007f2258a3a090 R08: 0000000000000000 R09: 0000000000000000 [ 1482.919694][T21418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1482.919705][T21418] R13: 00007f2257de6038 R14: 00007f2257de5fa0 R15: 00007ffdf3814338 [ 1482.919736][T21418] [ 1483.780180][T21430] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 1483.846631][T21430] sp0: Synchronizing with TNC [ 1483.955469][T21428] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1484.106766][T17491] libceph: connect (1)[c::]:6789 error -101 [ 1484.113763][T17491] libceph: mon0 (1)[c::]:6789 connect error [ 1484.143642][T21425] ceph: No mds server is up or the cluster is laggy [ 1484.271682][T21421] [U] [ 1484.414616][T17491] libceph: connect (1)[c::]:6789 error -101 [ 1484.428462][T17491] libceph: mon0 (1)[c::]:6789 connect error [ 1484.615944][T21439] netlink: 'syz.7.3987': attribute type 1 has an invalid length. [ 1484.851841][T21439] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3987'. [ 1484.966871][T21441] bond1: (slave geneve3): making interface the new active one [ 1484.975314][T21441] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 1484.997586][T21439] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1485.511900][T21455] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 1485.607033][T21455] sp0: Synchronizing with TNC [ 1486.039748][T21448] [U] [ 1488.932166][T21489] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 1488.979645][T21489] sp0: Synchronizing with TNC [ 1489.394025][T21486] [U] [ 1491.789276][T21516] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1491.815488][T21516] EXT4-fs (loop7): unable to read superblock [ 1494.253718][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1494.261605][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1494.337249][ T5874] IPVS: starting estimator thread 0... [ 1494.434931][T21533] kvm: kvm [21532]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x200000000240 [ 1494.435811][T21531] IPVS: using max 33 ests per chain, 79200 per kthread [ 1494.634607][T21539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1494.671548][T21539] batadv_slave_0: entered promiscuous mode [ 1494.703874][T21544] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4015'. [ 1494.756885][T21546] tipc: Started in network mode [ 1494.767606][T21546] tipc: Node identity 5a560d74f9e5, cluster identity 4711 [ 1494.782287][T21546] tipc: Enabled bearer , priority 0 [ 1494.854188][T21546] syzkaller0: entered promiscuous mode [ 1494.864774][T21546] syzkaller0: entered allmulticast mode [ 1494.897890][T21545] tipc: Resetting bearer [ 1495.034677][T21545] tipc: Disabling bearer [ 1495.091116][T21560] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4022'. [ 1495.237534][T21561] : renamed from veth0_to_bond (while UP) [ 1496.379705][T21580] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4027'. [ 1496.562728][T21588] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4031'. [ 1496.809638][T17490] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 1496.981482][T17490] usb 7-1: Using ep0 maxpacket: 32 [ 1496.991322][T17490] usb 7-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1497.000548][T17490] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.008591][T17490] usb 7-1: Product: syz [ 1497.012744][T17490] usb 7-1: Manufacturer: syz [ 1497.017441][T17490] usb 7-1: SerialNumber: syz [ 1497.023737][T17490] usb 7-1: config 0 descriptor?? [ 1497.974628][T17490] peak_usb 7-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 1497.989346][T17490] peak_usb 7-1:0.0 can0: sending command failure: -22 [ 1497.996292][T17490] peak_usb 7-1:0.0 can0: sending command failure: -22 [ 1498.146441][T21609] overlayfs: missing 'lowerdir' [ 1498.175529][T17490] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -22 [ 1498.221073][T17490] usb 7-1: USB disconnect, device number 86 [ 1498.753516][T21620] sp0: Synchronizing with TNC [ 1498.911919][T20936] TC_ACT_REPEAT abuse ? [ 1499.200585][T21614] [U] [ 1500.096884][T17490] TC_ACT_REPEAT abuse ? [ 1500.819442][T21631] xfs: Unknown parameter 'attr2' [ 1501.343803][T17490] TC_ACT_REPEAT abuse ? [ 1501.387289][T21637] I/O error, dev loop8, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1501.437764][T21637] EXT4-fs (loop8): unable to read superblock [ 1501.483160][T21642] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4046'. [ 1501.677780][T18225] TC_ACT_REPEAT abuse ? [ 1501.738055][T17490] usb 9-1: new high-speed USB device number 84 using dummy_hcd [ 1501.828111][T21648] pimreg3: entered allmulticast mode [ 1503.201239][T18225] TC_ACT_REPEAT abuse ? [ 1503.246675][T17491] TC_ACT_REPEAT abuse ? [ 1503.251636][T17491] TC_ACT_REPEAT abuse ? [ 1503.259027][T21643] delete_channel: no stack [ 1503.319969][T17490] usb 9-1: Using ep0 maxpacket: 16 [ 1503.331005][T17490] usb 9-1: config 1 has an invalid descriptor of length 119, skipping remainder of the config [ 1503.348141][T17490] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1503.354450][T21655] FAULT_INJECTION: forcing a failure. [ 1503.354450][T21655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1503.370591][T21655] CPU: 1 UID: 0 PID: 21655 Comm: syz.7.4052 Not tainted syzkaller #0 PREEMPT(full) [ 1503.370613][T21655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1503.370623][T21655] Call Trace: [ 1503.370631][T21655] [ 1503.370641][T21655] dump_stack_lvl+0x189/0x250 [ 1503.370668][T21655] ? __pfx____ratelimit+0x10/0x10 [ 1503.370689][T21655] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1503.370709][T21655] ? __pfx__printk+0x10/0x10 [ 1503.370745][T21655] should_fail_ex+0x414/0x560 [ 1503.370772][T21655] _copy_to_user+0x31/0xb0 [ 1503.370791][T21655] simple_read_from_buffer+0xe1/0x170 [ 1503.370822][T21655] proc_fail_nth_read+0x1b3/0x220 [ 1503.370848][T21655] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1503.370874][T21655] ? rw_verify_area+0x2a6/0x4d0 [ 1503.370896][T21655] ? __lock_acquire+0xab9/0xd20 [ 1503.370917][T21655] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1503.370941][T21655] vfs_read+0x200/0xa30 [ 1503.370964][T21655] ? fdget_pos+0x247/0x320 [ 1503.370986][T21655] ? __pfx___mutex_lock+0x10/0x10 [ 1503.371009][T21655] ? __pfx_vfs_read+0x10/0x10 [ 1503.371034][T21655] ? __fget_files+0x2a/0x420 [ 1503.371057][T21655] ? __fget_files+0x3a0/0x420 [ 1503.371074][T21655] ? __fget_files+0x2a/0x420 [ 1503.371101][T21655] ksys_read+0x145/0x250 [ 1503.371128][T21655] ? __pfx_ksys_read+0x10/0x10 [ 1503.371156][T21655] ? do_syscall_64+0xbe/0xfa0 [ 1503.371180][T21655] do_syscall_64+0xfa/0xfa0 [ 1503.371199][T21655] ? lockdep_hardirqs_on+0x9c/0x150 [ 1503.371218][T21655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1503.371236][T21655] ? clear_bhb_loop+0x60/0xb0 [ 1503.371258][T21655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1503.371275][T21655] RIP: 0033:0x7f15a2b8d8dc [ 1503.371301][T21655] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1503.371315][T21655] RSP: 002b:00007f15a39ea030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1503.371334][T21655] RAX: ffffffffffffffda RBX: 00007f15a2de5fa0 RCX: 00007f15a2b8d8dc [ 1503.371347][T21655] RDX: 000000000000000f RSI: 00007f15a39ea0a0 RDI: 0000000000000003 [ 1503.371358][T21655] RBP: 00007f15a39ea090 R08: 0000000000000000 R09: 0000000000000000 [ 1503.371371][T21655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1503.371382][T21655] R13: 00007f15a2de6038 R14: 00007f15a2de5fa0 R15: 00007fffe4b9fe48 [ 1503.371415][T21655] [ 1503.722643][T21659] FAULT_INJECTION: forcing a failure. [ 1503.722643][T21659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1503.738984][T21659] CPU: 1 UID: 0 PID: 21659 Comm: syz.1.4053 Not tainted syzkaller #0 PREEMPT(full) [ 1503.739009][T21659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1503.739019][T21659] Call Trace: [ 1503.739027][T21659] [ 1503.739035][T21659] dump_stack_lvl+0x189/0x250 [ 1503.739060][T21659] ? __pfx____ratelimit+0x10/0x10 [ 1503.739080][T21659] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1503.739100][T21659] ? __pfx__printk+0x10/0x10 [ 1503.739123][T21659] ? __might_fault+0xb0/0x130 [ 1503.739159][T21659] should_fail_ex+0x414/0x560 [ 1503.739187][T21659] _copy_from_user+0x2d/0xb0 [ 1503.739206][T21659] kstrtouint_from_user+0xc4/0x170 [ 1503.739233][T21659] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1503.739280][T21659] proc_fail_nth_write+0x88/0x200 [ 1503.739302][T21659] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1503.739329][T21659] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1503.739353][T21659] vfs_write+0x27e/0xb30 [ 1503.739386][T21659] ? __pfx_vfs_write+0x10/0x10 [ 1503.739412][T21659] ? __fget_files+0x2a/0x420 [ 1503.739434][T21659] ? __fget_files+0x3a0/0x420 [ 1503.739450][T21659] ? __fget_files+0x2a/0x420 [ 1503.739477][T21659] ksys_write+0x145/0x250 [ 1503.739502][T21659] ? __pfx_ksys_write+0x10/0x10 [ 1503.739530][T21659] ? do_syscall_64+0xbe/0xfa0 [ 1503.739554][T21659] do_syscall_64+0xfa/0xfa0 [ 1503.739574][T21659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1503.739591][T21659] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1503.739607][T21659] ? clear_bhb_loop+0x60/0xb0 [ 1503.739629][T21659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1503.739645][T21659] RIP: 0033:0x7f2257b8d97f [ 1503.739661][T21659] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1503.739676][T21659] RSP: 002b:00007f2258a3a030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1503.739694][T21659] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2257b8d97f [ 1503.739706][T21659] RDX: 0000000000000001 RSI: 00007f2258a3a0a0 RDI: 0000000000000005 [ 1503.739717][T21659] RBP: 00007f2258a3a090 R08: 0000000000000000 R09: 0000000000000000 [ 1503.739728][T21659] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1503.739739][T21659] R13: 00007f2257de6038 R14: 00007f2257de5fa0 R15: 00007ffdf3814338 [ 1503.739773][T21659] [ 1503.740380][T17490] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1504.011579][T17490] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.029981][T17490] usb 9-1: Product: syz [ 1504.035108][T17490] usb 9-1: Manufacturer: syz [ 1504.039720][T17490] usb 9-1: SerialNumber: syz [ 1504.180238][T21668] trusted_key: encrypted_key: insufficient parameters specified [ 1504.263408][T21670] program syz.6.4056 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1504.282733][T21637] TC_ACT_REPEAT abuse ? [ 1504.326793][T21637] bridge0: port 2(bridge_slave_1) entered disabled state [ 1504.334339][T21637] bridge0: port 1(bridge_slave_0) entered disabled state [ 1504.633213][T17490] usb 9-1: 0:2 : does not exist [ 1504.662648][T21637] batadv_slave_0: left promiscuous mode [ 1504.688417][T21637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1505.347944][T17490] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1505.387894][T17490] usb 9-1: USB disconnect, device number 84 [ 1506.006464][T20803] Bluetooth: hci5: command 0x0406 tx timeout [ 1507.711773][T21725] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4076'. [ 1507.739307][T21727] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1507.750180][T21727] EXT4-fs (loop7): unable to read superblock [ 1508.425260][T21733] fuse: Bad value for 'fd' [ 1508.491790][T21733] sp0: Synchronizing with TNC [ 1508.858566][T21728] [U] [ 1510.431938][T21757] I/O error, dev loop8, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1510.446462][T21757] EXT4-fs (loop8): unable to read superblock [ 1510.711007][T21766] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4089'. [ 1510.720132][T21766] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4089'. [ 1510.741869][ T982] usb 9-1: new high-speed USB device number 85 using dummy_hcd [ 1510.776494][T21766] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1510.793434][T21766] SQUASHFS error: Failed to read block 0x0: -5 [ 1510.800490][T21766] unable to read squashfs_super_block [ 1511.786424][T17489] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 1511.814701][ T982] usb 9-1: Using ep0 maxpacket: 16 [ 1511.864319][T21772] erofs (device loop1): cannot find valid erofs superblock [ 1511.865394][ T982] usb 9-1: config 1 has an invalid descriptor of length 119, skipping remainder of the config [ 1511.969301][ T982] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1512.027952][ T982] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1512.067838][T17489] usb 7-1: Using ep0 maxpacket: 8 [ 1512.068184][ T982] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.107803][ T982] usb 9-1: Product: syz [ 1512.112227][ T982] usb 9-1: Manufacturer: syz [ 1512.112569][T17489] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1512.117204][ T982] usb 9-1: SerialNumber: syz [ 1512.161343][T17489] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1512.280472][T17489] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.294290][T17489] usb 7-1: config 0 descriptor?? [ 1512.432313][T17489] iowarrior 7-1:0.0: no interrupt-in endpoint found [ 1512.530368][T17489] usb 7-1: USB disconnect, device number 87 [ 1512.780986][ T982] usb 9-1: 0:2 : does not exist [ 1513.535165][ T982] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1514.128597][ T982] usb 9-1: USB disconnect, device number 85 [ 1514.159916][T21800] 9pnet_fd: Insufficient options for proto=fd [ 1514.194478][T21803] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1514.204183][T21803] EXT4-fs (loop1): unable to read superblock [ 1514.234112][T21804] syzkaller0: entered promiscuous mode [ 1514.239642][T21804] syzkaller0: entered allmulticast mode [ 1514.252035][T17489] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 1514.425958][T17489] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1514.435127][T17489] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.444835][T17489] usb 7-1: config 0 descriptor?? [ 1514.645009][T21806] Bluetooth: MGMT ver 1.23 [ 1514.704282][T17489] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1514.932973][T17489] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 1514.939809][T17489] [drm] Initialized udl on minor 2 [ 1515.781057][T17489] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 1515.789131][T17489] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1516.085014][T17490] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1516.085722][ T5874] usb 7-1: USB disconnect, device number 88 [ 1516.864860][T17490] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1517.263640][ T8671] usb 9-1: new high-speed USB device number 86 using dummy_hcd [ 1517.426199][ T8671] usb 9-1: Using ep0 maxpacket: 16 [ 1517.441532][ T8671] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1518.209294][ T8671] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1518.216066][ T8671] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1518.225237][ T8671] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.237764][ T8671] usb 9-1: config 0 descriptor?? [ 1519.256061][T17490] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 1519.615735][T21863] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1519.643964][T21863] exFAT-fs (loop1): unable to read boot sector [ 1519.652103][T17490] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1519.657569][T21863] exFAT-fs (loop1): failed to read boot sector [ 1519.669203][T21863] exFAT-fs (loop1): failed to recognize exfat type [ 1519.676064][T17490] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1519.702609][T17490] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1519.748421][T17490] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1519.756992][T17490] usb 7-1: SerialNumber: syz [ 1520.310369][ T8671] usbhid 9-1:0.0: can't add hid device: -71 [ 1520.316454][ T8671] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1520.366603][ T8671] usb 9-1: USB disconnect, device number 86 [ 1520.865270][T17490] usb 7-1: 0:2 : does not exist [ 1520.916774][T17490] usb 7-1: USB disconnect, device number 89 [ 1521.403004][T21887] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4132'. [ 1521.736783][T21897] netlink: 'syz.7.4135': attribute type 1 has an invalid length. [ 1521.754729][T21897] netlink: 'syz.7.4135': attribute type 4 has an invalid length. [ 1521.846983][T21897] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.4135'. [ 1522.036277][T21897] netlink: 'syz.7.4135': attribute type 1 has an invalid length. [ 1522.858941][T21897] netlink: 'syz.7.4135': attribute type 4 has an invalid length. [ 1522.882801][T21897] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.4135'. [ 1525.555825][T21930] binder: 21921:21930 ioctl c018620c 0 returned -14 [ 1526.519515][ T30] audit: type=1804 audit(1758572001.734:2282): pid=21936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4144" name="/newroot/138/file0" dev="tmpfs" ino=752 res=1 errno=0 [ 1526.731756][T21932] vlan0: entered promiscuous mode [ 1526.827795][T21942] tipc: Started in network mode [ 1526.853877][T21942] tipc: Node identity 7e76507890e7, cluster identity 4711 [ 1526.882451][T21942] tipc: Enabled bearer , priority 0 [ 1526.891722][T21943] syzkaller0: entered promiscuous mode [ 1526.898047][T21943] syzkaller0: entered allmulticast mode [ 1526.909138][T21942] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 1527.002657][T21942] tipc: Resetting bearer [ 1527.022119][T21941] tipc: Resetting bearer [ 1527.187565][T21941] tipc: Disabling bearer [ 1527.685851][T21951] fuse: Bad value for 'fd' [ 1530.022820][T21971] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4156'. [ 1532.095274][T22024] FAULT_INJECTION: forcing a failure. [ 1532.095274][T22024] name failslab, interval 1, probability 0, space 0, times 0 [ 1532.108413][T22024] CPU: 0 UID: 0 PID: 22024 Comm: syz.8.4171 Not tainted syzkaller #0 PREEMPT(full) [ 1532.108439][T22024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1532.108450][T22024] Call Trace: [ 1532.108459][T22024] [ 1532.108468][T22024] dump_stack_lvl+0x189/0x250 [ 1532.108494][T22024] ? __pfx____ratelimit+0x10/0x10 [ 1532.108522][T22024] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1532.108543][T22024] ? __pfx__printk+0x10/0x10 [ 1532.108573][T22024] ? __pfx___might_resched+0x10/0x10 [ 1532.108602][T22024] should_fail_ex+0x414/0x560 [ 1532.108630][T22024] should_failslab+0xa8/0x100 [ 1532.108651][T22024] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1532.108676][T22024] ? security_inode_alloc+0x39/0x330 [ 1532.108704][T22024] security_inode_alloc+0x39/0x330 [ 1532.108729][T22024] inode_init_always_gfp+0x9ed/0xdc0 [ 1532.108753][T22024] ? __pfx_proc_alloc_inode+0x10/0x10 [ 1532.108775][T22024] alloc_inode+0x82/0x1b0 [ 1532.108794][T22024] new_inode+0x22/0x170 [ 1532.108817][T22024] proc_pid_make_inode+0x21/0x130 [ 1532.108837][T22024] proc_fdinfo_instantiate+0x53/0x240 [ 1532.108862][T22024] proc_fill_cache+0x2d0/0x3d0 [ 1532.108883][T22024] ? __pfx_proc_fdinfo_instantiate+0x10/0x10 [ 1532.108909][T22024] ? __pfx_proc_fill_cache+0x10/0x10 [ 1532.108924][T22024] ? snprintf+0xda/0x120 [ 1532.108959][T22024] ? fget_task_next+0x572/0x5f0 [ 1532.108987][T22024] proc_readfd_common+0x3ff/0x5a0 [ 1532.109013][T22024] ? __pfx_proc_fdinfo_instantiate+0x10/0x10 [ 1532.109033][T22024] ? __pfx_proc_readfd_common+0x10/0x10 [ 1532.109065][T22024] ? down_read_killable+0x1d1/0x350 [ 1532.109092][T22024] iterate_dir+0x399/0x570 [ 1532.109122][T22024] __se_sys_getdents64+0xe4/0x260 [ 1532.109144][T22024] ? irqentry_exit+0x74/0x90 [ 1532.109165][T22024] ? __pfx___se_sys_getdents64+0x10/0x10 [ 1532.109187][T22024] ? __pfx_filldir64+0x10/0x10 [ 1532.109226][T22024] do_syscall_64+0xfa/0xfa0 [ 1532.109247][T22024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1532.109264][T22024] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1532.109281][T22024] ? clear_bhb_loop+0x60/0xb0 [ 1532.109302][T22024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1532.109320][T22024] RIP: 0033:0x7f99fc58eec9 [ 1532.109336][T22024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1532.109352][T22024] RSP: 002b:00007f99fd3e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 1532.109372][T22024] RAX: ffffffffffffffda RBX: 00007f99fc7e6180 RCX: 00007f99fc58eec9 [ 1532.109386][T22024] RDX: 00000000000000f4 RSI: 0000200000000280 RDI: 0000000000000005 [ 1532.109398][T22024] RBP: 00007f99fd3e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1532.109409][T22024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1532.109420][T22024] R13: 00007f99fc7e6218 R14: 00007f99fc7e6180 R15: 00007fff10ce2de8 [ 1532.109453][T22024] [ 1533.102596][T22029] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4172'. [ 1534.928325][T22060] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1534.943684][T22060] EXT4-fs (loop7): unable to read superblock [ 1535.122922][ T5874] usb 7-1: new full-speed USB device number 90 using dummy_hcd [ 1535.270141][ T5874] usb 7-1: device descriptor read/64, error -71 [ 1535.333385][T22067] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 1535.345709][T22067] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1535.540995][ T5874] usb 7-1: new full-speed USB device number 91 using dummy_hcd [ 1535.715067][ T5874] usb 7-1: device descriptor read/64, error -71 [ 1535.856220][ T5874] usb usb7-port1: attempt power cycle [ 1536.080857][T22072] netlink: 'syz.1.4185': attribute type 12 has an invalid length. [ 1536.234627][ T5874] usb 7-1: new full-speed USB device number 92 using dummy_hcd [ 1536.295564][ T5874] usb 7-1: device descriptor read/8, error -71 [ 1536.625436][ T5874] usb 7-1: new full-speed USB device number 93 using dummy_hcd [ 1536.660885][ T5874] usb 7-1: device descriptor read/8, error -71 [ 1536.786926][ T5874] usb usb7-port1: unable to enumerate USB device [ 1537.520251][ T30] audit: type=1326 audit(1758572011.906:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22088 comm="syz.7.4190" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f15a2b8eec9 code=0x0 [ 1537.783678][T22095] syzkaller0: entered promiscuous mode [ 1537.789183][T22095] syzkaller0: entered allmulticast mode [ 1538.450315][T22113] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4197'. [ 1538.672563][T22119] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1538.682109][T22119] EXT4-fs (loop1): unable to read superblock [ 1539.224579][ T5874] usb 7-1: new full-speed USB device number 94 using dummy_hcd [ 1539.401708][ T5874] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1539.415193][ T5874] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1539.431527][ T5874] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1539.441519][ T5874] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1540.394733][ T5874] usb 7-1: usb_control_msg returned -32 [ 1540.400345][ T5874] usbtmc 7-1:16.0: can't read capabilities [ 1540.562758][T22138] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1540.592570][T22138] EXT4-fs (loop7): unable to read superblock [ 1541.030057][T22148] hpfs: Unknown parameter 'f5~NP*w@3 C.:+;MOPp Ԣ]0x000000000000ee00' [ 1542.053625][ T30] audit: type=1804 audit(1758572016.087:2284): pid=22164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4213" name="/newroot/257/file0" dev="tmpfs" ino=1380 res=1 errno=0 [ 1542.257012][ T982] usb 7-1: USB disconnect, device number 94 [ 1543.842817][T17489] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 1544.100969][T17489] usb 7-1: Using ep0 maxpacket: 16 [ 1544.166576][T17489] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 1544.249862][T17489] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.713782][T17489] usb 7-1: config 0 descriptor?? [ 1544.752166][T17489] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 1544.989616][T22187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1544.998553][T22187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1545.110796][T17489] usb 7-1: Detected FT232A [ 1545.116257][T17489] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1545.126187][T17489] usb 7-1: USB disconnect, device number 95 [ 1545.139069][T17489] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1545.150792][T17489] ftdi_sio 7-1:0.0: device disconnected [ 1545.764290][T22207] befs: (nullb0): invalid magic header [ 1546.703923][T22214] FAULT_INJECTION: forcing a failure. [ 1546.703923][T22214] name failslab, interval 1, probability 0, space 0, times 0 [ 1546.718049][T22214] CPU: 0 UID: 0 PID: 22214 Comm: syz.6.4229 Not tainted syzkaller #0 PREEMPT(full) [ 1546.718074][T22214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1546.718085][T22214] Call Trace: [ 1546.718094][T22214] [ 1546.718102][T22214] dump_stack_lvl+0x189/0x250 [ 1546.718133][T22214] ? __pfx____ratelimit+0x10/0x10 [ 1546.718153][T22214] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1546.718172][T22214] ? __pfx__printk+0x10/0x10 [ 1546.718200][T22214] ? __pfx___might_resched+0x10/0x10 [ 1546.718221][T22214] ? fs_reclaim_acquire+0x7d/0x100 [ 1546.718244][T22214] should_fail_ex+0x414/0x560 [ 1546.718270][T22214] should_failslab+0xa8/0x100 [ 1546.718290][T22214] __kmalloc_noprof+0xcb/0x7f0 [ 1546.718312][T22214] ? kobject_get_path+0xc5/0x2d0 [ 1546.718331][T22214] ? __kasan_kmalloc+0x93/0xb0 [ 1546.718352][T22214] kobject_get_path+0xc5/0x2d0 [ 1546.718378][T22214] kobject_uevent_env+0x292/0x8c0 [ 1546.718410][T22214] device_del+0x73a/0x8e0 [ 1546.718441][T22214] ? __pfx_device_del+0x10/0x10 [ 1546.718464][T22214] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1546.718483][T22214] ? ktime_get_mono_fast_ns+0x2af/0x2d0 [ 1546.718508][T22214] device_unregister+0x20/0xc0 [ 1546.718530][T22214] wakeup_source_unregister+0x179/0x3f0 [ 1546.718555][T22214] ep_clear_and_put+0x2d4/0x380 [ 1546.718576][T22214] ? __pfx_ep_eventpoll_release+0x10/0x10 [ 1546.718595][T22214] ep_eventpoll_release+0x45/0x60 [ 1546.718612][T22214] __fput+0x44c/0xa70 [ 1546.718643][T22214] task_work_run+0x1d4/0x260 [ 1546.718670][T22214] ? __pfx_task_work_run+0x10/0x10 [ 1546.718694][T22214] ? exit_to_user_mode_loop+0x40/0x130 [ 1546.718719][T22214] exit_to_user_mode_loop+0xe9/0x130 [ 1546.718740][T22214] do_syscall_64+0x2bd/0xfa0 [ 1546.718759][T22214] ? lockdep_hardirqs_on+0x9c/0x150 [ 1546.718778][T22214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1546.718795][T22214] ? clear_bhb_loop+0x60/0xb0 [ 1546.718815][T22214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1546.718831][T22214] RIP: 0033:0x7f8245f8eec9 [ 1546.718847][T22214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1546.718861][T22214] RSP: 002b:00007f8246d8c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1546.718880][T22214] RAX: 0000000000000000 RBX: 00007f82461e5fa0 RCX: 00007f8245f8eec9 [ 1546.718892][T22214] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1546.718903][T22214] RBP: 00007f8246d8c090 R08: 0000000000000000 R09: 0000000000000000 [ 1546.718914][T22214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1546.718925][T22214] R13: 00007f82461e6038 R14: 00007f82461e5fa0 R15: 00007ffd956e6408 [ 1546.718955][T22214] [ 1546.981964][ C0] vkms_vblank_simulate: vblank timer overrun [ 1547.616531][ T8671] IPVS: starting estimator thread 0... [ 1547.980178][T22228] IPVS: using max 31 ests per chain, 74400 per kthread [ 1549.536448][T22257] befs: (nullb0): invalid magic header [ 1554.071295][T22285] I/O error, dev loop8, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1554.080855][T22285] EXT4-fs (loop8): unable to read superblock [ 1554.230915][T22289] comedi comedi0: Minor 47 could not be opened [ 1554.237819][T22289] random: crng reseeded on system resumption [ 1554.414262][ T8671] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 1554.656889][ T8671] usb 7-1: Using ep0 maxpacket: 8 [ 1554.722558][ T8671] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1555.424481][ T8671] usb 7-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1555.469842][ T8671] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1555.514194][ T8671] usb 7-1: Product: syz [ 1555.534675][ T8671] usb 7-1: Manufacturer: syz [ 1555.561342][ T8671] usb 7-1: SerialNumber: syz [ 1555.675610][T22306] trusted_key: encrypted_key: insufficient parameters specified [ 1555.685053][ T8671] usb 7-1: config 0 descriptor?? [ 1555.760000][ T8671] imon_raw 7-1:0.0: IR endpoint missing [ 1555.936048][T22308] program syz.8.4256 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1555.966707][T22317] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1555.984456][T17491] usb 7-1: USB disconnect, device number 96 [ 1555.997330][T22317] EXT4-fs (loop7): unable to read superblock [ 1557.818144][T22339] befs: (nullb0): invalid magic header [ 1558.013559][T22340] befs: (nullb0): invalid magic header [ 1558.763912][T22343] macvlan2: entered allmulticast mode [ 1558.791338][T22343] hsr0: entered allmulticast mode [ 1558.812339][T22343] hsr_slave_0: entered allmulticast mode [ 1558.817997][T22343] hsr_slave_1: entered allmulticast mode [ 1558.848714][T22343] hsr0: left allmulticast mode [ 1558.858958][T22343] hsr_slave_0: left allmulticast mode [ 1558.880867][T22343] hsr_slave_1: left allmulticast mode [ 1560.709941][T22360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1560.791236][T22364] program syz.6.4274 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1560.797847][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1560.803011][T22360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1560.807742][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1560.820280][T22360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1560.866614][T22360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1562.107225][T22384] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1562.161264][T22384] overlayfs: conflicting options: userxattr,redirect_dir=on [ 1562.994959][T22396] befs: (nullb0): invalid magic header [ 1565.349998][T22412] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4287'. [ 1566.401966][T22418] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4289'. [ 1566.411152][T22418] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4289'. [ 1566.422844][T22418] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4289'. [ 1567.557817][T22432] trusted_key: encrypted_key: insufficient parameters specified [ 1567.587255][T22433] IPVS: Error connecting to the multicast addr [ 1567.753302][T22440] program syz.6.4290 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1568.043186][ T6040] usb 9-1: new low-speed USB device number 87 using dummy_hcd [ 1568.927008][T22449] hpfs: Unknown parameter 'f5~NP*w@3 C.:+;MOPp Ԣ]0x000000000000ee00' [ 1568.966412][ T6040] usb 9-1: config 7 has an invalid interface number: 252 but max is 0 [ 1568.975418][ T6040] usb 9-1: config 7 has no interface number 0 [ 1568.982166][ T6040] usb 9-1: config 7 interface 252 altsetting 8 endpoint 0xF has an invalid bInterval 232, changing to 4 [ 1568.995100][ T6040] usb 9-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid maxpacket 64, setting to 0 [ 1569.006066][ T6040] usb 9-1: config 7 interface 252 has no altsetting 0 [ 1569.032715][ T6040] usb 9-1: string descriptor 0 read error: -22 [ 1569.051904][ T6040] usb 9-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 1569.061631][ T6040] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.079861][ T6040] idmouse 9-1:7.252: Unable to find bulk-in endpoint. [ 1569.332191][ T6040] usb 9-1: USB disconnect, device number 87 [ 1570.666918][ T6040] usb 9-1: new high-speed USB device number 88 using dummy_hcd [ 1570.925953][ T6040] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1570.936285][ T6040] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1570.945256][ T6040] usb 9-1: config 1 has no interface number 1 [ 1570.952170][ T6040] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1570.966279][ T6040] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1570.987304][ T6040] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1570.997385][ T6040] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.024232][ T6040] usb 9-1: Product: syz [ 1571.029186][ T6040] usb 9-1: Manufacturer: syz [ 1571.062995][ T6040] usb 9-1: SerialNumber: syz [ 1571.130150][T22460] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1572.030302][T22477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1572.052116][T22477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1572.332224][ T6040] usb 9-1: 2:1 : no or invalid class specific endpoint descriptor [ 1572.343018][ T6040] usb 9-1: 2:1 : no or invalid class specific endpoint descriptor [ 1572.420390][ T6040] usb 9-1: USB disconnect, device number 88 [ 1572.671226][ T8671] usb 7-1: new full-speed USB device number 97 using dummy_hcd [ 1573.649827][ T8671] usb 7-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=c5.66 [ 1573.662379][ T8671] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1573.836159][ T8671] usb 7-1: config 0 descriptor?? [ 1574.171058][ T8671] usb 7-1: invalid MIDI EP [ 1574.186857][ T8671] usb 7-1: snd-bcd2000: error during probing [ 1574.196693][ T8671] snd-bcd2000 7-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 1574.886955][ T6040] usb 9-1: new high-speed USB device number 89 using dummy_hcd [ 1575.913606][ T6040] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1576.077998][T17489] usb 7-1: USB disconnect, device number 97 [ 1576.095104][ T6040] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1576.095829][T22528] FAULT_INJECTION: forcing a failure. [ 1576.095829][T22528] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1576.121163][T22528] CPU: 0 UID: 0 PID: 22528 Comm: syz.7.4321 Not tainted syzkaller #0 PREEMPT(full) [ 1576.121187][T22528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1576.121196][T22528] Call Trace: [ 1576.121203][T22528] [ 1576.121211][T22528] dump_stack_lvl+0x189/0x250 [ 1576.121234][T22528] ? __pfx____ratelimit+0x10/0x10 [ 1576.121255][T22528] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1576.121275][T22528] ? __pfx__printk+0x10/0x10 [ 1576.121300][T22528] ? fs_reclaim_acquire+0x7d/0x100 [ 1576.121328][T22528] should_fail_ex+0x414/0x560 [ 1576.121355][T22528] prepare_alloc_pages+0x213/0x610 [ 1576.121382][T22528] __alloc_frozen_pages_noprof+0x123/0x370 [ 1576.121411][T22528] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1576.121439][T22528] ? policy_nodemask+0x27c/0x720 [ 1576.121463][T22528] alloc_pages_mpol+0x232/0x4a0 [ 1576.121487][T22528] folio_alloc_mpol_noprof+0x39/0x70 [ 1576.121507][T22528] shmem_alloc_and_add_folio+0x4ba/0x10f0 [ 1576.121537][T22528] ? filemap_get_entry+0xad/0x2f0 [ 1576.121552][T22528] ? filemap_get_entry+0xad/0x2f0 [ 1576.121573][T22528] ? shmem_huge_global_enabled+0x296/0x320 [ 1576.121594][T22528] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1576.121620][T22528] ? shmem_allowable_huge_orders+0x4c6/0x4f0 [ 1576.121650][T22528] shmem_get_folio_gfp+0x59d/0x1660 [ 1576.121693][T22528] shmem_fault+0x179/0x390 [ 1576.121727][T22528] __do_fault+0x138/0x390 [ 1576.121747][T22528] __handle_mm_fault+0x1719/0x5400 [ 1576.121787][T22528] ? __pfx___handle_mm_fault+0x10/0x10 [ 1576.121832][T22528] ? __pfx___might_resched+0x10/0x10 [ 1576.121862][T22528] handle_mm_fault+0x40a/0x8e0 [ 1576.121896][T22528] __get_user_pages+0x165c/0x2a00 [ 1576.121954][T22528] populate_vma_page_range+0x29f/0x3a0 [ 1576.121978][T22528] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1576.121997][T22528] ? userfaultfd_unmap_complete+0x278/0x2d0 [ 1576.122020][T22528] ? down_read+0x1ad/0x2e0 [ 1576.122044][T22528] __mm_populate+0x24c/0x380 [ 1576.122068][T22528] ? __pfx___mm_populate+0x10/0x10 [ 1576.122091][T22528] ? up_write+0x1c4/0x420 [ 1576.122114][T22528] vm_mmap_pgoff+0x387/0x4d0 [ 1576.122141][T22528] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1576.122159][T22528] ? __fget_files+0x2a/0x420 [ 1576.122176][T22528] ? __fget_files+0x2a/0x420 [ 1576.122189][T22528] ? __fget_files+0x2a/0x420 [ 1576.122210][T22528] ksys_mmap_pgoff+0x51f/0x760 [ 1576.122239][T22528] do_syscall_64+0xfa/0xfa0 [ 1576.122258][T22528] ? lockdep_hardirqs_on+0x9c/0x150 [ 1576.122276][T22528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1576.122293][T22528] ? clear_bhb_loop+0x60/0xb0 [ 1576.122314][T22528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1576.122330][T22528] RIP: 0033:0x7f15a2b8eec9 [ 1576.122347][T22528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1576.122362][T22528] RSP: 002b:00007f15a39a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1576.122381][T22528] RAX: ffffffffffffffda RBX: 00007f15a2de6180 RCX: 00007f15a2b8eec9 [ 1576.122394][T22528] RDX: 000000000000000b RSI: 0000000000400000 RDI: 0000200000200000 [ 1576.122411][T22528] RBP: 00007f15a39a8090 R08: 0000000000000005 R09: 0000000000000000 [ 1576.122422][T22528] R10: 0000000000002012 R11: 0000000000000246 R12: 0000000000000002 [ 1576.122433][T22528] R13: 00007f15a2de6218 R14: 00007f15a2de6180 R15: 00007fffe4b9fe48 [ 1576.122466][T22528] [ 1576.588803][ T6040] usb 9-1: config 0 descriptor?? [ 1576.880391][ T6040] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1577.557841][ T6040] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 2 [ 1577.625275][ T6040] [drm] Initialized udl on minor 2 [ 1577.642252][T22543] FAULT_INJECTION: forcing a failure. [ 1577.642252][T22543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1577.655692][T22543] CPU: 0 UID: 0 PID: 22543 Comm: syz.7.4325 Not tainted syzkaller #0 PREEMPT(full) [ 1577.655719][T22543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1577.655729][T22543] Call Trace: [ 1577.655734][T22543] [ 1577.655739][T22543] dump_stack_lvl+0x189/0x250 [ 1577.655757][T22543] ? __pfx____ratelimit+0x10/0x10 [ 1577.655769][T22543] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1577.655781][T22543] ? __pfx__printk+0x10/0x10 [ 1577.655795][T22543] ? __might_fault+0xb0/0x130 [ 1577.655816][T22543] should_fail_ex+0x414/0x560 [ 1577.655833][T22543] _copy_from_user+0x2d/0xb0 [ 1577.655844][T22543] kstrtouint_from_user+0xc4/0x170 [ 1577.655860][T22543] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1577.655883][T22543] proc_fail_nth_write+0x88/0x200 [ 1577.655897][T22543] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1577.655913][T22543] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1577.655926][T22543] vfs_write+0x27e/0xb30 [ 1577.655947][T22543] ? __pfx_vfs_write+0x10/0x10 [ 1577.655962][T22543] ? __fget_files+0x2a/0x420 [ 1577.655988][T22543] ? __fget_files+0x3a0/0x420 [ 1577.655998][T22543] ? __fget_files+0x2a/0x420 [ 1577.656012][T22543] ksys_write+0x145/0x250 [ 1577.656028][T22543] ? __pfx_ksys_write+0x10/0x10 [ 1577.656044][T22543] ? do_syscall_64+0xbe/0xfa0 [ 1577.656058][T22543] do_syscall_64+0xfa/0xfa0 [ 1577.656070][T22543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1577.656079][T22543] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1577.656088][T22543] ? clear_bhb_loop+0x60/0xb0 [ 1577.656100][T22543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1577.656109][T22543] RIP: 0033:0x7f15a2b8d97f [ 1577.656120][T22543] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1577.656128][T22543] RSP: 002b:00007f15a39c9030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1577.656139][T22543] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f15a2b8d97f [ 1577.656146][T22543] RDX: 0000000000000001 RSI: 00007f15a39c90a0 RDI: 0000000000000006 [ 1577.656152][T22543] RBP: 00007f15a39c9090 R08: 0000000000000000 R09: 0000000000000000 [ 1577.656158][T22543] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1577.656163][T22543] R13: 00007f15a2de6128 R14: 00007f15a2de6090 R15: 00007fffe4b9fe48 [ 1577.656181][T22543] [ 1578.249080][ T6040] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 1578.255977][ T6040] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 1578.279611][T22544] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4326'. [ 1578.453870][T17489] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1578.462446][ T24] usb 9-1: USB disconnect, device number 89 [ 1578.462502][T17489] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1578.488319][T17489] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 1578.527242][T22553] EXT4-fs: Ignoring removed bh option [ 1578.561765][T22553] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1578.573129][T22553] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1578.584513][T22553] EXT4-fs (loop7): unable to read superblock [ 1579.119101][T22560] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1579.129250][T22560] EXT4-fs (loop6): unable to read superblock [ 1579.323707][ T30] audit: type=1804 audit(1758572050.496:2285): pid=22569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4335" name="file0" dev="tmpfs" ino=1524 res=1 errno=0 [ 1579.419588][ T6040] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 1579.446982][ T5868] Bluetooth: hci5: Unable to find connection for big 0x4a [ 1579.511160][T22579] netlink: 'syz.8.4339': attribute type 1 has an invalid length. [ 1579.563605][ T30] audit: type=1326 audit(1758572050.708:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22576 comm="syz.1.4340" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2257b8eec9 code=0x0 [ 1579.603284][ T6040] usb 7-1: Using ep0 maxpacket: 16 [ 1579.613913][ T6040] usb 7-1: config 1 has an invalid descriptor of length 119, skipping remainder of the config [ 1579.626094][ T6040] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1579.638301][ T6040] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1579.647851][ T6040] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1579.655846][ T6040] usb 7-1: Product: syz [ 1579.660525][ T6040] usb 7-1: Manufacturer: syz [ 1579.665293][ T6040] usb 7-1: SerialNumber: syz [ 1580.135292][ T6040] usb 7-1: 0:2 : does not exist [ 1580.877299][ T6040] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1580.895086][ T6040] usb 7-1: USB disconnect, device number 98 [ 1580.927371][T17491] libceph: connect (1)[c::]:6789 error -101 [ 1580.933391][T17491] libceph: mon0 (1)[c::]:6789 connect error [ 1581.228657][ T6040] libceph: connect (1)[c::]:6789 error -101 [ 1581.235407][ T6040] libceph: mon0 (1)[c::]:6789 connect error [ 1581.518169][ T30] audit: type=1804 audit(1758572052.508:2287): pid=22607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4348" name="file0" dev="tmpfs" ino=1556 res=1 errno=0 [ 1581.588058][T22602] ceph: No mds server is up or the cluster is laggy [ 1582.902454][T22609] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4349'. [ 1583.127304][T22632] trusted_key: encrypted_key: insufficient parameters specified [ 1583.349385][T22645] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 1583.699204][ T6040] usb 9-1: new high-speed USB device number 90 using dummy_hcd [ 1583.699260][ T982] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 1583.882750][ T6040] usb 9-1: Using ep0 maxpacket: 16 [ 1583.883514][ T982] usb 7-1: Using ep0 maxpacket: 32 [ 1583.895401][ T6040] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1583.906455][ T6040] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1583.909998][ T982] usb 7-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1583.918395][ T6040] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 1024 [ 1583.927615][ T982] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1583.946439][ T982] usb 7-1: Product: syz [ 1583.951217][ T982] usb 7-1: Manufacturer: syz [ 1583.955894][ T982] usb 7-1: SerialNumber: syz [ 1583.963896][ T982] usb 7-1: config 0 descriptor?? [ 1583.972410][ T982] rtl8150 7-1:0.0: couldn't find required endpoints [ 1583.979521][ T982] rtl8150 7-1:0.0: probe with driver rtl8150 failed with error -5 [ 1584.055407][ T6040] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1584.065527][ T6040] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1584.075453][ T6040] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1584.085398][ T6040] usb 9-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1584.100592][ T6040] usb 9-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3 [ 1584.109835][ T6040] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1584.117867][ T6040] usb 9-1: Product: syz [ 1584.123102][ T6040] usb 9-1: Manufacturer: syz [ 1584.198293][ T982] usb 7-1: USB disconnect, device number 99 [ 1584.201121][ T6040] usb 9-1: SerialNumber: syz [ 1584.212171][ T6040] usb 9-1: config 0 descriptor?? [ 1584.217811][T22634] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1584.227008][ T6040] iuu_phoenix 9-1:0.0: iuu_phoenix converter detected [ 1584.236494][ T6040] usb 9-1: iuu_phoenix converter now attached to ttyUSB0 [ 1584.948697][ T6040] usb 9-1: USB disconnect, device number 90 [ 1584.959313][ T6040] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 1584.968597][ T6040] iuu_phoenix 9-1:0.0: device disconnected [ 1585.007891][T22669] netlink: 260 bytes leftover after parsing attributes in process `syz.4.4369'. [ 1585.127241][T22674] macvlan2: entered promiscuous mode [ 1585.134245][T22674] macvlan2: entered allmulticast mode [ 1585.547576][T22684] binder_alloc: 22682: binder_alloc_buf, no vma [ 1585.583239][T22685] 9pnet_fd: Insufficient options for proto=fd [ 1586.163031][T22693] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1587.237840][T22706] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1588.699417][ T5868] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 1589.395447][T17491] usb 9-1: new high-speed USB device number 91 using dummy_hcd [ 1589.706298][T22729] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4389'. [ 1589.722981][T22717] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 1590.058935][T17491] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1590.068077][T17491] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1590.077586][T17491] usb 9-1: config 0 descriptor?? [ 1590.180269][T22717] usb 7-1: Using ep0 maxpacket: 16 [ 1590.190300][T22717] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1590.312107][T22742] vfat: Unknown parameter 'shorwin95' [ 1591.044966][T22717] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1591.073999][T22717] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1591.083711][T22717] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.083715][T17491] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1591.083735][T22717] usb 7-1: Product: syz [ 1591.105190][T22717] usb 7-1: Manufacturer: syz [ 1591.110702][T22717] usb 7-1: SerialNumber: syz [ 1591.121427][T17491] [drm:udl_init] *ERROR* Selecting channel failed [ 1591.212389][T17491] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 2 [ 1591.252972][T17491] [drm] Initialized udl on minor 2 [ 1591.271812][T17491] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1591.296934][T17491] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 1591.340376][T17491] usb 9-1: USB disconnect, device number 91 [ 1591.346532][T17490] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1591.357262][T22746] FAULT_INJECTION: forcing a failure. [ 1591.357262][T22746] name failslab, interval 1, probability 0, space 0, times 0 [ 1591.370705][T17490] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 1591.402796][T22746] CPU: 0 UID: 0 PID: 22746 Comm: syz.1.4393 Not tainted syzkaller #0 PREEMPT(full) [ 1591.402821][T22746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1591.402833][T22746] Call Trace: [ 1591.402841][T22746] [ 1591.402850][T22746] dump_stack_lvl+0x189/0x250 [ 1591.402875][T22746] ? __pfx____ratelimit+0x10/0x10 [ 1591.402895][T22746] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1591.402915][T22746] ? __pfx__printk+0x10/0x10 [ 1591.402944][T22746] ? __pfx___might_resched+0x10/0x10 [ 1591.402973][T22746] should_fail_ex+0x414/0x560 [ 1591.403000][T22746] should_failslab+0xa8/0x100 [ 1591.403021][T22746] __kmalloc_noprof+0xcb/0x7f0 [ 1591.403043][T22746] ? kfree+0x4d/0x6d0 [ 1591.403061][T22746] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1591.403091][T22746] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1591.403116][T22746] ? tomoyo_domain+0xd9/0x130 [ 1591.403145][T22746] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1591.403164][T22746] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1591.403187][T22746] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1591.403248][T22746] ? __fget_files+0x2a/0x420 [ 1591.403270][T22746] ? __fget_files+0x3a0/0x420 [ 1591.403287][T22746] ? __fget_files+0x2a/0x420 [ 1591.403307][T22746] security_file_ioctl+0xcb/0x2d0 [ 1591.403327][T22746] __se_sys_ioctl+0x47/0x170 [ 1591.403349][T22746] do_syscall_64+0xfa/0xfa0 [ 1591.403367][T22746] ? lockdep_hardirqs_on+0x9c/0x150 [ 1591.403385][T22746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1591.403403][T22746] ? clear_bhb_loop+0x60/0xb0 [ 1591.403422][T22746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1591.403438][T22746] RIP: 0033:0x7f2257b8eec9 [ 1591.403453][T22746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1591.403468][T22746] RSP: 002b:00007f2258a3a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1591.403487][T22746] RAX: ffffffffffffffda RBX: 00007f2257de5fa0 RCX: 00007f2257b8eec9 [ 1591.403500][T22746] RDX: 00002000000000c0 RSI: 0000000040087543 RDI: 0000000000000003 [ 1591.403512][T22746] RBP: 00007f2258a3a090 R08: 0000000000000000 R09: 0000000000000000 [ 1591.403523][T22746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1591.403533][T22746] R13: 00007f2257de6038 R14: 00007f2257de5fa0 R15: 00007ffdf3814338 [ 1591.403566][T22746] [ 1591.403574][T22746] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1591.657202][T22717] usb 7-1: 0:2 : does not exist [ 1592.324008][T22717] usb 7-1: USB disconnect, device number 100 [ 1592.926854][T22764] F2FS-fs (loop8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1592.969364][T22764] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1593.004891][T22764] F2FS-fs (loop8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1593.245876][T22764] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock [ 1593.543065][ T30] audit: type=1804 audit(1758572063.603:2288): pid=22777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4401" name="/newroot/292/file0" dev="tmpfs" ino=1568 res=1 errno=0 [ 1594.771725][T22780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4403'. [ 1595.061064][T22795] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4406'. [ 1597.985360][ T30] audit: type=1804 audit(1758572067.682:2289): pid=22820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.4414" name="/newroot/153/file0" dev="tmpfs" ino=846 res=1 errno=0 [ 1598.247516][T22829] EXT4-fs: Ignoring removed nobh option [ 1598.253600][T22829] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1598.263772][T22829] EXT4-fs (loop6): unable to read superblock [ 1598.285803][T22829] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4416'. [ 1598.308710][T22829] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4416'. [ 1598.989323][T22839] I/O error, dev loop8, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1598.999500][T22838] FAULT_INJECTION: forcing a failure. [ 1598.999500][T22838] name failslab, interval 1, probability 0, space 0, times 0 [ 1599.023460][T22839] EXT4-fs (loop8): unable to read superblock [ 1599.065070][T22838] CPU: 1 UID: 0 PID: 22838 Comm: syz.7.4420 Not tainted syzkaller #0 PREEMPT(full) [ 1599.065095][T22838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1599.065107][T22838] Call Trace: [ 1599.065114][T22838] [ 1599.065123][T22838] dump_stack_lvl+0x189/0x250 [ 1599.065150][T22838] ? __pfx____ratelimit+0x10/0x10 [ 1599.065170][T22838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1599.065196][T22838] ? __pfx__printk+0x10/0x10 [ 1599.065225][T22838] ? __pfx___might_resched+0x10/0x10 [ 1599.065248][T22838] ? fs_reclaim_acquire+0x7d/0x100 [ 1599.065270][T22838] should_fail_ex+0x414/0x560 [ 1599.065298][T22838] should_failslab+0xa8/0x100 [ 1599.065319][T22838] __kmalloc_noprof+0xcb/0x7f0 [ 1599.065341][T22838] ? tomoyo_encode+0x28b/0x550 [ 1599.065369][T22838] tomoyo_encode+0x28b/0x550 [ 1599.065398][T22838] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1599.065422][T22838] ? tomoyo_domain+0xd9/0x130 [ 1599.065450][T22838] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1599.065470][T22838] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1599.065493][T22838] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1599.065554][T22838] ? __fget_files+0x2a/0x420 [ 1599.065577][T22838] ? __fget_files+0x3a0/0x420 [ 1599.065593][T22838] ? __fget_files+0x2a/0x420 [ 1599.065615][T22838] security_file_ioctl+0xcb/0x2d0 [ 1599.065636][T22838] __se_sys_ioctl+0x47/0x170 [ 1599.065661][T22838] do_syscall_64+0xfa/0xfa0 [ 1599.065681][T22838] ? lockdep_hardirqs_on+0x9c/0x150 [ 1599.065700][T22838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1599.065717][T22838] ? clear_bhb_loop+0x60/0xb0 [ 1599.065738][T22838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1599.065755][T22838] RIP: 0033:0x7f15a2b8eec9 [ 1599.065771][T22838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1599.065785][T22838] RSP: 002b:00007f15a39ea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1599.065804][T22838] RAX: ffffffffffffffda RBX: 00007f15a2de5fa0 RCX: 00007f15a2b8eec9 [ 1599.065817][T22838] RDX: 0000200000001080 RSI: 0000000000008b05 RDI: 0000000000000003 [ 1599.065832][T22838] RBP: 00007f15a39ea090 R08: 0000000000000000 R09: 0000000000000000 [ 1599.065843][T22838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1599.065853][T22838] R13: 00007f15a2de6038 R14: 00007f15a2de5fa0 R15: 00007fffe4b9fe48 [ 1599.065886][T22838] [ 1599.065918][T22838] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1599.412357][T22839] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1599.422138][T22839] FAT-fs (loop8): unable to read boot sector [ 1599.611608][T22717] hid-generic FFFC:0003:0000.0026: unknown main item tag 0x0 [ 1599.666253][T22717] hid-generic FFFC:0003:0000.0026: unknown main item tag 0x0 [ 1599.707391][T22717] hid-generic FFFC:0003:0000.0026: unknown main item tag 0x0 [ 1599.900618][T22717] hid-generic FFFC:0003:0000.0026: unknown main item tag 0x0 [ 1600.023060][T22717] hid-generic FFFC:0003:0000.0026: unknown main item tag 0x0 [ 1600.147202][T22717] hid-generic FFFC:0003:0000.0026: unknown main item tag 0x0 [ 1600.155349][T22846] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1600.311584][T22846] I/O error, dev loop1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1600.386033][T22717] hid-generic FFFC:0003:0000.0026: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1600.441952][T22846] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1600.545039][T22846] I/O error, dev loop1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1600.554633][T22846] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1600.564331][T22846] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1600.572096][T22846] UDF-fs: Scanning with blocksize 512 failed [ 1600.579207][T22846] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1600.588718][T22846] I/O error, dev loop1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1600.600552][T22846] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1600.610314][T22846] I/O error, dev loop1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1600.620182][T22846] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1600.631085][T22846] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1600.641056][T22846] UDF-fs: Scanning with blocksize 1024 failed [ 1600.648056][T22846] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1600.657649][T22846] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1600.667574][T22846] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1600.677176][T22846] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1600.684879][T22846] UDF-fs: Scanning with blocksize 2048 failed [ 1600.691764][T22846] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1600.716013][T22846] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1600.732126][T22846] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1600.754111][T22846] UDF-fs: Scanning with blocksize 4096 failed [ 1600.760205][T22846] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 1600.901038][T22855] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 1600.922750][T22855] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512 [ 1600.958058][T22855] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 1600.987616][T22855] UDF-fs: Scanning with blocksize 512 failed [ 1601.005717][T22855] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 1601.007933][T22850] msdos: Unknown parameter 'nolotsdos1xfloppy' [ 1601.201108][T22855] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512 [ 1601.287034][T22855] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 1601.298533][T22855] UDF-fs: Scanning with blocksize 1024 failed [ 1601.319866][T22855] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 1601.353591][T22855] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512 [ 1601.390592][T22855] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 1601.453936][T22855] UDF-fs: Scanning with blocksize 2048 failed [ 1601.465693][T22855] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 1601.546567][T22855] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512 [ 1601.591038][T22855] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 1601.623875][T22855] UDF-fs: Scanning with blocksize 4096 failed [ 1601.652314][T22855] UDF-fs: warning (device loop8): udf_fill_super: No partition found (1) [ 1602.326274][T22883] befs: (nullb0): invalid magic header [ 1603.467459][T22901] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4437'. [ 1605.942149][T22717] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 1606.603752][T22717] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1606.657117][T22717] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1606.679775][T22717] usb 7-1: config 4 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1606.692429][T22717] usb 7-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xDC, changing to 0x8C [ 1606.712218][T22717] usb 7-1: config 4 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 243 [ 1606.726045][T22717] usb 7-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 1606.743017][T22717] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.751166][T22717] usb 7-1: Product: syz [ 1606.755454][T22717] usb 7-1: Manufacturer: syz [ 1606.764801][T22717] usb 7-1: SerialNumber: syz [ 1606.772651][T22944] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1606.803028][T22717] usb 7-1: ucan: probing device on interface #0 [ 1606.823517][T22717] usb 7-1: ucan: invalid out_ep MaxPacketSize [ 1606.830104][T22717] usb 7-1: ucan: probe failed; try to update the device firmware [ 1608.021110][T17491] usb 7-1: USB disconnect, device number 101 [ 1608.488067][T17489] usb 9-1: new high-speed USB device number 92 using dummy_hcd [ 1608.921354][T17489] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1608.930420][T17489] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1608.971911][T17489] usb 9-1: config 0 descriptor?? [ 1609.041303][T22980] sctp: [Deprecated]: syz.6.4465 (pid 22980) Use of int in maxseg socket option. [ 1609.041303][T22980] Use struct sctp_assoc_value instead [ 1609.536886][T22991] syzkaller0: entered promiscuous mode [ 1609.543010][T22991] syzkaller0: entered allmulticast mode [ 1610.414308][T17489] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1610.700050][T17489] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 2 [ 1610.706775][T17489] [drm] Initialized udl on minor 2 [ 1610.975352][T17489] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 1610.984026][T17489] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 1613.258017][T23006] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1614.322053][T17489] usb 9-1: USB disconnect, device number 92 [ 1614.328387][T17491] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1614.365696][T17491] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 1616.600742][T23034] sp0: Synchronizing with TNC [ 1617.138062][T23026] [U] [ 1617.453319][T23032] netlink: 84 bytes leftover after parsing attributes in process `syz.6.4482'. [ 1623.988822][T23096] blk_print_req_error: 17 callbacks suppressed [ 1623.988834][T23096] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1624.016269][T23096] EXT4-fs (loop6): unable to read superblock [ 1624.025021][T23098] ================================================================== [ 1624.033081][T23098] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x3d/0x70 [ 1624.041050][T23098] Read of size 8 at addr ffff888062d88830 by task syz.1.4497/23098 [ 1624.048918][T23098] [ 1624.051229][T23098] CPU: 0 UID: 0 PID: 23098 Comm: syz.1.4497 Not tainted syzkaller #0 PREEMPT(full) [ 1624.051244][T23098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1624.051252][T23098] Call Trace: [ 1624.051259][T23098] [ 1624.051267][T23098] dump_stack_lvl+0x189/0x250 [ 1624.051282][T23098] ? __kasan_check_byte+0x12/0x40 [ 1624.051294][T23098] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1624.051305][T23098] ? lock_release+0x4b/0x3e0 [ 1624.051320][T23098] ? __virt_addr_valid+0x4a5/0x5c0 [ 1624.051332][T23098] print_report+0xca/0x240 [ 1624.051342][T23098] ? sysfs_remove_file_ns+0x3d/0x70 [ 1624.051352][T23098] kasan_report+0x118/0x150 [ 1624.051362][T23098] ? do_raw_spin_lock+0x121/0x290 [ 1624.051372][T23098] ? sysfs_remove_file_ns+0x3d/0x70 [ 1624.051384][T23098] sysfs_remove_file_ns+0x3d/0x70 [ 1624.051395][T23098] bus_remove_driver+0x198/0x2f0 [ 1624.051408][T23098] comedi_device_detach_locked+0x178/0x750 [ 1624.051435][T23098] comedi_unlocked_ioctl+0xcde/0x1020 [ 1624.051446][T23098] ? kasan_quarantine_put+0xdd/0x220 [ 1624.051462][T23098] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1624.051499][T23098] ? __fget_files+0x2a/0x420 [ 1624.051510][T23098] ? __fget_files+0x3a0/0x420 [ 1624.051519][T23098] ? __fget_files+0x2a/0x420 [ 1624.051529][T23098] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1624.051542][T23098] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1624.051552][T23098] __se_sys_ioctl+0xfc/0x170 [ 1624.051566][T23098] do_syscall_64+0xfa/0xfa0 [ 1624.051577][T23098] ? lockdep_hardirqs_on+0x9c/0x150 [ 1624.051588][T23098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1624.051597][T23098] ? clear_bhb_loop+0x60/0xb0 [ 1624.051608][T23098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1624.051618][T23098] RIP: 0033:0x7f2257b8eec9 [ 1624.051628][T23098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1624.051637][T23098] RSP: 002b:00007f2258a3a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1624.051648][T23098] RAX: ffffffffffffffda RBX: 00007f2257de5fa0 RCX: 00007f2257b8eec9 [ 1624.051656][T23098] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003 [ 1624.051662][T23098] RBP: 00007f2257c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1624.051668][T23098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1624.051674][T23098] R13: 00007f2257de6038 R14: 00007f2257de5fa0 R15: 00007ffdf3814338 [ 1624.051686][T23098] [ 1624.051690][T23098] [ 1624.290347][T23098] Allocated by task 21738: [ 1624.294750][T23098] kasan_save_track+0x3e/0x80 [ 1624.299432][T23098] __kasan_kmalloc+0x93/0xb0 [ 1624.303994][T23098] __kmalloc_noprof+0x411/0x7f0 [ 1624.308825][T23098] io_cache_alloc_new+0x40/0x100 [ 1624.313743][T23098] __io_prep_rw+0x23f/0xe20 [ 1624.318227][T23098] io_prep_rwv+0x91/0x3e0 [ 1624.322534][T23098] io_submit_sqes+0x935/0x1e60 [ 1624.327274][T23098] __se_sys_io_uring_enter+0x2df/0x2b20 [ 1624.332800][T23098] do_syscall_64+0xfa/0xfa0 [ 1624.337290][T23098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1624.343156][T23098] [ 1624.345458][T23098] Freed by task 21738: [ 1624.349495][T23098] kasan_save_track+0x3e/0x80 [ 1624.354154][T23098] __kasan_save_free_info+0x46/0x50 [ 1624.359327][T23098] __kasan_slab_free+0x5c/0x80 [ 1624.364077][T23098] kfree+0x19a/0x6d0 [ 1624.367948][T23098] io_clean_op+0x298/0x330 [ 1624.372338][T23098] __io_submit_flush_completions+0xd28/0xf50 [ 1624.378292][T23098] io_handle_tw_list+0x44e/0x4c0 [ 1624.383201][T23098] tctx_task_work_run+0x99/0x370 [ 1624.388113][T23098] tctx_task_work+0x3f/0x90 [ 1624.392590][T23098] task_work_run+0x1d4/0x260 [ 1624.397154][T23098] get_signal+0x11ec/0x1340 [ 1624.401636][T23098] arch_do_signal_or_restart+0xa0/0x790 [ 1624.407164][T23098] exit_to_user_mode_loop+0x72/0x130 [ 1624.412426][T23098] do_syscall_64+0x2bd/0xfa0 [ 1624.416995][T23098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1624.422859][T23098] [ 1624.425159][T23098] The buggy address belongs to the object at ffff888062d88800 [ 1624.425159][T23098] which belongs to the cache kmalloc-256 of size 256 [ 1624.439191][T23098] The buggy address is located 48 bytes inside of [ 1624.439191][T23098] freed 256-byte region [ffff888062d88800, ffff888062d88900) [ 1624.452901][T23098] [ 1624.455204][T23098] The buggy address belongs to the physical page: [ 1624.461600][T23098] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888062d88000 pfn:0x62d88 [ 1624.471638][T23098] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1624.480109][T23098] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 1624.488581][T23098] page_type: f5(slab) [ 1624.492542][T23098] raw: 00fff00000000240 ffff88801ac41b40 ffffea0000a54710 ffffea00017b6990 [ 1624.501107][T23098] raw: ffff888062d88000 000000000010000b 00000000f5000000 0000000000000000 [ 1624.509685][T23098] head: 00fff00000000240 ffff88801ac41b40 ffffea0000a54710 ffffea00017b6990 [ 1624.518335][T23098] head: ffff888062d88000 000000000010000b 00000000f5000000 0000000000000000 [ 1624.526985][T23098] head: 00fff00000000001 ffffea00018b6201 00000000ffffffff 00000000ffffffff [ 1624.535645][T23098] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1624.544291][T23098] page dumped because: kasan: bad access detected [ 1624.550687][T23098] page_owner tracks the page as allocated [ 1624.556383][T23098] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9252, tgid 9250 (iou-sqp-9251), ts 360026592043, free_ts 264735481145 [ 1624.577900][T23098] post_alloc_hook+0x240/0x2a0 [ 1624.582648][T23098] get_page_from_freelist+0x21e4/0x22c0 [ 1624.588186][T23098] __alloc_frozen_pages_noprof+0x181/0x370 [ 1624.593967][T23098] alloc_pages_mpol+0x232/0x4a0 [ 1624.598789][T23098] allocate_slab+0x96/0x3a0 [ 1624.603287][T23098] ___slab_alloc+0xe94/0x1920 [ 1624.607935][T23098] __slab_alloc+0x65/0x100 [ 1624.612327][T23098] __kmalloc_noprof+0x471/0x7f0 [ 1624.617159][T23098] io_cache_alloc_new+0x40/0x100 [ 1624.622073][T23098] __io_prep_rw+0x23f/0xe20 [ 1624.626551][T23098] io_prep_rwv+0x91/0x3e0 [ 1624.630855][T23098] io_submit_sqes+0x935/0x1e60 [ 1624.635594][T23098] io_sq_thread+0xc05/0x1e30 [ 1624.640158][T23098] ret_from_fork+0x4bc/0x870 [ 1624.644736][T23098] ret_from_fork_asm+0x1a/0x30 [ 1624.649482][T23098] page last free pid 5857 tgid 5857 stack trace: [ 1624.655778][T23098] __free_frozen_pages+0xbc4/0xd30 [ 1624.660868][T23098] vfree+0x25a/0x400 [ 1624.664736][T23098] kcov_close+0x28/0x50 [ 1624.668865][T23098] __fput+0x44c/0xa70 [ 1624.672822][T23098] task_work_run+0x1d4/0x260 [ 1624.677392][T23098] do_exit+0x6b5/0x2300 [ 1624.681520][T23098] do_group_exit+0x21c/0x2d0 [ 1624.686085][T23098] __x64_sys_exit_group+0x3f/0x40 [ 1624.691083][T23098] x64_sys_call+0x21f7/0x2200 [ 1624.695741][T23098] do_syscall_64+0xfa/0xfa0 [ 1624.700237][T23098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1624.706107][T23098] [ 1624.708435][T23098] Memory state around the buggy address: [ 1624.714038][T23098] ffff888062d88700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1624.722073][T23098] ffff888062d88780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1624.730109][T23098] >ffff888062d88800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1624.738139][T23098] ^ [ 1624.743744][T23098] ffff888062d88880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1624.751779][T23098] ffff888062d88900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1624.759810][T23098] ================================================================== [ 1624.767903][ C0] vkms_vblank_simulate: vblank timer overrun [ 1624.814624][T23098] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1624.821845][T23098] CPU: 0 UID: 0 PID: 23098 Comm: syz.1.4497 Not tainted syzkaller #0 PREEMPT(full) [ 1624.831199][T23098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1624.841260][T23098] Call Trace: [ 1624.844541][T23098] [ 1624.847468][T23098] dump_stack_lvl+0x99/0x250 [ 1624.852062][T23098] ? __asan_memcpy+0x40/0x70 [ 1624.856657][T23098] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1624.861863][T23098] ? __pfx__printk+0x10/0x10 [ 1624.866468][T23098] vpanic+0x237/0x6d0 [ 1624.870453][T23098] ? __pfx_vpanic+0x10/0x10 [ 1624.874966][T23098] ? preempt_schedule+0xae/0xc0 [ 1624.879818][T23098] ? __pfx_preempt_schedule+0x10/0x10 [ 1624.885192][T23098] panic+0xb9/0xc0 [ 1624.888998][T23098] ? __pfx_panic+0x10/0x10 [ 1624.893414][T23098] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1624.899309][T23098] ? sysfs_remove_file_ns+0x3d/0x70 [ 1624.904505][T23098] check_panic_on_warn+0x89/0xb0 [ 1624.909445][T23098] ? sysfs_remove_file_ns+0x3d/0x70 [ 1624.914641][T23098] end_report+0x78/0x160 [ 1624.918889][T23098] kasan_report+0x129/0x150 [ 1624.923392][T23098] ? do_raw_spin_lock+0x121/0x290 [ 1624.928414][T23098] ? sysfs_remove_file_ns+0x3d/0x70 [ 1624.933606][T23098] sysfs_remove_file_ns+0x3d/0x70 [ 1624.938629][T23098] bus_remove_driver+0x198/0x2f0 [ 1624.943561][T23098] comedi_device_detach_locked+0x178/0x750 [ 1624.949359][T23098] comedi_unlocked_ioctl+0xcde/0x1020 [ 1624.954714][T23098] ? kasan_quarantine_put+0xdd/0x220 [ 1624.959992][T23098] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1624.965802][T23098] ? __fget_files+0x2a/0x420 [ 1624.970378][T23098] ? __fget_files+0x3a0/0x420 [ 1624.975034][T23098] ? __fget_files+0x2a/0x420 [ 1624.979607][T23098] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1624.984529][T23098] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1624.990318][T23098] __se_sys_ioctl+0xfc/0x170 [ 1624.994897][T23098] do_syscall_64+0xfa/0xfa0 [ 1624.999388][T23098] ? lockdep_hardirqs_on+0x9c/0x150 [ 1625.004570][T23098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1625.010621][T23098] ? clear_bhb_loop+0x60/0xb0 [ 1625.015286][T23098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1625.021162][T23098] RIP: 0033:0x7f2257b8eec9 [ 1625.025560][T23098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1625.045148][T23098] RSP: 002b:00007f2258a3a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1625.053547][T23098] RAX: ffffffffffffffda RBX: 00007f2257de5fa0 RCX: 00007f2257b8eec9 [ 1625.061499][T23098] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003 [ 1625.069451][T23098] RBP: 00007f2257c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1625.077528][T23098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1625.085483][T23098] R13: 00007f2257de6038 R14: 00007f2257de5fa0 R15: 00007ffdf3814338 [ 1625.093455][T23098] [ 1625.096795][T23098] Kernel Offset: disabled [ 1625.101098][T23098] Rebooting in 86400 seconds..