last executing test programs: 8m53.205212871s ago: executing program 2 (id=732): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xd806, 0x3010, 0x0, 0x1}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000002580)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000002740)={0x7ff, 0x5, {0xffffffffffffffff}, {0xee00}, 0x200, 0x80000000}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r6, r6, 0x0) setuid(r6) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002980)={{{@in6, @in=@dev}}, {{@in=@private}, 0x0, @in6=@ipv4={""/10, ""/2, @broadcast}}}, &(0x7f0000002a80)=0xe8) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) read$FUSE(r7, &(0x7f0000003080)={0x2020}, 0x2020) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000002b80)) getgroups(0x4, &(0x7f0000002bc0)=[0xee00, 0xffffffffffffffff, 0xee00, 0xee00]) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002d00)={{{@in6=@mcast2, @in6=@mcast1}}, {{@in6=@mcast2}, 0x0, @in=@initdev}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002e40)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000400)="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", 0x2000, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r8, 0x8b22, &(0x7f0000000040)) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x40, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 8m51.273510139s ago: executing program 2 (id=738): mknod(&(0x7f0000000080)='./bus\x00', 0x8000, 0x5) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f0000000180)='jfs\x00', 0x400080, &(0x7f00000001c0)='discard') (fail_nth: 2) 8m50.910377426s ago: executing program 2 (id=741): syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x48) r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x10000000000000, 0x3, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) msync(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3) ioctl$MON_IOCT_RING_SIZE(r0, 0x80089203, 0x200000000000000) 8m48.941167882s ago: executing program 2 (id=746): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x3, 0x3c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 8m47.725473763s ago: executing program 2 (id=751): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000800)={0x1c, &(0x7f0000000280)={0x0, 0x13}, 0x0, 0x0}) 8m43.321812117s ago: executing program 2 (id=760): socket(0x10, 0x3, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x2100, 0x1a4) mkdir(&(0x7f0000000000)='./file0\x00', 0x6) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x81, 0x0, 0x0, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x109}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x4e, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) socket$inet(0x2, 0x3, 0x2) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) r4 = syz_open_dev$evdev(0x0, 0x3, 0x822b01) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe825, 0x3400, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x2}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x80, 0x5, 0x1000}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) write$char_usb(r4, 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) 8m26.784230625s ago: executing program 32 (id=760): socket(0x10, 0x3, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x2100, 0x1a4) mkdir(&(0x7f0000000000)='./file0\x00', 0x6) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x81, 0x0, 0x0, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x109}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x4e, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) socket$inet(0x2, 0x3, 0x2) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) r4 = syz_open_dev$evdev(0x0, 0x3, 0x822b01) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe825, 0x3400, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x2}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x80, 0x5, 0x1000}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) write$char_usb(r4, 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) 5m55.75409761s ago: executing program 4 (id=1286): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000780)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='ramfs\x00', 0x101048c, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x380}) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000400)={0xf0f021}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000113000/0x3000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r3 = socket(0x1e, 0x2, 0x0) write(r3, &(0x7f00000002c0)="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", 0xfc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_START_POLL(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) 5m54.504955538s ago: executing program 4 (id=1289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) inotify_init() timerfd_create(0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x6, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x5, 0x0, 0x7fffffff, 0x3fb}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x3, 0x2f) futex(0x0, 0x100, 0x1, 0x0, 0x0, 0x1) r5 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r5, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8054}, 0x0) 5m52.891249497s ago: executing program 4 (id=1293): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000200)=0x100, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) statx(0xffffffffffffffff, 0x0, 0x100, 0x20, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x4) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x2, 0x20001, 0x0, {0x0, 0x0, 0x0, r4, 0xb8391372c9ef937d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004881}, 0x4054) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)="75c1cc54649640be1983f79c5bfe88cd6a6a000070ab59578db363f4892559f334d436138406b699de69db13fd737428808940bcd0840dc930c81a8bd8b665cd232c5831977dd63ce2c88d", 0x4b}, {0x0}, {&(0x7f0000000f00)}], 0x3}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000004c0)=""/106, 0x6a}, {&(0x7f0000000540)=""/143, 0x8f}, {&(0x7f0000000680)=""/141, 0x8d}, {&(0x7f0000000600)=""/14, 0xe}], 0x4, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(0xffffffffffffffff) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f00000002c0)="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", 0xfc) r6 = socket(0x840000000009, 0x1, 0xffff) connect$inet(r6, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=@newtaction={0x14, 0x1c, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x16, 0xa01, 0x70bd26, 0x25dfdbfc, {0xf}, [@typed={0x8, 0xca, 0x0, 0x0, @ipv4=@empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40d0}, 0x800) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000800)={0x13b8, 0x12, 0x200, 0x70bd2c, 0x25dfdbfc, {0xe, 0x3, 0x7, 0xff, {0x4e23, 0x4e22, [0x8, 0x401, 0x5, 0x6], [0xfffffffb, 0x4, 0x8, 0x2], r4, [0xfffffffc, 0x4]}, 0x2, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x34, 0x1, "b37abe4eda09a2b2e35f1c3dabc0fe7614f235dc7d802b19ce316bd3ab6ace72d96edf569daf4318f88e2667d3e0ecb9"}, @INET_DIAG_REQ_BYTECODE={0x7e, 0x1, "a93ee376ca52aefe72841a39fbd259ebe1bf8d0f99d02efcc1b0e499fc174bbcd5fe5796781b946f1b8df6f85574cc8c08b01316916fac31215ff8edddd71d48e2182eafba9c751f5c5d99418fb5381d00eeb9098a1b9be8103ceee6e481f3041bdc1c579bfa612f29e46a020ee2eda7967ae29bdd5dee725a0c"}, @INET_DIAG_REQ_BYTECODE={0xfd, 0x1, "a2c2e8a97ad868b09adc84163cc0dda0a4bb709edc6781ce5d722af3f3a280a4aa2a147f38fcd3218dd266e71e85e2e3fce68ed36bb92e8a93c325d63a7dd658b592a5505eb305074ad9ad04bae6a18cb0f3a2ac07fc21e3b5fbecb16d893b8f77f39016a08f9f4abf861b869a4d71cb558f78cc8a164bb89b4682d4680178a7466dc77a42212e921cbb6a81ccb621e25ffffe3135ee43c61d643feffeabf41d48cff7fb119ec8fa4699f0b225340f042442514eb17e135a871950f1327ab8b60bfc7d6e79ce026179ff5812461b753f42d085448e4e31e785dcb8c610af5edc571613738facdf6e1a1fa07cbd80636868159b103f95c183e3"}, @INET_DIAG_REQ_BYTECODE={0x1c, 0x1, "1a6158c0e02d89b284189c725bf23830ff7555900eaa89ae"}, @INET_DIAG_REQ_BYTECODE={0xca, 0x1, "3f25d0fc4606075e8f817f96101d387c67b0eafadd30c98dfb4e5e95ea75ea4c6c98cbd903ec0e025df270eac7371313a199e8d0efb26565cf235291f033971c05d738b166050c1fb7dc84cd0a2d6b9e4a2b84454530b5b415fcd729456204545ca3b3a36a4f1c5be52ed766e7bff2ca4316c57ff193e6d16fee780addfd15bfe2a1baf2e23fe2b7bf6204f7d0dffd3ed8b597cf2c2e1439bc5fc7715a8b258fa2b53a1ef273bc225de8e2cd60882f47d02afccf048aa4d64caeef1b1a6f75b0d8951e7d2546"}, @INET_DIAG_REQ_BYTECODE={0x70, 0x1, "9f16b3996a9a3f9ce425ad43bea8a11ffeb99c94083c3967bfab142cd304dc10dabb3a2deb6c21cb756f514fd9bad4e4108a503310811217a3054bab20a90a74c8de2f61fe5d26bfb6509122f97792bc84f602b96f6ccbc61734ccc4ee2b7742ffed84cd39142e45bc9fca6c"}, @INET_DIAG_REQ_BYTECODE={0x59, 0x1, "91f43a9a3caab8992c3dce7fbd2f16066f57f9a67cf32205e274a08639f6f8fe200e1fefd6af59c568b288368aa9902c818936409f9a323dbbd68970c29b8cbef96fa09ccb572541f299d7773952b7e2b7fb616f51"}]}, 0x13b8}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) 5m50.733363547s ago: executing program 4 (id=1300): bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e020000000000000000"], 0x0, 0x37}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0100000004000000040000000700000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="020000"], 0x50) 5m49.296001479s ago: executing program 4 (id=1301): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) mount$nfs(&(0x7f0000000000)='@\a', &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x1000000, 0x0) (fail_nth: 6) 5m49.084331273s ago: executing program 4 (id=1304): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2002) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r3, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x5008, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) socket$caif_stream(0x25, 0x1, 0x2) r4 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r7, &(0x7f0000000040), 0x0, 0xffff, 0x6) ioctl$SNDCTL_DSP_GETBLKSIZE(r7, 0xc0045004, &(0x7f0000000040)) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2d, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x120) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f0000000200)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) r9 = gettid() r10 = epoll_create(0x20003fd) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r11 = eventfd(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f0000000000)={0x2}) kcmp$KCMP_EPOLL_TFD(r9, r9, 0x7, r11, &(0x7f0000000080)={r10, r11, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 5m33.818221982s ago: executing program 33 (id=1304): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2002) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r3, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x5008, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) socket$caif_stream(0x25, 0x1, 0x2) r4 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r7, &(0x7f0000000040), 0x0, 0xffff, 0x6) ioctl$SNDCTL_DSP_GETBLKSIZE(r7, 0xc0045004, &(0x7f0000000040)) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2d, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x120) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f0000000200)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) r9 = gettid() r10 = epoll_create(0x20003fd) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r11 = eventfd(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f0000000000)={0x2}) kcmp$KCMP_EPOLL_TFD(r9, r9, 0x7, r11, &(0x7f0000000080)={r10, r11, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 3m33.594207157s ago: executing program 0 (id=1659): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x3, 0x3c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 3m32.104092208s ago: executing program 0 (id=1662): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x3, 0x3c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 3m29.854898974s ago: executing program 0 (id=1665): setuid(0xee00) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000680)='h', 0x1}], 0x1) accept4$unix(r0, 0x0, 0x0, 0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) semtimedop(0x0, &(0x7f0000000000)=[{0x4, 0x2}], 0x1, &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f0000000000)={0x5, 0x50674a4e, 0x11ffffffffff, 0x2, 0x3, 0x0, 0x1800000000000000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x5, 0x0, 0x200000001, 0x4000000000000086, 0x804, 0x3, 0x1}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x23}, [@ldst={0x4, 0x3, 0x4, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) setuid(0xee00) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) (async) listen(r0, 0xfffffffe) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000680)='h', 0x1}], 0x1) (async) accept4$unix(r0, 0x0, 0x0, 0x80000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) semtimedop(0x0, &(0x7f0000000000)=[{0x4, 0x2}], 0x1, &(0x7f0000000040)) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) pselect6(0x40, &(0x7f0000000000)={0x5, 0x50674a4e, 0x11ffffffffff, 0x2, 0x3, 0x0, 0x1800000000000000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x5, 0x0, 0x200000001, 0x4000000000000086, 0x804, 0x3, 0x1}, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x23}, [@ldst={0x4, 0x3, 0x4, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) (async) 3m29.50633981s ago: executing program 0 (id=1667): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000000705000000000000000000070000060c000640000000000000d2"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x200000c0) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x4, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x48001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=0x0, @ANYBLOB="74e8e60fc64e0d91a353cd20", @ANYRES32=0x0, @ANYBLOB="01000300ac1e000100000000000000000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./file0/../file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='.\x00', 0x0, 0xbdab7d3189239830, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) socket$nl_generic(0x10, 0x3, 0x10) 3m28.158331518s ago: executing program 0 (id=1669): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x3, 0x0) lseek(0xffffffffffffffff, 0x10000000005, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r4, 0x1, 0x80, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x87}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3m27.05842674s ago: executing program 0 (id=1674): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) preadv(r0, 0x0, 0x0, 0x9d, 0xd3) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000100)={0x2098, 0x5, 0x1000, 0xfffffffd}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20042800}, 0x24040800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresgid(0xffffffffffffffff, 0xffffffffffffffff, 0xee00) ptrace(0x10, 0x1) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0x400, 0x10000}}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) 3m26.86892939s ago: executing program 34 (id=1674): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) preadv(r0, 0x0, 0x0, 0x9d, 0xd3) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000100)={0x2098, 0x5, 0x1000, 0xfffffffd}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20042800}, 0x24040800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresgid(0xffffffffffffffff, 0xffffffffffffffff, 0xee00) ptrace(0x10, 0x1) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0x400, 0x10000}}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) 2m55.582193839s ago: executing program 3 (id=1759): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0007439a000000000000010000000900010073797a310000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000001400038008010140ffffffff0800024000000000140000001000010000000000000000000000000a"], 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getpid() r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007e, 0x0) dup3(r1, r2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000000)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x6, 0xffff81a4, 0x40, 0x0, 0xf}) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a80)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000018c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r7}, 0x10) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000180)={0x3, 0x980900, 0x1}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700ebffffff0300006574683a73797a6b616c6c6572302a0e8d155f5c6e2964dcebc7aa1b08835b6bafda833df06b6e16c5bc3bcab5264497dffd5c4c5f9edb5ec48535bde7b4"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 2m53.811513582s ago: executing program 3 (id=1763): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r4, &(0x7f0000003440)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x3) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = dup(0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f0000001080)=ANY=[@ANYRESOCT=r5, @ANYRES16=r6, @ANYBLOB="0700e0000002140005000000000000000000000000000000000106000b001d00000006000b000800000000000000000000000000000000000000acf2bb3284cc0362e76731606c148dd477126ad00228aa39ed5b46233f3359c70c17744b84a1cbfe3446d27040"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40801) writev(r7, &(0x7f0000000400)=[{&(0x7f0000000340)="1e0eb2", 0x3}], 0x1) r8 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xc95e}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1000}, 0x10}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x1ef6e3}], 0x100000000000011a) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11) 2m52.777773468s ago: executing program 3 (id=1764): r0 = socket(0x2a, 0x800000002, 0x9) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r0, 0x5411, 0x1000000000000) 2m50.440870269s ago: executing program 3 (id=1776): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0xf}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1f, 0x12, r0, 0x2000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r10, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r11, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r9, 0xae80, 0x0) 2m49.300456768s ago: executing program 3 (id=1780): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120150028c225a20f0030c07000001020301090212000101c080080904e207006576c745"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x48) syz_open_dev$usbmon(&(0x7f0000000280), 0x800, 0x20302) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000380)={0x8, 0x3}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x183001, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) set_mempolicy(0x2, &(0x7f0000000240)=0x4716, 0x3) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r5 = memfd_create(0x0, 0x0) fsetxattr$security_ima(r5, &(0x7f0000000480), 0x0, 0x0, 0x3) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000200)=0x15) r7 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x3) socket$netlink(0x10, 0x3, 0x0) 2m40.380351416s ago: executing program 3 (id=1802): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x64) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x100) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r6, 0x0, 0x1}, 0x18) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000000)={0x2000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) 2m25.354988648s ago: executing program 35 (id=1802): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x64) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x100) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r6, 0x0, 0x1}, 0x18) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000000)={0x2000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) 9.54413345s ago: executing program 1 (id=2175): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000000000300000000030000000300000000000101010000000000000800000000010000000100000506000000010000000200000000000000005f"], 0x0, 0x58, 0x0, 0xa}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0xb894, 0x1001, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000600)=ANY=[@ANYBLOB="400100001000010028bd7000ffd3df25ac1414aa00000000000000c5cb9fc900200100000000000000000000a74ccc8c4e22fffc200080000000000014000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="64010111000000000000000000000000000000206c00000000000008000000000000000000000002feffffffffffffff0000000000000000000000000000000001000000000000080700000000000000070000000000000000000000000004000000000000000000000000000020000008000000000000000000000000000000fcffffffffffffff000000000900000000000000000000000000000002000100330000000000000008001f0004000000480003006465666c61746500"], 0x140}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) r8 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x1, 0x5}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x7}}}, 0x19) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x0, 0x1}, 0x20) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r9, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x804c040}, 0xc851) 8.793826867s ago: executing program 8 (id=2177): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/custom1\x00', 0x6cf05526c7122d2d, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffe000/0x1000)=nil}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000400)=""/173, 0xad}, {&(0x7f0000000100)=""/113, 0x71}, {&(0x7f0000000600)=""/231, 0xe7}, {&(0x7f00000002c0)=""/49, 0x31}, {&(0x7f0000000540)=""/109, 0xfffffdbe}, {&(0x7f0000000700)=""/4090, 0x1000}, {&(0x7f0000001980)=""/61, 0x5b}, {&(0x7f0000001780)=""/162, 0xa2}, {&(0x7f0000001840)=""/123, 0x7b}], 0x9}, 0x0) dup3(r1, r0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) creat(&(0x7f00000002c0)='./file0\x00', 0x51) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r7 = dup(r6) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [{@euid_lt}], 0x6b}}) 8.530327606s ago: executing program 1 (id=2178): mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 7.45656425s ago: executing program 6 (id=2181): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x4908d13283d17e5f, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0xffffffff00000000) 7.317727549s ago: executing program 6 (id=2183): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) lsm_set_self_attr(0x67, &(0x7f0000000800)=ANY=[@ANYRES32=r0], 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r4, 0x7}, 0x8) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x0, 0x48000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000100)={0x38, 0x5, 0x1e, 0x0, 0x0, 0xe000000000000000, 0x9, 0x6, 0x4, 0x7}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000140)) r9 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000001780)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001740)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000280001002dbd7000ffdbdf2503000020"], 0x14}, 0x1, 0x0, 0x0, 0x4051}, 0x20000800) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r10 = memfd_secret(0x80000) connect$inet(r10, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000080)=0x2) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) 7.202806497s ago: executing program 7 (id=2184): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00700000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) 6.697678917s ago: executing program 5 (id=2185): bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e020000000000000000"], 0x0, 0x37}, 0x28) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0100000004000000040000000700000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="020000"], 0x50) 6.447097368s ago: executing program 6 (id=2186): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd7000fddbdf253b00000008000300", @ANYBLOB="0400020046003300001c060008021100000008021100000008"], 0x68}, 0x1, 0x0, 0x0, 0x20040080}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x14, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x2, 0x3d, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109022b0001000000000904000002010351000905831300000000000725"], 0x0) 5.452265484s ago: executing program 1 (id=2187): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0xffffffff, 0x4, 0x1, 0xc, 0x12, 0x4, 0xd, 0xfffffffc, 0x2, 0x1f, 0xfffffffe, 0x1, 0x2, 0x101, 0x4, 0x9, 0x3, 0x352f, 0x99, 0xcaa7, 0x80, 0x20001e58, 0x7, 0x2000e67, 0x3c, 0x8, 0xfffffffe, 0x4, 0xfffffff8]}) 5.278223564s ago: executing program 5 (id=2188): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fbdbdf25fc00000000000000008d000000000000ff1a00ff00000000000000000000000000000004000000000a006080", @ANYRES32=0xee01], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000000000010000"], 0xb8}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000000000000000ffac1e000100000000000000000000000000000000000000000a00400000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00f00000000000000000000000000000a30a000000000000f8ffffffffffffff0600000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000c06b6e000001000100000000"], 0xb8}}, 0x0) 5.166847859s ago: executing program 7 (id=2189): syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(&(0x7f0000000440)='./file0\x00', 0x40, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x400000000000, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0xdd, 0xa}, 0x50) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) poll(&(0x7f00000000c0)=[{r6, 0x20}], 0x1, 0x2) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x4b4, 0xbca1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0xec, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x1, 0x7, {0x9, 0x21, 0x7, 0xfe, 0x1, {0x22, 0x56a}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0x9, 0x10}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x3, 0x2, 0x6d}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x0, 0x80, 0x2, 0x40, 0xe}, 0x121, &(0x7f0000000540)={0x5, 0xf, 0x121, 0x4, [@generic={0x98, 0x10, 0x1, "0ef2117358418ed004640e4a6ec03960e2fa5c4632021a77dd4e915e5ba35c2ca34a90c58b4fddad7fcbca3b5181331c13f8a00a6b7c60025de2caeb508d96639d367ce1da9c6f8b85a23f2680aad9ff08327d5551cb2b248ff8082b9c4c6dea744d709492ff716b2957b8c22076a066de67330b82866afdf7199db7cdc61719590c77ac55892dc858a8223e3082eadee15e9fb20c"}, @wireless={0xb, 0x10, 0x1, 0x6, 0x22, 0x6, 0x9, 0x5, 0xe}, @ss_container_id={0x14, 0x10, 0x4, 0xb1, "36f46da747e7de0e43d82c90af23f86b"}, @generic={0x65, 0x10, 0xa, "b59617a973692d44260cf0b93197912cc0ed067b5eda68308117bab94c44f4a39074ce56fc9700668801902b254b7d39dd1cd6da1db638f4ce5f991ec4d1beb043ceb0de106e5a771e2def21a5b4a16607d12867e55b429646a0bc0e95b58d7dc81f"}]}}) 5.166485021s ago: executing program 8 (id=2190): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@remote, @multicast1, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) preadv(r0, 0x0, 0x0, 0x9d, 0xd3) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x2098, 0x5, 0x1000, 0xfffffffd}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20042800}, 0x24040800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresgid(0xffffffffffffffff, 0xffffffffffffffff, 0xee00) ptrace(0x10, 0x1) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f000071c000/0xe000)=nil, 0xe000, 0x0, 0x810, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x309201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) 5.101577822s ago: executing program 5 (id=2191): mknod(&(0x7f0000000080)='./bus\x00', 0x8000, 0x5) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f0000000180)='jfs\x00', 0x400080, &(0x7f00000001c0)='discard') (fail_nth: 11) 4.686193274s ago: executing program 5 (id=2192): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x7c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'tunl0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg1\x00'}]}, 0x7c}}, 0x4804) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004580)="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", 0x2000, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) flistxattr(r7, 0x0, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newtaction={0x14, 0x30, 0x871a15abc695fa3d, 0x2000, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4090}, 0x4040000) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)={0x38, 0x1412, 0x1, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000240)={0x28, r2, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x805}, 0x40084) epoll_create1(0x0) 4.03036473s ago: executing program 8 (id=2193): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x2200001, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) (async) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000181401000000000003000000080001000000000008000380"], 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x0) (async) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000000)=0x991, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_raw(r5, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r6}, 0x10, &(0x7f0000000200)={&(0x7f0000001100)=@can={{0x0, 0x0, 0x0, 0x1}, 0x1, 0x1, 0x0, 0x0, "09151995c95f32cc"}, 0x10}}, 0x44001) (async) recvmmsg(r5, &(0x7f0000000cc0), 0x2f, 0x2001, 0x0) r7 = syz_pidfd_open(r4, 0x0) setns(r7, 0x24020000) (async, rerun: 32) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (rerun: 32) 3.975701607s ago: executing program 1 (id=2194): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x4) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x24) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000240)={&(0x7f0000001000)={[{&(0x7f0000000140)="e6f64271b25ebe4d3f4286327ca6707ad28a2f78530321d7644f101856348bc03b32505dd3222114b88b8d02658343814b90f72212bc44866fd49d521746fa85737681a2edb72c5bd775e134aa2caebc50fb72615c4cd197a381aae038a13e3b0f17f7abd78dd0a9c13923e79387c7ac4083d2e1f8376d4c65233967aa956b0bae1a86b30b1204ce5b513ff30246eb96ca99d431c54e704944eca8e67c05157d5d98665de5992a5badafe7c12a8b1eb9fd9e672b913dd24bc391754cfd962c8ab37f7910fbe6a2f4e8a701717ba6c1b44d3780bee2a2b38d", 0xd8, 0x3}]}, 0x1, 0x3}, 0x1) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000280)={@loopback, @empty, 0x0}, &(0x7f00000002c0)=0xc) bind$packet(r1, &(0x7f0000000300)={0x11, 0xf6, r2, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@fallback=r1, 0x6, 0x0, 0x7, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000480)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000880)=0x0) ptrace$ARCH_GET_GS(0x1e, r4, &(0x7f00000008c0), 0x1004) rt_sigaction(0x1e, &(0x7f00000009c0)={&(0x7f0000000900)="66450f38041c4509000000650f8502000000c4e1f910750066f30f2c1d8a000000c42359424a8247f041ff4700c4e140123766460f7fd7c4a28d4022f041831cce89", 0x8000002, &(0x7f0000000980)="446f64440fa0f3440fa6d0c42159e3c1c4c3092089d4d5493b00f347abf3d9ecc4c18973d1b867672e0fae5100c42179116259", {[0x2]}}, 0x0, 0x8, &(0x7f0000000a00)) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000a80), r1) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x6c, r5, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa530}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r6}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x400}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17) ioctl$KVM_CAP_HYPERV_TLBFLUSH(r3, 0x4068aea3, &(0x7f0000000bc0)) r7 = syz_usb_connect$cdc_ecm(0x1, 0x6b, &(0x7f0000000c40)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x59, 0x1, 0x1, 0x7f, 0xe8, 0x3, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x2, 0x6, 0x0, 0xfd, {{0x6, 0x24, 0x6, 0x0, 0x0, "c3"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xffff, 0x4}, [@network_terminal={0x7, 0x24, 0xa, 0x5, 0x5, 0x8, 0xc}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0xd}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x7, 0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x81, 0x5, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xc, 0x80, 0xc0}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x8, 0xa, 0x8}}}}}]}}]}}, &(0x7f0000002040)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x110, 0x81, 0x6, 0x9, 0x8, 0xc}, 0x19, &(0x7f0000000d00)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0x3, 0xf00, 0x8, [0xff0000, 0xff0030]}]}, 0x5, [{0xf9, &(0x7f0000000d40)=@string={0xf9, 0x3, "12434b18940d08a26426d786deb625427c3e96faa53b9ed36401277ce1be4f7b135216bc699080463fad79d09fe02f4fa47a1556741a4b0d227f56274d1d41c97df51cbce21f9f24d39d74d0da96c96bacc00e2989005d875ee538d8cdf77312424cef2a33339682af27fbeb6d33af71440fd7c7a5ce003f82fd4cf86c2353fa9b52e71f0993191b24eecc108c46fec02c7a133becb8a8140dcfede3a0df96de0a6bb6a5bb7f4d8a91f1ca82b9bb4b0866ae1d88ad06c766c052f82b8e287da6383e018d60fcbc7885da97e4e5ed1a037daf1aa3ef870d9e50cc9db13fbf5708f7a6d3bb7b6e19c6494c7202836e8524b561a053ce3290"}}, {0x9e, &(0x7f0000000e40)=@string={0x9e, 0x3, "b2663e7fd689d2cf0c7c43b13569b7d9d9a75c4e1fc5b64453d01eca9e2447436ad31cd328ed94dc3256f0cf34563e048491179e860fd2fedf8d36cb25b9f92d5ac0a69e317e6314480fe3f01eb8533d3bf1c7092bce914da3afc0834b1a9aec852d55eeb52c73afa0afa63cd55950b57d1690599ca66d45869ec6c15d7aaec52e15e9bc928292bbc6bc2e292d7a4fcc11ed308407cd5a6fd3be13d9"}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x2e}}, {0xa5, &(0x7f0000000f40)=@string={0xa5, 0x3, "5b01aea3b4ea42e9f7387c1cb1f2eb7cbfad235d906d4b1df816c84c12e993a4524aa050ea02a1f0c3146be3c6bbd1193a6cdb01865da279ef90bbc6f9b26e9dd64690e3c38e9d2c12a8c11ffd6cec58393c0cf6b733896d268c406d4b82d7ba072990231b8796230e02cf9fc74398b69b3adeb2a483695ed03423121273ad9186b48f6aa943f691169f33c1340c4b6c833f671dbaaca9ac743d6e3cf0db9b43e164ab"}}, {0x4, &(0x7f0000002000)=@lang_id={0x4}}]}) syz_usb_control_io(r7, &(0x7f0000002280)={0x2c, &(0x7f00000020c0)={0x0, 0x4, 0x9a, {0x9a, 0xd, "19a9e2b1b862e772f221ca3c52976af3c26d55dc4d7aa1d681cd973c660c6deebc2aaf161e0d000bf37e650e4438610d98e82fe0073c4cacd076192f2efa01fdea1752f35d38ac8e75317ca34c67b2d1121084796725949a6c34cea516c72d8ed9226cb0b334a21378ab1a570c02b25bf4bfbb974c516b91f14bb6c3a4e59ef4d7e21efffce1dfc0e64bf922ff468a1d8d2a7d746f0ec03d"}}, &(0x7f0000002180)={0x0, 0x3, 0x34, @string={0x34, 0x3, "a29808e3b764416c88fede22bbf5c841c099388aaf394734b24329b232b8b8a1c1c0d4249c62cb5c3fc9724e801fcbcca701"}}, &(0x7f00000021c0)={0x0, 0xf, 0x13, {0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x81, 0x6, 0x10, 0x80}]}}, &(0x7f0000002200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x8, 0x1, 0x8, "ac82d0e0", "afdaec1c"}}, &(0x7f0000002240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x80, 0xca, 0x7f, 0x5, 0xda0, 0x9b9}}}, &(0x7f0000002780)={0x84, &(0x7f00000022c0)={0x40, 0x8, 0xbc, "b63d7fe550ea4a5ffeb26d9ad45fc0327110ae50d9a6c003149f854417ba7ceac07acbba5d0238e748acb3f963aba132d9ede24062f4cef627104b721906351aaa23431b3e385d9a5bbc8c8f405fd316335804be8b461986358ddd924e53fb4b30c85696745283a3bb42b183e9907f29862d5903df2981a5296f21f0a9353a1e5e8d4d99c0bf1bb8dc5fde4c4626f2180ec7538fd3ea7b7b092b4c88978d365723a40889b9a8b7e6715862e13deeb180b043b6cbac3a350fb7b9e4c3"}, &(0x7f00000023c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000002400)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000002440)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000002480)={0x20, 0x0, 0x4, {0x400, 0x10}}, &(0x7f00000024c0)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000002500)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000002540)={0x40, 0xb, 0x2, "d690"}, &(0x7f0000002580)={0x40, 0xf, 0x2, 0xfffe}, &(0x7f00000025c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000002600)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000002640)={0x40, 0x19, 0x2, "1ba1"}, &(0x7f0000002680)={0x40, 0x1a, 0x2, 0x7ff}, &(0x7f00000026c0)={0x40, 0x1c, 0x1, 0xd8}, &(0x7f0000002700)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000002740)={0x40, 0x21, 0x1}}) r8 = gettid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000004b40)=0x0) stat(&(0x7f0000004c00)='./file0\x00', &(0x7f0000004c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000004e80)={{0x1, 0x1, 0x18, r3, {0xee01, 0x0}}, './file0\x00'}) stat(&(0x7f0000004ec0)='./file0\x00', &(0x7f0000004f00)={0x0, 0x0, 0x0, 0x0, 0x0}) r13 = getegid() getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000005100)={0x0, 0x0}, &(0x7f0000005140)=0xc) getresgid(&(0x7f0000005180), &(0x7f00000051c0)=0x0, &(0x7f0000005200)) syz_fuse_handle_req(r3, &(0x7f0000002840)="9d403fbdb04f0dde7362884a65b2ac0f864ad56c7c69a69e2688e7e8d2520aea489d9c5947e12b1627885a36896607907b0a66ed404ed94b81ecb38cae1b26a9a92c1ecbd753a72f955a7567c103ab675ea00ca5764bc9b2bd3ba364d638d1d46a0966cebabc716158a7322c877da0b90dbf79b6044bcb0502b7b8d25e372c839f3c37a31646d793895064a4716db9a491f2a98fccd9e318c6f7bd8fe65989fba5f5430d9e3c2ace52e82751e4ceb9b887c109fd0321cff35c5401277c50b72fbcd5fc8dd1a15d2c452cedfac54b571c3c907538ef071197019d88ab8dc67c695822066c54ef0f4b617bf33acfff245a6ca91bac11a899586bc0aaddf42cd7c814a8bdcdf652cfb02a1cf200621143c937dac0240e9a9a6cdc26cf231fc472df8196f92545222aa9b2c50e2c008dcef4abc36857b74a1a125ed43b539934083a6969eda650341dcf73913726a6b5504154cd703a0910b0428a51e604a820d7c29ab7a5cb31bc654fe84a1936b229341c05335ffc430d3f141c9b59b61617fcc9403b197c952dcd712e72d8a97c93714ae22d8ad164d5628f70e82eb1ea975fd1b359463963b7555e21f2434626748fe01e49feccc746f41040aa4b098fd27f3968cb77d4a93d57dfab1538c52f53cf44a3e6bd0b701668fb564c388998c9024f6e347fc958312b29f286371929e89e242ad6a9aecb3880b7a07741af3b1adce533f851ba10d1b46867c0888c1a216c563d73c302363b8881192612499338a1516e8feec1d7f6c14bd848c8fae8a23b511ff3b29af585d72fe628722c584728511bb8ea04882e7c81f4a87dd9644fd206a4f0e545182fcc372d4d7395a94435ed82948a208a17ee24a4129c4cb755305d0c6f232234d75b8bd8d032eb88bc147dbaa18da6de6e23679d76d1e31c1ea878d4a72959cb6e794e5ee2fe86c4a33d1b7600f862250b05f8eae550efb496febe72bfffbc842c6a129ac5561a7ef748faea8418b88838a74cb873d7d2872f8c8df9e2827c2075435a9663e797fc5bd76f81db89d45148aaf24cbaf0aaf7516e944218c34ba33c49f220b0151d73b2e3441a6de447eaf507d3a0c8c8257ef5d364a73df555dbdfc510bc69e804dcd251292c3a0095a39367cead0721d895ea55dde1e4c8ddc9e88dc2e961f456c0640c94732560068a04d038abd962412c7da195fb3764fbac2287e8419e8671063c17e7af61bddb97e8e0f6541f4dd6a6ec0d6dc742b999bb2484cb4b7435bb102935b1f4059569445f810e50e6fc337956b1bf4022f944f0f881823bd8ca6b18245812e1c14e798de83eece09508a53c14e492e8e73b0272d54d8f49d1eaf8108c589876188a3179e97c535cb4fb0943b2144e2e49815bc6c84dc4e81229eeea83f9cdc9135e18a9ede771cc6f0c642b6ea5b99c0badeeaab4d71bda7a6bdb41572321ed88512703f99b6be464f63c910393018d1839ab8dde06487debd258f8fe2f3c2f1e119f9333bf7026f52e1758ac17f50fea4571ac0c8ebe1ae690baa19739c31161ae200ef4128048207a1d3e5f89366a1cd42c3f0bbc71b0ec899e5c0862d58d4df175cc618beea9ca2ba0937393555b7264f3162069f91d6669e10f473d7cfcb504908f7c705c14136e1e5e4c7a54a5a7a08aee1c8f6736c312557aa2a8cd782a2781736d7a762bb9b22fbaea2bfd02c60766a95a206b3a542ab1e9720267267307c51961faf2a2e61da24e41ea65079a3abf08d47455238fa084c6572fceefbbf05fc9ea2fea3bb9f5460c92fccd74f26c2a86233c4553cbf6d10768891cba946dd2f9afacc2012a6a20713f1596e0ed44d5546e0b35313b7e7534dafd7d86a6d1c2e4352bbfbb55be5987858b281eb29a3214d68d56d40e8d2b73301c98d099bf96b956feda780b90870b0f2b7bdcd5ac525d58e633305e3eedd022a3a4a34f63bf2246de5c3979110793306c0a1283a3cd549272485791ce0873e49dbf8f5b0808877dee17013e3efecb64251f61c593cd791c3f59be08692f826ae0ee7a06ad2b8ebf553a4199053ed21b37a404dd25d4a4fa55bb14b12ab96bd2d2da5fbfa29f4f8950748b882ad09df6dfcaaadf0cc2ea9d2c4566d8a22ecb83f2df6b9d037f1f8ae2c53b20c319db771770f1e900e1584b6c6bc305250e6b65a5de8fc26cfa13c50f1cdb5b7032e6ecfb7203f597e0a7473ef693ec237badc9d88cae6b1ebdbfd0c168ea2c45c22848282cc60701978a31f914d1e443a8dc8052553c7dca4420fc4859c5e172b89918e9b8a47e87694a9171d955e4e6d1de2f3019042dfcb04bf8c3cb97279acff1632431bdddfaf19e298f5b470bd10a05c26c9c28242236011403993e86a927b48ad9acaad4cdb414163b09fd91f8e095052837800fe6a1c18c9d877a3826a88f0ca14b0a4f33ed364b300526cb37624735f0c5f2f652f23630e9ff854052be2dfe272d4dc3b3b8bfb8836ddaf4693918db72dc80ae709c3f5afa4158d4f6017a46d898860b27f29baef219894e753dbb84448f9a196a744fd2c197247634e0f89762a7a59628155533304a70050d59a4e85321e50bbbb041a139e1dcb08e71bc972ee026e92b27923426e4f88ab00b1a581718e8b767cb81ba1c34cdc72b503bd94ec647a9a751675c419c24bbb279202335a44d12508118f6547203c0055711f4c611064903511e562ef407169ccea9efe0aad78e9fdf27cae84ab10564588f91eb8a4ec356370d8e6ad7a7cbb11d57d123aa45696b870a13f0b4158d1804efc180040c2d6143f9a8bfcde6b826f6ca33b0459b6e0e553314a76a7e38d3ca92b33f024995c4a784a87840905448c5a2cabeb68956cb3a36aecf84ac19f2349d3dfbd4a1137beab87eb4b849c204796b5b34529f3336b6b2f0e933b28f8d4859f328496dc0ed0f6ea58ed6494f30a0b2cb71c2674736789ea6a8bbd29ad6ab4f84b3fd00f2cea54d6ee79fba7fde59f4af76997d2a684ab174fa6104bba38b8231c80901e898bf16ee25e03af3d596b5e0b7dd88b4a4ba1677781cf894ee98651b95389ae4f3f8c957ede75e263bb221e980747d2507c222dfbf18214cd8c417d21ba7b2d9262a1020deb92ff5ae41d9e2e627081808763356e830b81a834a354189c829cdd2b5197cec4699fb5ff73320da853109dead3cbd7457f481881759ee646d229560ac7ec370ef764f43d88dfe5068266bcbc5bb8742b6c73a7cfd507c76688b570ae05072b8cd15a4f98839c5747ce487b53c7656062ef16f6a93850da63fa1d2206d02e3f610ffeaf1d47e4ab91a3fbfb2243f57a414169b0d5d9fdaf9bf861bfff630211482b03cd4ee86c26033ab718e0d0047af3f74b18058a0cc48fca5a51d04f9a38d84af7af95f0fc7c162226c5ce792d8864a566fd3ce2d18885c74b1c9f9ee46c1e92205ee9280b93d7b445595349a0338c997ec97f74a50c9a65ea94c99f748c4b8a2d257f21c2fea035f19a4a8e42d55ac815b45ea1b27a82ed0af6970d374f20dec6b93a46d6be5d7db794feaac6deef0069f5371ebf932e1ce345bfc046bb27b6d914f31073a993cfbc2748777660d21f4dba8d36a78899e2c7da3d954265fe9817857d3ce7427bcd2f6de15f44127cd5b2ea8e94abac981aa46cbafe53523ece6176635c6355241aeb0285481a94d7449d2b58388bd4d02af046637ccb79835695f61af275d918315515535a500a6c09ca371712b82960247265b478bb400f902782aecb4d51fe730dc5ccff4e2d740133cc2525238102e23107bcb8d20afcf99860f859a9fdaefa4aa29689f96029483f8b03d1634b63e6d12fbe2a381a3f34976468ca6c0ea46d1c6f3fe0df2a9c873465dda24e538ebecf7d9ba96090d8f9f56f1fbcbd20531e3746a7fe74b91eaa1da03f9c003a47fbcce72184199544d164152755a6c6eaf07d5f77ddcc384d4c74656670422e24b1522ec85a855203d16a31d82b5519f91b634f4d62f3c57180405c38d14583c5089a4acf791e188c0c9ba26dc092440fb8a88f3076c598d186d6e2fbf242ba374d70e5da718f198c4c48caa4282d826746e7bca22be0f6e5f6fe55cb22c9ec61cda2032a6a85dcebb65952bab37a0fe7a89fc63d19d91e2f1696c0cb0f95b14c0ba51495eb2ebf3d62b0411419c0c5350edd534bb233135c66ba6e3ae5f935f600aa3a05a8ab319b2d058e73700776762affc1ffb2a53c117a4cacee659eebd8feceecaeda19b7659426ca56da2e5485a5849df6c931d5363fe72241f13532f79e3ad6e58c6a934b3f0906c84b2fd7ee8d551020c1b7a63ec39ae389cc52413cc58536fefc5a07b27a61f387396ee254165b9cad1b3fd02a1985c8d38aa5e80704120a4c74b2249438397a931f8fa2f17cad98f596480d18e601c2c11d63b060e30e585f7731fd4faaabda036fabd689f374c96d40e26138d9f6d6015bb0c7752f111551e481ef8f0d8c7b82b26545b9912b93527e8cf2b29ea0d7e76650121a8c055ab4907c17ec909cfa2d2e64b9dc371e2a6ca07005f3ca8e18899fee90f0255540c0173bb669e25cd560b0cf11775b260d9455b3074b55641ca13b99779af890a43abaf2a4cc390ceb782bb78d6ed6c48bebfcf79dc899605bff8a6b2146b6ad4146c8d42edecea0ef8bebfee42d3230d150deec83eb8aca0cd83b8693becfad033a68ebe6dad62803bdf5daf6be4934c527de16f69ef6d04f95c58cfda12393f7461dac08da1f78a57580baf9063e5ab9f8c13dd0ceb1d869169349c79ebe53cf1d1f3b9cde8d0b291867d45eb0de4276361baf7f39c400025a559dc097dc124d23e2a2e632a30bcf015665b9e2d87e6e8845ba036fcf59b55cd8363a4e53dbfb0c6087090f4e410ea889aa6fcab31b35d18a294daeb38388fc6fe89c074d1ce8abebca0c424c953240b72255e7d7e1f76cb10e11bd683828082aad30df295e50781a329ecd94b82ec01b3b71103abeddbe13c921cb6309d7fb0ded039903fb6a670aac34f088ea7465c04f90302409e8f379ec2095993cebd58521e4f4d77c468a0c1087b0e1193d7cefb20cceae81acb5ef950d61177316694cd1b3f57d25e39f41957c8ac5c13719b42a029335b19ab087f2e248c141caa6bab3a287310530466354891fc7b890b4467b2854f3ce8490c4b56a50797094f57aa9111446153162802361e99bb7973bc947f1e6f378cf5853b2cd0fc86bef49a74e7cbdf4e2cad34a6a5e3ba949ecc4ec7b37b6fbecd181547dafff0111022c1c4a1b42c91b6abd037778f84a9d96f89846628f8c168a298e4cf2d63912968df17e9784f8fd33ebfe908d1f39d3cada7d7056c20abcb0cef50cf53d7e7caf85203d460d2595636e2a2bb5c2585d27065fc7b93aa73e580ae710afff7e91641454514fc59564d9f03f304612e26e9dac9496a9402ad500ac4d135bdd150dba7916574cf55f42cc57b89461367e02eb4220da408aca0901d096df5e15fb11b0b184e570c93076f85384a6c1b0e9a0cdb6959ee0e4c812661f32e73013d9d490dc3aea29e7f1f708fd8cbb9030787d2e8ad071675a591b3d1f8986b268b9db4d6cc8b6f9157aeaceed045c8cec886de16ff4a044ab18beeb8c011b3910041260700ea419f61acaf9e0bcf14c3d0a3a396a006b0ae9954f41865c72b13d085ce7ec8668ee4e91c93a6ccc748fa5e20823ecf3ab517ff3678589a5f2005c78ff309310a7beaaadf5c921560e0c437e7d15393f8ff809186b66fd9777da6955d15986eeebdef6578fda43d4f362fc84a0e22b36ba4917a78cd19b0e50fdae4b1a76c849d565c2ae7b4d2aeedbd0f09533ddc5a4877787a43d00d020ea5fc44045fdf92f3473448624601c8ccbcfe7007f877101152594d3296a723fa53c5aedd57642e88a93c8511e9c623fbaa8212d1751808e47a8d879aebcf8828a2cb7b38ee67b6c8476d4703cba8ea4f6017829e0f50196db4a2ec7059b46dfe6954e2e53049c23a73785b059054ee09a2b00d8a4c6a6eb37090dc4af5bce962741c5ad9f2fa413117f510ed6b1d1a9ce5c4ce49f88a124784fd1b761119e1f99844811c141cb3b60695652ce3acff3f42da9a655c41d1e486eba877f771d9f060d1d5470a921734ad2c12483186a6500601506fcd9f1dd516b5b1ce1b96880d7c99c1f2b3ed399de3f4214eb78d03b9b70378215f4e4389097607f5f4a4237d4195f6d34c90df2ea949d1d179b3b0bd6bca821674c4dc0d87f1a72de3f573d3ccb4e887483ebd240dabb09ad29a9b285b82ec98b721ad981cabe9d61cad9859b97cd3ed78067d7db3d082b35f6658cf3c09aba9ed11745ad1f30dd821d515df31c0c99daa279f707948a95cf691ffd91a78efeec09aa3b148bff982678383620ae04e579710181152f0af4cd9cd88a3657ca32dc2a00258a6bd86c3be63b585c271628320c51582d9dcabc864e15eaac760cb5f331366b701b82153e4a4beb2d1431bc06d5d2c1284e79757160240edb3307479deaa98c7e247800660974ed164d6861eed9605abb900d24574e75ed107daba43318228efb4e32a9aa651ed23be7e926b2b9058bf73b45563870a050441787dc726df89dfae3bd08741522a2e64002897afe3b399fded6aa5d22044a90295fef6a9fca961b687247eb3827faa03403493043bbe04f446939ea9ca9b5568c2d011cad34ff4f52e1352c16175fecb800d0b897f04bb8f195554dae9a1d2dea1c7c115ba39f1cac67b40031a8c539ec9554753ef224dedced1e3498b7f2de51cb2c36fa0f4939ed98a9b1c62f62a6ee1b59294796849c5eec0516ca8b3169d441072d43932ca24c54c057cd1e0c8ffa945fca9f54ed92f5dbdb1a8d3ad6163decd682bdc109ca360318d14ff64b5090e09677420dcb0bdf335ec247a33349633207fa900de8aa8d576e45e56e0f61688f7ce5fe4392f841a0f0d47a59130fe59e3eeadfc75deaa1c2c4dd560fa65d517c0875a3e13370cc083020ee7a3302fb46ff536ccb8c94faebb853c5b2dc143c387b2e3e2998c55d8d5dc0cb63b36ad7c6293e147c4c87bfb3c8843cc47dcea5e951ca1aa01f83ec6008d05721fe0c84d9682d0658c8cad3647384a4dbd6e86c6280fffd3df469d7b604dda9f42e8d58a610c6801873ff9d7a4ed90e1e438aab80a2bc9ec1da863208de90274313233198aa2a309d43a3cd3c7e1268188e4d666e2bb9a73aaab12cd2242967baafb41ee9806974da6969929df25352b36b742b136647843ed638c52ad0b5a9ca2ca31ad3ccb077678836d43b7f34fda00f6a6f9b64044bf82b766549ddbc5bd00a856e1e82ae2c69b3ae7a66df4b2065862731919504cd90ff9c641734250164eae954a909f32f306f67e8dc7e3995cb90707b6d35d8c3c7871ca21f32f6d9a2c359cfd07b8340cd14e6f7f727c2df9dafab440e88d233906387dd15fc39248d189556726bcfb2a8ab0330f4e41e02fa083e1f1e5466583ff897918dc19598ef6c00385bcd10ca93495cdc2fa14d059494528091d654827057c868c764db72c374dfa7acad4fe19e113d677734f4b7772fdb241251421a8c563539128a1cbc85366869d28f876d36474718d0d255c23ce49c49735ebf5ba9a94646a0c29b0b4591bd4f574a5056dd78c3c16edc96d51c611abe73fd04570bf3e712e95239c02f09d3ab66b8b797789a67cb25919aca68500519cde911f30a0cb97a55715c75f67bc414082442d5c75b259f7ce8842b5cb58bc9eb204bf0ea3c3e9b379ec5dcd91503a28357d5e6ac62146410551854e9042be93cb679c6d3c56687f8db922be2ad853972f958a9918b154a91e34248cada7a015ef81fa0f619671b7115c298360d03851e71b131d4d4f38349d1875875039848a37a0b4a6358a6da39e06cb0b8ff7c18b9dfead0df08178c215b91aff0922ac90976b7f001120dad60578c26a583b4a49c3f579ae34739a9bca72ee8837da2dafad28cb551902f0d2dbe8c49e0ba4d325a49eec7df9936b09589d0a95ec03d4de203e9222153badca00ef3d9e83f92a3689e3da19aafc12380fbca425e7c6041d7106fe24229b749ef5f09457a1c7eee9a275dfc6c63af577cb8d41fd17aa6d77a5fa881bbf020506032924e580fd05f86aba7a38911107a0a7c8c65ec3374af1687a3ce1212d76e31ccb0e86f6e724a6beae2d38a823fcd6733fbf7b219df26de87b6e9a92dff3c8eb6e4a723a42f231b521740005e023399aabb9e28b68860cae73588b8f17712b640bb2a1bcec378b436cac86f4a50ae020cb00a5064337a918c038b4466d52d786a702ec895e8ad34c929609b0452f2817e5a763ee392c308f28787938ad8b76b42301e5493a5fe980bad100eae7c4eae6ab410ee434aef18becc5f2f98020e1570fca41e3e77d9eb31f577336ecb2201a4b67b09b363a504bab8ba07cfe8e3adada85f88c6e642c15e7d96398942982c4511463a0655e24d4972f795a2ba502a07b419a19eb9fe21daa6860a7fc19f3cf707beaf62ce445c9af2a3a77033f9cc344cbb6fbfeeeb67ce2f1c5889ee0d0fdc872948647830338dddece033fc954eb3b9f273762de74b215d8e44cecd7c2512d2416cbf7e1a435743018c3ef949c25f8784b33c590bc890ddd1eadd558777de95943e47a8002f2dfd9e8dc5d259799428a2a7e5adb663ea35951659a17700baa34af932a74795447a1f79f22fc408540690833268a134ba246c6c870e2288f2aaa511fcdc597893560068a588b62f1b2b7d105a6bf4bf038fab6737142359b710fd3648f7714093220699310c2b798dcb6bfebe67ffd45c459bf13169958adc863bcd2b91d1254e13df3658966046a89f01f07738b02c3c114290dc634fda0ab112e9dedcac020afcd7d9b55c719e30d0ffee421626e28a4c8d536893c4f596869b37dff1c60bc7b071461fc3dd5c1921f145b7531257917a4a508f9b795e12d38b6d1a5da836f3b3197e652f3daec7513a414d1f04b5eb0adc229ca8f3b65ec563b827db6f937c5eefe4c23b975438c6f502a09213eb12018810cd93398d759bdabc870c7c4e2ad3dec30586303df561d6ff2855b299bc847a7d8c25b97eb3f23f470ba333986a32ed5dd3a9c463442cb673e5658090336bb55ac9538ab2ef157bd153d50d80c29ec4024c548c8dd9d5e9832ee63c4a7a03bd1afc339da9d403fa5f918160f26be3e916d9e8d4e7caeadacf732a29ecc25e128db2a734db0ac98d554b66516ef89b30ea92da78b0d6aedf4151b8b7de0782203694e75e1654abdaa351f71ad19b44445d4c4c4162ade61f521e22c314896de9fa88a7f0227d5f5c07aba9905bda890ffd0adfb571123c751a27187f72ed79bd9940045c34a676009d0f916b9fb89eb24c66967537f31a2523a703333dc298a769c2cf3b73eb520f698ad0c591c8fee1cc1d62e1fd37681f40ea6e57adaba928ad9081bb431036de867d42a919ecce00b966c5f818f648a57b90177bc4663c2dbab36b119308e85b0e2be594ae8dc1f98b2d12cd2edb81cd518f1a38f7b667b52db3b365473124df2c2a768b70b4998dbf3ac03be1b064973cc842b62b16c8407024fc71c782700cc79bcc92cd32d2c6c80668c65ff677d9d7b1401554fe93f267fec6343fd1c3e51848d3095b000e1b6132c050ebe1c0aa991b41db7727273575b6d1d71de8e9b33af3ef48013858a44290f8fe98c18f5fd3405bc5dc7d2d29ec505ab9b032251643f6c32a8a6fc55372e5c1928d05966452a33673f5dc45e22ae02b8c0bce9e4205156d0f0aee33deb72da02b4495dc97c6bc9d38570c035f715796b0f4c0c2c5399e82a54b50b5279dccce2072a44a782b9571f88424c8e0ad625a8c56de5a00cd470faae8134620ffe65acf4a69fdeafb903fc0a6a015e2b72e66a042bab64e446dfb5863cb952acab3e3e15ab908140781dd1038052f0709d4e43effe3efaba2dffbdb206e04262419e95fb5e448e3e22d2c5cc628f82d901b812ba57572592daccec0d7f3c2963ecc8b541e05bb47040e751d735ebd191794c06a34ffdc103c1a8c44375b104e0f6e9bc99208c3a926651dcc0a5f4ad656f9c5d409524ee49b4991cace67ae07ccb6c90b806f0176780caea1221c9ffbe85a43d7f738e049b649be080f3a20933e77218e29f1ddf05037d8819868d83e676f2dc2a8a3f1d443605cf902e01bf06a511d07c32135dcec421e0592c51e4e779228f2c6f8b4d787bcf101b112e7054733d7928f61038da7d08a3d7d80cabff3cf21ceaaac695765dc55c189a591d2002a0053d7aad9f738b2b599040ce442bb4c6f36f191978e914a2af6fd0605e86dcfdd0d3538995b3bba5bb0416c9bbed99f2b8c589e4f470fc7c1caea9812835aa2e8b0073732d3d837e5b6873fa8e049f221c29532e4d7718a89f5c21cec6c43d7d0b21a998718d87ed0a76b0fab80630bd0635c02059b44f2f7eb0edd2602eccfb025ca813c26a5db6ef6b9526a160692fb08dd445419bf4b0609a12038013ea8bb2fb9b7d389550815253f267fa65a104e4f7703a518e44f7fe9b9e10d2acf606db68437f3d5149f3629662019f850b50add49f84789d3af6c9865581881343924b6086d5d077abe20f6edf70501f572cfe3611db3089314ef952ba16f81ed93ea6664773430140304bcdd9cf5132996db0524aa600395cb6800f9b934821f896ce1eb3c19b3240342af1bc5e6b34ac85c33db8f4966a24b6533d3979d8ba5245e65e656893ad73f98687af08ad9a1b1532b7abd858741d39059722c6a63a43dd38c8b9d56ec595e9ac1faf113e6413806d0a60a3529f8c45a01156f35cf9a4c6b965794f5e7c8715fbe03f70ab62e7deb659b4cda69d364ac36ea8be898d281e7090e889b5818345889686e494f960f12e02f95d80fa3d14c5c804f648f04e5d9e0484abccb7e020b8a4904c7641495346718d31c9f1eb669f4811437d6bf29b08b3c4b6ebf8672509ea5054400db78112beee8a7134138c620211e8a33791700e9d53f1e13307b9677fdf3efc6e10b66931a565b87a060fc079cf98d6f6436aeae365a875c45a3c0fad60807ac14387c33da901391602514f3c1f2db3de7226adba4df0cf1373c78d2b49e47814ac6f2f9024fbdef073d01120e1cd28af3b2153ac644b4be4a077c9466666f25b01374d52e132be836844597c800d981b62e453c193f6570e444849b6da12e0f6eb5c8c42496ebf5bf8a3c3a56267a6569072df2acde20b291c91b2376936c329b04547c3bf3600ce2a22a1a9644ca9d1776b13d79b6aea08e8488a76c2bcfd78ae55935f25dd601be75ed0a676f17a423d4bafee844f9b27a7dad1356eb2a3e69ba229ddf80552dfa8c8bf1cedd0672b986a7cae3b2720c1b666df546a0b4e453c76687fd7a57f252b06550690b2eaf274ec1facb0e3b7016d68a6237b6e1ee146f13e8967de45b0bb24c3642ee893bd548ee84a137979e4f811bf2fad704c0b0a705cbf957e7a00626c1a48414103525353d5770468fc1f21be9deaf032ffc21deb739d536485a79a218664d9ae87eaf1cf5501137c64feb7933615dbeb4145a025210cb5", 0x2000, &(0x7f0000005600)={&(0x7f0000004840)={0x50, 0xffffffffffffffda, 0x9, {0x7, 0x2b, 0x7, 0x50002204, 0x0, 0x1, 0x9, 0x5, 0x0, 0x0, 0x4, 0x2}}, &(0x7f00000048c0)={0x18, 0x0, 0x3, {0x7f}}, &(0x7f0000004900)={0x18, 0x0, 0x2, {0xc0}}, &(0x7f0000004940)={0x18, 0x0, 0xffffffffffffffff, {0x4}}, &(0x7f0000004980)={0x18, 0x0, 0x3, {0x7}}, &(0x7f00000049c0)={0x28, 0x0, 0x1b9, {{0x0, 0x8000, 0x0, r8}}}, &(0x7f0000004a00)={0x60, 0xffffffffffffffda, 0xfffffffffffffffa, {{0xfffffffffffffffe, 0x2, 0xf, 0xb5, 0x6, 0x3, 0x0, 0x3}}}, &(0x7f0000004a80)={0x18, 0x0, 0x3, {0x2}}, &(0x7f0000004ac0)={0x19, 0x0, 0x99, {'&/$-,!.{\x00'}}, &(0x7f0000004b00)={0x20, 0x0, 0x3}, &(0x7f0000004b80)={0x78, 0x0, 0x2, {0x5f, 0x10000, 0x0, {0x2, 0xa6, 0x8, 0x7fff, 0x6aeb, 0x2, 0x1, 0x26072947, 0x6, 0xc000, 0x61, r9, 0xee01, 0x0, 0x5}}}, &(0x7f0000004cc0)={0x90, 0x0, 0x6, {0x3, 0x0, 0x3, 0x8, 0x6, 0x2, {0x6, 0x75cd, 0x2, 0x401, 0x35f3, 0x3, 0x1, 0x5, 0x92d, 0xc000, 0xffffd77c, 0x0, r10, 0x4, 0x1}}}, &(0x7f0000004d80)={0xd0, 0x0, 0x5, [{0x0, 0xfffffffffffffffb, 0x1, 0x9c7c, '\x00'}, {0x4, 0x8, 0x5, 0x3, '\xaa\xaa\xaa\xaa\xaa'}, {0x3, 0x8, 0x1, 0x800, '\x00'}, {0x1, 0x5, 0x1, 0x8000, '@'}, {0x5, 0x4, 0x6, 0xf, '\xbb\xbb\xbb\xbb\xbb\xbb'}, {0x3, 0xfffffffffffffff1, 0x4, 0x4, ')\\^*'}]}, &(0x7f0000004f80)={0x150, 0x0, 0x8000, [{{0x6, 0x1, 0x1ff, 0xb2, 0x2, 0xffffe12a, {0x5, 0x3, 0xffff, 0xc, 0xf, 0x2, 0x12, 0x8, 0x1812d898, 0xfa0e288c3eaa862e, 0x2a1, 0x0, r11, 0x4, 0xd}}, {0x1, 0x400, 0x5, 0xfa, '\xaa\xaa\xaa\xaa\xaa'}}, {{0x4, 0x0, 0x200, 0xfd1, 0x6, 0x929, {0x0, 0x2, 0x8000000000000000, 0x64ab, 0x9af2, 0x6, 0x2c, 0x8, 0x4, 0xc000, 0x7e20, r12, r13, 0x5, 0x9}}, {0x5, 0xe, 0x1, 0x5, '#'}}]}, &(0x7f0000005240)={0xa0, 0x0, 0x80000000, {{0x1, 0x3, 0x1, 0x7, 0xec000, 0x3, {0x1, 0x1, 0x1, 0x5, 0x3, 0x1, 0x1, 0xfa85, 0x81d, 0xa000, 0xa86, r14, r15, 0x2, 0x80000000}}, {0x0, 0x10}}}, &(0x7f0000005300)={0x20, 0x0, 0x200, {0x7fff, 0x0, 0x1000, 0x3}}, &(0x7f00000054c0)={0x130, 0xffffffffffffffda, 0x2000000000, {0xffffffffffffd7aa, 0xffff, 0x0, '\x00', {0x800, 0x92d, 0x81, 0x80000000, 0x0, 0x0, 0xc000, '\x00', 0x9, 0x0, 0x4, 0x1, {0x2, 0xe803}, {0xc51, 0x800}, {0x8, 0x4}, {0x2, 0x3}, 0x5, 0x359, 0x7, 0x2}}}}) 3.898869755s ago: executing program 8 (id=2195): socket$inet(0x2, 0x3, 0x2) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 32) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x8001, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) open_tree(0xffffffffffffffff, 0x0, 0x89901) syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1a}, &(0x7f0000000340), &(0x7f0000000600)) (async) socket$netlink(0x10, 0x3, 0x0) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000280)={0x1, 0x0, 0x27f}) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = socket(0x2, 0x2, 0x1) (rerun: 64) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) socket$inet6(0xa, 0x3, 0x3c) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) (rerun: 32) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, 0x0, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (rerun: 64) read$msr(r5, &(0x7f000001b000)=""/102400, 0x19000) 3.748579519s ago: executing program 6 (id=2196): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) preadv(r0, 0x0, 0x0, 0x9d, 0xd3) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000100)={0x2098, 0x5, 0x1000, 0xfffffffd}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20042800}, 0x24040800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setresgid(0xffffffffffffffff, 0xffffffffffffffff, 0xee00) ptrace(0x10, 0x1) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0x400, 0x10000}}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) 3.702395049s ago: executing program 5 (id=2197): syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x141, 0x95, 0xbd, 0xf4, 0x20, 0x1532, 0x94b5, 0x6178, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xf5, 0x7, 0x1, 0xff, 0x47, 0xd0, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}]}}]}}]}}, 0x0) 3.403184589s ago: executing program 6 (id=2198): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x3, 0x3c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 2.698692405s ago: executing program 8 (id=2199): bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e020000000000000000"], 0x0, 0x37}, 0x28) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0100000004000000040000000700000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="020000"], 0x50) 2.449116493s ago: executing program 6 (id=2200): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000040)={0x20, 0xa, 0x11, "0dae2817f43a1a09846ccd501c2c4a8c01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x200904, 0x4) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1228000, 0x1000, 0x2, 0x1}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002080)='cpuacct.stat\x00', 0x275a, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast1, 0x15, 0x3, 'lblc\x00', 0x1, 0x4, 0x72}, 0x2c) r7 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x200) dup2(r8, r5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r5, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x1ff, 0x1, 0x0, 0x2000, &(0x7f00006aa000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000014d564b0000000001"]) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1.6545256s ago: executing program 7 (id=2201): r0 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1003, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x3938700}, 0x1, 0x8}) io_uring_enter(r0, 0x6efc, 0x3900, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x35, {0x5, 0x1}, 0x1}, 0x1) (fail_nth: 1) 1.651115585s ago: executing program 5 (id=2202): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8880) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000007c0)={0x0, 0x2, 0x7}, &(0x7f0000000800)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000840)={r2, 0x1e99}, &(0x7f0000000880)=0x8) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0x6, 0x34, {0x34, 0xd, "726eae9f767b96ec035ae7af9218445a01e3f584c5e2f7c88b086a65d920d860290562b944ee52e444fd4bbd12206d7d5274"}}, &(0x7f0000000100)={0x0, 0x3, 0x3b, @string={0x3b, 0x3, "c2519932aa8906bc3779ce1552dacc3a5a937d47faa4c4fc38e2fe3f3255cb04c285af5440b8175919a1ecb3fcd27bef0e2dbd0adb5cce9d78"}}, &(0x7f0000000180)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x9, 0xa, 0x8}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x18, 0x0, 0x8, "8f33e127", "c5b3e65c"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x10, 0x40, 0x2, 0x40, 0xff01, 0xf17}}}, &(0x7f0000000700)={0x84, &(0x7f0000000280)={0x40, 0x9, 0x4f, "9d4b4d18f58e68b401b83d751d22ba0abef0d98dad1b8139be1a485bdf57671972e8e2aa0eb1c7c744d8c7214fc55573961359e923b05ebf1127e025ef5f19a6d1bf04a1aa580fd747f0382fa82469"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xfb}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x140, 0x80, [0xfff]}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000480)={0x40, 0x9, 0x1}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "e9cb"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000540)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, &(0x7f0000000580)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "37ab"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x800}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000680)={0x40, 0x1e, 0x1}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0xc}}) r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r3, 0xd01c4813, &(0x7f00000000c0)={0x2, 0x100, 0x0, 0x2, 0xfffffffd, 0x2}) 1.117483216s ago: executing program 8 (id=2203): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0x81, 0xfffffe0000000001, 0x2, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) r2 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000540)={0x1, 0x9, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0, 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) mkdir(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18) renameat2(r4, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) syz_emit_ethernet(0x10b, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000050011fcfc505230d81a8ddebea88d38fe418bd61b7b40efc8079473e76b80f89c2fb79803a7091c617f8f0476cceee025aaadaa29fb8bcfbc0047e0876d5388f3e32aca152635384fa9f371f5c49784e0c00ed4684fcf096bef712253fa3e8273911dfcef6d389ad4e7af204c96cc1541305078b7cb86f29e7ab25d0182da772f17ad4178f2a23c115f1e6450865a9eb53604c795d1febf02bd35bb1369296594bd997e7ab532e1fed2ee31d50d0276627d24d4b7270e95ee3b787247c892dfab7b9b66cb881fc1e8ceb14806ae93978f"], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000500010000000900020073797a31000000000c00078008001240000400000c000300686173683a69700015000300686173683a69702c706f72742c6e65740000000005000400010000008243df01a8f9ca9a677ce5b8f0de541df75b11c8400d2a28f9ea08f088fdfdb07c0bcf64d028ab65619a6b19f46a4d79"], 0x60}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000680)={&(0x7f0000000300)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) sendmsg$nl_route(r7, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)=@ipmr_delroute={0x10c, 0x19, 0x14, 0x70bd28, 0x25dfdbff, {0x80, 0x10, 0x20, 0x4, 0xfe, 0x1, 0x0, 0x6, 0x500}, [@RTA_METRICS={0x6b, 0x8, 0x0, 0x1, "132707f74dad4854777beab75da988e11872e73de9ca1194f070be5497dc7c8fb854206bf2952217b20df9094d02e12335ad447bfeb4089ec6ce5a887a0340cce27c5328b1d9acb1f345533c6937ae27917c8153aac45e543313f18c2b2e53014678be696e2dbd"}, @RTA_METRICS={0x72, 0x8, 0x0, 0x1, "d219a7ef286e6b10db529d5d64d486f21534ad76d639426766051cd7566c6795a3973a55a7d577c48ba8aef395e3165d3e534c6045e6aae5bcab8cdbb2914339e03e80948fb3b10a5861d8d48f80f398bd8947aa49f050891576fd9af2bba2dbc0927f631ba110f5671745b3e1a9"}, @RTA_DST={0x8, 0x1, @rand_addr=0x64010101}, @RTA_IP_PROTO={0x5, 0x1b, 0x11}]}, 0x10c}, 0x1, 0x0, 0x0, 0x24810}, 0x44) 1.018427702s ago: executing program 7 (id=2204): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x20, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4810}, 0x0) (fail_nth: 10) 964.181574ms ago: executing program 7 (id=2205): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000e9ffff"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000002000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0xa}, 0x94) 892.642966ms ago: executing program 1 (id=2206): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="0000006aac", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmsg$can_j1939(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000480)=""/154, 0x9a}], 0x2}, 0x81) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newchain={0x90, 0x64, 0x2, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x10}, {0xa, 0xcf0cb0de83c21c32}, {0xf, 0x6}}, [@f_tcindex={{0xc}, {0x14, 0x2, [@TCA_TCINDEX_MASK={0x6, 0x2, 0x5}, @TCA_TCINDEX_FALL_THROUGH={0x8}]}}, @f_rsvp6={{0xa}, {0x40, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_DST={0x14, 0x2, @loopback}, @TCA_RSVP_SRC={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}]}}]}, 0x90}}, 0x4080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e23, 0x5, @empty, 0x3}, 0x1c) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000900)) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) 298.092256ms ago: executing program 7 (id=2207): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r2, 0x6, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x5}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000180), 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) fallocate(r3, 0x23, 0x1ff, 0x7f) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xfffffffffffffe9e}, {0x0}], 0x2f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r5 = socket(0x1e, 0x1, 0x0) fanotify_init(0x8, 0x40000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES16=r5, @ANYRESOCT=r0], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000600), &(0x7f0000001380)=@udp=r5}, 0x20) shmat(r4, &(0x7f0000ff7000/0x3000)=nil, 0x400c) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r8, r7, &(0x7f0000002080)=0x64, 0x21c) 0s ago: executing program 1 (id=2208): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000580)=0xb0000) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x422642, 0x0) read(r2, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00428c84cf409ce6cba3c6e5ea032abd7000", @ANYRES32=0x0, @ANYBLOB="26005b00b38512d963ba543f954eb018797dbff6a8c6b6ac32434fe006ac23fcee942dba5eab0000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) connect$inet6(r7, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f00000005c0)=ANY=[], 0xc0) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) ioctl$SG_BLKSECTGET(r1, 0x1267, &(0x7f0000000000)) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="080f00", @ANYRES16=r10, @ANYBLOB="010000000000000000000400000014000500fc00000000000000000000000000000106000b000500000014000600ff020000000000000000000000000001"], 0x44}}, 0x0) kernel console output (not intermixed with test programs): evsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.889783][ T1094] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.951829][T12804] usb usb8: usbfs: process 12804 (syz.5.1864) did not claim interface 0 before use [ 680.152890][ T5915] usb 2-1: new low-speed USB device number 121 using dummy_hcd [ 680.304696][ T5915] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 680.314847][ T5915] usb 2-1: config 0 has no interface number 0 [ 680.320970][ T5915] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 680.332436][ T5915] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 680.347363][ T5915] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 680.361938][ T5915] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 680.377105][ T5915] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 680.389146][ T5915] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 680.409085][ T5915] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 680.419484][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.441078][ T5915] usb 2-1: config 0 descriptor?? [ 680.449237][T12808] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 680.457141][T12808] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 680.475763][ T5915] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 680.903934][T11596] usb 7-1: new full-speed USB device number 41 using dummy_hcd [ 681.363410][T11596] usb 7-1: device descriptor read/64, error -71 [ 681.408750][T12819] FAULT_INJECTION: forcing a failure. [ 681.408750][T12819] name failslab, interval 1, probability 0, space 0, times 0 [ 681.423947][T12819] CPU: 0 UID: 0 PID: 12819 Comm: syz.8.1871 Not tainted syzkaller #0 PREEMPT(full) [ 681.423973][T12819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 681.423984][T12819] Call Trace: [ 681.423990][T12819] [ 681.423998][T12819] dump_stack_lvl+0x16c/0x1f0 [ 681.424027][T12819] should_fail_ex+0x512/0x640 [ 681.424049][T12819] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 681.424079][T12819] should_failslab+0xc2/0x120 [ 681.424099][T12819] __kmalloc_cache_noprof+0x6a/0x3e0 [ 681.424125][T12819] ? nfnl_err_add+0x4e/0x350 [ 681.424156][T12819] nfnl_err_add+0x4e/0x350 [ 681.424183][T12819] nfnetlink_rcv_batch+0xc95/0x2330 [ 681.424215][T12819] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 681.424251][T12819] ? avc_has_perm_noaudit+0x149/0x3b0 [ 681.424297][T12819] ? __nla_parse+0x40/0x60 [ 681.424326][T12819] nfnetlink_rcv+0x3c1/0x430 [ 681.424343][T12819] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 681.424366][T12819] netlink_unicast+0x5a7/0x870 [ 681.424393][T12819] ? __pfx_netlink_unicast+0x10/0x10 [ 681.424417][T12819] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 681.424447][T12819] netlink_sendmsg+0x8d1/0xdd0 [ 681.424473][T12819] ? __pfx_netlink_sendmsg+0x10/0x10 [ 681.424506][T12819] ____sys_sendmsg+0xa95/0xc70 [ 681.424534][T12819] ? copy_msghdr_from_user+0x10a/0x160 [ 681.424555][T12819] ? __pfx_____sys_sendmsg+0x10/0x10 [ 681.424592][T12819] ___sys_sendmsg+0x134/0x1d0 [ 681.424616][T12819] ? __pfx____sys_sendmsg+0x10/0x10 [ 681.424670][T12819] __sys_sendmsg+0x16d/0x220 [ 681.424691][T12819] ? __pfx___sys_sendmsg+0x10/0x10 [ 681.424720][T12819] ? xfd_validate_state+0x61/0x180 [ 681.424755][T12819] do_syscall_64+0xcd/0x4e0 [ 681.424781][T12819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.424799][T12819] RIP: 0033:0x7fe55878eba9 [ 681.424814][T12819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 681.424836][T12819] RSP: 002b:00007fe5569f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 681.424853][T12819] RAX: ffffffffffffffda RBX: 00007fe5589d5fa0 RCX: 00007fe55878eba9 [ 681.424865][T12819] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 681.424876][T12819] RBP: 00007fe5569f6090 R08: 0000000000000000 R09: 0000000000000000 [ 681.424886][T12819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 681.424895][T12819] R13: 00007fe5589d6038 R14: 00007fe5589d5fa0 R15: 00007ffdcb387fa8 [ 681.424923][T12819] [ 681.963087][T11596] usb 7-1: new full-speed USB device number 42 using dummy_hcd [ 682.162910][T11596] usb 7-1: device descriptor read/64, error -71 [ 682.445972][T11596] usb usb7-port1: attempt power cycle [ 682.772726][ T30] audit: type=1400 audit(1757771955.210:803): avc: denied { getopt } for pid=12811 comm="syz.7.1869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 682.997766][ T5908] usb 2-1: USB disconnect, device number 121 [ 683.018409][ T5908] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 683.043000][T11596] usb 7-1: new full-speed USB device number 43 using dummy_hcd [ 683.143986][T12833] ptrace attach of "./syz-executor exec"[11940] was attempted by "./syz-executor exec"[12833] [ 683.205144][T11596] usb 7-1: device descriptor read/8, error -71 [ 683.422872][ T5908] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 683.457312][T11596] usb 7-1: new full-speed USB device number 44 using dummy_hcd [ 683.485536][T11596] usb 7-1: device descriptor read/8, error -71 [ 683.594894][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.613175][T11596] usb usb7-port1: unable to enumerate USB device [ 683.615461][ T5908] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 683.666289][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.704510][ T5908] usb 2-1: config 0 descriptor?? [ 684.043074][T11596] usb 7-1: new low-speed USB device number 45 using dummy_hcd [ 684.173608][ T5908] keytouch 0003:0926:3333.004F: fixing up Keytouch IEC report descriptor [ 684.297572][ T5908] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.004F/input/input124 [ 684.426156][T11596] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 684.531253][T11596] usb 7-1: config 0 has no interface number 0 [ 684.568407][T11596] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 684.600157][ T5908] keytouch 0003:0926:3333.004F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 684.612983][T11596] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 684.660830][T11596] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 684.688978][T11596] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 684.721284][T11596] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 684.746464][T11596] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 684.782700][T11596] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 684.794737][T12859] FAULT_INJECTION: forcing a failure. [ 684.794737][T12859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 684.810032][T11596] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.818812][T12859] CPU: 0 UID: 0 PID: 12859 Comm: syz.5.1883 Not tainted syzkaller #0 PREEMPT(full) [ 684.818835][T12859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 684.818846][T12859] Call Trace: [ 684.818851][T12859] [ 684.818858][T12859] dump_stack_lvl+0x16c/0x1f0 [ 684.818890][T12859] should_fail_ex+0x512/0x640 [ 684.818915][T12859] _copy_from_user+0x2e/0xd0 [ 684.818937][T12859] move_addr_to_kernel+0x65/0x170 [ 684.818962][T12859] __copy_msghdr+0x386/0x470 [ 684.818980][T12859] copy_msghdr_from_user+0xc1/0x160 [ 684.818999][T12859] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 684.819029][T12859] ___sys_sendmsg+0xfe/0x1d0 [ 684.819048][T12859] ? __pfx____sys_sendmsg+0x10/0x10 [ 684.819094][T12859] __sys_sendmsg+0x16d/0x220 [ 684.819112][T12859] ? __pfx___sys_sendmsg+0x10/0x10 [ 684.819145][T12859] do_syscall_64+0xcd/0x4e0 [ 684.819166][T12859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.819182][T12859] RIP: 0033:0x7f04fad8eba9 [ 684.819196][T12859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 684.819210][T12859] RSP: 002b:00007f04fbcfe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 684.819226][T12859] RAX: ffffffffffffffda RBX: 00007f04fafd5fa0 RCX: 00007f04fad8eba9 [ 684.819237][T12859] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000003 [ 684.819247][T12859] RBP: 00007f04fbcfe090 R08: 0000000000000000 R09: 0000000000000000 [ 684.819256][T12859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 684.819265][T12859] R13: 00007f04fafd6038 R14: 00007f04fafd5fa0 R15: 00007ffdcfc0c718 [ 684.819286][T12859] [ 684.994204][T11596] usb 7-1: config 0 descriptor?? [ 685.007008][ T5916] usb 2-1: USB disconnect, device number 122 [ 685.016822][T12845] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 685.024241][T12845] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 685.045579][T11596] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 685.398219][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.781142][T12866] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1885'. [ 685.792598][ T30] audit: type=1400 audit(1757771958.540:804): avc: denied { getopt } for pid=12865 comm="syz.1.1885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 686.786847][ T5908] usb 7-1: USB disconnect, device number 45 [ 686.796167][ T5908] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 687.034577][T12881] FAULT_INJECTION: forcing a failure. [ 687.034577][T12881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 687.048041][T12881] CPU: 0 UID: 0 PID: 12881 Comm: syz.5.1891 Not tainted syzkaller #0 PREEMPT(full) [ 687.048067][T12881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 687.048077][T12881] Call Trace: [ 687.048084][T12881] [ 687.048091][T12881] dump_stack_lvl+0x16c/0x1f0 [ 687.048117][T12881] should_fail_ex+0x512/0x640 [ 687.048144][T12881] _copy_from_user+0x2e/0xd0 [ 687.048169][T12881] kstrtouint_from_user+0xd6/0x1d0 [ 687.048188][T12881] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 687.048206][T12881] ? __lock_acquire+0xb97/0x1ce0 [ 687.048244][T12881] proc_fail_nth_write+0x83/0x220 [ 687.048264][T12881] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 687.048290][T12881] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 687.048308][T12881] vfs_write+0x2a0/0x11d0 [ 687.048330][T12881] ? __pfx___mutex_lock+0x10/0x10 [ 687.048353][T12881] ? __pfx_vfs_write+0x10/0x10 [ 687.048378][T12881] ? __fget_files+0x20e/0x3c0 [ 687.048405][T12881] ksys_write+0x12a/0x250 [ 687.048422][T12881] ? __pfx_ksys_write+0x10/0x10 [ 687.048447][T12881] do_syscall_64+0xcd/0x4e0 [ 687.048472][T12881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.048490][T12881] RIP: 0033:0x7f04fad8d65f [ 687.048505][T12881] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 687.048521][T12881] RSP: 002b:00007f04fbcfe030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 687.048538][T12881] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f04fad8d65f [ 687.048549][T12881] RDX: 0000000000000001 RSI: 00007f04fbcfe0a0 RDI: 0000000000000004 [ 687.048559][T12881] RBP: 00007f04fbcfe090 R08: 0000000000000000 R09: 0000000000000000 [ 687.048569][T12881] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 687.048580][T12881] R13: 00007f04fafd6038 R14: 00007f04fafd5fa0 R15: 00007ffdcfc0c718 [ 687.048604][T12881] [ 687.456647][T12885] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1892'. [ 687.829071][T12885] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1892'. [ 688.033414][T12885] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1892'. [ 688.202879][ T5916] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 688.352961][ T5916] usb 7-1: Using ep0 maxpacket: 32 [ 688.359930][ T5916] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 688.368951][ T5916] usb 7-1: config 0 has no interface number 0 [ 688.377942][ T5916] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 688.391644][ T5916] usb 7-1: config 0 interface 85 has no altsetting 0 [ 688.401417][ T5916] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 688.410954][ T5916] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.419238][ T5916] usb 7-1: Product: syz [ 688.423791][ T5916] usb 7-1: Manufacturer: syz [ 688.428445][ T5916] usb 7-1: SerialNumber: syz [ 688.459585][ T5916] usb 7-1: config 0 descriptor?? [ 688.459826][ T5972] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 688.645759][ T5972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.657282][ T5972] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 688.668742][ T5972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.689154][ T5972] usb 2-1: config 0 descriptor?? [ 689.002221][ T30] audit: type=1400 audit(1757771961.740:805): avc: denied { read write } for pid=12898 comm="syz.5.1897" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 689.064025][ T30] audit: type=1400 audit(1757771961.740:806): avc: denied { open } for pid=12898 comm="syz.5.1897" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 689.126528][ T5972] keytouch 0003:0926:3333.0050: fixing up Keytouch IEC report descriptor [ 689.150578][ T5972] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0050/input/input126 [ 689.221169][ T5916] appletouch 7-1:0.85: Geyser mode initialized. [ 689.240400][ T5916] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input125 [ 689.251456][ T5972] keytouch 0003:0926:3333.0050: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 689.257556][ C1] appletouch 7-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 689.443478][T12902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.483573][T12902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.516572][ T5916] usb 7-1: USB disconnect, device number 46 [ 689.530755][ T5916] appletouch 7-1:0.85: input: appletouch disconnected [ 689.580196][T11596] usb 2-1: USB disconnect, device number 123 [ 690.132930][ T5915] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 690.293101][ T5915] usb 6-1: Using ep0 maxpacket: 32 [ 690.304999][ T5915] usb 6-1: config 0 has an invalid interface number: 245 but max is 0 [ 690.313530][ T5915] usb 6-1: config 0 has no interface number 0 [ 690.389510][ T5915] usb 6-1: config 0 interface 245 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 690.411887][ T5915] usb 6-1: config 0 interface 245 has no altsetting 0 [ 690.421578][ T5915] usb 6-1: New USB device found, idVendor=1532, idProduct=94b5, bcdDevice=61.78 [ 690.432875][ T5916] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 690.448071][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.457292][ T5915] usb 6-1: Product: syz [ 690.466431][ T5915] usb 6-1: Manufacturer: syz [ 690.474927][ T5915] usb 6-1: SerialNumber: syz [ 690.484877][ T5915] usb 6-1: config 0 descriptor?? [ 690.598215][ T5916] usb 7-1: unable to get BOS descriptor or descriptor too short [ 690.613525][ T5916] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 690.626214][ T5916] usb 7-1: can't read configurations, error -71 [ 691.021553][T12926] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1904'. [ 691.621022][T12926] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1904'. [ 691.770885][T12937] FAULT_INJECTION: forcing a failure. [ 691.770885][T12937] name failslab, interval 1, probability 0, space 0, times 0 [ 691.831506][T12937] CPU: 0 UID: 0 PID: 12937 Comm: syz.7.1906 Not tainted syzkaller #0 PREEMPT(full) [ 691.831531][T12937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 691.831541][T12937] Call Trace: [ 691.831547][T12937] [ 691.831553][T12937] dump_stack_lvl+0x16c/0x1f0 [ 691.831580][T12937] should_fail_ex+0x512/0x640 [ 691.831604][T12937] should_failslab+0xc2/0x120 [ 691.831625][T12937] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 691.831643][T12937] ? skb_clone+0x190/0x3f0 [ 691.831668][T12937] skb_clone+0x190/0x3f0 [ 691.831690][T12937] netlink_deliver_tap+0xabd/0xd30 [ 691.831715][T12937] netlink_unicast+0x71f/0x870 [ 691.831740][T12937] ? __pfx_netlink_unicast+0x10/0x10 [ 691.831762][T12937] ? genl_rcv_msg+0x4bb/0x800 [ 691.831791][T12937] netlink_ack+0x696/0xb80 [ 691.831819][T12937] netlink_rcv_skb+0x332/0x420 [ 691.831840][T12937] ? __pfx_genl_rcv_msg+0x10/0x10 [ 691.831865][T12937] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 691.831896][T12937] ? netlink_deliver_tap+0x1ae/0xd30 [ 691.831921][T12937] genl_rcv+0x28/0x40 [ 691.831941][T12937] netlink_unicast+0x5a7/0x870 [ 691.831972][T12937] ? __pfx_netlink_unicast+0x10/0x10 [ 691.831994][T12937] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 691.832022][T12937] netlink_sendmsg+0x8d1/0xdd0 [ 691.832047][T12937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 691.832078][T12937] ____sys_sendmsg+0xa95/0xc70 [ 691.832103][T12937] ? copy_msghdr_from_user+0x10a/0x160 [ 691.832123][T12937] ? __pfx_____sys_sendmsg+0x10/0x10 [ 691.832158][T12937] ___sys_sendmsg+0x134/0x1d0 [ 691.832179][T12937] ? __pfx____sys_sendmsg+0x10/0x10 [ 691.832230][T12937] __sys_sendmsg+0x16d/0x220 [ 691.832250][T12937] ? __pfx___sys_sendmsg+0x10/0x10 [ 691.832286][T12937] do_syscall_64+0xcd/0x4e0 [ 691.832309][T12937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.832326][T12937] RIP: 0033:0x7f5c8478eba9 [ 691.832341][T12937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 691.832356][T12937] RSP: 002b:00007f5c829f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 691.832373][T12937] RAX: ffffffffffffffda RBX: 00007f5c849d5fa0 RCX: 00007f5c8478eba9 [ 691.832383][T12937] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 691.832392][T12937] RBP: 00007f5c829f6090 R08: 0000000000000000 R09: 0000000000000000 [ 691.832403][T12937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 691.832411][T12937] R13: 00007f5c849d6038 R14: 00007f5c849d5fa0 R15: 00007ffdccdcfff8 [ 691.832436][T12937] [ 692.992880][ T5974] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 693.155361][ T5974] usb 7-1: config 0 has no interfaces? [ 693.163077][ T5974] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 693.172230][ T5974] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.180316][ T5974] usb 7-1: Product: syz [ 693.185528][ T5974] usb 7-1: Manufacturer: syz [ 693.190162][ T5974] usb 7-1: SerialNumber: syz [ 693.201419][ T5974] usb 7-1: config 0 descriptor?? [ 693.243095][ T5972] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 693.429405][ T5972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.441142][ T5972] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 693.452667][ T5972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.469327][ T5972] usb 2-1: config 0 descriptor?? [ 693.502119][ T5974] usb 7-1: USB disconnect, device number 49 [ 693.640448][ T5852] usb 6-1: USB disconnect, device number 66 [ 693.818684][T12962] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 693.837713][T12962] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1915'. [ 693.847041][ T5974] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 693.884718][ T5972] keytouch 0003:0926:3333.0051: fixing up Keytouch IEC report descriptor [ 693.897152][ T5972] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0051/input/input127 [ 693.992597][ T5972] keytouch 0003:0926:3333.0051: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 694.027461][ T5974] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 694.055779][ T5974] usb 7-1: config 0 has no interfaces? [ 694.061845][ T5974] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 694.071603][ T5974] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.090576][ T5974] usb 7-1: config 0 descriptor?? [ 694.312396][ T5916] usb 2-1: USB disconnect, device number 124 [ 695.325134][T12979] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1918'. [ 695.601982][ T30] audit: type=1400 audit(1757771968.343:807): avc: denied { ioctl } for pid=12981 comm="syz.5.1919" path="/dev/sg0" dev="devtmpfs" ino=776 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 695.911262][ T5972] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 696.044365][ T5972] usb 6-1: device descriptor read/64, error -71 [ 696.192948][ T5930] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 696.305318][ T5972] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 696.345187][ T5930] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 696.354275][ T5930] usb 2-1: config 1 has no interface number 0 [ 696.360415][ T5930] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 696.372616][ T5930] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 696.381943][ T5930] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 696.395285][ T5930] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 696.404781][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.413043][ T5930] usb 2-1: Product: syz [ 696.417227][ T5930] usb 2-1: Manufacturer: syz [ 696.421806][ T5930] usb 2-1: SerialNumber: syz [ 696.462905][ T5972] usb 6-1: device descriptor read/64, error -71 [ 696.563675][ T5974] usb 7-1: USB disconnect, device number 50 [ 696.574276][ T5972] usb usb6-port1: attempt power cycle [ 696.922999][ T5974] usb 7-1: new low-speed USB device number 51 using dummy_hcd [ 696.943038][ T5972] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 696.966145][ T5972] usb 6-1: device descriptor read/8, error -71 [ 697.086308][ T5974] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 697.095136][ T5974] usb 7-1: config 0 has no interface number 0 [ 697.101287][ T5974] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 697.112208][ T5974] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 697.122889][ T5974] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 697.134527][ T5974] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 697.145652][ T5974] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 697.156761][ T5974] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 697.170099][ T5974] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 697.179301][ T5974] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.192041][ T5974] usb 7-1: config 0 descriptor?? [ 697.203388][T12999] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 697.210650][T12999] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 697.222927][ T5972] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 697.230866][ T5974] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 697.246023][ T5930] cdc_ncm 2-1:1.1: bind() failure [ 697.265653][ T5972] usb 6-1: device descriptor read/8, error -71 [ 697.374561][ T5972] usb usb6-port1: unable to enumerate USB device [ 697.448896][T12992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.461034][T12992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.473966][ T5916] usb 2-1: USB disconnect, device number 125 [ 698.666010][T13008] ptrace attach of "./syz-executor exec"[8735] was attempted by "./syz-executor exec"[13008] [ 698.724032][ T5974] usb 2-1: new low-speed USB device number 126 using dummy_hcd [ 698.885336][ T5974] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 698.901051][ T5974] usb 2-1: config 0 has no interface number 0 [ 698.909686][ T5974] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 698.923748][ T5974] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 698.939513][ T5974] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 698.957657][ T5974] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 698.979356][ T5974] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 699.002650][ T5974] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 699.026275][ T5974] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 699.172015][ T5974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.233395][ T5974] usb 2-1: config 0 descriptor?? [ 699.255617][T13006] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 699.467769][T13006] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 699.731431][ T5916] usb 7-1: USB disconnect, device number 51 [ 699.773403][ T5974] ldusb 2-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 699.874688][ T5916] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 701.217228][ T5916] usb 7-1: new full-speed USB device number 52 using dummy_hcd [ 701.348948][ T30] audit: type=1400 audit(1757771974.093:808): avc: denied { shutdown } for pid=13034 comm="syz.5.1935" laddr=fe80::e lport=45204 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 701.386662][ T5916] usb 7-1: device descriptor read/64, error -71 [ 701.633093][ T5916] usb 7-1: new full-speed USB device number 53 using dummy_hcd [ 701.764739][ T5916] usb 7-1: device descriptor read/64, error -71 [ 702.067732][ T5916] usb usb7-port1: attempt power cycle [ 702.204644][ T5908] usb 2-1: USB disconnect, device number 126 [ 702.241841][ T5908] ldusb 2-1:0.55: LD USB Device #1 now disconnected [ 702.554937][ T5916] usb 7-1: new full-speed USB device number 54 using dummy_hcd [ 702.583747][ T5916] usb 7-1: device descriptor read/8, error -71 [ 702.796282][ T5908] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 702.816090][ T5974] usb 6-1: new low-speed USB device number 71 using dummy_hcd [ 702.833216][ T5916] usb 7-1: new full-speed USB device number 55 using dummy_hcd [ 702.866258][ T5916] usb 7-1: device descriptor read/8, error -71 [ 702.952941][ T5908] usb 2-1: Using ep0 maxpacket: 16 [ 702.959855][ T5908] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 702.971716][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 702.983061][ T5916] usb usb7-port1: unable to enumerate USB device [ 702.985754][ T5974] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 702.992620][ T5908] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 703.001658][ T5974] usb 6-1: config 0 has no interface number 0 [ 703.007134][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.016491][ T5974] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 703.021137][ T5908] usb 2-1: Product: syz [ 703.037373][ T5974] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 703.037403][ T5974] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 703.048973][ T5908] usb 2-1: Manufacturer: syz [ 703.065103][ T5908] usb 2-1: SerialNumber: syz [ 703.073942][ T5974] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 703.074880][ T5908] usb 2-1: config 0 descriptor?? [ 703.085580][ T5974] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 703.100039][ T5908] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 703.101296][ T5974] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 703.114284][ T5908] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 703.124090][ T5974] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 703.140294][ T5974] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.150622][ T5974] usb 6-1: config 0 descriptor?? [ 703.156555][T13053] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 703.164210][T13053] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 703.177726][ T5974] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 703.969575][ T30] audit: type=1400 audit(1757771976.713:809): avc: denied { write } for pid=13048 comm="syz.1.1940" path="socket:[45360]" dev="sockfs" ino=45360 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 704.211051][ T5908] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 704.231087][ T5908] em28xx 2-1:0.0: Config register raw data: 0x3f [ 704.246611][ T5908] em28xx 2-1:0.0: I2S Audio (3 sample rate(s)) [ 704.273000][ T5908] em28xx 2-1:0.0: No AC97 audio processor [ 704.393255][ T5974] IPVS: starting estimator thread 0... [ 704.906610][ T5851] Bluetooth: hci1: command 0x0406 tx timeout [ 705.013976][T13060] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 705.079491][T13077] IPVS: using max 37 ests per chain, 88800 per kthread [ 706.487519][T13060] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 706.513623][T13060] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 706.520218][T13060] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 706.527342][T13060] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 706.534162][T13060] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 706.542016][T13060] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 706.549733][T13060] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 706.592022][T13060] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 706.607447][T13060] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 706.615147][T13060] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 706.624476][T13060] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 706.706357][ T5908] usb 6-1: USB disconnect, device number 71 [ 706.721911][ T5908] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 706.729899][T13080] FAULT_INJECTION: forcing a failure. [ 706.729899][T13080] name failslab, interval 1, probability 0, space 0, times 0 [ 706.764859][T13080] CPU: 1 UID: 0 PID: 13080 Comm: syz.5.1947 Not tainted syzkaller #0 PREEMPT(full) [ 706.764885][T13080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 706.764900][T13080] Call Trace: [ 706.764905][T13080] [ 706.764912][T13080] dump_stack_lvl+0x16c/0x1f0 [ 706.764939][T13080] should_fail_ex+0x512/0x640 [ 706.764962][T13080] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 706.764987][T13080] should_failslab+0xc2/0x120 [ 706.765007][T13080] __kmalloc_cache_noprof+0x6a/0x3e0 [ 706.765033][T13080] ? nfnl_err_add+0x4e/0x350 [ 706.765064][T13080] nfnl_err_add+0x4e/0x350 [ 706.765091][T13080] nfnetlink_rcv_batch+0xc95/0x2330 [ 706.765120][T13080] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 706.765155][T13080] ? avc_has_perm_noaudit+0x149/0x3b0 [ 706.765199][T13080] ? __nla_parse+0x40/0x60 [ 706.765228][T13080] nfnetlink_rcv+0x3c1/0x430 [ 706.765244][T13080] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 706.765269][T13080] netlink_unicast+0x5a7/0x870 [ 706.765295][T13080] ? __pfx_netlink_unicast+0x10/0x10 [ 706.765317][T13080] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 706.765343][T13080] netlink_sendmsg+0x8d1/0xdd0 [ 706.765370][T13080] ? __pfx_netlink_sendmsg+0x10/0x10 [ 706.765403][T13080] ____sys_sendmsg+0xa95/0xc70 [ 706.765428][T13080] ? copy_msghdr_from_user+0x10a/0x160 [ 706.765448][T13080] ? __pfx_____sys_sendmsg+0x10/0x10 [ 706.765481][T13080] ___sys_sendmsg+0x134/0x1d0 [ 706.765503][T13080] ? __pfx____sys_sendmsg+0x10/0x10 [ 706.765555][T13080] __sys_sendmsg+0x16d/0x220 [ 706.765575][T13080] ? __pfx___sys_sendmsg+0x10/0x10 [ 706.765611][T13080] do_syscall_64+0xcd/0x4e0 [ 706.765635][T13080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.765652][T13080] RIP: 0033:0x7f04fad8eba9 [ 706.765667][T13080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 706.765682][T13080] RSP: 002b:00007f04fbcfe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 706.765699][T13080] RAX: ffffffffffffffda RBX: 00007f04fafd5fa0 RCX: 00007f04fad8eba9 [ 706.765710][T13080] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 706.765721][T13080] RBP: 00007f04fbcfe090 R08: 0000000000000000 R09: 0000000000000000 [ 706.765731][T13080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 706.765741][T13080] R13: 00007f04fafd6038 R14: 00007f04fafd5fa0 R15: 00007ffdcfc0c718 [ 706.765766][T13080] [ 707.056272][ T5916] usb 2-1: USB disconnect, device number 127 [ 707.288050][ T5851] Bluetooth: hci2: command 0x0406 tx timeout [ 707.644872][T13099] netlink: 'syz.8.1948': attribute type 5 has an invalid length. [ 707.873942][ T24] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 708.307492][ T24] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 708.346064][ T24] usb 2-1: config 0 has no interface number 0 [ 708.376376][ T24] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 708.418213][ T24] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 708.435575][ T24] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 708.448344][ T24] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 708.461660][ T24] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 708.666407][ T5851] Bluetooth: hci0: command 0x0c1a tx timeout [ 708.672488][ T5851] Bluetooth: hci6: command 0x0c1a tx timeout [ 708.678559][ T5849] Bluetooth: hci5: command 0x041b tx timeout [ 708.678598][ T5849] Bluetooth: hci4: command 0x0406 tx timeout [ 708.684722][ T5851] Bluetooth: hci3: command 0x0406 tx timeout [ 708.684758][ T5851] Bluetooth: hci7: command 0x0c1a tx timeout [ 709.126719][ T24] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 709.152913][ T24] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 709.178494][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.234193][ T24] usb 2-1: config 0 descriptor?? [ 709.259967][T13094] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 709.285129][T13094] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 709.348863][ T24] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 710.743408][T13108] Bluetooth: hci7: command 0x0c1a tx timeout [ 710.749764][T13108] Bluetooth: hci0: command 0x0c1a tx timeout [ 711.542059][ T1541] usb 2-1: USB disconnect, device number 2 [ 711.568877][ T1541] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 712.823837][ T5859] Bluetooth: hci0: command 0x0c1a tx timeout [ 712.829890][ T5859] Bluetooth: hci7: command 0x0c1a tx timeout [ 712.992872][ T5972] usb 6-1: new low-speed USB device number 72 using dummy_hcd [ 713.144302][ T5908] IPVS: starting estimator thread 0... [ 713.377762][T13148] IPVS: using max 42 ests per chain, 100800 per kthread [ 714.693857][ T5972] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 715.379697][ T5972] usb 6-1: config 0 has no interface number 0 [ 715.386737][ T5972] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 715.400400][ T5972] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 715.411258][ T5972] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 715.423937][ T5972] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 715.435092][ T5972] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 715.446030][ T5972] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 715.461615][ T5972] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 715.477193][ T5972] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.488704][ T5972] usb 6-1: config 0 descriptor?? [ 715.506083][T13136] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 715.548661][T13136] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 715.560865][ T5972] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 715.660514][ T5972] usb 6-1: USB disconnect, device number 72 [ 715.679291][T13152] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.687852][T13152] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.733334][ T5972] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 715.940760][T13168] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1969'. [ 716.462265][T13173] netlink: 4400 bytes leftover after parsing attributes in process `syz.8.1968'. [ 716.487773][T13174] netlink: 'syz.6.1971': attribute type 1 has an invalid length. [ 716.611709][ T8845] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 716.801458][ T8845] usb 2-1: device descriptor read/64, error -71 [ 717.093748][T13152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 717.113070][T13152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 717.223112][ T8845] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 717.413007][ T8845] usb 2-1: device descriptor read/64, error -71 [ 717.472089][T13154] : entered promiscuous mode [ 717.538019][ T8845] usb usb2-port1: attempt power cycle [ 717.545733][T13176] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 717.575667][T13176] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 717.597199][T12036] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.609697][T12036] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.628308][T12036] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.667007][T12036] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.913136][ T8845] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 718.081722][ T8845] usb 2-1: device descriptor read/8, error -71 [ 718.354007][ T8845] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 718.452098][ T8845] usb 2-1: device descriptor read/8, error -71 [ 718.639211][ T8845] usb usb2-port1: unable to enumerate USB device [ 719.283242][ T8845] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 719.474364][ T8845] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 719.492952][ T8845] usb 2-1: config 0 has no interface number 0 [ 719.499079][ T8845] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 719.520968][ T8845] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 719.534219][ T8845] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 719.548823][T13206] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1980'. [ 719.554874][ T8845] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 719.591335][ T8845] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 719.607362][ T8845] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 719.624469][ T8845] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 719.638373][ T8845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.652059][ T8845] usb 2-1: config 0 descriptor?? [ 719.680014][T13203] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 719.693247][T13203] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 719.729413][ T8845] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 721.508708][ T5852] usb 7-1: new low-speed USB device number 56 using dummy_hcd [ 721.675980][ T5852] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 721.764138][ T5852] usb 7-1: config 0 has no interface number 0 [ 721.830089][ T5852] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 722.328855][ T5852] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 722.339691][ T5852] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 722.351494][ T5852] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 722.362790][ T5852] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 722.373657][ T5852] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 722.387369][ T5852] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 722.396543][ T5852] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.406510][ T5852] usb 7-1: config 0 descriptor?? [ 722.416313][T13218] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 722.427210][T13218] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 722.456121][ T5852] ldusb 7-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 722.814490][ T5852] usb 2-1: USB disconnect, device number 7 [ 722.843148][ T5852] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 723.026779][T13228] : renamed from bridge_slave_0 (while UP) [ 723.034831][ T30] audit: type=1400 audit(1757771995.773:810): avc: denied { ioctl } for pid=13224 comm="syz.8.1986" path="socket:[45835]" dev="sockfs" ino=45835 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 723.553100][ T5852] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 723.712873][ T5852] usb 2-1: Using ep0 maxpacket: 32 [ 723.724078][ T30] audit: type=1400 audit(1757771996.403:811): avc: denied { getopt } for pid=13232 comm="syz.5.1988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 723.732229][T13235] netlink: 'syz.5.1988': attribute type 11 has an invalid length. [ 723.774674][ T5852] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 723.795333][ T5852] usb 2-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 723.812693][ T5852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.837426][ T5852] usb 2-1: config 0 descriptor?? [ 723.870397][ T5852] dvb-usb: found a 'TeVii S662' in warm state. [ 723.888612][ T5852] dw2102: su3000_power_ctrl: 1, initialized 0 [ 723.901428][ T5852] dvb-usb: bulk message failed: -22 (2/0) [ 723.916974][ T5852] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 724.008153][ T5852] dvbdev: DVB: registering new adapter (TeVii S662) [ 724.049311][ T5852] usb 2-1: media controller created [ 724.076460][ T5852] dvb-usb: bulk message failed: -22 (6/0) [ 724.088271][ T5852] dw2102: i2c transfer failed. [ 724.102181][ T5852] dvb-usb: bulk message failed: -22 (6/0) [ 724.119515][ T5852] dw2102: i2c transfer failed. [ 724.127743][ T5852] dvb-usb: bulk message failed: -22 (6/0) [ 724.222045][ T5852] dw2102: i2c transfer failed. [ 724.248108][ T5852] dvb-usb: bulk message failed: -22 (6/0) [ 724.254397][ T5852] dw2102: i2c transfer failed. [ 724.259577][ T5852] dvb-usb: bulk message failed: -22 (6/0) [ 724.733073][ T5915] usb 7-1: USB disconnect, device number 56 [ 724.759114][ T5915] ldusb 7-1:0.55: LD USB Device #1 now disconnected [ 724.795538][ T5852] dw2102: i2c transfer failed. [ 724.800526][ T5852] dvb-usb: bulk message failed: -22 (6/0) [ 724.813844][ T5852] dw2102: i2c transfer failed. [ 724.818759][ T5852] dvb-usb: MAC address: 02:02:02:02:02:02 [ 724.857826][ T5852] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 725.072540][ T5852] dvb-usb: bulk message failed: -22 (3/0) [ 725.081938][ T5852] dw2102: command 0x0e transfer failed. [ 725.162786][ T5852] dvb-usb: bulk message failed: -22 (3/0) [ 725.168542][ T5852] dw2102: command 0x0e transfer failed. [ 725.583395][ T5852] dvb-usb: bulk message failed: -22 (3/0) [ 725.591463][ T5852] dw2102: command 0x0e transfer failed. [ 725.632329][ T5852] dvb-usb: bulk message failed: -22 (3/0) [ 725.830910][ T5852] dw2102: command 0x0e transfer failed. [ 726.593203][ T5852] dvb-usb: bulk message failed: -22 (1/0) [ 726.598972][ T5852] dw2102: command 0x51 transfer failed. [ 726.605235][ T5852] dvb-usb: bulk message failed: -22 (5/0) [ 726.610974][ T5852] dw2102: i2c probe for address 0x68 failed. [ 726.619390][ T5852] dvb-usb: bulk message failed: -22 (5/0) [ 726.625415][ T5852] dw2102: i2c probe for address 0x69 failed. [ 726.631395][ T5852] dvb-usb: bulk message failed: -22 (5/0) [ 726.715534][ T5852] dw2102: i2c probe for address 0x6a failed. [ 726.721642][ T5852] dw2102: probing for demodulator failed. Is the external power switched on? [ 726.736170][ T5852] dvb-usb: no frontend was attached by 'TeVii S662' [ 727.316063][ T5852] rc_core: IR keymap rc-tt-1500 not found [ 727.323951][ T5852] Registered IR keymap rc-empty [ 727.363013][ T5852] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 727.403708][ T5852] input: TeVii S662 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input129 [ 727.440777][ T5852] dvb-usb: schedule remote query interval to 250 msecs. [ 727.685917][ T5852] dw2102: su3000_power_ctrl: 0, initialized 1 [ 727.692037][ T5852] dvb-usb: TeVii S662 successfully initialized and connected. [ 727.747890][ T5852] usb 2-1: USB disconnect, device number 8 [ 727.756496][T13272] netlink: 'syz.7.1998': attribute type 10 has an invalid length. [ 727.801573][ T30] audit: type=1400 audit(1757772000.543:812): avc: denied { connect } for pid=13275 comm="syz.5.1999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 727.829528][ T30] audit: type=1400 audit(1757772000.573:813): avc: denied { map } for pid=13271 comm="syz.7.1998" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 727.861998][T13280] syz.5.1999: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 727.878130][T13280] CPU: 0 UID: 0 PID: 13280 Comm: syz.5.1999 Not tainted syzkaller #0 PREEMPT(full) [ 727.878158][T13280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 727.878168][T13280] Call Trace: [ 727.878175][T13280] [ 727.878182][T13280] dump_stack_lvl+0x16c/0x1f0 [ 727.878210][T13280] warn_alloc+0x248/0x3a0 [ 727.878233][T13280] ? __pfx_warn_alloc+0x10/0x10 [ 727.878261][T13280] ? kasan_save_stack+0x42/0x60 [ 727.878278][T13280] ? kasan_save_stack+0x33/0x60 [ 727.878296][T13280] ? kasan_save_track+0x14/0x30 [ 727.878314][T13280] ? xskq_create+0x52/0x1d0 [ 727.878332][T13280] ? xsk_setsockopt+0x74e/0x9a0 [ 727.878347][T13280] ? do_sock_setsockopt+0xf0/0x1d0 [ 727.878375][T13280] ? xskq_create+0xfb/0x1d0 [ 727.878395][T13280] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 727.878430][T13280] ? xskq_create+0xfb/0x1d0 [ 727.878455][T13280] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 727.878490][T13280] ? xskq_create+0xfb/0x1d0 [ 727.878509][T13280] vmalloc_user_noprof+0x9e/0xe0 [ 727.878530][T13280] ? xskq_create+0xfb/0x1d0 [ 727.878550][T13280] xskq_create+0xfb/0x1d0 [ 727.878571][T13280] xsk_setsockopt+0x74e/0x9a0 [ 727.878590][T13280] ? __pfx_xsk_setsockopt+0x10/0x10 [ 727.878608][T13280] ? find_held_lock+0x2b/0x80 [ 727.878635][T13280] ? selinux_socket_setsockopt+0x6a/0x80 [ 727.878661][T13280] ? __pfx_xsk_setsockopt+0x10/0x10 [ 727.878680][T13280] do_sock_setsockopt+0xf0/0x1d0 [ 727.878709][T13280] __sys_setsockopt+0x1a0/0x230 [ 727.878735][T13280] __x64_sys_setsockopt+0xbd/0x160 [ 727.878755][T13280] ? do_syscall_64+0x91/0x4e0 [ 727.878786][T13280] ? lockdep_hardirqs_on+0x7c/0x110 [ 727.878808][T13280] do_syscall_64+0xcd/0x4e0 [ 727.878830][T13280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.878847][T13280] RIP: 0033:0x7f04fad8eba9 [ 727.878861][T13280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 727.878874][T13280] RSP: 002b:00007f04fbc57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 727.878889][T13280] RAX: ffffffffffffffda RBX: 00007f04fafd6180 RCX: 00007f04fad8eba9 [ 727.878899][T13280] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 727.878909][T13280] RBP: 00007f04fae11e19 R08: 0000000000000004 R09: 0000000000000000 [ 727.878919][T13280] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 727.878928][T13280] R13: 00007f04fafd6218 R14: 00007f04fafd6180 R15: 00007ffdcfc0c718 [ 727.878952][T13280] [ 727.878965][T13280] Mem-Info: [ 728.132847][T13280] active_anon:34114 inactive_anon:0 isolated_anon:0 [ 728.132847][T13280] active_file:17292 inactive_file:40961 isolated_file:0 [ 728.132847][T13280] unevictable:768 dirty:293 writeback:0 [ 728.132847][T13280] slab_reclaimable:13458 slab_unreclaimable:113488 [ 728.132847][T13280] mapped:54121 shmem:20318 pagetables:1721 [ 728.132847][T13280] sec_pagetables:0 bounce:0 [ 728.132847][T13280] kernel_misc_reclaimable:0 [ 728.132847][T13280] free:1217831 free_pcp:15700 free_cma:0 [ 728.179956][ T5852] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 728.226950][T13280] Node 0 active_anon:136856kB inactive_anon:0kB active_file:69168kB inactive_file:163748kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:224984kB dirty:1172kB writeback:0kB shmem:80136kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15184kB pagetables:6712kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 728.269504][T13280] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 728.340644][T13280] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 728.379311][T13280] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 728.395001][T13280] Node 0 DMA32 free:976244kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:139412kB inactive_anon:0kB active_file:69168kB inactive_file:162324kB unevictable:1536kB writepending:1172kB present:3129332kB managed:2539320kB mlocked:0kB bounce:0kB free_pcp:31048kB local_pcp:13008kB free_cma:0kB [ 728.436750][ T30] audit: type=1400 audit(1757772001.183:814): avc: denied { setopt } for pid=13275 comm="syz.5.1999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 728.461443][T13280] lowmem_reserve[]: 0 0 1 1 1 [ 728.466433][T13280] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:0kB free_cma:0kB [ 728.496675][T13280] lowmem_reserve[]: 0 0 0 0 0 [ 728.517851][T13280] Node 1 Normal free:3877920kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:30660kB local_pcp:13120kB free_cma:0kB [ 728.585342][T13280] lowmem_reserve[]: 0 0 0 0 0 [ 728.631696][T13280] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 728.685689][T13280] Node 0 DMA32: 156*4kB (UE) 182*8kB (UM) 399*16kB (UM) 2963*32kB (UME) 2326*64kB (UM) 755*128kB (UM) 74*256kB (UME) 14*512kB (UME) 15*1024kB (UME) 4*2048kB (M) 141*4096kB (M) = 975984kB [ 728.782877][ T5852] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 728.813658][T13280] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 728.837640][T13280] Node 1 Normal: 106*4kB (UME) 41*8kB (UME) 43*16kB (UME) 72*32kB (UME) 26*64kB (UME) 14*128kB (UME) 6*256kB (ME) 11*512kB (UME) 5*1024kB (UM) 2*2048kB (UE) 941*4096kB (M) = 3877920kB [ 728.942927][ T5852] usb 2-1: Using ep0 maxpacket: 32 [ 728.956395][ T5852] usb 2-1: config 0 has an invalid interface number: 245 but max is 0 [ 729.282359][ T5852] usb 2-1: config 0 has no interface number 0 [ 729.289759][T13280] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 729.305712][ T5852] usb 2-1: config 0 interface 245 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 729.306144][T13280] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 729.328182][ T5852] usb 2-1: config 0 interface 245 has no altsetting 0 [ 729.340189][T13280] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 729.346217][ T5852] usb 2-1: New USB device found, idVendor=1532, idProduct=94b5, bcdDevice=61.78 [ 729.363251][ T5852] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.375996][T13280] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 729.380716][ T5852] usb 2-1: Product: syz [ 729.394899][ T5852] usb 2-1: Manufacturer: syz [ 729.405843][ T5852] usb 2-1: SerialNumber: syz [ 729.410933][T13280] 82192 total pagecache pages [ 729.421772][T13280] 5 pages in swap cache [ 729.426944][T13280] Free swap = 124968kB [ 729.428923][ T5852] usb 2-1: config 0 descriptor?? [ 729.439283][T13280] Total swap = 124996kB [ 729.444619][T13280] 2097051 pages RAM [ 729.460890][T13280] 0 pages HighMem/MovableOnly [ 729.472619][T13280] 430259 pages reserved [ 729.488980][T13280] 0 pages cma reserved [ 729.941353][T13305] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2004'. [ 730.062959][ T5915] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 730.224402][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.271445][ T5915] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 730.282594][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.297243][ T5915] usb 6-1: config 0 descriptor?? [ 730.727299][ T5915] keytouch 0003:0926:3333.0052: fixing up Keytouch IEC report descriptor [ 730.902612][ T5915] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0052/input/input130 [ 730.950668][ T5916] usb 2-1: USB disconnect, device number 9 [ 731.762100][ T5915] keytouch 0003:0926:3333.0052: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 732.159289][ T5915] usb 6-1: USB disconnect, device number 73 [ 732.436303][T13323] fido_id[13323]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 732.502931][T13332] netlink: 'syz.8.2010': attribute type 5 has an invalid length. [ 733.105331][T13334] ptrace attach of "./syz-executor exec"[5854] was attempted by "./syz-executor exec"[13334] [ 733.163259][ T5915] usb 6-1: new full-speed USB device number 74 using dummy_hcd [ 733.347856][ T5915] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 733.379800][ T5915] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 733.423132][ T5915] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 733.448350][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.459197][ T5915] usb 6-1: config 0 descriptor?? [ 733.662896][T11596] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 734.038889][T11596] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 734.967268][T11596] usb 2-1: config 0 has no interface number 0 [ 735.110668][T11596] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 735.115572][ T5915] usb 6-1: string descriptor 0 read error: -71 [ 735.402485][ T5915] usb 6-1: USB disconnect, device number 74 [ 735.454827][T11596] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 735.510111][T11596] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 735.544587][T11596] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 735.608132][T11596] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 735.650746][T11596] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 735.668443][T11596] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 735.677980][T11596] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.782715][T11596] usb 2-1: config 0 descriptor?? [ 735.789236][T13337] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 735.798170][T13337] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 735.809834][T11596] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 736.946978][T11596] usb 2-1: USB disconnect, device number 10 [ 736.986601][T11596] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 737.272962][ T24] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 737.290741][ T5915] usb 7-1: new low-speed USB device number 57 using dummy_hcd [ 737.447570][ T5915] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 737.457808][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 737.475893][ T5915] usb 7-1: config 0 has no interface number 0 [ 737.482119][ T24] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 737.498691][ T5915] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 737.509953][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.518532][ T5915] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 737.530636][ T5915] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 737.544183][ T24] usb 6-1: config 0 descriptor?? [ 737.554336][ T5915] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 737.566158][ T5915] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 737.577649][ T5915] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 737.591044][ T5915] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 737.673102][ T5915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.724356][ T5915] usb 7-1: config 0 descriptor?? [ 737.730141][T13368] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 737.737868][T13368] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 737.749878][ T5915] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 737.965266][ T24] keytouch 0003:0926:3333.0053: fixing up Keytouch IEC report descriptor [ 737.982987][ T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0053/input/input131 [ 738.141646][ T24] keytouch 0003:0926:3333.0053: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 738.555458][T11596] usb 6-1: USB disconnect, device number 75 [ 738.674490][T13378] fido_id[13378]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 739.779877][ T30] audit: type=1400 audit(1757772012.523:815): avc: denied { write } for pid=13383 comm="syz.5.2029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 739.826692][ T30] audit: type=1400 audit(1757772012.523:816): avc: denied { ioctl } for pid=13383 comm="syz.5.2029" path="socket:[46224]" dev="sockfs" ino=46224 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 740.135578][ T24] usb 7-1: USB disconnect, device number 57 [ 740.361683][ T24] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 741.021034][T13401] FAULT_INJECTION: forcing a failure. [ 741.021034][T13401] name failslab, interval 1, probability 0, space 0, times 0 [ 741.074916][T13401] CPU: 1 UID: 0 PID: 13401 Comm: syz.8.2035 Not tainted syzkaller #0 PREEMPT(full) [ 741.074942][T13401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 741.074954][T13401] Call Trace: [ 741.074959][T13401] [ 741.074967][T13401] dump_stack_lvl+0x16c/0x1f0 [ 741.074994][T13401] should_fail_ex+0x512/0x640 [ 741.075016][T13401] ? fs_reclaim_acquire+0xae/0x150 [ 741.075041][T13401] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 741.075067][T13401] should_failslab+0xc2/0x120 [ 741.075088][T13401] __kmalloc_noprof+0xd2/0x510 [ 741.075112][T13401] tomoyo_realpath_from_path+0xc2/0x6e0 [ 741.075140][T13401] ? tomoyo_profile+0x47/0x60 [ 741.075160][T13401] tomoyo_path_number_perm+0x245/0x580 [ 741.075182][T13401] ? tomoyo_path_number_perm+0x237/0x580 [ 741.075207][T13401] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 741.075230][T13401] ? find_held_lock+0x2b/0x80 [ 741.075275][T13401] ? find_held_lock+0x2b/0x80 [ 741.075295][T13401] ? hook_file_ioctl_common+0x145/0x410 [ 741.075319][T13401] ? __fget_files+0x20e/0x3c0 [ 741.075343][T13401] security_file_ioctl+0x9b/0x240 [ 741.075370][T13401] __x64_sys_ioctl+0xb7/0x210 [ 741.075397][T13401] do_syscall_64+0xcd/0x4e0 [ 741.075423][T13401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.075441][T13401] RIP: 0033:0x7fe55878eba9 [ 741.075455][T13401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 741.075471][T13401] RSP: 002b:00007fe5569f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 741.075489][T13401] RAX: ffffffffffffffda RBX: 00007fe5589d5fa0 RCX: 00007fe55878eba9 [ 741.075500][T13401] RDX: 0001000000000000 RSI: 0000000000005411 RDI: 0000000000000003 [ 741.075511][T13401] RBP: 00007fe5569f6090 R08: 0000000000000000 R09: 0000000000000000 [ 741.075521][T13401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 741.075531][T13401] R13: 00007fe5589d6038 R14: 00007fe5589d5fa0 R15: 00007ffdcb387fa8 [ 741.075555][T13401] [ 741.075562][T13401] ERROR: Out of memory at tomoyo_realpath_from_path. [ 741.347447][T13406] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=13406 comm=syz.1.2036 [ 741.443370][ T24] usb 7-1: new low-speed USB device number 58 using dummy_hcd [ 741.604723][ T24] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 741.701867][ T24] usb 7-1: config 0 has no interface number 0 [ 741.711905][T13411] ptrace attach of "./syz-executor exec"[12671] was attempted by "./syz-executor exec"[13411] [ 741.743006][ T24] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 741.776156][ T24] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 741.790319][ T24] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 741.803110][ T24] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 741.824005][ T24] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 741.839426][ T24] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 741.885336][ T24] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 741.905931][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.917067][ T24] usb 7-1: config 0 descriptor?? [ 741.922643][T13404] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 741.930238][T13404] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 741.941455][ T24] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 741.971911][T13420] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2041'. [ 741.992847][ T5915] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 742.008304][ T5901] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 742.144128][ T5915] usb 6-1: Using ep0 maxpacket: 32 [ 742.158539][ T5915] usb 6-1: config 0 has an invalid interface number: 245 but max is 0 [ 742.184414][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.202995][ T5901] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 742.226527][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.283722][ T5915] usb 6-1: config 0 has no interface number 0 [ 742.290550][ T5915] usb 6-1: config 0 interface 245 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 742.303036][ T5915] usb 6-1: config 0 interface 245 has no altsetting 0 [ 742.313679][ T5915] usb 6-1: New USB device found, idVendor=1532, idProduct=94b5, bcdDevice=61.78 [ 742.323648][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.328812][ T5901] usb 2-1: config 0 descriptor?? [ 742.331970][ T5915] usb 6-1: Product: syz [ 742.679418][ T5915] usb 6-1: Manufacturer: syz [ 742.685663][ T5915] usb 6-1: SerialNumber: syz [ 742.699446][ T5915] usb 6-1: config 0 descriptor?? [ 743.159061][ T5915] usb 6-1: USB disconnect, device number 76 [ 744.116876][ T5915] usb 7-1: USB disconnect, device number 58 [ 744.558501][ T5915] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 745.171864][ T5901] keytouch 0003:0926:3333.0054: fixing up Keytouch IEC report descriptor [ 745.498023][ T5901] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0054/input/input132 [ 745.539049][T13438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 745.576464][T13438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 745.628092][ T5901] keytouch 0003:0926:3333.0054: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 745.772834][T11596] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 745.859005][ T5916] usb 2-1: USB disconnect, device number 11 [ 745.883151][T13451] netlink: 'syz.5.2047': attribute type 5 has an invalid length. [ 746.321541][T11596] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 746.334959][T11596] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.343697][T11596] usb 7-1: Product: syz [ 746.349093][T11596] usb 7-1: Manufacturer: syz [ 746.357672][T11596] usb 7-1: SerialNumber: syz [ 746.384596][T11596] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 746.403176][ T5852] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 746.418152][T13452] netlink: 'syz.7.2048': attribute type 5 has an invalid length. [ 746.946566][ T5916] usb 7-1: USB disconnect, device number 59 [ 746.953849][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.477663][ T5852] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 748.482953][ T5852] ath9k_htc: Failed to initialize the device [ 748.515847][ T5916] usb 7-1: ath9k_htc: USB layer deinitialized [ 748.799352][T11596] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 748.959104][T11596] usb 2-1: Using ep0 maxpacket: 32 [ 748.970762][T11596] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 748.983548][T11596] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.011055][T11596] usb 2-1: Product: syz [ 749.025658][T11596] usb 2-1: Manufacturer: syz [ 749.040550][T11596] usb 2-1: SerialNumber: syz [ 749.076250][T11596] usb 2-1: config 0 descriptor?? [ 749.094836][T11596] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 749.123073][ T5930] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 749.792865][ T5930] usb 6-1: Using ep0 maxpacket: 16 [ 749.800091][ T5930] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 749.816268][ T5930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 749.830770][ T5930] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 749.840254][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.853667][ T5930] usb 6-1: Product: syz [ 749.857872][ T5930] usb 6-1: Manufacturer: syz [ 749.862487][ T5930] usb 6-1: SerialNumber: syz [ 749.875271][ T5930] usb 6-1: config 0 descriptor?? [ 749.904070][ T5930] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 749.923995][T13476] ptrace attach of "./syz-executor exec"[11940] was attempted by "./syz-executor exec"[13476] [ 749.941202][ T5930] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 750.644074][T11596] gspca_stk1135: reg_w 0x7 err -110 [ 750.650399][T11596] gspca_stk1135: serial bus timeout: status=0x00 [ 750.672982][T11596] gspca_stk1135: Sensor write failed [ 750.680223][T11596] gspca_stk1135: serial bus timeout: status=0x00 [ 750.695236][T11596] gspca_stk1135: Sensor write failed [ 750.708634][T11596] gspca_stk1135: serial bus timeout: status=0x00 [ 750.726881][T11596] gspca_stk1135: Sensor read failed [ 750.738684][T11596] gspca_stk1135: serial bus timeout: status=0x00 [ 750.752636][T11596] gspca_stk1135: Sensor read failed [ 750.769502][T11596] gspca_stk1135: Detected sensor type unknown (0x0) [ 750.785929][T11596] gspca_stk1135: serial bus timeout: status=0x00 [ 750.797154][T11596] gspca_stk1135: Sensor read failed [ 750.802440][T11596] gspca_stk1135: serial bus timeout: status=0x00 [ 750.808997][T11596] gspca_stk1135: Sensor read failed [ 750.814957][ T5930] em28xx 6-1:0.0: chip ID is em2882/3 [ 750.833275][T11596] gspca_stk1135: serial bus timeout: status=0x00 [ 750.845858][T11596] gspca_stk1135: Sensor write failed [ 750.852195][T11596] gspca_stk1135: serial bus timeout: status=0x00 [ 750.858738][T11596] gspca_stk1135: Sensor write failed [ 750.864421][T11596] stk1135 2-1:0.0: probe with driver stk1135 failed with error -110 [ 751.022914][ T5930] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 751.064329][ T5930] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 751.071474][ T5930] em28xx 6-1:0.0: No AC97 audio processor [ 751.082332][ T5930] usb 6-1: USB disconnect, device number 77 [ 751.096074][ T5930] em28xx 6-1:0.0: Disconnecting em28xx [ 751.135044][ T5930] em28xx 6-1:0.0: Freeing device [ 751.269052][ T5916] usb 2-1: USB disconnect, device number 12 [ 752.102872][ T5916] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 752.310028][ T24] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 752.336014][ T5916] usb 2-1: Using ep0 maxpacket: 32 [ 752.380034][ T5916] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 752.394383][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.456791][ T5916] usb 2-1: config 0 descriptor?? [ 752.473273][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 752.521958][ T24] usb 6-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 753.361621][ T5916] usb 2-1: selecting invalid altsetting 3 [ 753.413474][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.432285][ T5916] comedi comedi5: could not set alternate setting 3 in high speed [ 753.451201][ T24] usb 6-1: config 0 descriptor?? [ 753.536588][ T5916] usbduxsigma 2-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 753.560640][ T24] sysfs: cannot create duplicate filename '/class/comedi/comedi5' [ 753.585969][ T5916] usbduxsigma 2-1:0.0: probe with driver usbduxsigma failed with error -22 [ 753.597400][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 753.597430][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 753.597444][ T24] Workqueue: usb_hub_wq hub_event [ 753.597477][ T24] Call Trace: [ 753.597484][ T24] [ 753.597493][ T24] dump_stack_lvl+0x16c/0x1f0 [ 753.597522][ T24] sysfs_warn_dup+0x7f/0xa0 [ 753.597547][ T24] sysfs_do_create_link_sd+0x124/0x140 [ 753.597577][ T24] sysfs_create_link+0x61/0xc0 [ 753.597603][ T24] device_add+0x62c/0x1aa0 [ 753.597637][ T24] ? __pfx_device_add+0x10/0x10 [ 753.597663][ T24] ? kfree+0x24f/0x4d0 [ 753.597701][ T24] device_create_groups_vargs+0x1f8/0x270 [ 753.597734][ T24] device_create+0xed/0x130 [ 753.597762][ T24] ? __pfx_device_create+0x10/0x10 [ 753.597806][ T24] comedi_alloc_board_minor+0x24c/0x3b0 [ 753.597833][ T24] comedi_auto_config+0x74/0x440 [ 753.597861][ T24] usb_probe_interface+0x300/0xa40 [ 753.597895][ T24] ? __pfx_usb_probe_interface+0x10/0x10 [ 753.597927][ T24] really_probe+0x241/0xa90 [ 753.597953][ T24] __driver_probe_device+0x1de/0x440 [ 753.597980][ T24] driver_probe_device+0x4c/0x1b0 [ 753.598005][ T24] __device_attach_driver+0x1df/0x310 [ 753.598030][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 753.598053][ T24] bus_for_each_drv+0x159/0x1e0 [ 753.598073][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 753.598093][ T24] ? lockdep_hardirqs_on+0x7c/0x110 [ 753.598116][ T24] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 753.598142][ T24] __device_attach+0x1e4/0x4b0 [ 753.598166][ T24] ? __pfx___device_attach+0x10/0x10 [ 753.598191][ T24] ? do_raw_spin_unlock+0x172/0x230 [ 753.598217][ T24] bus_probe_device+0x17f/0x1c0 [ 753.598241][ T24] device_add+0x1148/0x1aa0 [ 753.598271][ T24] ? __pfx_device_add+0x10/0x10 [ 753.598305][ T24] ? preempt_schedule_thunk+0x16/0x30 [ 753.598346][ T24] usb_set_configuration+0x1187/0x1e20 [ 753.598394][ T24] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 753.598418][ T24] usb_generic_driver_probe+0xb1/0x110 [ 753.598444][ T24] usb_probe_device+0xef/0x3e0 [ 753.598471][ T24] ? __pfx_usb_probe_device+0x10/0x10 [ 753.598499][ T24] really_probe+0x241/0xa90 [ 753.598525][ T24] __driver_probe_device+0x1de/0x440 [ 753.598544][ T24] ? usb_driver_applicable+0x1c7/0x220 [ 753.598563][ T24] driver_probe_device+0x4c/0x1b0 [ 753.598588][ T24] __device_attach_driver+0x1df/0x310 [ 753.598613][ T24] ? __pfx___device_attach_driver+0x10/0x10 [ 753.598635][ T24] bus_for_each_drv+0x159/0x1e0 [ 753.598654][ T24] ? __pfx_bus_for_each_drv+0x10/0x10 [ 753.598674][ T24] ? lockdep_hardirqs_on+0x7c/0x110 [ 753.598697][ T24] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 753.598721][ T24] __device_attach+0x1e4/0x4b0 [ 753.598745][ T24] ? __pfx___device_attach+0x10/0x10 [ 753.598771][ T24] ? do_raw_spin_unlock+0x172/0x230 [ 753.598797][ T24] bus_probe_device+0x17f/0x1c0 [ 753.598821][ T24] device_add+0x1148/0x1aa0 [ 753.598851][ T24] ? __pfx_device_add+0x10/0x10 [ 753.598877][ T24] ? usb_detect_static_quirks+0x335/0x3e0 [ 753.598904][ T24] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 753.598938][ T24] usb_new_device+0xd07/0x1a60 [ 753.598969][ T24] ? do_raw_spin_lock+0x12c/0x2b0 [ 753.598991][ T24] ? __pfx_usb_new_device+0x10/0x10 [ 753.599017][ T24] ? mark_held_locks+0x49/0x80 [ 753.599050][ T24] hub_event+0x2f34/0x4fe0 [ 753.599104][ T24] ? __pfx_hub_event+0x10/0x10 [ 753.599129][ T24] ? assoc_array_insert+0x3100/0x3970 [ 753.599170][ T24] ? rcu_is_watching+0x12/0xc0 [ 753.599199][ T24] process_one_work+0x9cc/0x1b70 [ 753.599229][ T24] ? __pfx_hcd_resume_work+0x10/0x10 [ 753.599258][ T24] ? __pfx_process_one_work+0x10/0x10 [ 753.599293][ T24] ? assign_work+0x1a0/0x250 [ 753.599317][ T24] worker_thread+0x6c8/0xf10 [ 753.599350][ T24] ? __pfx_worker_thread+0x10/0x10 [ 753.599371][ T24] kthread+0x3c2/0x780 [ 753.599393][ T24] ? __pfx_kthread+0x10/0x10 [ 753.599415][ T24] ? rcu_is_watching+0x12/0xc0 [ 753.599440][ T24] ? __pfx_kthread+0x10/0x10 [ 753.599461][ T24] ret_from_fork+0x56a/0x730 [ 753.599480][ T24] ? __pfx_kthread+0x10/0x10 [ 753.599501][ T24] ret_from_fork_asm+0x1a/0x30 [ 753.599538][ T24] [ 754.038543][ T24] usb 6-1: selecting invalid altsetting 3 [ 754.045105][ T24] (NULL device *): could not set alternate setting 3 in high speed [ 754.053051][ T24] usbduxsigma 6-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 754.063128][ T24] usbduxsigma 6-1:0.0: probe with driver usbduxsigma failed with error -22 [ 754.088236][ T5916] usb 2-1: USB disconnect, device number 13 [ 754.628314][ T5961] usb 6-1: USB disconnect, device number 78 [ 755.197723][T13521] ptrace attach of "./syz-executor exec"[12671] was attempted by "./syz-executor exec"[13521] [ 756.272889][T13534] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2070'. [ 756.673041][T11596] usb 7-1: new full-speed USB device number 60 using dummy_hcd [ 756.949260][T11596] usb 7-1: not running at top speed; connect to a high speed hub [ 756.968464][T11596] usb 7-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 757.018747][T11596] usb 7-1: config 1 interface 0 has no altsetting 0 [ 757.036873][T11596] usb 7-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.40 [ 757.049705][T11596] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.149333][T11596] usb 7-1: Product: syz [ 757.154081][T11596] usb 7-1: SerialNumber: syz [ 757.176792][T13542] FAULT_INJECTION: forcing a failure. [ 757.176792][T13542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 757.190040][T13542] CPU: 0 UID: 0 PID: 13542 Comm: syz.8.2072 Not tainted syzkaller #0 PREEMPT(full) [ 757.190064][T13542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 757.190074][T13542] Call Trace: [ 757.190080][T13542] [ 757.190090][T13542] dump_stack_lvl+0x16c/0x1f0 [ 757.190117][T13542] should_fail_ex+0x512/0x640 [ 757.190141][T13542] strncpy_from_user+0x3b/0x2e0 [ 757.190155][T13542] getname_flags.part.0+0x8f/0x550 [ 757.190174][T13542] getname_flags+0x93/0xf0 [ 757.190185][T13542] user_path_at+0x24/0x60 [ 757.190196][T13542] __x64_sys_mount+0x1fc/0x310 [ 757.190210][T13542] ? __pfx___x64_sys_mount+0x10/0x10 [ 757.190225][T13542] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 757.190241][T13542] do_syscall_64+0xcd/0x4e0 [ 757.190256][T13542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.190266][T13542] RIP: 0033:0x7fe55878eba9 [ 757.190275][T13542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 757.190286][T13542] RSP: 002b:00007fe5569d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 757.190296][T13542] RAX: ffffffffffffffda RBX: 00007fe5589d6090 RCX: 00007fe55878eba9 [ 757.190303][T13542] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000000 [ 757.190309][T13542] RBP: 00007fe5569d5090 R08: 0000000000000000 R09: 0000000000000000 [ 757.190316][T13542] R10: 0000000000005028 R11: 0000000000000246 R12: 0000000000000001 [ 757.190329][T13542] R13: 00007fe5589d6128 R14: 00007fe5589d6090 R15: 00007ffdcb387fa8 [ 757.190342][T13542] [ 757.591461][T11596] usbhid 7-1:1.0: can't add hid device: -71 [ 757.597594][T11596] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 758.473970][T11596] usb 7-1: USB disconnect, device number 60 [ 760.096566][ T30] audit: type=1400 audit(1757772032.443:817): avc: denied { shutdown } for pid=13550 comm="syz.6.2074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 761.083396][ T5974] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 761.242941][T11596] usb 6-1: new low-speed USB device number 79 using dummy_hcd [ 761.262807][ T5974] usb 2-1: Using ep0 maxpacket: 32 [ 761.270638][ T5974] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 761.287451][ T5974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.316084][ T5974] usb 2-1: config 0 descriptor?? [ 761.338921][ T5974] usb 2-1: selecting invalid altsetting 3 [ 761.352666][ T5974] comedi comedi5: could not set alternate setting 3 in high speed [ 761.363012][ T5974] usbduxsigma 2-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 761.383761][ T5974] usbduxsigma 2-1:0.0: probe with driver usbduxsigma failed with error -22 [ 761.406600][T11596] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 761.414976][T11596] usb 6-1: config 0 has no interface number 0 [ 761.421093][T11596] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 761.436715][T11596] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 761.447973][T11596] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 761.467242][T11596] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 761.482293][T11596] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 761.495986][T11596] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 761.512024][T11596] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 761.542303][T11596] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.546610][ T5961] usb 2-1: USB disconnect, device number 14 [ 761.575178][T11596] usb 6-1: config 0 descriptor?? [ 761.583379][T13557] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 761.613020][T13557] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 761.646773][T11596] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 763.043332][T13578] ptrace attach of "./syz-executor exec"[5854] was attempted by "./syz-executor exec"[13578] [ 763.407108][T13583] bpf: Bad value for 'uid' [ 763.758706][T13585] GUP no longer grows the stack in syz.7.2083 (13585): 200000004000-20000000a000 (200000002000) [ 763.769751][T13585] CPU: 0 UID: 0 PID: 13585 Comm: syz.7.2083 Not tainted syzkaller #0 PREEMPT(full) [ 763.769780][T13585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 763.769792][T13585] Call Trace: [ 763.769803][T13585] [ 763.769811][T13585] dump_stack_lvl+0x16c/0x1f0 [ 763.769841][T13585] gup_vma_lookup+0x1d2/0x220 [ 763.769869][T13585] __get_user_pages+0x243/0x34a0 [ 763.769896][T13585] ? __pfx___schedule+0x10/0x10 [ 763.769927][T13585] ? __pfx___get_user_pages+0x10/0x10 [ 763.769961][T13585] get_user_pages_remote+0x243/0xab0 [ 763.769993][T13585] ? __pfx_get_user_pages_remote+0x10/0x10 [ 763.770017][T13585] ? __access_remote_vm+0x502/0x850 [ 763.770040][T13585] ? kasan_check_range+0xbe/0x1b0 [ 763.770073][T13585] __access_remote_vm+0x24d/0x850 [ 763.770102][T13585] ? do_raw_spin_lock+0x12c/0x2b0 [ 763.770123][T13585] ? __pfx___access_remote_vm+0x10/0x10 [ 763.770154][T13585] proc_pid_cmdline_read+0x4de/0x8e0 [ 763.770179][T13585] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 763.770204][T13585] ? rw_verify_area+0xcf/0x6c0 [ 763.770233][T13585] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 763.770254][T13585] vfs_readv+0x5c1/0x8b0 [ 763.770276][T13585] ? __pfx_vfs_readv+0x10/0x10 [ 763.770294][T13585] ? rcu_is_watching+0x12/0xc0 [ 763.770334][T13585] ? __fget_files+0x20e/0x3c0 [ 763.770362][T13585] ? do_preadv+0x1a6/0x270 [ 763.770377][T13585] do_preadv+0x1a6/0x270 [ 763.770395][T13585] ? __pfx_do_preadv+0x10/0x10 [ 763.770413][T13585] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 763.770441][T13585] do_syscall_64+0xcd/0x4e0 [ 763.770467][T13585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.770485][T13585] RIP: 0033:0x7f5c8478eba9 [ 763.770501][T13585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 763.770519][T13585] RSP: 002b:00007f5c829b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 763.770543][T13585] RAX: ffffffffffffffda RBX: 00007f5c849d6180 RCX: 00007f5c8478eba9 [ 763.770554][T13585] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 000000000000000e [ 763.770565][T13585] RBP: 00007f5c84811e19 R08: 0000000000000000 R09: 0000000000000000 [ 763.770576][T13585] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 763.770586][T13585] R13: 00007f5c849d6218 R14: 00007f5c849d6180 R15: 00007ffdccdcfff8 [ 763.770611][T13585] [ 764.120213][T11596] usb 6-1: USB disconnect, device number 79 [ 764.131601][T11596] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 766.603549][ T5916] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 767.042833][ T5916] usb 6-1: Using ep0 maxpacket: 32 [ 767.049694][ T5916] usb 6-1: config 0 has an invalid interface number: 20 but max is 0 [ 767.070290][ T5916] usb 6-1: config 0 has no interface number 0 [ 767.085241][ T5916] usb 6-1: config 0 interface 20 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 767.136997][ T5916] usb 6-1: config 0 interface 20 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 767.185553][ T5916] usb 6-1: config 0 interface 20 has no altsetting 0 [ 767.205564][ T5916] usb 6-1: New USB device found, idVendor=2040, idProduct=b131, bcdDevice=5c.24 [ 767.224749][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.235445][ T5916] usb 6-1: Product: syz [ 767.239689][ T5916] usb 6-1: Manufacturer: syz [ 767.258293][ T5916] usb 6-1: SerialNumber: syz [ 767.268409][ T5916] usb 6-1: config 0 descriptor?? [ 767.570195][ T5961] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 767.614824][ T30] audit: type=1400 audit(1757772040.363:818): avc: denied { watch } for pid=13600 comm="syz.5.2088" path="/proc/878/fdinfo" dev="proc" ino=47731 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 768.156631][ T5961] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 768.169686][ T5961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 768.182327][ T5961] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 768.220626][ T5961] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 768.231249][ T5961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.244017][ T5916] usb 6-1: USB disconnect, device number 80 [ 768.589588][ T5961] usb 2-1: config 0 descriptor?? [ 768.741711][ T5961] gspca_main: spca561-2.14.0 probing abcd:cdee [ 769.333255][ T5961] spca561 2-1:0.0: probe with driver spca561 failed with error -22 [ 769.365432][ T5961] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 769.374632][ T5961] usb 2-1: MIDIStreaming interface descriptor not found [ 769.468114][ T5961] usb 2-1: USB disconnect, device number 15 [ 772.168537][ T30] audit: type=1400 audit(1757772044.193:819): avc: denied { name_bind } for pid=13652 comm="syz.1.2102" src=65535 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 778.869501][ T30] audit: type=1400 audit(1757772051.613:820): avc: denied { read } for pid=13716 comm="syz.8.2120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 779.522837][ T5915] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 779.664342][T13730] SELinux: policydb version -1343907157 does not match my version range 15-35 [ 779.673587][T13730] SELinux: failed to load policy [ 780.769950][ T5915] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 780.780629][ T5915] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 780.792818][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.804565][ T5915] usb 6-1: config 0 descriptor?? [ 780.832427][ T5915] pwc: Askey VC010 type 2 USB webcam detected. [ 780.892649][ T30] audit: type=1400 audit(1757772053.633:821): avc: denied { getopt } for pid=13735 comm="syz.1.2125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 780.916162][ T30] audit: type=1400 audit(1757772053.633:822): avc: denied { append } for pid=13735 comm="syz.1.2125" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 781.611572][ T5915] pwc: recv_control_msg error -32 req 02 val 2b00 [ 781.624930][ T5915] pwc: recv_control_msg error -32 req 02 val 2700 [ 781.643726][ T5915] pwc: recv_control_msg error -32 req 02 val 2c00 [ 781.664595][ T5915] pwc: recv_control_msg error -32 req 04 val 1000 [ 781.686946][ T5915] pwc: recv_control_msg error -32 req 04 val 1300 [ 781.703188][ T5915] pwc: recv_control_msg error -32 req 04 val 1400 [ 781.710753][ T5915] pwc: recv_control_msg error -32 req 02 val 2000 [ 781.723918][ T5915] pwc: recv_control_msg error -32 req 02 val 2100 [ 781.732512][ T5915] pwc: recv_control_msg error -32 req 04 val 1500 [ 781.742622][ T5915] pwc: recv_control_msg error -71 req 02 val 2500 [ 781.752025][ T5915] pwc: recv_control_msg error -71 req 02 val 2400 [ 781.758989][ T5915] pwc: recv_control_msg error -71 req 02 val 2600 [ 781.776708][ T5915] pwc: recv_control_msg error -71 req 02 val 2900 [ 781.793211][ T5915] pwc: recv_control_msg error -71 req 02 val 2800 [ 781.800268][ T5915] pwc: recv_control_msg error -71 req 04 val 1100 [ 781.818185][ T5915] pwc: recv_control_msg error -71 req 04 val 1200 [ 781.828489][ T5915] pwc: Registered as video103. [ 781.924610][ T5915] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input133 [ 781.951329][ T5915] usb 6-1: USB disconnect, device number 81 [ 782.039590][ T30] audit: type=1400 audit(1757772054.783:823): avc: denied { bind } for pid=13756 comm="syz.1.2132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 782.187117][ T30] audit: type=1400 audit(1757772054.913:824): avc: denied { shutdown } for pid=13756 comm="syz.1.2132" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 782.311973][ T5908] usb 7-1: new low-speed USB device number 61 using dummy_hcd [ 782.410814][ T30] audit: type=1400 audit(1757772054.913:825): avc: denied { read } for pid=13756 comm="syz.1.2132" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 782.450288][ T30] audit: type=1400 audit(1757772055.073:826): avc: denied { ioctl } for pid=13756 comm="syz.1.2132" path="/425/file0" dev="tmpfs" ino=2285 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 782.558339][ T5908] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 782.567157][ T5908] usb 7-1: config 0 has no interface number 0 [ 782.575185][ T5908] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 782.727781][ T5908] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 782.754027][ T5908] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 782.813284][ T5908] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 782.847294][ T5908] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 782.873072][ T5908] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 783.073159][ T5908] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 783.118515][ T5908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.150424][ T5908] usb 7-1: config 0 descriptor?? [ 783.173778][T13755] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 783.182870][T13755] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 783.202570][ T5908] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 783.634618][ T5930] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 784.126136][ T5930] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 784.135585][ T5930] usb 2-1: config 0 has no interface number 0 [ 784.142476][ T5930] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 784.277771][ T5930] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 784.290264][ T5930] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 784.314749][ T5930] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 784.354208][ T5930] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 784.365189][ T5930] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 784.409568][ T5930] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 785.258747][ T5901] usb 7-1: USB disconnect, device number 61 [ 785.267181][ T5901] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 785.536993][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.708797][ T5930] usb 2-1: config 0 descriptor?? [ 785.761695][T13769] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 785.774553][T13769] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 785.789972][ T5930] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 785.829224][ T30] audit: type=1400 audit(1757772058.573:827): avc: denied { append } for pid=13790 comm="syz.7.2141" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 785.852040][ C1] vkms_vblank_simulate: vblank timer overrun [ 785.990692][T11596] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 786.128199][T13800] 9pnet_fd: Insufficient options for proto=fd [ 786.882758][T11596] usb 6-1: Using ep0 maxpacket: 16 [ 787.064703][T11596] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 787.085211][T11596] usb 6-1: config 0 has no interface number 0 [ 787.092514][T11596] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 787.420386][T11596] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 787.624894][T11596] usb 6-1: config 0 interface 41 has no altsetting 0 [ 787.635660][T11596] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9818, bcdDevice=d1.9a [ 787.644948][T11596] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.653132][T11596] usb 6-1: Product: syz [ 787.657332][T11596] usb 6-1: Manufacturer: syz [ 787.662020][T11596] usb 6-1: SerialNumber: syz [ 787.677748][T11596] usb 6-1: config 0 descriptor?? [ 787.707189][T13788] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 787.715144][T13788] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 788.243047][T11596] usb 2-1: USB disconnect, device number 16 [ 788.267195][T11596] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 788.507029][T13817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 788.565572][T13817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 789.486883][T13817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.498500][T13817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.409697][ T5974] usb 6-1: USB disconnect, device number 82 [ 791.581373][T13834] veth5: entered promiscuous mode [ 791.703018][ T5901] usb 7-1: new full-speed USB device number 62 using dummy_hcd [ 792.828592][T13836] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2149'. [ 792.973354][T13842] ptrace attach of "./syz-executor exec"[8735] was attempted by "./syz-executor exec"[13842] [ 792.994462][ T5901] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 793.110402][T13845] netlink: 'syz.7.2152': attribute type 1 has an invalid length. [ 793.953860][ T5901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 794.014098][ T5901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 795.811803][ T5901] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 795.859911][ T5901] usb 7-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 795.876613][ T5901] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.959036][ T5901] usb 7-1: config 0 descriptor?? [ 796.204830][ T5901] usb 7-1: can't set config #0, error -71 [ 796.261972][ T5901] usb 7-1: USB disconnect, device number 62 [ 796.283911][T13845] bond1: entered promiscuous mode [ 796.338335][T13845] 8021q: adding VLAN 0 to HW filter on device bond1 [ 796.439846][T13846] 8021q: adding VLAN 0 to HW filter on device bond1 [ 796.496702][T13846] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 796.563407][T13846] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 796.655558][T13846] bond1: (slave vcan1): making interface the new active one [ 796.708649][T13846] vcan1: entered promiscuous mode [ 796.746109][T13846] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 797.743173][T13847] syz.7.2152 (13847): drop_caches: 2 [ 798.024620][ T5901] usb 6-1: new low-speed USB device number 83 using dummy_hcd [ 798.496053][ T5901] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 798.532990][ T5901] usb 6-1: config 0 has no interface number 0 [ 798.593017][ T5908] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 799.006217][ T5901] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 799.047658][ T5901] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 799.071861][ T5901] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 799.084311][ T5908] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 799.092418][ T5908] usb 2-1: config 0 has no interface number 0 [ 799.098934][ T5901] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 799.147692][ T5901] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 799.153385][ T5908] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 799.181328][ T5901] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 799.216766][ T5908] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 799.223051][ T5901] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 799.247823][ T5908] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 799.249177][ T5901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.280159][ T5908] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 799.412501][ T5908] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 799.438868][ T5901] usb 6-1: config 0 descriptor?? [ 799.444802][T13871] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 799.452168][ T5908] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 800.616928][T13871] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 800.650165][ T5908] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 800.674526][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.720240][ T5908] usb 2-1: config 0 descriptor?? [ 800.722923][ T5901] usb 6-1: can't set config #0, error -71 [ 800.761193][T13875] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 800.774494][T13875] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 800.809705][ T5901] usb 6-1: USB disconnect, device number 83 [ 800.832873][ T5908] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 800.879739][ T5974] usb 2-1: USB disconnect, device number 17 [ 800.893977][T13913] netlink: 'syz.6.2166': attribute type 19 has an invalid length. [ 800.908469][ T5974] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 800.921075][T13913] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2166'. [ 800.930939][T13914] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2165'. [ 800.974281][ T5930] kernel read not supported for file /usbmon0 (pid: 5930 comm: kworker/0:6) [ 800.995835][T13913] netlink: 'syz.6.2166': attribute type 19 has an invalid length. [ 801.006208][T13913] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2166'. [ 801.019885][T13919] ptrace attach of "./syz-executor exec"[5854] was attempted by "./syz-executor exec"[13919] [ 801.096202][T13922] FAULT_INJECTION: forcing a failure. [ 801.096202][T13922] name failslab, interval 1, probability 0, space 0, times 0 [ 801.112237][T13922] CPU: 0 UID: 0 PID: 13922 Comm: syz.6.2168 Not tainted syzkaller #0 PREEMPT(full) [ 801.112267][T13922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 801.112278][T13922] Call Trace: [ 801.112284][T13922] [ 801.112292][T13922] dump_stack_lvl+0x16c/0x1f0 [ 801.112327][T13922] should_fail_ex+0x512/0x640 [ 801.112350][T13922] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 801.112372][T13922] should_failslab+0xc2/0x120 [ 801.112394][T13922] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 801.112411][T13922] ? __might_fault+0xe3/0x190 [ 801.112428][T13922] ? __might_fault+0x13b/0x190 [ 801.112444][T13922] ? getname_flags.part.0+0x4c/0x550 [ 801.112475][T13922] getname_flags.part.0+0x4c/0x550 [ 801.112505][T13922] getname_flags+0x93/0xf0 [ 801.112525][T13922] user_path_at+0x24/0x60 [ 801.112544][T13922] __x64_sys_mount+0x1fc/0x310 [ 801.112568][T13922] ? __pfx___x64_sys_mount+0x10/0x10 [ 801.112598][T13922] do_syscall_64+0xcd/0x4e0 [ 801.112622][T13922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.112640][T13922] RIP: 0033:0x7f45b4d8eba9 [ 801.112655][T13922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 801.112673][T13922] RSP: 002b:00007f45b5c50038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 801.112688][T13922] RAX: ffffffffffffffda RBX: 00007f45b4fd5fa0 RCX: 00007f45b4d8eba9 [ 801.112698][T13922] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: 0000200000000000 [ 801.112708][T13922] RBP: 00007f45b5c50090 R08: 0000000000000000 R09: 0000000000000000 [ 801.112718][T13922] R10: 0000000001000300 R11: 0000000000000246 R12: 0000000000000001 [ 801.112727][T13922] R13: 00007f45b4fd6038 R14: 00007f45b4fd5fa0 R15: 00007ffd40c25108 [ 801.112749][T13922] [ 801.364251][ T5901] usb 6-1: new full-speed USB device number 84 using dummy_hcd [ 801.556176][ T5901] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 801.566538][ T5901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 801.578213][ T5901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 801.588335][ T5901] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 801.630777][ T5901] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 801.652661][ T5901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.677534][ T5901] usb 6-1: config 0 descriptor?? [ 801.719017][ T5901] gspca_main: spca561-2.14.0 probing abcd:cdee [ 802.645618][ T5901] spca561 6-1:0.0: probe with driver spca561 failed with error -22 [ 802.679909][T13937] netlink: 'syz.7.2173': attribute type 1 has an invalid length. [ 802.692876][ T30] audit: type=1400 audit(1757772075.423:828): avc: denied { bind } for pid=13936 comm="syz.7.2173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 802.695393][ T5901] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 802.773192][ T30] audit: type=1400 audit(1757772075.423:829): avc: denied { write } for pid=13936 comm="syz.7.2173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 803.029141][ T5901] usb 6-1: MIDIStreaming interface descriptor not found [ 803.029925][T13944] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 803.195707][T13944] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 803.208841][ T5901] usb 6-1: USB disconnect, device number 84 [ 804.175071][T13949] ptrace attach of "./syz-executor exec"[10737] was attempted by "./syz-executor exec"[13949] [ 804.520116][T13937] macvlan2: entered promiscuous mode [ 805.227362][T13937] macvlan2: entered allmulticast mode [ 805.238898][T13937] bond2: entered promiscuous mode [ 805.257383][T13937] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 805.307057][T13937] bond2: left promiscuous mode [ 806.033069][ T5901] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 806.086645][T13967] FAULT_INJECTION: forcing a failure. [ 806.086645][T13967] name failslab, interval 1, probability 0, space 0, times 0 [ 806.102825][T13967] CPU: 1 UID: 0 PID: 13967 Comm: syz.5.2180 Not tainted syzkaller #0 PREEMPT(full) [ 806.102850][T13967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 806.102860][T13967] Call Trace: [ 806.102867][T13967] [ 806.102873][T13967] dump_stack_lvl+0x16c/0x1f0 [ 806.102900][T13967] should_fail_ex+0x512/0x640 [ 806.102921][T13967] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 806.102947][T13967] should_failslab+0xc2/0x120 [ 806.102967][T13967] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 806.102984][T13967] ? __alloc_skb+0x2b2/0x380 [ 806.103007][T13967] __alloc_skb+0x2b2/0x380 [ 806.103024][T13967] ? __pfx___alloc_skb+0x10/0x10 [ 806.103037][T13967] ? __print_lock_name+0xc0/0xe0 [ 806.103051][T13967] ? process_measurement+0x4a6/0x23e0 [ 806.103066][T13967] ? down_write+0x14d/0x200 [ 806.103082][T13967] alloc_skb_with_frags+0xe0/0x860 [ 806.103101][T13967] sock_alloc_send_pskb+0x7fb/0x990 [ 806.103114][T13967] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 806.103131][T13967] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 806.103143][T13967] ? find_held_lock+0x2b/0x80 [ 806.103156][T13967] ? dev_get_by_index+0x17c/0x380 [ 806.103172][T13967] packet_sendmsg+0x2054/0x5850 [ 806.103196][T13967] ? sock_has_perm+0x259/0x2f0 [ 806.103209][T13967] ? __pfx_sock_has_perm+0x10/0x10 [ 806.103223][T13967] ? __pfx_packet_sendmsg+0x10/0x10 [ 806.103242][T13967] ____sys_sendmsg+0xa95/0xc70 [ 806.103258][T13967] ? copy_msghdr_from_user+0x10a/0x160 [ 806.103271][T13967] ? __pfx_____sys_sendmsg+0x10/0x10 [ 806.103293][T13967] ___sys_sendmsg+0x134/0x1d0 [ 806.103306][T13967] ? __pfx____sys_sendmsg+0x10/0x10 [ 806.103336][T13967] __sys_sendmsg+0x16d/0x220 [ 806.103349][T13967] ? __pfx___sys_sendmsg+0x10/0x10 [ 806.103370][T13967] do_syscall_64+0xcd/0x4e0 [ 806.103385][T13967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.103396][T13967] RIP: 0033:0x7f04fad8eba9 [ 806.103406][T13967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 806.103417][T13967] RSP: 002b:00007f04fbcfe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 806.103427][T13967] RAX: ffffffffffffffda RBX: 00007f04fafd5fa0 RCX: 00007f04fad8eba9 [ 806.103434][T13967] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000003 [ 806.103440][T13967] RBP: 00007f04fbcfe090 R08: 0000000000000000 R09: 0000000000000000 [ 806.103446][T13967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 806.103452][T13967] R13: 00007f04fafd6038 R14: 00007f04fafd5fa0 R15: 00007ffdcfc0c718 [ 806.103466][T13967] [ 806.455165][ T5901] usb 2-1: Using ep0 maxpacket: 8 [ 806.464524][ T5901] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 806.507733][ T5901] usb 2-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 806.546500][ T5901] usb 2-1: config 179 has no interface number 0 [ 806.564530][ T5901] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 806.591357][ T5901] usb 2-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 806.617255][T13971] ptrace attach of "./syz-executor exec"[8735] was attempted by "./syz-executor exec"[13971] [ 806.618083][ T5901] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 806.642484][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.676575][T13974] ksmbd: Unknown IPC event: 3, ignore. [ 807.009243][T13962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.093840][T13962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 807.164127][ T5961] usb 2-1: USB disconnect, device number 18 [ 807.672884][ T5908] usb 7-1: new full-speed USB device number 63 using dummy_hcd [ 808.267475][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.499498][T13989] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 808.639501][T13989] comedi comedi3: 8255: I/O port conflict (0xffffffffffffffff,4) [ 808.663679][ T5908] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 808.693199][ T30] audit: type=1400 audit(1757772081.423:830): avc: denied { unmount } for pid=12671 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 808.699070][ T5908] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 808.715399][T13989] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 808.734154][T13989] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 808.741038][T13989] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 808.752237][ T5908] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 808.762550][ T5908] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 808.780147][T13989] comedi comedi3: 8255: I/O port conflict (0x12,4) [ 808.794168][T13989] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 808.812224][T13989] comedi comedi3: 8255: I/O port conflict (0xd,4) [ 808.813210][ T5908] usb 7-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 808.828183][ T5908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.831506][T13989] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 808.843373][T13996] FAULT_INJECTION: forcing a failure. [ 808.843373][T13996] name failslab, interval 1, probability 0, space 0, times 0 [ 808.865149][T13989] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 808.872581][T13989] comedi comedi3: 8255: I/O port conflict (0x1f,4) [ 808.876260][ T5908] usb 7-1: config 0 descriptor?? [ 808.879424][T13996] CPU: 0 UID: 0 PID: 13996 Comm: syz.5.2191 Not tainted syzkaller #0 PREEMPT(full) [ 808.879446][T13996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 808.879454][T13996] Call Trace: [ 808.879460][T13996] [ 808.879465][T13996] dump_stack_lvl+0x16c/0x1f0 [ 808.879489][T13996] should_fail_ex+0x512/0x640 [ 808.879508][T13996] ? fs_reclaim_acquire+0xae/0x150 [ 808.879529][T13996] ? tomoyo_encode2+0x100/0x3e0 [ 808.879551][T13996] should_failslab+0xc2/0x120 [ 808.879569][T13996] __kmalloc_noprof+0xd2/0x510 [ 808.879584][T13996] ? d_absolute_path+0x136/0x1a0 [ 808.879609][T13996] tomoyo_encode2+0x100/0x3e0 [ 808.879632][T13996] tomoyo_encode+0x29/0x50 [ 808.879652][T13996] tomoyo_realpath_from_path+0x18f/0x6e0 [ 808.879680][T13996] tomoyo_mount_acl+0x1ae/0x850 [ 808.879699][T13996] ? bpf_ksym_find+0x127/0x1c0 [ 808.879719][T13996] ? is_bpf_text_address+0x94/0x1a0 [ 808.879737][T13996] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 808.879755][T13996] ? __kernel_text_address+0xd/0x40 [ 808.879772][T13996] ? unwind_get_return_address+0x59/0xa0 [ 808.879789][T13996] ? arch_stack_walk+0xa6/0x100 [ 808.879827][T13996] ? tomoyo_domain+0xbb/0x150 [ 808.879840][T13996] ? tomoyo_profile+0x47/0x60 [ 808.879857][T13996] tomoyo_mount_permission+0x16d/0x420 [ 808.879877][T13996] ? tomoyo_mount_permission+0x14f/0x420 [ 808.879897][T13996] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 808.879936][T13996] security_sb_mount+0x9b/0x260 [ 808.879957][T13996] path_mount+0x15f/0x2000 [ 808.879980][T13996] ? __pfx_path_mount+0x10/0x10 [ 808.879999][T13996] ? kmem_cache_free+0x2d1/0x4d0 [ 808.880013][T13996] ? putname+0x154/0x1a0 [ 808.880035][T13996] ? putname+0x154/0x1a0 [ 808.880056][T13996] ? __x64_sys_mount+0x28d/0x310 [ 808.880073][T13996] __x64_sys_mount+0x28d/0x310 [ 808.880092][T13996] ? __pfx___x64_sys_mount+0x10/0x10 [ 808.880117][T13996] do_syscall_64+0xcd/0x4e0 [ 808.880139][T13996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.880154][T13996] RIP: 0033:0x7f04fad8eba9 [ 808.880167][T13996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 808.880182][T13996] RSP: 002b:00007f04fbcfe038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 808.880198][T13996] RAX: ffffffffffffffda RBX: 00007f04fafd5fa0 RCX: 00007f04fad8eba9 [ 808.880207][T13996] RDX: 0000200000000180 RSI: 0000200000000040 RDI: 00002000000000c0 [ 808.880217][T13996] RBP: 00007f04fbcfe090 R08: 00002000000001c0 R09: 0000000000000000 [ 808.880226][T13996] R10: 0000000000400080 R11: 0000000000000246 R12: 0000000000000002 [ 808.880235][T13996] R13: 00007f04fafd6038 R14: 00007f04fafd5fa0 R15: 00007ffdcfc0c718 [ 808.880256][T13996] [ 808.880272][T13996] ERROR: Out of memory at tomoyo_realpath_from_path. [ 808.899913][ T5908] gspca_main: spca561-2.14.0 probing abcd:cdee [ 808.904463][T13989] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 809.187307][T13998] ptrace attach of "./syz-executor exec"[12671] was attempted by "./syz-executor exec"[13998] [ 809.200068][ T5908] spca561 7-1:0.0: probe with driver spca561 failed with error -22 [ 809.210354][ T5908] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 809.221875][ T5908] usb 7-1: MIDIStreaming interface descriptor not found [ 809.239762][T13989] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 809.247804][T13989] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 809.299954][T13989] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 809.365801][T13989] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 809.372296][T13989] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 809.390887][ T5908] usb 7-1: USB disconnect, device number 63 [ 809.400923][T13989] comedi comedi3: 8255: I/O port conflict (0x80,4) [ 809.497521][ T30] audit: type=1800 audit(1757772082.213:831): pid=14004 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2192" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 809.798673][T13989] comedi comedi3: 8255: I/O port conflict (0x20001e58,4) [ 809.810260][T13989] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 809.827775][T13989] comedi comedi3: 8255: I/O port conflict (0x2000e67,4) [ 809.835830][T13989] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 809.842361][T13989] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 809.850503][T13989] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 809.858605][T13989] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff8,4) [ 809.892865][ T30] audit: type=1400 audit(1757772082.633:832): avc: denied { mounton } for pid=14005 comm="syz.8.2193" path="/proc/225/task" dev="proc" ino=48789 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 809.919976][ T30] audit: type=1400 audit(1757772082.633:833): avc: denied { create } for pid=14005 comm="syz.8.2193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 809.971228][ T30] audit: type=1400 audit(1757772082.683:834): avc: denied { read } for pid=14005 comm="syz.8.2193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 809.996595][ T30] audit: type=1400 audit(1757772082.683:835): avc: denied { sys_admin } for pid=14005 comm="syz.8.2193" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 810.214208][T14018] ptrace attach of "./syz-executor exec"[10737] was attempted by "./syz-executor exec"[14018] [ 810.273113][ T5916] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 810.442834][ T5901] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 810.442842][ T5916] usb 2-1: Invalid ep0 maxpacket: 32 [ 810.594516][ T5916] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 810.662888][ T5901] usb 6-1: Using ep0 maxpacket: 32 [ 810.683936][ T5901] usb 6-1: config 0 has an invalid interface number: 245 but max is 0 [ 810.692318][ T5901] usb 6-1: config 0 has no interface number 0 [ 810.712761][ T5901] usb 6-1: config 0 interface 245 has no altsetting 0 [ 810.722042][ T5901] usb 6-1: New USB device found, idVendor=1532, idProduct=94b5, bcdDevice=61.78 [ 810.863936][ T5916] usb 2-1: Invalid ep0 maxpacket: 32 [ 810.885454][ T5916] usb usb2-port1: attempt power cycle [ 811.087606][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.095916][ T5901] usb 6-1: Product: syz [ 811.100083][ T5901] usb 6-1: Manufacturer: syz [ 811.105025][ T5901] usb 6-1: SerialNumber: syz [ 811.128022][ T5901] usb 6-1: config 0 descriptor?? [ 811.419716][ T5961] usb 6-1: USB disconnect, device number 85 [ 811.464124][ T5916] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 811.620493][ T5916] usb 2-1: Invalid ep0 maxpacket: 32 [ 811.894799][ T5916] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 812.066424][ T5916] usb 2-1: Invalid ep0 maxpacket: 32 [ 812.198946][ T5916] usb usb2-port1: unable to enumerate USB device [ 812.322870][ T5908] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 812.469559][T14040] FAULT_INJECTION: forcing a failure. [ 812.469559][T14040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 812.488322][ C1] hrtimer: interrupt took 13748 ns [ 812.513269][ T5908] usb 7-1: Using ep0 maxpacket: 16 [ 812.531308][T14040] CPU: 1 UID: 0 PID: 14040 Comm: syz.7.2201 Not tainted syzkaller #0 PREEMPT(full) [ 812.531337][T14040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 812.531348][T14040] Call Trace: [ 812.531354][T14040] [ 812.531361][T14040] dump_stack_lvl+0x16c/0x1f0 [ 812.531389][T14040] should_fail_ex+0x512/0x640 [ 812.531415][T14040] _copy_from_user+0x2e/0xd0 [ 812.531441][T14040] io_sync_cancel+0x16d/0x6c0 [ 812.531465][T14040] ? __pfx_io_sync_cancel+0x10/0x10 [ 812.531494][T14040] ? __pfx_autoremove_wake_function+0x10/0x10 [ 812.531519][T14040] ? mark_held_locks+0x49/0x80 [ 812.531545][T14040] ? irqentry_exit+0x3b/0x90 [ 812.531571][T14040] ? preempt_schedule_thunk+0x16/0x30 [ 812.531597][T14040] ? preempt_schedule_common+0x44/0xc0 [ 812.531620][T14040] __io_uring_register+0x12dc/0x2440 [ 812.531645][T14040] ? __pfx___io_uring_register+0x10/0x10 [ 812.531666][T14040] ? __x64_sys_io_uring_register+0x159/0x280 [ 812.531694][T14040] ? __pfx___mutex_lock+0x10/0x10 [ 812.531722][T14040] ? __fget_files+0x20e/0x3c0 [ 812.531750][T14040] __x64_sys_io_uring_register+0x169/0x280 [ 812.531777][T14040] do_syscall_64+0xcd/0x4e0 [ 812.531801][T14040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.531818][T14040] RIP: 0033:0x7f5c8478eba9 [ 812.531833][T14040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 812.531850][T14040] RSP: 002b:00007f5c829a2038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 812.531868][T14040] RAX: ffffffffffffffda RBX: 00007f5c849d6090 RCX: 00007f5c8478eba9 [ 812.531880][T14040] RDX: 00002000000000c0 RSI: 0000000000000018 RDI: 0000000000000003 [ 812.531890][T14040] RBP: 00007f5c829a2090 R08: 0000000000000000 R09: 0000000000000000 [ 812.531901][T14040] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 812.531912][T14040] R13: 00007f5c849d6128 R14: 00007f5c849d6090 R15: 00007ffdccdcfff8 [ 812.531936][T14040] [ 812.532550][ T5908] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 812.745401][ T5916] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 812.931443][ T5908] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 812.959427][ T5908] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 812.969913][ T5908] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.989641][ T5908] usb 7-1: Product: syz [ 812.997372][ T5908] usb 7-1: Manufacturer: syz [ 813.002330][ T5908] usb 7-1: SerialNumber: syz [ 813.017053][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.035157][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.047960][ T5908] usb 7-1: config 0 descriptor?? [ 813.054762][ T5916] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 813.080630][ T5916] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 813.222010][ T5908] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 813.263282][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.339277][ T5908] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 813.538769][ T5916] usb 6-1: config 0 descriptor?? [ 813.821876][T14057] syz.7.2207 (14057): drop_caches: 2 [ 813.830217][T14057] syz.7.2207 (14057): drop_caches: 2 [ 814.106782][ T5908] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 814.115365][ T5916] plantronics 0003:047F:FFFF.0055: reserved main item tag 0xd [ 814.123651][ T31] INFO: task syz.3.1802:12563 blocked for more than 143 seconds. [ 814.139711][ T5908] em28xx 7-1:0.0: Config register raw data: 0x0d [ 814.140466][ T31] Not tainted syzkaller #0 [ 814.164997][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 814.593491][ T31] task:syz.3.1802 state:D stack:26704 pid:12563 tgid:12552 ppid:5850 task_flags:0x400140 flags:0x00004004 [ 814.611988][ T5916] plantronics 0003:047F:FFFF.0055: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 814.698773][ T31] Call Trace: [ 814.714448][ T31] [ 814.718319][ T31] __schedule+0x1190/0x5de0 [ 814.723526][ T31] ? __pfx___schedule+0x10/0x10 [ 814.739158][ T31] ? find_held_lock+0x2b/0x80 [ 814.764697][ T31] ? schedule+0x2d7/0x3a0 [ 814.775395][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 814.790695][ T31] schedule+0xe7/0x3a0 [ 814.800499][ T31] schedule_preempt_disabled+0x13/0x30 [ 814.820468][ T31] __mutex_lock+0x81b/0x1060 [ 814.826046][ T31] ? netlink_unicast+0x5a7/0x870 [ 814.831109][ T31] ? netlink_sendmsg+0x8d1/0xdd0 [ 814.836721][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 814.915426][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 814.920883][ T31] ? __asan_memset+0x23/0x50 [ 814.928544][ T31] ? __nla_validate_parse+0x600/0x2880 [ 814.934713][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 814.941182][ T31] nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 814.947296][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 814.955416][ T31] ? __nla_parse+0x40/0x60 [ 814.959859][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 814.967887][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 814.975689][ T31] genl_family_rcv_msg_doit+0x206/0x2f0 [ 814.982328][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 814.990004][ T31] ? bpf_lsm_capable+0x9/0x10 [ 815.007637][ T31] ? security_capable+0x7e/0x260 [ 815.012857][ T31] genl_rcv_msg+0x55c/0x800 [ 815.017644][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 815.023090][ T31] ? __pfx___schedule+0x10/0x10 [ 815.028263][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 815.036132][ T31] ? mark_held_locks+0x49/0x80 [ 815.042608][ T31] netlink_rcv_skb+0x158/0x420 [ 815.053982][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 815.061671][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 815.068253][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 815.073839][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 815.079203][ T31] ? selinux_netlink_send+0x578/0x830 [ 815.085514][ T31] ? is_vmalloc_addr+0x86/0xa0 [ 815.091417][ T31] genl_rcv+0x28/0x40 [ 815.095578][ T31] netlink_unicast+0x5a7/0x870 [ 815.100895][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 815.106989][ T31] ? security_netlink_send+0x24/0x210 [ 815.113014][ T31] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 815.119709][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 815.125733][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 815.131131][ T31] ____sys_sendmsg+0xa95/0xc70 [ 815.136360][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 815.141908][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 815.150609][ T31] ___sys_sendmsg+0x134/0x1d0 [ 815.158824][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 815.167295][ T31] __sys_sendmsg+0x16d/0x220 [ 815.171989][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 815.177232][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 815.182250][ T31] do_syscall_64+0xcd/0x4e0 [ 815.186876][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.192942][ T31] RIP: 0033:0x7effdbf8eba9 [ 815.197511][ T31] RSP: 002b:00007effdcdcc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 815.206242][ T31] RAX: ffffffffffffffda RBX: 00007effdc1d6360 RCX: 00007effdbf8eba9 [ 815.215122][ T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000b [ 815.227131][ T31] RBP: 00007effdc011e19 R08: 0000000000000000 R09: 0000000000000000 [ 815.235341][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 815.243617][ T31] R13: 00007effdc1d63f8 R14: 00007effdc1d6360 R15: 00007ffef3b00478 [ 815.251729][ T31] [ 815.254900][ T31] [ 815.254900][ T31] Showing all locks held in the system: [ 815.264324][ T31] 1 lock held by khungtaskd/31: [ 815.269217][ T31] #0: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 815.279350][ T31] 2 locks held by getty/5607: [ 815.286449][ T31] #0: ffff88814d78e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 815.297133][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 815.307690][ T31] 2 locks held by syz.4.1304/10577: [ 815.313321][ T31] #0: ffffffff90428590 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 815.321641][ T31] #1: ffffffff8e9dabe8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 815.332496][ T31] 2 locks held by syz.3.1802/12563: [ 815.338121][ T31] #0: ffffffff90428590 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 815.346731][ T31] #1: ffffffff8e9dabe8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 815.357604][ T31] 6 locks held by syz.6.2200/14065: [ 815.364678][ T31] [ 815.367120][ T31] ============================================= [ 815.367120][ T31] [ 815.392939][ T31] NMI backtrace for cpu 1 [ 815.392954][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 815.392973][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 815.392983][ T31] Call Trace: [ 815.392988][ T31] [ 815.392995][ T31] dump_stack_lvl+0x116/0x1f0 [ 815.393021][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 815.393050][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 815.393077][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 815.393096][ T31] watchdog+0xf0e/0x1260 [ 815.393119][ T31] ? __pfx_watchdog+0x10/0x10 [ 815.393136][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 815.393158][ T31] ? __kthread_parkme+0x19e/0x250 [ 815.393190][ T31] ? __pfx_watchdog+0x10/0x10 [ 815.393208][ T31] kthread+0x3c2/0x780 [ 815.393226][ T31] ? __pfx_kthread+0x10/0x10 [ 815.393245][ T31] ? rcu_is_watching+0x12/0xc0 [ 815.393265][ T31] ? __pfx_kthread+0x10/0x10 [ 815.393283][ T31] ret_from_fork+0x56a/0x730 [ 815.393299][ T31] ? __pfx_kthread+0x10/0x10 [ 815.393316][ T31] ret_from_fork_asm+0x1a/0x30 [ 815.393346][ T31] [ 815.393352][ T31] Sending NMI from CPU 1 to CPUs 0: [ 815.512010][ C0] NMI backtrace for cpu 0 [ 815.512028][ C0] CPU: 0 UID: 0 PID: 14065 Comm: syz.6.2200 Not tainted syzkaller #0 PREEMPT(full) [ 815.512043][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 815.512051][ C0] RIP: 0010:unwind_next_frame+0x4f3/0x20a0 [ 815.512071][ C0] Code: 44 24 28 48 8b 74 24 20 48 8b 44 24 18 8b 90 b8 03 00 00 4c 89 f9 4c 89 c7 e8 19 f1 ff ff 48 89 c1 48 85 c0 0f 84 05 fe ff ff <48> b8 00 00 00 00 00 fc ff df 4c 8d 79 05 4c 89 fa 48 c1 ea 03 0f [ 815.512084][ C0] RSP: 0018:ffffc90003dbecf8 EFLAGS: 00000286 [ 815.512096][ C0] RAX: ffffffff914e7544 RBX: 0000000000000001 RCX: ffffffff914e7544 [ 815.512104][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff90c57260 [ 815.512112][ C0] RBP: ffffc90003dbedb0 R08: ffffffff914e7550 R09: 0000000000000000 [ 815.512121][ C0] R10: 0000000000000001 R11: 0000000000011509 R12: ffffc90003dbedb8 [ 815.512129][ C0] R13: ffffc90003dbed68 R14: ffffc90003dbed9d R15: ffffffff82150980 [ 815.512138][ C0] FS: 00007f45b5c0e6c0(0000) GS:ffff8881246b5000(0000) knlGS:0000000000000000 [ 815.512158][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 815.512167][ C0] CR2: fffffffffffffffd CR3: 000000005321f000 CR4: 00000000003526f0 [ 815.512175][ C0] Call Trace: [ 815.512180][ C0] [ 815.512185][ C0] ? __alloc_frozen_pages_noprof+0x261/0x23f0 [ 815.512202][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 815.512220][ C0] arch_stack_walk+0x94/0x100 [ 815.512237][ C0] ? __alloc_frozen_pages_noprof+0x261/0x23f0 [ 815.512252][ C0] stack_trace_save+0x8e/0xc0 [ 815.512268][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 815.512286][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 815.512306][ C0] save_stack+0x160/0x1f0 [ 815.512319][ C0] ? __pfx_save_stack+0x10/0x10 [ 815.512330][ C0] ? post_alloc_hook+0x1c0/0x230 [ 815.512348][ C0] ? get_page_from_freelist+0x132b/0x38e0 [ 815.512360][ C0] ? __alloc_frozen_pages_noprof+0x261/0x23f0 [ 815.512375][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 815.512394][ C0] __set_page_owner+0x91/0x550 [ 815.512408][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 815.512420][ C0] ? bad_range+0x261/0x4c0 [ 815.512435][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 815.512453][ C0] post_alloc_hook+0x1c0/0x230 [ 815.512472][ C0] get_page_from_freelist+0x132b/0x38e0 [ 815.512489][ C0] ? prepare_alloc_pages+0x3c2/0x610 [ 815.512505][ C0] ? rcu_is_watching+0x12/0xc0 [ 815.512522][ C0] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 815.512535][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 815.512556][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 815.512570][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 815.512583][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 815.512597][ C0] ? find_held_lock+0x2b/0x80 [ 815.512615][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 815.512633][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 815.512649][ C0] ? policy_nodemask+0xea/0x4e0 [ 815.512664][ C0] alloc_pages_mpol+0x1fb/0x550 [ 815.512682][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 815.512700][ C0] folio_alloc_mpol_noprof+0x36/0x2f0 [ 815.512718][ C0] shmem_alloc_folio+0x135/0x160 [ 815.512736][ C0] shmem_alloc_and_add_folio+0x499/0xc20 [ 815.512758][ C0] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 815.512778][ C0] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 815.512793][ C0] shmem_get_folio_gfp+0x67f/0x1600 [ 815.512808][ C0] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 815.512821][ C0] ? filemap_map_pages+0xf58/0x1670 [ 815.512836][ C0] shmem_fault+0x1fe/0xa30 [ 815.512849][ C0] ? __pfx_shmem_fault+0x10/0x10 [ 815.512862][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 815.512877][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 815.512890][ C0] __do_fault+0x10d/0x490 [ 815.512904][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 815.512916][ C0] do_pte_missing+0xf50/0x3ba0 [ 815.512935][ C0] ? find_held_lock+0x2b/0x80 [ 815.512950][ C0] ? __handle_mm_fault+0x14fd/0x2a50 [ 815.512970][ C0] __handle_mm_fault+0x152a/0x2a50 [ 815.512991][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 815.513010][ C0] ? __pte_offset_map_lock+0x174/0x310 [ 815.513026][ C0] ? find_held_lock+0x2b/0x80 [ 815.513043][ C0] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 815.513063][ C0] handle_mm_fault+0x589/0xd10 [ 815.513082][ C0] __get_user_pages+0x551/0x34a0 [ 815.513102][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 815.513121][ C0] populate_vma_page_range+0x267/0x3f0 [ 815.513138][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 815.513159][ C0] ? __pfx_find_vma_intersection+0x10/0x10 [ 815.513175][ C0] ? do_mmap+0x69c/0x1210 [ 815.513191][ C0] __mm_populate+0x1d8/0x380 [ 815.513208][ C0] ? __pfx___mm_populate+0x10/0x10 [ 815.513225][ C0] ? up_write+0x1b2/0x520 [ 815.513238][ C0] vm_mmap_pgoff+0x37f/0x470 [ 815.513255][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 815.513269][ C0] ? rcu_is_watching+0x12/0xc0 [ 815.513284][ C0] ? kfree+0x24f/0x4d0 [ 815.513303][ C0] ? __x64_sys_futex+0x1e0/0x4c0 [ 815.513314][ C0] ? __x64_sys_futex+0x1e9/0x4c0 [ 815.513327][ C0] ksys_mmap_pgoff+0x7d/0x5c0 [ 815.513342][ C0] ? xfd_validate_state+0x61/0x180 [ 815.513360][ C0] ? __sys_setsockopt+0x1c0/0x230 [ 815.513375][ C0] __x64_sys_mmap+0x125/0x190 [ 815.513389][ C0] do_syscall_64+0xcd/0x4e0 [ 815.513405][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.513418][ C0] RIP: 0033:0x7f45b4d8eba9 [ 815.513428][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 815.513440][ C0] RSP: 002b:00007f45b5c0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 815.513452][ C0] RAX: ffffffffffffffda RBX: 00007f45b4fd6180 RCX: 00007f45b4d8eba9 [ 815.513461][ C0] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000200000000000 [ 815.513469][ C0] RBP: 00007f45b4e11e19 R08: ffffffffffffffff R09: 0000000000000000 [ 815.513477][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 815.513484][ C0] R13: 00007f45b4fd6218 R14: 00007f45b4fd6180 R15: 00007ffd40c25108 [ 815.513497][ C0] [ 815.514135][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 815.514146][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 815.514164][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 815.514173][ T31] Call Trace: [ 815.514180][ T31] [ 815.514186][ T31] dump_stack_lvl+0x3d/0x1f0 [ 815.514207][ T31] vpanic+0x6e8/0x7a0 [ 815.514230][ T31] ? __pfx_vpanic+0x10/0x10 [ 815.514253][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 815.514274][ T31] panic+0xca/0xd0 [ 815.514286][ T31] ? __pfx_panic+0x10/0x10 [ 815.514300][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 815.514322][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 815.514338][ T31] ? watchdog+0xd78/0x1260 [ 815.514354][ T31] ? watchdog+0xd6b/0x1260 [ 815.514371][ T31] watchdog+0xd89/0x1260 [ 815.514391][ T31] ? __pfx_watchdog+0x10/0x10 [ 815.514406][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 815.514425][ T31] ? __kthread_parkme+0x19e/0x250 [ 815.514447][ T31] ? __pfx_watchdog+0x10/0x10 [ 815.514463][ T31] kthread+0x3c2/0x780 [ 815.514479][ T31] ? __pfx_kthread+0x10/0x10 [ 815.514495][ T31] ? rcu_is_watching+0x12/0xc0 [ 815.514513][ T31] ? __pfx_kthread+0x10/0x10 [ 815.514529][ T31] ret_from_fork+0x56a/0x730 [ 815.514543][ T31] ? __pfx_kthread+0x10/0x10 [ 815.514558][ T31] ret_from_fork_asm+0x1a/0x30 [ 815.514586][ T31] [ 816.238960][ T31] Kernel Offset: disabled [ 816.243266][ T31] Rebooting in 86400 seconds..