last executing test programs: 20m2.856929833s ago: executing program 1 (id=1355): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000380)=0x14) chdir(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x71}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0xc, &(0x7f0000000180)=0x7, 0x4) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x6, 0x9, &(0x7f0000000080)={{0x1, @empty, 0x2, 0x43, 'fo\x00', 0x2, 0x0, 0x3a}, {@private=0xa810101, 0x4, 0x0, 0x0, 0xba0, 0xdffffffe}}, 0x44) sendto$netrom(r5, &(0x7f0000000040)="e22cfc882aa7003cfb8e", 0xa, 0x80, &(0x7f0000000100)={{0x3, @bcast, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}, 0x48) syz_usb_connect(0x2, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c010203010902240001010000100904690202ff5aa30009050402100000fa000905820240"], 0x0) 20m0.312624269s ago: executing program 1 (id=1362): syz_open_procfs(0x0, 0x0) r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close(r2) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000480)={'rti800\x00', [0x2f00, 0x1, 0xd09a, 0xdcff9e6f, 0x3, 0x0, 0x20002004, 0x3, 0xffe, 0xf723, 0xc, 0x3, 0x1000002, 0x0, 0xffff, 0x100006, 0x5, 0x6, 0x1000, 0x30000, 0xfff, 0x2, 0x2, 0xe2de, 0x2, 0x5, 0xff, 0xb, 0x7, 0x7, 0x470f]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) semop(0x0, &(0x7f0000000180)=[{0x0, 0x203}, {}], 0x2) semctl$IPC_RMID(0x0, 0x0, 0x0) 19m59.908379072s ago: executing program 1 (id=1364): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae0000008500000007"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x90) statx(0xffffffffffffffff, 0x0, 0x48e0cdf8471afff4, 0x54663aafb2d54055, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load default user:t0000000000000004096 '], 0x31, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) syncfs(0xffffffffffffffff) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xc000000, {0x5, 0x4c4e, 0x7ff, 0xfffe}}}]}, 0x38}}, 0x24040044) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x8, 0x722, 0xed, 0x7, 0x7f, 0x3f, 0xb763599953cb090f, {0x10000, 0x6fd8e84b}, 0x3, 0xed}}) syz_emit_vhci(&(0x7f0000000780)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_reconf_req={{0x19, 0x0, 0xc}, {0x8, 0x3a, [0x7, 0x5, 0x2, 0x3]}}}}, 0x19) 19m59.330919921s ago: executing program 1 (id=1366): openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x10780, 0x0) r0 = gettid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) tkill(r0, 0xb) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002800"], 0x14}, 0x1, 0x0, 0x0, 0x4040016}, 0x800) r2 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)='R', 0x1}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/9, 0x9}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8931, &(0x7f0000000000)={'veth1_vlan\x00', @random="8262e17cdcbf"}) openat$selinux_user(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x22020600) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000200)='.\x00', 0x10000a0) dup(r5) syz_io_uring_setup(0x7669, 0xfffffffffffffffe, 0x0, 0x0) 19m58.635164057s ago: executing program 1 (id=1368): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0xfffd, 0x100000001, 0x10000, 0xfffffdff}, 0x1c) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x8000, 0x3000, 0x34343452, 0x4, 0x7, [{0x592e3538, 0x2}, {0xfffffff7, 0x9}, {0x1, 0x9}, {0xe53, 0x7}, {0x7000, 0x8}, {0x7, 0xc}, {0x8, 0x32}, {0x1, 0xfffffff0}], 0xd7, 0x4, 0x3, 0x2, 0x4}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x100008b}, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0x10b, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x4f2a, 0x1, 0x10000, 0x4, 0x1000, 0xcc7, 0x8, 0x7, 0xa, 0x6, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e58, 0xb, 0xe69, 0x3d, 0x8, 0x4088, 0x0, 0xfffffff8]}) ioctl$COMEDI_DEVINFO(r2, 0x80b06401, &(0x7f0000000040)) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f00000000c0)="b95d77ad55cbbe17f1b50f815ff7ceb2183cc01588050b74afc86689a1d8a1ff08000000db6c902c77c7addc23d3be2c30144196983df419a801f47ae3edfbd0657b8d36c08c907da315d2b0f61b524ececf680463b0a1c53632b79ac9a4b6f8f1ce00f2b194ce2556", 0x69, 0xfffffffffffffffe) socket$inet_sctp(0x2, 0x1, 0x84) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000040)=""/2, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r4, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x8}) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000001100010000000000000000000000000a"], 0x28}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x15, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x200}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24044075}, 0x24040808) 19m57.662101307s ago: executing program 1 (id=1371): r0 = syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0x5e99, 0x3000, 0x3, 0x19a}, &(0x7f0000000040), &(0x7f00000000c0)) r1 = epoll_create1(0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000200)={0xa0000019}) finit_module(r2, 0x0, 0x3) ppoll(&(0x7f00000001c0)=[{r0, 0x20}], 0x1, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r7, r7, 0x2f, 0x0, @void}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x3ff, 0x3, 0x4}, 0x51, [0xd4, 0x6, 0x9, 0x8a4, 0x2, 0x2, 0x7fffffff, 0x80000001, 0x5, 0x1, 0x101, 0x3c6, 0x7, 0x6, 0xf70, 0x3, 0xe7, 0x7, 0x401, 0xbc5e, 0x0, 0x1, 0x8, 0xffff, 0xe, 0xe, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1ff4, 0x1, 0x1, 0x80000000, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x1, 0x1, 0x6, 0x2, 0x5, 0x9, 0x5, 0x9, 0x0, 0x3a23, 0x1000, 0x8, 0x2, 0x6, 0x7ff, 0xb8547353], [0x80000000, 0xffffffff, 0x4, 0x6, 0x7ffffffd, 0x1, 0x553, 0x6, 0x2, 0xfffffffc, 0x8, 0xc, 0x36, 0xa, 0x48, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x4, 0x99d, 0x8, 0x0, 0xd, 0x400, 0x0, 0x6e38, 0x8000, 0xa, 0x2, 0x3, 0x0, 0x5, 0x7, 0x4, 0xd, 0x9, 0xfff, 0x4, 0x0, 0x40, 0x1, 0x8, 0x5, 0x8, 0x0, 0x34f1, 0x1ff, 0x4, 0x1b2c5a17, 0x0, 0x9, 0xc, 0x0, 0xffffffff, 0x1, 0x6, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x6, 0xdb8, 0x9, 0x4, 0x2, 0x6, 0x5, 0x5, 0x3, 0x5, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x43, 0x69e, 0x8, 0xffff, 0x0, 0x0, 0x8, 0x2, 0x4, 0x800, 0x7, 0x9, 0x0, 0x0, 0x1, 0xfffffffe, 0x3, 0x0, 0x9, 0x8c0, 0x9, 0x2, 0x7, 0x7, 0x6, 0xfffffffa, 0x81, 0x8, 0xffffff20, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x8000, 0x40, 0x3, 0x2, 0xa, 0x9, 0x2, 0xffffff00, 0xda15, 0x7f, 0x3, 0x11], [0x0, 0x897, 0x8, 0x246d, 0x6, 0x101, 0xfffff410, 0xd, 0x7ff, 0x606, 0x4, 0x9, 0x80400001, 0x2, 0xb, 0x2, 0x7, 0x1, 0x7, 0x2, 0x7ff, 0x3ff, 0x0, 0x2, 0x6, 0x100, 0x1, 0xec9b, 0x61c8, 0x6, 0x0, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0xe, 0x4000006, 0x7, 0x1, 0x9, 0x0, 0x4, 0x100009, 0x100, 0x3, 0x3c, 0x1000, 0x5, 0x2, 0x15, 0x8000, 0x7, 0x81, 0x5, 0x7, 0xfffffffc, 0x4, 0x6, 0xeff]}, 0x45c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r9, &(0x7f0000000140), 0x4924b68, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r8, 0x4) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r10, &(0x7f0000002140)=""/17, 0x11, 0x0) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) vmsplice(r3, &(0x7f0000002740)=[{&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000000180)}, {&(0x7f0000000280)="df65c2677e36fbf163d006c50a84a52566e55d4f5a2725b1cef87951f855cc4f8db31b701e8521a23c54a74e66e70b615bea40cb8d38682a2b73ee2afb3fd2ce3937", 0x42}, {&(0x7f0000000300)="46bc7190264729f2fbff45c0f3c240c97d440c910392bee4bd4582ffcbb86176fec96e2e3efb2afce6c8e4c837aeb4982f3e80381426da886f3001776767e39216f4f962dc06bfab0e98adb83afb3cba389eec96cc92e0cee60b5619a9e0af3c20e851b1", 0x64}, {&(0x7f0000000380)="5f963ef352f82e4f055336708080cdf9ad", 0x11}, {&(0x7f00000003c0)="980d476142b95fb86915b26ca233abd9cf3552cc7774be726c7bda0434185ad233ee6bcea12c4fe46c9e812c12389203b20ee03ae492bb1ec56c2b254d4dfaf95b5dd510a243c4a27de02970c9e183f377349bb2d747683b134e", 0x5a}, {&(0x7f0000000600)="f7f3846dfb869615f47c404746b7a8a9c46a6a4845f88f4f35c4e4b053ed2360100c8dddbfd1d76a499843f785382c92976e83ee311fde6469a3d4cb3ee7e1c9cad8329c3b9b4c5e39614e029ba59bfd0b46bcb303417550151cbdf18979e42baed872f9590225a2420880d5c11700ca6754353eb0e30b930b4695eec379114607a2148aa6bbc51e7522795a82b1031f2b9a0d8e31c693cc8f38eab5ecf8ac3695b24046d18a7689c2ba3968b806c19fffe1707c96fce07a2844522f2d60e37fc54ae6672d582888d4de20c42fbf29", 0xcf}, {&(0x7f0000000440)="f4156b75e769434dc4d289d8bfeadc323162302d0ccfa734afd01499f5", 0x1d}, {&(0x7f0000001740)="512f38e6f5bc5298147ad3148755655cb8a39998e2cad98ab0434a985cff9024181bdac95fed9c3301a808495eca7ab044fad7a70a7a51961b19883b6176d90076ec158ca1210aaf449c79e4b9aba5d94ee8b1999e14605a07a5d103f1666fef3f18f98af57384ea2f467cec9ef1ca5bd36fcf7460fb72b8581299d7e0cb360f345c3a25905e0b6c33f4c3eb133f9c368e6caf0e48514f7cd7bc36ed6b0d464d62084de784426381b47cec4095c065ae99d947923c9295fe6728b017f492ff7a7a78f48623a6c742f24d8f938e31cf0158d7e3798ff66f21a62e36ec0cf1187303216369136127c074ed57108d0f23b3369ef61ab2075294ff9b6a9b375629d0852a9080335f0518b52f9e0d46c821bf145e769a29af1c0a022a2c3fb7ba003e2beef6660f56894cf62c1d4fcd755a63570787a96a8b3c81a0a029345b975c7d6352db128c9d36705c8845ae88ae70d35bd4c2252fe4e6ad2d25c6e9ae9a2e985183836370e67d9b6e56768ed3e959f45d3a9f90a0eaf0c53276fd2496625b35a419675ec496c05768abffbc38f0d8c4ecf32e118fdaf74e63b82cf07eaaae2024bf8c8e73b1f5244715a318b736e679e99ea39945bea4b1834f22883da00621629d1bbde351ae52f0f0a29442a36b7174d47a1a2865ae4817b4648f5df585053f09bbee0c9a3d040f6aa7473314942cfda9dd29888883a01bf69e5a30b9aa314267648ae7413f3d49ec9417d2cd08691657b50609f51a3e816d3560ac46aa923baa5b571551f46e3a2f8b0fbe7c05e7a659471eefe434a91026eb46672a924e79c27c6e13add901532978e91f38ca8ee09480e7e133d2e54170213bf8ed2bc20294bbb8e2827cfa2700394d3f13f6e73beb1b662e4a702edeb8efd28d630e720f3803fe7e3c1ef16d3abf5cef10139f2f7bc072d9162cdc71f0e7613211f14fb10280cf3399893bebdd9ce59b2384fd09d6582aa3d40cfcc91919957e26262592e228990dcaa9d3f7003cc07908fcda9031127bb85609066589c8836078b29fceaff90b7834d1e13ddba078cffa2c1371ef1803405c1715c1465713557a61f7344b90626beb09371d0837331b9567430a89faa11c7c3fa665fa0389a9d14883e10bddd8acd1370d8c1000c4917c47036a1f24ea4e84739a9d711c9801d7f008090ac25a7f16a4a997683779568bddc8ed6fdd2e766642d89dbec5b03f480950b87114b347e74b8715df7d680319ac3f21792ee467ff8d7e25543ff007405222d632512bbcb796675afc08bc47e8c7657996e26d89babdbe92976f1bf34b8e76f20b8d4c0f10868964b69e6f10a3e44d237327afb41946b660b1c74b80cabcd6808d39c91120707a5240a7ec7fd71a845f3173c983fd8fdc4af424d223d53da0f3f890d61278ad71b264450073393d9f92fdc088e57082359969cb1e227e1a50d3fd7d8bb435815f2b645e0e4a3bf44b95d8e4d621109c8d873f9075d421b7c9e12546ddf2cacf3097088f452c1443bd575c25063d5b1a4fc1f09f5eba1781870c250e31858c89820544b950ac9603eeb1e6334be203b7c09f35c2673300bc1f3052f9c470b6a38cc431d5977e48b21fa76e781ea96126ccf54b402aaeaeabe8ea7cd043365b6ec7aeb063fe6d0c28f97b1e504010f161a78e464370e6d9364028f605f51b62bc11e80a808f53bed96e0a73f26e7fe1f5c8f986f1975d3b65e7e2df2b0a3231146eb69afe065e76b2f8c19cf36813824f4f334212354f8d4a29bc632ff105a2effd17095013e336746d1bb46a69ed3f541e6299c578126588eea113cdf4226fab6d12364f6642a77b24272c282060c1324b7844fadc357160862ebe71f1a1cbe4948dc3000a7dd0fc47fbf3a1ff34fbd134b95f8befbedfb3126c50689e3a0e3c582a61686e58e62bf37724284e8e9ca14ac95d580ecb0e8d383942499f36ec3bd4c8d768ddfd9a44c7a92bf31641b05c0986c8ba7f69c6cb942b844625efe16eb2ddf60fd2a6f6b216070e671fc8a9f60b38cb4865d55d1431033e78d057b49af80fc5bf99fbc3a224af06257b5c5d3b59d0adbabfd75c0e92df1f263a56cb690ba777eef5b00a7b876010c39309bfb03ac2f68b0546b198882a13c8b01fa9e9aa4b3bfe5a1d17f3c3c09fd1b8acc36181948724445f71ad6778a8007a7974c8b9d50009d61bf7b2ac61c9c3820d69260c1ed981cf31fe7efbb161f53a41d03c848b203079b44ff5c0b7a187f5ef30a72e88b29623dfba70ef3f8bcab478e16d8498fe60ff29fb7e460f2cd94e0ebc44d5c1f5808bec7336fef1f5b0dd840ffbccaf276ca349bf5922101e196aafd379c214584c3dffb46425edef09e5e110e0f411150de694ac8322f0518b84800a302fa37c54c9e9287ebe3b1540ecab512cfb50f11bf5fbd94bc61836895bd40e753a2ed12cf29ab7e3d377a9cb9532ffe9008aa5453908897cb501573dd09b7c985e57e8a19da45cf265033154f9ee77875eea25f4f9126fab13a77b54d8a1815078f08fabe53454571cb9c695ec1a68d4498b1416780339e0b8da6a17805b6f3cc23fc798661181de948b8dd3f5b322d7dca61de0e046e3f63f98a4c908bc911f6fc79e568006fe79b223e6928c97de2ebf38d9c67a5a54278ca3aaf5b7f3cc00cf1d5e777364b1e92059dc21fbbdba2a560c115cc33368975e2b1a15119fb65a7310a904a114aa4587e18110ba35936707861563c90dfbfc60188fef3de1b24499549d05ccc548beef7359efc593bc625a910cebacaf151bf5e36364ce884c9bf559a900e7048911850961d5bf480fe33d1197af2a8dde7f8cfe6abf0d468f096fc84425aeffd31da73a477c2db10a2e755566ba48935672fa746b501ca2e583bf2a338bca5726a0ae51204bac8d3b79603db028a7a9d7790723de42f14a56c1a4f746d4edd511cbbfd701a46e4cc57be4392ebc48708c083fa54e20ddb4635c99d332222792de6c21536055e9b2a63c6babc5f87397fac23a51f49e3f4ff95fc2475c1e25ec07bca034a4246e2bbb86d5d02635936a175d4be91c5e2e65e3c649308de08dc1b16348bf205457e1db3ae5944023b8f1096afc296877ffebddc1f0b91d3843847deb3cebe343671e4e37dd98b59c2ec7448ece1c4ca7fe82d79224501197d81fe6130cea9441e8dd83194b1cc54c49a65dac22a322cc8593c1d2f8965dd4aedef2046c7c0850a01d27831a85d62ab95b83f60ef9c5ccfc37e13ad1f2a930a4701214ae10b557fc6ecee1d3b1462986a4a3edb9e5db7b1fbb0275a8316aa3c35f8cabf0b0ee7474f133564c4a3c7fdc7751c7cc1714d140eae424d2ccdacb60a563f20c71fa480f553bc247bfc82b34963df2139ca739f66a031e2cfa57ab2cc8ee167c00e6e0b9a82442ebd75dd5215eccbf960b4c2480de677dc69c688d461549abe8d9bd1212513cc06d66106e2670b8f1fced882910e8014b0283eac029b66abb8de2bcf50fdd199cf9ca7f979298ac098ee6e09a36341f1e543c102801dfb164e8ab3d4865b9ac2e9e35acd4cb40b7443f2600a5e09e38f72af4206660f3ebe58da4b3dd0118fbc8590df927e1a9da521dfb6b45315362c1d7b88aa2f0011a736a67e98a5fb99a3ccbdddd56e0b98c08f8127483e04909c43a7cb22d2d10b628f61abb9bc32f9e3f873fe19430a2de19a95a70fbbb03faa31e906fea7fb094f901149341824a195a793987235eb6185d6778c117ebf4d8fbed7a4a92825b36ec4433e754c632e4635bdd23fe540442f5395b43d82a1069c83931ab4baa322a8b9698afba71455a4bb6f459b1fdd31e885137f99ac676add594a089380005dcd9455d4271dcb6246cf7c77c5e582379a50d8181fb45083cdbe356e8a4839a544c3e330a4fc5f1baf5ee7b71a393183dfd4e050a6cad4980f55f2c163a967ca4ff045f7b5787bcd91e8b6b17d9586a5de80ef61bb3c8dedaeb8176463dab5f94163d003ed264808a405a8d54b9693490e890b70fe70d374bbf8cdd75b576c7cd99f28d535d61646254e0ffc8fbd38abcd8cc19e7402e850297d6e4138f7223a64a95b1ab1119e2861529f4bb294603a6a3f2c7e190796484eb4c22692c9371cbc76d1ccfbe85bad5abad33a3d1372648f0d21faf070fc9a88c95c680e75ee0af32a628cfb7c95e66b61375b187c3fcfaf7a3aa69f0a556692c1891bfba5761c62afa4b7f09f00239f5955cccbdce3ef8f075ed9638dce0d551674f73a926463af5a6f3623ba3694a28b2412c09034f59eb578b588b2d2d6f80915709b8b8dcc426d60b171cbeea0aee5b6f9b3daa4f6ea0ec8c898b408807dba2752c4190c226ebcbcaeb2b90e27bd4b6010ed9d5586923fd1e9a7407839edf7d6ab556991b997893ceff75a1b966eaf539b241f52d0c0cc0f33234fb995c8c49016629efbf70497d80f6e859294e5ba4d00cf5394d75c34501f7dd647ba35ecdb396ac2a6077100adb52404a14a050c92a7849e52079c4d9e19fb0078f7e10285f60d1e1ed4e3f0b8dba7337ae082fcb765ab1893cf9598d16248bbbc30284478360313757f6fc0b37ecec3bbfb0e2659fb41e716fbe2da2bc636bfec8fd2670dfef4e19052a3c245d415c6bc044312f8a4dc7ad693c7350e9cc8c4b0d3284595e8dd73c2ddbf0830746c9d088792574eb08078cd665165dd0a6de926cbf9e8ee5a79b438729b3fd2ffe664265f5fea31ed484650968336c4cc63033cdbe5e2b9ea6927329a5a856076d6065c1788d5aef0e496fd618e77e9d3aadbe21afc5170b7348be992c106c3b4bb9f0d4b8e7f861dabe934da77f3f9933bfc73315d0d2ea0db754cd64b3c484d45b5defbcfdeb226c00e1bb4807c71ac35f7896d32c2d3edfef10b3b96c512c3e011469e45f0ff15b345c9ec61a58f2cee9f93945df14df06cdd42f868f0b38273d6d42d92b7903aca635defae8c3ecc86650bfaafd05cfcb488f3c362b49727ae825d474aa5913b1267561f5fc5cd3655025134dd9f7af71aba85c9be29b20a195ebb2c345f90be650d336257f9bedf8eb1f3ab491b733a55f6853016062ddd996e0cb6155fa5aa276d93b779ea09468da4617b65c4d16c7fbca9ffe0e27ce886a9a7ef571a057a8a9e1cc14fc33af939b8ed4420ae463a7c62634fceef395baf997c80f0b35b2491e982c3a199cf6c68b42f7b05a5d24a26a81ba38724a2bc4c4a24207cbd1e1c4e210bef161d15ff8dbdffcce3968a178051c7a33dcd6c7906418de81c866df7fd51c1cc0795f84613a9a71f62e60751a4af3cce7439a4fda28124795e9af20d43f1b4af3cc9002168cb911a0a6de10afd707acef05c4152d127af00f73277d18b1680801100de9238178a4e49c0ab9e59314c3a1008a17479cfe2e4318505260fbe8a2b529f9bfab5c59ed360bc85a3d1ea7c93230b687d933aacf1c1a316c5216cf2680a41cc548d75fdef1d134eaa9bc7b04789bfce1f1d39b8a49e5e79bde756406134ff7f35bd477cc024fcf2d2ee4d7bdbd98047978632307fab7f5ed6b349d8c4a5abe9a734d6557679df0dd4e8ca5c1e038489b5c09f137f6547931a80873e9eda5bf105cf79160a1336a7873370cb56648693ebf5e9d578a292876eae7dc3462b17a11754e86c7a398d4d9283d6f492d2cb5aa3d510f5358ef8f3b34ae989a4b27dcce0fa25b271868d4bdd8280d7ffdb850645e747b750f8cc84b10909250b4b7208874a5a84e1d3db2066d29642274523d4cea38eb5c03f38d65ee4131dadef9f2590040d6430e57f85720352b6e31c161", 0x1000}], 0x9, 0x5) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x4a00, 0x0, 0x2000, 0x20042}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x8000000000000000}]}}}]}, 0x40}}, 0x0) 19m42.315855401s ago: executing program 32 (id=1371): r0 = syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0x5e99, 0x3000, 0x3, 0x19a}, &(0x7f0000000040), &(0x7f00000000c0)) r1 = epoll_create1(0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000200)={0xa0000019}) finit_module(r2, 0x0, 0x3) ppoll(&(0x7f00000001c0)=[{r0, 0x20}], 0x1, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r7, r7, 0x2f, 0x0, @void}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x3ff, 0x3, 0x4}, 0x51, [0xd4, 0x6, 0x9, 0x8a4, 0x2, 0x2, 0x7fffffff, 0x80000001, 0x5, 0x1, 0x101, 0x3c6, 0x7, 0x6, 0xf70, 0x3, 0xe7, 0x7, 0x401, 0xbc5e, 0x0, 0x1, 0x8, 0xffff, 0xe, 0xe, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1ff4, 0x1, 0x1, 0x80000000, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x1, 0x1, 0x6, 0x2, 0x5, 0x9, 0x5, 0x9, 0x0, 0x3a23, 0x1000, 0x8, 0x2, 0x6, 0x7ff, 0xb8547353], [0x80000000, 0xffffffff, 0x4, 0x6, 0x7ffffffd, 0x1, 0x553, 0x6, 0x2, 0xfffffffc, 0x8, 0xc, 0x36, 0xa, 0x48, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x4, 0x99d, 0x8, 0x0, 0xd, 0x400, 0x0, 0x6e38, 0x8000, 0xa, 0x2, 0x3, 0x0, 0x5, 0x7, 0x4, 0xd, 0x9, 0xfff, 0x4, 0x0, 0x40, 0x1, 0x8, 0x5, 0x8, 0x0, 0x34f1, 0x1ff, 0x4, 0x1b2c5a17, 0x0, 0x9, 0xc, 0x0, 0xffffffff, 0x1, 0x6, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x6, 0xdb8, 0x9, 0x4, 0x2, 0x6, 0x5, 0x5, 0x3, 0x5, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x43, 0x69e, 0x8, 0xffff, 0x0, 0x0, 0x8, 0x2, 0x4, 0x800, 0x7, 0x9, 0x0, 0x0, 0x1, 0xfffffffe, 0x3, 0x0, 0x9, 0x8c0, 0x9, 0x2, 0x7, 0x7, 0x6, 0xfffffffa, 0x81, 0x8, 0xffffff20, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x8000, 0x40, 0x3, 0x2, 0xa, 0x9, 0x2, 0xffffff00, 0xda15, 0x7f, 0x3, 0x11], [0x0, 0x897, 0x8, 0x246d, 0x6, 0x101, 0xfffff410, 0xd, 0x7ff, 0x606, 0x4, 0x9, 0x80400001, 0x2, 0xb, 0x2, 0x7, 0x1, 0x7, 0x2, 0x7ff, 0x3ff, 0x0, 0x2, 0x6, 0x100, 0x1, 0xec9b, 0x61c8, 0x6, 0x0, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0xe, 0x4000006, 0x7, 0x1, 0x9, 0x0, 0x4, 0x100009, 0x100, 0x3, 0x3c, 0x1000, 0x5, 0x2, 0x15, 0x8000, 0x7, 0x81, 0x5, 0x7, 0xfffffffc, 0x4, 0x6, 0xeff]}, 0x45c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r9, &(0x7f0000000140), 0x4924b68, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r8, 0x4) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r10, &(0x7f0000002140)=""/17, 0x11, 0x0) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) vmsplice(r3, &(0x7f0000002740)=[{&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000000180)}, {&(0x7f0000000280)="df65c2677e36fbf163d006c50a84a52566e55d4f5a2725b1cef87951f855cc4f8db31b701e8521a23c54a74e66e70b615bea40cb8d38682a2b73ee2afb3fd2ce3937", 0x42}, {&(0x7f0000000300)="46bc7190264729f2fbff45c0f3c240c97d440c910392bee4bd4582ffcbb86176fec96e2e3efb2afce6c8e4c837aeb4982f3e80381426da886f3001776767e39216f4f962dc06bfab0e98adb83afb3cba389eec96cc92e0cee60b5619a9e0af3c20e851b1", 0x64}, {&(0x7f0000000380)="5f963ef352f82e4f055336708080cdf9ad", 0x11}, {&(0x7f00000003c0)="980d476142b95fb86915b26ca233abd9cf3552cc7774be726c7bda0434185ad233ee6bcea12c4fe46c9e812c12389203b20ee03ae492bb1ec56c2b254d4dfaf95b5dd510a243c4a27de02970c9e183f377349bb2d747683b134e", 0x5a}, {&(0x7f0000000600)="f7f3846dfb869615f47c404746b7a8a9c46a6a4845f88f4f35c4e4b053ed2360100c8dddbfd1d76a499843f785382c92976e83ee311fde6469a3d4cb3ee7e1c9cad8329c3b9b4c5e39614e029ba59bfd0b46bcb303417550151cbdf18979e42baed872f9590225a2420880d5c11700ca6754353eb0e30b930b4695eec379114607a2148aa6bbc51e7522795a82b1031f2b9a0d8e31c693cc8f38eab5ecf8ac3695b24046d18a7689c2ba3968b806c19fffe1707c96fce07a2844522f2d60e37fc54ae6672d582888d4de20c42fbf29", 0xcf}, {&(0x7f0000000440)="f4156b75e769434dc4d289d8bfeadc323162302d0ccfa734afd01499f5", 0x1d}, {&(0x7f0000001740)="512f38e6f5bc5298147ad3148755655cb8a39998e2cad98ab0434a985cff9024181bdac95fed9c3301a808495eca7ab044fad7a70a7a51961b19883b6176d90076ec158ca1210aaf449c79e4b9aba5d94ee8b1999e14605a07a5d103f1666fef3f18f98af57384ea2f467cec9ef1ca5bd36fcf7460fb72b8581299d7e0cb360f345c3a25905e0b6c33f4c3eb133f9c368e6caf0e48514f7cd7bc36ed6b0d464d62084de784426381b47cec4095c065ae99d947923c9295fe6728b017f492ff7a7a78f48623a6c742f24d8f938e31cf0158d7e3798ff66f21a62e36ec0cf1187303216369136127c074ed57108d0f23b3369ef61ab2075294ff9b6a9b375629d0852a9080335f0518b52f9e0d46c821bf145e769a29af1c0a022a2c3fb7ba003e2beef6660f56894cf62c1d4fcd755a63570787a96a8b3c81a0a029345b975c7d6352db128c9d36705c8845ae88ae70d35bd4c2252fe4e6ad2d25c6e9ae9a2e985183836370e67d9b6e56768ed3e959f45d3a9f90a0eaf0c53276fd2496625b35a419675ec496c05768abffbc38f0d8c4ecf32e118fdaf74e63b82cf07eaaae2024bf8c8e73b1f5244715a318b736e679e99ea39945bea4b1834f22883da00621629d1bbde351ae52f0f0a29442a36b7174d47a1a2865ae4817b4648f5df585053f09bbee0c9a3d040f6aa7473314942cfda9dd29888883a01bf69e5a30b9aa314267648ae7413f3d49ec9417d2cd08691657b50609f51a3e816d3560ac46aa923baa5b571551f46e3a2f8b0fbe7c05e7a659471eefe434a91026eb46672a924e79c27c6e13add901532978e91f38ca8ee09480e7e133d2e54170213bf8ed2bc20294bbb8e2827cfa2700394d3f13f6e73beb1b662e4a702edeb8efd28d630e720f3803fe7e3c1ef16d3abf5cef10139f2f7bc072d9162cdc71f0e7613211f14fb10280cf3399893bebdd9ce59b2384fd09d6582aa3d40cfcc91919957e26262592e228990dcaa9d3f7003cc07908fcda9031127bb85609066589c8836078b29fceaff90b7834d1e13ddba078cffa2c1371ef1803405c1715c1465713557a61f7344b90626beb09371d0837331b9567430a89faa11c7c3fa665fa0389a9d14883e10bddd8acd1370d8c1000c4917c47036a1f24ea4e84739a9d711c9801d7f008090ac25a7f16a4a997683779568bddc8ed6fdd2e766642d89dbec5b03f480950b87114b347e74b8715df7d680319ac3f21792ee467ff8d7e25543ff007405222d632512bbcb796675afc08bc47e8c7657996e26d89babdbe92976f1bf34b8e76f20b8d4c0f10868964b69e6f10a3e44d237327afb41946b660b1c74b80cabcd6808d39c91120707a5240a7ec7fd71a845f3173c983fd8fdc4af424d223d53da0f3f890d61278ad71b264450073393d9f92fdc088e57082359969cb1e227e1a50d3fd7d8bb435815f2b645e0e4a3bf44b95d8e4d621109c8d873f9075d421b7c9e12546ddf2cacf3097088f452c1443bd575c25063d5b1a4fc1f09f5eba1781870c250e31858c89820544b950ac9603eeb1e6334be203b7c09f35c2673300bc1f3052f9c470b6a38cc431d5977e48b21fa76e781ea96126ccf54b402aaeaeabe8ea7cd043365b6ec7aeb063fe6d0c28f97b1e504010f161a78e464370e6d9364028f605f51b62bc11e80a808f53bed96e0a73f26e7fe1f5c8f986f1975d3b65e7e2df2b0a3231146eb69afe065e76b2f8c19cf36813824f4f334212354f8d4a29bc632ff105a2effd17095013e336746d1bb46a69ed3f541e6299c578126588eea113cdf4226fab6d12364f6642a77b24272c282060c1324b7844fadc357160862ebe71f1a1cbe4948dc3000a7dd0fc47fbf3a1ff34fbd134b95f8befbedfb3126c50689e3a0e3c582a61686e58e62bf37724284e8e9ca14ac95d580ecb0e8d383942499f36ec3bd4c8d768ddfd9a44c7a92bf31641b05c0986c8ba7f69c6cb942b844625efe16eb2ddf60fd2a6f6b216070e671fc8a9f60b38cb4865d55d1431033e78d057b49af80fc5bf99fbc3a224af06257b5c5d3b59d0adbabfd75c0e92df1f263a56cb690ba777eef5b00a7b876010c39309bfb03ac2f68b0546b198882a13c8b01fa9e9aa4b3bfe5a1d17f3c3c09fd1b8acc36181948724445f71ad6778a8007a7974c8b9d50009d61bf7b2ac61c9c3820d69260c1ed981cf31fe7efbb161f53a41d03c848b203079b44ff5c0b7a187f5ef30a72e88b29623dfba70ef3f8bcab478e16d8498fe60ff29fb7e460f2cd94e0ebc44d5c1f5808bec7336fef1f5b0dd840ffbccaf276ca349bf5922101e196aafd379c214584c3dffb46425edef09e5e110e0f411150de694ac8322f0518b84800a302fa37c54c9e9287ebe3b1540ecab512cfb50f11bf5fbd94bc61836895bd40e753a2ed12cf29ab7e3d377a9cb9532ffe9008aa5453908897cb501573dd09b7c985e57e8a19da45cf265033154f9ee77875eea25f4f9126fab13a77b54d8a1815078f08fabe53454571cb9c695ec1a68d4498b1416780339e0b8da6a17805b6f3cc23fc798661181de948b8dd3f5b322d7dca61de0e046e3f63f98a4c908bc911f6fc79e568006fe79b223e6928c97de2ebf38d9c67a5a54278ca3aaf5b7f3cc00cf1d5e777364b1e92059dc21fbbdba2a560c115cc33368975e2b1a15119fb65a7310a904a114aa4587e18110ba35936707861563c90dfbfc60188fef3de1b24499549d05ccc548beef7359efc593bc625a910cebacaf151bf5e36364ce884c9bf559a900e7048911850961d5bf480fe33d1197af2a8dde7f8cfe6abf0d468f096fc84425aeffd31da73a477c2db10a2e755566ba48935672fa746b501ca2e583bf2a338bca5726a0ae51204bac8d3b79603db028a7a9d7790723de42f14a56c1a4f746d4edd511cbbfd701a46e4cc57be4392ebc48708c083fa54e20ddb4635c99d332222792de6c21536055e9b2a63c6babc5f87397fac23a51f49e3f4ff95fc2475c1e25ec07bca034a4246e2bbb86d5d02635936a175d4be91c5e2e65e3c649308de08dc1b16348bf205457e1db3ae5944023b8f1096afc296877ffebddc1f0b91d3843847deb3cebe343671e4e37dd98b59c2ec7448ece1c4ca7fe82d79224501197d81fe6130cea9441e8dd83194b1cc54c49a65dac22a322cc8593c1d2f8965dd4aedef2046c7c0850a01d27831a85d62ab95b83f60ef9c5ccfc37e13ad1f2a930a4701214ae10b557fc6ecee1d3b1462986a4a3edb9e5db7b1fbb0275a8316aa3c35f8cabf0b0ee7474f133564c4a3c7fdc7751c7cc1714d140eae424d2ccdacb60a563f20c71fa480f553bc247bfc82b34963df2139ca739f66a031e2cfa57ab2cc8ee167c00e6e0b9a82442ebd75dd5215eccbf960b4c2480de677dc69c688d461549abe8d9bd1212513cc06d66106e2670b8f1fced882910e8014b0283eac029b66abb8de2bcf50fdd199cf9ca7f979298ac098ee6e09a36341f1e543c102801dfb164e8ab3d4865b9ac2e9e35acd4cb40b7443f2600a5e09e38f72af4206660f3ebe58da4b3dd0118fbc8590df927e1a9da521dfb6b45315362c1d7b88aa2f0011a736a67e98a5fb99a3ccbdddd56e0b98c08f8127483e04909c43a7cb22d2d10b628f61abb9bc32f9e3f873fe19430a2de19a95a70fbbb03faa31e906fea7fb094f901149341824a195a793987235eb6185d6778c117ebf4d8fbed7a4a92825b36ec4433e754c632e4635bdd23fe540442f5395b43d82a1069c83931ab4baa322a8b9698afba71455a4bb6f459b1fdd31e885137f99ac676add594a089380005dcd9455d4271dcb6246cf7c77c5e582379a50d8181fb45083cdbe356e8a4839a544c3e330a4fc5f1baf5ee7b71a393183dfd4e050a6cad4980f55f2c163a967ca4ff045f7b5787bcd91e8b6b17d9586a5de80ef61bb3c8dedaeb8176463dab5f94163d003ed264808a405a8d54b9693490e890b70fe70d374bbf8cdd75b576c7cd99f28d535d61646254e0ffc8fbd38abcd8cc19e7402e850297d6e4138f7223a64a95b1ab1119e2861529f4bb294603a6a3f2c7e190796484eb4c22692c9371cbc76d1ccfbe85bad5abad33a3d1372648f0d21faf070fc9a88c95c680e75ee0af32a628cfb7c95e66b61375b187c3fcfaf7a3aa69f0a556692c1891bfba5761c62afa4b7f09f00239f5955cccbdce3ef8f075ed9638dce0d551674f73a926463af5a6f3623ba3694a28b2412c09034f59eb578b588b2d2d6f80915709b8b8dcc426d60b171cbeea0aee5b6f9b3daa4f6ea0ec8c898b408807dba2752c4190c226ebcbcaeb2b90e27bd4b6010ed9d5586923fd1e9a7407839edf7d6ab556991b997893ceff75a1b966eaf539b241f52d0c0cc0f33234fb995c8c49016629efbf70497d80f6e859294e5ba4d00cf5394d75c34501f7dd647ba35ecdb396ac2a6077100adb52404a14a050c92a7849e52079c4d9e19fb0078f7e10285f60d1e1ed4e3f0b8dba7337ae082fcb765ab1893cf9598d16248bbbc30284478360313757f6fc0b37ecec3bbfb0e2659fb41e716fbe2da2bc636bfec8fd2670dfef4e19052a3c245d415c6bc044312f8a4dc7ad693c7350e9cc8c4b0d3284595e8dd73c2ddbf0830746c9d088792574eb08078cd665165dd0a6de926cbf9e8ee5a79b438729b3fd2ffe664265f5fea31ed484650968336c4cc63033cdbe5e2b9ea6927329a5a856076d6065c1788d5aef0e496fd618e77e9d3aadbe21afc5170b7348be992c106c3b4bb9f0d4b8e7f861dabe934da77f3f9933bfc73315d0d2ea0db754cd64b3c484d45b5defbcfdeb226c00e1bb4807c71ac35f7896d32c2d3edfef10b3b96c512c3e011469e45f0ff15b345c9ec61a58f2cee9f93945df14df06cdd42f868f0b38273d6d42d92b7903aca635defae8c3ecc86650bfaafd05cfcb488f3c362b49727ae825d474aa5913b1267561f5fc5cd3655025134dd9f7af71aba85c9be29b20a195ebb2c345f90be650d336257f9bedf8eb1f3ab491b733a55f6853016062ddd996e0cb6155fa5aa276d93b779ea09468da4617b65c4d16c7fbca9ffe0e27ce886a9a7ef571a057a8a9e1cc14fc33af939b8ed4420ae463a7c62634fceef395baf997c80f0b35b2491e982c3a199cf6c68b42f7b05a5d24a26a81ba38724a2bc4c4a24207cbd1e1c4e210bef161d15ff8dbdffcce3968a178051c7a33dcd6c7906418de81c866df7fd51c1cc0795f84613a9a71f62e60751a4af3cce7439a4fda28124795e9af20d43f1b4af3cc9002168cb911a0a6de10afd707acef05c4152d127af00f73277d18b1680801100de9238178a4e49c0ab9e59314c3a1008a17479cfe2e4318505260fbe8a2b529f9bfab5c59ed360bc85a3d1ea7c93230b687d933aacf1c1a316c5216cf2680a41cc548d75fdef1d134eaa9bc7b04789bfce1f1d39b8a49e5e79bde756406134ff7f35bd477cc024fcf2d2ee4d7bdbd98047978632307fab7f5ed6b349d8c4a5abe9a734d6557679df0dd4e8ca5c1e038489b5c09f137f6547931a80873e9eda5bf105cf79160a1336a7873370cb56648693ebf5e9d578a292876eae7dc3462b17a11754e86c7a398d4d9283d6f492d2cb5aa3d510f5358ef8f3b34ae989a4b27dcce0fa25b271868d4bdd8280d7ffdb850645e747b750f8cc84b10909250b4b7208874a5a84e1d3db2066d29642274523d4cea38eb5c03f38d65ee4131dadef9f2590040d6430e57f85720352b6e31c161", 0x1000}], 0x9, 0x5) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x4a00, 0x0, 0x2000, 0x20042}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x8000000000000000}]}}}]}, 0x40}}, 0x0) 6m39.469865853s ago: executing program 2 (id=3469): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56e, 0xfc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x1, 0xba, {0x9, 0x21, 0xfff, 0x9, 0x1, {0x22, 0xe7f}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x9, 0x8, 0xfc}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x8, 0x6, 0xe}}]}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0xf1, 0x3, 0x7, 0xff, 0x4}, 0x11b, &(0x7f00000001c0)={0x5, 0xf, 0x11b, 0x5, [@ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0xf88, 0xf, 0x8, [0xc00f, 0xff3f17, 0xc0, 0x3fff, 0xff0030]}, @ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0xed, 0x10, 0x11, "4cd17fcf65c4ba2c6aaecf5cf7b8d022797d713eaabeff6577f91e027c1432529486d8535606b72b407c52980f7c999f5c901f4d7c18ba730583041033963abe9d361ca9b9f6bf29c021da2b2c13a81113d123c15d187a8bf0a619a99f2588bec0cf3199480541d58dc546ccd2a7634ba0e3bd2c05cdb1f703bede2b7cfdd5da60f9b977e7553d0649ffe1f6a1180a0fae14fe77839cd4996fe94bfe9865a094a4e11cb4d7ab591a6468cb8693be5cb3b35e13043bf6d78463ff4a7df203d738f646d623ede9332f6b0f2fd40bf77ed766b95bf06ac468fb4883ae1c3ca3b901a9d191108b2012ed3959"}]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) utimes(&(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000000c0)={{0xffffffff, 0xa}, {0x9, 0x8000000000000004}}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@delsa={0x3c, 0x11, 0x1, 0x70bd28, 0x25dfdbfe, {@in=@rand_addr=0x64010100, 0x4d5, 0x2}, [@srcaddr={0x14, 0xd, @in6=@empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x80) bind$inet(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) 6m37.692549545s ago: executing program 2 (id=3472): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x30314442}) socket(0x1d, 0x2, 0x6) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x82582, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000340), 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3300000010001fff0000000001000000000000d7", @ANYRESOCT=r6, @ANYRESHEX=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x81) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r11 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x4c}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r5, 0x0) 6m34.706760578s ago: executing program 2 (id=3482): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xbf7, 0x66, 0x0, 0xb, 0x89, 0x0, @rand_addr=0x64010102, @broadcast}, "3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759faf813ea80e6a853e79b4fe27fe3e1aec5897b314a7f0d515b07b1835986b4885e9826d902c40f16cd77c58b6433ab039955ce9db11f36f459e7114ace6c9989eecea80a81fd39f339356c7c3391af83da2486503a7973f6db4806cf3e5ca94cf7e1f79fd00decd76100c18251a59d1474caabf4d3ca6a9a9885df710e68c5b0dc11832dbb5eecb5c88c2f8f02bdbd88569ad4a740359cbca8c378118220d73bdd1e661c3a74f77aa931b11cd38119b0f084bb96e84803fca6566c33ee1e4e34ab0253fbf24f9f5974af5e1fc2a43a4ec9dd9928a8f38a128ea27c429300ae5a6bd7740471f973d8224b2b07879f4fbe7dcbed776a72ebdc713bcf1d7aa45b01c32a1003e6670d58510bd79ba2fde5cb2b82cef2cc315648f4e9d96d848ba327949b8926253cbdef6888a8982108b6ac7a1108533dd3fe125002e2e286362d1055082a9d73ec5ac3080f2a501ff27250b62c8965f371cf92b32d6422d79f66261eb08a2f8fe50049e102c69ce703d116d0834208cc957d0f1376457a90245816d7642412897fdd2f982fdfbc3af65aa0446b00c767b79aec40e460887ea02188e3a0960eea39b144859467b881978378c9fd593259e0f63148179fe2c2f6d40987b63a6e384e63027f03d8039d707522942d5dc88fd842524d006290b6a65e9cc86cc5b401a60ec4aedfb3bf4d0447bb681810a16b9684b72c2f4593ef834a0203e78cd1d9dbc978e9ae8f3ab62c07f1e41d59470decee7b0cc41ac49e4b7589ab6da65849f62ec217bb39ed161e7d337822d96badbd74d66451ea9a74bed591dc9631bf639dcf7846ee428a9fa55bfceedf3b1c23642f3b58dd0a7273664c6c49c9160a4b9cc5b72d0210e305b94e2cb09ae1d4af9d365b5093851f229c8c30aef75d45ccdbab4b86d801a9ad3b27f26ba601d531c0743717aa7aae29d37f496fec7682c5a1abd321ad61941a2d23fcac6af1d1875e308c8d8c64a5152be47b59c09d293f46b857310a99f1885f0a49d432aa0d39a3e8fc885e75e66b63215133175a19267c8d0adf7d8f644e742ed5369d1405e99e63b78727f135e0243f24d9ce354a1562102ee8de4c191508343b86bf7e7519ddd770ce55e17e590561b2f437194c97ad46622a6ae3dd68d9993e6744954f4cd308bd6594fdccedc578e80aed274a65219697229059723ac37d535cca0e9c314e7941b4160bbd2ffba71f26ffe3228431bc81463078ad70583277ef18bce23ca2e5b9a00670956ea8e0e2c739c006106c8c9ee3f92ba728d8490742b74a9a18cbedfc4e69bb87e0da4c7dfb964374c28c837d4641fb99a19b233675f8526af395335e0185cf3934805442ac379980b687a7128e53284ba9e741b5fe9bc969bfbd55cbce76842915e076e2adf844338d16d3802c681bafdcc60465bd34dfc2d1c069ceee40060e0570fc1275ccabfe3f9be3e84ceedf72cd649c082232008e2b0c94594588c00e0fe911bbf1c12eb6c37ce05674a7597feecf27f5e051ffa824d9ff93638dfa9a84c77562aa2cf897f55a97b79c18544ad03480e1011b8f93e0ead9c2c6672448f585c5803ae99be777fbc662ef4450c1e936ed8b3c8047f00e72adc84561f417f8e5e1dde4967005d96a64fc75d9f486b3ebdb5904a0a56ec48542f0efce939f66fd69259e7376ad37e84434ea90f35b2d3bd63b5c36b267d8f2c7dc5a50b46e00ed086dff8b039e07b84c60611269d4f282ad04dc8e0b481eece2f8a614734be73617f0ad5be195446b09dca4cf1f32653dd3e188aece76f3014deb2ba61744835c0f735234b6a4637c948a7b4fd4203b286ca87d669e325d70277075b094f59eb1dff6c9c05c40d5e464c563df79486e1a32e6ed9bcf675aac7968b4e98dc4e210215b0d3b6a2525b2e3df11f3f1490eb39cabffbe32e23659121fde8e4e346e0f595aaf3666a5f6f118c1a1128039502ac04c40b85eb4c54e6c95b8d1c2aac74ae9e1c355ccde9d54d5d833293f5df09224482179e5bcd8e227c99172a6e14c2cd4e6462ceb0a905a1d64804840ce62e350c6efac10a7fcb029f84af64e2256d45afd3b3f59379895740e0cd2fd24c63264f785bb6e3f40ec72ed67d1a7d87dd264743d9c951cb5aa8bc6f1d1bc9b23303d5aa7f8f6f961326757456057000cb2bacf78cc229002777e932c2640b8dfa793846ca49fa93996db95104a8808a1906b19df17e754b90582b6c49efb3ddce067dd9292291cfd2bb0323ce8098f29e4fce0de31cf5c7e2e2da5d0d0996a8be776de8fecfd3ce68e80d21f1701f6b90ac51278abbd727d19415e0ebe001b990b177b8db0c592b18a4b5e4a6221902362e5b20e6e6f2131a5a5e03c1150b179ef40c933c2fef1b79de738652ec4c32565f5cf751a11db177099c4e2e5bd7616cd0dd501d5bfccf5691de3cca590365328648baf8a9487a3c212193c9bb837594460967e823067a9465eba7001eaf609a810488ef5c147aaa5e9e8c75b585ac3582b6915e20b5aa2f79b7a94857122988c56dbce1ea52de1a56652e839bb853be3ee16052b33fb83ca54d8e4e19440a5e81492107043a66286f63ca87a1f7b8a4e9547a7eb6005419cfd28cb37e9e374f4d0143973286e87070754025c1a6fccfdc6858eaca8c35ecb19584ce7141cc79a5bc813469161b87a19fc21f3373d1f25b3427916dd1be2a589b70ea3b39fcc7801e13beaf19b76164faf3dc4ab8faa5648d24eddd6caceaa0d5ac9cad633c19a4a4d059ee823a49b7cf82c5777d376c111f58ea8fd473429907852301a2c856f27bd0c687ab5be0e2bbef64ddee1601375a4440e3f59d60f57caebfe457f82432523ec4a61cdbb7f1e91e4b05fda892df131c274b19929d26f7a5a6d3ca487983f729601ed9bb4bf5c1cc3d453d406e9534688dec6a2dd0b9db149365c125a95e129565e62cc91f7d960abe1055b730ae0994e7eb08392d5745d0e4f529c4defc3d3e43d0815b0cc63effa88d20c13b14e780c2f6c89a1ee5e4db45a5c272186cc3e51b13dab3add5f467e8ca0f4c45a1fc76db2f0cbf794102946aafcd8cd8a3e935a606b9721645c4d550ae0907f345593736506efc626498c974753d474a73626041d3a54f8fb50de2a6335611a3779da3a02daceb2256d9b102d4d30dd3cd389a04b1a7a6076879f36534bb3379debb46ed1fa2c40096c752017dd024345c58313b43070ff7bef94dc3cafbe6ec20d59e5ea3c196ba3b783bfa87384407efc664cd350c80ac397516018e35371956e414755cde304d2a228c1540ba6fd6a7402d11c666964f024da4c016eb556ba2c5fab86c60c12efb1496295d80f0383526e8e0fc55a287bbd3cb966a916f57958d8b6ef97aa0c4b47f7746bab6b99698c1c96b25c4e2e084147866fe0970b109dd26984adc0758eb6442712cc46dcd8ed3038b0595252eed1b8a46525862662d1e67eba66ac341f8d27853eed54854f488f079bd48df6ce7a4be8b1b61fd23a2dc4d3ade0992011539cc63f80fcfc75008c20cb639348cb218f8f476a6d56917f4ca07e67fc20ea2e9642eaf2182b397e279f5f6c70438fb8aa39cba788588c181461ea7efe1a0dd5b95eb26f7158b91012f7ce0ee1b4e79ce4da377bea4551738a0f491a84f19b3be9827b4469c299527aa9c20b8bf12f919976a0356bba720fb91010763c79bcbb10d89280f0f97cdd19aa0d54828b308195fac170613cf4b515e340a9ef2c97f618a9f50b30ae34ebeed9a38b4c6969680accc740b154ecb014fb5d543a59ccb98a7de2823a2dec39f331cb503eb74fef61262c6d4050bc723caee834eb28c64ce007f6027375e936b62387cf1778970e88b0574a0106d4c855be7425767c551b2fa644d9d8a59f787e7610581b768057d229673344571c3d6e3f10975b2859f568398b1f38f89524d9ad0c1588617c3883a1227b714c81cdf28da54f33968c1c50f28da01c308eb31d319b3e77f96bec001c9300000000000000009cc0062283ac112868592619db14d629c47bfb793a723dcd2f7b07ae4ec14ca3ef4b955ea5b2b153a279b080f6236d418075b86850974c8850efb306d5c304e726bf2643b4403e6d46b0e0395b"}}, 0xc05) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200) mkdir(0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x2, 0xcc7, 0x1, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x102, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x7, 0xfffffff8]}) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) chdir(&(0x7f00000003c0)='./bus\x00') 6m31.436161448s ago: executing program 2 (id=3491): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x404000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x9b) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000480)=0xfffffffffffffeec) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r2, &(0x7f0000000040)='./file1\x00', 0x2000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000640)='./file0\x00') link(&(0x7f0000000380)='./file1\x00', &(0x7f0000000400)='./file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 6m30.757916209s ago: executing program 2 (id=3494): socket$nl_xfrm(0x10, 0x3, 0x6) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40081}, 0x8d0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$session_to_parent(0x12) 6m29.628379086s ago: executing program 2 (id=3497): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81901) r6 = open_tree(r5, &(0x7f00000001c0)='./file0\x00', 0x100139bb4695c84b) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x86a305) socket$inet_udp(0x2, 0x2, 0x0) write$char_usb(r7, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r7, 0x80404518, 0x0) mknod(&(0x7f0000000300)='./file0\x00', 0x201, 0xd) socket$inet_tcp(0x2, 0x1, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='btrfs\x00', 0x0, &(0x7f0000000980)='norecovery') openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x15, 0x3, 0x400003a) 6m28.678908815s ago: executing program 33 (id=3497): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81901) r6 = open_tree(r5, &(0x7f00000001c0)='./file0\x00', 0x100139bb4695c84b) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x86a305) socket$inet_udp(0x2, 0x2, 0x0) write$char_usb(r7, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r7, 0x80404518, 0x0) mknod(&(0x7f0000000300)='./file0\x00', 0x201, 0xd) socket$inet_tcp(0x2, 0x1, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='btrfs\x00', 0x0, &(0x7f0000000980)='norecovery') openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x15, 0x3, 0x400003a) 12.911867358s ago: executing program 6 (id=4627): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x1100, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x14, 0x110, 0xb, {[@generic={0x83, 0x2}]}}}], 0x18}, 0x0) 12.821092815s ago: executing program 6 (id=4628): bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000002c0)='./file0\x00') open(&(0x7f0000000440)='./file0\x00', 0xe8142, 0x0) prlimit64(r0, 0xa, 0x0, &(0x7f0000000100)) 12.618759552s ago: executing program 5 (id=4629): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000183b9220b113420016519a02030109021b00010000000009040000012e459e000905c435a3"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_usb_ep_write(r0, 0x40, 0xe6, &(0x7f00000003c0)="bea2b58f2d301e4d6a44a4a2693361c347b5ffc6a3692bf39829c081fa7725d6a9014b28a0ca007c9850c0b54563f3bb0db7ba7bb0df87ab9756f6e1989f6429239b8c836385cfbc3f9e4b1570c441731f621173009f09b655473eb9609d66a7e3eb54af176b3bbcb264ffba56de358a3b565c9dc3540c6ce08ba8dcf164ec28f0505703e16cbb84a448a44bbea61b67b2d098fc0cc1549b3ba2dd275e013c4cf0d49b94b21371ab4947e720dfc0deb04a4903e16eb6526f21a377f5330f5975de65df06735edfeebb790392c304517a19efaace45a4303a110181619e7077f6527419d2d577") ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r3, 0x81, 0x1, &(0x7f0000000280)='Q') r4 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000000000e90924030000000001"], 0x0) syz_usb_control_io(r4, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r4, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000400)={0x40, 0x9, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) r5 = getpgid(0x0) kcmp(r5, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x8000000}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) r7 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_usb_control_io$rtl8150(r6, &(0x7f0000000d80)={0x14, &(0x7f0000000c80)={0x20, 0x24, 0x8d, {0x8d, 0x5, "49fb496e06ce4970541bcfa9512735e7a1a9dbba687208caf9938efc4dbb3042f5ddd25eec93c03c1369e2be92b9ee194d338d8cc134675e8272c8c9db9d711180becf0bb16106cb38aa4997ab412dcab5f108d15ea50db70f09fc5c4a9e57236fa7df3b50b6c3f6aa5489bc4c51f24e9e7b7197ed6b8febb6d480c9bd4ed1513bf163427a79e607cf74b7"}}, &(0x7f0000000d40)={0x0, 0x3, 0xf, @string={0xf, 0x3, "60fe704efb028a22e0cb0d9aa5"}}}, &(0x7f0000000f00)={0x2c, &(0x7f0000000dc0)={0x0, 0x13, 0xb, "28c28ff6489cb620a62cfb"}, &(0x7f0000000e00)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000e40)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000e80)={0xc0, 0x5, 0x2, "1a56"}, &(0x7f0000000ec0)={0x40, 0x5, 0x6, "d3593c6e404a"}}) r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='io.latency\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000300)=0x768c, 0x12) ppoll(&(0x7f0000000540)=[{r7, 0x8050}], 0x1, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) 11.720346976s ago: executing program 6 (id=4631): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r7, 0x10f, 0x85) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r8, &(0x7f0000000440)=[{&(0x7f0000000300)=""/64, 0x40}], 0x1, 0x6c, 0x6) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x15) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r9, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa02, 0x870, 0x1, 0x2, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x4003, 0x7f03, 0x2800, 0x6, 0x2000002, 0xba2, 0x20a, 0x30, {0x200, 0xffffffff}, 0xcf, 0x9}}) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r10, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x2404c090) 9.437419389s ago: executing program 6 (id=4636): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000005e00679a3601ff81000000000000000000be7ba9bd"], 0x1c}}, 0x24000080) 9.33229396s ago: executing program 5 (id=4637): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) utimes(&(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000000c0)={{0xffffffff, 0xa}, {0x9, 0x8000000000000004}}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@delsa={0x3c, 0x11, 0x1, 0x70bd28, 0x25dfdbfe, {@in=@rand_addr=0x64010100, 0x4d5, 0x2}, [@srcaddr={0x14, 0xd, @in6=@empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x80) bind$inet(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) 9.166074686s ago: executing program 6 (id=4639): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000005700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000059c0)={0x0, 0x0, &(0x7f0000005980)={&(0x7f0000005740)={0x28, r2, 0x105, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20008804) (fail_nth: 12) 8.841343412s ago: executing program 5 (id=4640): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x404000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001f0009"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x9b) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000480)=0xfffffffffffffeec) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r2, &(0x7f0000000040)='./file1\x00', 0x2000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000640)='./file0\x00') link(&(0x7f0000000380)='./file1\x00', &(0x7f0000000400)='./file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 8.797912348s ago: executing program 0 (id=4641): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mincore(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x460, &(0x7f0000000480)={0x0, 0x40000020, 0x10, 0x2, 0x1ef}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/103, 0x67}, {&(0x7f0000000580)=""/111, 0x6f}, {&(0x7f0000000600)=""/93, 0x5d}, {&(0x7f0000000680)=""/101, 0x65}, {&(0x7f0000000880)=""/4096, 0x1000}], 0x5}, 0x40000101) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r2, 0x47bc, 0xd79e, 0x20, 0x0, 0x0) 7.859169299s ago: executing program 0 (id=4642): fsopen(&(0x7f0000000300)='iso9660\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010000305000000000000000000fffe00", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d61637365630000140002800500080001000000060002404e20000008000500", @ANYRES16=r0], 0x4c}}, 0x0) 7.858837175s ago: executing program 6 (id=4643): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) r1 = semget$private(0x0, 0x20000000102, 0x0) semctl$SEM_STAT(r1, 0x2, 0x12, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, 0x0, 0xc800) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) semop(r1, 0x0, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000680)=[0x7, 0x7f, 0x1, 0x9d]) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r5 = syz_io_uring_setup(0xbdc, &(0x7f00000003c0)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000100)=0x0) socket$nl_route(0x10, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x5a00, 0xbc03, 0x6, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 7.640440974s ago: executing program 0 (id=4644): socket$nl_xfrm(0x10, 0x3, 0x6) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f00000001c0), 0xa2000003) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40081}, 0x8d0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$session_to_parent(0x12) 7.481281308s ago: executing program 5 (id=4645): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x2a00, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xe, 0xb}}}, 0x24}}, 0x800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001840)=@bpf_ext={0x1c, 0x1, &(0x7f0000000300)=@raw=[@alu={0x4, 0x1, 0xf3767c68fa0481d3, 0x4, 0x7, 0x20, 0x8}], &(0x7f0000000340)='GPL\x00', 0xfffffc00, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x3, 0x3, 0x9, 0xc}, 0x10, 0x2469, r2, 0x0, 0x0, 0x0, 0x10, 0x878}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newchain={0x24, 0x64, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xfff2, 0xc}, {0xa, 0xc}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x20000000) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) ptrace$ARCH_MAP_VDSO_X32(0x1e, r10, 0x1, 0x2001) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) syz_usb_ep_write(r6, 0x81, 0x0, 0x0) syz_usb_ep_write(r6, 0x81, 0x0, 0x0) 7.281674858s ago: executing program 3 (id=4646): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mmap$IORING_OFF_SQ_RING(&(0x7f00006e4000/0x2000)=nil, 0x2000, 0x6, 0x13, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x460, &(0x7f0000000480)={0x0, 0x40000020, 0x10, 0x2, 0x1ef}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/103, 0x67}, {&(0x7f0000000580)=""/111, 0x6f}, {&(0x7f0000000600)=""/93, 0x5d}, {&(0x7f0000000680)=""/101, 0x65}, {&(0x7f0000000880)=""/4096, 0x1000}], 0x5}, 0x40000101) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r2, 0x47bc, 0xd79e, 0x20, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r5 = eventfd2(0x9, 0x1) close(r5) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x400000b0, 0x0, 0x10}]}) 6.648401129s ago: executing program 0 (id=4647): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000400), 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="f4ecb2acd5130f7806c36ac35eda9785040728009470f755e8a53b60", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffb}, 0x0) r2 = syz_usb_connect(0x2, 0x2d, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1], 0x0) syz_usb_control_io(r2, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000540)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto(r5, &(0x7f0000000000)="f6", 0x1, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f00000003c0)='LjW', 0x3, 0x4000051, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000001840)={0x0, 0x3}, 0x8) close_range(r3, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f00000d2000/0x4000)=nil, 0x4000, 0xb635773f04ebbeef, 0x80010, r1, 0x0) syz_clone(0x5120400, 0x0, 0xffffffffffffff48, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) r7 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000200)}) 6.427363601s ago: executing program 3 (id=4648): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x18f) mount$afs(0x0, 0x0, &(0x7f0000002880), 0x700, 0x0) socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = add_key$fscrypt_v1(&(0x7f0000000100), 0x0, &(0x7f0000000340)={0x0, "4bb7e0d336cbca0b7cdc3730b28f1a039d16d029766b6d73195069b429d4da3aebe9241a7d1c3c445d8e69664d4405e59878df7920efeab14b9738de9d13096d", 0x3f}, 0x48, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="b702a00000000000bfa30000000000000703000000feffff7a0af0fff8fff0ff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b70000000000000095000010000000004e62011c3034fdb117168bd07ba08af339d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945ff15d802f5132143c0a9fc7a84452569957c1002ed7d458e17f791f4798c8eb484de03312c69b3edff5be26765ba5f8f2879021c2ea53ac547a654bbd2db5356b971d83dd12742be9087a3e7b7c0efd3e38c794eb06b0b8c392904ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057826ef4e912f01a201e694e3049b8c8fe8b65d8d66bb766f7f3f918c86a702522368d9f81897133af94a5a4cff7f4d8b9d8eaf302f0b2e0c252b0000000000000000ee917bca4885bbf597a14ab6458e6272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36be115be3b325ecd201d2ffb0a7fa4f5d1106560cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b861299fcd9ed9d8679406419406bf0c5329bd5b4697336112b0b8756ce3574046bf611a108f8df4d1a88597840b702b6fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f7faf39a43a66c5540b8762b42007c9ec43193ccf617dbf8a12b4a189edbf9fb7c42b1f435ccd4b19b53b60322af0aa66e8f448e1bd96822e6b70b62912c926dbe417cccd4f696d528fa8a3ea847f10e9b1106f3bb506f1d7fbdf801000000000000006c028eb5b5a073d0de5538ab42e171b3baae34c35987b0dda497ac3f5e97e60eaeea15c6d55badf9b86b1c000100006e60cd06c9ed24313ce607d403bb6030f800000000690db0221b1705c501f802ff59b4e683efa4b6e77e042072ec9eb8166f6e28b49a7705a1befc4d315878f88a8fb1dd679fb4c5557abae6849917dc51a89d47b728502f7e621fc0e3ba04020000c149ee6601728c750930519339b44197c22da865059b475afd96187d881e93b42a5fdfd686d8900c44c67133eeb0109dcb60dddad58037fda65885a15a42560ee3027a5ebf95254744f10fd607bc3100b94932b8d9447c42f6e21ee0e54f8be386bdc09decece910a481e648e0cb074536a25ff581d92af08a06f857311a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6ae00f0000000000006a8194479700a02b92bec8d05eae1f24fdd7b80d3dde04c22f689594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4acd7acf1dfe79d6771903b76e2ae47d972651390c22d641030e1ddac018dc3116e1803af10a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f00000000000000001000ba96edb95ede0e1957c2a2754258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548941d5d16297757310d9daebd5a3dabbced3b051129cd60a37d397643324e6f0aadf978d639650000000000000000570b0acbcaa196e6b46e213a34c1a550e7c2d8cee7a278cee591f360e345d37dc9f8991a16c08d72317e42d2ac9126acd76130ef1086016697e4d51c4b42b2efc8edab88d46bc3d5d6e5a634c912bc40513643bf44cb416b3149040220aa39035ae46d16d879fc815a5cb84b0d5c8ad970128adf8dec1171e860ca54ce5d6a5aa0327bca4f49a710bf8a8399071237fe5d764e2034873c94a4f21287f3bce3eeb69e94df2e14e4ab10cc7834b304bc879b80255991dd7aac2e92c9e7c411c019d229c1f1e563152f1c5ae9cda3e808000000a0c779d624c5a2b7491b8f73e767389ecd1dee951353bb22b7caf89468871520823715cfebd04189c6c6b34bd8a6541f6bc0630000000000f94e85f5111add3a3cb5bcace95f38465402c39df835754ef33056b0e1134187822c001a25304f3e00b44675d0a25a21dc4023c642cc6f5a75c45a29ab933600acf9a2d471b73a73178cdf309e5d53311996215b44295dfddc1dd6b81132e999366e460d15d366e84da02b8afc40c47e733f804460ed8300ec34eab2ed80097bd32ff1a6143ab1476037e474ca876187c85bed4391215cd77e6a1fd6399a498b96b9b0cca93255acb08c67e50004c5af6fd5b4ce7c1ebc9202bd7b329a4d2530486d5999dd7f90ebecca37f2869135438f05407b1fd7481daf9ec94b799c12e714d573e2a6331f496254f254a60c52b2026ed6a72c82cd191490fabe7b151f92e5d700f21830d613fbe490f305b3845a78817e59bf7ed36471dbca01d39e50ae2535460e1d2f2614940647233a02d5000000000000000000f70e52f0d56f6a4dcf7e57c03d4b4add0500000000000000320304d0d2b308c5ed3956eae263035d703f862224e9818a3d7ac270793a7bf2af87585293960a80ac63c54e55063bf8d24639e561253ef0caf6c58118120d8acecc0528f0d81d291009fc46401baf9c22d1c452a5b61b7a1b9adfcc17f5ad99dcdf935923185db7b14a7fa7babc1f53df70618bb73aa810b756696f26653b84cf842ae433fda59fbe312be11bb7dfecdc38c1c1f688d2724568cc396fca7c74984b7f7bd000000000000003ff3e5857fc6598c933610be374909dc8622b0722259e922f40d7862f7ea72f1754f07711de7600000000000000000000000000c4cb643e73ad8a45f0c7164484540e66e29943aa72297d831ce6c978866a55ed53130c6747f569c9c9abe724b4fc647b17401d2201e8c201e7d6ffa1fa122677f7393ed4fe8a93306f048b6703b04544e42a9cd937ef8d98ee8d878a12a627791c5c2d9fc6de65356be92fd98fdbe819686c7bd3be5bd0ce627c8357675f752c73a502d25c31c831078f098c34295bfe90e882843003841f4c0c65dc1810a50000000000000015911cb03e743c482199757d35df5b59fe0a0c5240c85498d818578e2d65c4ff4acbee037498222b1f81f3726a244da1fd6b8c195f1303bedb744045f31e1547d7bc3c3eae68b8da059a59c8c37e3639c2c4eb3d8229ac24d2ce12bc0e5db4a8202d72e64d5c5eacd0d0c0cd7a879ed967f5a2bd39ae4cf7daf7c9fa1777d54fb5920c8434163f75062c62455bf6e23817a85d"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0xfeffff, 0x10b, 0x0, &(0x7f0000000700)="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", 0x0, 0xf0}, 0x50) connect$unix(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1005c}, 0x90) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$802154_dgram(r3, &(0x7f0000000180)={0x27}, 0x14) 6.327778223s ago: executing program 3 (id=4649): mount$fuse(0x0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x20000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pivot_root(0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x2, 0x60500) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e020000000000000000"], 0x0, 0x37}, 0x28) ioperm(0x0, 0x44, 0x7) r5 = socket(0xa, 0x1, 0x0) ioctl(r5, 0x8916, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c000180060006006558000004050280ff04"], 0x528}, 0x1, 0x0, 0x0, 0x400c084}, 0x20000080) 5.597433388s ago: executing program 4 (id=4651): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000000000000050000000000000000000000030000000000f100ffffffff"]) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000080), 0x2, 0x0) sendfile(r6, r6, 0x0, 0x200) mkdir(0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 5.267183574s ago: executing program 3 (id=4652): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000000000000050000000000000000000000030000000000f100ffffffff"]) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000080), 0x2, 0x0) sendfile(r6, r6, 0x0, 0x200) mkdir(0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 3.872660433s ago: executing program 4 (id=4653): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c) sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x1, 0x2, 0x2, 0x4}, 0x20) setsockopt$inet6_udp_int(r1, 0x88, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x0, 0x2, 0x2, 0x4, 0x0, 0xffa4}, 0x20) 3.781441013s ago: executing program 4 (id=4654): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mincore(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x460, &(0x7f0000000480)={0x0, 0x40000020, 0x10, 0x2, 0x1ef}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/103, 0x67}, {&(0x7f0000000580)=""/111, 0x6f}, {&(0x7f0000000600)=""/93, 0x5d}, {&(0x7f0000000680)=""/101, 0x65}, {&(0x7f0000000880)=""/4096, 0x1000}], 0x5}, 0x40000101) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r1, 0x47bc, 0xd79e, 0x20, 0x0, 0x0) 3.71491468s ago: executing program 3 (id=4655): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x404000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001f0009"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x9b) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000480)=0xfffffffffffffeec) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r2, &(0x7f0000000040)='./file1\x00', 0x2000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000640)='./file0\x00') link(&(0x7f0000000380)='./file1\x00', &(0x7f0000000400)='./file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 2.854358194s ago: executing program 4 (id=4656): mount$fuse(0x0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x20000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pivot_root(0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x2, 0x60500) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e020000000000000000"], 0x0, 0x37}, 0x28) ioperm(0x0, 0x44, 0x7) socket(0xa, 0x1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c000180060006006558000004050280ff04"], 0x528}, 0x1, 0x0, 0x0, 0x400c084}, 0x20000080) 2.780589146s ago: executing program 0 (id=4657): mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8}) 2.692674885s ago: executing program 5 (id=4658): bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000002c0)='./file0\x00') open(&(0x7f0000000440)='./file0\x00', 0xe8142, 0x0) prlimit64(r0, 0xa, 0x0, &(0x7f0000000100)) 1.924034796s ago: executing program 3 (id=4659): prlimit64(0x0, 0xe, &(0x7f0000000480)={0xa, 0x10001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800c96edca5082bc204307de4530000000000000000000068d076ed3db5562d32c51d3851293e2d4f81aeeed6514540e697aa94f801582bf05a9b0c5d518c8ba9051a2f5e0b756c33b5b3ea4a77fe804f2abd856570660a3273cfb3883b031f93a1c7ae02a9224bb1cd72f77ab5ab5bb03bab28e397ca38d3ccd9a4e0c583053e376db372042d4f02f10f3e20b9afce2ec00e7285f2d3ed4a6e44d5e98a0d89593b618fcb587bd28e1eb6fa021e94822bb4017aff96ddad056f6e4309525c544ad8f6a8b78faba06f22090b40449b1e0c4029d9e4976d52434f"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) close(0xffffffffffffffff) sendmsg$802154_raw(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)="9f9c070a9dd2369c0239e8a9d232f842d1fd2d9ec9ed974f6feb1ac80a78c6daad1e05c735148970219b78079ec1f8294937ac08e63da1aaddb09845da713beb583dcd56f176345472e05242b39716e3835d0245d620ca5d85cac599aaa99c76d7f2cc67a4cb4a70164c6180865b1e2471", 0x71}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sched_setaffinity(0x0, 0x0, 0x0) r5 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000780)="f4000900062b3325fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 1.495387162s ago: executing program 4 (id=4660): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8f9, 0x9f94, &(0x7f00000007c0)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 1.154529338s ago: executing program 5 (id=4661): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x30314442}) socket(0x1d, 0x2, 0x6) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x82582, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000340), 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000000000", @ANYRES32=r8, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3300000010001fff0000000001000000000000d7", @ANYRESOCT=r6, @ANYRESHEX=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x81) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r11 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x4c}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r5, 0x0) 8.703715ms ago: executing program 0 (id=4662): r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x2) symlinkat(&(0x7f0000000080)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00') unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESHEX=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020}, 0x2020) syz_fuse_handle_req(r3, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) syz_fuse_handle_req(r3, &(0x7f0000002100)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000a00)='./file0\x00', 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0046686, &(0x7f0000000d40)) syz_fuse_handle_req(r3, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)={0x20}, 0x0}) 0s ago: executing program 4 (id=4663): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r4, 0xc06c4124, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) r7 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r7, &(0x7f0000000140)=@OVL_FILEID_V1={0x18, 0x300fb, {'\x00', {0x0, 0xfb, 0x15, 0x7, 0x5, "e8371f2efe0868327a31a705ec978547"}}}, 0x830200) syncfs(r0) kernel console output (not intermixed with test programs): 1457.691516][ T5944] usb usb6-port1: attempt power cycle [ 1457.851537][T14470] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1460.653163][T21586] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1464.974000][T21643] netlink: 'syz.3.4000': attribute type 1 has an invalid length. [ 1464.991459][T14470] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1465.806572][T21643] bond4: entered promiscuous mode [ 1465.813047][T21643] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1466.501238][T14470] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.17 [ 1466.519515][T14470] usb 1-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 1466.540634][T14470] usb 1-1: Product: syz [ 1466.548482][T14470] usb 1-1: Manufacturer: syz [ 1466.558806][T14470] usb 1-1: SerialNumber: syz [ 1466.581750][T14470] usb 1-1: config 0 descriptor?? [ 1466.602320][T14470] ch341 1-1:0.0: ch341-uart converter detected [ 1466.744354][T21654] gretap1: entered promiscuous mode [ 1466.804017][T14470] usb 1-1: failed to receive control message: -71 [ 1466.823009][T21652] macvlan2: entered promiscuous mode [ 1466.828355][T14470] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1466.836864][T21652] macvlan2: entered allmulticast mode [ 1466.844053][T21652] bond1: entered promiscuous mode [ 1466.850002][T21652] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1466.900346][T21652] bond1: left promiscuous mode [ 1466.965830][T14470] usb 1-1: USB disconnect, device number 81 [ 1466.980701][T14470] ch341 1-1:0.0: device disconnected [ 1469.944922][T21661] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1472.001897][T21692] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1472.174960][T21692] CIFS: Unable to determine destination address [ 1472.280034][ T977] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1472.440441][ T977] usb 7-1: Using ep0 maxpacket: 16 [ 1472.569479][ T977] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1472.595807][ T977] usb 7-1: can't read configurations, error -61 [ 1472.759461][ T977] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1473.059425][ T977] usb 7-1: Using ep0 maxpacket: 16 [ 1473.066424][ T977] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1473.412994][ T977] usb 7-1: can't read configurations, error -61 [ 1473.437652][ T977] usb usb7-port1: attempt power cycle [ 1473.628058][T21725] gretap1: entered promiscuous mode [ 1473.701971][T21730] macvlan2: entered promiscuous mode [ 1473.707323][T21730] macvlan2: entered allmulticast mode [ 1473.728653][T21730] bond5: entered promiscuous mode [ 1473.745682][T21730] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1473.764740][T21730] bond5: left promiscuous mode [ 1473.902156][ T977] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1473.939876][ T977] usb 7-1: Using ep0 maxpacket: 16 [ 1473.951450][ T977] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1473.959313][ T977] usb 7-1: can't read configurations, error -61 [ 1474.099499][ T977] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1474.150111][ T977] usb 7-1: Using ep0 maxpacket: 16 [ 1474.342169][ T977] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1474.376328][ T977] usb 7-1: can't read configurations, error -61 [ 1474.383029][ T977] usb usb7-port1: unable to enumerate USB device [ 1474.612587][T21744] netlink: 284 bytes leftover after parsing attributes in process `syz.4.4024'. [ 1474.779907][T21748] syzkaller1: entered promiscuous mode [ 1474.855668][T21748] syzkaller1: entered allmulticast mode [ 1474.918051][T21748] comedi comedi3: pcl818: I/O port conflict (0x4f27,16) [ 1475.371366][T21755] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=21755 comm=syz.5.4029 [ 1475.907967][T21768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4032'. [ 1476.298133][T21764] loop2: detected capacity change from 0 to 7 [ 1476.321183][T21764] Dev loop2: unable to read RDB block 7 [ 1476.326751][T21764] loop2: AHDI p1 p2 p3 [ 1476.340307][T21764] loop2: partition table partially beyond EOD, truncated [ 1476.352152][T21764] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1476.359024][T21764] loop2: p3 start 335544320 is beyond EOD, truncated [ 1476.474332][T21775] nbd: must specify at least one socket [ 1477.239673][ T5917] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1477.419556][ T5917] usb 7-1: Using ep0 maxpacket: 32 [ 1477.430878][ T5917] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 1477.442447][ T5917] usb 7-1: config 0 has no interface number 0 [ 1477.452716][ T5917] usb 7-1: config 0 interface 89 has no altsetting 0 [ 1477.465077][ T5917] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1477.476152][ T5917] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.484367][ T5917] usb 7-1: Product: syz [ 1477.489499][ T5917] usb 7-1: Manufacturer: syz [ 1477.494435][ T5917] usb 7-1: SerialNumber: syz [ 1477.501956][ T5917] usb 7-1: config 0 descriptor?? [ 1477.512755][ T5917] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1477.524110][ T5917] em28xx 7-1:0.89: Video interface 89 found: bulk [ 1478.219543][ T5917] em28xx 7-1:0.89: unknown em28xx chip ID (0) [ 1479.396500][ T5917] em28xx 7-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1479.408345][ T5917] em28xx 7-1:0.89: board has no eeprom [ 1479.469525][ T5917] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67) [ 1479.567969][ T5917] em28xx 7-1:0.89: analog set to bulk mode. [ 1479.577257][ T5895] em28xx 7-1:0.89: Registering V4L2 extension [ 1479.599841][ T5917] usb 7-1: USB disconnect, device number 12 [ 1479.745047][T21822] netlink: 'syz.3.4045': attribute type 4 has an invalid length. [ 1480.178570][ T5917] em28xx 7-1:0.89: Disconnecting em28xx [ 1480.375314][ T5895] em28xx 7-1:0.89: Config register raw data: 0xffffffed [ 1480.384267][ T5895] em28xx 7-1:0.89: AC97 chip type couldn't be determined [ 1480.395627][ T5895] em28xx 7-1:0.89: No AC97 audio processor [ 1480.458412][T21830] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4046'. [ 1480.468150][T21830] bridge0: left allmulticast mode [ 1480.652384][ T5895] usb 7-1: Decoder not found [ 1480.678084][ T5895] em28xx 7-1:0.89: failed to create media graph [ 1481.040355][ T5895] em28xx 7-1:0.89: V4L2 device video103 deregistered [ 1481.050939][ T5895] em28xx 7-1:0.89: Registering snapshot button... [ 1481.059061][ T5895] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input47 [ 1481.072486][ T5895] em28xx 7-1:0.89: Remote control support is not available for this card. [ 1481.086836][ T5917] em28xx 7-1:0.89: Closing input extension [ 1481.097549][ T5917] em28xx 7-1:0.89: Deregistering snapshot button [ 1481.123114][ T5917] em28xx 7-1:0.89: Freeing device [ 1482.189367][ C1] hrtimer: interrupt took 30795 ns [ 1483.511046][T21884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4058'. [ 1484.086542][ T30] audit: type=1400 audit(1759782345.708:850): avc: denied { map } for pid=21875 comm="syz.4.4057" path="/dev/dri/card1" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1484.110594][ T30] audit: type=1400 audit(1759782345.708:851): avc: denied { execute } for pid=21875 comm="syz.4.4057" path="/dev/dri/card1" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1484.265977][T14470] IPVS: starting estimator thread 0... [ 1484.379653][T21891] IPVS: using max 37 ests per chain, 88800 per kthread [ 1484.379951][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.423643][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.759599][T21930] FAULT_INJECTION: forcing a failure. [ 1486.759599][T21930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1486.773045][T21930] CPU: 0 UID: 0 PID: 21930 Comm: syz.5.4068 Not tainted syzkaller #0 PREEMPT(full) [ 1486.773070][T21930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1486.773081][T21930] Call Trace: [ 1486.773089][T21930] [ 1486.773097][T21930] dump_stack_lvl+0x16c/0x1f0 [ 1486.773122][T21930] should_fail_ex+0x512/0x640 [ 1486.773141][T21930] _copy_from_user+0x2e/0xd0 [ 1486.773155][T21930] __sys_bpf+0x248/0x4980 [ 1486.773166][T21930] ? rcu_is_watching+0x12/0xc0 [ 1486.773184][T21930] ? __pfx___sys_bpf+0x10/0x10 [ 1486.773197][T21930] ? __schedule+0x3fe1/0x5de0 [ 1486.773218][T21930] ? __pfx___schedule+0x10/0x10 [ 1486.773233][T21930] ? lockdep_hardirqs_on+0x7c/0x110 [ 1486.773265][T21930] __x64_sys_bpf+0x78/0xc0 [ 1486.773276][T21930] do_syscall_64+0xcd/0x4e0 [ 1486.773288][T21930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1486.773300][T21930] RIP: 0033:0x7f340d58eec9 [ 1486.773310][T21930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1486.773321][T21930] RSP: 002b:00007f340e463038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1486.773332][T21930] RAX: ffffffffffffffda RBX: 00007f340d7e6090 RCX: 00007f340d58eec9 [ 1486.773339][T21930] RDX: 0000000000000048 RSI: 0000200000000180 RDI: 0000000000000000 [ 1486.773346][T21930] RBP: 00007f340e463090 R08: 0000000000000000 R09: 0000000000000000 [ 1486.773353][T21930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1486.773359][T21930] R13: 00007f340d7e6128 R14: 00007f340d7e6090 R15: 00007ffe7c0191d8 [ 1486.773374][T21930] [ 1486.936784][ C0] vkms_vblank_simulate: vblank timer overrun [ 1487.182986][T17217] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 1487.252389][T21919] tmpfs: Unknown parameter 'qfÇ5Þ' [ 1487.401463][T17217] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1487.412124][T17217] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1487.424195][T17217] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1487.434237][T17217] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.444608][T17217] usb 7-1: Product: syz [ 1487.448895][T17217] usb 7-1: Manufacturer: syz [ 1487.453858][T17217] usb 7-1: SerialNumber: syz [ 1487.489504][ T5895] usb 6-1: new full-speed USB device number 79 using dummy_hcd [ 1487.652075][ T5895] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1487.662448][ T5895] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1487.675542][ T5895] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1487.686101][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.697831][ T5895] usb 6-1: Product: syz [ 1487.705145][ T5895] usb 6-1: Manufacturer: syz [ 1487.771585][ T5895] usb 6-1: SerialNumber: syz [ 1487.826621][T14470] usb 7-1: USB disconnect, device number 13 [ 1488.033942][T14470] usb 6-1: USB disconnect, device number 79 [ 1489.357592][T21978] gretap1: entered promiscuous mode [ 1489.641176][T21982] macvlan2: entered promiscuous mode [ 1489.647647][T21982] macvlan2: entered allmulticast mode [ 1489.663625][T21982] bond6: entered promiscuous mode [ 1489.690867][T21982] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1489.714314][T21982] bond6: left promiscuous mode [ 1490.143103][T21985] gretap1: entered promiscuous mode [ 1490.421350][T21989] macvlan2: entered promiscuous mode [ 1490.467174][T21989] macvlan2: entered allmulticast mode [ 1490.490424][T21989] bond2: entered promiscuous mode [ 1490.539054][T21989] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1490.667275][T21989] bond2: left promiscuous mode [ 1490.864951][T22011] ISOFS: Unable to identify CD-ROM format. [ 1493.339873][T17217] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 1493.642444][T17217] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 1493.650794][T17217] usb 1-1: config 1 has no interface number 0 [ 1493.657004][T17217] usb 1-1: config 1 interface 105 has no altsetting 0 [ 1493.682578][T17217] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1494.172819][T17217] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.548832][T22035] ALSA: seq fatal error: cannot create timer (-22) [ 1494.564127][T17217] usb 1-1: Product: syz [ 1494.568366][T17217] usb 1-1: Manufacturer: syz [ 1494.575235][T17217] usb 1-1: SerialNumber: syz [ 1495.725662][T17217] aqc111 1-1:1.105: probe with driver aqc111 failed with error -71 [ 1495.749146][T17217] usb 1-1: USB disconnect, device number 82 [ 1496.068122][T22051] efs: cannot read volume header [ 1499.148333][ T30] audit: type=1326 audit(1759782360.778:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22081 comm="syz.4.4096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0621f8eec9 code=0x7ffc0000 [ 1499.185438][T22091] pim6reg: entered allmulticast mode [ 1499.265546][ T30] audit: type=1326 audit(1759782360.778:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22081 comm="syz.4.4096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0621f8eec9 code=0x7ffc0000 [ 1499.301063][T22098] No control pipe specified [ 1499.308165][T22097] tipc: Enabled bearer , priority 0 [ 1499.315231][T22097] syzkaller0: entered promiscuous mode [ 1499.321510][T22097] syzkaller0: entered allmulticast mode [ 1499.364775][T22097] FAULT_INJECTION: forcing a failure. [ 1499.364775][T22097] name failslab, interval 1, probability 0, space 0, times 0 [ 1499.379480][T22097] CPU: 1 UID: 0 PID: 22097 Comm: syz.0.4099 Not tainted syzkaller #0 PREEMPT(full) [ 1499.379505][T22097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1499.379517][T22097] Call Trace: [ 1499.379523][T22097] [ 1499.379531][T22097] dump_stack_lvl+0x16c/0x1f0 [ 1499.379555][T22097] should_fail_ex+0x512/0x640 [ 1499.379576][T22097] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 1499.379610][T22097] should_failslab+0xc2/0x120 [ 1499.379634][T22097] kmem_cache_alloc_node_noprof+0x78/0x770 [ 1499.379662][T22097] ? __alloc_skb+0x2b2/0x380 [ 1499.379688][T22097] ? __alloc_skb+0x2b2/0x380 [ 1499.379706][T22097] __alloc_skb+0x2b2/0x380 [ 1499.379726][T22097] ? __pfx___alloc_skb+0x10/0x10 [ 1499.379752][T22097] ? if_nlmsg_size+0x475/0xaf0 [ 1499.379780][T22097] rtmsg_ifinfo_build_skb+0x81/0x280 [ 1499.379812][T22097] rtnetlink_event+0xf3/0x1f0 [ 1499.379840][T22097] notifier_call_chain+0xb9/0x410 [ 1499.379862][T22097] ? __pfx_rtnetlink_event+0x10/0x10 [ 1499.379894][T22097] call_netdevice_notifiers_info+0xbe/0x140 [ 1499.379924][T22097] netif_set_mtu_ext+0x590/0x7d0 [ 1499.379950][T22097] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 1499.379978][T22097] ? __lock_acquire+0xb97/0x1ce0 [ 1499.380015][T22097] netif_set_mtu+0x98/0x140 [ 1499.380037][T22097] ? __pfx_netif_set_mtu+0x10/0x10 [ 1499.380071][T22097] ? full_name_hash+0xbc/0x110 [ 1499.380101][T22097] dev_set_mtu+0xb2/0x260 [ 1499.380128][T22097] dev_ifsioc+0xd28/0x1f70 [ 1499.380153][T22097] ? __pfx_dev_ifsioc+0x10/0x10 [ 1499.380176][T22097] ? __pfx___mutex_lock+0x10/0x10 [ 1499.380205][T22097] ? dev_load+0x8e/0x240 [ 1499.380232][T22097] dev_ioctl+0x223/0x10e0 [ 1499.380256][T22097] sock_do_ioctl+0x19d/0x280 [ 1499.380285][T22097] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1499.380321][T22097] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1499.380350][T22097] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1499.380379][T22097] sock_ioctl+0x227/0x6b0 [ 1499.380408][T22097] ? __pfx_sock_ioctl+0x10/0x10 [ 1499.380435][T22097] ? hook_file_ioctl_common+0x145/0x410 [ 1499.380468][T22097] ? selinux_file_ioctl+0x180/0x270 [ 1499.380488][T22097] ? selinux_file_ioctl+0xb4/0x270 [ 1499.380511][T22097] ? __pfx_sock_ioctl+0x10/0x10 [ 1499.380541][T22097] __x64_sys_ioctl+0x18e/0x210 [ 1499.380571][T22097] do_syscall_64+0xcd/0x4e0 [ 1499.380594][T22097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1499.380614][T22097] RIP: 0033:0x7f87eb38eec9 [ 1499.380630][T22097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1499.380648][T22097] RSP: 002b:00007f87ec1d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1499.380668][T22097] RAX: ffffffffffffffda RBX: 00007f87eb5e5fa0 RCX: 00007f87eb38eec9 [ 1499.380682][T22097] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 1499.380694][T22097] RBP: 00007f87ec1d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1499.380706][T22097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1499.380718][T22097] R13: 00007f87eb5e6038 R14: 00007f87eb5e5fa0 R15: 00007ffff1ec0ae8 [ 1499.380747][T22097] [ 1499.687107][ C1] vkms_vblank_simulate: vblank timer overrun [ 1499.694461][ T30] audit: type=1326 audit(1759782360.808:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22081 comm="syz.4.4096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f0621f8eec9 code=0x7ffc0000 [ 1499.717812][ C1] vkms_vblank_simulate: vblank timer overrun [ 1499.724174][ T30] audit: type=1326 audit(1759782360.808:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22081 comm="syz.4.4096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0621f8eec9 code=0x7ffc0000 [ 1499.747518][ C1] vkms_vblank_simulate: vblank timer overrun [ 1499.749920][T22097] tipc: Resetting bearer [ 1499.754115][ T30] audit: type=1326 audit(1759782360.808:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22081 comm="syz.4.4096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0621f8eec9 code=0x7ffc0000 [ 1499.783030][ C1] vkms_vblank_simulate: vblank timer overrun [ 1499.789092][ T30] audit: type=1326 audit(1759782360.808:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22081 comm="syz.4.4096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f0621f8eec9 code=0x7ffc0000 [ 1499.812589][ T30] audit: type=1326 audit(1759782360.808:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22081 comm="syz.4.4096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0621f8eec9 code=0x7ffc0000 [ 1499.836218][ T30] audit: type=1326 audit(1759782360.808:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22081 comm="syz.4.4096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0621f8eec9 code=0x7ffc0000 [ 1499.859756][ T30] audit: type=1326 audit(1759782360.808:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22081 comm="syz.4.4096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0621f8eec9 code=0x7ffc0000 [ 1499.883080][ C1] vkms_vblank_simulate: vblank timer overrun [ 1499.889104][ T30] audit: type=1326 audit(1759782360.808:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22081 comm="syz.4.4096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0621f8eec9 code=0x7ffc0000 [ 1499.912428][ C1] vkms_vblank_simulate: vblank timer overrun [ 1500.059145][T22095] tipc: Resetting bearer [ 1500.095816][T22095] tipc: Disabling bearer [ 1500.432471][ T24] tipc: Node number set to 340555812 [ 1500.650731][T22110] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4103'. [ 1501.488514][T22116] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22116 comm=syz.5.4105 [ 1502.229428][ T977] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1502.832368][ T977] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1502.843868][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1502.855854][ T977] usb 1-1: config 0 descriptor?? [ 1502.995936][T22126] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4108'. [ 1503.090598][ T977] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1503.206100][T22131] SQUASHFS error: Failed to read block 0x0: -5 [ 1503.300852][ T977] [drm:udl_init] *ERROR* Selecting channel failed [ 1503.318918][T22131] unable to read squashfs_super_block [ 1503.384620][ T977] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 1503.912926][ T977] [drm] Initialized udl on minor 2 [ 1503.929995][ T977] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1503.943857][ T977] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1503.952765][T17674] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1503.962216][ T977] usb 1-1: USB disconnect, device number 83 [ 1503.968176][T17674] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1504.243655][T15437] Bluetooth: hci3: hcon ffff888052500000 sent 1 < count 6030 [ 1506.989816][ T5838] Bluetooth: hci4: command 0x1003 tx timeout [ 1506.999514][T15437] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1508.026896][T22178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22178 comm=syz.5.4122 [ 1508.223708][T22181] veth0_to_bridge: entered promiscuous mode [ 1508.565076][T17674] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1508.749991][T17674] usb 7-1: Using ep0 maxpacket: 32 [ 1508.780653][T17674] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1508.793268][T17674] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1509.066044][T22180] veth0_to_bridge: left promiscuous mode [ 1509.236574][T17674] usb 7-1: config 0 descriptor?? [ 1510.992584][T17674] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1511.002267][T17674] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1511.248935][T17674] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1511.266427][T17674] usb 7-1: media controller created [ 1511.509441][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1511.509473][ T30] audit: type=1400 audit(1759782373.108:877): avc: denied { setopt } for pid=22192 comm="syz.4.4126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1512.108172][T17674] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1515.797050][T22233] fuse: Bad value for 'fd' [ 1516.571061][T17674] DVB: Unable to find symbol dib7000p_attach() [ 1516.594570][T17674] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1516.642931][T22239] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4136'. [ 1516.859708][T17674] rc_core: IR keymap rc-dib0700-rc5 not found [ 1516.887763][T17674] Registered IR keymap rc-empty [ 1516.907758][T17674] dvb-usb: could not initialize remote control. [ 1516.942308][T17674] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1517.506569][T17674] usb 7-1: USB disconnect, device number 14 [ 1518.068621][T17674] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1519.901892][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1519.915151][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1521.060028][T22292] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4148'. [ 1521.841934][T22300] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4150'. [ 1526.626714][T22355] Bluetooth: MGMT ver 1.23 [ 1526.669521][ T24] usb 1-1: new full-speed USB device number 84 using dummy_hcd [ 1526.686611][ T30] audit: type=1400 audit(1759782388.308:878): avc: denied { map } for pid=22354 comm="syz.5.4164" path="socket:[83203]" dev="sockfs" ino=83203 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1526.854681][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1526.897274][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1526.997863][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1527.059507][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1527.067499][ T24] usb 1-1: SerialNumber: syz [ 1527.109483][ T24] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 1527.128031][ T24] usb-storage 1-1:1.0: USB Mass Storage device detected [ 1527.167924][ T24] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1527.216687][ T24] scsi host1: usb-storage 1-1:1.0 [ 1527.672930][T22383] netlink: 'syz.6.4170': attribute type 1 has an invalid length. [ 1529.018459][T17674] usb 1-1: USB disconnect, device number 84 [ 1529.033289][T22390] gretap1: entered promiscuous mode [ 1530.210114][T22383] macvlan2: entered promiscuous mode [ 1530.219473][T22383] macvlan2: entered allmulticast mode [ 1530.263665][T22383] bond3: entered promiscuous mode [ 1530.392273][T22383] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1530.433567][T22383] bond3: left promiscuous mode [ 1530.869404][ T24] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1531.019446][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1531.031516][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1531.083411][ T30] audit: type=1400 audit(1759782392.718:879): avc: denied { mounton } for pid=22405 comm="syz.3.4175" path="/232/file0" dev="tmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 1531.301557][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1531.338928][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1531.480614][ T3029] Bluetooth: hci4: Frame reassembly failed (-84) [ 1531.722624][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1531.736032][ T24] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1531.750053][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1531.758154][ T24] usb 6-1: Product: syz [ 1531.762705][ T24] usb 6-1: Manufacturer: syz [ 1531.767410][ T24] usb 6-1: SerialNumber: syz [ 1531.804092][ T24] usb 6-1: config 0 descriptor?? [ 1532.500588][T22402] binder: binder_mmap: 22401 200000000000-200000b36000 bad vm_flags failed -1 [ 1532.531543][T17217] usb 6-1: USB disconnect, device number 80 [ 1533.512753][T15437] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1535.747011][T22451] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22451 comm=syz.3.4188 [ 1535.870189][T22458] netlink: 'syz.0.4189': attribute type 1 has an invalid length. [ 1535.919443][ T5895] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1536.079519][ T5895] usb 6-1: Using ep0 maxpacket: 32 [ 1536.086482][ T5895] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1536.152447][ T5895] usb 6-1: config 0 has no interface number 0 [ 1536.191805][ T5895] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1536.201044][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.209127][ T5895] usb 6-1: Product: syz [ 1536.232761][ T5895] usb 6-1: Manufacturer: syz [ 1536.247541][ T5895] usb 6-1: SerialNumber: syz [ 1536.293548][T22460] gretap1: entered promiscuous mode [ 1536.300101][ T5895] usb 6-1: config 0 descriptor?? [ 1536.344069][T22463] macvlan2: entered promiscuous mode [ 1536.360593][ T5895] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1536.370368][T22463] macvlan2: entered allmulticast mode [ 1536.376455][ T5895] usb 6-1: selecting invalid altsetting 1 [ 1536.383735][T22463] bond7: entered promiscuous mode [ 1536.394194][ T5895] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1536.430878][ T5895] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1536.443149][T22463] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1536.457131][T22463] bond7: left promiscuous mode [ 1536.478825][ T5895] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1536.499083][ T5895] usb 6-1: media controller created [ 1536.920987][T22469] netlink: 'syz.5.4187': attribute type 4 has an invalid length. [ 1537.206314][ T5895] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1538.718858][T15437] Bluetooth: hci4: command 0x1003 tx timeout [ 1538.726874][ T5838] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1538.739897][ T5895] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1538.747233][ T5895] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1539.471131][T22481] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 1539.583287][T22488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22488 comm=syz.3.4193 [ 1540.438374][ T5895] usb 6-1: USB disconnect, device number 81 [ 1541.070470][ T30] audit: type=1400 audit(1759782402.698:880): avc: denied { bind } for pid=22500 comm="syz.3.4200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1542.999442][T22530] netlink: 'syz.3.4205': attribute type 1 has an invalid length. [ 1543.466397][T22530] bond5: entered promiscuous mode [ 1543.471806][T22530] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1543.546396][T22532] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4198'. [ 1544.248970][T22537] loop2: detected capacity change from 0 to 7 [ 1544.264704][T22537] Dev loop2: unable to read RDB block 7 [ 1544.286010][T22537] loop2: AHDI p1 p2 p3 [ 1544.296101][T22537] loop2: partition table partially beyond EOD, truncated [ 1544.308489][T22537] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1544.316083][T22537] loop2: p3 start 335544320 is beyond EOD, truncated [ 1544.727429][ T3029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1544.825004][ T3029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1545.385907][T22555] overlayfs: failed to clone upperpath [ 1545.555044][T22557] loop2: detected capacity change from 0 to 7 [ 1545.573888][T21702] Dev loop2: unable to read RDB block 7 [ 1545.579806][T21702] loop2: AHDI p1 p2 p3 [ 1545.584028][T21702] loop2: partition table partially beyond EOD, truncated [ 1545.602211][T21702] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1545.609097][T21702] loop2: p3 start 335544320 is beyond EOD, truncated [ 1545.627901][T22557] Dev loop2: unable to read RDB block 7 [ 1545.638027][T22557] loop2: AHDI p1 p2 p3 [ 1545.648817][T22557] loop2: partition table partially beyond EOD, truncated [ 1545.659681][T22557] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1545.687292][T22557] loop2: p3 start 335544320 is beyond EOD, truncated [ 1545.733007][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.739718][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.012764][ T3029] Bluetooth: hci4: Frame reassembly failed (-84) [ 1546.019395][ T3002] Bluetooth: hci4: Frame reassembly failed (-84) [ 1548.058590][T15437] Bluetooth: hci4: command 0x1003 tx timeout [ 1548.066582][ T5838] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1550.225075][T22594] overlayfs: failed to clone upperpath [ 1550.311169][T22595] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4227'. [ 1551.249541][ T977] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1551.321875][T22618] overlayfs: failed to clone upperpath [ 1551.859377][ T977] usb 1-1: Using ep0 maxpacket: 32 [ 1551.866326][ T977] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1551.905899][ T977] usb 1-1: config 0 has no interface number 0 [ 1551.916934][T22625] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1551.930634][T22627] FAULT_INJECTION: forcing a failure. [ 1551.930634][T22627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1551.944386][T22627] CPU: 0 UID: 0 PID: 22627 Comm: syz.4.4236 Not tainted syzkaller #0 PREEMPT(full) [ 1551.944409][T22627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1551.944416][T22627] Call Trace: [ 1551.944421][T22627] [ 1551.944425][T22627] dump_stack_lvl+0x16c/0x1f0 [ 1551.944448][T22627] should_fail_ex+0x512/0x640 [ 1551.944464][T22627] _copy_from_user+0x2e/0xd0 [ 1551.944478][T22627] core_sys_select+0x35b/0xc20 [ 1551.944495][T22627] ? __pfx_core_sys_select+0x10/0x10 [ 1551.944521][T22627] ? set_user_sigmask+0x21b/0x2b0 [ 1551.944544][T22627] ? __pfx_set_user_sigmask+0x10/0x10 [ 1551.944576][T22627] do_pselect.constprop.0+0x19f/0x1e0 [ 1551.944591][T22627] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 1551.944610][T22627] __x64_sys_pselect6+0x182/0x240 [ 1551.944622][T22627] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 1551.944639][T22627] do_syscall_64+0xcd/0x4e0 [ 1551.944651][T22627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1551.944663][T22627] RIP: 0033:0x7f0621f8eec9 [ 1551.944673][T22627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1551.944684][T22627] RSP: 002b:00007f0622d86038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1551.944695][T22627] RAX: ffffffffffffffda RBX: 00007f06221e6090 RCX: 00007f0621f8eec9 [ 1551.944703][T22627] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 1551.944710][T22627] RBP: 00007f0622d86090 R08: 0000000000000000 R09: 0000000000000000 [ 1551.944717][T22627] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 1551.944724][T22627] R13: 00007f06221e6128 R14: 00007f06221e6090 R15: 00007ffd426b7148 [ 1551.944739][T22627] [ 1551.946450][ T977] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1552.126340][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1552.135595][ T977] usb 1-1: Product: syz [ 1552.199623][ T977] usb 1-1: Manufacturer: syz [ 1552.213075][ T977] usb 1-1: SerialNumber: syz [ 1552.259117][ T977] usb 1-1: config 0 descriptor?? [ 1552.274385][ T977] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1552.299383][ T977] usb 1-1: selecting invalid altsetting 1 [ 1552.309585][ T977] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1552.322536][ T977] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1552.350502][ T977] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1552.377760][ T977] usb 1-1: media controller created [ 1552.428304][ T977] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1552.775672][T22647] netlink: 'syz.0.4231': attribute type 4 has an invalid length. [ 1553.606450][ T30] audit: type=1400 audit(1759782415.208:881): avc: denied { ioctl } for pid=22649 comm="syz.6.4245" path="socket:[83887]" dev="sockfs" ino=83887 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1553.631178][ C0] vkms_vblank_simulate: vblank timer overrun [ 1553.805218][ T977] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1553.869028][ T30] audit: type=1400 audit(1759782415.208:882): avc: denied { bind } for pid=22649 comm="syz.6.4245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1553.904509][ T977] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1554.248790][ T977] usb 1-1: USB disconnect, device number 85 [ 1556.565887][ T3571] Bluetooth: hci4: Frame reassembly failed (-84) [ 1556.709489][ T24] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 1557.026011][ T24] usb 7-1: config 1 interface 0 altsetting 6 endpoint 0x1 is Bulk; changing to Interrupt [ 1557.123951][ T24] usb 7-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1557.151674][ T24] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1557.169636][ T24] usb 7-1: string descriptor 0 read error: -22 [ 1557.185976][ T24] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1557.207423][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1557.236040][T22682] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1557.469475][ T24] usb 7-1: USB disconnect, device number 15 [ 1557.729435][ T5895] usb 1-1: new full-speed USB device number 86 using dummy_hcd [ 1557.890694][ T5895] usb 1-1: not running at top speed; connect to a high speed hub [ 1557.923949][ T5895] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 1557.954962][ T5895] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1557.969488][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1557.977475][ T5895] usb 1-1: Product: syz [ 1557.999608][ T5895] usb 1-1: Manufacturer: syz [ 1558.004207][ T5895] usb 1-1: SerialNumber: syz [ 1558.321059][ T5895] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1558.328343][ T5895] usb 1-1: unit 5 not found! [ 1558.365341][ T5895] usb 1-1: USB disconnect, device number 86 [ 1558.421310][T21702] udevd[21702]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1558.609507][ T5838] Bluetooth: hci4: command 0x1003 tx timeout [ 1558.616904][T15437] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1560.201447][T22718] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 1561.884889][T22734] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4268'. [ 1561.949103][T22734] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4268'. [ 1561.999445][T14470] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1562.154992][T22734] FAULT_INJECTION: forcing a failure. [ 1562.154992][T22734] name failslab, interval 1, probability 0, space 0, times 0 [ 1562.169636][T22734] CPU: 0 UID: 0 PID: 22734 Comm: syz.0.4268 Not tainted syzkaller #0 PREEMPT(full) [ 1562.169661][T22734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1562.169672][T22734] Call Trace: [ 1562.169679][T22734] [ 1562.169686][T22734] dump_stack_lvl+0x16c/0x1f0 [ 1562.169710][T22734] should_fail_ex+0x512/0x640 [ 1562.169723][T22734] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1562.169745][T22734] should_failslab+0xc2/0x120 [ 1562.169759][T22734] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1562.169776][T22734] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 1562.169796][T22734] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 1562.169810][T22734] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 1562.169828][T22734] idr_get_free+0x528/0xa30 [ 1562.169850][T22734] idr_alloc_u32+0x190/0x2f0 [ 1562.169868][T22734] ? __pfx_idr_alloc_u32+0x10/0x10 [ 1562.169890][T22734] tcf_idr_check_alloc+0x136/0x770 [ 1562.169909][T22734] ? __pfx_tcf_idr_check_alloc+0x10/0x10 [ 1562.169927][T22734] ? __nla_parse+0x40/0x60 [ 1562.169944][T22734] tcf_vlan_init+0x2af/0x1160 [ 1562.169957][T22734] ? __pfx_tcf_vlan_init+0x10/0x10 [ 1562.169967][T22734] ? __pfx___nla_validate_parse+0x10/0x10 [ 1562.169989][T22734] ? __nla_parse+0x40/0x60 [ 1562.170005][T22734] tcf_action_init_1+0x45d/0x6c0 [ 1562.170023][T22734] ? tc_lookup_action_n+0xc9/0xf0 [ 1562.170038][T22734] ? __pfx_tcf_action_init_1+0x10/0x10 [ 1562.170056][T22734] ? __pfx_tc_action_load_ops+0x10/0x10 [ 1562.170080][T22734] ? __nla_parse+0x40/0x60 [ 1562.170096][T22734] tcf_action_init+0x432/0xa50 [ 1562.170119][T22734] ? __pfx_tcf_action_init+0x10/0x10 [ 1562.170148][T22734] ? arch_stack_walk+0xa6/0x100 [ 1562.170178][T22734] ? kmem_cache_free+0x2d4/0x6c0 [ 1562.170191][T22734] ? __lock_acquire+0x62e/0x1ce0 [ 1562.170206][T22734] tcf_action_add+0xee/0x5c0 [ 1562.170219][T22734] ? __pfx_tcf_action_add+0x10/0x10 [ 1562.170253][T22734] ? __nla_parse+0x40/0x60 [ 1562.170270][T22734] tc_ctl_action+0x35b/0x470 [ 1562.170281][T22734] ? __pfx_tc_ctl_action+0x10/0x10 [ 1562.170297][T22734] ? __pfx_tc_ctl_action+0x10/0x10 [ 1562.170308][T22734] rtnetlink_rcv_msg+0x3c6/0xe90 [ 1562.170325][T22734] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1562.170351][T22734] ? ref_tracker_free+0x37c/0x830 [ 1562.170367][T22734] netlink_rcv_skb+0x158/0x420 [ 1562.170382][T22734] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1562.170397][T22734] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1562.170417][T22734] ? netlink_deliver_tap+0x1ae/0xd30 [ 1562.170434][T22734] netlink_unicast+0x5a7/0x870 [ 1562.170450][T22734] ? __pfx_netlink_unicast+0x10/0x10 [ 1562.170471][T22734] netlink_sendmsg+0x8c8/0xdd0 [ 1562.170491][T22734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1562.170512][T22734] ____sys_sendmsg+0xa98/0xc70 [ 1562.170529][T22734] ? copy_msghdr_from_user+0x10a/0x160 [ 1562.170543][T22734] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1562.170566][T22734] ___sys_sendmsg+0x134/0x1d0 [ 1562.170580][T22734] ? __pfx____sys_sendmsg+0x10/0x10 [ 1562.170613][T22734] __sys_sendmsg+0x16d/0x220 [ 1562.170626][T22734] ? __pfx___sys_sendmsg+0x10/0x10 [ 1562.170649][T22734] do_syscall_64+0xcd/0x4e0 [ 1562.170662][T22734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1562.170674][T22734] RIP: 0033:0x7f87eb38eec9 [ 1562.170687][T22734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1562.170705][T22734] RSP: 002b:00007f87ec1d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1562.170724][T22734] RAX: ffffffffffffffda RBX: 00007f87eb5e5fa0 RCX: 00007f87eb38eec9 [ 1562.170737][T22734] RDX: 0000000000000000 RSI: 00002000000096c0 RDI: 0000000000000003 [ 1562.170747][T22734] RBP: 00007f87ec1d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1562.170754][T22734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1562.170760][T22734] R13: 00007f87eb5e6038 R14: 00007f87eb5e5fa0 R15: 00007ffff1ec0ae8 [ 1562.170776][T22734] [ 1562.656856][T22738] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 1562.999591][T14470] usb 7-1: Using ep0 maxpacket: 32 [ 1563.010498][T14470] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 1563.035118][T14470] usb 7-1: config 0 has no interface number 0 [ 1563.059396][T14470] usb 7-1: config 0 interface 89 has no altsetting 0 [ 1563.073446][T14470] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1563.089374][T14470] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.097362][T14470] usb 7-1: Product: syz [ 1563.137318][T14470] usb 7-1: Manufacturer: syz [ 1563.147054][T14470] usb 7-1: SerialNumber: syz [ 1563.171995][T14470] usb 7-1: config 0 descriptor?? [ 1563.203676][T14470] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1563.308109][T14470] em28xx 7-1:0.89: Video interface 89 found: bulk [ 1564.693018][T14470] em28xx 7-1:0.89: unknown em28xx chip ID (0) [ 1564.939389][T18296] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1565.239211][T14470] em28xx 7-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1565.250029][T18296] usb 1-1: Using ep0 maxpacket: 32 [ 1565.257509][T14470] em28xx 7-1:0.89: board has no eeprom [ 1565.264854][T18296] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1565.281170][T18296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1565.763140][T14470] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67) [ 1565.780919][T18296] usb 1-1: config 0 descriptor?? [ 1565.786955][T14470] em28xx 7-1:0.89: analog set to bulk mode. [ 1565.808101][T17674] em28xx 7-1:0.89: Registering V4L2 extension [ 1565.830447][T14470] usb 7-1: USB disconnect, device number 16 [ 1565.874191][T14470] em28xx 7-1:0.89: Disconnecting em28xx [ 1566.044325][T18296] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1566.052922][T17674] em28xx 7-1:0.89: Config register raw data: 0xffffffed [ 1566.520498][T17674] em28xx 7-1:0.89: AC97 chip type couldn't be determined [ 1566.529060][T18296] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1566.574912][T17674] em28xx 7-1:0.89: No AC97 audio processor [ 1566.879444][T18296] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1566.894486][T17674] usb 7-1: Decoder not found [ 1566.905542][T18296] usb 1-1: media controller created [ 1566.915546][T17674] em28xx 7-1:0.89: failed to create media graph [ 1566.937463][T17674] em28xx 7-1:0.89: V4L2 device video103 deregistered [ 1566.972726][T17674] em28xx 7-1:0.89: Registering snapshot button... [ 1566.993527][T18296] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1567.017765][T17674] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input49 [ 1567.098025][ T5838] Bluetooth: hci4: command 0x1003 tx timeout [ 1567.105578][T15437] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1567.219497][T17674] em28xx 7-1:0.89: Remote control support is not available for this card. [ 1567.240704][T14470] em28xx 7-1:0.89: Closing input extension [ 1567.251724][T14470] em28xx 7-1:0.89: Deregistering snapshot button [ 1567.340325][T14470] em28xx 7-1:0.89: Freeing device [ 1567.485846][T18296] DVB: Unable to find symbol dib7000p_attach() [ 1567.524548][T18296] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1567.839465][T18296] rc_core: IR keymap rc-dib0700-rc5 not found [ 1567.895801][T18296] Registered IR keymap rc-empty [ 1568.103306][T18296] dvb-usb: could not initialize remote control. [ 1568.118138][T18296] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1568.309412][T18296] usb 1-1: USB disconnect, device number 87 [ 1568.381188][T18296] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1569.194249][T22810] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=22810 comm=syz.0.4286 [ 1570.617761][T22831] overlayfs: failed to resolve './file0': -2 [ 1570.716698][T22831] loop2: detected capacity change from 0 to 7 [ 1570.834366][T22831] Dev loop2: unable to read RDB block 7 [ 1570.859439][T22831] loop2: AHDI p1 p2 p3 [ 1570.869523][T22831] loop2: partition table partially beyond EOD, truncated [ 1571.302107][T22831] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1571.312698][T22831] loop2: p3 start 335544320 is beyond EOD, truncated [ 1571.636460][T22841] overlayfs: failed to clone upperpath [ 1572.227511][T17217] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1572.587613][T22860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=22860 comm=syz.4.4301 [ 1572.649403][T17217] usb 1-1: Using ep0 maxpacket: 32 [ 1572.668025][T17217] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1572.677564][T17217] usb 1-1: config 0 has no interface number 0 [ 1572.799421][T18296] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 1572.876537][T17217] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1572.914899][T17217] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.949361][T18296] usb 7-1: device descriptor read/64, error -71 [ 1572.957382][T17217] usb 1-1: Product: syz [ 1572.962842][T17217] usb 1-1: Manufacturer: syz [ 1572.975257][T17217] usb 1-1: SerialNumber: syz [ 1573.004119][T17217] usb 1-1: config 0 descriptor?? [ 1573.033313][T17217] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1573.048830][T17217] usb 1-1: selecting invalid altsetting 1 [ 1573.055864][T17217] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1573.079156][T17217] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1573.094236][T17217] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1573.104392][T17217] usb 1-1: media controller created [ 1573.188722][T17217] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1573.199390][T18296] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 1573.472595][T22877] netlink: 'syz.0.4296': attribute type 4 has an invalid length. [ 1574.156508][T22881] overlayfs: failed to resolve './file1': -2 [ 1574.271308][T18296] usb 7-1: device descriptor read/64, error -71 [ 1574.433323][T18296] usb usb7-port1: attempt power cycle [ 1574.450219][T17217] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1574.461485][T17217] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1574.559454][ T5895] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1574.749443][ T5895] usb 6-1: Using ep0 maxpacket: 32 [ 1574.755883][ T5895] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1574.764074][ T5895] usb 6-1: config 0 has no interface number 0 [ 1574.772686][ T5895] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1574.781755][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.789949][ T5895] usb 6-1: Product: syz [ 1574.794087][ T5895] usb 6-1: Manufacturer: syz [ 1574.798650][ T5895] usb 6-1: SerialNumber: syz [ 1574.805156][ T5895] usb 6-1: config 0 descriptor?? [ 1574.812090][ T5895] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1574.819375][T18296] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 1574.820927][ T5895] usb 6-1: selecting invalid altsetting 1 [ 1574.834250][ T5895] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1574.843442][ T5895] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1574.853898][ T5895] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1574.862282][ T5895] usb 6-1: media controller created [ 1574.872076][T18296] usb 7-1: device descriptor read/8, error -71 [ 1574.882104][ T5895] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1575.013671][T17217] usb 1-1: USB disconnect, device number 88 [ 1575.046716][T22892] comedi comedi0: comedi_config --init_data is deprecated [ 1575.219433][T18296] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 1575.323915][T22897] netlink: 'syz.5.4305': attribute type 4 has an invalid length. [ 1575.703214][T18296] usb 7-1: device not accepting address 20, error -71 [ 1575.905358][T18296] usb usb7-port1: unable to enumerate USB device [ 1576.518277][ T5895] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1576.543964][ T5895] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1576.564114][T22907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=22907 comm=syz.3.4312 [ 1577.288903][ T5895] usb 6-1: USB disconnect, device number 82 [ 1577.385667][T12209] Bluetooth: hci4: Frame reassembly failed (-84) [ 1577.545678][T12209] Bluetooth: hci4: Frame reassembly failed (-84) [ 1579.419512][ T5838] Bluetooth: hci4: command 0x1003 tx timeout [ 1579.443241][T15437] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1581.301751][T22956] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1581.310852][T22959] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=22959 comm=syz.5.4326 [ 1581.441732][T22964] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 1581.830733][T22956] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4325'. [ 1581.843322][T22956] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4325'. [ 1582.109793][T22972] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1582.116582][T22972] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1582.319427][ T30] audit: type=1400 audit(1759782443.948:883): avc: denied { listen } for pid=22979 comm="syz.3.4331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1582.392915][ T30] audit: type=1400 audit(1759782444.028:884): avc: denied { connect } for pid=22979 comm="syz.3.4331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1582.489690][ T977] usb 6-1: new full-speed USB device number 83 using dummy_hcd [ 1583.097858][T22991] lo speed is unknown, defaulting to 1000 [ 1583.105598][T22991] vxcan1 speed is unknown, defaulting to 1000 [ 1583.299997][ T977] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1583.449472][ T977] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1583.489061][ T977] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1583.842736][ T977] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1583.882698][ T977] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1583.891942][ T977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1583.900518][ T977] usb 6-1: Product: syz [ 1583.904681][ T977] usb 6-1: Manufacturer: syz [ 1583.909269][ T977] usb 6-1: SerialNumber: syz [ 1584.024131][ T977] usb 6-1: config 0 descriptor?? [ 1584.089608][ T5895] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1584.202491][T23005] loop2: detected capacity change from 0 to 7 [ 1584.228255][T23005] Dev loop2: unable to read RDB block 7 [ 1584.247609][T23005] loop2: AHDI p1 p2 p3 [ 1584.252063][T23005] loop2: partition table partially beyond EOD, truncated [ 1584.268869][T23009] netlink: 'syz.5.4330': attribute type 10 has an invalid length. [ 1584.280004][T23005] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1584.290538][T23009] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode [ 1584.297742][T23009] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 1584.305547][T23005] loop2: p3 start 335544320 is beyond EOD, truncated [ 1584.329799][T23009] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1584.348708][T23009] netlink: 'syz.5.4330': attribute type 10 has an invalid length. [ 1584.458887][T23009] netlink: 'syz.5.4330': attribute type 10 has an invalid length. [ 1584.468643][ T5895] usb 7-1: Using ep0 maxpacket: 32 [ 1584.479752][ T5895] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1584.488792][ T5895] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1584.514414][T23009] netlink: 'syz.5.4330': attribute type 10 has an invalid length. [ 1584.531035][ T5895] usb 7-1: config 0 descriptor?? [ 1584.539567][T23009] netlink: 'syz.5.4330': attribute type 10 has an invalid length. [ 1584.558501][T23009] netlink: 'syz.5.4330': attribute type 10 has an invalid length. [ 1584.809859][T23013] new mount options do not match the existing superblock, will be ignored [ 1584.850843][T23013] option changes via remount are deprecated (pid=23006 comm=syz.0.4339) [ 1584.995770][T23013] lo speed is unknown, defaulting to 1000 [ 1585.002989][T23013] vxcan1 speed is unknown, defaulting to 1000 [ 1585.027620][ T5895] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1585.057151][T23009] netlink: 'syz.5.4330': attribute type 10 has an invalid length. [ 1585.072257][ T5895] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1585.083141][T23009] netlink: 'syz.5.4330': attribute type 10 has an invalid length. [ 1585.091742][T23015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=23015 comm=syz.4.4340 [ 1585.094252][ T5895] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1585.158756][ T5895] usb 7-1: media controller created [ 1585.180450][ T5895] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1585.258953][T23009] netlink: 'syz.5.4330': attribute type 10 has an invalid length. [ 1585.629946][ T5895] DVB: Unable to find symbol dib7000p_attach() [ 1585.636282][ T5895] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1585.778328][ T24] usb 6-1: USB disconnect, device number 83 [ 1585.957126][ T30] audit: type=1400 audit(1759782447.578:885): avc: denied { setattr } for pid=23025 comm="syz.4.4343" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1586.033986][ T5895] rc_core: IR keymap rc-dib0700-rc5 not found [ 1586.040720][ T5895] Registered IR keymap rc-empty [ 1586.045792][ T5895] dvb-usb: could not initialize remote control. [ 1586.053526][ T5895] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1586.069707][ T5895] usb 7-1: USB disconnect, device number 21 [ 1586.096781][ T5895] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1586.201181][T23028] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 1586.868266][T23030] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1588.016179][T23046] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=23046 comm=syz.5.4351 [ 1591.389399][T23087] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1592.623334][ T30] audit: type=1400 audit(1759782454.258:886): avc: denied { getopt } for pid=23100 comm="syz.5.4363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1593.223946][T23107] overlayfs: failed to clone upperpath [ 1594.159449][ T8421] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1594.440342][ T8421] usb 7-1: Using ep0 maxpacket: 32 [ 1594.447066][ T8421] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1594.456882][ T8421] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.475223][ T8421] usb 7-1: config 0 descriptor?? [ 1594.539209][T23125] overlayfs: invalid origin (000000790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 1594.709440][ T8421] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1594.742070][ T8421] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1594.789895][ T8421] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1594.798839][ T8421] usb 7-1: media controller created [ 1595.375534][ T8421] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1596.301742][ T8421] DVB: Unable to find symbol dib7000p_attach() [ 1596.805917][ T8421] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1596.899060][ T8421] rc_core: IR keymap rc-dib0700-rc5 not found [ 1596.908694][ T8421] Registered IR keymap rc-empty [ 1596.914937][ T8421] dvb-usb: could not initialize remote control. [ 1596.934267][ T8421] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1596.961976][ T8421] usb 7-1: USB disconnect, device number 22 [ 1597.367455][ T8421] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1597.428948][ T30] audit: type=1326 audit(1759782459.058:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23152 comm="syz.6.4377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde98f8eec9 code=0x7ffc0000 [ 1597.528793][ T30] audit: type=1326 audit(1759782459.098:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23152 comm="syz.6.4377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde98f8eec9 code=0x7ffc0000 [ 1597.603000][ T30] audit: type=1326 audit(1759782459.098:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23152 comm="syz.6.4377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde98f8eec9 code=0x7ffc0000 [ 1597.631428][T23159] FAULT_INJECTION: forcing a failure. [ 1597.631428][T23159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1597.661371][ T30] audit: type=1326 audit(1759782459.098:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23152 comm="syz.6.4377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fde98f8eec9 code=0x7ffc0000 [ 1597.684671][ C0] vkms_vblank_simulate: vblank timer overrun [ 1597.692614][ T30] audit: type=1326 audit(1759782459.098:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23152 comm="syz.6.4377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde98f8eec9 code=0x7ffc0000 [ 1597.716036][ T30] audit: type=1326 audit(1759782459.098:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23152 comm="syz.6.4377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde98f8eec9 code=0x7ffc0000 [ 1597.739379][ C0] vkms_vblank_simulate: vblank timer overrun [ 1597.759262][T23159] CPU: 0 UID: 0 PID: 23159 Comm: syz.4.4378 Not tainted syzkaller #0 PREEMPT(full) [ 1597.759290][T23159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1597.759301][T23159] Call Trace: [ 1597.759309][T23159] [ 1597.759317][T23159] dump_stack_lvl+0x16c/0x1f0 [ 1597.759342][T23159] should_fail_ex+0x512/0x640 [ 1597.759369][T23159] _copy_to_user+0x32/0xd0 [ 1597.759395][T23159] simple_read_from_buffer+0xcb/0x170 [ 1597.759430][T23159] proc_fail_nth_read+0x197/0x240 [ 1597.759456][T23159] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1597.759483][T23159] ? rw_verify_area+0xcf/0x6c0 [ 1597.759512][T23159] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1597.759537][T23159] vfs_read+0x1e4/0xcf0 [ 1597.759561][T23159] ? __pfx___mutex_lock+0x10/0x10 [ 1597.759582][T23159] ? __pfx_vfs_read+0x10/0x10 [ 1597.759611][T23159] ? __fget_files+0x20e/0x3c0 [ 1597.759642][T23159] ksys_read+0x12a/0x250 [ 1597.759662][T23159] ? __pfx_ksys_read+0x10/0x10 [ 1597.759691][T23159] do_syscall_64+0xcd/0x4e0 [ 1597.759714][T23159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1597.759735][T23159] RIP: 0033:0x7f0621f8d8dc [ 1597.759752][T23159] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1597.759771][T23159] RSP: 002b:00007f0622d86030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1597.759790][T23159] RAX: ffffffffffffffda RBX: 00007f06221e6090 RCX: 00007f0621f8d8dc [ 1597.759804][T23159] RDX: 000000000000000f RSI: 00007f0622d860a0 RDI: 0000000000000006 [ 1597.759816][T23159] RBP: 00007f0622d86090 R08: 0000000000000000 R09: 0000000000000000 [ 1597.759828][T23159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1597.759839][T23159] R13: 00007f06221e6128 R14: 00007f06221e6090 R15: 00007ffd426b7148 [ 1597.759868][T23159] [ 1597.866775][ T30] audit: type=1326 audit(1759782459.098:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23152 comm="syz.6.4377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fde98f8d710 code=0x7ffc0000 [ 1597.867314][ C0] vkms_vblank_simulate: vblank timer overrun [ 1597.967190][ C0] vkms_vblank_simulate: vblank timer overrun [ 1597.992222][ T30] audit: type=1326 audit(1759782459.098:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23152 comm="syz.6.4377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde98f8eec9 code=0x7ffc0000 [ 1598.073175][ C0] vkms_vblank_simulate: vblank timer overrun [ 1598.710221][ T30] audit: type=1326 audit(1759782459.098:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23152 comm="syz.6.4377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fde98f8eec9 code=0x7ffc0000 [ 1598.834863][ T30] audit: type=1326 audit(1759782459.138:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23152 comm="syz.6.4377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde98f8eec9 code=0x7ffc0000 [ 1599.072459][ T30] audit: type=1326 audit(1759782459.138:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23152 comm="syz.6.4377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde98f8eec9 code=0x7ffc0000 [ 1599.290380][ T30] audit: type=1326 audit(1759782459.158:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23152 comm="syz.6.4377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fde98f8eec9 code=0x7ffc0000 [ 1599.324235][ T30] audit: type=1326 audit(1759782459.158:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23152 comm="syz.6.4377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde98f8eec9 code=0x7ffc0000 [ 1599.355916][T23175] FAULT_INJECTION: forcing a failure. [ 1599.355916][T23175] name failslab, interval 1, probability 0, space 0, times 0 [ 1599.380764][T23175] CPU: 0 UID: 0 PID: 23175 Comm: syz.6.4383 Not tainted syzkaller #0 PREEMPT(full) [ 1599.380789][T23175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1599.380801][T23175] Call Trace: [ 1599.380808][T23175] [ 1599.380815][T23175] dump_stack_lvl+0x16c/0x1f0 [ 1599.380839][T23175] should_fail_ex+0x512/0x640 [ 1599.380860][T23175] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 1599.380894][T23175] should_failslab+0xc2/0x120 [ 1599.380917][T23175] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 1599.380949][T23175] ? __d_alloc+0x32/0xae0 [ 1599.380981][T23175] ? __d_alloc+0x32/0xae0 [ 1599.381003][T23175] __d_alloc+0x32/0xae0 [ 1599.381025][T23175] ? __pfx_idr_alloc_u32+0x10/0x10 [ 1599.381063][T23175] d_alloc_pseudo+0x1c/0xc0 [ 1599.381091][T23175] alloc_file_pseudo+0xcf/0x230 [ 1599.381121][T23175] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1599.381150][T23175] ? find_held_lock+0x2b/0x80 [ 1599.381183][T23175] __anon_inode_getfile+0xe8/0x280 [ 1599.381214][T23175] bpf_link_prime+0x10f/0x290 [ 1599.381235][T23175] bpf_raw_tp_link_attach+0x2ad/0x630 [ 1599.381258][T23175] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 1599.381277][T23175] ? find_held_lock+0x2b/0x80 [ 1599.381305][T23175] ? __fget_files+0x204/0x3c0 [ 1599.381339][T23175] ? fput+0x9b/0xd0 [ 1599.381364][T23175] ? __bpf_prog_get+0x97/0x2a0 [ 1599.381393][T23175] __sys_bpf+0x20c1/0x4980 [ 1599.381417][T23175] ? __pfx___sys_bpf+0x10/0x10 [ 1599.381436][T23175] ? find_held_lock+0x2b/0x80 [ 1599.381470][T23175] ? find_held_lock+0x2b/0x80 [ 1599.381504][T23175] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1599.381543][T23175] ? fput+0x9b/0xd0 [ 1599.381568][T23175] ? ksys_write+0x1ac/0x250 [ 1599.381588][T23175] ? __pfx_ksys_write+0x10/0x10 [ 1599.381614][T23175] __x64_sys_bpf+0x78/0xc0 [ 1599.381634][T23175] ? lockdep_hardirqs_on+0x7c/0x110 [ 1599.381663][T23175] do_syscall_64+0xcd/0x4e0 [ 1599.381686][T23175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1599.381706][T23175] RIP: 0033:0x7fde98f8eec9 [ 1599.381724][T23175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1599.381743][T23175] RSP: 002b:00007fde99ee7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1599.381768][T23175] RAX: ffffffffffffffda RBX: 00007fde991e5fa0 RCX: 00007fde98f8eec9 [ 1599.381782][T23175] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000011 [ 1599.381797][T23175] RBP: 00007fde99ee7090 R08: 0000000000000000 R09: 0000000000000000 [ 1599.381810][T23175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1599.381822][T23175] R13: 00007fde991e6038 R14: 00007fde991e5fa0 R15: 00007fff5e9bad88 [ 1599.381852][T23175] [ 1599.648119][ C0] vkms_vblank_simulate: vblank timer overrun [ 1603.689396][T14470] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1603.929413][T14470] usb 6-1: Using ep0 maxpacket: 32 [ 1603.946380][T14470] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1603.999364][T14470] usb 6-1: config 0 has no interface number 0 [ 1604.056578][T14470] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1604.099214][T14470] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1604.134772][T14470] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1604.209419][T14470] usb 6-1: Product: syz [ 1604.213583][T14470] usb 6-1: Manufacturer: syz [ 1604.289135][T14470] usb 6-1: SerialNumber: syz [ 1604.360530][T14470] usb 6-1: config 0 descriptor?? [ 1604.410982][T14470] smsc75xx v1.0.0 [ 1605.798495][T14470] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1605.823676][T14470] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1605.856072][T14470] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1605.898191][T14470] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 1605.961194][T14470] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1606.028719][T14470] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 1606.106572][T14470] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -61 [ 1606.831123][T23221] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4393'. [ 1607.199885][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.206200][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.649810][ T977] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1607.793575][T23224] gretap1: entered promiscuous mode [ 1607.938547][ T977] usb 1-1: Using ep0 maxpacket: 32 [ 1607.993951][ T977] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1608.074414][ T977] usb 1-1: config 0 has no interface number 0 [ 1608.180663][ T977] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1608.275959][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.333571][ T977] usb 1-1: Product: syz [ 1608.359496][ T977] usb 1-1: Manufacturer: syz [ 1608.419340][ T977] usb 1-1: SerialNumber: syz [ 1608.460303][T14470] usb 6-1: USB disconnect, device number 84 [ 1608.500228][ T977] usb 1-1: config 0 descriptor?? [ 1608.541658][ T977] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1608.629346][ T977] usb 1-1: selecting invalid altsetting 1 [ 1608.635080][ T977] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1608.770536][ T977] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1609.015278][T23232] netlink: 'syz.0.4398': attribute type 4 has an invalid length. [ 1609.409782][ T977] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1609.460133][ T977] usb 1-1: media controller created [ 1609.546398][ T977] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1609.699389][ T977] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1609.713485][ T977] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1609.838171][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 1609.838184][ T30] audit: type=1400 audit(1759782471.468:953): avc: denied { execute } for pid=23229 comm="syz.5.4399" path="/dev/audio1" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 1609.838549][ T977] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1609.905371][ T977] usb 1-1: USB disconnect, device number 89 [ 1610.667882][T23250] netlink: 'syz.3.4403': attribute type 4 has an invalid length. [ 1611.181185][T23248] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4402'. [ 1611.343575][T23248] SQUASHFS error: Failed to read block 0x0: -5 [ 1611.383971][T23248] unable to read squashfs_super_block [ 1611.540574][T17217] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1611.739471][T17217] usb 6-1: Using ep0 maxpacket: 32 [ 1611.754653][T17217] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 1611.770461][T17217] usb 6-1: config 0 has no interface number 0 [ 1611.776844][T17217] usb 6-1: config 0 interface 89 has no altsetting 0 [ 1611.887568][T23263] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 1612.505365][T17217] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1612.542879][T17217] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.551744][T17217] usb 6-1: Product: syz [ 1612.555978][T17217] usb 6-1: Manufacturer: syz [ 1612.560972][T17217] usb 6-1: SerialNumber: syz [ 1612.583314][T17217] usb 6-1: config 0 descriptor?? [ 1612.817858][T17217] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1613.798422][T17217] em28xx 6-1:0.89: Video interface 89 found: bulk [ 1614.188423][T17217] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 1614.842532][ T10] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1615.039466][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1615.051832][ T10] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1615.061782][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1615.094936][ T10] usb 7-1: config 0 descriptor?? [ 1615.670081][ T10] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1615.680472][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1615.714030][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1615.729079][ T10] usb 7-1: media controller created [ 1615.780871][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1615.943124][ T10] DVB: Unable to find symbol dib7000p_attach() [ 1616.203178][T17217] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1616.211535][T17217] em28xx 6-1:0.89: board has no eeprom [ 1616.269554][T17217] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 1616.401784][T17217] em28xx 6-1:0.89: analog set to bulk mode. [ 1616.407820][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1616.415078][ T5895] em28xx 6-1:0.89: Registering V4L2 extension [ 1616.588248][T17217] usb 6-1: USB disconnect, device number 85 [ 1616.625242][T17217] em28xx 6-1:0.89: Disconnecting em28xx [ 1616.725688][ T10] rc_core: IR keymap rc-dib0700-rc5 not found [ 1616.739169][ T10] Registered IR keymap rc-empty [ 1616.757385][ T10] dvb-usb: could not initialize remote control. [ 1616.767272][ T10] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1616.849403][ T5895] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 1616.862502][ T5895] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 1616.878665][ T5895] em28xx 6-1:0.89: No AC97 audio processor [ 1616.907897][ T10] usb 7-1: USB disconnect, device number 23 [ 1617.008443][T23314] fuse: Bad value for 'fd' [ 1617.170547][ T5895] usb 6-1: Decoder not found [ 1617.189950][ T3571] Bluetooth: hci4: Frame reassembly failed (-84) [ 1617.205215][ T5895] em28xx 6-1:0.89: failed to create media graph [ 1617.219917][ T5895] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 1617.658083][ T5895] em28xx 6-1:0.89: Registering snapshot button... [ 1617.673328][ T5895] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input54 [ 1617.978650][ T10] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1618.007433][ T5895] em28xx 6-1:0.89: Remote control support is not available for this card. [ 1618.076433][T17217] em28xx 6-1:0.89: Closing input extension [ 1618.097626][T17217] em28xx 6-1:0.89: Deregistering snapshot button [ 1618.190478][T17217] em28xx 6-1:0.89: Freeing device [ 1618.863342][T23333] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 1618.863760][T23334] overlayfs: failed to clone upperpath [ 1619.009546][ T5838] Bluetooth: hci4: command 0x1003 tx timeout [ 1619.017105][T15437] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1619.470225][T23347] netlink: 'syz.4.4428': attribute type 4 has an invalid length. [ 1620.277141][T23357] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1620.402620][T23342] netlink: 'syz.5.4427': attribute type 8 has an invalid length. [ 1621.491493][T23372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4436'. [ 1623.189201][ T3571] Bluetooth: hci4: Frame reassembly failed (-84) [ 1623.319385][T18296] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1623.959338][T18296] usb 7-1: Using ep0 maxpacket: 32 [ 1623.966181][T18296] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1623.974757][T18296] usb 7-1: config 0 has no interface number 0 [ 1623.982867][T18296] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1623.992008][T18296] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1624.000151][T18296] usb 7-1: Product: syz [ 1624.004423][T18296] usb 7-1: Manufacturer: syz [ 1624.009036][T18296] usb 7-1: SerialNumber: syz [ 1624.019227][T18296] usb 7-1: config 0 descriptor?? [ 1624.026589][T18296] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1624.035413][T18296] usb 7-1: selecting invalid altsetting 1 [ 1624.041396][T18296] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1624.055401][T18296] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1624.066733][T18296] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1624.075076][T18296] usb 7-1: media controller created [ 1624.089456][T18296] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1624.545932][T23402] netlink: 'syz.6.4440': attribute type 4 has an invalid length. [ 1625.179607][T15437] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1625.319537][T18296] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1625.353514][T18296] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1626.223196][T18296] usb 7-1: USB disconnect, device number 24 [ 1628.669172][T23439] FAULT_INJECTION: forcing a failure. [ 1628.669172][T23439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1628.682418][T23439] CPU: 1 UID: 0 PID: 23439 Comm: syz.0.4455 Not tainted syzkaller #0 PREEMPT(full) [ 1628.682444][T23439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1628.682456][T23439] Call Trace: [ 1628.682463][T23439] [ 1628.682472][T23439] dump_stack_lvl+0x16c/0x1f0 [ 1628.682496][T23439] should_fail_ex+0x512/0x640 [ 1628.682523][T23439] _copy_from_user+0x2e/0xd0 [ 1628.682548][T23439] ucma_write+0x128/0x330 [ 1628.682568][T23439] ? __pfx_ucma_write+0x10/0x10 [ 1628.682587][T23439] ? bpf_lsm_file_permission+0x9/0x10 [ 1628.682609][T23439] ? security_file_permission+0x71/0x210 [ 1628.682634][T23439] ? rw_verify_area+0xcf/0x6c0 [ 1628.682666][T23439] ? __pfx_ucma_write+0x10/0x10 [ 1628.682684][T23439] vfs_write+0x2a0/0x11d0 [ 1628.682716][T23439] ? __pfx_vfs_write+0x10/0x10 [ 1628.682735][T23439] ? find_held_lock+0x2b/0x80 [ 1628.682765][T23439] ? __fget_files+0x204/0x3c0 [ 1628.682792][T23439] ? __fget_files+0x20e/0x3c0 [ 1628.682821][T23439] ksys_write+0x1f8/0x250 [ 1628.682842][T23439] ? __pfx_ksys_write+0x10/0x10 [ 1628.682872][T23439] do_syscall_64+0xcd/0x4e0 [ 1628.682895][T23439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1628.682916][T23439] RIP: 0033:0x7f87eb38eec9 [ 1628.682933][T23439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1628.682952][T23439] RSP: 002b:00007f87ec194038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1628.682971][T23439] RAX: ffffffffffffffda RBX: 00007f87eb5e6180 RCX: 00007f87eb38eec9 [ 1628.682986][T23439] RDX: 0000000000000118 RSI: 0000200000000280 RDI: 0000000000000008 [ 1628.682998][T23439] RBP: 00007f87ec194090 R08: 0000000000000000 R09: 0000000000000000 [ 1628.683011][T23439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1628.683024][T23439] R13: 00007f87eb5e6218 R14: 00007f87eb5e6180 R15: 00007ffff1ec0ae8 [ 1628.683053][T23439] [ 1628.875676][ C1] vkms_vblank_simulate: vblank timer overrun [ 1629.852672][T23454] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4460'. [ 1630.029587][T17217] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1631.244205][T17217] usb 6-1: Using ep0 maxpacket: 16 [ 1631.293024][T17217] usb 6-1: config 4 has an invalid interface number: 51 but max is 0 [ 1631.376471][T17217] usb 6-1: config 4 has no interface number 0 [ 1631.505319][T17217] usb 6-1: config 4 interface 51 has no altsetting 0 [ 1631.541693][T17217] usb 6-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 1631.551255][T17217] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1631.559656][T17217] usb 6-1: Product: syz [ 1631.563816][T17217] usb 6-1: Manufacturer: syz [ 1631.568428][T17217] usb 6-1: SerialNumber: syz [ 1631.603011][T17217] cdc_eem 6-1:4.51: probe with driver cdc_eem failed with error -22 [ 1631.614825][T23469] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4464'. [ 1631.629897][T23470] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4465'. [ 1631.742666][T23472] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4465'. [ 1633.446976][T17217] usb 6-1: USB disconnect, device number 86 [ 1634.119539][T23489] netlink: 'syz.5.4468': attribute type 10 has an invalid length. [ 1635.354965][T23515] netlink: 'syz.0.4475': attribute type 4 has an invalid length. [ 1635.382278][T23515] netlink: 'syz.0.4475': attribute type 4 has an invalid length. [ 1635.461103][T23519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4476'. [ 1635.505778][T23511] 9pnet_fd: Insufficient options for proto=fd [ 1635.884195][ T30] audit: type=1400 audit(1759782497.518:954): avc: denied { ioctl } for pid=23525 comm="syz.3.4481" path="socket:[89353]" dev="sockfs" ino=89353 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1635.948288][ T30] audit: type=1400 audit(1759782497.558:955): avc: denied { write } for pid=23525 comm="syz.3.4481" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 1636.455331][ T30] audit: type=1326 audit(1759782498.078:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23531 comm="syz.0.4483" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f87eb38eec9 code=0x0 [ 1636.609540][T18296] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1636.839313][T18296] usb 6-1: Using ep0 maxpacket: 32 [ 1636.855568][T18296] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 1636.902395][T18296] usb 6-1: config 0 has no interface number 0 [ 1636.965423][T18296] usb 6-1: config 0 interface 89 has no altsetting 0 [ 1636.988908][T18296] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1636.999344][T18296] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1637.021797][T18296] usb 6-1: Product: syz [ 1637.029005][T18296] usb 6-1: Manufacturer: syz [ 1637.052711][T18296] usb 6-1: SerialNumber: syz [ 1637.069953][T18296] usb 6-1: config 0 descriptor?? [ 1637.392807][T18296] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1637.409547][T18296] em28xx 6-1:0.89: Video interface 89 found: bulk [ 1637.599521][ T5895] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1637.746256][T23549] overlayfs: missing 'lowerdir' [ 1637.784355][T23549] loop2: detected capacity change from 0 to 7 [ 1637.791132][T23549] Dev loop2: unable to read RDB block 7 [ 1637.796817][T23549] loop2: AHDI p1 p2 p3 [ 1637.801470][T23549] loop2: partition table partially beyond EOD, truncated [ 1637.809012][T23549] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1637.816853][T23549] loop2: p3 start 335544320 is beyond EOD, truncated [ 1637.823783][ T5895] usb 7-1: Using ep0 maxpacket: 32 [ 1637.832915][ T5895] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 1637.841228][ T5895] usb 7-1: config 0 has no interface number 0 [ 1637.847676][ T5895] usb 7-1: config 0 interface 89 has no altsetting 0 [ 1637.883387][ T5895] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1637.895627][ T5895] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1637.904007][ T5895] usb 7-1: Product: syz [ 1637.908469][ T5895] usb 7-1: Manufacturer: syz [ 1637.915424][ T5895] usb 7-1: SerialNumber: syz [ 1637.967463][ T5895] usb 7-1: config 0 descriptor?? [ 1638.021197][ T5895] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1638.078744][ T5895] em28xx 7-1:0.89: Video interface 89 found: bulk [ 1638.279368][T18296] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 1639.380330][ T5895] em28xx 7-1:0.89: unknown em28xx chip ID (0) [ 1639.906534][T23527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1640.172873][ T5895] em28xx 7-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1640.181343][ T5895] em28xx 7-1:0.89: board has no eeprom [ 1640.239838][ T5895] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67) [ 1640.257873][T18296] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1640.259452][ T5895] em28xx 7-1:0.89: analog set to bulk mode. [ 1640.267039][T23574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=23574 comm=syz.0.4495 [ 1640.285051][T18296] em28xx 6-1:0.89: board has no eeprom [ 1640.308582][T17217] em28xx 7-1:0.89: Registering V4L2 extension [ 1640.329795][ T5895] usb 7-1: USB disconnect, device number 25 [ 1640.349141][ T5895] em28xx 7-1:0.89: Disconnecting em28xx [ 1640.359590][T18296] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 1640.366797][T18296] em28xx 6-1:0.89: analog set to bulk mode. [ 1640.460872][T18296] usb 6-1: USB disconnect, device number 87 [ 1640.508449][T17217] em28xx 7-1:0.89: Config register raw data: 0xffffffed [ 1640.536049][T17217] em28xx 7-1:0.89: AC97 chip type couldn't be determined [ 1640.538642][T18296] em28xx 6-1:0.89: Disconnecting em28xx [ 1640.560256][T17217] em28xx 7-1:0.89: No AC97 audio processor [ 1640.578311][T17217] usb 7-1: Decoder not found [ 1640.583274][T17217] em28xx 7-1:0.89: failed to create media graph [ 1640.606052][T17217] em28xx 7-1:0.89: V4L2 device video103 deregistered [ 1640.776665][T23590] loop7: detected capacity change from 0 to 16384 [ 1640.787228][T17217] em28xx 7-1:0.89: Registering snapshot button... [ 1640.824000][T17217] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input55 [ 1640.855866][T17217] em28xx 7-1:0.89: Remote control support is not available for this card. [ 1640.865097][T14470] em28xx 6-1:0.89: Registering V4L2 extension [ 1640.995711][T14470] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 1641.019823][T14470] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 1641.026861][T14470] em28xx 6-1:0.89: No AC97 audio processor [ 1641.050190][T14470] usb 6-1: Decoder not found [ 1641.054785][T14470] em28xx 6-1:0.89: failed to create media graph [ 1641.071269][ C0] blk_print_req_error: 25 callbacks suppressed [ 1641.071298][ C0] I/O error, dev loop7, sector 3840 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 1641.097550][T23592] loop7: detected capacity change from 16384 to 0 [ 1641.104032][T14470] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 1641.111900][T14470] em28xx 6-1:0.89: Registering snapshot button... [ 1641.137981][T14470] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input56 [ 1641.171018][T14470] em28xx 6-1:0.89: Remote control support is not available for this card. [ 1641.235408][ T5895] em28xx 7-1:0.89: Closing input extension [ 1641.247204][ T5895] em28xx 7-1:0.89: Deregistering snapshot button [ 1641.255209][T23585] delete_channel: no stack [ 1641.278530][T18296] em28xx 6-1:0.89: Closing input extension [ 1641.292570][ T5895] em28xx 7-1:0.89: Freeing device [ 1641.587797][T18296] em28xx 6-1:0.89: Deregistering snapshot button [ 1641.616094][T18296] em28xx 6-1:0.89: Freeing device [ 1641.702259][ T5895] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1641.888573][ T5895] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 1642.054095][ T5895] usb 7-1: config 0 has no interface number 0 [ 1642.054139][ T5895] usb 7-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1642.054168][ T5895] usb 7-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1642.054207][ T5895] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 1642.054233][ T5895] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1642.058977][ T5895] usb 7-1: config 0 descriptor?? [ 1642.939423][ T977] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 1643.101976][ T977] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1644.085999][ T977] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1644.098227][ T977] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1644.137643][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1644.147727][ T977] usb 1-1: Product: syz [ 1644.152178][ T977] usb 1-1: Manufacturer: syz [ 1644.176600][ T5895] usbhid 7-1:0.2: can't add hid device: -71 [ 1644.190367][ T5895] usbhid 7-1:0.2: probe with driver usbhid failed with error -71 [ 1644.214498][ T977] usb 1-1: SerialNumber: syz [ 1645.010914][ T5895] usb 7-1: USB disconnect, device number 26 [ 1645.339415][ T5895] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1645.509962][ T5895] usb 7-1: Using ep0 maxpacket: 32 [ 1645.525579][ T5895] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 1645.542783][ T5895] usb 7-1: config 0 has no interface number 0 [ 1645.565233][ T5895] usb 7-1: config 0 interface 89 has no altsetting 0 [ 1645.605709][ T5895] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1645.626774][ T5895] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.641775][ T5895] usb 7-1: Product: syz [ 1645.668516][ T5895] usb 7-1: Manufacturer: syz [ 1645.698155][ T5895] usb 7-1: SerialNumber: syz [ 1645.724327][ T5895] usb 7-1: config 0 descriptor?? [ 1645.761782][ T5895] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1645.794953][ T5895] em28xx 7-1:0.89: Video interface 89 found: bulk [ 1645.853895][T18296] usb 1-1: USB disconnect, device number 90 [ 1646.271009][T23639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1646.295837][T23639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1646.499422][T17217] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1646.615792][ T5895] em28xx 7-1:0.89: unknown em28xx chip ID (0) [ 1646.661004][T17217] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1646.673436][T17217] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1646.683558][T17217] usb 6-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 1646.692948][T17217] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1646.914390][T17217] usb 6-1: config 0 descriptor?? [ 1646.988772][T23644] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4509'. [ 1647.011923][ T30] audit: type=1400 audit(1759782508.618:957): avc: denied { nlmsg_read } for pid=23640 comm="syz.0.4509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1647.360088][T17217] usbhid 6-1:0.0: can't add hid device: -71 [ 1647.434894][T17217] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1647.449714][T17217] usb 6-1: USB disconnect, device number 88 [ 1648.002316][ T977] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1648.628396][ T5895] em28xx 7-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1648.657066][ T5895] em28xx 7-1:0.89: board has no eeprom [ 1648.709372][ T977] usb 1-1: Using ep0 maxpacket: 32 [ 1648.720586][ T977] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1648.729387][ T5895] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67) [ 1648.736798][ T5895] em28xx 7-1:0.89: analog set to bulk mode. [ 1648.739340][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.768424][T15464] em28xx 7-1:0.89: Registering V4L2 extension [ 1648.777581][ T977] usb 1-1: config 0 descriptor?? [ 1648.796802][ T5895] usb 7-1: USB disconnect, device number 27 [ 1648.840928][ T5895] em28xx 7-1:0.89: Disconnecting em28xx [ 1648.885037][T15464] em28xx 7-1:0.89: Config register raw data: 0xffffffed [ 1648.897628][T15464] em28xx 7-1:0.89: AC97 chip type couldn't be determined [ 1649.069346][T15464] em28xx 7-1:0.89: No AC97 audio processor [ 1649.084339][T15464] usb 7-1: Decoder not found [ 1649.088934][T15464] em28xx 7-1:0.89: failed to create media graph [ 1649.089728][ T977] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1649.109459][T15464] em28xx 7-1:0.89: V4L2 device video103 deregistered [ 1649.111082][ T977] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1649.127261][ T977] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1649.144877][T15464] em28xx 7-1:0.89: Registering snapshot button... [ 1649.145735][ T977] usb 1-1: media controller created [ 1649.185171][ T977] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1649.206391][T15464] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input57 [ 1649.242904][T15464] em28xx 7-1:0.89: Remote control support is not available for this card. [ 1649.274579][ T5895] em28xx 7-1:0.89: Closing input extension [ 1649.712106][ T5895] em28xx 7-1:0.89: Deregistering snapshot button [ 1649.853724][ T5895] em28xx 7-1:0.89: Freeing device [ 1649.873889][ T977] DVB: Unable to find symbol dib7000p_attach() [ 1649.899896][ T977] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1650.039368][ T977] rc_core: IR keymap rc-dib0700-rc5 not found [ 1650.045442][ T977] Registered IR keymap rc-empty [ 1650.085874][ T977] dvb-usb: could not initialize remote control. [ 1650.094036][ T977] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1650.117537][ T977] usb 1-1: USB disconnect, device number 91 [ 1650.150808][ T977] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1650.189354][ T5895] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1650.349380][ T5895] usb 7-1: Using ep0 maxpacket: 32 [ 1650.571771][ T5895] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1650.630878][ T5895] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1650.640828][T23680] overlayfs: failed to clone upperpath [ 1650.642522][ T5895] usb 7-1: config 0 descriptor?? [ 1650.715650][T23682] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23682 comm=syz.4.4520 [ 1650.907947][ T5895] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1651.315050][ T5895] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1651.520860][ T5895] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1651.920481][ T5895] usb 7-1: media controller created [ 1651.960644][ T5895] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1652.341181][T23698] overlayfs: failed to clone upperpath [ 1654.130875][ T5895] DVB: Unable to find symbol dib7000p_attach() [ 1654.137111][ T5895] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1654.219375][ T5895] rc_core: IR keymap rc-dib0700-rc5 not found [ 1654.225591][ T5895] Registered IR keymap rc-empty [ 1654.289548][ T5895] dvb-usb: could not initialize remote control. [ 1654.296099][ T5895] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1654.327821][ T5895] usb 7-1: USB disconnect, device number 28 [ 1654.412889][ T5895] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1654.460993][T23716] netlink: 'syz.5.4528': attribute type 10 has an invalid length. [ 1654.472205][T23716] batman_adv: batadv0: Adding interface: wlan0 [ 1654.478723][T23716] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1654.504932][T23716] batman_adv: batadv0: Not using interface wlan0 (retrying later): interface not active [ 1656.829149][T23747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4535'. [ 1657.303740][T23748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4536'. [ 1657.859524][T14470] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1658.100066][T14470] usb 7-1: Using ep0 maxpacket: 32 [ 1658.160578][T14470] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1658.169924][T14470] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1658.180570][T14470] usb 7-1: config 0 descriptor?? [ 1658.195358][ T5895] usb 6-1: new full-speed USB device number 89 using dummy_hcd [ 1658.390922][ T5895] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 1658.399773][T14470] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1658.409074][ T5895] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1658.411695][T14470] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1658.462610][ T5895] usb 6-1: config 1 has no interface number 0 [ 1658.497904][ T5895] usb 6-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1658.509298][T14470] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1658.518153][T14470] usb 7-1: media controller created [ 1658.532170][ T5895] usb 6-1: config 1 interface 105 has no altsetting 0 [ 1658.577653][ T5895] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1658.587599][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1658.595998][T14470] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1658.603381][ T5895] usb 6-1: Product: syz [ 1658.622970][ T5895] usb 6-1: Manufacturer: syz [ 1658.642828][ T5895] usb 6-1: SerialNumber: syz [ 1659.086559][T14470] DVB: Unable to find symbol dib7000p_attach() [ 1659.099171][T14470] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1659.178768][ T5895] aqc111 6-1:1.105: probe with driver aqc111 failed with error -22 [ 1659.237576][ T5895] usb 6-1: USB disconnect, device number 89 [ 1659.249337][T14470] rc_core: IR keymap rc-dib0700-rc5 not found [ 1659.255405][T14470] Registered IR keymap rc-empty [ 1659.391672][T14470] dvb-usb: could not initialize remote control. [ 1659.409523][T14470] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1659.471590][T14470] usb 7-1: USB disconnect, device number 29 [ 1659.761318][T14470] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1660.823003][T23800] kernel read not supported for file /file2 (pid: 23800 comm: syz.3.4551) [ 1660.892042][ T30] audit: type=1800 audit(1759782522.468:958): pid=23800 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.4551" name="file2" dev="mqueue" ino=90246 res=0 errno=0 [ 1660.915364][T23802] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1661.300725][T23811] netlink: zone id is out of range [ 1661.307175][T23811] netlink: zone id is out of range [ 1661.325607][T23811] netlink: zone id is out of range [ 1661.338693][T23811] netlink: zone id is out of range [ 1661.350687][T23811] netlink: zone id is out of range [ 1661.355912][T23811] netlink: zone id is out of range [ 1661.361364][T23811] netlink: zone id is out of range [ 1661.366538][T23811] netlink: zone id is out of range [ 1661.372491][T23811] netlink: zone id is out of range [ 1661.388923][T23811] netlink: zone id is out of range [ 1661.522955][T17217] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1661.659503][T17217] usb 1-1: device descriptor read/64, error -71 [ 1662.249816][T17217] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1662.379318][T17217] usb 1-1: device descriptor read/64, error -71 [ 1662.495576][T17217] usb usb1-port1: attempt power cycle [ 1662.541889][T23833] bpf: Bad value for 'gid' [ 1662.872913][ T30] audit: type=1400 audit(1759782524.168:959): avc: denied { getopt } for pid=23830 comm="syz.5.4559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1663.169632][T17217] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1663.189744][T17217] usb 1-1: device descriptor read/8, error -71 [ 1663.539399][T17217] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1663.559753][T17217] usb 1-1: device descriptor read/8, error -71 [ 1663.679551][T17217] usb usb1-port1: unable to enumerate USB device [ 1663.744733][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1663.754675][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1663.764741][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1663.772947][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1663.780841][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1663.955905][T23843] lo speed is unknown, defaulting to 1000 [ 1663.962444][T23843] vxcan1 speed is unknown, defaulting to 1000 [ 1664.531739][ T30] audit: type=1400 audit(1759782526.068:960): avc: denied { connect } for pid=23850 comm="syz.6.4565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1664.999389][T18296] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1665.159322][T18296] usb 1-1: Using ep0 maxpacket: 32 [ 1665.188364][T18296] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1665.272826][T18296] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1665.302834][T18296] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1665.313119][T18296] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1665.329372][T18296] usb 1-1: config 1 has no interface number 0 [ 1665.335471][T18296] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1665.346213][T18296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1665.371037][T18296] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1665.809797][ T5838] Bluetooth: hci4: command tx timeout [ 1665.841134][T23867] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4564'. [ 1665.851123][T23867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4564'. [ 1665.971850][T23843] chnl_net:caif_netlink_parms(): no params data found [ 1667.235475][T23843] bridge0: port 1(bridge_slave_0) entered blocking state [ 1667.242968][T23843] bridge0: port 1(bridge_slave_0) entered disabled state [ 1667.255293][T23843] bridge_slave_0: entered allmulticast mode [ 1667.267387][T23843] bridge_slave_0: entered promiscuous mode [ 1667.276264][T23843] bridge0: port 2(bridge_slave_1) entered blocking state [ 1667.283437][T23843] bridge0: port 2(bridge_slave_1) entered disabled state [ 1667.290709][T23843] bridge_slave_1: entered allmulticast mode [ 1667.298450][T23843] bridge_slave_1: entered promiscuous mode [ 1667.889452][ T5838] Bluetooth: hci4: command tx timeout [ 1667.903929][T18296] snd_usb_pod 1-1:1.1: set_interface failed [ 1667.916699][T18296] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1667.925703][T18296] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 1667.943172][T18296] usb 1-1: USB disconnect, device number 96 [ 1668.134951][T23843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1668.167485][T23843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1668.614991][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.622773][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.153277][T23843] team0: Port device team_slave_0 added [ 1669.162523][T23843] team0: Port device team_slave_1 added [ 1669.201251][T23899] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4575'. [ 1669.240408][T23901] FAULT_INJECTION: forcing a failure. [ 1669.240408][T23901] name failslab, interval 1, probability 0, space 0, times 0 [ 1669.255430][T23843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1669.263095][T23843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1669.303521][T23901] CPU: 1 UID: 0 PID: 23901 Comm: syz.6.4576 Not tainted syzkaller #0 PREEMPT(full) [ 1669.303545][T23901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1669.303556][T23901] Call Trace: [ 1669.303563][T23901] [ 1669.303571][T23901] dump_stack_lvl+0x16c/0x1f0 [ 1669.303594][T23901] should_fail_ex+0x512/0x640 [ 1669.303615][T23901] ? fs_reclaim_acquire+0xae/0x150 [ 1669.303640][T23901] should_failslab+0xc2/0x120 [ 1669.303663][T23901] __kmalloc_noprof+0xdd/0x880 [ 1669.303692][T23901] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1669.303720][T23901] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1669.303741][T23901] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1669.303766][T23901] ? tomoyo_profile+0x47/0x60 [ 1669.303794][T23901] tomoyo_path_number_perm+0x245/0x580 [ 1669.303829][T23901] ? tomoyo_path_number_perm+0x237/0x580 [ 1669.303860][T23901] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1669.303892][T23901] ? find_held_lock+0x2b/0x80 [ 1669.303945][T23901] ? find_held_lock+0x2b/0x80 [ 1669.303971][T23901] ? hook_file_ioctl_common+0x145/0x410 [ 1669.304003][T23901] ? __fget_files+0x20e/0x3c0 [ 1669.304030][T23901] security_file_ioctl+0x9b/0x240 [ 1669.304054][T23901] __x64_sys_ioctl+0xb7/0x210 [ 1669.304084][T23901] do_syscall_64+0xcd/0x4e0 [ 1669.304107][T23901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1669.304127][T23901] RIP: 0033:0x7fde98f8eec9 [ 1669.304143][T23901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1669.304162][T23901] RSP: 002b:00007fde99ee7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1669.304181][T23901] RAX: ffffffffffffffda RBX: 00007fde991e5fa0 RCX: 00007fde98f8eec9 [ 1669.304194][T23901] RDX: 00002000000002c0 RSI: 00000000c058560f RDI: 0000000000000003 [ 1669.304207][T23901] RBP: 00007fde99ee7090 R08: 0000000000000000 R09: 0000000000000000 [ 1669.304219][T23901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1669.304231][T23901] R13: 00007fde991e6038 R14: 00007fde991e5fa0 R15: 00007fff5e9bad88 [ 1669.304259][T23901] [ 1669.304267][T23901] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1669.521704][T23843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1669.656821][T23843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1669.679436][T23843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1669.757034][T23843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1670.007045][ T5838] Bluetooth: hci4: command tx timeout [ 1670.612405][T23843] hsr_slave_0: entered promiscuous mode [ 1670.683229][T23921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4579'. [ 1670.696478][T23843] hsr_slave_1: entered promiscuous mode [ 1671.065104][T23843] debugfs: 'hsr0' already exists in 'hsr' [ 1671.073911][T23918] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23918 comm=syz.3.4581 [ 1671.087268][T23843] Cannot create hsr debugfs directory [ 1672.129596][ T5838] Bluetooth: hci4: command tx timeout [ 1672.171058][T23843] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.522531][T23843] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1673.659926][T23843] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1673.740111][T23843] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.322016][T23843] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1675.482289][T23843] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1675.514496][T23843] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1675.593190][T23961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4591'. [ 1675.881882][T23843] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1676.020399][T23961] gretap1: entered promiscuous mode [ 1676.261926][T23972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4592'. [ 1676.736340][T23843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1676.763459][T23843] 8021q: adding VLAN 0 to HW filter on device team0 [ 1676.773936][ T3002] bridge0: port 1(bridge_slave_0) entered blocking state [ 1676.781138][ T3002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1676.811206][ T3002] bridge0: port 2(bridge_slave_1) entered blocking state [ 1676.818274][ T3002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1677.419101][T23987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60697 sclass=netlink_route_socket pid=23987 comm=syz.3.4594 [ 1677.467973][ T30] audit: type=1400 audit(1759782539.068:961): avc: denied { read } for pid=23982 comm="syz.3.4594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1677.707244][T23843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1678.427753][T24005] net_ratelimit: 5 callbacks suppressed [ 1678.427772][T24005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1678.653160][T23843] veth0_vlan: entered promiscuous mode [ 1678.665881][T23843] veth1_vlan: entered promiscuous mode [ 1679.240218][T23843] veth0_macvtap: entered promiscuous mode [ 1679.250260][T23843] veth1_macvtap: entered promiscuous mode [ 1679.312346][T23843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1679.339849][T23843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1679.365062][T18147] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1679.385565][T18147] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1679.398668][T18147] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1679.536596][T18147] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1679.602203][ T3002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1679.631191][ T3002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1679.790587][T18147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1679.799011][T18147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1680.616236][T24018] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4601'. [ 1680.907085][T12209] Bluetooth: hci5: Frame reassembly failed (-84) [ 1680.928796][T24031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4603'. [ 1680.947085][T24031] gretap1: entered promiscuous mode [ 1681.016452][T24034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4604'. [ 1681.025680][ T8421] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1681.519289][ T8421] usb 7-1: Using ep0 maxpacket: 16 [ 1681.525923][ T8421] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1681.537206][ T8421] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1681.544151][ T8421] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1681.555900][ T8421] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1681.566766][ T8421] usb 7-1: config 0 descriptor?? [ 1681.682198][T24039] FAULT_INJECTION: forcing a failure. [ 1681.682198][T24039] name failslab, interval 1, probability 0, space 0, times 0 [ 1681.695635][T24039] CPU: 0 UID: 0 PID: 24039 Comm: syz.0.4606 Not tainted syzkaller #0 PREEMPT(full) [ 1681.695660][T24039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1681.695673][T24039] Call Trace: [ 1681.695680][T24039] [ 1681.695688][T24039] dump_stack_lvl+0x16c/0x1f0 [ 1681.695711][T24039] should_fail_ex+0x512/0x640 [ 1681.695727][T24039] ? fs_reclaim_acquire+0xae/0x150 [ 1681.695743][T24039] should_failslab+0xc2/0x120 [ 1681.695757][T24039] __kmalloc_noprof+0xdd/0x880 [ 1681.695774][T24039] ? tomoyo_encode2+0x100/0x3e0 [ 1681.695796][T24039] ? tomoyo_encode2+0x100/0x3e0 [ 1681.695817][T24039] tomoyo_encode2+0x100/0x3e0 [ 1681.695843][T24039] tomoyo_encode+0x29/0x50 [ 1681.695863][T24039] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1681.695882][T24039] tomoyo_path_number_perm+0x245/0x580 [ 1681.695898][T24039] ? tomoyo_path_number_perm+0x237/0x580 [ 1681.695922][T24039] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1681.695950][T24039] ? find_held_lock+0x2b/0x80 [ 1681.696006][T24039] ? find_held_lock+0x2b/0x80 [ 1681.696022][T24039] ? hook_file_ioctl_common+0x145/0x410 [ 1681.696040][T24039] ? __fget_files+0x20e/0x3c0 [ 1681.696056][T24039] security_file_ioctl+0x9b/0x240 [ 1681.696070][T24039] __x64_sys_ioctl+0xb7/0x210 [ 1681.696100][T24039] do_syscall_64+0xcd/0x4e0 [ 1681.696122][T24039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1681.696143][T24039] RIP: 0033:0x7f87eb38eec9 [ 1681.696157][T24039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1681.696170][T24039] RSP: 002b:00007f87ec1d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1681.696182][T24039] RAX: ffffffffffffffda RBX: 00007f87eb5e5fa0 RCX: 00007f87eb38eec9 [ 1681.696190][T24039] RDX: 0000200000000540 RSI: 00000000000007a8 RDI: 0000000000000004 [ 1681.696197][T24039] RBP: 00007f87ec1d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1681.696203][T24039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1681.696210][T24039] R13: 00007f87eb5e6038 R14: 00007f87eb5e5fa0 R15: 00007ffff1ec0ae8 [ 1681.696235][T24039] [ 1681.696253][T24039] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1681.988593][ T8421] nzxt-smart2 0003:1E71:2009.0011: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0 [ 1682.216988][ T30] audit: type=1400 audit(1759782543.848:962): avc: denied { accept } for pid=24041 comm="syz.0.4607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1682.850017][ T5838] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1682.906223][T24043] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1682.913631][T24043] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1682.920883][T24043] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1682.927458][T24043] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1682.934661][T24043] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1682.948434][T24043] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1682.954957][T24043] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1682.965028][T24043] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1683.270964][T24056] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4610'. [ 1683.288981][T24056] gretap1: entered promiscuous mode [ 1683.625414][T17217] usb 7-1: USB disconnect, device number 30 [ 1684.380464][T15437] Bluetooth: hci2: command 0x0406 tx timeout [ 1685.019323][T15437] Bluetooth: hci3: command 0x0406 tx timeout [ 1685.027961][T15437] Bluetooth: hci4: command 0x0c1a tx timeout [ 1685.089465][ T5838] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1685.141112][T24084] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1686.469378][T18435] Bluetooth: hci2: command 0x0406 tx timeout [ 1687.089366][T18435] Bluetooth: hci4: command 0x0c1a tx timeout [ 1687.095479][T18435] Bluetooth: hci3: command 0x0406 tx timeout [ 1687.215723][ T3571] Bluetooth: hci5: Frame reassembly failed (-84) [ 1687.517588][T24108] FAULT_INJECTION: forcing a failure. [ 1687.517588][T24108] name failslab, interval 1, probability 0, space 0, times 0 [ 1687.531919][T24108] CPU: 0 UID: 0 PID: 24108 Comm: syz.5.4623 Not tainted syzkaller #0 PREEMPT(full) [ 1687.531942][T24108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1687.531949][T24108] Call Trace: [ 1687.531953][T24108] [ 1687.531958][T24108] dump_stack_lvl+0x16c/0x1f0 [ 1687.531974][T24108] should_fail_ex+0x512/0x640 [ 1687.531990][T24108] should_failslab+0xc2/0x120 [ 1687.532005][T24108] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 1687.532019][T24108] ? security_netlbl_sid_to_secattr+0x1d8/0x4d0 [ 1687.532039][T24108] ? kstrdup+0x53/0x100 [ 1687.532049][T24108] kstrdup+0x53/0x100 [ 1687.532060][T24108] security_netlbl_sid_to_secattr+0x1d8/0x4d0 [ 1687.532077][T24108] selinux_netlbl_sock_genattr+0x129/0x4f0 [ 1687.532091][T24108] selinux_netlbl_socket_post_create+0xb0/0x1b0 [ 1687.532105][T24108] selinux_socket_post_create+0x2f9/0x7d0 [ 1687.532124][T24108] ? __pfx_selinux_socket_post_create+0x10/0x10 [ 1687.532140][T24108] ? udp_init_sock+0x384/0x450 [ 1687.532155][T24108] ? inet_create+0x94f/0x1040 [ 1687.532168][T24108] security_socket_post_create+0x247/0x260 [ 1687.532188][T24108] __sock_create+0x738/0x8d0 [ 1687.532208][T24108] udp_sock_create4+0xa6/0x450 [ 1687.532224][T24108] ? __pfx_udp_sock_create4+0x10/0x10 [ 1687.532240][T24108] ? lockdep_hardirqs_on+0x7c/0x110 [ 1687.532258][T24108] ? crng_make_state+0x48e/0x6d0 [ 1687.532276][T24108] rxrpc_open_socket+0x4f5/0x6b0 [ 1687.532291][T24108] ? __pfx_rxrpc_open_socket+0x10/0x10 [ 1687.532312][T24108] ? __pfx_rxrpc_client_conn_reap_timeout+0x10/0x10 [ 1687.532328][T24108] ? rcu_is_watching+0x12/0xc0 [ 1687.532347][T24108] rxrpc_lookup_local+0xa01/0x1220 [ 1687.532364][T24108] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 1687.532380][T24108] ? __local_bh_enable_ip+0xa4/0x120 [ 1687.532399][T24108] rxrpc_sendmsg+0x37e/0x680 [ 1687.532417][T24108] ____sys_sendmsg+0xa98/0xc70 [ 1687.532435][T24108] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1687.532458][T24108] ___sys_sendmsg+0x134/0x1d0 [ 1687.532473][T24108] ? __pfx____sys_sendmsg+0x10/0x10 [ 1687.532506][T24108] __sys_sendmsg+0x16d/0x220 [ 1687.532522][T24108] ? __pfx___sys_sendmsg+0x10/0x10 [ 1687.532546][T24108] do_syscall_64+0xcd/0x4e0 [ 1687.532558][T24108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1687.532570][T24108] RIP: 0033:0x7fb6cf78eec9 [ 1687.532579][T24108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1687.532590][T24108] RSP: 002b:00007fb6d0566038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1687.532601][T24108] RAX: ffffffffffffffda RBX: 00007fb6cf9e5fa0 RCX: 00007fb6cf78eec9 [ 1687.532609][T24108] RDX: 0000000000000000 RSI: 0000200000002780 RDI: 0000000000000003 [ 1687.532616][T24108] RBP: 00007fb6d0566090 R08: 0000000000000000 R09: 0000000000000000 [ 1687.532623][T24108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1687.532630][T24108] R13: 00007fb6cf9e6038 R14: 00007fb6cf9e5fa0 R15: 00007ffc8e2d7258 [ 1687.532645][T24108] [ 1688.529694][T18435] Bluetooth: hci2: command 0x0406 tx timeout [ 1689.169504][T18435] Bluetooth: hci4: command 0x0c1a tx timeout [ 1689.249553][ T5838] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1689.256459][T18435] Bluetooth: hci5: command 0x1003 tx timeout [ 1690.163605][T15464] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1690.334761][T15464] usb 6-1: Using ep0 maxpacket: 32 [ 1690.345955][T15464] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 1690.357970][T15464] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1691.311893][T15464] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 1691.329392][T15464] usb 6-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 1691.337721][T15464] usb 6-1: Product: syz [ 1691.348419][T15464] usb 6-1: Manufacturer: syz [ 1691.353624][T15464] usb 6-1: SerialNumber: syz [ 1691.709984][T24147] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 1692.041872][T15464] usb 6-1: config 0 descriptor?? [ 1692.479796][T15464] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1692.506928][T18147] usb 6-1: Failed to submit usb control message: -71 [ 1692.547649][T18147] usb 6-1: unable to send the bmi data to the device: -71 [ 1692.559552][T18147] usb 6-1: unable to get target info from device [ 1692.566901][T18147] usb 6-1: could not get target info (-71) [ 1692.573389][T18147] usb 6-1: could not probe fw (-71) [ 1692.588697][T15464] usb 6-1: USB disconnect, device number 90 [ 1692.997910][T24161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4638'. [ 1694.042782][T24172] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1694.066253][T24172] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1694.137459][T24177] loop2: detected capacity change from 0 to 7 [ 1694.174647][T24177] loop2: [POWERTEC] p1 p2 p3 p4 p5 [ 1694.197234][T24177] loop2: p1 start 1634497125 is beyond EOD, truncated [ 1694.237345][T24177] loop2: p2 size 791543808 extends beyond EOD, truncated [ 1694.257604][T24177] loop2: p3 start 12582912 is beyond EOD, truncated [ 1694.269554][T24177] loop2: p4 size 134217728 extends beyond EOD, truncated [ 1694.279540][T24177] loop2: p5 start 1869348864 is beyond EOD, truncated [ 1694.329425][T15464] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1694.508456][T23411] udevd[23411]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 1694.508564][T21702] udevd[21702]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 1694.758908][T24187] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4645'. [ 1694.788811][T24187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1695.169514][T15464] usb 7-1: Using ep0 maxpacket: 32 [ 1695.193880][T15464] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 1695.218212][T15464] usb 7-1: config 0 has no interface number 0 [ 1695.229304][T15464] usb 7-1: config 0 interface 89 has no altsetting 0 [ 1695.257270][T15464] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1695.266987][T15464] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1695.284801][T24187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1695.292196][T15464] usb 7-1: Product: syz [ 1695.296354][T15464] usb 7-1: Manufacturer: syz [ 1695.301084][T15464] usb 7-1: SerialNumber: syz [ 1695.320455][T15464] usb 7-1: config 0 descriptor?? [ 1695.334937][T15464] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1695.345027][T15464] em28xx 7-1:0.89: Video interface 89 found: bulk [ 1695.521504][T18296] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1695.524379][ T8421] usb 1-1: new full-speed USB device number 97 using dummy_hcd [ 1695.689400][ T8421] usb 1-1: device descriptor read/64, error -71 [ 1695.829291][T18296] usb 6-1: Using ep0 maxpacket: 16 [ 1695.839822][T18296] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1695.854027][T18296] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1696.077380][T24202] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1696.241173][T18296] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1696.251254][T18296] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1696.272004][T18296] usb 6-1: config 0 descriptor?? [ 1696.349360][ T8421] usb 1-1: new full-speed USB device number 98 using dummy_hcd [ 1696.632355][T15464] em28xx 7-1:0.89: unknown em28xx chip ID (0) [ 1696.651509][ T8421] usb 1-1: device descriptor read/64, error -71 [ 1697.040707][ T8421] usb usb1-port1: attempt power cycle [ 1698.089424][ T8421] usb 1-1: new full-speed USB device number 99 using dummy_hcd [ 1698.181175][T15464] em28xx 7-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1698.190531][ T8421] usb 1-1: device descriptor read/8, error -71 [ 1699.023924][T15464] em28xx 7-1:0.89: board has no eeprom [ 1699.111321][T24219] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1699.120159][T15464] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67) [ 1699.127954][T15464] em28xx 7-1:0.89: analog set to bulk mode. [ 1699.144253][T18296] usbhid 6-1:0.0: can't add hid device: -71 [ 1699.152984][ T5895] em28xx 7-1:0.89: Registering V4L2 extension [ 1699.159194][T18296] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1699.272950][T18296] usb 6-1: USB disconnect, device number 91 [ 1699.298115][T24219] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1699.392053][T24225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1699.767338][ T5895] em28xx 7-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 1699.796826][ T5895] em28xx 7-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 1699.832007][ T5895] em28xx 7-1:0.89: reading from i2c device at 0x42 failed (error=-5) [ 1700.478163][ T5895] em28xx 7-1:0.89: reading from i2c device at 0x40 failed (error=-5) [ 1700.491783][ T5895] em28xx 7-1:0.89: Config register raw data: 0xfffffffb [ 1700.496909][T24229] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1700.500702][ T5895] em28xx 7-1:0.89: AC97 chip type couldn't be determined [ 1700.512910][ T5895] em28xx 7-1:0.89: No AC97 audio processor [ 1700.549749][ T5895] usb 7-1: Decoder not found [ 1701.894163][ T5895] em28xx 7-1:0.89: failed to create media graph [ 1701.900951][ T5895] em28xx 7-1:0.89: V4L2 device video103 deregistered [ 1701.917050][ T5895] em28xx 7-1:0.89: Registering snapshot button... [ 1701.918384][T24237] ================================================================== [ 1701.931501][T24237] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0 [ 1701.938959][T24237] Read of size 8 at addr ffff888078824740 by task v4l_id/24237 [ 1701.946484][T24237] [ 1701.948790][T24237] CPU: 0 UID: 0 PID: 24237 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 1701.948811][T24237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1701.948822][T24237] Call Trace: [ 1701.948829][T24237] [ 1701.948836][T24237] dump_stack_lvl+0x116/0x1f0 [ 1701.948857][T24237] print_report+0xcd/0x630 [ 1701.948878][T24237] ? __virt_addr_valid+0x81/0x610 [ 1701.948903][T24237] ? __phys_addr+0xe8/0x180 [ 1701.948929][T24237] ? v4l2_fh_init+0x27d/0x2c0 [ 1701.948952][T24237] kasan_report+0xe0/0x110 [ 1701.948973][T24237] ? v4l2_fh_init+0x27d/0x2c0 [ 1701.948999][T24237] v4l2_fh_init+0x27d/0x2c0 [ 1701.949022][T24237] v4l2_fh_open+0x64/0xa0 [ 1701.949045][T24237] em28xx_v4l2_open+0x24e/0x7e0 [ 1701.949072][T24237] v4l2_open+0x1d2/0x5e0 [ 1701.949093][T24237] ? __pfx_v4l2_open+0x10/0x10 [ 1701.949113][T24237] chrdev_open+0x234/0x6a0 [ 1701.949135][T24237] ? __pfx_chrdev_open+0x10/0x10 [ 1701.949156][T24237] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1701.949180][T24237] do_dentry_open+0x97f/0x1530 [ 1701.949199][T24237] ? __pfx_chrdev_open+0x10/0x10 [ 1701.949226][T24237] vfs_open+0x82/0x3f0 [ 1701.949251][T24237] path_openat+0x1de4/0x2cb0 [ 1701.949275][T24237] ? __pfx_path_openat+0x10/0x10 [ 1701.949300][T24237] do_filp_open+0x20b/0x470 [ 1701.949319][T24237] ? __pfx_do_filp_open+0x10/0x10 [ 1701.949350][T24237] ? alloc_fd+0x471/0x7d0 [ 1701.949372][T24237] do_sys_openat2+0x11b/0x1d0 [ 1701.949394][T24237] ? __pfx_do_sys_openat2+0x10/0x10 [ 1701.949416][T24237] ? find_held_lock+0x2b/0x80 [ 1701.949440][T24237] ? handle_mm_fault+0x2ab/0xd10 [ 1701.949471][T24237] __x64_sys_openat+0x174/0x210 [ 1701.949495][T24237] ? __pfx___x64_sys_openat+0x10/0x10 [ 1701.949519][T24237] ? do_user_addr_fault+0x843/0x1370 [ 1701.949543][T24237] do_syscall_64+0xcd/0x4e0 [ 1701.949561][T24237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1701.949580][T24237] RIP: 0033:0x7fd7a2ca7407 [ 1701.949595][T24237] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1701.949612][T24237] RSP: 002b:00007ffeb9862fc0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1701.949630][T24237] RAX: ffffffffffffffda RBX: 00007fd7a33ea880 RCX: 00007fd7a2ca7407 [ 1701.949642][T24237] RDX: 0000000000000000 RSI: 00007ffeb9863f1d RDI: ffffffffffffff9c [ 1701.949654][T24237] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1701.949664][T24237] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1701.949675][T24237] R13: 00007ffeb9863210 R14: 00007fd7a3551000 R15: 000055af655564d8 [ 1701.949694][T24237] [ 1701.949700][T24237] [ 1702.204143][T24237] Allocated by task 5895: [ 1702.208443][T24237] kasan_save_stack+0x33/0x60 [ 1702.213107][T24237] kasan_save_track+0x14/0x30 [ 1702.217763][T24237] __kasan_kmalloc+0xaa/0xb0 [ 1702.222328][T24237] em28xx_v4l2_init+0x114/0x4080 [ 1702.227249][T24237] em28xx_init_extension+0x137/0x200 [ 1702.232512][T24237] request_module_async+0x61/0x70 [ 1702.237517][T24237] process_one_work+0x9cc/0x1b70 [ 1702.242437][T24237] worker_thread+0x6c8/0xf10 [ 1702.247010][T24237] kthread+0x3c5/0x780 [ 1702.251059][T24237] ret_from_fork+0x56d/0x730 [ 1702.255627][T24237] ret_from_fork_asm+0x1a/0x30 [ 1702.260374][T24237] [ 1702.262672][T24237] Freed by task 5895: [ 1702.266627][T24237] kasan_save_stack+0x33/0x60 [ 1702.271280][T24237] kasan_save_track+0x14/0x30 [ 1702.275934][T24237] __kasan_save_free_info+0x3b/0x60 [ 1702.281379][T24237] __kasan_slab_free+0x5f/0x80 [ 1702.286123][T24237] kfree+0x2b8/0x6d0 [ 1702.290004][T24237] em28xx_v4l2_init+0x22b5/0x4080 [ 1702.295013][T24237] em28xx_init_extension+0x137/0x200 [ 1702.300275][T24237] request_module_async+0x61/0x70 [ 1702.305286][T24237] process_one_work+0x9cc/0x1b70 [ 1702.310202][T24237] worker_thread+0x6c8/0xf10 [ 1702.314770][T24237] kthread+0x3c5/0x780 [ 1702.318815][T24237] ret_from_fork+0x56d/0x730 [ 1702.323384][T24237] ret_from_fork_asm+0x1a/0x30 [ 1702.328130][T24237] [ 1702.330428][T24237] The buggy address belongs to the object at ffff888078824000 [ 1702.330428][T24237] which belongs to the cache kmalloc-8k of size 8192 [ 1702.344459][T24237] The buggy address is located 1856 bytes inside of [ 1702.344459][T24237] freed 8192-byte region [ffff888078824000, ffff888078826000) [ 1702.358405][T24237] [ 1702.360704][T24237] The buggy address belongs to the physical page: [ 1702.367094][T24237] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78820 [ 1702.375830][T24237] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1702.384479][T24237] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1702.391997][T24237] page_type: f5(slab) [ 1702.395959][T24237] raw: 00fff00000000040 ffff88801b027280 ffffea000092cc00 0000000000000002 [ 1702.404536][T24237] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 1702.413105][T24237] head: 00fff00000000040 ffff88801b027280 ffffea000092cc00 0000000000000002 [ 1702.421760][T24237] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 1702.430413][T24237] head: 00fff00000000003 ffffea0001e20801 00000000ffffffff 00000000ffffffff [ 1702.439065][T24237] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1702.447707][T24237] page dumped because: kasan: bad access detected [ 1702.454096][T24237] page_owner tracks the page as allocated [ 1702.459784][T24237] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 11252, tgid 11252 (syz-executor), ts 530388929777, free_ts 530171543456 [ 1702.479816][T24237] post_alloc_hook+0x1c0/0x230 [ 1702.484567][T24237] get_page_from_freelist+0x10a3/0x3a30 [ 1702.490099][T24237] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 1702.495976][T24237] alloc_pages_mpol+0x1fb/0x550 [ 1702.500806][T24237] new_slab+0x24a/0x360 [ 1702.504944][T24237] ___slab_alloc+0xdc4/0x1ae0 [ 1702.509608][T24237] __slab_alloc.constprop.0+0x63/0x110 [ 1702.515049][T24237] __kvmalloc_node_noprof+0x5aa/0x9c0 [ 1702.520396][T24237] pfifo_fast_init+0x12a/0x3b0 [ 1702.525137][T24237] qdisc_create_dflt+0x122/0x490 [ 1702.530051][T24237] dev_activate+0x63f/0x12d0 [ 1702.534619][T24237] __dev_open+0x432/0x7c0 [ 1702.538926][T24237] __dev_change_flags+0x55d/0x720 [ 1702.543931][T24237] netif_change_flags+0x8d/0x160 [ 1702.548846][T24237] do_setlink.constprop.0+0xb53/0x4380 [ 1702.554284][T24237] rtnl_newlink+0x1446/0x2000 [ 1702.558942][T24237] page last free pid 5944 tgid 5944 stack trace: [ 1702.565237][T24237] __free_frozen_pages+0x7df/0x1160 [ 1702.570424][T24237] __put_partials+0x130/0x170 [ 1702.575083][T24237] qlist_free_all+0x4d/0x120 [ 1702.579648][T24237] kasan_quarantine_reduce+0x195/0x1e0 [ 1702.585085][T24237] __kasan_slab_alloc+0x69/0x90 [ 1702.589915][T24237] __kmalloc_cache_noprof+0x274/0x780 [ 1702.595271][T24237] nsim_fib_event_work+0x1279/0x6da0 [ 1702.600535][T24237] process_one_work+0x9cc/0x1b70 [ 1702.605454][T24237] worker_thread+0x6c8/0xf10 [ 1702.610032][T24237] kthread+0x3c5/0x780 [ 1702.614081][T24237] ret_from_fork+0x56d/0x730 [ 1702.618647][T24237] ret_from_fork_asm+0x1a/0x30 [ 1702.623393][T24237] [ 1702.625694][T24237] Memory state around the buggy address: [ 1702.631294][T24237] ffff888078824600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1702.639331][T24237] ffff888078824680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1702.647366][T24237] >ffff888078824700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1702.655399][T24237] ^ [ 1702.661528][T24237] ffff888078824780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1702.669564][T24237] ffff888078824800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1702.677594][T24237] ================================================================== [ 1702.687681][ T5895] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input61 [ 1702.764140][T24237] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1702.771336][T24237] CPU: 0 UID: 0 PID: 24237 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 1702.780349][T24237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1702.790390][T24237] Call Trace: [ 1702.793659][T24237] [ 1702.796572][T24237] dump_stack_lvl+0x3d/0x1f0 [ 1702.801143][T24237] vpanic+0x640/0x6f0 [ 1702.805105][T24237] panic+0xca/0xd0 [ 1702.808803][T24237] ? __pfx_panic+0x10/0x10 [ 1702.813200][T24237] ? v4l2_fh_init+0x27d/0x2c0 [ 1702.817862][T24237] ? preempt_schedule_common+0x44/0xc0 [ 1702.823309][T24237] ? preempt_schedule_thunk+0x16/0x30 [ 1702.828669][T24237] ? check_panic_on_warn+0x1f/0xb0 [ 1702.833762][T24237] check_panic_on_warn+0xab/0xb0 [ 1702.838679][T24237] end_report+0x107/0x170 [ 1702.842989][T24237] kasan_report+0xee/0x110 [ 1702.847389][T24237] ? v4l2_fh_init+0x27d/0x2c0 [ 1702.852060][T24237] v4l2_fh_init+0x27d/0x2c0 [ 1702.856549][T24237] v4l2_fh_open+0x64/0xa0 [ 1702.860864][T24237] em28xx_v4l2_open+0x24e/0x7e0 [ 1702.865704][T24237] v4l2_open+0x1d2/0x5e0 [ 1702.869928][T24237] ? __pfx_v4l2_open+0x10/0x10 [ 1702.874674][T24237] chrdev_open+0x234/0x6a0 [ 1702.879074][T24237] ? __pfx_chrdev_open+0x10/0x10 [ 1702.884171][T24237] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1702.890484][T24237] do_dentry_open+0x97f/0x1530 [ 1702.895227][T24237] ? __pfx_chrdev_open+0x10/0x10 [ 1702.900151][T24237] vfs_open+0x82/0x3f0 [ 1702.904205][T24237] path_openat+0x1de4/0x2cb0 [ 1702.908780][T24237] ? __pfx_path_openat+0x10/0x10 [ 1702.913702][T24237] do_filp_open+0x20b/0x470 [ 1702.918187][T24237] ? __pfx_do_filp_open+0x10/0x10 [ 1702.923199][T24237] ? alloc_fd+0x471/0x7d0 [ 1702.927514][T24237] do_sys_openat2+0x11b/0x1d0 [ 1702.932178][T24237] ? __pfx_do_sys_openat2+0x10/0x10 [ 1702.937358][T24237] ? find_held_lock+0x2b/0x80 [ 1702.942024][T24237] ? handle_mm_fault+0x2ab/0xd10 [ 1702.946950][T24237] __x64_sys_openat+0x174/0x210 [ 1702.951786][T24237] ? __pfx___x64_sys_openat+0x10/0x10 [ 1702.957141][T24237] ? do_user_addr_fault+0x843/0x1370 [ 1702.962414][T24237] do_syscall_64+0xcd/0x4e0 [ 1702.966900][T24237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1702.972771][T24237] RIP: 0033:0x7fd7a2ca7407 [ 1702.977163][T24237] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1702.996747][T24237] RSP: 002b:00007ffeb9862fc0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1703.005139][T24237] RAX: ffffffffffffffda RBX: 00007fd7a33ea880 RCX: 00007fd7a2ca7407 [ 1703.013088][T24237] RDX: 0000000000000000 RSI: 00007ffeb9863f1d RDI: ffffffffffffff9c [ 1703.021045][T24237] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1703.029005][T24237] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1703.036957][T24237] R13: 00007ffeb9863210 R14: 00007fd7a3551000 R15: 000055af655564d8 [ 1703.044917][T24237] [ 1703.048100][T24237] Kernel Offset: disabled [ 1703.052397][T24237] Rebooting in 86400 seconds..