last executing test programs: 7m20.368150164s ago: executing program 2 (id=505): io_setup(0x7, &(0x7f0000003000)) mount(&(0x7f0000000080)=@rnullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='virtiofs\x00', 0x800402, &(0x7f0000000140)='!{-^\x00') io_setup(0x434, &(0x7f0000003580)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) symlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='./file0\x00') readlink(&(0x7f0000000640)='./file0\x00', &(0x7f0000001740)=""/4075, 0xfeb) io_destroy(r0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, 0x0, 0x0) recvmmsg(r4, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/46, 0xfe95}, {&(0x7f0000000700)=""/194, 0xbe}, {&(0x7f0000000280)=""/92}, {&(0x7f0000000800)=""/175}], 0x2}, 0xfffffffa}], 0x1, 0x2122, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x838, &(0x7f00000000c0)={0x0, 0x1998, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000580)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x200}, 0x94) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'}) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14143705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79ae, 0x3180, 0x8000, 0xd7}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f00000000c0)=0xffb, 0x0, 0x4) 7m18.76757357s ago: executing program 2 (id=512): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000300)={0x14, &(0x7f0000000600)={0x40, 0x3, 0xa3, {0xa3, 0xf, "a7fec96144239847e0cde7a31a7e2cd6a3aad2b8e5f10e6b5fb9b3533787330276d06374b7c1ce7905d74419263861289290fed37765feb3d89a79030625b2695236fe8200672a9a492b892b8c251ad6fe7c7a3c3392ac6165b8a9ed697250b6f3e68d7d09768073a18916df4cd183dbd5c67d50b3440dc0ecff2980fc3e4bdbb90929902205d7d7e2f13e368dd6c7b5c8525b2850177e845014ae41b87f5c2981"}}, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000008c0)={0x44, &(0x7f00000006c0)={0x0, 0x7, 0xc8, "17f8dc211d19a1a1c5be956ba86abc90d680250562c197fd7f8da8da0444adf707971532b8fac907478f72658e641f5585f62961b1f2997d31d891add56f9969218d46336fb96ec780e594108b14b04cc07038345358f197f24b174465392277ec13ffa84f6fab2b2391db00cb7cf36d466ad3ce1a673853d1092f825e456150b4bdefba8e3e25ef1be4c2bdd398e8c76cfea6e2aa8708d437c2cf06604c8ba30669b5ed6eb6fc470c8ae2b09cb7151a9bdfd6f16dec55adeddd43d68fc214513d03f2a0c02d1cc7"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x4a}, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x703, 0x800, 0xba4f, 0xfc7, 0x2, 0x800, 0x7, 0x6, 0x4, 0x2, 0x1, 0x1ff}}, &(0x7f00000007c0)={0x20, 0x85, 0x4}, &(0x7f0000000800)={0x20, 0x83, 0x2}, &(0x7f0000000840)={0x20, 0x87, 0x2, 0x8a}, &(0x7f0000000880)={0x20, 0x89, 0x2}}) syz_open_dev$sg(&(0x7f00000002c0), 0x5d7000000000000, 0x2402) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r2, 0x0, 0x0, 0x800) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) migrate_pages(0x0, 0x5, &(0x7f0000000080)=0x2, &(0x7f00000000c0)=0x1) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/61, 0x3d}, {0x0}], 0x2}, 0x12022) pipe2$watch_queue(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) writev(r5, &(0x7f0000000d00)=[{&(0x7f0000000980)="1e224323053928db8911a6e94c88ac5c743fd5030f5e025d3bc03c2b98027f7751d652820c47df22694bee", 0x2b}, {&(0x7f00000009c0)="1056124fae4b04321632924f4327da7186cb1be4ecbe46b18ed65ffbc10da691970e16f616c80d67665782fb95cd8a62841a13c73fad749079d4c50fcc7cb689dc5b8d60540e77f5914445ced008831afc6ce642fd21d70f146515d720ccf3d38548f8e12e5ab33d450c75bd5a17c10e970cf7c79d2950722fe72c2949a82bc698b5f84e2ee69770b43c8385955b0e2b759a43c9644375653654f635a13bde2e2cba81ac0fb53795d7e9f639414fe1fe4c7942e12f83e89d", 0xb8}, {&(0x7f0000000a80)="4ba71007781b6d8cc52cfcdd037217ea0f501940887fc2d6d5", 0x19}, {&(0x7f0000001500)="f6f93eb4ffd2fb332329864b74a8394d67eb1b7406427f7af95e1cf6dd60634942cebccc024122bfa98d93289e97c2bb409b3713013e397f9e1e49788a3bc24aad8286ddbd72d403da3c02bf892b569214ccf50eb3cdca3c29f0dc7067abd4b7c8f6a47c71177a8f48361d03db343e53563a00dc9a478e4bbde928e73167bdc3646447408cda5aeb33b7b38201dddcf8c97d00bac3c5fe0fca63485d491e324c54fe72283d717882b5eafd2311aa2fceacd241ffcf465981802f46a0b58f26f5db4e587242dd262beeec9dc26724f91ba7e861125d70cbd4beb4be32e87abf7d3a9414d06c713907a124903b966c24631c855f44d5774528c0321ec0b9527420f78221d5622d3c584df6827151f867085ed4b05b9ec952e63525786c7e272f27a2067348ec3be73206c4653481e9dc88ebba789f1d744d94c279c2eaa35696d21193ad089f98ecb4fdc7fc9fdbcfff038e977a104a7d2f7025065b2503ac3090bbef5506b59c1953e985641b456aba33ba253165b89daf7c0fbf88f4555e40853378a34cca01a0475c13fc77967c6bf0d996f69684b3b5cc71ffd3986ec0248e86a0dcfc7bd06b8fa6d97a3f74122c99b3ab806ebd0afbdb07d0fdc562bf1fbf48819750cb4bfde25ddbbca7f4c3061c861f9326434b6140275bd3dfc089fc092f0dfd383329649f5a07ac9f61432efdc2470ad22a8332489fae1b58d9bfbc979203b1898e7ea30cc0762b6cefa0e9e5d53305a76abd3c67cee83a4bd6946dcd3eb2cae5fddaa88113efa6257b335ec4ff8bfcac893b1ce57f8007476305d279cba5d3c4472e7bc6b02f0688169f339945297dbd58b8d97534c09ed1fcd62af5fdcc4b79e345b05299ac51cfcd3dfa977bd6645c49351713b1057b427ba8b4fd0276f234a6db5c580aa3e8268c171a80216a8ca58a04803f66a58c86b358c619725f74b30859b78f0874be5cc3c552385a7cae8fc9460d94808349e1ea48caf48f5727f285389a441225d3d9f9a01275fa495e32985a96bacc86c3ed0eb2866a80cd601f019e3795f8dbddd4bc9d81c58730c7c0fe31392f03a264f6be939082fc356f4743a306e8329dd12d03088e6969d30381cfe8ff233b0716e0fb1595c5332da6488591e92a546baaa16fd0b014b5a0c52855c9ae6635d1228f9f3bb19958135b691ec343be0910bb9db38768eeff2aeaa93b8c563cf9ceefbfda8bbf2a1b66ffe0ea9511266bb631efc963de88c9ad28ea43352ce5781218d0f6fc649c9eef1f519730671dd71639fd2b57319fb77b1510a8f4701ed2cc8d8b7c22ea2c14ce732c3d76b97d0762456856b25c54b0ed70be3138c9dd966399c109f4560d28b082642ce299f61ae49e8f4ca57c841ac1bce08f35b4aa049a192937392645ee9e95283338a2f2cdc9fe59697aa260007764e4d3b66aa994cb734c95e12c0865632c439069c1e0087de2d908ea2d432d7ca42d523f7f0db9306234ec22c8d6eb0124cfcccccb5dfff7ae0ba401321be4c653e994e6d21085274a6b2a6bd9e022b2d9f851b968086ee27083d2cd3873e062e686ed510ce36c2568955c701efbf2b0b37827de9816b2243ade60c470955e210e6a9e26fddf0ea502088436301d3b949225c5ebb73fd51e37940455c063289a9ca88cb416e69ddf5e9c02fed1fc458b3f5c3e24ba204ed954a42bb0bc3055928bcbe516ebed3da533413e81a75921fc665303e28b6289e73367ff038cd1e48d0ccc9943f54afc96261a3800a27efa0cf663bcec8ebe4decc1a64152ba47b07b43202db4780898594fb1b12f9315bf742b6d3e8a46731d53273612e819868414f3f58a9dfe4163525fcc21d2dfbd9b556f2a65ed8391328d095cd5ff98c21f4933bc29638698e3c2e4bdbd2a6bb3e945e55488cb7bcaeb63fc0708ac316010e973d7298ae86babd2d82f17635035a950aa292af33a3e813e536b9eeada88cef63182612702d31dc90536f4f589a3c2046993fb8751514ab94771d8354be6bd00bce8ee7352ec10f7aed7cfb5ef19778404ba6cd0721ff6597c12246bedd0262f357be99461b3ee3e992f2feadbd89754727661f63d57a46f95fda51c0a710649e7a98930c80374a2b82a6364a02ac104dea4fc0061cd6136935272699f5af9101c9f572c0a618bda783ec82b7ece1623a78096e6317f6addc1a6640e84440230335ca50768dcd7b714302a68f54237077820d82394182501e1ab729e57f97f5736fe601a97872c4cb64196fc448760b47267f5cc565461e21b4d38608b6c2a4d2ab80bf2740f955faf91e834b496c43d2d0440ea6bf1e98dabe01945a77db24d7dfd68a901f36fe3723f8e67c1c58af3c5fe4f2c8401cbccd5a93727106e6a16eefe79cd98d779952572ddb2156d9996f80ea2577cc0cf817b81a40829d07c5e0af10c78b3df455fefd9824366df81d9a85d5981aa13d8291df9f4a08039f9a5be119c5ed54cfca6771a33d6394506996fac95406f9d22ac36bc8024c7c8c55dac6b5912e7ffadc0d395504366e4e6386d5ac3114c593ae07fa3ee845bd361a2ef8c9782d46f259e1fff270c67a5416883373f316af1c40a1e1434b639dacf44d31264ce6e91ae4c1c1aab141c520675bbf2eaeed9e474edf2f7935044f402a3d49f1b6dd4efadb194cd7dcc764ae155ba684351659262bd95c17902bb39aab833b7a23f2bce43485acdb3f80242d32178e3eaec3b34807940473f2629e00ebdafef61d6c468c4af8993d4a3dafab44f6b76c9f597843a769c2d1e0f1326570c6d22998bc32793a7b092e4f53dd220278734e546b7351d98ca8dc45ccb34d6b35c09845c55c8dddd5f12ee7d43433e6338ba99eeb020064318504f7fbcf745c3815e20e72d8095d0830671703d3f4cc918193bcc32dd5829d2f7013d148c141bb357ef24c43a97d310af8ec95df228d3185083d5d978deba9bc41c317e6eef28120d670734df947c358278d4e1fbdeaee9d012c59bd0c7429f8e844b6f16622214121ef55064bfec2bbb23121f5a18aa246b854ced3ecd6f57f8dc0110787b14b26070ab2d3c4a77eec0296f45f34023d80cdb365751d025f3cc6b0af2819a0920d8fd8174678037bad64483ad8a958025a4bbb82a254ae0fdc2f35f100547de0876693e042de3ea088562d3a5d8648510ae0c047cacb43f88cad88b72ef209e24f0dee639261990d858f4852255279bb2ac36095e2094b2879739ffecad592d61b28732c529b62bb5f60265ed558d3dd223b69ca8fc011051280e9b40b99d57bb2491efab773c4803543b671d9566bd790dd899389d64b5cc044f0e035798e7e5b5af5921d61e56d5cf9a567684075ed4a74dd6a5578bcb38b5a6409da6588b1942e2f9c448909ad8efd1ea30554fd07dd8246a4f8a453e8f1a407fe580fc0737bcee5abc12ddec6f7e0443a651e1ff4cf191da9df147698b2277634a153713353cda4ac7069eec3f9fe1885cf8f655fb0ac7d666e854732f4e278878b02d6a1f401290a7d8d6deae7a8e6aaaf15a02474cc8cfd167ea79ab82881e0c5090983db2ed38d3c0f50f0d3bc2dacd461099810edd191aba9f59d8177f1e663013d78b1482fa7122d01e455c3b14f9a0fdc5a42ba71fb6ffa05359d405158b4562fa606bae79c43ca3b2a3361d4c6e61e0258ba06a4924c81007d6c8b1069cf349c3c7fd6a2e61167ac3c7bb82925142bad0a17fa35f79281a37a7254e574dbc4889bdf58e7b563a280fd1aa25e37fe96f71a4540e15d71d726292d92de676447103276cfde9a5e75e55ed1de49d710e541458ba91c8d29acd78b18cb083b2957af30cb3f9c6ba326d7ceb03f7585e29c320e34802761b8f483d7bc3ea509ebf1b0b671a00173b25d4802f526047e2915b52d6a58d00cf74482ed78a7b9fe325060d63b8f8f60b1cdfd83ad5f1cd114d7469a419e9458aa3e5e8db7846b45c674f30717e8f51809bf25a2f1c9a2da8fcb0387c46ccad20bc02cde039bc4b19407e063c0d6aac4c9aeaa8d8bba7abedf0ca73a86c702b26797b2c7c7bc2903b8fff04166a86a46f3d59e860ca4ed35cc48ffb6ffd06c84ff6c8025b00ba6e40ab6f1c8229b168892f53d02da98a3caddbfa1aac73913778584b7a37e045669d1d402b953644b98c146576b7cd404a7bdd01eb11000635860a9c2b5a3d2be7f40af53aca0713b39ff1f1a2474ce32707baf44f9b5a899e1e45fda631914394feb7b4dc63c642c7bfac29202d4dad1ba6ed9099e38b854fa28064639a6fd246c7df98920ec4ff4912ac61b7addcce22f0c42553fff59396e852856bfbb2393ce24960aaa67e64b14c29902588bc01a3ad52bd4b3b3955f539d40e22a957a413ded666d0798fd77386f79bb1476fa4663d7443c65204dc3c143613952a61dab4fb7e88072596a543eb1b8888683f568fd64c288013f383a15f0f9631ffe0e9b403709b1a0ff2f778ea1f140e5e9614b30f3d7013482a4867682983aca533bf16810fd55a865bed56731c0aefb0552cb4c77e43cccb008069829d1c3b3e68d4dc3ec5a0c8e87b2f684b00cd63e6dccf7d2aafda97b96d668cdcb92898c796a330e34f43b2442ad6e0d94655cf505775c37d6e28593172db1ae4310ebcfa5b33245f18f1b805e0742b3601d652817e0d43551cf4f04ca08dd2e4df2412445d5f80b86bb83106f8bc4dc856cf716ff20a9865a66a44f2a8f47f4095670be9730d9f63c85e24663c51901b0d543d750a9e87a439283c76068fa6e8ce25723bc30e878c4481a67e4bfbe858f30f4e6b1c2eec0170e72c210fdc30e7d1046301aef4b2f7267d9affa245033c5269c64d9a0d91b0b4a91761db9f1834edecf5481ae12df48e43ad21b2d6940152d15b684cdead064b827ec7f68613cfee48876b73e56843c683593652a5efa6db857c068c3c31a0cdc00fc6ef437e5f14032863a14b102899cc5dc06ad5f0bc2f8a564252d2510bde6af026d6614e3925c18cb096bd13e1be99be90762b682e4aa8c68a3aa5af01610302b90c16fb35d32c318fad66024d4a57bef85f542cc3d6826c5e2785673bacba538c9096da93c6fc0103b386094f1a83ce0b356fb42b6ab69458978eb38df36141b0eb8cf3118071efad475066663dcb37017550a1524986d24f09e5ff4bb197809b11e1e33bde5f0b00a5581135621a8eab85c0285977f68c200252a105b472b9d355987ed84a74131ef1aeeb68178522a7384f260fcf9e3464ec811ea2385496b2feeeeacb15e8fbbd4201da2c8f53a8156c39722e5777b0c6c103bcb56b47964db9f304ff3d0c845cef4140a13be7d001be672e9d732362be78555a4d99ad148808d23d1940dc2f8902685361e138f04c132cd56a431471e2dd4a8591248a65bf10dfae054a86e62f5e17e474a12aec7de87562fb0336130e5f2a90b128e2102b5fec30e6ec6f4a02025869b77e5ffe7e62717021e8964d58787604787874b540e74f54e53a26b0f08bbbeecc7eac67222517c3f4e7d2f26eba8ba5825a2e18d88e473481765ccb30ae8a9e6a04e39d78575ea9390a4fcefd0b3dbeb8a0a70c37a00400bdc082df002da2b56a63d9d8f524e5b48c2d88e91dbc7853259054fb2936de38f43441d9f873730d6323ded3e1ade647dedb635417ec2e034a14bb75b7f19c214332bb785fba73fae33206473992bd2f5668045a1f6a81f2f44a5349aba1d69b1b8a696b7ca0a64ae89147cfc75e9dd490eb9b447c68af6f9fe460ffe6d226fcc3b3ca7fe5c7468e4b147ec1b76400858a8bc78d736b8fb7b134", 0x1000}, {&(0x7f0000000ac0)="c067d477ff2c9ab5596f532a7d86a27b014fa9607043b19cd4536447216f85d4dfb0aa95e27447e4168b57c21237052b6c4f7d9f8e00b0ea953abd50cf81657438204c962118629fd4bdd9f0d91926772dbb0b0b04e2baf2b516c54b24586f2e0f31f170360c528184148dd93b6eb242a654306a7355db778fe130a9cba48ac48118f634fd1d36306d22df90f1c8567079d830827b0791e3de72bfbffaa479e4c29022253de664f970fd646564a267fa7719f6983abfdb7bb15b79af55ebda9cd211967acb7b224ccd56e909796dfa81fbc7e56ababfcd58febf48", 0xdb}, {&(0x7f0000000bc0)="f9cdb54969e978e759877d42dbfef38c756c204555543b639140e884fbfa93abcc7baa69ffc39710", 0x28}, {&(0x7f0000000c00)="ab31f39904b2ae42ef05489a61ea130ab4bdedd8920eab4d3f69e93c9fcdb30528b4457f11bb9801b41beea95456242f9b1d7c4d77f6160a1a55c82574300f017aaf5e7abcfe4de99b1c4fcc3526c1ca656e01d3ea4586645ea1f77a4ee5bc4a1fcd44aa22d6d19f8053d9078364cbf8888d064df0ae9991fb3a6a90234567327dadaf5533c7b0db450dde07f08bf1bb13a53abf09a1e4b8ae5aa7de4637406e7cdcc4a2981dd1436cca2c740ce46f362eb6050d", 0xb4}, {&(0x7f0000000cc0)="ff78d7b71b1abf", 0x7}], 0x8) 7m16.371892416s ago: executing program 3 (id=519): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x0, 0x5001) socket$kcm(0x10, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/udp\x00') preadv(r4, &(0x7f0000000340)=[{&(0x7f0000000180)=""/131, 0x83}], 0x1, 0x0, 0x7fffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000010000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r7, r6, 0x25, 0x4, @val=@perf_event={0x5}}, 0x18) 7m15.329010319s ago: executing program 2 (id=526): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, &(0x7f0000000280)={{0x4, @name="0ad183d38f7692f2349891f66fa891bcf244e1e26dc2b8011147b8f4728dd78c"}, 0x8, 0x1, 0x2589}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x446102) r7 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000001c0)=0x3) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x18, 0x54, 0x1, 0x1}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) syz_usb_connect(0x4, 0xc83, &(0x7f0000001500)={{0x12, 0x1, 0x201, 0x2f, 0x1b, 0x5a, 0x8, 0x1608, 0x21a, 0xb636, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc71, 0x3, 0x8, 0x9, 0x90, 0x7, [{{0x9, 0x4, 0x8e, 0x0, 0x10, 0xe9, 0x13, 0xba, 0x5, [@uac_as={[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x40, 0x3, 0xff, 0x37, "222cdfdd4f90d6"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x5, 0x7, "439ac6"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x36, 0x4, 0x5, 0x83, "cb"}]}, @cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "b663182fa276"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xfffa, 0x8, 0x4}, [@dmm={0x7, 0x24, 0x14, 0x9, 0x2}]}], [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x80, 0x4, 0x8, [@generic={0x40, 0x21, "fd9995e905a65f3f80ba9f252ecd2afc4117c2c47d8c74f73d273b98c0c30e11435500bdf762d2d0965a1c9068dd1b69c02ee190c30225e1ecf15ad83993"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x16, 0x7}]}}, {{0x9, 0x5, 0xd, 0x8, 0x40, 0x5, 0x2, 0x5}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x7, 0x0, 0x10, [@generic={0x96, 0x10, "19459a84b8574486d98b5b94ce1a537a23cf7db76e3d55a74646d1aa14499576c7222e9b7700f1d6fdf58e905ce9cfe6cf7c132ef79c7c697428a6fb18d104087b67556c652201c442d0da05d8a0d7c5e7f3eed619556e46ef9c2fc177e16dbeb8d79eb6089db38d1e43289e83fa8f0722fbb128559a7334f03d68d8a716893f132649a026c6396085cef64fd90d78ca4e148229"}, @generic={0x14, 0x22, "f0a131010a8e35bd1dd666302d2a6e16b33b"}]}}, {{0x9, 0x5, 0x5, 0x1, 0x20, 0x4, 0xe9, 0xf7, [@generic={0xa7, 0xf, "68b9ffabe897b374ba21218aca27da9ad68023febe4301bb922277ac2d5a7e1a2f632369158a5f7f8be07a3ababa45f91abfeb50cf02ce97c7c5cae231c79a8cfd2c705d1117b5a6085dd6598b55a47b82808c7ea82af69a27203c41650fd0d52cf2b637b27c304487cbd83f0bfcc5adcba30532b3f9a35eae1f437be31fff69868a6687a7a51edfb2747d1c3b9defe2de67b0130969251561aeb8714da620f5dd52bae584"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x7f, 0x9, 0x96, [@generic={0xb6, 0x8, "cd98f8dc122d1009ed804cfd34cc025afa9ba0fab6cd83e997d287b0cfc3b59e0944307346ef57e735257d950ee01bd53eddc1a24622244215ddde8331ad6acdc8ccc0b464fa176dad153fe9b25f48c663e79ea9e7c378fe7b3a638e62b8d1c8bec35b359823514aa54e62a56dcd6b9592f3d9c8d5a5e1a585324245e420b0e047a27c00a0eb796fb8ddf0a3be300d126e4cbd32cbd92bfa2c48a69ca02c17fade7959a91f5c86ddc7ca0bf3083a9d19887aaf92"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x3bf, 0x8, 0x3, 0x6, [@generic={0x91, 0xa, "bb8118469650b06335e3613f0fbc6a687573b4098eccbba1f4745f0877373a810bcf8cdc6119d4e48571c087cef6689b57f98ab00e75153ac113d139570353811107dafa2534c952bdc105f558c9e1638cd8728d563d256a5be8652662c80d5c85c8e3d32d5c3f26351bdc4fe942d8b66cf3d71f5ad953914ad1f11d5bc6bd2aa92ca6a97a429dcd411e914fd6f70c"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x0, 0x5}}, {{0x9, 0x5, 0xe, 0x8, 0x400, 0xff, 0x2, 0xf7, [@generic={0x83, 0xf, "113c4656eb6d43f4575f81956e7d470762c71c2d1f70762eed3d8961c55e9cf2c2c42739d74ada1a263bdaefec27cb4d30b0ead816fdb75d5db8e9f541478c0528ecc6a0126e90bc60fa902de214ee1d6218d16329d1479ec0f3dee693debee12729ae3f50de350f8174549eee7f0971057c0eec5ec6e762e1e208af8c11e8d8a4"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x0, 0x2, 0x3, [@generic={0x79, 0x1, "2324063a1cc9f3ce13b9611752e1a3ed40d55326dcae8be571ecd42849a6c17bb357783df83cd7864e0595c64ff4eb297d5c96d8d95990cca77d1c2178c4e696bb2c561e60df8c1c9284702f17b9812763154a720d105d1c8bb20a00cdc813a95f753d82e4161836d42e42e01ed3175f9febc4b8d8d887"}]}}, {{0x9, 0x5, 0x0, 0xf6e1a15ec564a776, 0x40, 0x40, 0x48, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x80, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x9}]}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0x9, 0x7, 0x1}}, {{0x9, 0x5, 0x4, 0x3, 0x40, 0x6, 0x65, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5}]}}, {{0x9, 0x5, 0x7, 0x8, 0x40, 0xa, 0x1, 0xc}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0xd, 0x8, [@generic={0xe9, 0x1, "6b7cc748e583ac5946bdee9e0458e14f39e678c82b77f4b952d9b8db4f2634a985aa264e9623d3dee796a9480ac8bd6221389eece518c936b87a5823047029469bef894e85ea2fd637c79042028cda92963661855dc1c161532099c59d87293581cf609e10dfa61349e226eb406308c67018a06b21d6afc0f692e76d54e5282385522ac2674c918a92796c9bfad50748dfcd16b7e1b574ab8e89cc19b37387619f73e191e5e68f205c2113af2d7eb250c70ac7764b0f63240723cb3ad0551171a8aa4a2d5a8c4317e4b46373eaa01590534361b83cb825e91bfc1532cc4180cb0cabdad7004e23"}, @generic={0x2, 0xa}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x6, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x7}]}}, {{0x9, 0x5, 0xf, 0xc, 0x400, 0xd, 0x9, 0xff, [@generic={0x43, 0x0, "6f82a29b9464e03e5a17b1ccae84630e98b802918cbcca0c1fa107071192ec813a9e5260a86644a0362f4d706b20d790a27edbb5befe64c3af7f72273f45ff0d9b"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xe, 0x9f}]}}]}}, {{0x9, 0x4, 0x4b, 0xe, 0x7, 0xff, 0xff, 0xff, 0x0, [@hid_hid={0x9, 0x21, 0x100, 0x6, 0x1, {0x22, 0x731}}], [{{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x6, 0x3, 0x1, [@generic={0xaa, 0x6, "9e3cce1fd3fabde4e639a593123f5990f57f3fd7e67cfd6f98b97d522b0143ebb264108a987b5a0b32608aa9b0c8de61c7522e6c98efa9bdc43176605ce16d665aa29aaa516e2c3ce8362c4c42469aecb9f0d19746c304b80f3b790345690eec5c1b2a35ba1d1d8869829d0ca865150428297d929a510ee00326d43ab1b7e490876e2568d8153e97196deda4dd4efdfaf73892540525b4605750db1f3ef634afe24cbd6962a7422a"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x0, 0x4, 0x60, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x60, 0x3ff}]}}, {{0x9, 0x5, 0x4, 0x4, 0x10, 0x1, 0xfa, 0x1}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x4, 0x1, 0x1, [@generic={0x35, 0x21, "de0e05ecc805ddb243209c99a036e35c2a3ffd528ad3fee9eed30b51abd086e9d9f808f502360841d9f4a015ac2b7004b5ab67"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xa, 0x40}]}}, {{0x9, 0x5, 0x7, 0xc, 0x400, 0x5, 0x1, 0x9, [@generic={0xc2, 0x23, "831a51920d5f190054c8ef9740a44b2bf8425ce60b0ed4c677e0c5a64a32cc342e6904a9db1ef2d8dd90fd92d5a549841fe4f9c85a7f6de66d61975f95118f49a91e28f3888f18d4c549cee7c53105ffb57632a448a4a312adf57dc6d2d53d8b306820313c87f56960980bd39e01e169c8122f47f70a56007415c9bddb05ed6763f6e923994036f69e225892546dc193944888d7a213f75503a67f2969c331c0d69c2c911bdc24c0c2c3c2987dc630abe08f7352aa7ed53807d16d82a7515e7c"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xff, 0xff}]}}, {{0x9, 0x5, 0xc, 0x8, 0x200, 0x7, 0x40, 0x80, [@generic={0x1b, 0xc, "12708347a5dd09f5790f7bbb91a21526169df6d7036dd896ba"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xbb, 0x5}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x9, 0x3, 0xb9}}]}}, {{0x9, 0x4, 0xdd, 0x80, 0xd, 0x16, 0x86, 0x2d, 0x4, [], [{{0x9, 0x5, 0xa, 0x0, 0x10, 0x6, 0x0, 0x40, [@generic={0xa7, 0x5, "2cb3d34aaaa6d256d1581ab58cee93588640e87bfc545f6f17f680514db66a3d6810554d93ec30cf69242c2b82826dabe04f0b39f82206bf922831e31541758ed4f87a6ba32de9641a36b8fec185ac020c880b7cc8aeb921f4ef38fb9e227f8a55646134c9748cc4fd6c60ca5aa92068899b9bcb20be530db736c742684e78301059721ab12eb5c500f955b39998175c1fded0cca48385c12baa4ecae0d0acdb666fa90d25"}, @generic={0xdc, 0x9, "b0aba31b77a4fd69a5cadabf35377fc1ae19f2879333804717573156afda7ecc7298c11e289bc7df6d65ff9c3f4b8bccb414f52866a39099109980ee231eae11f3bee397ef7525d4c6822f7f07c85451f64b3a0f53f156d42b0aed49b3f3838deb9597a9c413695b39f07b75f94ba345a5c358a25428adac025415e6499ac9f6f1c91833e6d72823d17760388a5568b378ebcd43ec22aa3ada8ccfd1c26f28ed6c41eaa49db6567191954c5a0459523ef77c4a25651b5fea89424e6a7dc7db0f96788230d58ecaf8fb35626129fd7ba67e6ae32c4b3319925169"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x1, 0x4, 0x5}}, {{0x9, 0x5, 0xd, 0x3, 0x3ff, 0xc, 0x76}}, {{0x9, 0x5, 0x7, 0x10, 0xc83ce2778caff6dd, 0x8, 0xfb}}, {{0x9, 0x5, 0xa, 0x4, 0x60, 0x4, 0x81, 0x5}}, {{0x9, 0x5, 0x6, 0x2, 0x20, 0x1, 0x8, 0x5, [@generic={0x43, 0x30, "1a6e8ed8bcde34f365e7b6e6043b63f24aec1b33af1b4d894cb9c161a8f3e70f88d17624e67a7fb1bc59dc10f6412cc51b0430084046faf9cfedd717b36e9d78e8"}, @generic={0x3f, 0x8b2c9943cb0ffdca, "bae541d150028a0de017b449f95944ebce159279d4e092862321b728cb9e878d5580fd142a4a3237852c3b9810fc5bce0f9db337cc5b777cea7f485574"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x3, 0x9, 0x54, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x6}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x0, 0x7, 0x9}}, {{0x9, 0x5, 0x9, 0xc, 0x8, 0xe, 0xc, 0x4}}, {{0x9, 0x5, 0xa, 0x0, 0x7df, 0x2e, 0x67, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7f, 0x8}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x7f, 0x81, 0x1f, [@generic={0x99, 0x2, "bb8d19085fe0a3dfb4c5075c9107c76aae46f22f890329dcf608f9e9e16d3654e2bf06c868e1becbf7fd0af52171f92ed25b11dda1cfcaf2e5af4e95b35498395899a4fc537abbb2de08abf2a56faaaf9a0416cad8de1e9050810dc8eb963264b0246df236e95c62b1c64708655050c00355fbeaa1dc04f69682073c403cda65930dbfd52101502c3d294e568109a52623c7380479e071"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x74, 0x8}]}}, {{0x9, 0x5, 0x0, 0x2, 0x3ff, 0x5, 0x7, 0x7, [@generic={0xf4, 0x22, "295c0b33115f47df17e74d1bdd4eb2e5920807fdae4886f2c7d23f7117063df22389e2c0366788f717d2938ff6914d1e701c56cbf451c5d7cfe68f3f8de6a19fd7c1c924ac6aef997626af4f78174f3b256ad9aa08b5e536d219f02a0e33525813c8460f62da8eb9ce14bd63bee9e18ecf9ff943454585d726809f983e6279500ce29e5697658ac871817fd338f6cdd1522ce1695f6c73114e9537131dceb790ecbd7dee92b86b0064fe1463ddcc3a404bab70b13a6f764db0eb37705e358a804d12ce130c054941b74c8c2ba3d9b141b93db5f80cb54c1e6842116651bf142a90bec4d8a53cf6e546b631eb49162e014f49"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x2}]}}, {{0x9, 0x5, 0x6, 0x3, 0x10, 0x2, 0x80, 0x1}}]}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0x4, 0x5, 0x1, 0x8, 0x1}, 0x36, &(0x7f0000000340)={0x5, 0xf, 0x36, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x4, 0x0, 0x4, 0x206, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x82, 0x9, 0x3, 0xf175, 0xf3}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0xf, 0x6, 0x7f}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "9c469f8c09978d23244a6548cebee451"}]}, 0xa, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x553f3dd5ae93d892}}, {0xcd, &(0x7f00000004c0)=@string={0xcd, 0x3, "94179c06cd2b302da898b56f399782f5ae3407eebd2d4f1b813b091983fc3aeb0c121d116259ebdada87e10b9d064fe4a7a6e195c1beb6db95792d5aa3b379f6a7de1e70ea9483c33b8b3d231561bb858b2814057b2d6407b6fa6427915a5947cd076ce9b13277b3fa3a52c72bb6fc6466c2c0fb67e877ccf8b9ddfb93e1a8c086c6aaf8b8349312483ee5bbe0b4db1b6c88b34281c5c76c7bfcfd1f72cb6b0df43792486fbd25cabaace58e3b42808853a9680c2e6bf16a38789090f6c73339eee9e90f8f757f1d8c9fe9"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x459}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0xc0a}}]}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x4}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x48, 0x2, 0x48, 0x5}, {0x28, 0x4, 0x5, 0xfffff038}, {0x6, 0x27, 0x4, 0x207}]}, 0x10) syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0xaf1d, 0x0, 0x44, 0x1a7}, &(0x7f0000000040), &(0x7f00000000c0)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x98, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2000, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x98}}, 0x0) 7m13.766564703s ago: executing program 3 (id=531): r0 = io_uring_setup(0x664c, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x8000002}) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000180)=0xf) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x2) (async) io_uring_enter(r0, 0x48aa, 0x9, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) (async) r4 = socket(0x2b, 0x80801, 0x1) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) (async) r5 = memfd_create(&(0x7f0000000540)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x2) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r5, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@uncond, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7fff, 0x9, 0x7, 'syz0\x00', {0x719}}}}, {{@ipv6={@private0, @private2, [0xff, 0x0, 0xffffff00, 0xff], [0xff, 0xffffff00, 0xffffff00, 0xffffff00], 'tunl0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x4, 0x9456fff08070a538, 0x70}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x82b, 0x0, 0x0, 'syz0\x00', 'syz0\x00', {0x8000800000000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 7m13.479979314s ago: executing program 3 (id=534): write$sndseq(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0xb, {0xfe, 0x4}, {0x4, 0x6}, @time=@tick=0xcd}, {0x0, 0x0, 0x0, 0x4, @time={0x10001, 0x3ff}, {0x6, 0x4}, {0x0, 0xfe}, @result={0xd, 0x4}}], 0x38) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, r4, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r6 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xc, 0x8580) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r6, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3014, 0x4, 0x0, 0x10000, 0x3e12, 0x1}) writev(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) 7m13.286088646s ago: executing program 3 (id=536): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 7m12.793411655s ago: executing program 3 (id=538): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x509c00, 0x0) sendto$inet6(r1, &(0x7f00000003c0)="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", 0xff, 0x810, &(0x7f00000004c0)={0xa, 0x4e23, 0x4000, @private1, 0x7}, 0x1c) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2b0b, &(0x7f0000000180)={0x0, 0xc967, 0x400, 0x0, 0x288}, &(0x7f00000000c0), &(0x7f0000000300)) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'sit0\x00', 0x0}) syz_open_dev$media(&(0x7f0000000040), 0x7ffffffe, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x6, 0x0, r6, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) creat(&(0x7f0000000200)='./file0\x00', 0x0) mount$afs(&(0x7f0000000100)=@cell={0x23, 'syz1:', 'syz1', '.backup'}, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x8, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0xfc, 0x0, 0xf2, @tick=0xc, {}, {}, @raw32={[0x9, 0x8, 0x5a7]}}, {0x6, 0x0, 0x1, 0x81, @tick=0xffffff00, {0x8, 0x30}, {0x2}, @time=@tick=0x1}], 0x38) r9 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) 7m11.693599537s ago: executing program 3 (id=544): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) recvmmsg(0xffffffffffffffff, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) read(0xffffffffffffffff, &(0x7f0000000040)=""/11, 0xb) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x4200, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x7, 0x65c3, 0x9, 0x112, 0x1, 0xcf02}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800008600000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000003000000850000000e00"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000280)=@urb_type_interrupt={0x1, {0x3, 0x1}, 0xa6, 0x4, &(0x7f0000000440)="d7b46792d4e5263d512725e22235bcdbeb2d3c5d199ca1ea5d8af873774f222cb2ce128b0d0ee14e617006d724be0a7804e863108bc05b13c6aead948bed891ea9b35e3bcde77611e1926571e8bb3cd297bf387bd7b24146314f98fb7eda6f08fc9b9662e99a5ce41a1df8b1829e277aee346c88a7f92ede905f32e523737d6e57f218", 0x83, 0x5, 0x80, 0x0, 0x2, 0xfffffff9, &(0x7f00000005c0)="0e5edcd8e4e13d5793fc868285fb2c9dd27cd1494c632b4a4d5b11291f57132b95307482ff6ffb8ed71f5f65f60a19326692328b1f8ab27ab1640f4b14e2a96ca8a6ab2ea0d6ec09d74e7d3c828b5a1265b0c38c7ab1075d7977a160daa5eea39c11eb977a8ff3c3b6dfb71fb3e0115f7b998d357086dc0372d17d3b09530044a518872f4928b12ecf9a36a4fb04d502a8261942d1744849fef3a343e8553b8f1dc52ef6c7dc477295a55ec2d44671d1c98118ce9dcdbfbd57d9bf9966aec64bb51e02cd3d0f8dc2d906d1ba87d77dfc63b7e883b13bf8c1bece3e3d48d5529dd55ed5ae6e8e561defa77078"}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000300)={0x0, @bt={0xb40, 0x870, 0x1, 0x2, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x8, 0x2800, 0x9, 0x2, 0xba2, 0x4, 0x0, {0x8, 0x1}, 0xd0, 0x9}}) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0x2) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000003c0)=0x7) ioctl$TIOCSTI(r6, 0x5412, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600) 7m10.646395078s ago: executing program 2 (id=545): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x3, 0x4, 0x0, 0x0, 0xc08}}, 0x120) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000640)={0x0, r5}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRESHEX=r0], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ee9c522}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, 0x0, 0x40004) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) ioctl$SOUND_PCM_READ_BITS(r8, 0x80045005, &(0x7f00000003c0)) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYRES32=0x0, @ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRESOCT=r3, @ANYRES16, @ANYRESHEX=r4], 0x3}}, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000740)={0x0, 0xfffffffffffffffd, 0x84, 0x3, @buffer={0x0, 0x4b, &(0x7f0000000400)=""/75}, &(0x7f0000000480)="cc7d9dce5b7f67e9166fd1772890af4bb727ab7d0d9a69f2d6ccadc5c5fd8f4840c8ecc2b9b6b4c3af1999b59a3a0c42b4b80769e873cc72cd91d87d973b8c8ffcbbaab0ef16964cf82f44cf64717b12054247354476b2282d0f46a767f581e4fc4bb450489ecb2038a49de0541e187076d7df730b7ba9d3776ddc895e9ffb6bc19c0799", &(0x7f0000000580)=""/69, 0x4, 0x0, 0x3, &(0x7f0000000600)}) r9 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r8, &(0x7f0000000000), 0xfffffecc) splice(r7, 0x0, r9, 0x0, 0x4ffe6, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/197, 0xc5}, {&(0x7f0000000240)=""/192, 0xc0}, {&(0x7f0000000300)=""/135, 0x87}], 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) 7m7.832260452s ago: executing program 2 (id=557): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = io_uring_setup(0x2754, &(0x7f0000000080)={0x0, 0xfffffffc, 0x800, 0xfffffffe, 0x800001b4}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240), 0x0}, 0x20) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="020300090c00000000000000000000000300060000000e0002000000e0000009000000000000000002000100000000000000000200000000030005006c00000002000000e004000100000000000000000100f5ff4d200000010014"], 0x60}}, 0x40) write$vga_arbiter(r1, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r1, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYRES8=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r8 = syz_io_uring_setup(0x3ff2, &(0x7f0000000200)={0x0, 0x6001, 0x4000, 0x3, 0x2bd, 0x0, r0}, &(0x7f0000000280), &(0x7f00000002c0)) io_uring_enter(r8, 0x11b, 0x26e1, 0xe, &(0x7f0000000300)={[0xc431]}, 0x8) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000500)) r9 = openat$vimc0(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r9, 0xc028564e, &(0x7f00000002c0)={0x2, 0x1, [0x1ab3, 0x6, 0x282d, 0x7fff, 0xd1, 0x0, 0xfffffffc, 0xff]}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r10, r7, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)={@cgroup=r7, r7, 0x2f, 0x14, 0x4, @void, @value=r7}, 0x20) 7m6.831990399s ago: executing program 2 (id=561): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) recvmmsg(0xffffffffffffffff, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) read(0xffffffffffffffff, &(0x7f0000000040)=""/11, 0xb) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x4200, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x7, 0x65c3, 0x9, 0x112, 0x1, 0xcf02}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800008600000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000003000000850000000e00"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000280)=@urb_type_interrupt={0x1, {0x3, 0x1}, 0xa6, 0x4, &(0x7f0000000440)="d7b46792d4e5263d512725e22235bcdbeb2d3c5d199ca1ea5d8af873774f222cb2ce128b0d0ee14e617006d724be0a7804e863108bc05b13c6aead948bed891ea9b35e3bcde77611e1926571e8bb3cd297bf387bd7b24146314f98fb7eda6f08fc9b9662e99a5ce41a1df8b1829e277aee346c88a7f92ede905f32e523737d6e57f218", 0x83, 0x5, 0x80, 0x0, 0x2, 0xfffffff9, &(0x7f00000005c0)="0e5edcd8e4e13d5793fc868285fb2c9dd27cd1494c632b4a4d5b11291f57132b95307482ff6ffb8ed71f5f65f60a19326692328b1f8ab27ab1640f4b14e2a96ca8a6ab2ea0d6ec09d74e7d3c828b5a1265b0c38c7ab1075d7977a160daa5eea39c11eb977a8ff3c3b6dfb71fb3e0115f7b998d357086dc0372d17d3b09530044a518872f4928b12ecf9a36a4fb04d502a8261942d1744849fef3a343e8553b8f1dc52ef6c7dc477295a55ec2d44671d1c98118ce9dcdbfbd57d9bf9966aec64bb51e02cd3d0f8dc2d906d1ba87d77dfc63b7e883b13bf8c1bece3e3d48d5529dd55ed5ae6e8e561defa77078"}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000300)={0x0, @bt={0xb40, 0x870, 0x1, 0x2, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x8, 0x2800, 0x9, 0x2, 0xba2, 0x4, 0x0, {0x8, 0x1}, 0xd0, 0x9}}) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0x2) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000003c0)=0x7) ioctl$TIOCSTI(r6, 0x5412, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600) 6m55.393272987s ago: executing program 32 (id=544): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) recvmmsg(0xffffffffffffffff, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) read(0xffffffffffffffff, &(0x7f0000000040)=""/11, 0xb) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x4200, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x7, 0x65c3, 0x9, 0x112, 0x1, 0xcf02}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800008600000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000003000000850000000e00"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000280)=@urb_type_interrupt={0x1, {0x3, 0x1}, 0xa6, 0x4, &(0x7f0000000440)="d7b46792d4e5263d512725e22235bcdbeb2d3c5d199ca1ea5d8af873774f222cb2ce128b0d0ee14e617006d724be0a7804e863108bc05b13c6aead948bed891ea9b35e3bcde77611e1926571e8bb3cd297bf387bd7b24146314f98fb7eda6f08fc9b9662e99a5ce41a1df8b1829e277aee346c88a7f92ede905f32e523737d6e57f218", 0x83, 0x5, 0x80, 0x0, 0x2, 0xfffffff9, &(0x7f00000005c0)="0e5edcd8e4e13d5793fc868285fb2c9dd27cd1494c632b4a4d5b11291f57132b95307482ff6ffb8ed71f5f65f60a19326692328b1f8ab27ab1640f4b14e2a96ca8a6ab2ea0d6ec09d74e7d3c828b5a1265b0c38c7ab1075d7977a160daa5eea39c11eb977a8ff3c3b6dfb71fb3e0115f7b998d357086dc0372d17d3b09530044a518872f4928b12ecf9a36a4fb04d502a8261942d1744849fef3a343e8553b8f1dc52ef6c7dc477295a55ec2d44671d1c98118ce9dcdbfbd57d9bf9966aec64bb51e02cd3d0f8dc2d906d1ba87d77dfc63b7e883b13bf8c1bece3e3d48d5529dd55ed5ae6e8e561defa77078"}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000300)={0x0, @bt={0xb40, 0x870, 0x1, 0x2, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x8, 0x2800, 0x9, 0x2, 0xba2, 0x4, 0x0, {0x8, 0x1}, 0xd0, 0x9}}) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0x2) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000003c0)=0x7) ioctl$TIOCSTI(r6, 0x5412, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600) 6m50.707455416s ago: executing program 33 (id=561): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) recvmmsg(0xffffffffffffffff, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) read(0xffffffffffffffff, &(0x7f0000000040)=""/11, 0xb) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x4200, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x7, 0x65c3, 0x9, 0x112, 0x1, 0xcf02}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800008600000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000003000000850000000e00"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000280)=@urb_type_interrupt={0x1, {0x3, 0x1}, 0xa6, 0x4, &(0x7f0000000440)="d7b46792d4e5263d512725e22235bcdbeb2d3c5d199ca1ea5d8af873774f222cb2ce128b0d0ee14e617006d724be0a7804e863108bc05b13c6aead948bed891ea9b35e3bcde77611e1926571e8bb3cd297bf387bd7b24146314f98fb7eda6f08fc9b9662e99a5ce41a1df8b1829e277aee346c88a7f92ede905f32e523737d6e57f218", 0x83, 0x5, 0x80, 0x0, 0x2, 0xfffffff9, &(0x7f00000005c0)="0e5edcd8e4e13d5793fc868285fb2c9dd27cd1494c632b4a4d5b11291f57132b95307482ff6ffb8ed71f5f65f60a19326692328b1f8ab27ab1640f4b14e2a96ca8a6ab2ea0d6ec09d74e7d3c828b5a1265b0c38c7ab1075d7977a160daa5eea39c11eb977a8ff3c3b6dfb71fb3e0115f7b998d357086dc0372d17d3b09530044a518872f4928b12ecf9a36a4fb04d502a8261942d1744849fef3a343e8553b8f1dc52ef6c7dc477295a55ec2d44671d1c98118ce9dcdbfbd57d9bf9966aec64bb51e02cd3d0f8dc2d906d1ba87d77dfc63b7e883b13bf8c1bece3e3d48d5529dd55ed5ae6e8e561defa77078"}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000300)={0x0, @bt={0xb40, 0x870, 0x1, 0x2, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x8, 0x2800, 0x9, 0x2, 0xba2, 0x4, 0x0, {0x8, 0x1}, 0xd0, 0x9}}) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0x2) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000003c0)=0x7) ioctl$TIOCSTI(r6, 0x5412, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600) 8.579026205s ago: executing program 0 (id=2145): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x4008800) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0) r1 = syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f0100000000000000000009058103200000000009058202080000000009050302"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) read(r2, &(0x7f00000000c0)=""/163, 0xa3) 6.907932343s ago: executing program 1 (id=2155): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000009e680)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r3, @ANYBLOB="0a0006000802110000010000060066008e880000520033"], 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 6.828433174s ago: executing program 1 (id=2156): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x45}, 0x94) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100153a42908f00a71729188110203010902240001060000000904020002ffffff0009050b0000000000000905", @ANYRES16], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r5, 0x851, 0x0) connect$can_j1939(r0, 0x0, 0x0) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x2207, 0x4) 6.735028156s ago: executing program 5 (id=2157): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f00000000c0)={0x7fffffff, 0x18, '\x00', 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0]}) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r4, 0xc0086202, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x3) r5 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0xffffffffffffd845, 0x301140) mmap$snddsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r5, 0xb000) 6.061794887s ago: executing program 5 (id=2158): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0900000004000000e27f00000100000002000000", @ANYRES32, @ANYBLOB="ffffff7f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100001004000000000000000000000000000052086c15afa5687d51361c650f1d0e49123e237a93d0d034dd701444928529766c0c2b351097603c24ebbda9f75a123ab529646387c25d365796621549107d737f2dc4fa546fcd20a66729031612ff665f493e96ccd0730a5e7c1064e223b568d92ce3b47f641691bb2df26914fc"], 0x50) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x401, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xaee2, 0x0, 0x5, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x8, 0x0, r4, 0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x183000, 0x23456}) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x40800) openat$audio1(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_enter(r4, 0x47f6, 0x40, 0x2, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x9) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) syz_usb_connect(0x2, 0x35, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000545e0d209904ab6b2f681402030109022300010000c0050904970001ff70795108640300000026ff0905"], 0x0) eventfd(0x5f0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) statx(0xffffffffffffffff, 0x0, 0x800, 0x7ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000002000)=""/102400, 0x19000) 5.68124383s ago: executing program 4 (id=2160): bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x33}, 0x94) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x44, 0x4, 0x3c0, 0xffffffff, 0x0, 0x0, 0x138, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @empty, [], [], 'nr0\x00', 'syz_tun\x00'}, 0x203, 0x110, 0x138, 0x8502, {0x700}, [@common=@unspec=@rateest={{0x68}, {'syz_tun\x00', 'bond_slave_1\x00', 0x0, 0x2, 0x98000000, 0xa, 0x200, 0x3ff, {0xd}, {0xffffffff}}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x4}}}, {{@ipv6={@local, @mcast1, [], [0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'veth1_macvtap\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{}, {0x0, 0x3938700}}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x4080}, 0x0, {0x0, r5}}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x400000}) r6 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0x70b, 0x80000000, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4, 0xfff2}, {0xb, 0xc}, {0x4}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x10, 0xfc, 0x200, 0x80000e, 0x0, 0x1000, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x0, 0xc, 0x8, 0xd, 0x1, 0xa, 0x6}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x0) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r7 = io_uring_setup(0x67bd, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x0, 0xfffffffe}) io_uring_enter(r7, 0x0, 0x1f18, 0xf, &(0x7f0000000000), 0x8) 5.047259736s ago: executing program 0 (id=2161): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x36}, 0x4, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa8, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f65, 0x8, 0x9, 0xd, 0x6, 0x12a3, 0x6, 0x3, 0x2, 0x4, 0xb, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x401, 0x91, 0x5, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x6, 0xf9a2, 0x80000001, 0xff, 0x7f, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0xf, 0xfffffff3, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x7, 0x1c, 0x8, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x800, 0x46, 0xf1, 0x4, 0xaaffffe, 0x5, 0x6, 0x2, 0x4, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x2, 0x8000, 0x5, 0x9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x1, 0x493, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x5, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x5, 0x9, 0xfd, 0x401, 0x101, 0x7ff, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0xcdc96e02, 0xbfc, 0x8, 0x7c81, 0x7c, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x1ff, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x18cdcfee, 0xfffffff9, 0x9, 0x4, 0x7, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x1b18]}, 0x45c) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x11, 0x3, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'ip6gretap0\x00'}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) r2 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x1f91, 0x400, 0x0, 0x287}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x4, 0x0, 0x0) 4.931545483s ago: executing program 4 (id=2162): write$sndseq(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0xb, {0xfe, 0x4}, {0x4, 0x6}, @time=@tick=0xcd}, {0x0, 0x0, 0x0, 0x4, @time={0x10001, 0x3ff}, {0x6, 0x4}, {0x0, 0xfe}, @result={0xd, 0x4}}], 0x38) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, r4, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r6 = syz_open_dev$video4linux(0x0, 0xc, 0x8580) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r6, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3014, 0x4, 0x0, 0x10000, 0x3e12, 0x1}) writev(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) 4.926808038s ago: executing program 0 (id=2163): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000002c0), 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0xf4, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000300), 0x9) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) mknod(0x0, 0x8001420, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x1, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) futex_waitv(&(0x7f0000001080)=[{0x3, 0x0, 0x82}], 0x1, 0x0, &(0x7f0000001100), 0x1) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r5, 0x101, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000002, 0x100010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x231a, &(0x7f00000000c0)={0x0, 0x5ad, 0x2, 0x3, 0x388}, &(0x7f0000000200), 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() gettid() sendmsg$unix(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)="ec663189d3348bf13f872a468352b72482b5b2b364a29c6f0f2c4e741bf6457d1418455e157253231681a3889f39b3da6b60dbe404cb9a145d0d49cfd1668a32b96ff302975748993a8a534144d211c681ff3d91ffa436d40b9afe648ec8bde2f7553fb5d3f3b8423873903abd024284bfd01511c149b6101851f7aae4675df76e7d32d7b91659e4adcc14ddfff8a2b49d1393de72b9d970ee7f45a755c1d9f7b4d43e37e17d6eaff5fe352d507eb0424ab937980ae8fae8a9062b651a53b6543733e259ee3083a308a78ac50f0972629b74e6aadefedf2352d024d8f27d4bc8703493b08bbe75e34ee5796d0d275cae3d3c0eba179e145feee0c8acc98af7888a374dbe705e058fc565e40677890a39e6999ae47202a9237803e9eee30f368725ca8571a8f6a8ba396905f4f023a60acb644bab6b0b8964aa514c37f23509c685648d6adb0e230aca690c91e664bc49fa30ae42a2c71abc7517181d4157ef996628b3624f367519970366acca85d399e2c7703930e2abd4bdbac076230ad16368ccb350357d57626ea47a15f0fa16bd5efa8233fa3ea1183da730204a455a673c783c10a26411c5de816699f7af3401b9f38592a4cd9f3f0b7de18cd69f831eee87a3d2edb64ecf517d201f32f86b80fcd3287330f286465260370527e6116df0651001405563622e14af715f6c3dd10e1986e3b95ebf618ff42bdd7a74f0d0cc2cc8dab1048eb5fdbfb72cb16f9e2a196b512720cbfbb4696f291200a153c383cc441091c62649a88ef173a42eced93a374e4f0a078244e56c14b3c4cc9625b3e9e1853839ecb00d6cfc2d2398634935aedd9a545e4b13895a3b8b05c8fca9af2bba82762db85a449f5d9c6ff87b724f19dc1805eca58445e67782a30f03e7b1272685ab8306c255604360b0d6e53cc443b0b81bcf92b470b8734b7b7b2ccf2d51fc1a8b43d8dba290e875f35b0bdb66790a3bb4d8391c5fdde5f461b5922c56f8a858865c0fd8b39cb79e8e182342ef0398641ca3c76620482705878ff0d9fe2eaae18a8ad73313663e36feca9bae81834482bb19c651e273bc04333963f2a64d516761280db45fc4217b5c2ab73a8a04c5d2c2aced37bb2825d17f68c4d65dfcc54057a46f045bf435391b7304ee376977220e71e97919cd67e3f0f0f63e0dcee8d90d80ead12a5eda22db217bd362c1a4f9244c99da91d618c6b71b21ed80826d4df95aee10786e61b3141002e342490f2d842051305d2e8d41aca580a13cd48a850eada7dfee4bda67a5491acf4cfdd3919135e7b113a1973595b99d6ba152ae8cc63fd95c1d7d4a59b038c426ffdb949fe1a6004df2bbae2acce3f5720419dc597229f2d120c689b07a344e75f4c631d83b3130cc927412daa9607c8c0fa254cde27306360a9a5d18ff9d4d4ed38162a5202ba214db4486887b5831d727bd93e6e7cddfa4d3480cb3b4683b1de52bdff534016719324051f81bdf49a5c12dd7b389107b3eb5dc4858caebe8c0a9866ff632deebc16492f95d202ce0f454476ab77871d3188ec83fc74f2ec1055893b2a138cce27ac5553c5496cbf147002a9c55fdb202969a4802ca3556453a58d2aa8e19f40e577fa280625468d385af8659a0f3ab69fabf4fa1326f7a7ebad98a23958c91f28c4b03ff9f343b6ecdb82e820bcb7de6f51d0fcfbbcef902d21a7eed03ea125363b758085022ade27451ba5e0acd9a0044ec50571d234855448be132e14517ae38b798482cc07e1c009c1a4cdd5c42f3862dd6d4c3b18f9c41d0bf5b709d742877ef7ee6d9932c6d7a9fd09bede9f80645a5c4b97ae48734985131f948bf20e93f82b93d6e69479491158d83655244d91bb5e9dfdf103e2238a95a92f35750769b87dce1d0e8bac4e6ee5467f9800a12fe27a2c8f727bbda617899ca26d13ec3b68b4acd7200b3206852aafb13c94681413ee7d0987f4d067b4bc5fc5e01ebe9bdbfc0198232f92da3371d12023388f86a4bb4db9bd559570aef27a96812dd2583c72732922266b98c89c264311577621ceb2625dac0af0fd08f5c27a658645777cb36d687d6f0e6835587cbe65ed922cbd1190b1d60259024be61e7e32b1ecb5e72799103c3a3ea91191667418fedf79d839200ee75da4d68fd6facdd1243f30727c40c6a7c4ffa3d937f4c21b076d146f439d8961258526d56336f7d94e945f90053ef865dd9f939b12d8b6b72b1f20a050b69b8a3b8bc88584766bf9783116c8fc8c4883f8dca31dbfd2775675d868136e5f5e16e3508986750fa8825231fed43ae2b444f5992011f0b80b1f3b0e397ff98fe81da3bd00593329f3014315fb4828fdfec77c8f3c8a92278866f7d299f9a0818e36d1bbad629a61345e01e495dfc4412fcc8b64eac5259de21dae5f5b34c06ee81c0e46b12203b639cfef7f12871287abca6b2f70ffa2cb225585bfbf2c0cd010bdd1b2b3f560016e4db6c30a26e517b608633aa40ab1802da8e94188bad14ab007e415ec41c3dabf4d2817a43a082313529e4a80596807b785af9391117f780db637f2214bb8082373303da889ffd89fa43f4cca427b43e3c17942d314a577112cfb31e841ae40fd18220e9aaa24e382936c0b859a3a425c2018b093e42648b7517dcce9af1366dc5ea8fd575001cbe880ddbb0a768033ee3802c68c4b2fc290fcb84f1e33318543fd2ddf065503c0767c86fcde6931797f275ee4c149d616ff02a9a019c223c16cfd6e618b07c7bd8009d3201a92b91a0944ff21d71ffc53c39b7a318c6451d80b05f9d9c81fd1a78ef35e14cbebc1b4e2de28039301042c0fa09ad2e43d5f78ab4104218bab2da5034050bbf625c6803496dd3d77b574aed51badd3e9967548014b8b318dfb2e0a6ce6637cee786806ec06b359d6569c65df2e538b43862be27d4ddb2710447ed7e56cb4a02779c8767e11056cfaca1ab1aea20d4198a050e98695ae3f2a0aadb5b34b6b945379b81259ebe7abe6d3ca23cae048429b6c850813706f59231034fce07c4111961193d581e3bbbd6c9afd8b3d1e0604807dbd880d2ccc5266818a18287e8c4bda311be83c6f1c5e7f571b9f5ab1f84f8252df9d62f75865adcdd61eaaf7df4cbdd994ab17d2d5d684f95715d4636a6cb69fa2619c6b76ee060202a0a8c934aa537d2c5cf736142349b19fb9b532b05e6dff05c4c635f4134bcc0ef2e38c3fd75d8664d7dfa3139e1b2c2cbbdbe4fc0e2e80870ade368b730d4c06946b608088991f346765afaad6765e5a16267b2d249ee22ea1c6cb85d5d0f8ee48204a5dc48ae6415e3802fd8a431d249f95c72f6895978b36c424e40f83dfe1d0ca01dca14c4a308e926fe726ea0b456dcd976147e61744675f81f38bd5ef06ed76692ac8ac03744c8dc313f06aa28832a3286e626d5e29c748c21164475c739d3f6c6ad046fbb1a149867faf770c089b3513a0649d787208f06e7db6f8a44a9e32c6bd8dd9cca53bcd8ba7ec49d4068d7018b4c8fbd13070f9b0d02d3686b54f96a21e74e346c380a99f21f33925d4a39d510842ed84f2605a15051a784d8216364c2f8ec79f7884ec151ac56d11e30e058d2c49998147c1d54e04aea5d2e9bcc5bf051690d7aa905fdd68528309afda3fd5920cecfae73f6d5f8962e647f5e909748ff9105097118feecf28d6d514ede8cb2d4201da6efc9f3c24893570b227dfe673158e6c17bfcd91625bc4f87eb6fc67e5b647b18231da1da165220815b24431144fc05e1e207e12dbd9e26254d61bc9f47e4ec7e5e19a58ea2444e97a6daf57c895ec35c497d84e2f0c2e520e123f3cadf380a7e54836f7b5a9ba24b1bbe690b7f3de459adbe4d80a648ac2d8158e8b0948ea6ec4b8ac3ce4dafc8ed0f709c13a5ada9fa6c254b57e3cc83411e26dacb6aee290ced0bd65f18884b33dfd1229acd273f97d3edf7673747193ececc83e9ba1e1a73ceb8c347ac88333308df5e4d9ea133e2c6fa4bb1489980cf8ce20201bbba6334936fbc6bb7e6495ba48a3648fe57a0957de758182d3248601ab2bc9d2edf826255d5774021ae4d5d7f87a18927ac866b24e9fa2ca4fb5623c9e0ccbe491a61566f5f649047f97db9cea177ce08ec58c28e7e174f427b38c2e3c2d7165b321eeffe4fc03e8acc2c0ba7520699e8f6480261de487e33d3169790024cec06e3d776c98ccbc5da2ec0032c8241bedea3db12687a82e1eafa4ff828f5347e8ae0b22bcfa5de853d05381a04e8eb953a54c5ebb528bc03d4f7d74b1741f7833a7b90456ff847619b5893bd1515ed87cfd9aa44208572d1578849d5e7310b29e4a5af6026d9d5d2d6c18cc222fa375bc756e86d30a673420c4ac99c0b0a6baadd5bb53bf161074e85b105d5c8f704ea4fef269b3e2d62dc9e494393957a9aba76d7a7c79a1f37a9c0b20a69c47f74b489a8d60bb017272497f2cc7e3dd85a6622c0c1038978ca44170229f1ef25d11d2757940a5b6d35eab977937a5cccfb979dd79accb86476ae7da6fa96527a0ad6a7613c9008fd3cb2cbf81d7be93304dab9059c38cb54a191118bdf39148f6a7e44eca45272a3a2f1812ab6ac72f3009c235abcfe300a5599340b7baa1d6b07797a8fc29533b1d39b24642a867cc188327927d224045bb65e47238f7e260dbe81e2fdd8dac3f3da3724817975e008e0ccbfd958fec78f01cd6cf9d46594513d8a67c9ff5d1f745a7b1b82ee0d1b0babcbea6d4334f8f474c0f1d438d80da71e1158865621613cb9eb1b08f224fca3c26ed879fb13a7148d7a65ea7d2364b71568e2b56e7ab492866ff1d9f0d83647682fd3a31ca4c3735ed4accb26d45e9b26f80856a287fdd42a12de98d1b5d4f2278dd78a8b287a18d8edd003d338049214faef3d6c17b3117da3e1c60715480e1739b52ac39265803d5d6019559d028bbc2c874071c021c581458c67aea919e14db399a54314b1d734eaeafee4844ee9c208887b1c4b7c475997146ccd5f6df48262ab997fc0e5f3ef", 0xdd4}, {0x0}, {&(0x7f0000000480)="b63b8a680c39e86b070b628e1bee3274627c10a03e15ad85b8e1125e29033757fa6cf858fc44e96716f53f5d1d414d00eba2cc0e0db89fdae3a825aeeaecd702406c3d8b55999ff2ebab6f2797d398da42ceae05d6994e65152cd8f6f4f3b9eefd648917056312f7c7606a10b42998f151e6d92f60b5aa2162cfa07ac5c684f32a1b9f0387c8f21a1ae744055cf1c33b94c5a0061b5751768b9eb9a90d573a9b49b63a5c5e595c0b54253a2d4fb4ac6fa1749cd6c9cdac20014c0c5f769a0cb9ff1dc412e827203197d089eeb6f0254ef791659c8303bebc16731de5286253db3b7ac89bd12d3238", 0xe8}], 0x3, &(0x7f0000000580)=ANY=[], 0x50}, 0x0) socket$kcm(0x2, 0x3, 0x84) 4.504270266s ago: executing program 0 (id=2164): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r2, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0xcc}]}}]}, 0x3c}, 0x1, 0xf000}, 0x4008000) 4.428504091s ago: executing program 0 (id=2165): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000000002058041150000000000001090224000100000000090400000503000000092100000001229403090581030000000400"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000150a050000000000000000150a00000758020984e6dbce146d0ca62953486c697ef05887ef9f7965b63bb7816d0499a3bea48521e274d6db53222f60a749bbb5dccfd75b9de6bed9dd023c7c24ff95af08a3cdf45bc23dc9111f6a80ff9e2703bc4e2c31c48b33e8abe15e3e2adf05bf8e310b22176ae7f16ea39641787454f7e91add11a47c3b9bd40767199ef3fd"], 0x14}, 0x1, 0x0, 0x0, 0x8000000}, 0x20004040) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4018aee1, &(0x7f0000000000)={0x100000000000005f}) r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='rootfs\x00', 0x140010, &(0x7f00000002c0)='/dev/usb/hiddev#\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, 0x0) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r7, 0x500e, 0x0) ioctl$HIDIOCGSTRING(r5, 0x8104481f, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r8, 0x10, 0x7fff, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x35c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x10}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3ca}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0xc000}, 0x2400c810) 4.268306616s ago: executing program 1 (id=2167): prlimit64(0x0, 0xe, 0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[], 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000100000000000000e50003000000000085100000fcffffff250001000000000085100000faffffff9500000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x20040000) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, 0x0}) 3.369076823s ago: executing program 1 (id=2168): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x7800, 0x0, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x0, 0x0, 0x0, @dev, @private=0x10000}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x0, 0x700, 0x0, 0xfffffffc, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x4, 0x29, 0x0, @local, @broadcast}}}}) syz_usb_connect$cdc_ncm(0x5, 0x74, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x1, 0xc0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x34c5}, {0xd, 0x24, 0xf, 0x1, 0xd53, 0x11ce, 0x1, 0x6d}, {0x6, 0x24, 0x1a, 0x400, 0x23}, [@country_functional={0x6, 0x24, 0x7, 0x8, 0xf46d}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0xe1, 0x40, 0x99}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x1, 0x0, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x3, 0x6, 0x9}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) 3.363098466s ago: executing program 4 (id=2169): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x40010) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="10080400895504002c001280110001006272696467655f736c6176650000000014000580050028"], 0x4c}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4040010) 3.193701704s ago: executing program 4 (id=2171): r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b", 0x81, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x9c, 0x30, 0x1, 0xfffffffe, 0x0, {}, [{0x88, 0x1, [@m_ct={0x40, 0x2, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "053723fd5d96fc4a83555d155020650b"}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_sample={0x44, 0x2, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}]}, {0xe, 0x6, "32f86732f45e496a0326"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0xc4}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000400)={{0x77359400}}, &(0x7f0000000440)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000580)={0x2c, r8, 0x1, 0x40, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}]}]}, 0x2c}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x3000000, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) connect$inet(r6, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES64], 0x46) r10 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_INPUT(r10, 0xc0045627, &(0x7f0000000180)=0x3) 2.514490876s ago: executing program 5 (id=2173): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x36}, 0x4, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa8, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f65, 0x8, 0x9, 0xd, 0x6, 0x12a3, 0x6, 0x3, 0x2, 0x4, 0xb, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x401, 0x91, 0x5, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x6, 0xf9a2, 0x80000001, 0xff, 0x7f, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0xf, 0xfffffff3, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x7, 0x1c, 0x8, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x800, 0x46, 0xf1, 0x4, 0xaaffffe, 0x5, 0x6, 0x2, 0x4, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x2, 0x8000, 0x5, 0x9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x1, 0x493, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x5, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x5, 0x9, 0xfd, 0x401, 0x101, 0x7ff, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0xcdc96e02, 0xbfc, 0x8, 0x7c81, 0x7c, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x1ff, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x18cdcfee, 0xfffffff9, 0x9, 0x4, 0x7, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x1b18]}, 0x45c) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x11, 0x3, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'ip6gretap0\x00'}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) r2 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x1f91, 0x400, 0x0, 0x287}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x4, 0x0, 0x0) 2.220643865s ago: executing program 4 (id=2175): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f00000001c0)="8269b66f8894954a3f12afcb3cf7a285ca67a9de86", 0x15, 0x6000000000000000, 0x0, 0x0) 2.149019771s ago: executing program 5 (id=2176): r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x180000) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040)=0x80000001, 0x4) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) r2 = fspick(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='+\x00', &(0x7f0000000140)='/dev/dsp\x00', 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240), 0x200b41, 0x0) fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x400, 0x19, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000200), 0x880, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@access_any}, {@version_9p2000}], [{@flag='sync'}, {@uid_lt={'uid<', r5}}, {@subj_user={'subj_user', 0x3d, '+\x00'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@appraise}, {@permit_directio}, {@permit_directio}, {@euid_gt={'euid>', r7}}]}}) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000640)=@gcm_128={{}, "5ddf91ac80f2845c", "8ba4abdaf0261d158e1596f48186d196", "17f83a0e", "0a63179c8f06c129"}, 0x28) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000680)='!]!\x00', &(0x7f00000006c0)='./file0\x00', r4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700), 0x4) r8 = syz_clone(0x8000, &(0x7f0000000740)="bc6834413d31ca253c6d1821179b06ba7c25ed2d77869da8e14efeb596e597b63d90552e0a04a6183d985b92f464746c30d73ca4eff33dad3cfa59de66d65ee7fde90addc8c05a64d582a959331142716f5388453986ef5699a77955c61f20b5b5bde4a14b56051248f7144df43cfd4901c49048a8cf67a7adeda9714be381e1ea234d940d6f2a7def06c3c2be4dfce17ce675d78283a411095ce06985e52a9193e21766669f6b39c24d1b63d27cb5734043fc1387bf1ad461f8d71e11c248d83cb742374cf5b287f7fb055a4a2736c4a078a516d2ab725f61746baf413df2de47a3b5d00f28a3832aa9ddfec339", 0xee, &(0x7f0000000840), &(0x7f0000000880), &(0x7f00000008c0)="f09e31daf595c55b5b19ce0db8273b2a317979ebc0badd595506e1cb67fba47e1f7d6dad399564066424348587c65ee77bc74cced963e592a80547716e6a026debdfcc48835b042876fccdbab7b6f7c86f4494051329d72fa476ec061379754bcd374c9185fef7c8e9e00efca1332f8482446566fcfa9fc8968068999afc9bbc17d9d9bd2d78a72155e480893285b7ba9169ff2a54bbcaad46e059961be2c84d8bcafbecd10851f403a93709f69e8c529f95681c44f040c6d18a9a54c22112ccd9718473f4f7f047b5e730ddda72cd10c3a7a1df93db") r9 = syz_open_procfs(r8, &(0x7f00000009c0)='fd/4\x00') sendmmsg$inet(r0, &(0x7f0000002440)=[{{&(0x7f0000000a00)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000001cc0)=[{&(0x7f0000000a40)="f0b563de49ae78cb949782", 0xb}, {&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000001a80)="7c8d882ac4504552ff5aa086759d275a7544d03828db05ee5e36b78003a4aa94a93dddc376236a10325b3b65f77feac20b4b8d64436c5e7c3c46d5d0e27d6fd0f1decd203678a35bf09d6772f45a10d83e77cce6625844f018e2ba37ee7af138e71f6c62baa7b3aa800c0a63dbd0920626e2c59a4edfcfcd433ed73337b450667cbc8f95202dab946cf166293213563fcb0c80d502fd7ef66d29d831db3c3865b1be1727bb96815c0c8529ee8f1fe2e622b11bdf6e8f557f", 0xb8}, {&(0x7f0000001b40)="47eb91906c8bf54f970dfc276186ff78a6ed795de55ae20fccce23ca111ff4a10d12dad51dbf7da9734d2b0dc7d6233290a08318a576b744611c805224ef8a274687e7c2e6b14596f8d76dba5c6fb73e90e880ea0baaa4f8eab5e36544ce8118c1cc7ae1bba65ef099347551b7c262dbbde54e9741ee23938bd554d65def48891ac3484d228cde6bf7166d5f", 0x8c}, {&(0x7f0000001c00)="9d5988703b3405d7aa41404c467b52ae7d5e3e06ac868f289b4dec8ff2e395a422dc6d428ba0287298ec25195d50d1d3fe269f0570dc97a9a5b8e8d607aec045f0302172e23c830127af9eacf810b61baa7d80842f24495806c597ed933e5cf48c6fe5aaa7c72510dc1c0408d967804160765e100c0bf8b61b8dd723dd4b4b78a610989946990ab6329850ff71fb0dc2ff7f796a38a3061d73fefe74a085ecf4611acedb3f7d8169f52a55", 0xab}], 0x5, &(0x7f0000001d40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0x11}}], 0x30}}, {{&(0x7f0000001d80)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000002000)=[{&(0x7f0000001dc0)="df5d5b8b6deb10c51c6bfd9ab0a519d330b6c15f306b7c934aea0ec66e64f4d3507a62956d", 0x25}, {&(0x7f0000001e00)="da787be9", 0x4}, {&(0x7f0000001e40)="04dc57f1e5a7ed5e27ec34ebb08efbb686a7380b16a3138ccaf77b4428dacd29b7c28d026e91859e45d6f335f3fc666122", 0x31}, {&(0x7f0000001e80)="c329f27d50194d24268017d634dd06350e0f90298fab0c39f6a68ac87c27250de825475344f59616d2ae9042d41a50225e274208e9ad1e8e9ed7905c6d9b163f691ddbdeac20162b7bead6e28ee6927396c4b8b259748aa53c46f01632eebe51", 0x60}, {&(0x7f0000001f00)="f0218a22acddc5e900c3559a4c53c5fb94dded74eb3193d0aa04af86f376fb7d6a0daec4253c570740f03b9990b1c1d712da89a846e8e2ab497d203bc70d4b5d0de909d179190b481cef1b2ef56988944d97c49412ea140d8a74b540828f83fb7c9c87ecf820a04382b351faeeafc07ba3a4280d091c6cb661a7bb20b80e65fa114db2137a739751e268cb3e31e2845e70fb82360b2da9c4d9d35bbb77b852f7c96dc6eeb4016e", 0xa7}, {&(0x7f0000001fc0)="80bbf995397baa", 0x7}], 0x6}}, {{&(0x7f0000002080)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000002380)=[{&(0x7f00000020c0)="5a931c2456859e36ef92f09e43e9c548abc59162aa6dbd5a972b7dcda58417ec9636632cf810bf735142f298bd75770b007e7e99b02108842d73b14441b7ccaedc93773a407456b1677a53cd4fa82683c47c49eaff", 0x55}, {&(0x7f0000002140)="f997f16cb5c2f4f45cb64b8a648fbbc6023b330be7fece650117b595ba9a3e921bea1ea4f8efb741333bc99f3129a95861afe111b252e127a64ec64569fa8f5b59c3138c554cb09091283e", 0x4b}, {&(0x7f00000021c0)="806991e906c7fce0c0031c472543658e7e23fc80d1d17fc72581905adcc09cbed6567f", 0x23}, {&(0x7f0000002200)="22fb77c1c627ca9ece94238c677fd0bbd2c3970a891d1aa823ce8a1458d4b4236662b17282e2516671087f84b92edea8c6", 0x31}, {&(0x7f0000002240)="1d4a5639f7c20dda4dc3e5b6f8f57a538e66a9bf38e24f95b134bbca6b6ca088d6ae3422e749b3934dcd1f793306a7e24cf7fa8c1e", 0x35}, {&(0x7f0000002280)="c0756872b094aa5511358d8e29dab0b490676958cf0a33f4d3e97c9c8193b84b477d4c015e927c41d4e7da702d08a6b9698736c9fc1230900a9b1f6966423cdbdd2db61de2c98cb4f874ad7a4e6df4b31dc02665950f21a6ff85a53746214a337b0e8ca7fab31536c1f2a18c40fdd77dcf45f5a65cff516017859f3aff6e312e2db7265dce3cd0fc9dadf9e61b776808cb4368b37dc94546bd5768271daaa7df27f9f899793fea92efbb9052331b2ce7207a6ae4c95d374c4a0cac9ea3a06a120051f55567e816036d709112e115ada792c24a4b5f274ed755", 0xd9}], 0x6, &(0x7f0000002400)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xed}}], 0x18}}], 0x3, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000002580)={'syztnl1\x00', &(0x7f0000002500)={'ip_vti0\x00', 0x0, 0x700, 0x20, 0x0, 0x3, {{0x10, 0x4, 0x0, 0x35, 0x40, 0x65, 0x0, 0xe1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x2b, 0x7b, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x3e}, @dev={0xac, 0x14, 0x14, 0x12}, @remote, @empty, @local, @broadcast, @empty, @multicast2, @empty]}, @end]}}}}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r9, 0x8918, &(0x7f00000025c0)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x16, r10}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000002600)=0x7ff, 0x4) ioctl$VIDIOC_SUBDEV_G_CROP(r9, 0xc038563b, &(0x7f0000002640)={0x0, 0x0, {0xe, 0x9c67, 0xe3a, 0x9}}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000026c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000002680)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000002700)={0x15, 0x110, 0xfa00, {r11, 0x9, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, @in={0x2, 0x4e20, @multicast2}}}, 0x118) unlinkat(r4, &(0x7f0000002840)='./file0\x00', 0x200) syz_usb_connect(0x4, 0x8b, &(0x7f0000002880)={{0x12, 0x1, 0x201, 0xf2, 0x68, 0x5d, 0xff, 0x2c7c, 0x30b, 0x308c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x1, 0x6, 0x7, 0xd0, 0x0, [{{0x9, 0x4, 0x17, 0xaf, 0x6, 0xff, 0xff, 0x30, 0x18, [], [{{0x9, 0x5, 0xf, 0x10, 0x8, 0x3, 0x2, 0x6}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x7, 0x0, 0xf1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xf9, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0xa0}]}}, {{0x9, 0x5, 0x80, 0x1, 0x8, 0x6, 0xfb, 0xd}}, {{0x9, 0x5, 0x2, 0x8, 0x400, 0xda, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xfd, 0x7}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0xae, 0x3, 0xc9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf9, 0x5b}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xe1, 0x5}]}}, {{0x9, 0x5, 0x6, 0x3, 0x1a7, 0xfd, 0x2, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0x4}]}}]}}]}}]}}, &(0x7f0000002ac0)={0xa, &(0x7f0000002940)={0xa, 0x6, 0x310, 0x1, 0x5, 0x0, 0xbf, 0x7}, 0xf, &(0x7f0000002980)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x1, 0x3}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f00000029c0)=@lang_id={0x4, 0x3, 0x140c}}, {0xa6, &(0x7f0000002a00)=@string={0xa6, 0x3, "935843c8570a5817b1b1c7e29b521da052e15d01ddc2f3d1217cbe0b55230f25d7951caf7226b51c04a24df5c71746a7965a39d71081bfa68027863b47318bfcb72f79b6c8e975bfd98d93673b65fd416b22c3a849d83c1fbfd10f2f3d3da714bdea5f54d5864509facaa4f93be1eb74bc3beef93608cdb9071f6a66f7de209972963b279e9d50ad913944168c56b4f39421c41f1ff3ba35bdabcb95fd85cfc3a87ea21c"}}]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) write$FUSE_NOTIFY_DELETE(r9, &(0x7f0000002b00)={0x2c, 0x6, 0x0, {0x0, 0x6, 0x3, 0x0, '%{!'}}, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$snddsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000008, 0x80010, r4, 0xf000) ioctl$sock_rose_SIOCADDRT(r9, 0x890b, &(0x7f0000002b40)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x81, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x5, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @default, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 1.964356351s ago: executing program 4 (id=2177): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x85, 0x3, 0x200, 0x2, 0x5, 0x1}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000bc0)={0x0, 0x15, 0x3, "c39242"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd24}, {0x0, 0x4000}, {0x0, 0x21}, {0x0}, {&(0x7f00000020c0)}], 0x5}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000140)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f00000004c0)={@fda={0x66646185, 0x2, 0x1000001, 0xd}, @flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) 1.847637417s ago: executing program 6 (id=2178): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000540)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = accept4$unix(r1, 0x0, 0x0, 0x80000) recvmmsg$unix(r2, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0xffffff8d}], 0x1, 0x10000, 0x0) 1.787492395s ago: executing program 6 (id=2179): r0 = syz_create_resource$binfmt(&(0x7f0000000500)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0800c0000000000048f2adbc26fa866f55146583e697a3ae3793fe641fbf2f7456a75f437954532e62b73821b138e01aab0570d1fd444d06c744cc49b404009f80f01254c8a325874b7a364f60eb18eb3e374838d32bfdcf08009e00e0000001a5fa1bc096f7698bf3a3b0d73b6a0d1e0d9454b139670292b1dceb88454804395cfea2f930bd1a85f30dd9aa777f0bb11dd045e7a69c1833c16240c76f64ea112de3c45021c621d034910e1db3fca008b95a45107899e470807feef1304cd8f30cff59aecaa6c50194c6b72963a9b8aeb003858a6c716898b4474bb940d9b2b8"], 0x1238}], 0x1, 0x0, 0x0, 0x10004800}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$rxrpc(0x21, 0x2, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141102) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "3ad4a1966935b985", "dc00c5dba065ec20d2c1872d6d07c523", "e2ff0010", "0100ffffffffffff"}, 0x28) (async) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4804) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900010073797a30000000000900020073797a32000000002c000480280001800a00010064796e736574000018000280090001007bd1162400000000080003400000000014000000"], 0x80}}, 0x0) (async) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0) (async) r6 = syz_io_uring_setup(0x288c, &(0x7f0000000540)={0x0, 0x5865, 0x0, 0x2, 0x13b}, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x4004, @fd=r3, 0x2, 0x0, 0x0, 0x8, 0x1, {0x3}}) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) (async) sendmsg$nl_route_sched(r2, 0x0, 0x24000040) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r9, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) (async) io_uring_enter(r6, 0x100847c0, 0x0, 0x1, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x210180, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) 1.664194912s ago: executing program 6 (id=2180): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/attr/current\x00', 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x4000, r0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000004c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000), r3, 0x0, 0x2, 0x4}}, 0x20) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) socket$qrtr(0x2a, 0x2, 0x0) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) r8 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7278, 0x0, 0x2, 0x156}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r8, 0x26c8, 0x0, 0x1, 0x0, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f0000000000)={0x6, 0x400, 0x2}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x1010, r5, 0x0) rt_sigaction(0x29, &(0x7f0000000500)={&(0x7f0000000300)="de1ce04687dec4431902970000000000c4e2dd907c7236c423416da10080000009c462791826c482e8f79e50bc2500c4427d352626f3450f5929c4e17c5c7d02", 0x40000001, &(0x7f0000000340)="c4e27939ae65c77016c4e1c154e1c421595559828fe9389070f526f345abc44381cfd500e095c4612857bafda8e7db36660ff7d9c442dd9f8b0a000000", {[0xfffffffffffffff9]}}, &(0x7f0000000680)={&(0x7f0000000580)="8f89c09357d0f04009506447dc3340ddc8c4c1ea5ddcf32642d1ff64450ff3f5c4e2e52b33c4413015a89bb10000c482d901d7", 0x0, &(0x7f00000005c0)="4775e341c981aa0000000045cd000043881c69c4c1f82862d5f2d246dcc401d964a200400000c4617dd427c4a3a15eed2cf326f3470f40bf00000000"}, 0x8, &(0x7f00000006c0)) 1.543293155s ago: executing program 6 (id=2181): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40010) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="10080400895504002c001280110001006272696467655f736c6176650000000014000580050028"], 0x4c}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4040010) 1.441312355s ago: executing program 0 (id=2182): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="5800000010000104000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817d4800000026001280110001006272696467655f736c617665000000000c000580080022001eb1cb944522942e9d1c1e28e414965c0650d74e075679a8a7896e37161e3178a0123f81fc1ec5552aff367c8fa5f3ab54ddbccdac7de4821ce37d1bbefafe9f5e7ca8c5485f2432843950794098229c03782816c12d34343bd327e73bff5cce9487aced8eb6b0930b6ba88e2745", @ANYRES32=r3, @ANYBLOB="140003006272696467655f736c6176655f300000"], 0x58}, 0x1, 0x0, 0x0, 0x24044040}, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) gettid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f00000000c0)=0x10000) capset(0x0, 0x0) write$binfmt_elf32(r7, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000c80)=0x89d) write$dsp(r7, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) 1.414507287s ago: executing program 5 (id=2183): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x8027, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 1.246262803s ago: executing program 6 (id=2184): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_kvm_add_vcpu$x86(0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r5, 0x80047456, 0x0) 1.016503693s ago: executing program 1 (id=2185): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@fwd={0x1}, @fwd={0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}}, 0x0, 0x42, 0x0, 0x100, 0x0, 0x10000, @value=r1}, 0x28) syz_open_dev$usbfs(0x0, 0x76, 0x103901) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff, 0x8000003, 0xffffffff}, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}, 0x1, 0xfffd}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) 509.395913ms ago: executing program 5 (id=2186): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x0, 0x5001) socket$kcm(0x10, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/udp\x00') preadv(r4, &(0x7f0000000340)=[{&(0x7f0000000180)=""/131, 0x83}], 0x1, 0x0, 0x7fffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000010000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r6, r5, 0x25, 0x4, @val=@perf_event={0x5}}, 0x18) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) lseek(0xffffffffffffffff, 0x10000000005, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r7, 0x0, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x20000800, &(0x7f0000000280)={0xa, 0x4e03, 0x5, @private2, 0x9}, 0x1c) shutdown(r7, 0x1) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYRESHEX=0x0], 0x17) msgrcv(0x0, &(0x7f0000000380)={0x0, ""/50}, 0x3a, 0x3, 0x800) msgsnd(0x0, &(0x7f0000000000)={0x2}, 0x4, 0x0) 173.67643ms ago: executing program 6 (id=2187): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x248) close(r0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x8) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="c387b34e21348b2e4f3f3dc6c555114d2119d543150fba7de68831", @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3, {0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffd, 0x6000, 0x0, 0x0, 0x0, 0x801}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) ioctl$RNDADDTOENTCNT(r5, 0x40045201, &(0x7f0000000440)=0x7) write$FUSE_INIT(r3, &(0x7f0000000340)={0x50, 0x0, r4, {0x7, 0x2b, 0x8, 0x1800000, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x4}}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r6, 0x2282, 0x300000000000000) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000200)="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") r7 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x80000) ioctl$EVIOCGLED(r7, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r0, &(0x7f00000005c0)="f7a364900495ecbeaad8f2936ceb0381216c197318ce8be282bd26cfc589035107fc8ec1399f0b102e48f0905ee2630e7a3ddf567ba81170b0f40d39ef3f9b2bc2d2369714d88622ebdb5c7740be4b86d784a9714b453fb33620f8d1c1b2b9625c0d55fb15b8c5ac8f43abd2870135e4107bf8e2660327125393423e278ab9d03172813b99cc32c413a395112910171172c6d1514896bc6e1aed7cfac16cdef1ea0b111b9f8edd096afc6378e0958f6ffc9e70956f2fcde79e101f24ac86ce7b8e6098541f9aee7a394a4aa4e1bdd4400d25f7b739031e202b1ed94ef2a1525ae07f9e7453fb8270740807dc2bd031", 0xef) write$char_usb(r8, &(0x7f0000000040)="e2", 0x1068) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000033c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000300)={0xb531, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={r9, 0x7}, 0xc) 0s ago: executing program 1 (id=2188): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x2, 0x1, 0x1000, 0x2000, &(0x7f0000ff3000/0x2000)=nil}) munmap(&(0x7f0000ff3000/0x1000)=nil, 0x1000) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000001c0)=0x1fff) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000400)={"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"}) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000100), 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): Mfr=1, Product=228, SerialNumber=2 [ 545.264474][ T24] usb 1-1: config 0 descriptor?? [ 545.277278][ T24] hub 1-1:0.0: bad descriptor, ignoring hub [ 545.302940][ T24] hub 1-1:0.0: probe with driver hub failed with error -5 [ 545.323428][ T24] usb 1-1: selecting invalid altsetting 0 [ 545.384974][ T3092] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 545.568213][ T5966] usb 1-1: USB disconnect, device number 42 [ 545.624298][ T3092] usb 7-1: config 0 has an invalid interface number: 25 but max is 0 [ 545.707371][ T3092] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 545.848561][ T3092] usb 7-1: config 0 has no interface number 0 [ 545.854950][ T3092] usb 7-1: config 0 interface 25 altsetting 205 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 545.879253][ T3092] usb 7-1: config 0 interface 25 has no altsetting 0 [ 545.890197][ T3092] usb 7-1: New USB device found, idVendor=1b3b, idProduct=2951, bcdDevice=9e.ee [ 545.901107][ T3092] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.910788][ T3092] usb 7-1: Product: syz [ 545.915005][ T3092] usb 7-1: Manufacturer: syz [ 545.919727][ T3092] usb 7-1: SerialNumber: syz [ 545.927262][ T3092] usb 7-1: config 0 descriptor?? [ 545.951587][ T5977] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 546.144244][ T5966] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 546.161836][T12554] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 546.172902][ T5977] usb 6-1: config 0 has an invalid interface number: 115 but max is 0 [ 546.237683][ T3092] usb 7-1: Found UVC 0.00 device syz (1b3b:2951) [ 546.244708][ T5977] usb 6-1: config 0 has no interface number 0 [ 546.251167][ T3092] usb 7-1: No valid video chain found. [ 546.256834][ T5977] usb 6-1: too many endpoints for config 0 interface 115 altsetting 104: 97, using maximum allowed: 30 [ 546.270852][ T3092] usb 7-1: USB disconnect, device number 41 [ 546.279640][ T5977] usb 6-1: config 0 interface 115 altsetting 104 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 546.295262][ T5977] usb 6-1: config 0 interface 115 has no altsetting 0 [ 546.313825][ T5977] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 546.326569][ T5977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.327990][ T5966] usb 5-1: config index 0 descriptor too short (expected 1051, got 27) [ 546.336730][ T5977] usb 6-1: config 0 descriptor?? [ 546.352659][ T5977] cp210x 6-1:0.115: cp210x converter detected [ 546.639013][ T5966] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 546.647236][ T5966] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 546.688430][ T5966] usb 5-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 149 [ 546.730320][ T5966] usb 5-1: config 0 interface 0 has no altsetting 0 [ 546.739631][ T5966] usb 5-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 546.750913][ T5966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.822682][ T5966] usb 5-1: Product: syz [ 546.848515][ T5966] usb 5-1: Manufacturer: syz [ 547.055873][T12589] netlink: 'syz.5.1795': attribute type 10 has an invalid length. [ 547.075757][T12589] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.082941][T12589] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.144461][ T5966] usb 5-1: SerialNumber: syz [ 547.186354][T12589] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.193657][T12589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.201443][T12589] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.206937][ T5966] usb 5-1: config 0 descriptor?? [ 547.208643][T12589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.597651][T12589] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 547.676512][T12575] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 547.754390][T12576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 547.898956][ T5966] keyspan 5-1:0.0: Keyspan 4 port adapter converter detected [ 547.906741][ T5966] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 547.917591][ T5966] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 547.925971][ T5966] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 547.934987][ T5966] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 548.048625][ T5966] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 82 [ 548.113664][ T5966] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 548.123161][ T5966] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 548.132210][ T5966] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 548.139531][T12608] FAULT_INJECTION: forcing a failure. [ 548.139531][T12608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 548.140110][ T5966] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 548.157236][T12608] CPU: 0 UID: 0 PID: 12608 Comm: syz.1.1805 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 548.157261][T12608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 548.157273][T12608] Call Trace: [ 548.157279][T12608] [ 548.157286][T12608] dump_stack_lvl+0x16c/0x1f0 [ 548.157308][T12608] should_fail_ex+0x512/0x640 [ 548.157329][T12608] _copy_from_user+0x2e/0xd0 [ 548.157350][T12608] dma_buf_ioctl+0x3c6/0x8d0 [ 548.157374][T12608] ? __pfx_dma_buf_ioctl+0x10/0x10 [ 548.157396][T12608] ? hook_file_ioctl_common+0x145/0x410 [ 548.157417][T12608] ? selinux_file_ioctl+0x180/0x270 [ 548.157438][T12608] ? selinux_file_ioctl+0xb4/0x270 [ 548.157459][T12608] ? __pfx_dma_buf_ioctl+0x10/0x10 [ 548.157481][T12608] __x64_sys_ioctl+0x18b/0x210 [ 548.157506][T12608] do_syscall_64+0xcd/0x4c0 [ 548.157529][T12608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.157545][T12608] RIP: 0033:0x7ff98578ebe9 [ 548.157558][T12608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.157572][T12608] RSP: 002b:00007ff9866d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 548.157587][T12608] RAX: ffffffffffffffda RBX: 00007ff9859b5fa0 RCX: 00007ff98578ebe9 [ 548.157597][T12608] RDX: 0000200000000000 RSI: 0000000040086200 RDI: 0000000000000005 [ 548.157607][T12608] RBP: 00007ff9866d7090 R08: 0000000000000000 R09: 0000000000000000 [ 548.157616][T12608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.157625][T12608] R13: 00007ff9859b6038 R14: 00007ff9859b5fa0 R15: 00007fff64c0b978 [ 548.157646][T12608] [ 548.185967][ T9] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 548.203084][ T5966] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 548.335556][ T9] usb 7-1: device descriptor read/64, error -71 [ 548.360861][ T5966] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 84 [ 548.368795][ T5966] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 548.377669][ T5966] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 548.392205][ T5966] usb 5-1: USB disconnect, device number 49 [ 548.400673][ T5966] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 548.414079][ T5966] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 548.425182][ T5966] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 548.436432][ T5966] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 548.452420][ T5966] keyspan 5-1:0.0: device disconnected [ 548.714515][ T9] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 548.860921][ T9] usb 7-1: device descriptor read/64, error -71 [ 549.130465][ T9] usb usb7-port1: attempt power cycle [ 549.238726][T12622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1808'. [ 549.298845][ T5977] cp210x 6-1:0.115: failed to get vendor val 0x000e size 3: -71 [ 549.328482][ T5977] usb 6-1: cp210x converter now attached to ttyUSB0 [ 549.355252][ T5977] usb 6-1: USB disconnect, device number 34 [ 549.367917][ T5977] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 549.565113][ T9] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 549.704704][ T9] usb 7-1: device descriptor read/8, error -71 [ 549.710036][T12634] FAULT_INJECTION: forcing a failure. [ 549.710036][T12634] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 549.711226][ T5977] cp210x 6-1:0.115: device disconnected [ 549.760592][T12634] CPU: 1 UID: 0 PID: 12634 Comm: syz.0.1809 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 549.760619][T12634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 549.760630][T12634] Call Trace: [ 549.760636][T12634] [ 549.760643][T12634] dump_stack_lvl+0x16c/0x1f0 [ 549.760666][T12634] should_fail_ex+0x512/0x640 [ 549.760689][T12634] should_fail_alloc_page+0xe7/0x130 [ 549.760712][T12634] prepare_alloc_pages+0x3c2/0x610 [ 549.760741][T12634] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 549.760775][T12634] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 549.760810][T12634] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 549.760832][T12634] ? policy_nodemask+0xea/0x4e0 [ 549.760854][T12634] alloc_pages_mpol+0x1fb/0x550 [ 549.760878][T12634] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 549.760905][T12634] alloc_pages_noprof+0x131/0x390 [ 549.760925][T12634] pte_alloc_one+0x1c/0x3a0 [ 549.760946][T12634] __pte_alloc+0x6d/0x3c0 [ 549.760962][T12634] ? __pfx___pte_alloc+0x10/0x10 [ 549.760974][T12634] ? __lock_acquire+0x62e/0x1ce0 [ 549.760994][T12634] do_pte_missing+0x285a/0x3ba0 [ 549.761011][T12634] ? mtree_range_walk+0x718/0xc00 [ 549.761029][T12634] ? find_held_lock+0x2b/0x80 [ 549.761042][T12634] __handle_mm_fault+0x152a/0x2a50 [ 549.761063][T12634] ? __pfx___handle_mm_fault+0x10/0x10 [ 549.761091][T12634] handle_mm_fault+0x589/0xd10 [ 549.761110][T12634] __get_user_pages+0x551/0x34a0 [ 549.761129][T12634] ? down_read_killable+0x220/0x4b0 [ 549.761143][T12634] ? __pfx___get_user_pages+0x10/0x10 [ 549.761157][T12634] ? __pfx_gup_fast_fallback+0x10/0x10 [ 549.761172][T12634] ? __lock_acquire+0x62e/0x1ce0 [ 549.761190][T12634] get_user_pages_unlocked+0x1ca/0x780 [ 549.761207][T12634] ? __pfx_get_user_pages_unlocked+0x10/0x10 [ 549.761221][T12634] ? get_user_pages_fast_only+0xae/0xf0 [ 549.761236][T12634] ? __pfx_get_user_pages_fast_only+0x10/0x10 [ 549.761251][T12634] ? __pfx___might_resched+0x10/0x10 [ 549.761269][T12634] ? find_held_lock+0x2b/0x80 [ 549.761284][T12634] hva_to_pfn+0x886/0xe60 [ 549.761296][T12634] ? kernel_text_address+0x8d/0x100 [ 549.761309][T12634] ? __pfx_hva_to_pfn+0x10/0x10 [ 549.761326][T12634] ? __lock_acquire+0x62e/0x1ce0 [ 549.761344][T12634] ? __lock_acquire+0x62e/0x1ce0 [ 549.761365][T12634] kvm_follow_pfn+0x2d4/0x430 [ 549.761377][T12634] __kvm_faultin_pfn+0x11c/0x1a0 [ 549.761387][T12634] ? __pfx___kvm_faultin_pfn+0x10/0x10 [ 549.761397][T12634] ? __pfx_xa_load+0x10/0x10 [ 549.761415][T12634] kvm_mmu_faultin_pfn+0x581/0x2170 [ 549.761432][T12634] ? __pfx_fast_page_fault+0x10/0x10 [ 549.761445][T12634] ? __pfx_kvm_mmu_faultin_pfn+0x10/0x10 [ 549.761459][T12634] ? __kvm_mmu_topup_memory_cache+0x332/0x600 [ 549.761475][T12634] ? css_rstat_updated+0x1c2/0x510 [ 549.761494][T12634] kvm_tdp_page_fault+0x186/0x3f0 [ 549.761514][T12634] kvm_mmu_do_page_fault+0x588/0x6c0 [ 549.761533][T12634] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 549.761556][T12634] ? lock_acquire+0x179/0x350 [ 549.761573][T12634] kvm_mmu_page_fault+0x225/0x1cb0 [ 549.761585][T12634] ? finish_task_switch.isra.0+0x221/0xc10 [ 549.761598][T12634] ? lockdep_hardirqs_on+0x7c/0x110 [ 549.761608][T12634] ? finish_task_switch.isra.0+0x221/0xc10 [ 549.761622][T12634] ? rcu_qs+0x2b/0xe0 [ 549.761634][T12634] ? __pfx_kvm_mmu_page_fault+0x10/0x10 [ 549.761645][T12634] ? __lock_acquire+0xb97/0x1ce0 [ 549.761662][T12634] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 549.761678][T12634] handle_ept_violation+0x2b4/0x6e0 [ 549.761691][T12634] ? __pfx_handle_ept_violation+0x10/0x10 [ 549.761703][T12634] vmx_handle_exit+0x124c/0x1bd0 [ 549.761719][T12634] vcpu_run+0x31f4/0x5580 [ 549.761740][T12634] ? __pfx_vcpu_run+0x10/0x10 [ 549.761756][T12634] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 549.761770][T12634] ? __local_bh_enable_ip+0xa4/0x120 [ 549.761787][T12634] ? kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 549.761801][T12634] kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 549.761820][T12634] kvm_vcpu_ioctl+0x5eb/0x1690 [ 549.761836][T12634] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 549.761850][T12634] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 549.761862][T12634] ? do_vfs_ioctl+0x128/0x14f0 [ 549.761879][T12634] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 549.761895][T12634] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 549.761916][T12634] ? hook_file_ioctl_common+0x145/0x410 [ 549.761931][T12634] ? selinux_file_ioctl+0x180/0x270 [ 549.761946][T12634] ? selinux_file_ioctl+0xb4/0x270 [ 549.761964][T12634] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 549.761984][T12634] __x64_sys_ioctl+0x18b/0x210 [ 549.762002][T12634] do_syscall_64+0xcd/0x4c0 [ 549.762014][T12634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.762027][T12634] RIP: 0033:0x7fb8ddb8ebe9 [ 549.762041][T12634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 549.762058][T12634] RSP: 002b:00007fb8de96a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 549.762076][T12634] RAX: ffffffffffffffda RBX: 00007fb8dddb6180 RCX: 00007fb8ddb8ebe9 [ 549.762087][T12634] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 549.762093][T12634] RBP: 00007fb8de96a090 R08: 0000000000000000 R09: 0000000000000000 [ 549.762100][T12634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.762105][T12634] R13: 00007fb8dddb6218 R14: 00007fb8dddb6180 R15: 00007ffdbafa7318 [ 549.762119][T12634] [ 550.730567][ T9] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 550.756640][ T9] usb 7-1: device descriptor read/8, error -71 [ 550.887797][ T9] usb usb7-port1: unable to enumerate USB device [ 551.405172][T12655] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1814'. [ 552.111800][T12652] pim6reg: entered allmulticast mode [ 552.122705][ T30] audit: type=1326 audit(1755105163.651:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12646 comm="syz.0.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8ddb8ebe9 code=0x7ffc0000 [ 552.178317][ T30] audit: type=1326 audit(1755105163.651:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12646 comm="syz.0.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8ddb8ebe9 code=0x7ffc0000 [ 552.290860][ T30] audit: type=1326 audit(1755105163.661:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12646 comm="syz.0.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fb8ddb8ebe9 code=0x7ffc0000 [ 552.321838][T12651] pim6reg: left allmulticast mode [ 552.337178][ T30] audit: type=1326 audit(1755105163.661:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12646 comm="syz.0.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8ddb8ebe9 code=0x7ffc0000 [ 552.374171][ T30] audit: type=1326 audit(1755105163.661:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12646 comm="syz.0.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fb8ddb8ebe9 code=0x7ffc0000 [ 552.412406][T12674] FAULT_INJECTION: forcing a failure. [ 552.412406][T12674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.429108][T12674] CPU: 0 UID: 0 PID: 12674 Comm: syz.5.1819 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 552.429140][T12674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 552.429150][T12674] Call Trace: [ 552.429156][T12674] [ 552.429165][T12674] dump_stack_lvl+0x16c/0x1f0 [ 552.429192][T12674] should_fail_ex+0x512/0x640 [ 552.429213][T12674] _copy_from_iter+0x29f/0x16f0 [ 552.429237][T12674] ? __pfx__copy_from_iter+0x10/0x10 [ 552.429253][T12674] ? find_held_lock+0x2b/0x80 [ 552.429271][T12674] ? dev_get_by_index+0x17c/0x380 [ 552.429291][T12674] packet_sendmsg+0x1cef/0x5850 [ 552.429319][T12674] ? __lock_acquire+0xb97/0x1ce0 [ 552.429344][T12674] ? sock_has_perm+0x259/0x2f0 [ 552.429360][T12674] ? __pfx_sock_has_perm+0x10/0x10 [ 552.429378][T12674] ? __pfx_packet_sendmsg+0x10/0x10 [ 552.429409][T12674] __sys_sendto+0x4a0/0x520 [ 552.429431][T12674] ? __pfx___sys_sendto+0x10/0x10 [ 552.429467][T12674] ? ksys_write+0x1ac/0x250 [ 552.429481][T12674] ? __pfx_ksys_write+0x10/0x10 [ 552.429497][T12674] __x64_sys_sendto+0xe0/0x1c0 [ 552.429517][T12674] ? do_syscall_64+0x91/0x4c0 [ 552.429530][T12674] ? lockdep_hardirqs_on+0x7c/0x110 [ 552.429543][T12674] do_syscall_64+0xcd/0x4c0 [ 552.429558][T12674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.429572][T12674] RIP: 0033:0x7f64ccd8ebe9 [ 552.429583][T12674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.429597][T12674] RSP: 002b:00007f64cdb87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 552.429610][T12674] RAX: ffffffffffffffda RBX: 00007f64ccfb5fa0 RCX: 00007f64ccd8ebe9 [ 552.429619][T12674] RDX: 00000000000100a6 RSI: 0000200000000180 RDI: 0000000000000004 [ 552.429628][T12674] RBP: 00007f64cdb87090 R08: 0000200000000140 R09: 0000000000000014 [ 552.429636][T12674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.429644][T12674] R13: 00007f64ccfb6038 R14: 00007f64ccfb5fa0 R15: 00007ffe855cc618 [ 552.429662][T12674] [ 552.494670][ T30] audit: type=1326 audit(1755105163.661:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12646 comm="syz.0.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8ddb8ebe9 code=0x7ffc0000 [ 552.750592][T12677] FAULT_INJECTION: forcing a failure. [ 552.750592][T12677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.810161][T12677] CPU: 0 UID: 0 PID: 12677 Comm: syz.5.1820 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 552.810180][T12677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 552.810188][T12677] Call Trace: [ 552.810193][T12677] [ 552.810198][T12677] dump_stack_lvl+0x16c/0x1f0 [ 552.810213][T12677] should_fail_ex+0x512/0x640 [ 552.810227][T12677] _copy_to_user+0x32/0xd0 [ 552.810242][T12677] simple_read_from_buffer+0xcb/0x170 [ 552.810255][T12677] proc_fail_nth_read+0x197/0x240 [ 552.810268][T12677] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 552.810281][T12677] ? rw_verify_area+0xcf/0x6c0 [ 552.810299][T12677] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 552.810310][T12677] vfs_read+0x1e1/0xcf0 [ 552.810322][T12677] ? __pfx___mutex_lock+0x10/0x10 [ 552.810334][T12677] ? __pfx_vfs_read+0x10/0x10 [ 552.810348][T12677] ? __fget_files+0x20e/0x3c0 [ 552.810363][T12677] ksys_read+0x12a/0x250 [ 552.810374][T12677] ? __pfx_ksys_read+0x10/0x10 [ 552.810384][T12677] ? fput+0x9b/0xd0 [ 552.810400][T12677] do_syscall_64+0xcd/0x4c0 [ 552.810413][T12677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.810424][T12677] RIP: 0033:0x7f64ccd8d5fc [ 552.810438][T12677] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 552.810449][T12677] RSP: 002b:00007f64cdb87030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 552.810459][T12677] RAX: ffffffffffffffda RBX: 00007f64ccfb5fa0 RCX: 00007f64ccd8d5fc [ 552.810467][T12677] RDX: 000000000000000f RSI: 00007f64cdb870a0 RDI: 0000000000000006 [ 552.810473][T12677] RBP: 00007f64cdb87090 R08: 0000000000000000 R09: 0000000000000000 [ 552.810479][T12677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.810486][T12677] R13: 00007f64ccfb6038 R14: 00007f64ccfb5fa0 R15: 00007ffe855cc618 [ 552.810499][T12677] [ 552.999823][ T30] audit: type=1326 audit(1755105163.661:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12646 comm="syz.0.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb8ddb8ebe9 code=0x7ffc0000 [ 553.023184][ C1] vkms_vblank_simulate: vblank timer overrun [ 553.032321][ T30] audit: type=1326 audit(1755105163.661:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12646 comm="syz.0.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8ddb8ebe9 code=0x7ffc0000 [ 553.055683][ C1] vkms_vblank_simulate: vblank timer overrun [ 553.082994][ T30] audit: type=1326 audit(1755105163.661:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12646 comm="syz.0.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb8ddb8ebe9 code=0x7ffc0000 [ 553.106831][ T30] audit: type=1326 audit(1755105163.661:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12646 comm="syz.0.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8ddb8ebe9 code=0x7ffc0000 [ 553.130253][ C1] vkms_vblank_simulate: vblank timer overrun [ 553.467295][ T5900] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 553.644473][ T5900] usb 2-1: config 2 has an invalid descriptor of length 146, skipping remainder of the config [ 553.725714][ T5900] usb 2-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 553.870171][ T3092] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 553.972352][ T5900] usb 2-1: config 2 interface 0 has no altsetting 0 [ 554.003758][ T5900] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 554.016510][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.024603][ T5900] usb 2-1: Product: syz [ 554.056154][ T3092] usb 6-1: device descriptor read/64, error -71 [ 554.124552][T12700] tmpfs: Bad value for 'mpol' [ 554.758728][ T5900] usb 2-1: Manufacturer: syz [ 554.766373][ T5900] usb 2-1: SerialNumber: syz [ 554.778531][T12700] tipc: Enabling of bearer rejected, failed to enable media [ 554.803525][ T3092] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 554.953169][ T3092] usb 6-1: device descriptor read/64, error -71 [ 555.027905][ T9] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 555.035866][T12683] lo: entered allmulticast mode [ 555.057771][T12683] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 555.087307][ T5900] ims_pcu 2-1:2.0: probe with driver ims_pcu failed with error -22 [ 555.092367][ T3092] usb usb6-port1: attempt power cycle [ 555.109859][ T5900] usb 2-1: USB disconnect, device number 29 [ 555.193005][ T5866] Bluetooth: hci3: SCO packet for unknown connection handle 1 [ 555.199287][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 555.217406][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.229498][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.239914][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 555.253667][ T9] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 555.264309][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.275940][ T9] usb 5-1: config 0 descriptor?? [ 555.466350][ T3092] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 555.488033][ T3092] usb 6-1: device descriptor read/8, error -71 [ 555.736746][ T9] shield 0003:0955:7214.0018: unknown main item tag 0x0 [ 555.763975][ T9] shield 0003:0955:7214.0018: unknown main item tag 0x0 [ 555.779389][ T9] shield 0003:0955:7214.0018: unknown main item tag 0x0 [ 555.790895][ T9] shield 0003:0955:7214.0018: unknown main item tag 0x0 [ 555.801571][ T9] input: HID 0955:7214 Haptics as /devices/virtual/input/input27 [ 555.818996][ T3092] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 555.840973][ T3092] usb 6-1: device descriptor read/8, error -71 [ 555.861475][ T9] shield 0003:0955:7214.0018: Registered Thunderstrike controller [ 555.871310][ T9] shield 0003:0955:7214.0018: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 555.951939][ T5977] shield 0003:0955:7214.0018: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 555.983120][ T3092] usb usb6-port1: unable to enumerate USB device [ 556.049531][ T9] usb 5-1: USB disconnect, device number 50 [ 556.072625][ T5977] shield 0003:0955:7214.0018: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 556.100780][ T5977] shield 0003:0955:7214.0018: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 556.134638][ T5977] shield 0003:0955:7214.0018: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 556.267260][T12728] FAULT_INJECTION: forcing a failure. [ 556.267260][T12728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 556.281611][T12728] CPU: 0 UID: 0 PID: 12728 Comm: syz.0.1834 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 556.281638][T12728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 556.281648][T12728] Call Trace: [ 556.281655][T12728] [ 556.281661][T12728] dump_stack_lvl+0x16c/0x1f0 [ 556.281686][T12728] should_fail_ex+0x512/0x640 [ 556.281709][T12728] _copy_to_user+0x32/0xd0 [ 556.281732][T12728] simple_read_from_buffer+0xcb/0x170 [ 556.281752][T12728] proc_fail_nth_read+0x197/0x240 [ 556.281773][T12728] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 556.281795][T12728] ? rw_verify_area+0xcf/0x6c0 [ 556.281822][T12728] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 556.281842][T12728] vfs_read+0x1e1/0xcf0 [ 556.281862][T12728] ? __pfx___mutex_lock+0x10/0x10 [ 556.281882][T12728] ? __pfx_vfs_read+0x10/0x10 [ 556.281906][T12728] ? __fget_files+0x20e/0x3c0 [ 556.281934][T12728] ksys_read+0x12a/0x250 [ 556.281950][T12728] ? __pfx_ksys_read+0x10/0x10 [ 556.281967][T12728] ? fput+0x9b/0xd0 [ 556.281994][T12728] do_syscall_64+0xcd/0x4c0 [ 556.282015][T12728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.282032][T12728] RIP: 0033:0x7fb8ddb8d5fc [ 556.282047][T12728] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 556.282063][T12728] RSP: 002b:00007fb8de9ac030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 556.282080][T12728] RAX: ffffffffffffffda RBX: 00007fb8dddb5fa0 RCX: 00007fb8ddb8d5fc [ 556.282092][T12728] RDX: 000000000000000f RSI: 00007fb8de9ac0a0 RDI: 0000000000000005 [ 556.282102][T12728] RBP: 00007fb8de9ac090 R08: 0000000000000000 R09: 0000000000000000 [ 556.282113][T12728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.282122][T12728] R13: 00007fb8dddb6038 R14: 00007fb8dddb5fa0 R15: 00007ffdbafa7318 [ 556.282146][T12728] [ 556.649590][T12734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1838'. [ 558.174270][T12760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1843'. [ 558.417457][T12761] FAULT_INJECTION: forcing a failure. [ 558.417457][T12761] name failslab, interval 1, probability 0, space 0, times 0 [ 558.453591][T12754] SELinux: policydb magic number 0x5c0 does not match expected magic number 0xf97cff8c [ 558.463389][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 558.463404][ T30] audit: type=1400 audit(1755105169.601:989): avc: denied { setopt } for pid=12753 comm="syz.5.1842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 558.463460][T12761] CPU: 0 UID: 0 PID: 12761 Comm: syz.4.1844 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 558.463482][T12761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 558.463492][T12761] Call Trace: [ 558.463498][T12761] [ 558.463505][T12761] dump_stack_lvl+0x16c/0x1f0 [ 558.463528][T12761] should_fail_ex+0x512/0x640 [ 558.463545][T12761] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 558.463566][T12761] should_failslab+0xc2/0x120 [ 558.463586][T12761] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 558.463602][T12761] ? getname_flags.part.0+0x4c/0x550 [ 558.463628][T12761] getname_flags.part.0+0x4c/0x550 [ 558.463652][T12761] getname_flags+0x93/0xf0 [ 558.463671][T12761] __x64_sys_renameat+0xaf/0x100 [ 558.463695][T12761] do_syscall_64+0xcd/0x4c0 [ 558.463715][T12761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.463732][T12761] RIP: 0033:0x7f5514f8ebe9 [ 558.463747][T12761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 558.463764][T12761] RSP: 002b:00007f5515e93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000108 [ 558.463781][T12761] RAX: ffffffffffffffda RBX: 00007f55151b5fa0 RCX: 00007f5514f8ebe9 [ 558.463792][T12761] RDX: ffffffffffffff9c RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 558.463804][T12761] RBP: 00007f5515e93090 R08: 0000000000000000 R09: 0000000000000000 [ 558.463814][T12761] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 558.463824][T12761] R13: 00007f55151b6038 R14: 00007f55151b5fa0 R15: 00007fff34d9e488 [ 558.463848][T12761] [ 558.689274][T12754] SELinux: failed to load policy [ 558.689893][ T30] audit: type=1400 audit(1755105169.825:990): avc: denied { read } for pid=12753 comm="syz.5.1842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 558.727548][T12766] FAULT_INJECTION: forcing a failure. [ 558.727548][T12766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 558.750492][T12766] CPU: 0 UID: 0 PID: 12766 Comm: syz.4.1846 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 558.750521][T12766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 558.750531][T12766] Call Trace: [ 558.750537][T12766] [ 558.750545][T12766] dump_stack_lvl+0x16c/0x1f0 [ 558.750567][T12766] should_fail_ex+0x512/0x640 [ 558.750592][T12766] _copy_from_user+0x2e/0xd0 [ 558.750615][T12766] __snd_timer_user_ioctl.isra.0+0x148e/0x2520 [ 558.750644][T12766] ? __pfx___snd_timer_user_ioctl.isra.0+0x10/0x10 [ 558.750669][T12766] ? rcu_is_watching+0x12/0xc0 [ 558.750691][T12766] ? trace_contention_end+0xdd/0x130 [ 558.750709][T12766] ? __mutex_lock+0x1c4/0x10b0 [ 558.750731][T12766] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 558.750761][T12766] ? __pfx___mutex_lock+0x10/0x10 [ 558.750796][T12766] snd_timer_user_ioctl+0x76/0xd0 [ 558.750818][T12766] ? __pfx_snd_timer_user_ioctl+0x10/0x10 [ 558.750842][T12766] __x64_sys_ioctl+0x18b/0x210 [ 558.750873][T12766] do_syscall_64+0xcd/0x4c0 [ 558.750894][T12766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.750911][T12766] RIP: 0033:0x7f5514f8ebe9 [ 558.750925][T12766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 558.750943][T12766] RSP: 002b:00007f5515e93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 558.750960][T12766] RAX: ffffffffffffffda RBX: 00007f55151b5fa0 RCX: 00007f5514f8ebe9 [ 558.750971][T12766] RDX: 0000000000000000 RSI: 0000000040345410 RDI: 0000000000000003 [ 558.750982][T12766] RBP: 00007f5515e93090 R08: 0000000000000000 R09: 0000000000000000 [ 558.750992][T12766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.751003][T12766] R13: 00007f55151b6038 R14: 00007f55151b5fa0 R15: 00007fff34d9e488 [ 558.751028][T12766] [ 559.165137][ T5900] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 559.226821][T12782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1854'. [ 559.310527][T12782] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1854'. [ 559.406390][T12784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1854'. [ 559.506671][T12784] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1854'. [ 559.731831][ T5966] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 559.739526][ T24] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 559.774649][ T5900] usb 2-1: Using ep0 maxpacket: 8 [ 559.781225][ T5900] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 559.792031][ T5900] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 559.803317][ T5900] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 559.814492][ T5900] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 559.831547][ T5900] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 559.841104][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.856653][ T5900] usbtmc 2-1:16.0: bulk endpoints not found [ 559.892466][ T24] usb 6-1: device descriptor read/64, error -71 [ 559.917747][ T5966] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 559.930186][ T5966] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 559.943874][ T5966] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 559.954786][ T5966] usb 7-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 559.957090][ T30] audit: type=1400 audit(1755105171.004:991): avc: denied { mount } for pid=12788 comm="syz.0.1856" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 559.963986][ T5966] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.985422][ C1] vkms_vblank_simulate: vblank timer overrun [ 560.068995][ T5966] usb 7-1: config 0 descriptor?? [ 560.076915][ T5966] em28xx 7-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 560.112241][ T30] audit: type=1400 audit(1755105171.153:992): avc: denied { ioctl } for pid=12791 comm="syz.4.1857" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 560.166403][T12792] SELinux: failed to load policy [ 560.202235][ T24] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 560.418282][ T24] usb 6-1: device descriptor read/64, error -71 [ 560.430832][ T5977] usb 5-1: new low-speed USB device number 51 using dummy_hcd [ 560.603156][T12796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.611788][T12796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.631723][ T5977] usb 5-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config [ 560.643541][ T5977] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 560.684374][ T5977] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 560.739907][ T5977] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 560.793119][ T5977] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 560.838422][ T5977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.853334][ T24] usb usb6-port1: attempt power cycle [ 560.863434][T12792] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 560.872605][ T5977] hub 5-1:1.0: bad descriptor, ignoring hub [ 560.879727][ T5977] hub 5-1:1.0: probe with driver hub failed with error -5 [ 560.897900][ T5977] cdc_wdm 5-1:1.0: skipping garbage [ 560.903194][ T5977] cdc_wdm 5-1:1.0: skipping garbage [ 560.912447][ T5977] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 560.923524][ T5977] cdc_wdm 5-1:1.0: Unknown control protocol [ 561.054957][T12804] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 561.207270][ T5977] usb 5-1: USB disconnect, device number 51 [ 561.455804][ T24] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 561.487018][ T24] usb 6-1: device descriptor read/8, error -71 [ 561.741647][ T5977] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 561.752432][ T24] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 561.774139][ T24] usb 6-1: device descriptor read/8, error -71 [ 561.902314][ T5977] usb 1-1: Using ep0 maxpacket: 8 [ 561.913827][ T24] usb usb6-port1: unable to enumerate USB device [ 561.917184][ T5977] usb 1-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 561.938683][ T9] usb 2-1: USB disconnect, device number 30 [ 561.944849][ T5977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.962872][ T5977] usb 1-1: Product: syz [ 561.963670][T12811] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1863'. [ 561.971692][T12813] loop7: detected capacity change from 0 to 7 [ 561.982682][ T5977] usb 1-1: Manufacturer: syz [ 561.990649][ T5977] usb 1-1: SerialNumber: syz [ 562.002428][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 562.011576][ C1] buffer_io_error: 6 callbacks suppressed [ 562.011594][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 562.027330][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 562.030865][T12815] FAULT_INJECTION: forcing a failure. [ 562.030865][T12815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 562.036507][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 562.050745][T12815] CPU: 0 UID: 0 PID: 12815 Comm: syz.4.1865 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 562.050767][T12815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 562.050779][T12815] Call Trace: [ 562.050784][T12815] [ 562.050790][T12815] dump_stack_lvl+0x16c/0x1f0 [ 562.050810][T12815] should_fail_ex+0x512/0x640 [ 562.050831][T12815] _copy_from_user+0x2e/0xd0 [ 562.050851][T12815] do_handle_open+0x5ca/0xc50 [ 562.050869][T12815] ? __pfx_do_handle_open+0x10/0x10 [ 562.050889][T12815] ? ksys_write+0x1ac/0x250 [ 562.050912][T12815] ? do_syscall_64+0xcd/0x4c0 [ 562.050927][T12815] do_syscall_64+0xcd/0x4c0 [ 562.050944][T12815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.050959][T12815] RIP: 0033:0x7f5514f8ebe9 [ 562.050972][T12815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 562.050986][T12815] RSP: 002b:00007f5515e93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 562.051001][T12815] RAX: ffffffffffffffda RBX: 00007f55151b5fa0 RCX: 00007f5514f8ebe9 [ 562.051011][T12815] RDX: 0000000000830200 RSI: 0000200000000140 RDI: 0000000000000003 [ 562.051020][T12815] RBP: 00007f5515e93090 R08: 0000000000000000 R09: 0000000000000000 [ 562.051029][T12815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.051038][T12815] R13: 00007f55151b6038 R14: 00007f55151b5fa0 R15: 00007fff34d9e488 [ 562.051059][T12815] [ 562.204711][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 562.213892][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 562.224604][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 562.246941][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 562.256151][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 562.270970][ T5977] mxuport 1-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 562.285777][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 562.294958][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 562.299188][ T24] usb 7-1: USB disconnect, device number 46 [ 562.313861][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 562.323036][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 562.331612][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 562.340791][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 562.341726][ T5977] mxuport 1-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 562.354608][T12813] ldm_validate_partition_table(): Disk read failed. [ 562.369553][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 562.378721][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 562.395086][ T5977] mxuport 1-1:254.0: probe with driver mxuport failed with error -71 [ 562.395326][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 562.412315][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 562.419735][ T5977] usb 1-1: USB disconnect, device number 43 [ 562.426721][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 562.435669][T12813] Dev loop7: unable to read RDB block 0 [ 562.446200][T12813] loop7: unable to read partition table [ 562.491840][T12813] loop7: partition table beyond EOD, truncated [ 562.498219][T12813] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 562.639566][T12823] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1866'. [ 562.941520][ T30] audit: type=1400 audit(1755105173.801:993): avc: denied { write } for pid=12828 comm="syz.4.1871" path="socket:[40353]" dev="sockfs" ino=40353 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 563.447535][T12835] loop7: detected capacity change from 0 to 7 [ 563.457519][T12835] ldm_validate_partition_table(): Disk read failed. [ 563.465563][T12835] Dev loop7: unable to read RDB block 0 [ 563.471767][T12835] loop7: unable to read partition table [ 563.478175][T12835] loop7: partition table beyond EOD, truncated [ 563.484429][T12835] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 564.104013][ T5977] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 564.260831][T12849] loop4: detected capacity change from 0 to 7 [ 564.662315][T12849] Dev loop4: unable to read RDB block 7 [ 564.667938][T12849] loop4: unable to read partition table [ 564.673796][T12849] loop4: partition table beyond EOD, truncated [ 564.679956][T12849] loop_reread_partitions: partition scan of loop4 (xݗ ) failed (rc=-5) [ 564.767066][ T5977] usb 6-1: Using ep0 maxpacket: 8 [ 564.819784][ T5977] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 564.833721][ T5977] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 564.845266][ T5977] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 564.856864][ T5977] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 564.870383][ T5977] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 564.881653][ T5977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.893642][ T5977] usbtmc 6-1:16.0: bulk endpoints not found [ 566.528589][T12865] netlink: 'syz.4.1881': attribute type 3 has an invalid length. [ 566.537505][T12865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1881'. [ 566.808763][T12873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1883'. [ 567.144945][ T5977] usb 6-1: USB disconnect, device number 43 [ 568.552411][ T5977] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 568.560358][ T30] audit: type=1400 audit(1755105179.039:994): avc: denied { setopt } for pid=12881 comm="syz.1.1886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 568.616416][ T30] audit: type=1400 audit(1755105179.104:995): avc: denied { setopt } for pid=12881 comm="syz.1.1886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 568.659590][ T9] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 568.755000][ T5977] usb 6-1: Using ep0 maxpacket: 32 [ 568.762295][ T5977] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 568.837335][ T5977] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 568.846643][ T5977] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 568.857396][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 568.862683][ T5977] usb 6-1: Product: syz [ 568.866991][ T5977] usb 6-1: Manufacturer: syz [ 568.871605][ T5977] usb 6-1: SerialNumber: syz [ 568.879298][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 568.892530][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 568.917652][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.929191][ T5977] usb 6-1: config 0 descriptor?? [ 568.947161][ T9] usb 1-1: Product: syz [ 568.962943][ T9] usb 1-1: Manufacturer: syz [ 568.971574][ T9] usb 1-1: SerialNumber: syz [ 568.987362][ T9] usb 1-1: config 0 descriptor?? [ 568.999930][ T9] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 569.015059][ T9] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 569.252914][T12887] netlink: 'syz.0.1888': attribute type 1 has an invalid length. [ 571.160464][ T9] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 571.264240][T12902] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41232 sclass=netlink_route_socket pid=12902 comm=syz.1.1890 [ 571.283103][ T9] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 571.375407][ T9] em28xx 1-1:0.0: board has no eeprom [ 571.459393][ T9] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 571.569727][ T9] em28xx 1-1:0.0: dvb set to bulk mode. [ 571.737553][ T3092] em28xx 1-1:0.0: Binding DVB extension [ 571.871949][ T24] usb 6-1: USB disconnect, device number 44 [ 571.897764][ T3092] em28xx 1-1:0.0: Registering input extension [ 572.183459][T12924] loop4: detected capacity change from 0 to 7 [ 572.634005][T12924] Dev loop4: unable to read RDB block 7 [ 572.639706][T12924] loop4: unable to read partition table [ 572.645513][T12924] loop4: partition table beyond EOD, truncated [ 572.651794][T12924] loop_reread_partitions: partition scan of loop4 (xݗ ) failed (rc=-5) [ 572.934819][ T5966] usb 1-1: USB disconnect, device number 44 [ 572.979574][ T5966] em28xx 1-1:0.0: Disconnecting em28xx [ 573.021237][ T5966] em28xx 1-1:0.0: Closing input extension [ 573.054304][ T24] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 573.105364][ T5966] em28xx 1-1:0.0: Freeing device [ 573.191451][ T3092] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 573.351708][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 573.367825][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 573.434555][T12946] tipc: Enabling of bearer rejected, failed to enable media [ 573.493094][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 573.530566][ T24] usb 2-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 573.576242][ T5966] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 573.608913][ T24] usb 2-1: Product: syz [ 573.630828][ T24] usb 2-1: Manufacturer: syz [ 573.635562][ T24] usb 2-1: SerialNumber: syz [ 573.720497][ T24] usb 2-1: config 0 descriptor?? [ 573.725804][ T3092] usb 7-1: Using ep0 maxpacket: 8 [ 573.737758][ T3092] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 573.752103][ T3092] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 573.770744][ T24] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 573.777678][ T3092] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 573.779626][ T5966] usb 1-1: Using ep0 maxpacket: 8 [ 573.817232][ T3092] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 573.821793][ T5966] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 573.858355][ T5966] usb 1-1: config 179 has no interface number 0 [ 573.864748][ T3092] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 573.864942][ T5966] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 573.873783][ T3092] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.894414][ T5966] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 573.895966][ T3092] usbtmc 7-1:16.0: bulk endpoints not found [ 573.906016][ T5966] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 573.925695][ T5966] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 573.937504][ T5966] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 573.956302][ T5966] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 573.965795][ T5966] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.977474][ T24] gspca_zc3xx: reg_w_i err -71 [ 574.005174][T12943] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 574.125102][T12967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1899'. [ 574.160051][T12966] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1900'. [ 574.172088][T12966] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.363933][ T5966] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input30 [ 574.480385][T12943] netlink: 'syz.0.1896': attribute type 1 has an invalid length. [ 574.546488][T12943] 8021q: adding VLAN 0 to HW filter on device bond4 [ 574.567944][T12943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.577686][T12943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.586757][ T5866] Bluetooth: hci3: unexpected event for opcode 0x2040 [ 574.645254][ T24] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 574.651718][ T24] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 574.675640][ T24] usb 2-1: USB disconnect, device number 31 [ 574.713750][T12943] bond4: (slave wlan0): Enslaving as an active interface with a down link [ 574.727483][ T9] usb 1-1: USB disconnect, device number 45 [ 574.727550][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 574.742181][ C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 574.819191][T12982] loop4: detected capacity change from 0 to 7 [ 574.848997][T12982] Dev loop4: unable to read RDB block 7 [ 574.854926][T12982] loop4: unable to read partition table [ 574.862428][T12982] loop4: partition table beyond EOD, truncated [ 574.868690][T12982] loop_reread_partitions: partition scan of loop4 (xݗ ) failed (rc=-5) [ 575.368608][T12988] wireguard0: entered promiscuous mode [ 575.377843][T12988] wireguard0: entered allmulticast mode [ 575.539649][T12992] 9pnet_fd: Insufficient options for proto=fd [ 575.618811][T12995] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1907'. [ 575.650096][ T30] audit: type=1400 audit(1755105185.661:996): avc: denied { create } for pid=12986 comm="syz.1.1905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 575.836661][ T30] audit: type=1400 audit(1755105185.839:997): avc: denied { create } for pid=12986 comm="syz.1.1905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 576.054901][ T30] audit: type=1400 audit(1755105185.839:998): avc: denied { write } for pid=12986 comm="syz.1.1905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 576.492058][T13012] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 576.582741][T13008] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1909'. [ 576.691331][ T9] usb 7-1: USB disconnect, device number 47 [ 576.877429][ T30] audit: type=1400 audit(1755105186.831:999): avc: denied { getopt } for pid=13005 comm="syz.0.1910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 577.101002][T13020] loop4: detected capacity change from 0 to 7 [ 577.250684][T13020] Dev loop4: unable to read RDB block 7 [ 577.256679][T13020] loop4: unable to read partition table [ 577.262630][T13020] loop4: partition table beyond EOD, truncated [ 577.268867][T13020] loop_reread_partitions: partition scan of loop4 (xݗ ) failed (rc=-5) [ 577.310081][T13023] overlayfs: failed to resolve './file0': -2 [ 577.370150][ T30] audit: type=1400 audit(1755105187.289:1000): avc: denied { read } for pid=13015 comm="syz.4.1911" path="socket:[40714]" dev="sockfs" ino=40714 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 578.281150][ T9] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 579.205089][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 579.224108][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.278041][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 579.427866][ T9] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 579.449095][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.469382][ T9] usb 1-1: Product: syz [ 579.474367][ T9] usb 1-1: Manufacturer: syz [ 579.479109][ T9] usb 1-1: SerialNumber: syz [ 579.487815][ T9] usb 1-1: config 0 descriptor?? [ 579.495802][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 579.502012][ T9] hub 1-1:0.0: probe with driver hub failed with error -5 [ 579.539282][ T9] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 579.557654][T13063] input: syz1 as /devices/virtual/input/input31 [ 579.591801][ T6549] usb 1-1: Failed to submit usb control message: -71 [ 579.591849][ T6549] usb 1-1: unable to send the bmi data to the device: -71 [ 579.591860][ T6549] usb 1-1: unable to get target info from device [ 579.591868][ T6549] usb 1-1: could not get target info (-71) [ 579.591877][ T6549] usb 1-1: could not probe fw (-71) [ 579.666472][ T24] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 579.830680][ T9] usb 1-1: USB disconnect, device number 46 [ 579.862553][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 579.866410][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 579.866442][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 579.866465][ T24] usb 2-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 579.866485][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 579.866520][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 579.866540][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.870600][ T24] usbtmc 2-1:16.0: bulk endpoints not found [ 580.695557][ T30] audit: type=1400 audit(1755105190.404:1001): avc: denied { checkpoint_restore } for pid=13091 comm="syz.0.1933" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 580.952905][ T5966] usb 5-1: new low-speed USB device number 52 using dummy_hcd [ 581.318817][ T5966] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 581.350853][ T5966] usb 5-1: config 0 has no interface number 0 [ 581.424650][ T5966] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 581.451755][T13097] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1934'. [ 581.460760][T13097] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 581.494814][T13098] syz.0.1934 (13098) used greatest stack depth: 19064 bytes left [ 581.508384][ T5966] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 581.551007][ T5966] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 581.580010][ T5966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.582488][T13106] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 581.604929][ T5966] usb 5-1: config 0 descriptor?? [ 581.610578][T13087] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 581.624028][ T5966] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 581.644410][ T30] audit: type=1400 audit(1755105191.293:1002): avc: denied { write } for pid=13107 comm="syz.6.1939" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 581.668334][ C0] vkms_vblank_simulate: vblank timer overrun [ 581.749192][T13112] comedi: valid board names for 8255 driver are: [ 581.757195][T13112] 8255 [ 581.759944][T13112] comedi: valid board names for vmk80xx driver are: [ 581.766532][T13112] vmk80xx [ 581.769581][T13112] comedi: valid board names for usbduxsigma driver are: [ 581.776574][T13112] usbduxsigma [ 581.779928][T13112] comedi: valid board names for usbduxfast driver are: [ 581.787003][T13112] usbduxfast [ 581.790275][T13112] comedi: valid board names for usbdux driver are: [ 581.796758][T13112] usbdux [ 581.799696][T13112] comedi: valid board names for ni6501 driver are: [ 581.806189][T13112] ni6501 [ 581.809130][T13112] comedi: valid board names for dt9812 driver are: [ 581.815600][T13112] dt9812 [ 581.818535][T13112] comedi: valid board names for ni_labpc_cs driver are: [ 581.825454][T13112] ni_labpc_cs [ 581.828797][T13112] comedi: valid board names for ni_daq_700 driver are: [ 581.835646][T13112] ni_daq_700 [ 581.838913][T13112] comedi: valid board names for labpc_pci driver are: [ 581.845856][T13112] labpc_pci [ 581.849065][T13112] comedi: valid board names for adl_pci9118 driver are: [ 581.856094][T13112] pci9118dg [ 581.859301][T13112] pci9118hg [ 581.862496][T13112] pci9118hr [ 581.865668][T13112] comedi: valid board names for 8255_pci driver are: [ 581.872339][T13112] 8255_pci [ 581.875429][T13112] comedi: valid board names for s526 driver are: [ 581.881830][T13112] s526 [ 581.884604][T13112] comedi: valid board names for multiq3 driver are: [ 581.891169][T13112] multiq3 [ 581.894199][T13112] comedi: valid board names for pcmuio driver are: [ 581.900693][T13112] pcmuio48 [ 581.903777][T13112] pcmuio96 [ 581.906895][T13112] comedi: valid board names for pcmmio driver are: [ 581.913377][T13112] pcmmio [ 581.916313][T13112] comedi: valid board names for pcmda12 driver are: [ 581.922870][T13112] pcmda12 [ 581.925879][T13112] comedi: valid board names for pcmad driver are: [ 581.932274][T13112] pcmad12 [ 581.935279][T13112] pcmad16 [ 581.938322][T13112] comedi: valid board names for ni_labpc driver are: [ 581.944964][T13112] lab-pc-1200 [ 581.948352][T13112] lab-pc-1200ai [ 581.951868][T13112] lab-pc+ [ 581.954862][T13112] comedi: valid board names for atmio16 driver are: [ 581.961522][T13112] atmio16 [ 581.964515][T13112] atmio16d [ 581.967618][T13112] comedi: valid board names for ni_at_ao driver are: [ 581.974301][T13112] at-ao-6 [ 581.977299][T13112] at-ao-10 [ 581.980492][T13112] comedi: valid board names for ni_at_a2150 driver are: [ 581.987404][T13112] ni_at_a2150 [ 581.990840][T13112] comedi: valid board names for adq12b driver are: [ 581.997308][T13112] adq12b [ 582.000244][T13112] comedi: valid board names for mpc624 driver are: [ 582.006733][T13112] mpc624 [ 582.009639][T13112] comedi: valid board names for c6xdigio driver are: [ 582.016289][T13112] c6xdigio [ 582.019396][T13112] comedi: valid board names for aio_iiro_16 driver are: [ 582.026322][T13112] aio_iiro_16 [ 582.029663][T13112] comedi: valid board names for aio_aio12_8 driver are: [ 582.036594][T13112] aio_aio12_8 [ 582.039944][T13112] aio_ai12_8 [ 582.043214][T13112] aio_ao12_4 [ 582.046466][T13112] comedi: valid board names for fl512 driver are: [ 582.052846][T13112] fl512 [ 582.055703][T13112] comedi: valid board names for dmm32at driver are: [ 582.062270][T13112] dmm32at [ 582.065283][T13112] comedi: valid board names for dt282x driver are: [ 582.071749][T13112] dt2821 [ 582.074678][T13112] dt2821-f [ 582.077778][T13112] dt2821-g [ 582.080866][T13112] dt2823 [ 582.083784][T13112] dt2824-pgh [ 582.087054][T13112] dt2824-pgl [ 582.090311][T13112] dt2825 [ 582.093233][T13112] dt2827 [ 582.096144][T13112] dt2828 [ 582.099156][T13112] dt2829 [ 582.102068][T13112] dt21-ez [ 582.105058][T13112] dt23-ez [ 582.108068][T13112] dt24-ez [ 582.111074][T13112] dt24-ez-pgl [ 582.114416][T13112] comedi: valid board names for dt2817 driver are: [ 582.120894][T13112] dt2817 [ 582.123799][T13112] comedi: valid board names for dt2815 driver are: [ 582.130301][T13112] dt2815 [ 582.133213][T13112] comedi: valid board names for dt2814 driver are: [ 582.139694][T13112] dt2814 [ 582.142600][T13112] comedi: valid board names for dt2811 driver are: [ 582.149075][T13112] dt2811-pgh [ 582.152345][T13112] dt2811-pgl [ 582.155600][T13112] comedi: valid board names for dt2801 driver are: [ 582.162102][T13112] dt2801 [ 582.165008][T13112] comedi: valid board names for das6402 driver are: [ 582.171591][T13112] das6402-12 [ 582.174850][T13112] das6402-16 [ 582.178101][T13112] comedi: valid board names for das1800 driver are: [ 582.184671][T13112] das-1701st [ 582.187924][T13112] das-1701st-da [ 582.191436][T13112] das-1702st [ 582.194707][T13112] das-1702st-da [ 582.198232][T13112] das-1702hr [ 582.201484][T13112] das-1702hr-da [ 582.205010][T13112] das-1701ao [ 582.208361][T13112] das-1702ao [ 582.211618][T13112] das-1801st [ 582.214900][T13112] das-1801st-da [ 582.218425][T13112] das-1802st [ 582.221680][T13112] das-1802st-da [ 582.225234][T13112] das-1802hr [ 582.228486][T13112] das-1802hr-da [ 582.232000][T13112] das-1801hc [ 582.235261][T13112] das-1802hc [ 582.238619][T13112] das-1801ao [ 582.241874][T13112] das-1802ao [ 582.245137][T13112] comedi: valid board names for das800 driver are: [ 582.251630][T13112] das-800 [ 582.254623][T13112] cio-das800 [ 582.257905][T13112] das-801 [ 582.260898][T13112] cio-das801 [ 582.264154][T13112] das-802 [ 582.267163][T13112] cio-das802 [ 582.270450][T13112] cio-das802/16 [ 582.273965][T13112] comedi: valid board names for isa-das08 driver are: [ 582.280726][T13112] isa-das08 [ 582.283905][T13112] das08-pgm [ 582.287083][T13112] das08-pgh [ 582.290287][T13112] das08-pgl [ 582.293453][T13112] das08-aoh [ 582.296633][T13112] das08-aol [ 582.299818][T13112] das08-aom [ 582.302986][T13112] das08/jr-ao [ 582.306341][T13112] das08jr-16-ao [ 582.309855][T13112] pc104-das08 [ 582.313229][T13112] das08jr/16 [ 582.316486][T13112] comedi: valid board names for das16m1 driver are: [ 582.323169][T13112] das16m1 [ 582.326166][T13112] comedi: valid board names for dac02 driver are: [ 582.332557][T13112] dac02 [ 582.335376][T13112] comedi: valid board names for rti802 driver are: [ 582.342112][T13112] rti802 [ 582.345046][T13112] comedi: valid board names for rti800 driver are: [ 582.351512][T13112] rti800 [ 582.354442][T13112] rti815 [ 582.357351][T13112] comedi: valid board names for pcm3724 driver are: [ 582.363927][T13112] pcm3724 [ 582.366935][T13112] comedi: valid board names for pcl818 driver are: [ 582.373400][T13112] pcl818l [ 582.376415][T13112] pcl818h [ 582.379406][T13112] pcl818hd [ 582.382484][T13112] pcl818hg [ 582.385580][T13112] pcl818 [ 582.388485][T13112] pcl718 [ 582.391390][T13112] pcm3718 [ 582.394391][T13112] comedi: valid board names for pcl816 driver are: [ 582.400869][T13112] pcl816 [ 582.403774][T13112] pcl814b [ 582.406913][T13112] comedi: valid board names for pcl812 driver are: [ 582.413393][T13112] pcl812 [ 582.416303][T13112] pcl812pg [ 582.419412][T13112] acl8112pg [ 582.422578][T13112] acl8112dg [ 582.425746][T13112] acl8112hg [ 582.429030][T13112] a821pgl [ 582.432024][T13112] a821pglnda [ 582.435276][T13112] a821pgh [ 582.438272][T13112] a822pgl [ 582.441275][T13112] a822pgh [ 582.444268][T13112] a823pgl [ 582.447285][T13112] a823pgh [ 582.450308][T13112] pcl813 [ 582.453213][T13112] pcl813b [ 582.456207][T13112] acl8113 [ 582.459199][T13112] iso813 [ 582.462113][T13112] acl8216 [ 582.465127][T13112] a826pg [ 582.468033][T13112] comedi: valid board names for pcl730 driver are: [ 582.474538][T13112] pcl730 [ 582.477466][T13112] iso730 [ 582.480370][T13112] acl7130 [ 582.483385][T13112] pcm3730 [ 582.486377][T13112] pcl725 [ 582.489280][T13112] p8r8dio [ 582.492342][T13112] acl7225b [ 582.495423][T13112] p16r16dio [ 582.498590][T13112] pcl733 [ 582.501506][T13112] pcl734 [ 582.504421][T13112] opmm-1616-xt [ 582.507851][T13112] pearl-mm-p [ 582.511121][T13112] ir104-pbf [ 582.514343][T13112] comedi: valid board names for pcl726 driver are: [ 582.520839][T13112] pcl726 [ 582.523755][T13112] pcl727 [ 582.526703][T13112] pcl728 [ 582.529630][T13112] acl6126 [ 582.532625][T13112] acl6128 [ 582.535736][T13112] comedi: valid board names for pcl724 driver are: [ 582.542270][T13112] pcl724 [ 582.545179][T13112] pcl722 [ 582.548106][T13112] pcl731 [ 582.551013][T13112] acl7122 [ 582.554017][T13112] acl7124 [ 582.557029][T13112] pet48dio [ 582.560108][T13112] pcmio48 [ 582.563099][T13112] onyx-mm-dio [ 582.566443][T13112] comedi: valid board names for pcl711 driver are: [ 582.572939][T13112] pcl711 [ 582.575865][T13112] pcl711b [ 582.578953][T13112] acl8112hg [ 582.582121][T13112] acl8112dg [ 582.585287][T13112] comedi: valid board names for amplc_pc263 driver are: [ 582.592204][T13112] pc263 [ 582.595022][T13112] comedi: valid board names for amplc_pc236 driver are: [ 582.601959][T13112] pc36at [ 582.604872][T13112] comedi: valid board names for amplc_dio200 driver are: [ 582.611887][T13112] pc212e [ 582.614791][T13112] pc214e [ 582.617692][T13112] pc215e [ 582.620619][T13112] pc218e [ 582.623523][T13112] pc272e [ 582.626437][T13112] comedi: valid board names for comedi_parport driver are: [ 582.633620][T13112] comedi_parport [ 582.637221][T13112] comedi: valid board names for comedi_test driver are: [ 582.644143][T13112] comedi_test [ 582.647574][T13112] comedi: valid board names for comedi_bond driver are: [ 582.654485][T13112] comedi_bond [ 582.723674][ T5977] usb 2-1: USB disconnect, device number 32 [ 582.812820][ T1205] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 582.853927][T13125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.863486][T13125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.390077][ T1205] usb 7-1: Using ep0 maxpacket: 16 [ 583.396819][ T1205] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 583.412880][ T1205] usb 7-1: config 0 has an invalid descriptor of length 203, skipping remainder of the config [ 583.432846][ T1205] usb 7-1: config 0 has no interface number 0 [ 583.440990][ T1205] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 583.450202][ T1205] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.465000][ T1205] usb 7-1: Product: syz [ 583.469176][ T1205] usb 7-1: Manufacturer: syz [ 583.473748][ T1205] usb 7-1: SerialNumber: syz [ 583.486963][ T1205] usb 7-1: config 0 descriptor?? [ 583.493736][ T1205] usb 7-1: Found UVC 0.00 device syz (046d:08f3) [ 583.500135][ T1205] usb 7-1: No valid video chain found. [ 583.725768][ T5977] usb 7-1: USB disconnect, device number 48 [ 583.849499][ T30] audit: type=1800 audit(1755105193.350:1003): pid=13150 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1948" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 584.288936][T13123] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 584.334193][ T24] usb 5-1: USB disconnect, device number 52 [ 584.374524][T13155] netlink: 'syz.6.1952': attribute type 10 has an invalid length. [ 584.382499][T13155] team0: Device veth0_vlan is already a lower device of the team interface [ 584.554238][T13163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1955'. [ 585.113855][T13163] team1: entered promiscuous mode [ 585.118990][T13163] team1: entered allmulticast mode [ 585.128358][T13160] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1954'. [ 585.252186][T13173] binder: BINDER_SET_CONTEXT_MGR bad uid 60929 != 0 [ 585.347717][T13173] binder: 13172:13173 ioctl 4018620d 200000000100 returned -1 [ 585.363790][T13181] FAULT_INJECTION: forcing a failure. [ 585.363790][T13181] name failslab, interval 1, probability 0, space 0, times 0 [ 585.445746][T13181] CPU: 1 UID: 0 PID: 13181 Comm: syz.4.1961 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 585.445774][T13181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 585.445783][T13181] Call Trace: [ 585.445789][T13181] [ 585.445796][T13181] dump_stack_lvl+0x16c/0x1f0 [ 585.445819][T13181] should_fail_ex+0x512/0x640 [ 585.445837][T13181] ? __kvmalloc_node_noprof+0x124/0x620 [ 585.445866][T13181] should_failslab+0xc2/0x120 [ 585.445887][T13181] __kvmalloc_node_noprof+0x137/0x620 [ 585.445921][T13181] ? resize_runtime_buffer+0x228/0x4f0 [ 585.445941][T13181] ? __pfx_snd_rawmidi_drain_output+0x10/0x10 [ 585.445970][T13181] ? resize_runtime_buffer+0x228/0x4f0 [ 585.445989][T13181] resize_runtime_buffer+0x228/0x4f0 [ 585.446015][T13181] snd_rawmidi_output_params+0xeb/0x1d0 [ 585.446041][T13181] snd_rawmidi_ioctl+0x5f9/0x790 [ 585.446064][T13181] ? __pfx_snd_rawmidi_ioctl+0x10/0x10 [ 585.446091][T13181] ? selinux_file_ioctl+0xb4/0x270 [ 585.446116][T13181] ? __pfx_snd_rawmidi_ioctl+0x10/0x10 [ 585.446139][T13181] __x64_sys_ioctl+0x18b/0x210 [ 585.446165][T13181] do_syscall_64+0xcd/0x4c0 [ 585.446184][T13181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.446200][T13181] RIP: 0033:0x7f5514f8ebe9 [ 585.446215][T13181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 585.446232][T13181] RSP: 002b:00007f5515e93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 585.446250][T13181] RAX: ffffffffffffffda RBX: 00007f55151b5fa0 RCX: 00007f5514f8ebe9 [ 585.446262][T13181] RDX: 0000200000000040 RSI: 00000000c0305710 RDI: 0000000000000005 [ 585.446272][T13181] RBP: 00007f5515e93090 R08: 0000000000000000 R09: 0000000000000000 [ 585.446281][T13181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.446291][T13181] R13: 00007f55151b6038 R14: 00007f55151b5fa0 R15: 00007fff34d9e488 [ 585.446315][T13181] [ 585.891088][T13189] Invalid logical block size (1792) [ 585.999035][ T9] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 586.158936][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 586.165839][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 586.181262][ T9] usb 1-1: config 3 has an invalid interface number: 162 but max is 0 [ 586.189542][ T9] usb 1-1: config 3 has no interface number 0 [ 586.198049][ T9] usb 1-1: config 3 interface 162 has no altsetting 0 [ 586.205054][ T5977] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 586.219357][ T9] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=4c.d7 [ 586.228824][ T9] usb 1-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 586.243429][ T9] usb 1-1: Product: syz [ 586.248317][ T9] usb 1-1: Manufacturer: syz [ 586.253062][ T9] usb 1-1: SerialNumber: syz [ 586.330759][ T5914] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 586.646678][ T9] usb_ehset_test 1-1:3.162: probe with driver usb_ehset_test failed with error -32 [ 586.656368][ T5977] usb 7-1: config 0 has an invalid interface number: 252 but max is 0 [ 586.664781][ T30] audit: type=1400 audit(1755105195.941:1004): avc: denied { getopt } for pid=13185 comm="syz.0.1964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 586.684503][ C0] vkms_vblank_simulate: vblank timer overrun [ 586.690555][ T5977] usb 7-1: config 0 has no interface number 0 [ 586.709954][ T9] usb 1-1: USB disconnect, device number 47 [ 586.720052][ T5977] usb 7-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 586.740399][ T5977] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.804334][ T5977] usb 7-1: Product: syz [ 586.808773][ T5977] usb 7-1: Manufacturer: syz [ 586.813762][ T5977] usb 7-1: SerialNumber: syz [ 586.819658][ T5977] usb 7-1: config 0 descriptor?? [ 586.826623][ T5914] usb 5-1: Using ep0 maxpacket: 16 [ 586.833779][ T5977] usb-storage 7-1:0.252: USB Mass Storage device detected [ 586.887442][ T5914] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 586.899402][ T5977] usb-storage 7-1:0.252: device ignored [ 586.905000][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.915572][ T5914] usb 5-1: config 0 descriptor?? [ 586.926834][ T5914] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 586.936927][T13204] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1970'. [ 587.098584][ T5977] usb 7-1: USB disconnect, device number 49 [ 587.485605][ T5914] gspca_sonixj: reg_w1 err -110 [ 587.491391][ T5914] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 587.848048][ T1205] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 588.040627][ T1205] usb 1-1: Using ep0 maxpacket: 16 [ 588.054104][ T1205] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 588.507300][ T1205] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 588.520209][ T1205] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 588.534550][ T1205] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 588.545564][ T1205] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.570141][ T1205] usb 1-1: Product: syz [ 588.644065][ T1205] usb 1-1: Manufacturer: syz [ 588.660547][ T1205] usb 1-1: SerialNumber: syz [ 588.703649][ T30] audit: type=1400 audit(1755105197.906:1005): avc: denied { read } for pid=13227 comm="syz.6.1977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 589.009138][ T30] audit: type=1326 audit(1755105198.186:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13235 comm="syz.5.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ccd8ebe9 code=0x7ffc0000 [ 589.127052][T13236] /dev/nullb0: Can't lookup blockdev [ 589.191869][ T1205] usb 1-1: 0:2 : does not exist [ 589.417329][ T30] audit: type=1326 audit(1755105198.214:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13235 comm="syz.5.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f64ccd8ebe9 code=0x7ffc0000 [ 589.441482][ T30] audit: type=1326 audit(1755105198.214:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13235 comm="syz.5.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ccd8ebe9 code=0x7ffc0000 [ 589.464955][ C0] vkms_vblank_simulate: vblank timer overrun [ 589.472568][ T30] audit: type=1326 audit(1755105198.214:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13235 comm="syz.5.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ccd8ebe9 code=0x7ffc0000 [ 589.497124][ T30] audit: type=1326 audit(1755105198.214:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13235 comm="syz.5.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f64ccd8ebe9 code=0x7ffc0000 [ 589.520590][ C0] vkms_vblank_simulate: vblank timer overrun [ 589.569361][ T30] audit: type=1326 audit(1755105198.214:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13235 comm="syz.5.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ccd8ebe9 code=0x7ffc0000 [ 589.593954][ T30] audit: type=1326 audit(1755105198.214:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13235 comm="syz.5.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ccd8ebe9 code=0x7ffc0000 [ 589.640901][ T30] audit: type=1326 audit(1755105198.214:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13235 comm="syz.5.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f64ccd8ebe9 code=0x7ffc0000 [ 589.704176][ T5977] usb 5-1: USB disconnect, device number 53 [ 589.738993][ T30] audit: type=1326 audit(1755105198.214:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13235 comm="syz.5.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64ccd8ebe9 code=0x7ffc0000 [ 590.211103][ T5977] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 590.382017][ T5977] usb 5-1: Using ep0 maxpacket: 32 [ 590.395596][ T5977] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 590.405197][ T5977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.413251][ T5977] usb 5-1: Product: syz [ 590.421225][ T5977] usb 5-1: Manufacturer: syz [ 590.425989][ T5977] usb 5-1: SerialNumber: syz [ 590.432300][ T5977] usb 5-1: config 0 descriptor?? [ 590.735479][ T1205] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 590.914410][ T1205] usb 1-1: USB disconnect, device number 48 [ 591.104200][T13276] FAULT_INJECTION: forcing a failure. [ 591.104200][T13276] name failslab, interval 1, probability 0, space 0, times 0 [ 591.117364][T13276] CPU: 0 UID: 0 PID: 13276 Comm: syz.1.1987 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 591.117390][T13276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 591.117405][T13276] Call Trace: [ 591.117412][T13276] [ 591.117420][T13276] dump_stack_lvl+0x16c/0x1f0 [ 591.117444][T13276] should_fail_ex+0x512/0x640 [ 591.117464][T13276] ? __kvmalloc_node_noprof+0x124/0x620 [ 591.117495][T13276] should_failslab+0xc2/0x120 [ 591.117516][T13276] __kvmalloc_node_noprof+0x137/0x620 [ 591.117545][T13276] ? seq_read_iter+0x826/0x12c0 [ 591.117569][T13276] ? seq_read_iter+0x826/0x12c0 [ 591.117585][T13276] ? irqentry_exit+0x3b/0x90 [ 591.117601][T13276] seq_read_iter+0x826/0x12c0 [ 591.117618][T13276] ? lockdep_hardirqs_on+0x7c/0x110 [ 591.117647][T13276] kernfs_fop_read_iter+0x40f/0x5a0 [ 591.117672][T13276] copy_splice_read+0x618/0xc20 [ 591.117697][T13276] ? __pfx_copy_splice_read+0x10/0x10 [ 591.117713][T13276] ? irqentry_exit+0x3b/0x90 [ 591.117734][T13276] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 591.117761][T13276] ? lockdep_set_lock_cmp_fn+0x91/0xe0 [ 591.117791][T13276] ? __pfx_copy_splice_read+0x10/0x10 [ 591.117808][T13276] do_splice_read+0x282/0x370 [ 591.117830][T13276] splice_direct_to_actor+0x2a1/0xa30 [ 591.117850][T13276] ? __pfx_direct_splice_actor+0x10/0x10 [ 591.117874][T13276] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 591.117900][T13276] do_splice_direct+0x174/0x240 [ 591.117919][T13276] ? __pfx_do_splice_direct+0x10/0x10 [ 591.117939][T13276] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 591.117966][T13276] do_sendfile+0xb06/0xe50 [ 591.117990][T13276] ? __pfx_do_sendfile+0x10/0x10 [ 591.118010][T13276] ? __pfx___schedule+0x10/0x10 [ 591.118041][T13276] __x64_sys_sendfile64+0x1d8/0x220 [ 591.118064][T13276] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 591.118095][T13276] do_syscall_64+0xcd/0x4c0 [ 591.118117][T13276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.118141][T13276] RIP: 0033:0x7ff98578ebe9 [ 591.118157][T13276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 591.118174][T13276] RSP: 002b:00007ff986695038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 591.118192][T13276] RAX: ffffffffffffffda RBX: 00007ff9859b6180 RCX: 00007ff98578ebe9 [ 591.118204][T13276] RDX: 0000000000000000 RSI: 000000000000000b RDI: 000000000000000b [ 591.118215][T13276] RBP: 00007ff986695090 R08: 0000000000000000 R09: 0000000000000000 [ 591.118225][T13276] R10: 0000000008000002 R11: 0000000000000246 R12: 0000000000000001 [ 591.118236][T13276] R13: 00007ff9859b6218 R14: 00007ff9859b6180 R15: 00007fff64c0b978 [ 591.118262][T13276] [ 591.379009][ C0] vkms_vblank_simulate: vblank timer overrun [ 591.390028][ T5977] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 591.398703][ T5977] peak_usb 5-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 591.427803][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 591.436360][ T1296] can0 selects TX queue 0, but real number of TX queues is 0 [ 591.466036][ T5977] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 591.478880][ T5977] usb 5-1: USB disconnect, device number 54 [ 591.842576][T13282] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1988'. [ 591.862036][T13282] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1988'. [ 591.880799][T13282] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1988'. [ 591.951060][T13282] sctp: [Deprecated]: syz.5.1988 (pid 13282) Use of struct sctp_assoc_value in delayed_ack socket option. [ 591.951060][T13282] Use struct sctp_sack_info instead [ 592.370219][ T5977] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 592.463913][T13297] atomic_op ffff888032a74198 conn xmit_atomic 0000000000000000 [ 592.543437][ T5977] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.569790][ T5977] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 592.600422][ T5977] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.632654][ T5977] usb 7-1: config 0 descriptor?? [ 592.829961][ T24] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 592.882138][ T5977] usbhid 7-1:0.0: can't add hid device: -71 [ 592.903652][ T5977] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 592.926995][ T5977] usb 7-1: USB disconnect, device number 50 [ 593.002719][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 593.018087][ T24] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 593.028945][ T24] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.070744][ T24] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.131662][ T24] usb 5-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 593.202604][ T24] usb 5-1: config 7 interface 0 has no altsetting 0 [ 593.214124][ T24] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 593.230883][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.370833][T13308] input: syz1 as /devices/virtual/input/input32 [ 593.428659][ T5977] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 593.589044][ T5977] usb 7-1: Using ep0 maxpacket: 16 [ 593.597402][ T5977] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.614407][ T5977] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 593.623730][ T5977] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.633749][ T5977] usb 7-1: config 0 descriptor?? [ 593.706660][ T24] input: HID 0458:5010 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:7.0/0003:0458:5010.0019/input/input33 [ 593.805789][ T24] kye 0003:0458:5010.0019: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.4-1/input0 [ 593.989833][T13299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.002564][T13299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.090158][T13320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.122490][T13320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.157993][ T5977] mcp2221 0003:04D8:00DD.001A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 594.603878][T13327] tipc: Enabling of bearer rejected, failed to enable media [ 594.820476][ C1] kye 0003:0458:5010.0019: usb_submit_urb(ctrl) failed: -1 [ 594.821474][T13332] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2006'. [ 595.563452][T13347] mkiss: ax0: crc mode is auto. [ 595.579818][T13349] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2011'. [ 595.595266][T13349] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2011'. [ 595.605479][T13349] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2011'. [ 595.624052][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 595.624069][ T30] audit: type=1400 audit(1755105204.379:1034): avc: denied { watch watch_reads } for pid=13348 comm="syz.0.2011" path="/dev/pts/1" dev="devpts" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_devpts_t tclass=chr_file permissive=1 [ 595.709415][T13354] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 595.831113][ T5914] usb 7-1: USB disconnect, device number 51 [ 595.859545][T13358] netlink: 'syz.1.2012': attribute type 4 has an invalid length. [ 595.908623][T13358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=13358 comm=syz.1.2012 [ 595.955138][ T5977] usb 5-1: USB disconnect, device number 55 [ 596.144238][ T5977] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 596.325766][ T5914] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 596.334711][ T5977] usb 5-1: config 0 has an invalid interface number: 151 but max is 0 [ 596.345106][ T5977] usb 5-1: config 0 has no interface number 0 [ 596.777278][ T5977] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 596.791706][ T5977] usb 5-1: New USB device found, idVendor=0499, idProduct=6bab, bcdDevice=68.2f [ 596.803204][ T5977] usb 5-1: New USB device strings: Mfr=20, Product=2, SerialNumber=3 [ 596.817714][ T5977] usb 5-1: Product: syz [ 596.860590][ T5977] usb 5-1: Manufacturer: syz [ 596.893486][ T5977] usb 5-1: SerialNumber: syz [ 596.925023][ T5977] usb 5-1: config 0 descriptor?? [ 596.935148][ T5914] usb 7-1: Using ep0 maxpacket: 8 [ 596.948684][T13372] IPv6: sit1: Disabled Multicast RS [ 596.955874][ T5914] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 596.971508][ T5914] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 596.982651][T13372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13372 comm=syz.0.2018 [ 597.039263][ T5914] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 597.073637][ T5914] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 597.100175][ T5914] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 597.124441][ T5914] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 597.133785][ T5914] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.154206][T13347] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2010'. [ 597.229508][ T5914] usbtmc 7-1:16.0: probe with driver usbtmc failed with error -22 [ 598.013381][T13347] syz.4.2010: attempt to access beyond end of device [ 598.013381][T13347] loop4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 598.073023][T13382] sp0: Synchronizing with TNC [ 598.099049][T13382] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2021'. [ 598.221099][ T5977] usb 5-1: USB disconnect, device number 56 [ 598.669469][T13401] input: syz1 as /devices/virtual/input/input34 [ 599.364468][T13409] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2029'. [ 599.375911][ T5900] usb 7-1: USB disconnect, device number 52 [ 600.286072][ T30] audit: type=1400 audit(1755105207.952:1035): avc: denied { connect } for pid=13405 comm="syz.4.2028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 600.794496][T13416] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2030'. [ 601.615120][T13427] netlink: 'syz.4.2033': attribute type 10 has an invalid length. [ 602.253581][T13427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2033'. [ 602.318400][T13434] geneve2: entered promiscuous mode [ 602.371012][T13434] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2035'. [ 602.729403][ T5966] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 602.834193][T13439] netfs: Couldn't get user pages (rc=-14) [ 602.900592][ T5966] usb 2-1: Using ep0 maxpacket: 8 [ 602.919575][ T5966] usb 2-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 602.929942][ T5966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.931393][T13441] overlayfs: failed to clone upperpath [ 602.945845][ T5966] usb 2-1: Product: syz [ 602.950190][ T5966] usb 2-1: Manufacturer: syz [ 602.955074][ T5966] usb 2-1: SerialNumber: syz [ 603.690050][T13451] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2040'. [ 603.740770][ T5966] mxuport 2-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 603.766546][T13453] syz.4.2040 (13453): /proc/13446/oom_adj is deprecated, please use /proc/13446/oom_score_adj instead. [ 603.788355][ T30] audit: type=1400 audit(1755105212.002:1036): avc: denied { getopt } for pid=13446 comm="syz.4.2040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 603.845498][ T5966] mxuport 2-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 603.912286][ T5966] mxuport 2-1:254.0: probe with driver mxuport failed with error -71 [ 603.980314][ T24] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 604.035826][ T5966] usb 2-1: USB disconnect, device number 34 [ 604.060821][T13455] fuse: Bad value for 'user_id' [ 604.073662][T13455] fuse: Bad value for 'user_id' [ 604.161921][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 604.168575][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 604.198113][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 604.219080][ T30] audit: type=1400 audit(1755105212.414:1037): avc: denied { write } for pid=13460 comm="syz.6.2044" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 604.245242][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 604.257593][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 604.269929][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 604.289832][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 604.302595][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.440595][ T24] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22 [ 604.653849][ T5966] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 604.889055][ T5966] usb 7-1: Using ep0 maxpacket: 32 [ 605.039421][ T30] audit: type=1400 audit(1755105213.172:1038): avc: denied { setattr } for pid=13472 comm="syz.5.2047" name="NETLINK" dev="sockfs" ino=42469 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 605.314013][ T5966] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 605.324296][ T5966] usb 7-1: config 0 has no interface number 0 [ 605.334920][ T5966] usb 7-1: config 0 interface 184 has no altsetting 0 [ 605.345301][ T5966] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 605.356838][ T5966] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.365270][ T5966] usb 7-1: Product: syz [ 605.369782][ T5966] usb 7-1: Manufacturer: syz [ 605.376336][ T5966] usb 7-1: SerialNumber: syz [ 605.382461][ T5966] usb 7-1: config 0 descriptor?? [ 605.389891][ T5966] smsc75xx v1.0.0 [ 605.756006][ T24] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 605.826514][ T5966] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 605.837757][ T5966] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 605.848044][ T5966] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 605.860444][ T5966] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -61 [ 605.926003][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 605.932396][ T24] usb 2-1: config 14 has an invalid interface number: 164 but max is 0 [ 605.940937][ T24] usb 2-1: config 14 has no interface number 0 [ 605.947126][ T24] usb 2-1: config 14 interface 164 has no altsetting 0 [ 605.956372][ T24] usb 2-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=14.aa [ 605.965557][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.973543][ T24] usb 2-1: Product: syz [ 605.977674][ T24] usb 2-1: Manufacturer: syz [ 605.982270][ T24] usb 2-1: SerialNumber: syz [ 606.464136][ T24] usb 2-1: USB disconnect, device number 35 [ 606.933952][ T5977] usb 1-1: USB disconnect, device number 49 [ 607.062688][T13498] loop3: detected capacity change from 0 to 1 [ 607.513475][T13498] loop3: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 [ 607.542319][T13498] loop3: p1 start 791543808 is beyond EOD, truncated [ 607.561009][T13498] loop3: p2 start 1633771873 is beyond EOD, truncated [ 607.568345][T13503] fuse: Unknown parameter 'f' [ 607.573299][T13498] loop3: p3 start 1633771873 is beyond EOD, truncated [ 607.580086][T13498] loop3: p4 start 1633771873 is beyond EOD, truncated [ 607.591889][T13498] loop3: p5 start 1633771873 is beyond EOD, truncated [ 607.600307][T13498] loop3: p6 start 1633771776 is beyond EOD, truncated [ 607.609594][T13498] loop3: p7 start 1633771873 is beyond EOD, truncated [ 607.700805][T13498] loop3: p8 start 1886744434 is beyond EOD, truncated [ 607.710239][T13498] loop3: p9 start 1633771873 is beyond EOD, truncated [ 607.731641][T13498] loop3: p10 start 1633771873 is beyond EOD, truncated [ 608.299783][T13514] netlink: 'syz.1.2056': attribute type 3 has an invalid length. [ 608.308320][T13514] netlink: 'syz.1.2056': attribute type 3 has an invalid length. [ 608.316166][T13514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2056'. [ 608.600422][T13495] ceph: No mds server is up or the cluster is laggy [ 608.856130][T13521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2058'. [ 608.986554][ T5977] usb 7-1: USB disconnect, device number 53 [ 609.252666][T13528] FAULT_INJECTION: forcing a failure. [ 609.252666][T13528] name failslab, interval 1, probability 0, space 0, times 0 [ 609.343455][T13528] CPU: 0 UID: 0 PID: 13528 Comm: syz.6.2061 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 609.343485][T13528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 609.343496][T13528] Call Trace: [ 609.343503][T13528] [ 609.343511][T13528] dump_stack_lvl+0x16c/0x1f0 [ 609.343533][T13528] should_fail_ex+0x512/0x640 [ 609.343553][T13528] ? fs_reclaim_acquire+0xae/0x150 [ 609.343578][T13528] ? tomoyo_encode2+0x100/0x3e0 [ 609.343600][T13528] should_failslab+0xc2/0x120 [ 609.343621][T13528] __kmalloc_noprof+0xd2/0x510 [ 609.343639][T13528] ? d_absolute_path+0x136/0x1a0 [ 609.343670][T13528] tomoyo_encode2+0x100/0x3e0 [ 609.343697][T13528] tomoyo_encode+0x29/0x50 [ 609.343716][T13528] tomoyo_realpath_from_path+0x18f/0x6e0 [ 609.343746][T13528] tomoyo_check_open_permission+0x2ab/0x3c0 [ 609.343765][T13528] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 609.343808][T13528] ? do_raw_spin_lock+0x12c/0x2b0 [ 609.343832][T13528] tomoyo_file_open+0x6b/0x90 [ 609.343849][T13528] security_file_open+0x84/0x1e0 [ 609.343874][T13528] do_dentry_open+0x596/0x1530 [ 609.343900][T13528] vfs_open+0x82/0x3f0 [ 609.343923][T13528] path_openat+0x1de4/0x2cb0 [ 609.343948][T13528] ? __pfx_path_openat+0x10/0x10 [ 609.343971][T13528] do_filp_open+0x20b/0x470 [ 609.343988][T13528] ? __pfx_do_filp_open+0x10/0x10 [ 609.344028][T13528] ? alloc_fd+0x471/0x7d0 [ 609.344053][T13528] do_sys_openat2+0x11b/0x1d0 [ 609.344075][T13528] ? __pfx_do_sys_openat2+0x10/0x10 [ 609.344095][T13528] ? find_held_lock+0x2b/0x80 [ 609.344114][T13528] ? handle_mm_fault+0x2ab/0xd10 [ 609.344143][T13528] __x64_sys_openat+0x174/0x210 [ 609.344165][T13528] ? __pfx___x64_sys_openat+0x10/0x10 [ 609.344189][T13528] ? do_user_addr_fault+0x843/0x1370 [ 609.344210][T13528] do_syscall_64+0xcd/0x4c0 [ 609.344231][T13528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.344248][T13528] RIP: 0033:0x7fd5ff98d550 [ 609.344262][T13528] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 609.344277][T13528] RSP: 002b:00007fd6007bcb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 609.344294][T13528] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd5ff98d550 [ 609.344304][T13528] RDX: 0000000000000000 RSI: 00007fd6007bcc10 RDI: 00000000ffffff9c [ 609.344315][T13528] RBP: 00007fd6007bcc10 R08: 0000000000000000 R09: 0023647261632f69 [ 609.344325][T13528] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 609.344336][T13528] R13: 00007fd5ffbb6038 R14: 00007fd5ffbb5fa0 R15: 00007ffe12d71148 [ 609.344364][T13528] [ 609.625353][T13528] ERROR: Out of memory at tomoyo_realpath_from_path. [ 610.894339][T13559] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 610.920129][T13554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 610.927571][T13554] batadv0: mtu less than device minimum [ 610.940965][T13554] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 610.952213][T13554] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 610.963484][T13554] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 610.974869][T13554] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 610.986232][T13554] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 610.997569][T13554] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 611.008910][T13554] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 611.020257][T13554] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 611.031630][T13554] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 611.058111][T13554] batadv_slave_1: entered allmulticast mode [ 611.347932][T13567] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2070'. [ 611.753036][T13570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2071'. [ 612.241183][ T30] audit: type=1400 audit(1755105219.916:1039): avc: denied { create } for pid=13578 comm="syz.1.2075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 612.287011][ T9] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 612.565415][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 612.574309][ T9] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 612.583608][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.600506][ T9] usb 1-1: config 0 descriptor?? [ 612.608386][ T9] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 612.956269][T13592] batadv2: entered promiscuous mode [ 613.586095][ T9] gspca_sonixj: reg_w1 err -110 [ 613.591151][ T9] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 613.962221][ T30] audit: type=1400 audit(1755105221.525:1040): avc: denied { mount } for pid=13604 comm="syz.1.2082" name="/" dev="configfs" ino=145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 613.987220][T13601] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2080'. [ 613.996485][ T30] audit: type=1400 audit(1755105221.534:1041): avc: denied { search } for pid=13604 comm="syz.1.2082" name="/" dev="configfs" ino=145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 614.693019][ T30] audit: type=1400 audit(1755105221.974:1042): avc: denied { read write } for pid=13607 comm="syz.6.2083" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 614.741007][ T30] audit: type=1400 audit(1755105221.974:1043): avc: denied { open } for pid=13607 comm="syz.6.2083" path="/288/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 614.820373][ T30] audit: type=1400 audit(1755105221.983:1044): avc: denied { ioctl } for pid=13607 comm="syz.6.2083" path="/288/file0/file0" dev="fuse" ino=3 ioctlcmd=0x70c9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 615.087243][T13620] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 615.095042][T13624] overlay: Unknown parameter 'euid<00000000000000000000' [ 615.110470][T13620] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 615.120087][T13620] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 615.139928][T13626] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2087'. [ 615.326819][ T24] usb 1-1: USB disconnect, device number 50 [ 615.511137][T13635] 9pnet_fd: Insufficient options for proto=fd [ 616.383113][T13657] fuse: Bad value for 'group_id' [ 616.388105][T13657] fuse: Bad value for 'group_id' [ 617.044562][ T5854] Bluetooth: hci2: command 0x0c1a tx timeout [ 617.300974][ T5854] Bluetooth: hci6: command 0x0406 tx timeout [ 617.300991][T13627] Bluetooth: hci5: command 0x0406 tx timeout [ 617.307197][T13627] Bluetooth: hci3: command 0x0c1a tx timeout [ 617.313323][T13620] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 617.492335][T13668] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2098'. [ 617.603846][T13666] netlink: 'syz.6.2099': attribute type 3 has an invalid length. [ 617.611745][T13666] netlink: 'syz.6.2099': attribute type 1 has an invalid length. [ 617.619452][T13666] netlink: 193500 bytes leftover after parsing attributes in process `syz.6.2099'. [ 617.630243][T13666] ipvlan1: entered promiscuous mode [ 617.635484][T13666] ipvlan1: entered allmulticast mode [ 617.640778][T13666] veth0_vlan: entered allmulticast mode [ 617.760559][ T9] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 617.978857][T13683] input: syz1 as /devices/virtual/input/input35 [ 618.017175][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 618.050150][ T9] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 618.050178][ T9] usb 1-1: config 179 has no interface number 0 [ 618.050213][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 618.050238][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 618.050262][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 618.050286][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 618.050309][ T9] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 618.050363][ T9] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 618.050385][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.052398][T13667] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 618.225386][T13682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.236155][T13682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.305731][ T24] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 618.312216][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input36 [ 618.556700][T13667] netlink: 'syz.0.2100': attribute type 1 has an invalid length. [ 618.589029][T13667] 8021q: adding VLAN 0 to HW filter on device bond5 [ 618.697918][T13667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.711081][T13667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.721786][T13662] Bluetooth: hci3: unexpected event for opcode 0x2040 [ 618.758745][T13667] bond4: (slave wlan0): Releasing active interface [ 618.772885][T13667] bond5: (slave wlan0): Enslaving as an active interface with a down link [ 618.904601][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 618.912915][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 618.926236][ T9] usb 1-1: USB disconnect, device number 51 [ 619.525162][T13662] Bluetooth: hci6: command 0x0406 tx timeout [ 619.663483][ T5914] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 619.977622][ T5914] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 620.207715][ T5914] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 620.228149][T13703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2110'. [ 620.239135][ T5914] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 620.253389][ T5914] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 620.268397][ T5914] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 620.283004][ T5914] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.309186][ T5914] usb 7-1: config 0 descriptor?? [ 620.325856][T13703] veth3: entered promiscuous mode [ 620.366773][T13710] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 620.540238][ T24] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 620.674405][ T30] audit: type=1400 audit(1755105229.804:1045): avc: denied { setattr } for pid=13716 comm="syz.5.2116" name="file0" dev="tmpfs" ino=1603 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 620.732577][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 620.747875][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 620.760182][ T5914] plantronics 0003:047F:FFFF.001B: ignoring exceeding usage max [ 620.879895][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 620.906112][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 620.911606][ T5914] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 620.962583][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 621.010369][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 621.068328][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.397382][ T24] usb 5-1: GET_CAPABILITIES returned 0 [ 621.455925][ T24] usbtmc 5-1:16.0: can't read capabilities [ 621.996868][ T30] audit: type=1400 audit(1755105231.048:1046): avc: denied { ioctl } for pid=13742 comm="syz.0.2123" path="/dev/ptyq4" dev="devtmpfs" ino=123 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 622.094101][ T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 622.252654][ T5914] usb 5-1: USB disconnect, device number 57 [ 622.378956][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 622.419463][ T9] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 622.950429][ T9] usb 2-1: config 179 has no interface number 0 [ 623.010406][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 623.061450][ T24] usb 7-1: reset high-speed USB device number 55 using dummy_hcd [ 623.178978][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 623.305286][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 623.467553][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 623.614772][ T9] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 623.785062][ T9] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 623.906787][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.342989][T13741] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 625.122625][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input37 [ 625.411835][T13741] netlink: 'syz.1.2122': attribute type 1 has an invalid length. [ 625.494859][T13766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.627604][ T1205] usb 7-1: USB disconnect, device number 55 [ 625.671747][T13766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.455703][T13741] 8021q: adding VLAN 0 to HW filter on device bond3 [ 626.629480][T13783] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 626.710000][T13766] bond3: (slave wlan0): Enslaving as an active interface with a down link [ 626.743241][T13784] fuse: Invalid rootmode [ 627.289338][ T24] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 627.373261][ T1205] usb 2-1: USB disconnect, device number 36 [ 627.373384][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 627.387726][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 627.486608][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 627.568917][T13788] input: syz1 as /devices/virtual/input/input38 [ 627.730195][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 627.758279][T13790] 9pnet_fd: Insufficient options for proto=fd [ 627.765473][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 627.776694][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 627.798255][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 627.866894][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 627.970385][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 627.982385][ T24] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 627.990548][ T24] usb 1-1: Manufacturer: syz [ 628.036462][ T24] usb 1-1: config 0 descriptor?? [ 628.114481][T13796] net_ratelimit: 10 callbacks suppressed [ 628.114500][T13796] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 628.333841][ T24] rc_core: IR keymap rc-hauppauge not found [ 628.339777][ T24] Registered IR keymap rc-empty [ 628.348093][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 628.376300][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 628.399586][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 628.432545][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input39 [ 628.451141][ T9] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 628.463978][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 628.484963][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 628.485938][T13778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.501407][T13778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.515868][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 628.537481][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 628.601935][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 628.705240][T13811] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2144'. [ 628.762568][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 628.785908][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 628.818962][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 628.833350][ T9] usb 5-1: config 0 has no interfaces? [ 628.845442][ T9] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 628.988851][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 629.109728][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.206547][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 629.229084][ T9] usb 5-1: config 0 descriptor?? [ 629.296620][ T24] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 629.304633][ T24] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 629.323211][ T24] usb 1-1: USB disconnect, device number 52 [ 629.472787][ T30] audit: type=1400 audit(1755105238.036:1047): avc: denied { getopt } for pid=13797 comm="syz.4.2140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 629.479058][ T9] usb 5-1: USB disconnect, device number 58 [ 629.497380][T13823] FAULT_INJECTION: forcing a failure. [ 629.497380][T13823] name failslab, interval 1, probability 0, space 0, times 0 [ 629.511529][T13823] CPU: 0 UID: 0 PID: 13823 Comm: syz.1.2147 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 629.511552][T13823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 629.511561][T13823] Call Trace: [ 629.511567][T13823] [ 629.511573][T13823] dump_stack_lvl+0x16c/0x1f0 [ 629.511597][T13823] should_fail_ex+0x512/0x640 [ 629.511615][T13823] ? fs_reclaim_acquire+0xae/0x150 [ 629.511637][T13823] ? tomoyo_encode2+0x100/0x3e0 [ 629.511659][T13823] should_failslab+0xc2/0x120 [ 629.511679][T13823] __kmalloc_noprof+0xd2/0x510 [ 629.511696][T13823] ? d_absolute_path+0x136/0x1a0 [ 629.511724][T13823] tomoyo_encode2+0x100/0x3e0 [ 629.511753][T13823] tomoyo_encode+0x29/0x50 [ 629.511776][T13823] tomoyo_realpath_from_path+0x18f/0x6e0 [ 629.511817][T13823] tomoyo_path_number_perm+0x245/0x580 [ 629.511838][T13823] ? tomoyo_path_number_perm+0x237/0x580 [ 629.511863][T13823] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 629.511886][T13823] ? find_held_lock+0x2b/0x80 [ 629.511936][T13823] ? find_held_lock+0x2b/0x80 [ 629.511956][T13823] ? hook_file_ioctl_common+0x145/0x410 [ 629.511980][T13823] ? __fget_files+0x20e/0x3c0 [ 629.512004][T13823] security_file_ioctl+0x9b/0x240 [ 629.512030][T13823] __x64_sys_ioctl+0xb7/0x210 [ 629.512058][T13823] do_syscall_64+0xcd/0x4c0 [ 629.512079][T13823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.512097][T13823] RIP: 0033:0x7ff98578ebe9 [ 629.512118][T13823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 629.512135][T13823] RSP: 002b:00007ff9866d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 629.512153][T13823] RAX: ffffffffffffffda RBX: 00007ff9859b5fa0 RCX: 00007ff98578ebe9 [ 629.512165][T13823] RDX: 0000200000000240 RSI: 00000000c01064ac RDI: 0000000000000003 [ 629.512176][T13823] RBP: 00007ff9866d7090 R08: 0000000000000000 R09: 0000000000000000 [ 629.512185][T13823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.512194][T13823] R13: 00007ff9859b6038 R14: 00007ff9859b5fa0 R15: 00007fff64c0b978 [ 629.512219][T13823] [ 629.783278][T13823] ERROR: Out of memory at tomoyo_realpath_from_path. [ 629.937385][ T24] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 630.183009][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 630.193875][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.204850][ T24] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 630.282082][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 630.320161][ T24] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 630.331715][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 630.347923][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 630.362062][ T24] usb 1-1: SerialNumber: syz [ 630.379597][T13818] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 630.390978][ T24] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 630.562957][ T24] usb-storage 1-1:1.0: USB Mass Storage device detected [ 630.753126][ T24] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 630.786962][ T24] scsi host1: usb-storage 1-1:1.0 [ 631.807857][ T24] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 631.979515][ T24] usb 2-1: config 6 has an invalid interface number: 2 but max is 0 [ 631.987655][ T24] usb 2-1: config 6 has no interface number 0 [ 631.994654][ T24] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 632.024371][ T24] usb 2-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 632.065649][ T24] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 632.080167][ T24] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 632.085797][T13847] usb 1-1: reset high-speed USB device number 53 using dummy_hcd [ 632.108733][ T24] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 632.120606][ T24] usb 2-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 632.130730][ T24] usb 2-1: Product: syz [ 632.134971][ T24] usb 2-1: Manufacturer: syz [ 632.142364][ T24] usb 2-1: SerialNumber: syz [ 632.155853][ T24] hso 2-1:6.2: Failed to find BULK IN ep [ 632.458029][T13871] binder: 13854:13871 ioctl 4018620d 0 returned -22 [ 632.747056][ T24] usb 2-1: USB disconnect, device number 37 [ 633.114143][ T5914] usb 1-1: USB disconnect, device number 53 [ 634.206587][ T5914] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 634.512715][ T5914] usb 1-1: Using ep0 maxpacket: 32 [ 634.536067][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.556611][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.571973][ T5914] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 634.585175][ T5914] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 634.597617][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.608186][ T5914] usb 1-1: config 0 descriptor?? [ 634.904790][T13906] tipc: Started in network mode [ 634.909838][T13906] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 634.917447][T13906] tipc: Enabled bearer , priority 10 [ 634.934619][T13906] lo speed is unknown, defaulting to 1000 [ 634.940781][T13906] lo speed is unknown, defaulting to 1000 [ 634.950424][T13906] lo speed is unknown, defaulting to 1000 [ 634.988598][T13906] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 635.082187][T13906] lo speed is unknown, defaulting to 1000 [ 635.092895][T13906] lo speed is unknown, defaulting to 1000 [ 635.105193][T13906] lo speed is unknown, defaulting to 1000 [ 635.116567][T13906] lo speed is unknown, defaulting to 1000 [ 635.127083][T13906] lo speed is unknown, defaulting to 1000 [ 635.255570][ T9] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 635.275566][ T5914] hid (null): unknown global tag 0xe [ 635.285170][ T5914] hid (null): unknown global tag 0x1a [ 635.312958][ T5914] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.001C/input/input40 [ 635.407772][ T5914] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.001C/input/input41 [ 635.424386][T13912] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2174'. [ 635.433362][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 635.443192][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 635.496459][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 225, changing to 11 [ 635.614856][ T5914] kye 0003:0458:5011.001C: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 635.651196][ T9] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 635.685728][T13915] 9pnet_fd: Insufficient options for proto=fd [ 635.726086][ T9] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 635.791741][ T5914] usb 1-1: USB disconnect, device number 54 [ 635.822686][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 635.857330][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.876298][ T9] usb 2-1: Product: syz [ 635.890067][ T9] usb 2-1: Manufacturer: syz [ 635.897538][ T9] usb 2-1: SerialNumber: syz [ 635.988007][ T1205] tipc: Node number set to 8432298 [ 636.153094][ T9] cdc_ncm 2-1:1.0: bind() failure [ 636.165385][ T9] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 636.180466][ T24] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 636.183380][ T9] cdc_ncm 2-1:1.1: bind() failure [ 636.206013][ T9] usb 2-1: USB disconnect, device number 38 [ 636.351798][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 636.390654][ T24] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 636.403162][T13936] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2182'. [ 636.425398][T13936] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2182'. [ 636.426163][ T24] usb 5-1: config 0 has no interface number 0 [ 636.463561][T13933] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2181'. [ 636.473887][ T24] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 636.487492][T13933] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.490298][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.527970][ T24] usb 5-1: Product: syz [ 636.532165][ T24] usb 5-1: Manufacturer: syz [ 636.552772][ T24] usb 5-1: SerialNumber: syz [ 636.575601][ T24] usb 5-1: config 0 descriptor?? [ 637.634891][ T24] radio-si470x 5-1:0.35: DeviceID=0x9242 ChipID=0x0000 [ 637.656146][ T24] radio-si470x 5-1:0.35: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 637.931697][T13954] fuse: Unknown parameter 'ÇN!4.O?' [ 637.959828][T13954] [ 637.962178][T13954] ===================================================== [ 637.969096][T13954] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 637.976545][T13954] 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 Not tainted [ 637.983650][T13954] ----------------------------------------------------- [ 637.990575][T13954] syz.6.2187/13954 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 637.998294][T13954] ffff8880352be210 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510 [ 638.007012][T13954] [ 638.007012][T13954] and this task is already holding: [ 638.014368][T13954] ffff888035481028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 638.024188][T13954] which would create a new lock dependency: [ 638.030053][T13954] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 638.038128][T13954] [ 638.038128][T13954] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 638.047638][T13954] (&dev->event_lock#2){..-.}-{3:3} [ 638.047661][T13954] [ 638.047661][T13954] ... which became SOFTIRQ-irq-safe at: [ 638.060505][T13954] lock_acquire+0x179/0x350 [ 638.065084][T13954] _raw_spin_lock_irqsave+0x3a/0x60 [ 638.070355][T13954] input_inject_event+0x9f/0x3b0 [ 638.075361][T13954] kd_sound_helper+0x20f/0x280 [ 638.080194][T13954] input_handler_for_each_handle+0xd7/0x250 [ 638.086157][T13954] call_timer_fn+0x19a/0x620 [ 638.090817][T13954] __run_timers+0x6ef/0x960 [ 638.095390][T13954] run_timer_base+0x114/0x190 [ 638.100139][T13954] run_timer_softirq+0x1a/0x40 [ 638.104973][T13954] handle_softirqs+0x216/0x8e0 [ 638.109806][T13954] __irq_exit_rcu+0x109/0x170 [ 638.114562][T13954] irq_exit_rcu+0x9/0x30 [ 638.118878][T13954] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 638.124602][T13954] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 638.130675][T13954] irqentry_exit_to_user_mode+0x10b/0x270 [ 638.136465][T13954] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 638.141989][T13954] [ 638.141989][T13954] to a SOFTIRQ-irq-unsafe lock: [ 638.148982][T13954] (tasklist_lock){.+.+}-{3:3} [ 638.149004][T13954] [ 638.149004][T13954] ... which became SOFTIRQ-irq-unsafe at: [ 638.161609][T13954] ... [ 638.161614][T13954] lock_acquire+0x179/0x350 [ 638.168744][T13954] _raw_read_lock+0x5f/0x70 [ 638.173327][T13954] __do_wait+0x105/0x890 [ 638.177642][T13954] do_wait+0x21e/0x5a0 [ 638.181779][T13954] kernel_wait+0x9f/0x160 [ 638.186170][T13954] call_usermodehelper_exec_work+0xf1/0x170 [ 638.192142][T13954] process_one_work+0x9cc/0x1b70 [ 638.197143][T13954] worker_thread+0x6c8/0xf10 [ 638.201796][T13954] kthread+0x3c5/0x780 [ 638.205927][T13954] ret_from_fork+0x5d7/0x6f0 [ 638.210579][T13954] ret_from_fork_asm+0x1a/0x30 [ 638.215419][T13954] [ 638.215419][T13954] other info that might help us debug this: [ 638.215419][T13954] [ 638.225622][T13954] Chain exists of: [ 638.225622][T13954] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 638.225622][T13954] [ 638.239153][T13954] Possible interrupt unsafe locking scenario: [ 638.239153][T13954] [ 638.247442][T13954] CPU0 CPU1 [ 638.252781][T13954] ---- ---- [ 638.258120][T13954] lock(tasklist_lock); [ 638.262343][T13954] local_irq_disable(); [ 638.269071][T13954] lock(&dev->event_lock#2); [ 638.276247][T13954] lock(&client->buffer_lock); [ 638.283601][T13954] [ 638.287030][T13954] lock(&dev->event_lock#2); [ 638.291859][T13954] [ 638.291859][T13954] *** DEADLOCK *** [ 638.291859][T13954] [ 638.299975][T13954] 7 locks held by syz.6.2187/13954: [ 638.305142][T13954] #0: ffff88802b2f6118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x206/0x750 [ 638.314254][T13954] #1: ffff88801fbaf230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x3b0 [ 638.324325][T13954] #2: ffffffff8e5c11e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbb/0x3b0 [ 638.333962][T13954] #3: ffffffff8e5c11e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x80/0x880 [ 638.343504][T13954] #4: ffffffff8e5c11e0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x7b/0x390 [ 638.352618][T13954] #5: ffff888035481028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 638.362868][T13954] #6: ffffffff8e5c11e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x62/0x510 [ 638.371894][T13954] [ 638.371894][T13954] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 638.382271][T13954] -> (&dev->event_lock#2){..-.}-{3:3} { [ 638.387894][T13954] IN-SOFTIRQ-W at: [ 638.391951][T13954] lock_acquire+0x179/0x350 [ 638.398260][T13954] _raw_spin_lock_irqsave+0x3a/0x60 [ 638.405264][T13954] input_inject_event+0x9f/0x3b0 [ 638.412003][T13954] kd_sound_helper+0x20f/0x280 [ 638.418573][T13954] input_handler_for_each_handle+0xd7/0x250 [ 638.426269][T13954] call_timer_fn+0x19a/0x620 [ 638.432664][T13954] __run_timers+0x6ef/0x960 [ 638.438975][T13954] run_timer_base+0x114/0x190 [ 638.445458][T13954] run_timer_softirq+0x1a/0x40 [ 638.452040][T13954] handle_softirqs+0x216/0x8e0 [ 638.458626][T13954] __irq_exit_rcu+0x109/0x170 [ 638.465120][T13954] irq_exit_rcu+0x9/0x30 [ 638.471168][T13954] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 638.478610][T13954] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 638.486390][T13954] irqentry_exit_to_user_mode+0x10b/0x270 [ 638.493909][T13954] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 638.501167][T13954] INITIAL USE at: [ 638.505122][T13954] lock_acquire+0x179/0x350 [ 638.511349][T13954] _raw_spin_lock_irqsave+0x3a/0x60 [ 638.518281][T13954] input_inject_event+0x9f/0x3b0 [ 638.524949][T13954] led_set_brightness+0x217/0x290 [ 638.531699][T13954] kbd_led_trigger_activate+0xcb/0x110 [ 638.538873][T13954] led_trigger_set+0x59a/0xc50 [ 638.545354][T13954] led_trigger_set_default+0x1e0/0x2e0 [ 638.552531][T13954] led_classdev_register_ext+0x7b8/0xa10 [ 638.559879][T13954] input_leds_connect+0x552/0x8e0 [ 638.566617][T13954] input_attach_handler.isra.0+0x176/0x250 [ 638.574140][T13954] input_register_device+0xab9/0x1180 [ 638.581228][T13954] atkbd_connect+0x5f8/0xa40 [ 638.587558][T13954] serio_driver_probe+0x7c/0xd0 [ 638.594136][T13954] really_probe+0x241/0xa90 [ 638.600355][T13954] __driver_probe_device+0x1de/0x440 [ 638.607354][T13954] driver_probe_device+0x4c/0x1b0 [ 638.614089][T13954] __driver_attach+0x283/0x580 [ 638.620567][T13954] bus_for_each_dev+0x13b/0x1d0 [ 638.627137][T13954] serio_handle_event+0x335/0xc30 [ 638.633874][T13954] process_one_work+0x9cc/0x1b70 [ 638.640527][T13954] worker_thread+0x6c8/0xf10 [ 638.646830][T13954] kthread+0x3c5/0x780 [ 638.652610][T13954] ret_from_fork+0x5d7/0x6f0 [ 638.658910][T13954] ret_from_fork_asm+0x1a/0x30 [ 638.665391][T13954] } [ 638.667950][T13954] ... key at: [] __key.7+0x0/0x40 [ 638.675123][T13954] -> (&client->buffer_lock){....}-{3:3} { [ 638.680831][T13954] INITIAL USE at: [ 638.684698][T13954] lock_acquire+0x179/0x350 [ 638.690748][T13954] _raw_spin_lock+0x2e/0x40 [ 638.696796][T13954] evdev_handle_get_val+0x66/0x600 [ 638.703463][T13954] evdev_do_ioctl+0xfb4/0x1b30 [ 638.709782][T13954] evdev_ioctl+0x16f/0x1a0 [ 638.715751][T13954] __x64_sys_ioctl+0x18b/0x210 [ 638.722074][T13954] do_syscall_64+0xcd/0x4c0 [ 638.728132][T13954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.735581][T13954] } [ 638.738063][T13954] ... key at: [] __key.1+0x0/0x40 [ 638.745154][T13954] ... acquired at: [ 638.748931][T13954] _raw_spin_lock+0x2e/0x40 [ 638.753591][T13954] evdev_handle_get_val+0x66/0x600 [ 638.758855][T13954] evdev_do_ioctl+0xfb4/0x1b30 [ 638.763772][T13954] evdev_ioctl+0x16f/0x1a0 [ 638.768343][T13954] __x64_sys_ioctl+0x18b/0x210 [ 638.773293][T13954] do_syscall_64+0xcd/0x4c0 [ 638.777965][T13954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.784021][T13954] [ 638.786324][T13954] [ 638.786324][T13954] the dependencies between the lock to be acquired [ 638.786332][T13954] and SOFTIRQ-irq-unsafe lock: [ 638.799800][T13954] -> (tasklist_lock){.+.+}-{3:3} { [ 638.805076][T13954] HARDIRQ-ON-R at: [ 638.809207][T13954] lock_acquire+0x179/0x350 [ 638.815691][T13954] _raw_read_lock+0x5f/0x70 [ 638.822177][T13954] __do_wait+0x105/0x890 [ 638.828401][T13954] do_wait+0x21e/0x5a0 [ 638.834448][T13954] kernel_wait+0x9f/0x160 [ 638.840766][T13954] call_usermodehelper_exec_work+0xf1/0x170 [ 638.848634][T13954] process_one_work+0x9cc/0x1b70 [ 638.855545][T13954] worker_thread+0x6c8/0xf10 [ 638.862110][T13954] kthread+0x3c5/0x780 [ 638.868152][T13954] ret_from_fork+0x5d7/0x6f0 [ 638.874715][T13954] ret_from_fork_asm+0x1a/0x30 [ 638.881456][T13954] SOFTIRQ-ON-R at: [ 638.885586][T13954] lock_acquire+0x179/0x350 [ 638.892069][T13954] _raw_read_lock+0x5f/0x70 [ 638.898552][T13954] __do_wait+0x105/0x890 [ 638.904775][T13954] do_wait+0x21e/0x5a0 [ 638.910822][T13954] kernel_wait+0x9f/0x160 [ 638.917140][T13954] call_usermodehelper_exec_work+0xf1/0x170 [ 638.925010][T13954] process_one_work+0x9cc/0x1b70 [ 638.931920][T13954] worker_thread+0x6c8/0xf10 [ 638.938483][T13954] kthread+0x3c5/0x780 [ 638.944524][T13954] ret_from_fork+0x5d7/0x6f0 [ 638.951085][T13954] ret_from_fork_asm+0x1a/0x30 [ 638.957825][T13954] INITIAL USE at: [ 638.961867][T13954] lock_acquire+0x179/0x350 [ 638.968264][T13954] _raw_write_lock_irq+0x36/0x50 [ 638.975093][T13954] copy_process+0x4caf/0x7690 [ 638.981661][T13954] kernel_clone+0xfc/0x930 [ 638.987965][T13954] user_mode_thread+0xc7/0x110 [ 638.994618][T13954] rest_init+0x23/0x2b0 [ 639.000664][T13954] start_kernel+0x3ee/0x4d0 [ 639.007059][T13954] x86_64_start_reservations+0x18/0x30 [ 639.014412][T13954] x86_64_start_kernel+0x130/0x190 [ 639.021414][T13954] common_startup_64+0x13e/0x148 [ 639.028239][T13954] INITIAL READ USE at: [ 639.032713][T13954] lock_acquire+0x179/0x350 [ 639.039547][T13954] _raw_read_lock+0x5f/0x70 [ 639.046376][T13954] __do_wait+0x105/0x890 [ 639.052943][T13954] do_wait+0x21e/0x5a0 [ 639.059336][T13954] kernel_wait+0x9f/0x160 [ 639.065982][T13954] call_usermodehelper_exec_work+0xf1/0x170 [ 639.074198][T13954] process_one_work+0x9cc/0x1b70 [ 639.081454][T13954] worker_thread+0x6c8/0xf10 [ 639.088365][T13954] kthread+0x3c5/0x780 [ 639.094752][T13954] ret_from_fork+0x5d7/0x6f0 [ 639.101659][T13954] ret_from_fork_asm+0x1a/0x30 [ 639.108748][T13954] } [ 639.111397][T13954] ... key at: [] tasklist_lock+0x18/0x40 [ 639.119267][T13954] ... acquired at: [ 639.123216][T13954] _raw_read_lock+0x5f/0x70 [ 639.127873][T13954] send_sigio+0xb8/0x3e0 [ 639.132269][T13954] kill_fasync+0x214/0x510 [ 639.136839][T13954] lease_break_callback+0x23/0x30 [ 639.142018][T13954] __break_lease+0x674/0x1810 [ 639.146841][T13954] vfs_truncate+0x4d3/0x6e0 [ 639.151493][T13954] __x64_sys_truncate+0x172/0x1e0 [ 639.156667][T13954] do_syscall_64+0xcd/0x4c0 [ 639.161319][T13954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.167360][T13954] [ 639.169658][T13954] -> (&f_owner->lock){....}-{3:3} { [ 639.174929][T13954] INITIAL USE at: [ 639.178883][T13954] lock_acquire+0x179/0x350 [ 639.185103][T13954] _raw_write_lock_irq+0x36/0x50 [ 639.191760][T13954] __f_setown+0x61/0x3c0 [ 639.197716][T13954] generic_setlease+0xef2/0x1300 [ 639.204370][T13954] kernel_setlease+0x106/0x140 [ 639.210844][T13954] vfs_setlease+0x258/0x2d0 [ 639.217056][T13954] fcntl_setlease+0x3ed/0x5a0 [ 639.223446][T13954] do_fcntl+0x751/0x15a0 [ 639.229404][T13954] __x64_sys_fcntl+0x163/0x200 [ 639.235883][T13954] do_syscall_64+0xcd/0x4c0 [ 639.242097][T13954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.249701][T13954] INITIAL READ USE at: [ 639.254091][T13954] lock_acquire+0x179/0x350 [ 639.260747][T13954] _raw_read_lock_irqsave+0x74/0x90 [ 639.268099][T13954] send_sigio+0x31/0x3e0 [ 639.274492][T13954] kill_fasync+0x214/0x510 [ 639.281061][T13954] lease_break_callback+0x23/0x30 [ 639.288237][T13954] __break_lease+0x674/0x1810 [ 639.295058][T13954] do_dentry_open+0x91f/0x1530 [ 639.301969][T13954] vfs_open+0x82/0x3f0 [ 639.308189][T13954] dentry_open+0x71/0xd0 [ 639.314580][T13954] do_mq_open+0x4df/0x8c0 [ 639.321056][T13954] __x64_sys_mq_open+0x155/0x1e0 [ 639.328140][T13954] do_syscall_64+0xcd/0x4c0 [ 639.334791][T13954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.342829][T13954] } [ 639.345390][T13954] ... key at: [] __key.1+0x0/0x40 [ 639.352562][T13954] ... acquired at: [ 639.356424][T13954] _raw_read_lock_irqsave+0x74/0x90 [ 639.361787][T13954] send_sigio+0x31/0x3e0 [ 639.366182][T13954] kill_fasync+0x214/0x510 [ 639.370751][T13954] lease_break_callback+0x23/0x30 [ 639.375928][T13954] __break_lease+0x674/0x1810 [ 639.380752][T13954] do_dentry_open+0x91f/0x1530 [ 639.385664][T13954] vfs_open+0x82/0x3f0 [ 639.389882][T13954] dentry_open+0x71/0xd0 [ 639.394275][T13954] do_mq_open+0x4df/0x8c0 [ 639.398752][T13954] __x64_sys_mq_open+0x155/0x1e0 [ 639.403839][T13954] do_syscall_64+0xcd/0x4c0 [ 639.408490][T13954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.414534][T13954] [ 639.416834][T13954] -> (&new->fa_lock){....}-{3:3} { [ 639.421932][T13954] INITIAL USE at: [ 639.425800][T13954] lock_acquire+0x179/0x350 [ 639.431847][T13954] _raw_write_lock_irq+0x36/0x50 [ 639.438329][T13954] fasync_remove_entry+0xb2/0x1e0 [ 639.444896][T13954] fasync_helper+0xaf/0xd0 [ 639.450856][T13954] pipe_fasync+0x117/0x200 [ 639.456814][T13954] __fput+0x968/0xb70 [ 639.462340][T13954] task_work_run+0x150/0x240 [ 639.468471][T13954] exit_to_user_mode_loop+0xeb/0x110 [ 639.475295][T13954] do_syscall_64+0x3f6/0x4c0 [ 639.481425][T13954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.488853][T13954] INITIAL READ USE at: [ 639.493155][T13954] lock_acquire+0x179/0x350 [ 639.499638][T13954] _raw_read_lock_irqsave+0x74/0x90 [ 639.506817][T13954] kill_fasync+0x138/0x510 [ 639.513210][T13954] pipe_release+0x191/0x320 [ 639.519687][T13954] __fput+0x3ff/0xb70 [ 639.525647][T13954] task_work_run+0x150/0x240 [ 639.532208][T13954] exit_to_user_mode_loop+0xeb/0x110 [ 639.539465][T13954] do_syscall_64+0x3f6/0x4c0 [ 639.546030][T13954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.553893][T13954] } [ 639.556366][T13954] ... key at: [] __key.0+0x0/0x40 [ 639.563450][T13954] ... acquired at: [ 639.567227][T13954] lock_acquire+0x179/0x350 [ 639.571883][T13954] _raw_read_lock_irqsave+0x74/0x90 [ 639.577236][T13954] kill_fasync+0x138/0x510 [ 639.581806][T13954] evdev_pass_values+0x619/0x9b0 [ 639.586897][T13954] evdev_events+0x1bb/0x390 [ 639.591552][T13954] input_pass_values+0x74e/0x880 [ 639.596644][T13954] input_handle_event+0xf00/0x14d0 [ 639.601912][T13954] input_inject_event+0x1e8/0x3b0 [ 639.607090][T13954] evdev_write+0x457/0x750 [ 639.611660][T13954] vfs_write+0x29d/0x11d0 [ 639.616153][T13954] ksys_write+0x1f8/0x250 [ 639.620630][T13954] do_syscall_64+0xcd/0x4c0 [ 639.625280][T13954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.631329][T13954] [ 639.633627][T13954] [ 639.633627][T13954] stack backtrace: [ 639.639489][T13954] CPU: 1 UID: 0 PID: 13954 Comm: syz.6.2187 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 639.639509][T13954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 639.639518][T13954] Call Trace: [ 639.639522][T13954] [ 639.639528][T13954] dump_stack_lvl+0x116/0x1f0 [ 639.639542][T13954] check_irq_usage+0x7dc/0x920 [ 639.639562][T13954] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 639.639581][T13954] ? check_path.constprop.0+0x24/0x50 [ 639.639603][T13954] ? __lock_acquire+0x12bc/0x1ce0 [ 639.639622][T13954] __lock_acquire+0x12bc/0x1ce0 [ 639.639645][T13954] lock_acquire+0x179/0x350 [ 639.639665][T13954] ? kill_fasync+0x138/0x510 [ 639.639685][T13954] _raw_read_lock_irqsave+0x74/0x90 [ 639.639705][T13954] ? kill_fasync+0x138/0x510 [ 639.639727][T13954] kill_fasync+0x138/0x510 [ 639.639746][T13954] evdev_pass_values+0x619/0x9b0 [ 639.639766][T13954] evdev_events+0x1bb/0x390 [ 639.639784][T13954] input_pass_values+0x74e/0x880 [ 639.639803][T13954] input_handle_event+0xf00/0x14d0 [ 639.639820][T13954] ? _copy_from_user+0x59/0xd0 [ 639.639838][T13954] input_inject_event+0x1e8/0x3b0 [ 639.639857][T13954] evdev_write+0x457/0x750 [ 639.639876][T13954] ? __pfx_evdev_write+0x10/0x10 [ 639.639894][T13954] ? bpf_lsm_file_permission+0x9/0x10 [ 639.639912][T13954] ? security_file_permission+0x71/0x210 [ 639.639933][T13954] ? rw_verify_area+0xcf/0x6c0 [ 639.639953][T13954] ? __pfx_evdev_write+0x10/0x10 [ 639.639970][T13954] vfs_write+0x29d/0x11d0 [ 639.639985][T13954] ? __pfx_vfs_write+0x10/0x10 [ 639.639997][T13954] ? find_held_lock+0x2b/0x80 [ 639.640012][T13954] ? __fget_files+0x204/0x3c0 [ 639.640028][T13954] ? __fget_files+0x20e/0x3c0 [ 639.640045][T13954] ksys_write+0x1f8/0x250 [ 639.640058][T13954] ? __pfx_ksys_write+0x10/0x10 [ 639.640073][T13954] do_syscall_64+0xcd/0x4c0 [ 639.640088][T13954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.640101][T13954] RIP: 0033:0x7fd5ff98ebe9 [ 639.640113][T13954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 639.640128][T13954] RSP: 002b:00007fd6007bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 639.640141][T13954] RAX: ffffffffffffffda RBX: 00007fd5ffbb5fa0 RCX: 00007fd5ff98ebe9 [ 639.640150][T13954] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000008 [ 639.640159][T13954] RBP: 00007fd5ffa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 639.640167][T13954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 639.640175][T13954] R13: 00007fd5ffbb6038 R14: 00007fd5ffbb5fa0 R15: 00007ffe12d71148 [ 639.640188][T13954] [ 640.221678][ T24] radio-si470x 5-1:0.35: si470x_get_report: usb_control_msg returned -110 [ 640.230623][ T24] radio-si470x 5-1:0.35: si470x_get_scratch: si470x_get_report returned -110 [ 640.241084][ T24] radio-si470x 5-1:0.35: probe with driver radio-si470x failed with error -5 [ 640.276384][ T24] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 640.543141][ T30] audit: type=1400 audit(1755105248.390:1048): avc: denied { call } for pid=13919 comm="syz.4.2177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 640.656582][ T5914] usb 5-1: USB disconnect, device number 59