last executing test programs: 8m52.764053489s ago: executing program 3 (id=447): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) write$uinput_user_dev(r1, &(0x7f0000000840)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x10, 0x6, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xe, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe, 0x0, 0xffffffff, 0x2, 0x0, 0x3], [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x3, 0x0, 0x4, 0x0, 0xffeffffe, 0x0, 0x5], [0x0, 0x0, 0x0, 0x80000000, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5b2bb47c, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r2, 0xffffffffffffffff, 0x0) 8m52.718162178s ago: executing program 3 (id=448): r0 = openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000000)=0x10000) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {0x0, 0x0, 0x4}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r3, 0x0, 0x0, 0x1c) 8m49.06796247s ago: executing program 3 (id=464): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 8m48.689498327s ago: executing program 3 (id=468): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='dyn']) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000094000000060a010400000000000000000100000808000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000000208000440000000220500020007000000340001800c00010062697477697365002400028008000340000000020800014000000014080002400100001208000640000000010900010073797a30"], 0x108}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x18, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}]}, 0x18}}, 0x84) 8m48.330719493s ago: executing program 3 (id=471): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) (fail_nth: 1) 8m47.980009426s ago: executing program 3 (id=478): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x40080, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000280)) ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, &(0x7f00000001c0)) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000002c0)=ANY=[@ANYBLOB]) io_uring_setup(0x649c, &(0x7f0000000140)={0x0, 0x81fa, 0x80, 0x1, 0x35d}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) gettid() timer_create(0x6, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000640)="747ae982cf29472b886c8d9d3c4cd24944b4efc810c65b26197a9eb035d0c5bb1b0a45648b36c228760cf55c0fd763e0eaaf7d6047bc4ed3522d4d494f17ba9cba122503b5c20042d862709d86944fbbd07bd5c3c25dedb6c2afb95a700bce036fad04150a03dd50298fb7cf46c1cf3a2f3c3b91b9187708837da585bbbdaf3b94b803fe35b1afa49016f57410618e082166b72154142dd437f32d94bb4442e6c90da0d3f3ef04257e01e560758d172d2b3b8f50ce38096d48090e5f0971ba60f797f9e530f29cbb9931851224", &(0x7f0000000800)="38524b4fe82856bf850674312db9117277ad217c39b5fb75465c56032956e78225c6791f70c4d5e00783374fe79402e6d6185d34eb1e19ee7582e1778f59db15bcb723a717a8f97074e130337a7e185aa111d9301d2dba8447cb3341cb17453f3febc298831a2284f2e81dc1d0d6c884214366784302e4840ee539602dd89a5adb14aa4ca4b1f219d2036040572aa6091b700d72df458759db10f159a05ce96a8b7c58c8af2fbe84c6e20830a8c405957efb688b8fa453a74405a25485"}}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000600)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0xfffffffffffffe41, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140ac1414280c0001800800014080ffff020000000500010006000000"], 0x6c}}, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x2000, 0x2, 0x3}, 0x18, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000d87d44c644cb2c50fdea3a303c8124aeff088e91135891f9077996d9a4eb0f95b61c68edb15c8a499fa5c9da6a6e0f7526d1673d244fcf4b84a014593b261bdb5eb64fb3b574b4c059b4cea0a77334730d88bbfef4656b94370b7e3b866aa41ad9ccbcbb797cf621e37f7b1871161157936434bcc65e74aed8594b7ddd7209e34caf3ec7c33b0e7c06110a1efe73f327066d3933d75309c10c2d02ee0d1637aad82390eca8e92d000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r9 = socket$inet6(0xa, 0x2, 0x402) setsockopt$inet6_int(r9, 0x29, 0x3a, &(0x7f00000007c0)=0xffffffff, 0x4) ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c9, &(0x7f0000000100)) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000340)={0x2000, r6}, 0x0) landlock_restrict_self(r5, 0x0) 8m47.193497856s ago: executing program 32 (id=478): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x40080, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000280)) ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, &(0x7f00000001c0)) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000002c0)=ANY=[@ANYBLOB]) io_uring_setup(0x649c, &(0x7f0000000140)={0x0, 0x81fa, 0x80, 0x1, 0x35d}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) gettid() timer_create(0x6, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000640)="747ae982cf29472b886c8d9d3c4cd24944b4efc810c65b26197a9eb035d0c5bb1b0a45648b36c228760cf55c0fd763e0eaaf7d6047bc4ed3522d4d494f17ba9cba122503b5c20042d862709d86944fbbd07bd5c3c25dedb6c2afb95a700bce036fad04150a03dd50298fb7cf46c1cf3a2f3c3b91b9187708837da585bbbdaf3b94b803fe35b1afa49016f57410618e082166b72154142dd437f32d94bb4442e6c90da0d3f3ef04257e01e560758d172d2b3b8f50ce38096d48090e5f0971ba60f797f9e530f29cbb9931851224", &(0x7f0000000800)="38524b4fe82856bf850674312db9117277ad217c39b5fb75465c56032956e78225c6791f70c4d5e00783374fe79402e6d6185d34eb1e19ee7582e1778f59db15bcb723a717a8f97074e130337a7e185aa111d9301d2dba8447cb3341cb17453f3febc298831a2284f2e81dc1d0d6c884214366784302e4840ee539602dd89a5adb14aa4ca4b1f219d2036040572aa6091b700d72df458759db10f159a05ce96a8b7c58c8af2fbe84c6e20830a8c405957efb688b8fa453a74405a25485"}}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000600)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0xfffffffffffffe41, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140ac1414280c0001800800014080ffff020000000500010006000000"], 0x6c}}, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x2000, 0x2, 0x3}, 0x18, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000d87d44c644cb2c50fdea3a303c8124aeff088e91135891f9077996d9a4eb0f95b61c68edb15c8a499fa5c9da6a6e0f7526d1673d244fcf4b84a014593b261bdb5eb64fb3b574b4c059b4cea0a77334730d88bbfef4656b94370b7e3b866aa41ad9ccbcbb797cf621e37f7b1871161157936434bcc65e74aed8594b7ddd7209e34caf3ec7c33b0e7c06110a1efe73f327066d3933d75309c10c2d02ee0d1637aad82390eca8e92d000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r9 = socket$inet6(0xa, 0x2, 0x402) setsockopt$inet6_int(r9, 0x29, 0x3a, &(0x7f00000007c0)=0xffffffff, 0x4) ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c9, &(0x7f0000000100)) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000340)={0x2000, r6}, 0x0) landlock_restrict_self(r5, 0x0) 13.64828475s ago: executing program 0 (id=2323): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000300)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000b80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}], 0x1, 0x851) recvmsg(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/5, 0x5}], 0x1}, 0x40) ioperm(0x1, 0x9, 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x5000, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1, 0x2, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f01e, 0x2}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = fcntl$dupfd(r4, 0x406, r5) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000080)) r7 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r9 = dup3(r7, r8, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io(r10, &(0x7f0000000400)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x7, {0x7, 0x0, "5a7da32917"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$MON_IOCG_STATS(r9, 0xc0109207, &(0x7f00000001c0)) 12.681008188s ago: executing program 4 (id=2326): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0x10000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r4 = socket$inet6(0xa, 0x3, 0x5) r5 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) read$fb(r5, 0x0, 0x600) write$6lowpan_enable(r5, &(0x7f00000000c0)='0', 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x490800, 0x0) ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{0x6, 0x3, 0x9, 0x81}, {0x5, 0x5, 0x2, 0x9}, {0x5, 0x8, 0xc0, 0x5}]}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r6}, 0x38) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x541b, 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) close(r8) 11.258454314s ago: executing program 0 (id=2328): syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x1, 0xff, 0xfd, 0x1, 0x80, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x65) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x498400, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000180)=0x401) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, 0x0) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000000300)={0x2020}, 0x2020) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) syz_usb_connect$uac1(0x0, 0xc4, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb2, 0x3, 0x1, 0xf, 0x10, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x1}, [@mixer_unit={0xb, 0x24, 0x4, 0x6, 0x4, "1136a4ea6ed1"}, @processing_unit={0x8, 0x24, 0x7, 0x3, 0x3, 0xff, "e1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x89, 0x3, 0x6, 0x3, "94f0c7"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x8, 0x2, 0x3a, 0x81}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x1, 0x4, 0x8, 0x4, "a76275edef78ea"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x4, 0x3, 0x5, 0x4, "1367"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x9, 0x1, 0x6, 0xae, "f0"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x3, 0x6, 0x6, {0x7, 0x25, 0x1, 0x3, 0x79, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x6, 0x3, 0x1, 0xf2, "d8232d"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0xe, 0x0, {0x7, 0x25, 0x1, 0x1, 0x0, 0x538}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x64, 0xfd, 0x8, 0x40, 0x6}, 0x6b, &(0x7f0000000700)=ANY=[@ANYBLOB="050f6b000314100a32dcf8c4edce2199a4769de58895c7ba9c4b1004e2527f718716e36be20186099f8307248e5fc8ebe0e9190daf25679df7654f648ff8c68cfdd401024567965e1c1dda5f3f2dbe80940710d224d124341c11cb0af13ed2e1d092ec1307100200810100243b1672ea4d0cc003d9861848013a6ec65fba36139e1476095b2f6812a8733b1b4e483f4780f275345c18b89bc6e1c98bc68fb7640576dde77d21721e3c03382ac7dd7ee1123a57706626d8f73002e761b766c6470e70d616e63fe0a42b23c8e089a5437217ecf0853660ce89cea47bdb2775f27ef968612af89ec77b768e5c08000000000000006691a029cd48e86c0c8caebf6926aaab15cafb02de00d1b2b7b655169e61f716205b31e2f1597773284b769f9359967ebdbef4a50d8663f0cb500f7503aa2c6ad92872a88bf845714877432a72b15948d6c68ac301042b7bf4e110f4654e2e5a32b91d107ac153a2b162d8f9025efc921a2715ec738685b2751f716cece6e618c23b285412447fa27dccde5fcb9e8ab43778a1d3e0288202f277af55d53c7ce8debbfca5ec37937fba957fc3970efb25c8170286f36e36079d5100bcc7bdb8e9257c2f9bfe6eea173c15cedf6574caa8577c7601e7386a597983f5ac4515b3dcbc9c6d8dc09303ec80e4c3d754d8cd8422b336965db4b7b733c280b6ba5c6effba00609be8a572d386b0ffaac72059decce3306e78605fdcd17f0baf98bc336d858267f40de7a0426947cd4facb8234447cec52eb333e75b9d5b493d0b1f06ca38f08b92088b2c"], 0x8, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x820}}, {0x46, &(0x7f0000000680)=@string={0x46, 0x3, "ef317a4d0ee8588366f18d87326fc12832cbc3dacb39c2d57bc49e8519a75756692141d8defb6aa78690b0dc9b79d01a2d3cb701786094a10b3f530d95594909eb91046b"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x444}}, {0x1c, &(0x7f0000000300)=@string={0x1c, 0x3, "7e3c2096285d4c94f03526c67c0da5394a8aea3ba35e4b3ab654"}}, {0xe1, &(0x7f0000000340)=@string={0xe1, 0x3, "961c3ab2e68958064a59cfc735b001e095682ad198d1432754b97ef9a48b6b3e2b1fa29dffacf256da2fbd81da5dc809a632ed246cc9b809ab384c91d00f926293b545994abacb5c8da2a8f6f1e636cacfba079f03de4247c438f5e3545672679af140f66edd4493d60562fade5a07ef9dd20e6c9a0a21b357a405b9e5b7bba88c466b7b99df4c307ee4ddbc773ad3c6ad8012c11fe7b712dad3c9533affba961d59d73a248f5af64bb7ef9d9b452aec6293a3bfdf2a94ff1a714e1ca5ed1ae488ac3e0ded2cdbe511bf3b6f7cdb978232aa0a6e95035351e45bf90299d958"}}, {0xf9, &(0x7f0000000440)=@string={0xf9, 0x3, "434434b66d248696b7f435f70f5a3d0c298ddbd0cee5a2ba34891a7c03b2e6eeee55ae160d51711dfd7c9ac7d7b4c95dabdb82d1de0eb9b26d7f3d0f5c703503f4c62fa0ce8ca7eff82c7bead688dc13be01b44f12592bf826b6de6e11dba6262d7b55010f683f01f84f8b56e4891dafd2c09324124a05a76f869170cd5e69151e90120cc814cb4aaaa713c0028d231cee32cb13b46faad997c4e39cb6576f5dbce8d3c01ccf5ae80c652842be70b14e7d1fe8ebb486096c1c3f26b4afc78ec1e78684af772937584c018cb86b1f5c1da2bbed761325171fcb59c5bef47266c790035fb110e57c405a77cfeb7675bf9727f8cc91c1d6e2"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x83e}}, {0x1e, &(0x7f0000000640)=ANY=[@ANYBLOB="1e03653bacaf6f2daf420a18d051d3b617512c8c3ad415141ee964f72042a649a940404e"]}]}) 10.04269742s ago: executing program 5 (id=2329): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) pread64(r1, 0x0, 0x0, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x18) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(0xffffffffffffffff, &(0x7f00000002c0)='2\x00', 0x2) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x6, 0xc, 0x0, 0x40000}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x48044}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = dup2(r4, r4) sendmmsg$unix(r5, &(0x7f0000008380), 0x400000000000174, 0x4008890) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 9.640540071s ago: executing program 5 (id=2330): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000300)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000b80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}], 0x1, 0x851) recvmsg(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/5, 0x5}], 0x1}, 0x40) ioperm(0x1, 0x9, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x5000, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1, 0x2, 0x0, 0x2}}) syz_usbip_server_init(0x4) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = fcntl$dupfd(r3, 0x406, r4) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)) r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r7 = dup3(r6, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000400)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x7, {0x7, 0x0, "5a7da32917"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r8, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000480)={0x0, 0x11, 0x3, "b36eab"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$MON_IOCG_STATS(r7, 0xc0109207, &(0x7f00000001c0)) 9.131024699s ago: executing program 1 (id=2333): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500"/135], 0xfc}}, 0x0) 9.036679697s ago: executing program 0 (id=2335): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$l2tp(0x2, 0x2, 0x73) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffe, 0x0, 0x10000, 0x0, 0x4002004c5, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r3, 0x400455c8, 0x400000000105) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x5) socket$xdp(0x2c, 0x3, 0x0) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000240)) syz_io_uring_setup(0x239, &(0x7f0000000680)={0x0, 0x405e5, 0x10100, 0x1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x31a0}}) 8.981710938s ago: executing program 4 (id=2336): openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_clone(0x2080, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x1, r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="000000004ecf0000000014001280090001d400040000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)=ANY=[@ANYRESHEX, @ANYRES32=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRESDEC=r5, @ANYBLOB="0c009900f400000017000000080026007f1700000800270001"], 0x40}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000002f40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002f00)={&(0x7f0000003400)={0x1c, r6, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10) syz_open_dev$media(0x0, 0x0, 0x0) r8 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000200)}) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') read$FUSE(r9, &(0x7f00000001c0)={0x2020}, 0x2020) 7.49228105s ago: executing program 2 (id=2338): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x7cb7562f2d67) 7.401612271s ago: executing program 0 (id=2339): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc03", @ANYRES32, @ANYBLOB="71e79fd800000000140012800c"], 0x3c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="ec000000210001002dbd7000fedbdf25fe880000000000000000000000000101ac1414bb0000000000000000000000004e240002000700010a0080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="af6b6e00010000009c0011001901010000000000000000000000000020010000000000000000000000000001ac14143e0000000000c8b100"], 0xec}}, 0x20000000) 7.3510818s ago: executing program 2 (id=2340): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000", @ANYRES16, @ANYBLOB="0100000000000000000001000000080001"], 0xe0}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002b000b00000000000000040008"], 0x28}}, 0x8000) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) migrate_pages(r4, 0x7, &(0x7f0000000040)=0xfff, &(0x7f0000000080)=0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@ipv4_delroute={0x68, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_IP_PROTO={0x5, 0x1b, 0x1}, @RTA_MULTIPATH={0xc, 0x9, {0x82, 0x9, 0x7, r5}}, @RTA_GATEWAY={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @RTA_SPORT={0x6, 0x1c, 0x4e24}, @RTA_PRIORITY={0x8, 0x6, 0x2}, @RTA_MARK={0x8, 0x10, 0xd49}, @RTA_NH_ID={0x8}, @RTA_NH_ID={0x8, 0x1e, 0x8}, @RTA_GATEWAY={0x8, 0x5, @rand_addr=0x64010102}]}, 0x68}}, 0x0) 7.102848339s ago: executing program 4 (id=2341): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) pread64(r1, 0x0, 0x0, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x18) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(0xffffffffffffffff, &(0x7f00000002c0)='2\x00', 0x2) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x6, 0xc, 0x0, 0x40000}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x48044}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = dup2(r4, r4) sendmmsg$unix(r5, &(0x7f0000008380), 0x400000000000174, 0x4008890) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 6.43662903s ago: executing program 4 (id=2342): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = socket$inet6(0xa, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0xffe7) syz_fuse_handle_req(r1, &(0x7f0000009300)="23db5037805f177d136115e6a1a5903469af39c1fb9cb38215fe64cff9f2f0444a57e22b0cc5cb4f74c9792365400d9e1c68539ea5eff0a5ed0864814d39251bee8dfea69aa052d900bc0c792e1c9752b7d3a3222f6a1ad3e44c1f65617b128aea51911861ca36ba7c96b96b2fba0fdaa49ffb2612f3e81fe565327dd9965a60046442c9dcd0d552c6a00388be3b438a08883c7349761531880294ad9887db97d8c2f74921c57910cf1f5cc528e17bd5c3746b6202f26d621535aac5f7872c2cb3295e42524b5acb249b2d1ac1b53a4e31271decfca3fad2e2f740768adf00875c18cb7d115150f83ceb73f77a1f61f1666c2bb9f6bd9f0fb55b3a619446e32bae2a1d99aa49e5f3822e048f8be44b707f2db10d7916ec9a10a695d573d871cf24959c3d15e61344a68309d186956537c6ea8532fc2e1c7649f8409d8dcde4c8ee1530470ac9c870f9f1837574e444ba6addf5ddb2dec67c0e76df79f265b403818dddb4efc27c90985ed69a48b12056e548f9c99edf80d2b195d26acb1127661727a0600257f4b2546513d03930a0638a71bd3223e51fbb75c832ef737907f2f4d3f0505f431ea02783c798b5c4579c99961fb73dc623a0d99c1b306435464d413b537d42c6444851b36482597140b22fbc0ebc7e795b2f96739bf139f5823bc869ede547da4f394fa1b1787836095e1013264042e53d5006ea059d0488cb2f5ccd44b30d25ea53c2dda71d112d7d441dbfc9f8462c99c098b1958c80b237d83c32f2759c9a9c081d7d7666a477cfda59354309b09f2a8b9f6c3077b0df1e8d0c71ac07232de4f437107cb0eb9b47b2267efe31938a337cf11cadad72ced56895bb14763cca5bdadd245d801e829a1eb3bb4ed851a345918efd2dcf8d38f66badc773068e6a2ef59b2bb838abd8b043cf6ac54550f3fde1bbb9e761095e4b8ef1891757d376be1f778142610c0acbbfc697f51fbb7a1602ed46e82813c74f41ee2bae818174809f3692084bea7310ebec3d6166702ae62aad84313e19b4d145167185ea8d53cb21d099fb592d7d7f8bc305dd375b5c0cd73be44f49ff53cee220085d4706bbf50c6f63b02e7e805e8fa4c73046a57a8700886da29ea53e5a316e7b011c44a0f7be5cc5cb5641ba0069ff591eee18966c7f005ef40046a5fe2bf325b2545b009867761264aa9611d184fa372ba3c5c33d9a50717210f7cec7f6dc4418a87a797eb6aaf6ab3892bd3f559547c88d8c29646c8173fad1588f52beb34ff863be65e7ec1598cfb465f270bd5532fa7035aae077eedbc846058fa19f58ffb1cf0f1863f6d33f2e5c454d18b66be766ca369af2cc9656fa34c6c10e4d4da44ce5e2370aaf60c4e130da331d3489e8f44c600246323409fdd35d11da27128c9d64be65dd3a90c1546a6eb9185cb6d3a4a9cfad0e41ea03896fd2346f745eb3563d7a79fd345b037c040e56f0677840bf9b0d295bcfa98b931464c5ce9fcaf745720deac2d8b4edeffc0fe6f089ed7c3880959fcf8e31f7b7054bc4f5c9d3ed3f66c968d0bc20b2d66c374f030f3f1965f43a98519e527caf693362412d523eeb38c8b016ff77f78f833d7513e4b5a53d5ed5143916673f822ceac9967b8788bc6428283181eaf8d99e48286aacf4f658a903e9f08659450f7f9483807c2e013a1d9d199f18886a8cb4e14d41c71e5731455a4394551281eca12a1bb6ae717f5da2949175d0f1f3d718b761dfc1099c7d9d8928c899ac8e936e69d19fcbfcfdee83b68ef8e15eed41a8ac0d54aa92d7d2ee58bb4799f378225ec9ba4709e5ce2b77208ecc85c22c64967a9ef3360c54d311b8917ceb7b432c90cc5e98de9327c1400f8ec89261b1d77d8874b0bbdd2c5eb59df415705de52b08b0e12c07fb7367c6d461c19f282d51e482cb4fb9ceb0249ac2d6400ca170fbd6c0063224179c616bb030a5c10102aa2eea92f1e6f5828590b250b09e6d1a9535c298a68160b7c281fecdd295dc3396c4e6eb3395d5a677d5fa95a732dfdef81f4346545dd1a74bb3aa9b516699bdf0a59165077ab459a5ffe0dbb3ef8afa7a8382a8441e0c36ffabbed8f93f4bbeb97e5f6a704bf63a0de9ccf8fef643ebc530a80920931002003b027014de317c42f861d98ef4fef66d232d9706e6bd263347384dadadaa43a7e106bbb21bd822d468ace171b3f04b996112135b63dcbd612b5888ec40da583ab549c340ddaf5d7406c3e99322c68874214356c1fd9b5f84348e629cc3487a901d1b7a2fa531b1509ac1c93de3da9f1c3773e3a2aba2b29d2419f240ae6d24ed9f14bf0b9b0f1e740a2db06dab64d6386f950bff4e4c94160ef4b832bbde3af4937b7528658b5c16a51cb22193fe99385721ce5b048d9338e289dcb40683140c413eca52c8e4b64b306f47569477379c864cfb3aa3e349262407d3935ab9a0916eb0f6db2be71a7eb8f9968dfac44995d5bff8ef617fceeaa448f5e5f8d4b39e3512fe7ae9ee1d8a0d5912b6148969ab0325f3f76e2340fbd67ce156bdf638140b3ccdb08e5049db15957915cb05db8901249b10c59cc5c3ff836290e3334eee2df387e44c57b4d6198c3749f5dc57f6c3de115ced6b43cbddd762b58f1fb40b2baf3b381febdc073142e30d2e9a1a69e8d86314221e540f195509d223b206173dc5406865d8064817c30c284c034035a63190ab86df3bae4168c58e01d2251748fd5d9d610024129e83a5730fe83cf0918790e6854ab765c78649b91c06655f0cb9e26d8432df78bbadd99583b6a8afcf177ed6f339e08c0b36a16c6d31d8a24cb6f2bc3ba58d7711b6f8b988dc3e3144be619548457d4f40509f17eeb186cb93a2928ecb951593d1907c8bbb9f4c8999caba3059c8e73dce54ad6f87bcd51d559f7759902b14e68d3b845c0b179b38f4e6f0bd3a89cbcd5ebed9972102048647da1eda5c8456442369f4ae871d4037ba26f27d27371ce57e23adca5af8dc93f934f2ef8d69ad3b2db66657b3868dd839c2b522f5461f24407ef091b77242fc70a48b7eec45f3bcbcfbc6bdc36e4b67295020a345233a32a0a0af4d03a53ef67e69716d5ae35342722afbe7558946475a9ebf5b39c18558a0011f68bc8a78590b0cb63618379a512790c42d94bb239dd3ef5b8d1036cf0391aded8802a7a447c38f231ae611aeeab9bba44cd14369473758b64108d0bc9b6bc9e9b497c2d1d2acbae7c620a55c226cf371331688eaddec61fe961c5fcef71dad45820ed0ac8dc7641d82150f1318ac15aa41e7be585b6a50da1b3cd95239ee61cfde15aba80ae8ebc21ba4540883c6f44cd35b6b97da4640c97f5a2b6efa8d184fec823abc754ab8a0db6c45c2293e90d9c154c4a3e0b9ec2b6113ce6583b80f0d234dec9a9815067244733e2134b9ba93bb9692fb44200bb5501bb109f2401e8baaf0115d795bb0346dfafaf953bed8e9a52a5b9b02d490c55fd89daf311ad5e08b070a9571f696d6df4715c8b69b840e4e03d6f361326e20d9546c47b3a63163e7df9bd260621358c166177ee7c69ed63a8c43dd4a78543aa9f922c0ef527f4aa61ff65bb14595f518412ce25a1e103df89cd4b363593da16c11d80a23a9b5ad8e3a7be8f697cecf82c8fbd889a4f743c839b67f7ba5453b10bbf59b1e4f4e821872c061a4125c0c15c1ca5164efe61a58bb54dcedc849800a6021a448d4660c3b85e2362b7cd8ce95156fbf408a09a30a8ccfc3554004e9f9a35382907eec00617e2ae1f8803146bc8c28b4f3bf3c6b183ae9248e7f05c4adce3e0b7ff29252b5be9b19431e3fe612d471f52c5c34cc12c83049189f4d2e5ca516df78766ba3449d07ef9436c68052c986d9dde8802c931194e2ce34acb8cc26663a09348b15c6c145d26306bded0d1f482803ae6dee26562b03fcb183b69ee4a0491e8776ecdadfca395cb4eac2948d4d64321a4e669f2f663eb54f05f12ed9c685835c3e79f982152dbe701073b9a4ab2932b46ee2424a5e18bbe5f25ce0b898ff6937927f4670defe430ac86021226ae055daf39b535cdc0899fcc99d15e67d66bd2dd89bb21b8d2689a8af10a1b0bd44103c469922c36fc0228d7b6febf5e366dceecf8bb1db385c8ab95d86ff09b76c2fa6282de81fd6864c495a4c8295df61a2548e1b81c3e3f30d7a41216801d6c2d1743f66ae2055756083e8bf403d436b8244ac214f4d84a693d13f299ba267401d094f2df70840e8a980622794212f0992ecf5a47980ab2cf7d5a6f12b0a489af3c3c847ac59bc89f36fbb0e08bf283b68213a17de38b3a45eade6f0b198def408f7711c16367bcc0ded794a9a323c7e7f07fad96ea9c4d7344c26e43844a27c21076b8d7cd07677602d91eac825eb5fd0631755c2dd1dbf7bce3eb3c3f7377fc6080ecd0b894e29769845725943e25932d4249abb4ab78d4e2ff2e2df42c8d884cd6bd13886cef080c6491c217abae0eec6e9d4d49eab6657f15cfd38e6cd6d0bd33198c4685ab302d0f46e42f4a5d5bb7d2840a0a8817b98a856700d4de74351896fe7d7d5a0d1bc57fb4c828aa51f9637807aeb905780f239527ed4affd83f68be8b7ad1e10d9e797ba39cdee24f7be0a0ab0ac22ea3968dac61eb4bdd522c9ce570edf63a439abfd9954bf6a16c88d86157d05477200a83255cde279b454979cee4de00e81cb44acdc4295c877566a749ab5b91d250f03d46ecc14210c196700338eea028c930ce104f20a9e7fabb0ad1d314ec1a2d97d1d1b9e09114dee0e3e513eacede01971ff85dc98634156073df4e8acd6c3aadd615adaffa7a81573813bc4ca21886ddd532021bba5c84b34c34665534db48d61903a03c1cca4ed955ca92c1e33b7664b494e3db6d1e637a49e537808a2669ebeca301691acd4fab0af197b9c7db01b7862466b568ab3a4712a25210264fb297a6b679dfc3fceb65bddd1a23d5b507a0d6da83d73b716d971c5179a92e57b9b93451eb943845a549de737f2d082a83682c32649b4941e787758ead9d2c256b2b4ed1e0255952ce83cccecc39e5bbdd38490f1960b26e5379943be3d9a64b5149c84d577e5fd099568baa292befa06ce9065fb03ed432a9e055ca4ad0e952f8368b3d230fd5239726f79f4c98a0b4a9648382b245d324cb61049562f765f923fc657ef36747658494d78590a1e27a2d09856acf50c3b26271c6d5aa96e8ff9bdb9043859665e21ea53a050c335cac414bbf27b0328ac2c7450acb26b093bf232358afd1135ee50ac3fb26b5f0256ccdd37033c8a59740607cfd549d4c6540afe4a6b4425ae1f633872dcfb5da8d0547cf0c4888817b71fbc7c45b2a641e9c1a76b6a6be124402422ada35edc02ed997d6b87b361aee95a16d2c528d89a52fe40dfd83434969bd86f02e63fc1ae72941209af39a08cfbb4c320bc47d853f5dbaf0cd60ec54608aadbc382fa6b5cab3e9cac57bea26609f4c79f6a6b4eb4a9336fa95783b0c0c366f36d5d6b8310b3cfdb800207919a131bc7f984f7fa11fd0bf2c89e060e9d1286e453fe97363ef72bd6eba29a85ffeccdc3bee72e12284333a5a40622c01619558d2750fc45abfa22059ebdf743f8e50ad29770d19f84d8a34232d6918514769b3bb2a1ea5e59e9556332ba669675764458e9349a1835c501a93e91dd3b31018979880a9913f54ec1e8526b8cffcb776b97fbb9424faa5c5eb60d2ac74955bba4b5182571d0d9f84f0df1baa722b20a78c9c0011c667f688b58489c9e450d83e40ac5eb41c5564b6d76a226448abe4a3f499927074125aa9c0e7e704c36df5bb110a0f15f8433a470e81db414827d5ce21ca1da1c8d51d746d1e1ca110127c15e92afd75d3cd05ce0b632cfa03745de3cdd4b57373d46676583c89f045c26c6fc5793e5489555ced08f83ba351135834a2028113c319af30cc85bc01a7f8208822d7d607aed0d2e12c80aa009100441b75beaccfe0adbda7e8bb870edf4963158794c8c3a5baacf6eec7b5efaefb7602dab8409d161beeb281cba21f1da0ccdc092d0433fb940d79699ffeb87ea775829a6e7e3b308a2ee0b7aec8ac5f35eed61be374c7c77196f7119a8882deff68230f461cb917b0ccb2b8597efcbdd1003b7b77b2c601ebd4b45c35b8426f7b9138ab3df0ec00819604ab8e1e64cf2aa2282b1269585af127a268cd207f964edff172e555398a16df44bdc52889538c3a27f8fbfffb61f7aeb55b259952bbfea81d73058d8b0f78ece9dc08e660437d21d4e3ec38b19e5afda7a6e33023f9158db8a1c14dabd9b8b307ddc66927f7b19df5e0da2237d98ddd890b81f1963808977d02198e8ae2e97419dbb1f8e51cad36a3424b955500fbdaab6ff8dbf028708b1f951fe43864b59b6c2368b816c98023d4480a91b3f1059e9c214bf55a7f8c7da907f79ff5568fd787d3aa022ab9d03cde551f7e3295f02c4f3aa37e4cebdd968c0f82f09eb004fbdb1a4ef3a0d426691bde3964c29ea65622f5d3ffd854053545ba1ec164495e4bef4845439c058f9438d13be7922b656db499c246ee6176a15b97e6a68e42f0c703033b699504e1f92b43054c7237199bd013d96faab47433b6b3f91dc66368706439d4ef7da3942ce8b9c1c9a9d0643fc4540e7d3f1c3821267e866cacd3e904be9f9df80381eec09eb2b0d745ff03ffb199b917a14fdd8fbfbffe8bfb0cf7023aa7183301a8a41e7097ff9f5247f8b78f7d08bbfc596a81047807cf0929677222e7e9e921b294e04088c3746d8dc19294645f1c093a21b4c5e6d92e54dd90465b11dd5d9d42af849070edff4ec63970f4088daaa33afdebb28d01df5ee043a8150ab1b25d864ef31e20c84696596cfbea92d02ea29c4a3933c41ec68aee7d68d7eea7f30d8920e14e62be42bcf856d7a58f46fdb2438b023e974f77281c5a462553627e9614504cbd3f1cae6e0fd9f7e89d9bce48946d0508616fbe542303dc542982c61d7bb4afbf3e76bf1fb2381cdc99f2175ef944dcd826aabdca2b7678db5262733c69ce504c38e7deb7adfb9b6d8bb00d8e4251e0438417ea615cde58bd76c2427b3d7a0578bbbff9fde2abbc5d60307aff0050b18176158aaedb34e283886378ff798b4f74e0a0c95d64271f1916280dd247304d9201c67f5e2640d9706add8703cac81795a0190107e2bb2941ed13738595da1c86ba0f68e2283a435cb5f162c74071a13dfe2266d05abaef080dd6b1dade115e883e04f0bb4be4d91f535ae6f822b02e814e65d2b7807d199a23d3f26209f6c9f93602a3a93ccfdebb5f8161b7928059674e15820d1848a980c8d1af5a73aadc5c402fbb6e730ba51227913ca27f0d78d331d6325d0a7926c238296b2a22b10a69cdffeb087dfe175511ed8e2cde8d7dae140e4ce92f892b129d9940e4a30b19f822ef7611b8750eaea8e55502604b7d2358c09a217af8be6c86d67cf6ff6130c971c9765d56631fe6224fbe1e833d497b534fbf6b030af93691f59295279aa1bdfb5d5d9d4668d5aea70e2b8fc117df0042e91c7e6225f27329727ed6e14a87c7943c040dfee4e5c06a20251c39a45ab4865951b0daefb9c05571fdcc21d1761945bd2b8047ccedd6f1e708646fbe61e75bb2728e8cee893d7e6f642119e786155a6cbab057d6d83b77716145119e974ad7355179d2adc3d748fa249cb58e32e6791d646240c05da4427b2f359976c8fd1486c604cb7ee647e24633d8fca8314cf1f85110ca6351156a2b26e44b040f7d2810acd36f45a3969c1fafd1a7e0bc14fd9b26593375be8e750c3f6534ffb85904d15d75fba05dac4a673de97f7543ee931724cd35474cd7ff5cf3e8abaf206f3030e92895633fa9d8499ea763601560260109dad18bd64b990531fc5377e6eaa5da050b98e1c6515ea48c7de1a15b63283d4a694cbad379356bfdac50e6c343879e29f6b9ab425600d51f257ceb35d0ca00f83cf5bd734223de716747614666ba1f1a8fa756e5f3ff0fc94fa4bd4073bddb0098cf565ee40af5732ee9218d262e5b64ad6b8118c54eeaf7072f2e15514a401779b425fa89d8abb1750e56cc3108dffdcf2d3fd86b8af4560d56f7ff0702154211f9949e3992d93e66892b297fa2d4bfe18de3fd74e96c9d30eb14fd458fdbc9e9a34e00f3280dd732520147fa2a8fa83e91dd0687501466a300015bf888c03fc08190c2753d7719acf6f84885c4c5642f466c1984f15a7716a9b608ee5f1b395726bcc8519766667d24d11e396e62ea39640c9e73e4e9e9e5076d7019ca1bebbd7097807f46b3b6fcb96ed4b433b25ec551fb176a5fa252ed1d81b0350cfdfb8069c9916495bef3a262b6668910896c0b37eee40547c663a901e92f41b417ac50e88d058d021a8f9a5783bd936cca4962bec1c9886689cc547970f9215232596392515182e563f720bb79d29baaabf0e2697de6500bc677e346847011ee3450358c0b16ca528368b5cbb8df5ab974a3cef072d20c9906fa585e0f3083ec6d8507b8561f64e65aa1aecf825fc47ad1459c87771549fd5c9a9cc094e7b1179ee1e90eff7158f28f59f029d90e708f4ec50b4f67d8b4bb7140065528354a7e25d63e92977183a0284ec22aa923210f0bfea89cca53547137381e5de0f60bc484bc2daf129b0380244f1ed4bfb674eb2791e76dce33cae684ad36620d5d67cb587f840caed316b7439b0e8c3de0e065e62680f3997369be3466670278168c9a1a644d870e3a8d0a79b2b720e8c3c51bb9133532beee64319e98714bb2e6d5c0b723962d923b0ef454361d4b3cb470bf8c39031ed4a75267f499741be15aacac92d8e6afdcb01a2e7d2dbf549ceb2a2108c4079c620f05ca1bd31d631c2c8d35ca0d73155f56ed020c25e389db356edf510ae088d11b5e4fed51d0dce4d3aa04924b09c28200ede5bec1a8f38cc5f081055e0f28d75afc4d588ca0e828d00085d150beafdda17b8df9e7d9218ea7d81f2e076412901c5ae04d6929d717fea2fcc8e5a1e69dbd7b5258799a2fa5eb108b6cc35dfab599fb27e6d75f1030b83f452af8137830337141f031942eba83123d3f87b5f01623d4613e5a44b4952c300baf3d4d3dbbfb0ad024a19b3810a174ef8453d85a25822f66e45eba2490f29de1077683ccc32e3517f88b51e010672a982f7c8591450c9ab1573143aefb61c17ebb0c92dcb0494d116b970c2a827a6b3608ae10d583d1f7d092263fa873de9f31cd59bc9491ff012059b63a9120af89477f2ccc34eee7bd66de60af64730c879128b49d31da6400c2471e0d5abf707e560574b477b8e20ca45d92182d639eb434e14aea1a3f91ad8fb60e4859b77389753990513181ea3a82884235e8520294359435cfba220502b591fc28ac36ec697442657d290bd7aad7fce53a3f1766f2bf7d55c24d7c0e9c7a71d6f1282ea1478e0a36378b50e4fee281f686bc53f50138036e2a5d6199d40caff084fde7b63b3c0a47da0791107c3218330f7c2e2c7609aba202fae5290243b6033379eb15edc572eee452008e04c9b53efd5f3d88327317b38934745bc3de4c55bd818febc7a7953bf03c4029f77177c2a974310f0485aa46252f1000dc71934947287c38ea5854f29c7b82f630afb8caf1fd880670307b155a6e7feddc019cfbbbdc18f3bc03da3bd371d93ccbf56bcb39eea55c2d113efc148127c30089d21ce6a5088dbfbcf8f8d75c19456bc962c371548634a95382acb5a0886efc46a87bdc111dc0d1e54084cea0d58054f00762c91d7fe0f0fbcf4c280f29f9cd5999a5e8c6f507f8080d7c7ea9a8685be50722cf1a082f3728dec8d6152cdc72f8da6b1805643c042f4f6780ba79cc8a2165d9d7acec8ab2f421bc3e77b51c62c4bbb262b5674ea7d2dcf9acb894d050e91b052364322a5b08bd9667249571c004fb495da7e24fc5620adda3af6848ccf238911a52bdbff766e4e279ac274afa2c2302faba25b5fe98d972a04aa13f77c0c05d7dd82b0a19f1ded8cf5f99c80e392b0aab1264a29e9fbcf0b69f6b0a9f2332e09ab74dea7277106d0883bb264e279c67e5bc69009225bf4fd1a8532f9392a011b55a73a7cf8d16a59d695b2a65b57fad64a2041f8c28804ee1a48845c5dab757d04f1d95520aa9ddb69904d6529c0e14bd789dfe37067073b3e0e136ae2aebb1c34c55b94ce942f786be4b45f801f35f7c768d91a460b92ffa57ff675f0b4b00437a07f871a8650f21b2bf7c722c1d9e860e8955fef5699ee53a5f6fe46fb9e5e17a1c69fe2538af4718b7215ad2c00c3d420589a8653ee511b809945451fb8205b19ce377c8d0253b05493c557cf2bd8ef208e8fc01beceea1acca38d025f328f28d69bcfaa3adc6d9573a3832dc3f3c758fe08cf9cd0c32acfddae81b3682869e8aa9725b64336252aeb2ee8eb78f0721aa3158217a3009948adb297c5ea45ec26cb6d963c7be47ee1b93fa136ebe73a21936df0148fa311206f8bca2e80719aeca8745ff74ddaad5182644762c66333f942d9a93c467d5f9fd5d0dbbe57480362d4bb0f760294f4eba3e1b08047d256dbda157635d21a43aff3a71f6ad574b402bb36e5270d7ed082c6fbae07771721513ae9ddb22d23b00733046c898ee6ac05ef8a51ce41919e1f241cb98e0592ace68214620ba1a748ef81131661f58f1635713ca2873e150a3e848c8d2ebd039769fda112b73050efa4d1c35dbb46ca5a7b7ccbed1dcded36af272f6838b4c1e7e6778e7e9ca3d794f275d49c9e32e768097349118d2337e7c031ada38d0cc5c04c286ff93083f6d58d73a821118c93432fda9a8c76fa2cbcc093a7decac8e4f001ecc9f67faf1c2f102120f0618469cf653bbd5fcefd4ef2bae86dc4f5393b840f9f47140cf7f46a186c21878a43612a71d3b540b9994f010ab623f878264cf46c7366d0bec5d43d481b47846091fd3cda73a9a28ceb7f839eca695c9f084a16c812475f6575ef2368c88cc6655f47663ef69ce4779fe3ccc4dd85a07a9e4c6f39f42690d231f5727f45c247a53fd8df029fcefda4f328658435892519c17205a3c715ad6bb7387d09a5e387c83f008daf626f5977c66203af1143ef7b59ccd8e3c17bb156bca317861f0b9f222ea63c044075a3a74beaf05c23d0a75caa60397d831bbe507234fff154960faf0f02776d3f9038c955bf0c1ec9c92523cf0b855c18d6ac3b35d437796420ba3dfd581dc6adac64315c1cb1a2c3a45ec4655bb2bd6e0b4a3082281ed0697a213d1d93142e96b4fd57431d2f4547451d008ab58bcd9765ccf3ca3297becd5de9e2be0263cfca09935c9334b5e687bc7e7057dc2ed03873be22200c9fe32a9497dd00a336cf4c723ead302340b5cd1fef8cd88330a9089fc93af4ef739295b94407b291bf33f4f39c936736e1166106428f8796a4b92805f4dfcf46d8692b54e40a9e8584c0eaac4caada87bb33f553eafeef5051b889402176ab766936a38ddd7e5205d2c87e133a02e84ab24ba2d889a4c4db8cbe18b271455e84da716f4a32acdbc0a5aaba25a2ec757c73847dd1c4ccb2967c651e5257692a4553dde227846bfe2977021805f46a287c835ea8dc5", 0x2000, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x6, {0x0, 0x39}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x10004004, 0x0, 0xfffe, 0x0, 0x2, 0x0, 0x0, 0x100}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x800}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0xc0000000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40000, 0xa0) umount2(&(0x7f0000000000)='./file0\x00', 0x3) syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) 6.245493348s ago: executing program 1 (id=2343): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x121402, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, 0x0) 6.119918963s ago: executing program 1 (id=2344): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) socket(0x10, 0x3, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe825, 0x3400, 0x1, 0x3c3}, 0x0, &(0x7f00000001c0)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) gettid() openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) syz_io_uring_submit(0x0, r3, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r1, 0x25, 0x8, @void}, 0x10) 5.905707047s ago: executing program 5 (id=2345): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x121402, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, 0x0) (fail_nth: 1) 5.807188144s ago: executing program 4 (id=2346): syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x1, 0xff, 0xfd, 0x1, 0x80, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x65) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x498400, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000180)=0x401) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000000300)={0x2020}, 0x2020) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) syz_usb_connect$uac1(0x0, 0xc4, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb2, 0x3, 0x1, 0xf, 0x10, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x1}, [@mixer_unit={0xb, 0x24, 0x4, 0x6, 0x4, "1136a4ea6ed1"}, @processing_unit={0x8, 0x24, 0x7, 0x3, 0x3, 0xff, "e1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x89, 0x3, 0x6, 0x3, "94f0c7"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x8, 0x2, 0x3a, 0x81}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x1, 0x4, 0x8, 0x4, "a76275edef78ea"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x4, 0x3, 0x5, 0x4, "1367"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x9, 0x1, 0x6, 0xae, "f0"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x3, 0x6, 0x6, {0x7, 0x25, 0x1, 0x3, 0x79, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x6, 0x3, 0x1, 0xf2, "d8232d"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0xe, 0x0, {0x7, 0x25, 0x1, 0x1, 0x0, 0x538}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x64, 0xfd, 0x8, 0x40, 0x6}, 0x6b, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x8, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x820}}, {0x46, &(0x7f0000000680)=@string={0x46, 0x3, "ef317a4d0ee8588366f18d87326fc12832cbc3dacb39c2d57bc49e8519a75756692141d8defb6aa78690b0dc9b79d01a2d3cb701786094a10b3f530d95594909eb91046b"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x444}}, {0x1c, &(0x7f0000000300)=@string={0x1c, 0x3, "7e3c2096285d4c94f03526c67c0da5394a8aea3ba35e4b3ab654"}}, {0xe1, &(0x7f0000000340)=@string={0xe1, 0x3, "961c3ab2e68958064a59cfc735b001e095682ad198d1432754b97ef9a48b6b3e2b1fa29dffacf256da2fbd81da5dc809a632ed246cc9b809ab384c91d00f926293b545994abacb5c8da2a8f6f1e636cacfba079f03de4247c438f5e3545672679af140f66edd4493d60562fade5a07ef9dd20e6c9a0a21b357a405b9e5b7bba88c466b7b99df4c307ee4ddbc773ad3c6ad8012c11fe7b712dad3c9533affba961d59d73a248f5af64bb7ef9d9b452aec6293a3bfdf2a94ff1a714e1ca5ed1ae488ac3e0ded2cdbe511bf3b6f7cdb978232aa0a6e95035351e45bf90299d958"}}, {0xf9, &(0x7f0000000440)=@string={0xf9, 0x3, "434434b66d248696b7f435f70f5a3d0c298ddbd0cee5a2ba34891a7c03b2e6eeee55ae160d51711dfd7c9ac7d7b4c95dabdb82d1de0eb9b26d7f3d0f5c703503f4c62fa0ce8ca7eff82c7bead688dc13be01b44f12592bf826b6de6e11dba6262d7b55010f683f01f84f8b56e4891dafd2c09324124a05a76f869170cd5e69151e90120cc814cb4aaaa713c0028d231cee32cb13b46faad997c4e39cb6576f5dbce8d3c01ccf5ae80c652842be70b14e7d1fe8ebb486096c1c3f26b4afc78ec1e78684af772937584c018cb86b1f5c1da2bbed761325171fcb59c5bef47266c790035fb110e57c405a77cfeb7675bf9727f8cc91c1d6e2"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x83e}}, {0x1e, &(0x7f0000000640)=ANY=[@ANYBLOB="1e03653bacaf6f2daf420a18d051d3b617512c8c3ad415141ee964f72042a649a940404e"]}]}) 5.759601327s ago: executing program 1 (id=2347): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x100}], 0x1, 0x20, 0x0) 5.431867667s ago: executing program 5 (id=2348): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x880) connect$inet(r3, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r6 = dup2(r5, r5) write$tun(r6, &(0x7f0000000180)=ANY=[@ANYRES64, @ANYRESHEX=r0], 0x46) recvmmsg(r4, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000003c0)=""/116, 0x74}, {&(0x7f0000000580)=""/75, 0x4b}, {&(0x7f00000001c0)=""/5, 0x5}, {&(0x7f0000000440)=""/108, 0x6c}], 0x4, &(0x7f0000000500)=""/127, 0x7f}, 0x4}], 0x1e, 0x10062, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r7) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) 5.319118113s ago: executing program 2 (id=2349): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4081}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, 0x2, 0x7, 0x201, 0x0, 0x0, {0x1}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7a}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004811}, 0x4000) r1 = syz_io_uring_setup(0x6fb2, &(0x7f0000000300)={0x0, 0xf36e, 0x10100, 0x0, 0x34b}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<'], 0x38}}, 0x80) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r1, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x28}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x6}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8080}, 0x4040000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x1, 0x0, 0x1, @connlimit={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x0, 0x1, 0x1, 0x0, 0x3f}, @NFTA_CONNLIMIT_COUNT={0x0, 0x1, 0x1, 0x0, 0x4}, @NFTA_CONNLIMIT_COUNT={0x0, 0x1, 0x1, 0x0, 0x2}, @NFTA_CONNLIMIT_FLAGS={0x0, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x0, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xffffff71}}, 0x24000840) 4.902818429s ago: executing program 0 (id=2350): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$l2tp(0x2, 0x2, 0x73) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffe, 0x0, 0x10000, 0x0, 0x4002004c5, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r3, 0x400455c8, 0x400000000105) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x5) socket$xdp(0x2c, 0x3, 0x0) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000240)) syz_io_uring_setup(0x239, &(0x7f0000000680)={0x0, 0x405e5, 0x10100, 0x1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x31a0}}) 4.851922594s ago: executing program 2 (id=2351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @dev, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) close(r1) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'dvmrp1\x00'}) r5 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r5, 0x2) connect(r5, &(0x7f0000000180)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x6, @local}}, 0x80) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000000)=0x7) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r6, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 4.131279097s ago: executing program 5 (id=2352): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000006200), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) getpid() socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x310) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x412240, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x64000600) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) 3.780478927s ago: executing program 2 (id=2353): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x49b, &(0x7f0000000180)={0x0, 0x44885, 0x10000, 0x6, 0x1d}, &(0x7f00000005c0), &(0x7f0000000480)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={0x0, 0xfc35, 0x1}, 0xf2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/12], 0x48) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="7352cf4dd85cabc8", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, 0x0, 0x9) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="04000000", @ANYRES64=0x0, @ANYRES16=r4, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) r6 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000240)=@llc={0x1a, 0xfffe, 0x4, 0x5, 0xfb, 0x0, @link_local}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000840)="a1a426203e0bbe6dea53c60d6db2f2153382a3fdcb76b3583074579ee165f55a5f2df56fcc5eb5bde78cec112a7f0a3e2e05878cd4d9a9ee1976c5d0d2067a21bba5eae12fb143b1734dbdd705f0e929c3a0dcd8bb2a000000", 0x59}, {&(0x7f0000000400)="c63d3d7157d40b36b8ad50e2caf7eed0e5755af6861bd892c12cf06bb08600f71b9b8c1dd0d54cfb94eed1051b64c7fd45885e6dafcdbcfaeccd9c6ac0afc9d05e1fea2d9eb9b0412126440ca381f63dcc30a92e", 0x54}, {&(0x7f00000004c0)="9580aa49997764fd6445645a39ed4ec1f925718a098a276e74989eb9842d937e35a4015ac1d077112d96324966711bbf6318292f32c5f16376fa09d7e41fb2ba5fe7f8d1b3660d585a1baf9c6e2f9e7bef1b0de2021f0f", 0x57}, {&(0x7f0000000600)="92623416c5628d2e058c8ed3cb65bd5516f4d4e220d49177ad32ca84113b7ce29b234a996a556b8686a102df4697cc0370726cad2e80fe15dce84d4819dec0c2ee95d8bc5ffe695e00b4d6140cf7a530c301a105c1d2104cbc99c3919d212479f69016f2540d63d1ec2c78066475a0d76ef915623f273ab2d165be29fb5cd9ad203f8cb5ab634c666303cef2d2", 0x8d}, {&(0x7f00000006c0)="5d48edda37e53654335abad2f59c0ff1f3146c4f9996f05a2d9913e1ff943b02db9120b1cf68556d7ea12fe89db916091b9fc45a4011f2fd5979ce5793241dfd5ef03d222f95c2f32453c5b2b909f340e503ea749e002170c27ab312", 0x5c}, {&(0x7f0000000740)="71380d4b421193d5dc9b417de12e2a3121176acfd88140c932313c3f9436393092a671f2dd4ff8318b7564cf717cbc9d037253a9f0fcb0988afef1d4407050ca77debea399871da3892695267a468554b282dcdf80a903e87978951381f12bddce6f591602a21ad01ac90ff425b6b02ec66fcfc00fef15991db96f8dd9c520c421456c446e23c96401b35221d266926a0fa3cdafd249cb134cdd506ffc5700e36582fae87bce21291c39697eefae77cbc98c0f8c9f0cbef2aaa1f1314a5b4a634d2f", 0xc2}, {&(0x7f0000000980)="5bcf4e9daa10630bcfd079b15dd2173bca6143815de952b5e895d5b296396f9aa73ba6e1cf5f95321e906aa65ccb9f0adf29818f8f8e14757b8968122b13a2a32440ac982f8c79bfb48a915a8b20a92fbe894ece1c1d77c186abe9", 0x5b}], 0x7, &(0x7f0000000300), 0xffffffffffffffdb}, 0x4000000) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001400b59500000000002000000a000000", @ANYRES32=r8, @ANYBLOB="14000200fe8000000000000000000000000000aa140006000000004001f0ffff0000000000000000"], 0x40}}, 0x0) r9 = fsopen(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x8943, &(0x7f0000000080)={'dummy0\x00', @ifru_ivalue}) shutdown(0xffffffffffffffff, 0x1) fspick(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) socket$inet6(0xa, 0x5, 0x6) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1d, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='svc_process\x00', r5, 0x0, 0x101}, 0x18) sync() 2.153918396s ago: executing program 1 (id=2355): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) pread64(r1, 0x0, 0x0, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x18) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(0xffffffffffffffff, &(0x7f00000002c0)='2\x00', 0x2) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x6, 0xc, 0x0, 0x40000}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x48044}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = dup2(r4, r4) sendmmsg$unix(r5, &(0x7f0000008380), 0x400000000000174, 0x4008890) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') 1.819046706s ago: executing program 2 (id=2356): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) move_mount(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x250) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x14, &(0x7f0000000040)=0x6) write(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) tkill(0x0, 0x3f) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) accept4(r4, 0x0, 0x0, 0x0) r5 = semget(0x2, 0x1, 0x2) semop(r5, &(0x7f0000000140)=[{0x4, 0x5}, {0x4, 0xf}, {0x4, 0x800, 0x1000}, {0x2, 0x5d0, 0x1000}, {0x1, 0xa8f, 0x1000}, {0x1, 0x2, 0x1000}, {0x1, 0x6, 0x800}, {0x3, 0x3af, 0x1000}, {0x4, 0x0, 0x800}], 0x9) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1ff, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000014d564b0000000001"]) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100153a42908f00a7172918811020301090224"], 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.730885121s ago: executing program 5 (id=2357): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) pread64(r1, 0x0, 0x0, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x18) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(0xffffffffffffffff, &(0x7f00000002c0)='2\x00', 0x2) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x6, 0xc, 0x0, 0x40000}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x48044}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = dup2(r4, r4) sendmmsg$unix(r5, &(0x7f0000008380), 0x400000000000174, 0x4008890) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) 736.170235ms ago: executing program 0 (id=2358): pipe2$9p(&(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0xfffffffffffffffc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf252001000000000000000000000000000120010000000000000000000000000001000000004e210002020000003b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000100)=0x5a1d, 0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240)=[{{&(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e22}, 0xfffffe7d, &(0x7f0000000900)=[{&(0x7f00000003c0)="838721c8f5206c19ab67e29284b9bbb70db52b9f669d4b51316a118c9126c135bfdd2947889ad5e3c68491f5f9ed2da6dfc1144ab4593b350e972cb90072ce0c68950f77d6d86f16075fa9f408590fa83e51ed0a5a96a58569353d7ff46f0109b3f6ce85fb7b812136e0be3e1fc99dfe4242a5de25388dcb5836285acabf840a4ce822bcc257d99f9541bb77c88517cc7849b2addce912a436cbd3726e14b63345834324d319540b33657c993d74c94ce5348b3745abbe9f94a17cdc101c61f22babae878b7d0170ff7b03140944e96452296d492d3f15cc4a93c069562a5f9651", 0xe1}, {&(0x7f00000004c0)="a1bcb868c555fb4720eaddcdffc6b09889150bde57fd7a50918a9f84907d9618f684f053ff5136cbc5bb67564aff71b99679f7b8850487a2f782815059db9bd9579ccd9176d7553325ae4a489098f3b47985c3013c7c63ff8bdb2b25fb19f47adfe9bbb244fa36f8bb830a67d3032544c5e281f93bad04fc5b0de92448519a44b4e5ff9ff08225c7594be2ec", 0x8c}, {&(0x7f0000003d00)="9ff0e2adf9e8b43ce5fa9f2f3705924ecbd39b81019a549b75b903816f8c0cffc74e2424b02ebae721e1b9fd188c90ab8d436287228301d00ac37903f0aa0fd8e443b38abd693fd68a31efb7c619eb0f1463a0a26b020294a9b8edeaac8d70c713dc3feaa4c5131cf15e4894a9c9948cc1ba9f9d53cc460c5bf0e6e575b5a06f29d49698dc8efd8a2eef51a3746050c568e2f458df56a6ab62585c9e895f9954641cd3f37ba1a65867ab8166f46767811dbc9ef79dd30b7aac029575e6bb4649a19926bee11c6531e6ddfc2ed95033a8a31961ee5c39337fc16332959e61270312f13f1a4d65f8f2fda44d648eeef4cb1b6431fb2c601e3f89b616c5f6d973f100e10037310a010fb6ed1ac5747e7aa936d227460ff919dc02240fd09099c70e9be88810ea059c84d69fbe3b2c0fd7aeef7af1613b69799a0524e8e7f057c080c47ac482b6e67895d460c4d5c19e277ef654ceeefa09bfca354df06cfaa12a5d5f683df83695b02c8a6bb6de80e6808ae57675140df27c4169aacd43d41f9fb87b6fa71a2af8f9c4434329a2cb420a97c8a3b89d88a9ec880a14a194ed80d283bc7fb94ec9340e21dfe11d43f3f6a5bb61ac95e6b91ed4b0af5dd16a42319475d0d6622cc68a78d2eb5d528f843618ad4fd0baca2da001cc32b925404559b484114b03b6251bf73ffa96e1921a9e9bc3b7b90ba4ae8e5fae62945be98030e7c0370b38671fd2754c489caf91ae085f35356538631139bc4925d5fdc801f0e1793411fe4d4128ed93bbecdfc1148bcfbfca1ef2efe3ed2be049b820b776d914d40afd6415aa8d03be4feb2487d7737c87da105cb1ed1aaf1886b60dbdbd75db0d78968306f38c578a9ed0cff2074f3d9f1662eaad844394777baf90660c3bcda26c9e738ea19e9e0985cb31efc7d5efaa7bf47397c43ad1dd07f7cde70b0b1995c9b75b7fb774b800ebabb70c96ef157c3caa6966dc3afc21fe1eccc20806139619aa413eaf4daa956b4efb2537883eef65b7bcd7e166faa2a781f52f1d81c0479ca0732f2b7e656aaf27110496ec0416dc6dea8c15bf6f5c5bcd8a5d34c1f7026f391f000b160f7d6a018cf9bd8baa93c3cc811e22651b16e66f5b90ad13374512329312b445e2606287c45a01356fa3dc66a79cae682c0085fb062c260d7dcc64178381ded7b846447ab34d1894199d8b21c25bee1d7f04a04f235591d8833375f491fe7b82c600534d7c813b381e11dfa0dc93ff0d6959afada05f8bce5ed8879e73d4b220c86b173aeabc76e4eabd1d5d00aef71b39a42d6db222478856b4244076297d3dd0a53ecbcd8e8533890fe997a55588763fee4edc17b2aec14c74e479a2a0fb8c67868db4fd4da88991f80c8fbf4e312b8f13403892d044d640b95f0cd1e6d0da2a3ee5d124c072281989ea553dfcd917066f7e50bbfe856970c19596bcb4c123e14f3e79117d54d97c58af041fd81ee0c6bedb3c6bce2a51017b6a25f947a99b38067339fedfc6c6c08715cdfcc1b2b512141988c70ab4b5b980efdf1cccb8a6a82696678e20cbc2d1358570bc320f3d861bdba064347dff5550a9c388e12d636ac8a04fe0d15ef10db898ad58a23838cbebd651157d721db15223deee1dbbeda125468e6fb5ea5a8e28f77a8e56c1de01112338f260958ab9f4ba8172aa3bfada899052f58996c41030c481f264442c55565c4b898b03604001a56d9e99e2e001debe1dce1f01eb6163d7cf2627e49004e3351d1a0a88762cfe977f1d60edd03514de72285aa53481bcadd2a49621a2b83236b3b830cb8bbde24145d4f5719118f11a365d52ee9ae5ac6bfffd99eebd45df6e0a3b1a8468709503f043cf26c975320dd762a3566941663226fddaada43ee08869691c61870d5d2789fc273f171fc13b2b8d5ef7b9cc96eed96c328c270304f321c4c3e1c2c5406ea570c8481fbbf01c679a21c02893181c2ae2ab4749795037fcdf8ee595361fea2cbf0ce81b982e729aab16b3e2c08eb9ca7a9d86e7ed26204cbb96c26827f2407afc6c2d7a25458bd7850af5ae2744157ddd61c7bbfe7ad8b3a7876119f7852555806de60a2da9a3d8cdc5c3227120a281009da74b3ab08c5e7c5aed60c4e9024aa3d948acfb1b1d1fd991ef7233495b972e147c2774638291946fe2fce8a6fd24fc21d3f147f7fd03423d63559aa77ae69b5d6bb1806623850ec58a7e7c7f5860ce32e80c143b0fca250d9ff8255543d3946b58e4a315607c25c23f74fab5ddb66ba0a7a67a9722a073040dceb5d8e224b2ad2adb447a11f8b26585d53f46879e11f72912c7677a612dab8d2d566d77417e059e189c5e1b74448e7e8fa80fde972d8835c572c1a4fd3e15718b468050ed8a36dca655a61c4bece7ed72c1fa2fb2b63aa55fcc6c63af6ed69732442f0d848eaf6d8658939dad62fcac0caab39500e6ef0b030a4bffd0089e5f0ac532839fcab98505786fd28f337df8b8a6b2f603fab85640e2747595fe909fbb8b4870803ffb1467b57c88bb636da064b849bd1e5410806f1ba867eecbce426a0f56b005b5771a2b33f32dac28ef89414e2947a443868e459da456401418807e3e6d8f3e839d51eaf7759ee7994c3484882a3879f0af76e05bd013f8fc42232c4530c9bc2893fb4ddafb54d073179b2e706e0a18d76addf666025c523d875af7675738a1d46e4a18adad13e5612a447cea9c4de54cb91f23810df31e64875da4591d41ec6f8f2b8c2eb328d7243bf01e2f8461d857f3523d2e620344d4e90f2d89e1bb6bde43999c1898035289da08235a473401a552724f491dd30c53d3c4f52b65a4b2678010cb2b9d631cfaea49a6533f82ba9caa486b9bae8fbcbcf28ae0d33fe0699da6cf0922a3032e5f792d26a3796f91ccfa91d6cfdc6ec8365ffccedfdd8f49f5d91b761e43ed7d6ba83009250ed189b85dfe7c442b785302a85d6f4b7bd3eb7d104b51680fc4f9c114b627c9781d1b9d00f73f4abc5ea1313c267d3083455699c94065538f1a6f8f2a57a054ba934b4dbc03de4ac3a151f470396f1fb865081b19a7414b01a9d638d9e4c6a8e7bd06d4bc7b5f53bd7739f300226ad22e6fe151a59ec338e18918e1a3fc585936d4ad8d1636a62350549bdb3109a6f712a8138681ce97b83f5ab6a95abf4e73117fcd630856600393fa30fd17075f91d289b206446b0fad6591189ad1626d040afdd23b9d45838cd09ba1326c769027a42c0df178519d11b8fa7ca4a9654cda03f197a442059c7686537104f7ab7155b1fdfd403a81ea6a6d8ad1c5e26ba68275dd753900dc25c11d13f51bcab3f53ba8ae9b433e6277eb16bbacd1fa600321427ecea3d3512ec6dda4c28961d041703af85c17b167acbbd277c231d2a1dfc6eea29a671a395b0dbb7de53ed19467f604bf49c367e737d1786fc9417db18899675ca88eaa5f45e5a241beefb9572233382641a325a672d4f2a410852884ab940ba85f90c786f9934cda855b04d0428823f2fc41886411a17720c8b3765f7a14012a807d6378359a1491983d045226a5abb3533bad20040d16785b5a4293f2fbdeb7d66c2667ec1ca183f5a0f775bb8b46f66c6266297337b4a7bfdd228ba514897c830044b67fff15fcce65b3d7ee2d956ed0db3ddf1e3479d8dc4b0d1b06b88ab3a350b289ca073e7adda48ad7970c272745f54acc08c325390edf65710734be634a468ba9fe257ad3779f5bda344202ac1c7473dd74d1c90b043bb68773bae0cbc557a98837882a9bad222da180bc553798738290579efa38e98e6fdbb975c88e77a6c2e42c6249cb72729eedfd046c52d9b9dafcc754aa9b03d2a5e0219b5054c3419a65f12f3393d64daca5b52fda624129d02cd989adbc69b0b2a524fc1b6f3fb94466aed443c91538ede67f327a09469a25a5c33644ebca7222cafb0e63b28710b70d73c1854f6b5c7dac65206ac0097b0ae9a0cea5ba65999d4fcff25ff38483980c4dc38c5083f0e7c982b8bd9c0305cfdb6ebf5acca52925014affad62d2d8329ee2b12fa9d6f3536cacd9423cb9e8bcc2362f995614ae07f7dca10afa62e23acd58d85ec66b7a55f599ab61cc54c39728bbb620f6772104a8b537349a505f7a0f53fa243a10fbe727dd25b8dd0bffd893f2a512fc61908ed423f59aca719950a85175b2ef54b3416417622364d1b60939cf431ef59c6cd2a20f3f833af6ad0a09c2a4f96c2464a3e6515b93ad6c75a84620c4a6f6c4a8ee8b6ba3d274c95b632c39950693fb3b44199b29bb6532a7a07c3726440d0a93ea767fe68f2298f1f96b8b667702da84ca45fd3334a555adb729e2656595d593e1294170c9ca50d001047deda82b156a69dfd7f3e45b340ce7aaaec5e45504f95061de83e33d1a667d04768351f309aa7b4ca7f6b2019e80f836acf82a8b04188645688b9118a8e04fa9ded7b38ff60c24c3822298765cc90cad050c801ea48e05fb092228e5cd98791728d1b2ee5c2bf8f2d54aa604758d3e9844cdd301861d17eee067d85b2ebe88a39a301fefa0ec6825e04b1ddfbfbb65596b76afc1cfb9254999d6c56eaa5d5f075f4a1695da2fa159670aa625ae6a8b7fdb8bb0fda8dbec17a13126580415fde0cf4b605418f24a6f48c1db6ae84bebbacb34cdf0226a17fe8f64b7330bf48ccddf81f2b77fa881e77aeb3969dc73edc1bf35017ad58064ebe04e87f8e6f012a85915f93ce2813996581bd20af421fddb8df8f22baa12dcc80f8ddcf36224147973967ff18efa8ef2e0cf93588d2ad73f0c413aba6f1c652b74765a0ba93a11558d6cf7314895e782c4ec66d24b9a93b3c9f07784911828945bf3b5e1151cf9f5d65971925d030f8b5887b3c7be2beb9c74e7d7839d5818822d43f283ad79dca72c214a7477a9f4d98ac3c723a49143ea80bfd33487339ea8e444c7ea457fc2fa89bd32ca3d1b3b24aebef4fba21a3141851bbe7f418eb699a0fc3f19ac3c002979de7900c6c0f99003ca3c5a0f3258dda8f085e247c1e4a7c66e65e28b4c0338f33d307e2422a464cf2f60b3c889ea152d5b10fd778e23524b9127fe262f16e77caf66b9a226df7867b64673fcf36d8f37326c000cbde5d10da43a2b909c66574e377094bea54e21e2abb7985994ccb5f6aabcc4ff998d78685fb5227b261bd1ab97a7b2bd4aa02f7072aa8fb0ffe7c97f6fd25dc71d29c9ab055d2f9d9b6a94b746dd20b0a783917333e69a3d4a29e19f841e55e761fd5fec360b9605d99269a0eb6b2876a60294ced43aa5844cf9d5ddd81a74ff7bc17b1ef24e583b4d7193935e9686c37e40c26b66666061a149cea78ecab2e8e2ab59aeec706e9ebaaf8c7647e61e22ca3fc1beac4d014cde117ee43214b53df0e0804321a5d2e8ae4ccca7b982c24b0869925fb4df3ff3dcc9ad6906262173e64a1c8da627920c876b5930a3139ed59aa266583b16b74a02cc9008e76dcc01096b6f077ecc5425af2f405565169578e852121a6b3e84e110661f710f6ecc64885882d52caf7b7e420f60e34bef8b579909926acda92c92ca051b50c1328796eff971d885cb99a99f625f0421303a91bd686f447188338c6f921f502748be51c49c771e76ad4f7553dd2e7f8e99c1dd189eaadba6da45dcd2770b28dfe3e096a28641d50a620ae7fd866885c59af3ce003b840be3289feb129bb521487c7d5b961f27192027b5f76d02c9d380a048cc0c289330318ac98620e7f27ffaf55ffbc9f6600c3223f6f62568d44607d7a6f928719f5477a8d8709092919491ff0284458f36a395b7d0d36a01ff7fd50bbad72e67de3353567208807162886e3834468f11f9f9d89f40dc7917883b6a6e1b6fd2a04f457f6ad1bed1e1f3bb2be6e9b3a0962524d22b4dfbba0e759849565e44a062fec25400000000000000", 0x1056}, {&(0x7f0000001d00)="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", 0xff4}, {&(0x7f0000000280)="1226d082f3d6509cddbbbe97801114fe90288d0c77078bb0fce2e2e38ecb4b36e170359e650d81588155b732773beae9232c", 0x32}, {&(0x7f0000002d00)="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", 0x1000}, {&(0x7f0000000800)="bf9b05febb3a2682b502500a962a5c88222f0af0a6c5d6d772b0b4b73ac09baec00b8247deeedf459736cd352c2c4df50c3595ee6f18659a603f0a758abf58eb2a6f85c901dd3202e57581d46e14265de758695b6a99e8be9ebcb69a23d937b704183bafeb5e68764c898baafc8a20ac6477247aa7fcfe0962b15b4f6794e9bb1e256876f4c604aca2c86e62735372537fb0aa50a39e8f38483b091a8a6a3202bff3a564c8f0384c23496b0217b40540a0597df59ebe37ba3771be8c2acb786aac006d9ccb", 0xc5}, {&(0x7f0000000980)="aebab013344530d84502d52b6b7710b79ac4d8a0c37398de36a267acb4f60f5e0e1ef908460ebaa7ab7a36f2783df81a535bc1102dc9fc07934670e457750d23a4afcecf2c842412b5fb0167b0af5c01f00efb8d6a86ed878a65ea73322c143954fafd2369baff847a74880193171fa233d74ed2eea4a1ec4e26295306c530000000000000", 0x4c}], 0x8, &(0x7f0000001080)=ANY=[@ANYRES8=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r4, @ANYRES8=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0010040018a900bb62ad599dac400a00000100000070e19d041a34eeed56bf9aa4f3dc5e72afd4f5efff23dc73", @ANYRES32=r1, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000a216903ff8d44db139ad213e", @ANYRESOCT=r2, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a3280db73432ebac4d97f2a26ecaa7b27ddb49919af28d74be86f1fa7fe2c5b15d11d559e2fdbc71217478d68c898b961e616b3ddacc630084e0ad513b1c0ede906b3f0028304b56663fd38fa30fa932d05b55585922072777d85fc063f105bd67ceed662bb13c56d0903ade283ccd83131a8bbb361b947c6a0169049a5f91d9d73983258b1f32c379422b655d6e77188cc8e370a771d8c36e95910b3af6a4d9156799855d98b2eb927cafec362a982996f215cfdeebc89d0de1eb604fd65b015ae7be6169aba49ddc0f8103243065f7f801d29a8bec6a24d2d2fb0b136cc3ce61cb122ca24bcabbfe", @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r2, @ANYRESOCT=r1, @ANYRES32=r4, @ANYRESOCT=r0, @ANYRES32, @ANYRES32=r4, @ANYRES8=r3, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="2d50d44502b0ac85888f2f2119283f29c00ecb569493f75625fa1be559b9e879bdb7f7d1f41f2d29201bcb0aa03c3de2fcffa003fa71898a7d2e12fb74993a04476d028e294447ae3f2bd5a4db009fc297e4511c3230a1d99fa9a24e7cb8b328db8f32b6d8229eb17477be961276f8a47ed05509bace70846f5b660b1fb566af83280547d8cfa4f3b902a43dc3793baa704ef7885bd7f12b0950d4a7f6a51aa1035485c37b2d8aa5060f474313b42f2e32d4c522c80bc014eb8272e72e8f8c4b6e8b02730b627c515c0697cb87338401530088d224", @ANYRES32, @ANYRES32, @ANYRES32=r1], 0x160, 0x800}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x10d2, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r7, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r8 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r8, 0xc0044dff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@userxattr}, {@nfs_export_on}]}) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r12 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r13 = fanotify_init(0xf00, 0x1) fanotify_mark(r13, 0x105, 0x40009975, r12, 0x0) fallocate(r10, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r11, 0x0) 0s ago: executing program 1 (id=2359): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x24) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_setup(0x403, &(0x7f00000004c0)=0x0) io_pgetevents(r5, 0x4, 0x4, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000080)={0x0, 0x989680}, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) (fail_nth: 1) kernel console output (not intermixed with test programs): UID: 0 PID: 13806 Comm: syz.5.1974 Not tainted syzkaller #0 PREEMPT(full) [ 637.151171][T13806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 637.151182][T13806] Call Trace: [ 637.151188][T13806] [ 637.151196][T13806] dump_stack_lvl+0x16c/0x1f0 [ 637.151220][T13806] should_fail_ex+0x512/0x640 [ 637.151239][T13806] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 637.151262][T13806] should_failslab+0xc2/0x120 [ 637.151283][T13806] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 637.151302][T13806] ? getname_flags.part.0+0x4c/0x550 [ 637.151332][T13806] getname_flags.part.0+0x4c/0x550 [ 637.151362][T13806] getname_uflags+0x98/0xf0 [ 637.151387][T13806] __x64_sys_execveat+0xc4/0x120 [ 637.151409][T13806] do_syscall_64+0xcd/0x4c0 [ 637.151431][T13806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.151450][T13806] RIP: 0033:0x7fae3818ebe9 [ 637.151465][T13806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 637.151481][T13806] RSP: 002b:00007fae38f80038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 637.151499][T13806] RAX: ffffffffffffffda RBX: 00007fae383b6090 RCX: 00007fae3818ebe9 [ 637.151511][T13806] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 637.151522][T13806] RBP: 00007fae38f80090 R08: 0000000000001000 R09: 0000000000000000 [ 637.151533][T13806] R10: 0000200000004780 R11: 0000000000000246 R12: 0000000000000001 [ 637.151544][T13806] R13: 00007fae383b6128 R14: 00007fae383b6090 R15: 00007ffdb1655678 [ 637.151569][T13806] [ 637.541065][ T10] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 637.724590][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 637.962901][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 637.980901][ T10] usb 3-1: config 13 has an invalid interface number: 50 but max is 0 [ 637.989105][ T10] usb 3-1: config 13 has no interface number 0 [ 638.003491][ T10] usb 3-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 638.024673][ T10] usb 3-1: config 13 interface 50 has no altsetting 0 [ 638.060187][ T10] usb 3-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 638.069361][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.077374][ T10] usb 3-1: Product: syz [ 638.088057][ T10] usb 3-1: Manufacturer: syz [ 638.097281][ T10] usb 3-1: SerialNumber: syz [ 638.197977][T13805] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 638.424663][T13823] siw: device registration error -23 [ 638.792756][T13825] No control pipe specified [ 639.625061][ T912] vhci_hcd: vhci_device speed not set [ 639.710181][T13837] FAULT_INJECTION: forcing a failure. [ 639.710181][T13837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 639.785152][T13837] CPU: 0 UID: 0 PID: 13837 Comm: syz.4.1983 Not tainted syzkaller #0 PREEMPT(full) [ 639.785180][T13837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 639.785192][T13837] Call Trace: [ 639.785199][T13837] [ 639.785206][T13837] dump_stack_lvl+0x16c/0x1f0 [ 639.785231][T13837] should_fail_ex+0x512/0x640 [ 639.785260][T13837] _copy_to_user+0x32/0xd0 [ 639.785285][T13837] simple_read_from_buffer+0xcb/0x170 [ 639.785308][T13837] proc_fail_nth_read+0x197/0x240 [ 639.785330][T13837] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 639.785354][T13837] ? rw_verify_area+0xcf/0x6c0 [ 639.785380][T13837] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 639.785400][T13837] vfs_read+0x1e4/0xcf0 [ 639.785423][T13837] ? __pfx___mutex_lock+0x10/0x10 [ 639.785444][T13837] ? __pfx_vfs_read+0x10/0x10 [ 639.785470][T13837] ? __fget_files+0x20e/0x3c0 [ 639.785499][T13837] ksys_read+0x12a/0x250 [ 639.785517][T13837] ? __pfx_ksys_read+0x10/0x10 [ 639.785543][T13837] do_syscall_64+0xcd/0x4c0 [ 639.785566][T13837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.785584][T13837] RIP: 0033:0x7f5bc7b8d5fc [ 639.785599][T13837] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 639.785617][T13837] RSP: 002b:00007f5bc8a41030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 639.785641][T13837] RAX: ffffffffffffffda RBX: 00007f5bc7db5fa0 RCX: 00007f5bc7b8d5fc [ 639.785653][T13837] RDX: 000000000000000f RSI: 00007f5bc8a410a0 RDI: 0000000000000004 [ 639.785664][T13837] RBP: 00007f5bc8a41090 R08: 0000000000000000 R09: 0000000000000000 [ 639.785676][T13837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.785686][T13837] R13: 00007f5bc7db6038 R14: 00007f5bc7db5fa0 R15: 00007ffe036f0788 [ 639.785712][T13837] [ 640.320912][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 640.331556][ T5957] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 640.407266][ T10] usb 3-1: MIDIStreaming interface descriptor not found [ 640.648585][T13847] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1986'. [ 640.732312][ T5957] usb 6-1: Using ep0 maxpacket: 8 [ 640.917481][ T10] usb 3-1: USB disconnect, device number 52 [ 640.941378][ T5957] usb 6-1: config 0 has an invalid interface number: 38 but max is 0 [ 640.954961][ T5957] usb 6-1: config 0 has no interface number 0 [ 640.961229][ T5957] usb 6-1: config 0 interface 38 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 640.999188][ T5863] udevd[5863]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 641.018394][ T5957] usb 6-1: config 0 interface 38 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 641.063975][ T5957] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=f8.63 [ 641.073206][ T5957] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.081455][ T5957] usb 6-1: Product: syz [ 641.085670][ T5957] usb 6-1: Manufacturer: syz [ 641.090258][ T5957] usb 6-1: SerialNumber: syz [ 641.102178][ T5957] usb 6-1: config 0 descriptor?? [ 641.115593][ T5957] xbox_remote_probe: Unexpected endpoint_in [ 641.640142][T13856] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 641.646658][T13856] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 641.663091][T13856] vhci_hcd vhci_hcd.0: Device attached [ 641.701137][ T5965] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 641.851686][ T5957] vhci_hcd: vhci_device speed not set [ 641.864701][ T5965] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 641.923178][ T5957] usb 41-1: new full-speed USB device number 6 using vhci_hcd [ 641.924099][ T5965] usb 2-1: config 0 has no interfaces? [ 641.970307][ T5965] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 641.981039][ T10] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 641.988693][ T5965] usb 2-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 641.998725][ T5965] usb 2-1: Product: syz [ 642.008884][ T5965] usb 2-1: Manufacturer: syz [ 642.044367][ T5965] usb 2-1: SerialNumber: syz [ 642.076753][ T5965] usb 2-1: config 0 descriptor?? [ 642.144397][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 642.201046][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 642.259685][ T10] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 642.285388][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.530963][ T10] usb 5-1: config 0 descriptor?? [ 642.830342][T13870] rdma_rxe: rxe_newlink: failed to add lo [ 642.848177][ T978] usb 6-1: USB disconnect, device number 54 [ 643.020652][T13871] lo speed is unknown, defaulting to 1000 [ 643.032159][T13871] lo speed is unknown, defaulting to 1000 [ 643.615972][ T10] isku 0003:1E7D:319C.001F: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.4-1/input0 [ 643.635984][ T9] usb 2-1: USB disconnect, device number 40 [ 643.708233][ T10] isku 0003:1E7D:319C.001F: couldn't init struct isku_device [ 643.734249][ T10] isku 0003:1E7D:319C.001F: couldn't install keyboard [ 643.744015][T13857] vhci_hcd: connection reset by peer [ 643.748313][ T10] isku 0003:1E7D:319C.001F: probe with driver isku failed with error -71 [ 643.774860][ T2942] vhci_hcd: stop threads [ 643.779126][ T2942] vhci_hcd: release socket [ 643.805570][ T2942] vhci_hcd: disconnect device [ 643.834895][ T10] usb 5-1: USB disconnect, device number 48 [ 644.851047][ T10] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 645.141720][T13892] FAULT_INJECTION: forcing a failure. [ 645.141720][T13892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 645.158098][T13892] CPU: 0 UID: 0 PID: 13892 Comm: syz.1.1997 Not tainted syzkaller #0 PREEMPT(full) [ 645.158125][T13892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 645.158136][T13892] Call Trace: [ 645.158143][T13892] [ 645.158150][T13892] dump_stack_lvl+0x16c/0x1f0 [ 645.158175][T13892] should_fail_ex+0x512/0x640 [ 645.158200][T13892] _copy_from_user+0x2e/0xd0 [ 645.158225][T13892] do_sock_getsockopt+0x3ca/0x440 [ 645.158251][T13892] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 645.158273][T13892] ? __fget_files+0x204/0x3c0 [ 645.158307][T13892] __sys_getsockopt+0x12f/0x260 [ 645.158339][T13892] __x64_sys_getsockopt+0xbd/0x160 [ 645.158357][T13892] ? do_syscall_64+0x91/0x4c0 [ 645.158378][T13892] ? lockdep_hardirqs_on+0x7c/0x110 [ 645.158398][T13892] do_syscall_64+0xcd/0x4c0 [ 645.158421][T13892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.158440][T13892] RIP: 0033:0x7f491278ebe9 [ 645.158456][T13892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 645.158474][T13892] RSP: 002b:00007f4913542038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 645.158491][T13892] RAX: ffffffffffffffda RBX: 00007f49129b5fa0 RCX: 00007f491278ebe9 [ 645.158504][T13892] RDX: 0000000000000002 RSI: 0000000000000006 RDI: 0000000000000003 [ 645.158515][T13892] RBP: 00007f4913542090 R08: 00002000000003c0 R09: 0000000000000000 [ 645.158526][T13892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.158537][T13892] R13: 00007f49129b6038 R14: 00007f49129b5fa0 R15: 00007ffe3861aae8 [ 645.158562][T13892] [ 645.480954][T13897] random: crng reseeded on system resumption [ 645.491513][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 645.517783][ T10] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 645.525118][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 645.536278][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 645.536306][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 188 [ 645.562597][ T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 645.577270][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.591792][T13898] FAULT_INJECTION: forcing a failure. [ 645.591792][T13898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 645.608417][T13898] CPU: 1 UID: 0 PID: 13898 Comm: syz.5.1999 Not tainted syzkaller #0 PREEMPT(full) [ 645.608434][T13898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 645.608441][T13898] Call Trace: [ 645.608445][T13898] [ 645.608450][T13898] dump_stack_lvl+0x16c/0x1f0 [ 645.608466][T13898] should_fail_ex+0x512/0x640 [ 645.608482][T13898] _copy_to_user+0x32/0xd0 [ 645.608498][T13898] ksys_shmctl.constprop.0+0x2a8/0x380 [ 645.608518][T13898] ? __pfx_ksys_shmctl.constprop.0+0x10/0x10 [ 645.608540][T13898] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 645.608556][T13898] ? __fget_files+0x20e/0x3c0 [ 645.608580][T13898] do_syscall_64+0xcd/0x4c0 [ 645.608594][T13898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.608606][T13898] RIP: 0033:0x7fae3818ebe9 [ 645.608615][T13898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 645.608627][T13898] RSP: 002b:00007fae38fa1038 EFLAGS: 00000246 ORIG_RAX: 000000000000001f [ 645.608638][T13898] RAX: ffffffffffffffda RBX: 00007fae383b5fa0 RCX: 00007fae3818ebe9 [ 645.608645][T13898] RDX: 0000200000000680 RSI: 000000000000000e RDI: 0000000000000001 [ 645.608651][T13898] RBP: 00007fae38fa1090 R08: 0000000000000000 R09: 0000000000000000 [ 645.608658][T13898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.608665][T13898] R13: 00007fae383b6038 R14: 00007fae383b5fa0 R15: 00007ffdb1655678 [ 645.608679][T13898] [ 645.757466][ C1] vkms_vblank_simulate: vblank timer overrun [ 645.899548][ T10] usb 5-1: Product: syz [ 645.944041][ T10] usb 5-1: Manufacturer: syz [ 645.953776][ T10] usb 5-1: SerialNumber: syz [ 646.283886][ T10] usb 5-1: config 0 descriptor?? [ 646.300628][T13888] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 646.301081][ T9] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 646.313768][T13888] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 646.373478][ T10] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected [ 646.380568][ C0] mcba_usb 5-1:0.0 can0: Tx URB aborted (-71) [ 646.380618][ C0] mcba_usb 5-1:0.0 can0: Tx URB aborted (-71) [ 646.523503][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 646.548624][ T10] usb 5-1: USB disconnect, device number 49 [ 646.557248][ T10] mcba_usb 5-1:0.0 can0: device disconnected [ 646.577188][ T9] usb 2-1: config 0 has no interfaces? [ 646.601786][ T9] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 646.614451][ T9] usb 2-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 646.647173][ T9] usb 2-1: Product: syz [ 646.657291][ T9] usb 2-1: Manufacturer: syz [ 646.667426][ T9] usb 2-1: SerialNumber: syz [ 646.686707][ T9] usb 2-1: config 0 descriptor?? [ 647.030743][T13918] lo speed is unknown, defaulting to 1000 [ 647.044168][T13918] lo speed is unknown, defaulting to 1000 [ 647.411058][ T5957] vhci_hcd: vhci_device speed not set [ 647.692907][T13927] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 647.699444][T13927] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 647.711130][T13927] vhci_hcd vhci_hcd.0: Device attached [ 647.997025][ T10] vhci_hcd: vhci_device speed not set [ 648.074454][T13942] rdma_rxe: rxe_newlink: failed to add lo [ 648.533804][ T10] usb 43-1: new full-speed USB device number 9 using vhci_hcd [ 648.686244][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 648.686256][ T30] audit: type=1400 audit(1756070398.279:602): avc: denied { read } for pid=13939 comm="syz.2.2010" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 648.734391][ T30] audit: type=1400 audit(1756070398.279:603): avc: denied { ioctl } for pid=13939 comm="syz.2.2010" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 648.761744][ T912] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 648.888601][ T5965] usb 2-1: USB disconnect, device number 41 [ 648.965381][ T912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 648.995603][ T912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 649.015261][ T912] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 649.171750][ T912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.213416][T13960] netlink: 'syz.1.2012': attribute type 1 has an invalid length. [ 649.282005][T13959] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2012'. [ 649.878212][T13960] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 649.919974][ T912] usb 6-1: config 0 descriptor?? [ 650.037193][T13967] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 650.068947][T13967] cramfs: wrong magic [ 650.506452][ T9] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 650.706766][ T912] isku 0003:1E7D:319C.0020: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.5-1/input0 [ 650.783819][ T912] isku 0003:1E7D:319C.0020: couldn't init struct isku_device [ 650.841188][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 650.853307][ T912] isku 0003:1E7D:319C.0020: couldn't install keyboard [ 650.876454][ T912] isku 0003:1E7D:319C.0020: probe with driver isku failed with error -71 [ 650.884304][ T9] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 650.902556][ T912] usb 6-1: USB disconnect, device number 55 [ 650.911013][ T9] usb 3-1: config 0 has no interface number 0 [ 650.928743][T13928] vhci_hcd: connection reset by peer [ 650.940586][ T9] usb 3-1: config 0 interface 196 has no altsetting 0 [ 650.941293][T12419] vhci_hcd: stop threads [ 650.964194][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 650.976539][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.091524][ T9] usb 3-1: Product: syz [ 651.095707][ T9] usb 3-1: Manufacturer: syz [ 651.105981][ T9] usb 3-1: SerialNumber: syz [ 651.112243][T12419] vhci_hcd: release socket [ 651.117561][ T9] usb 3-1: config 0 descriptor?? [ 651.745660][T12419] vhci_hcd: disconnect device [ 651.901052][ T978] usb 5-1: new low-speed USB device number 50 using dummy_hcd [ 652.092750][ T978] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 652.321647][T13996] sz1: rxe_newlink: already configured on lo [ 652.904819][T13999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.931976][T13999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.954990][ T978] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 653.280016][ T978] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 653.311185][ T978] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 653.366103][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.399859][ T9] ipheth 3-1:0.196: Unable to find endpoints [ 653.406679][ T978] hub 5-1:1.0: bad descriptor, ignoring hub [ 653.504405][ T9] usb 3-1: USB disconnect, device number 53 [ 653.525257][ T978] hub 5-1:1.0: probe with driver hub failed with error -5 [ 653.617736][ T978] cdc_wdm 5-1:1.0: skipping garbage [ 653.736940][ T978] cdc_wdm 5-1:1.0: skipping garbage [ 653.764599][ T978] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 653.811331][ T10] vhci_hcd: vhci_device speed not set [ 654.214835][T14018] mkiss: ax0: crc mode is auto. [ 654.710250][T14023] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2024'. [ 654.778881][ T912] usb 5-1: USB disconnect, device number 50 [ 655.071193][ T9] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 655.193091][T14033] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 655.199624][T14033] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 655.217638][T14033] vhci_hcd vhci_hcd.0: Device attached [ 655.252022][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 655.270448][ T9] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 655.288226][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 655.355639][ T9] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 655.376797][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.394386][ T5965] vhci_hcd: vhci_device speed not set [ 655.409999][ T912] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 655.413606][ T9] usb 3-1: Product: syz [ 655.422378][ T9] usb 3-1: Manufacturer: syz [ 655.427328][ T9] usb 3-1: SerialNumber: syz [ 655.439404][ T9] usb 3-1: config 0 descriptor?? [ 655.596173][ T43] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 655.615128][ T5965] usb 35-1: new full-speed USB device number 7 using vhci_hcd [ 655.634694][ T9] streamzap 3-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 655.715838][ T912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 655.732729][ T912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 655.788977][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 655.915413][T14023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.944449][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 655.950430][T14023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.954402][ T912] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 655.981125][ T43] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 655.984859][ T9] usb 3-1: USB disconnect, device number 54 [ 655.990202][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.088281][ T912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.131618][ T912] usb 1-1: config 0 descriptor?? [ 656.143702][ T43] usb 2-1: config 0 descriptor?? [ 656.391287][ T24] usb 6-1: new full-speed USB device number 56 using dummy_hcd [ 656.553665][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 656.581626][ T43] isku 0003:1E7D:319C.0021: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 656.581988][T14056] random: crng reseeded on system resumption [ 656.597561][ T912] isku 0003:1E7D:319C.0022: hidraw1: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 656.611892][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 656.630602][ T24] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 656.645563][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.656294][ T24] usb 6-1: config 0 descriptor?? [ 656.820316][ T43] isku 0003:1E7D:319C.0021: couldn't init struct isku_device [ 656.843272][ T43] isku 0003:1E7D:319C.0021: couldn't install keyboard [ 656.854523][T14038] vhci_hcd: connection reset by peer [ 656.868343][T12478] vhci_hcd: stop threads [ 656.878500][T12478] vhci_hcd: release socket [ 656.887522][ T43] isku 0003:1E7D:319C.0021: probe with driver isku failed with error -71 [ 656.889017][T12478] vhci_hcd: disconnect device [ 656.927748][ T43] usb 2-1: USB disconnect, device number 42 [ 657.022609][ T978] usb 1-1: USB disconnect, device number 48 [ 657.094850][ T24] isku 0003:1E7D:319C.0023: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.5-1/input0 [ 657.288229][ T24] isku 0003:1E7D:319C.0023: couldn't init struct isku_device [ 657.306075][ T24] isku 0003:1E7D:319C.0023: couldn't install keyboard [ 657.316182][ T24] isku 0003:1E7D:319C.0023: probe with driver isku failed with error -71 [ 657.341813][ T24] usb 6-1: USB disconnect, device number 56 [ 657.677979][T14069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2037'. [ 657.813361][T14073] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 657.819868][T14073] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 657.831215][T14073] vhci_hcd vhci_hcd.0: Device attached [ 658.011395][ T24] vhci_hcd: vhci_device speed not set [ 658.083620][ T43] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 658.132448][ T24] usb 41-1: new full-speed USB device number 7 using vhci_hcd [ 658.433890][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 658.471809][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.505652][ T43] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 658.546239][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.558881][ T43] usb 5-1: config 0 descriptor?? [ 658.741041][ T9] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 658.914327][ T9] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.17 [ 658.930892][ T9] usb 2-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 659.047703][ T43] usbhid 5-1:0.0: can't add hid device: -71 [ 659.055027][ T43] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 659.071029][ T9] usb 2-1: Product: syz [ 659.076115][ T9] usb 2-1: Manufacturer: syz [ 659.081228][T14074] vhci_hcd: connection reset by peer [ 659.093151][T12419] vhci_hcd: stop threads [ 659.100378][T12419] vhci_hcd: release socket [ 659.105885][ T43] usb 5-1: USB disconnect, device number 51 [ 659.180237][ T9] usb 2-1: SerialNumber: syz [ 659.180347][T12419] vhci_hcd: disconnect device [ 659.220115][ T9] usb 2-1: config 0 descriptor?? [ 659.240601][ T9] ch341 2-1:0.0: ch341-uart converter detected [ 659.312024][ T978] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 659.403251][T14100] random: crng reseeded on system resumption [ 659.436713][ T9] usb 2-1: failed to receive control message: -71 [ 659.443368][ T9] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 659.458811][ T9] usb 2-1: USB disconnect, device number 43 [ 659.472356][ T978] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 659.483506][ T9] ch341 2-1:0.0: device disconnected [ 659.491777][ T978] usb 6-1: config 0 has no interfaces? [ 659.521502][ T978] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 659.530565][ T978] usb 6-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 659.541670][ T978] usb 6-1: Product: syz [ 659.545850][ T978] usb 6-1: Manufacturer: syz [ 659.550442][ T978] usb 6-1: SerialNumber: syz [ 659.572511][ T978] usb 6-1: config 0 descriptor?? [ 659.935604][ T9] usb 6-1: USB disconnect, device number 57 [ 660.293016][T14109] lo speed is unknown, defaulting to 1000 [ 660.307135][T14109] lo speed is unknown, defaulting to 1000 [ 660.851243][ T5965] vhci_hcd: vhci_device speed not set [ 660.984131][T14113] lo speed is unknown, defaulting to 1000 [ 660.997970][T14113] lo speed is unknown, defaulting to 1000 [ 661.656580][T14122] FAULT_INJECTION: forcing a failure. [ 661.656580][T14122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 661.669790][T14122] CPU: 1 UID: 0 PID: 14122 Comm: syz.0.2051 Not tainted syzkaller #0 PREEMPT(full) [ 661.669817][T14122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 661.669827][T14122] Call Trace: [ 661.669835][T14122] [ 661.669843][T14122] dump_stack_lvl+0x16c/0x1f0 [ 661.669869][T14122] should_fail_ex+0x512/0x640 [ 661.669895][T14122] _copy_from_user+0x2e/0xd0 [ 661.669920][T14122] io_uring_setup+0xb4/0x2120 [ 661.669942][T14122] ? __pfx_io_uring_setup+0x10/0x10 [ 661.669961][T14122] ? __rcu_read_unlock+0x2bc/0x550 [ 661.669980][T14122] ? avc_has_perm_noaudit+0x149/0x3b0 [ 661.670011][T14122] ? ksys_write+0x1ac/0x250 [ 661.670030][T14122] ? __pfx_ksys_write+0x10/0x10 [ 661.670054][T14122] __x64_sys_io_uring_setup+0xc2/0x170 [ 661.670074][T14122] do_syscall_64+0xcd/0x4c0 [ 661.670097][T14122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.670116][T14122] RIP: 0033:0x7f42f038ebe9 [ 661.670131][T14122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 661.670147][T14122] RSP: 002b:00007f42ee5d4fc8 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 661.670165][T14122] RAX: ffffffffffffffda RBX: 00007f42f05b6180 RCX: 00007f42f038ebe9 [ 661.670177][T14122] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000497 [ 661.670189][T14122] RBP: 00002000000002c0 R08: 0000000000000000 R09: 0000000000000000 [ 661.670200][T14122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.670216][T14122] R13: 0000200000000040 R14: 0000000000000497 R15: 0000000000000000 [ 661.670241][T14122] [ 661.830657][ C1] vkms_vblank_simulate: vblank timer overrun [ 662.717479][T14128] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 662.724025][T14128] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 662.765267][T14128] vhci_hcd vhci_hcd.0: Device attached [ 662.951706][ T9] vhci_hcd: vhci_device speed not set [ 663.452662][ T10] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 663.460578][ T9] usb 33-1: new full-speed USB device number 9 using vhci_hcd [ 663.587769][ T24] vhci_hcd: vhci_device speed not set [ 663.732317][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 663.803932][T14145] netlink: 'syz.2.2058': attribute type 1 has an invalid length. [ 663.876907][T14147] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2058'. [ 663.970528][T14145] 8021q: adding VLAN 0 to HW filter on device bond7 [ 664.578735][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 664.589341][ T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 664.598640][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.611752][ T10] usb 1-1: config 0 descriptor?? [ 664.845942][T14161] random: crng reseeded on system resumption [ 665.218867][ T10] isku 0003:1E7D:319C.0024: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 665.253730][T14164] mkiss: ax0: crc mode is auto. [ 665.723368][ T10] isku 0003:1E7D:319C.0024: couldn't init struct isku_device [ 665.730808][ T10] isku 0003:1E7D:319C.0024: couldn't install keyboard [ 665.744261][ T10] isku 0003:1E7D:319C.0024: probe with driver isku failed with error -71 [ 665.753016][T14129] vhci_hcd: connection reset by peer [ 665.760411][T14172] lo speed is unknown, defaulting to 1000 [ 665.767504][T14172] lo speed is unknown, defaulting to 1000 [ 665.882532][ T12] vhci_hcd: stop threads [ 665.919208][ T12] vhci_hcd: release socket [ 666.023339][ T10] usb 1-1: USB disconnect, device number 49 [ 666.025236][ T12] vhci_hcd: disconnect device [ 666.133923][T14181] trusted_key: encrypted_key: insufficient parameters specified [ 666.148041][T14181] trusted_key: encrypted_key: keylen parameter is missing [ 666.174478][T14181] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 666.559701][T14171] fido_id[14171]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 668.066860][T14198] trusted_key: encrypted_key: insufficient parameters specified [ 668.075283][T14198] trusted_key: encrypted_key: keylen parameter is missing [ 668.085719][T14198] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 668.535497][T14204] netlink: 'syz.1.2072': attribute type 13 has an invalid length. [ 668.861345][ T9] vhci_hcd: vhci_device speed not set [ 668.883950][T14207] netlink: 'syz.4.2074': attribute type 1 has an invalid length. [ 668.937445][T14209] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2074'. [ 669.662109][T14207] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 669.799346][T14212] random: crng reseeded on system resumption [ 670.916344][T14241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2078'. [ 670.954761][ T30] audit: type=1400 audit(1756070420.509:604): avc: denied { bind } for pid=14223 comm="syz.4.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 671.027469][T14234] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2077'. [ 671.133128][ T30] audit: type=1400 audit(1756070420.509:605): avc: denied { write } for pid=14223 comm="syz.4.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 671.261141][ T9] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 671.991127][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 672.029826][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 672.039043][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.056985][ T9] usb 1-1: Product: syz [ 672.079001][ T9] usb 1-1: Manufacturer: syz [ 672.084637][ T9] usb 1-1: SerialNumber: syz [ 672.107674][ T9] r8152-cfgselector 1-1: Unknown version 0x0000 [ 672.120961][ T9] r8152-cfgselector 1-1: config 0 descriptor?? [ 673.195069][T14265] netlink: 'syz.1.2088': attribute type 1 has an invalid length. [ 673.260442][T14267] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2088'. [ 673.400742][T14265] 8021q: adding VLAN 0 to HW filter on device bond7 [ 674.006519][T14273] netlink: 9896 bytes leftover after parsing attributes in process `syz.2.2090'. [ 674.075243][ T10] r8152-cfgselector 1-1: USB disconnect, device number 50 [ 674.237482][T14282] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 674.885181][T14295] trusted_key: encrypted_key: insufficient parameters specified [ 674.899371][T14295] trusted_key: encrypted_key: keylen parameter is missing [ 674.926558][T14295] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 675.464413][T14298] FAULT_INJECTION: forcing a failure. [ 675.464413][T14298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 675.601121][T14298] CPU: 1 UID: 0 PID: 14298 Comm: syz.0.2098 Not tainted syzkaller #0 PREEMPT(full) [ 675.601148][T14298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 675.601159][T14298] Call Trace: [ 675.601165][T14298] [ 675.601172][T14298] dump_stack_lvl+0x16c/0x1f0 [ 675.601198][T14298] should_fail_ex+0x512/0x640 [ 675.601222][T14298] _copy_to_user+0x32/0xd0 [ 675.601248][T14298] simple_read_from_buffer+0xcb/0x170 [ 675.601269][T14298] proc_fail_nth_read+0x197/0x240 [ 675.601291][T14298] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 675.601314][T14298] ? rw_verify_area+0xcf/0x6c0 [ 675.601340][T14298] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 675.601361][T14298] vfs_read+0x1e4/0xcf0 [ 675.601382][T14298] ? __pfx___mutex_lock+0x10/0x10 [ 675.601403][T14298] ? __pfx_vfs_read+0x10/0x10 [ 675.601428][T14298] ? __fget_files+0x20e/0x3c0 [ 675.601455][T14298] ksys_read+0x12a/0x250 [ 675.601473][T14298] ? __pfx_ksys_read+0x10/0x10 [ 675.601499][T14298] do_syscall_64+0xcd/0x4c0 [ 675.601522][T14298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.601540][T14298] RIP: 0033:0x7f42f038d5fc [ 675.601555][T14298] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 675.601572][T14298] RSP: 002b:00007f42f1127030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 675.601590][T14298] RAX: ffffffffffffffda RBX: 00007f42f05b5fa0 RCX: 00007f42f038d5fc [ 675.601602][T14298] RDX: 000000000000000f RSI: 00007f42f11270a0 RDI: 0000000000000004 [ 675.601613][T14298] RBP: 00007f42f1127090 R08: 0000000000000000 R09: 0000000000000000 [ 675.601624][T14298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 675.601634][T14298] R13: 00007f42f05b6038 R14: 00007f42f05b5fa0 R15: 00007ffe1a2763f8 [ 675.601660][T14298] [ 676.032192][T14304] overlayfs: overlapping lowerdir path [ 676.119821][T14305] trusted_key: encrypted_key: insufficient parameters specified [ 676.134718][T14305] trusted_key: encrypted_key: keylen parameter is missing [ 676.162276][T14305] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 676.527174][T14307] random: crng reseeded on system resumption [ 677.201157][T13777] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 677.581202][T13777] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 677.594288][T13777] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 677.818420][ T30] audit: type=1400 audit(1756070427.209:606): avc: denied { ioctl } for pid=14325 comm="syz.1.2108" path="socket:[58186]" dev="sockfs" ino=58186 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 678.637951][T13777] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 678.651082][T13777] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 678.660184][T13777] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.679094][T13777] usb 6-1: config 0 descriptor?? [ 678.726974][T13777] em28xx 6-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 679.140187][T14337] mkiss: ax0: crc mode is auto. [ 679.231046][T14319] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 679.763235][T14352] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2112'. [ 679.783858][T14352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2112'. [ 680.501013][ T9] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 680.722507][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 680.995532][T14374] input: syz1 as /devices/virtual/input/input19 [ 681.022723][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 681.030143][T14374] FAULT_INJECTION: forcing a failure. [ 681.030143][T14374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 681.040984][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.053143][T14374] CPU: 0 UID: 0 PID: 14374 Comm: syz.1.2119 Not tainted syzkaller #0 PREEMPT(full) [ 681.053170][T14374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 681.053181][T14374] Call Trace: [ 681.053188][T14374] [ 681.053195][T14374] dump_stack_lvl+0x16c/0x1f0 [ 681.053220][T14374] should_fail_ex+0x512/0x640 [ 681.053245][T14374] _copy_from_user+0x2e/0xd0 [ 681.053269][T14374] input_event_from_user+0x133/0x3b0 [ 681.053296][T14374] ? __pfx_input_event_from_user+0x10/0x10 [ 681.053330][T14374] uinput_write+0xbb4/0x12b0 [ 681.053355][T14374] ? __pfx_uinput_write+0x10/0x10 [ 681.053376][T14374] ? bpf_lsm_file_permission+0x9/0x10 [ 681.053399][T14374] ? security_file_permission+0x71/0x210 [ 681.053426][T14374] ? rw_verify_area+0xcf/0x6c0 [ 681.053455][T14374] ? __pfx_uinput_write+0x10/0x10 [ 681.053472][T14374] vfs_write+0x29d/0x11d0 [ 681.053495][T14374] ? __pfx_vfs_write+0x10/0x10 [ 681.053512][T14374] ? find_held_lock+0x2b/0x80 [ 681.053535][T14374] ? __fget_files+0x204/0x3c0 [ 681.053559][T14374] ? __fget_files+0x20e/0x3c0 [ 681.053586][T14374] ksys_write+0x1f8/0x250 [ 681.053605][T14374] ? __pfx_ksys_write+0x10/0x10 [ 681.053631][T14374] do_syscall_64+0xcd/0x4c0 [ 681.053654][T14374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.053669][T14374] RIP: 0033:0x7f491278ebe9 [ 681.053685][T14374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 681.053702][T14374] RSP: 002b:00007f4913542038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 681.053720][T14374] RAX: ffffffffffffffda RBX: 00007f49129b5fa0 RCX: 00007f491278ebe9 [ 681.053732][T14374] RDX: 000000000000045c RSI: 00002000000000c0 RDI: 0000000000000005 [ 681.053743][T14374] RBP: 00007f4913542090 R08: 0000000000000000 R09: 0000000000000000 [ 681.053754][T14374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 681.053765][T14374] R13: 00007f49129b6038 R14: 00007f49129b5fa0 R15: 00007ffe3861aae8 [ 681.053791][T14374] [ 681.259588][ T9] usb 1-1: Product: syz [ 681.263989][ T9] usb 1-1: Manufacturer: syz [ 681.268578][ T9] usb 1-1: SerialNumber: syz [ 681.293452][ T9] r8152-cfgselector 1-1: Unknown version 0x0000 [ 681.299793][ T9] r8152-cfgselector 1-1: config 0 descriptor?? [ 681.336775][T13777] usb 6-1: USB disconnect, device number 58 [ 681.614876][T14384] syzkaller0: entered promiscuous mode [ 681.871626][ T9] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 681.982169][T13777] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 682.033470][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 682.044934][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 682.059743][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 682.087142][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.150507][ T9] usb 3-1: config 0 descriptor?? [ 682.211040][ T24] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 682.241895][T13777] usb 5-1: Using ep0 maxpacket: 8 [ 682.307218][T13777] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 682.319204][T13777] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.471168][T13777] usb 5-1: Product: syz [ 682.537903][T13777] usb 5-1: Manufacturer: syz [ 682.564337][T13777] usb 5-1: SerialNumber: syz [ 682.603674][T13777] usb 5-1: config 0 descriptor?? [ 682.614677][ T24] usb 2-1: config 127 has an invalid interface number: 124 but max is 0 [ 682.623386][ T24] usb 2-1: config 127 has no interface number 0 [ 682.629685][ T24] usb 2-1: config 127 interface 124 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 682.643970][T13777] gspca_main: sq905-2.14.0 probing 2770:9120 [ 682.656607][ T24] usb 2-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=1d.4f [ 682.666104][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.767688][ T9] isku 0003:1E7D:319C.0025: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 682.920021][ T5965] r8152-cfgselector 1-1: USB disconnect, device number 51 [ 683.213403][T14397] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 683.219908][T14397] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 683.228470][T14397] vhci_hcd vhci_hcd.0: Device attached [ 683.261133][ T9] isku 0003:1E7D:319C.0025: couldn't init struct isku_device [ 683.389559][ T9] isku 0003:1E7D:319C.0025: couldn't install keyboard [ 683.416313][ T5965] vhci_hcd: vhci_device speed not set [ 683.478854][ T9] isku 0003:1E7D:319C.0025: probe with driver isku failed with error -71 [ 683.491129][ T5965] usb 33-1: new full-speed USB device number 10 using vhci_hcd [ 683.605132][ T9] usb 3-1: USB disconnect, device number 55 [ 683.635994][ T10] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 683.751286][T13777] gspca_sq905: sq905_command: usb_control_msg failed 2 (-110) [ 683.758799][T13777] sq905 5-1:0.0: probe with driver sq905 failed with error -110 [ 683.845046][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 683.857585][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.899263][ T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 683.939809][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.070349][ T10] usb 1-1: config 0 descriptor?? [ 684.511058][ T10] isku 0003:1E7D:319C.0026: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 684.701905][ T10] isku 0003:1E7D:319C.0026: couldn't init struct isku_device [ 684.713492][ T10] isku 0003:1E7D:319C.0026: couldn't install keyboard [ 684.726988][T14398] vhci_hcd: connection reset by peer [ 684.729189][ T10] isku 0003:1E7D:319C.0026: probe with driver isku failed with error -71 [ 684.741442][ T6244] vhci_hcd: stop threads [ 684.746963][ T10] usb 1-1: USB disconnect, device number 52 [ 684.749315][ T6244] vhci_hcd: release socket [ 684.763773][ T6244] vhci_hcd: disconnect device [ 685.220709][ T24] peak_usb 2-1:127.124 can0: unable to request usb[type=0 value=1] err=-71 [ 685.278901][ T24] peak_usb 2-1:127.124: unable to read PCAN-Chip USB firmware info (err -71) [ 685.292624][T13777] usb 5-1: USB disconnect, device number 52 [ 685.354880][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.414404][ T24] peak_usb 2-1:127.124: probe with driver peak_usb failed with error -71 [ 685.797220][T14415] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 685.803749][T14415] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 685.827392][ T24] usb 2-1: USB disconnect, device number 44 [ 685.865703][T14420] trusted_key: encrypted_key: insufficient parameters specified [ 685.874375][T14420] trusted_key: encrypted_key: keylen parameter is missing [ 685.883164][T14420] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 685.894191][T14420] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 685.925140][T14415] vhci_hcd vhci_hcd.0: Device attached [ 686.111203][T13777] vhci_hcd: vhci_device speed not set [ 686.208111][T13777] usb 35-1: new full-speed USB device number 8 using vhci_hcd [ 686.331097][ T10] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 686.504608][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 686.536233][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 686.554154][ T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 686.569386][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.584626][ T10] usb 2-1: config 0 descriptor?? [ 686.607766][T14439] binder: 14437:14439 ioctl 89f3 2000000003c0 returned -22 [ 686.633078][T14439] binder: 14437:14439 ioctl c0306201 2000000004c0 returned -14 [ 686.656118][T14439] binder: 14437:14439 ioctl c0306201 2000000001c0 returned -14 [ 686.661109][ T24] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 686.669058][T14439] binder: 14437:14439 ioctl c0306201 200000004a40 returned -14 [ 686.759530][ T30] audit: type=1400 audit(1756070436.349:607): avc: denied { read } for pid=14437 comm="syz.5.2128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 686.816065][T14446] binder: 14437:14446 ioctl 40182103 200000000840 returned -22 [ 686.833062][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 686.858978][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 686.877888][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 686.890844][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 686.908508][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.936573][ T24] usb 5-1: config 0 descriptor?? [ 686.963130][ T24] em28xx 5-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 686.999817][ T10] isku 0003:1E7D:319C.0027: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 687.212935][T14432] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 687.261429][ T10] isku 0003:1E7D:319C.0027: couldn't init struct isku_device [ 687.269521][ T10] isku 0003:1E7D:319C.0027: couldn't install keyboard [ 687.283745][ T9] usb 5-1: USB disconnect, device number 53 [ 687.295092][T14418] vhci_hcd: connection reset by peer [ 687.313581][ T2988] vhci_hcd: stop threads [ 687.317874][ T2988] vhci_hcd: release socket [ 687.336072][ T2988] vhci_hcd: disconnect device [ 687.337135][T14438] binder: 14437:14438 ioctl c0306201 200000000380 returned -14 [ 687.350292][ T10] isku 0003:1E7D:319C.0027: probe with driver isku failed with error -71 [ 687.393804][ T10] usb 2-1: USB disconnect, device number 45 [ 687.492827][T14459] input: syz1 as /devices/virtual/input/input20 [ 687.827951][ T9] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 687.837748][ T30] audit: type=1400 audit(1756070437.369:608): avc: denied { read } for pid=14458 comm="syz.2.2135" name="file0" dev="tmpfs" ino=2236 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 688.038727][ T30] audit: type=1400 audit(1756070437.389:609): avc: denied { map } for pid=14458 comm="syz.2.2135" path="/415/file0" dev="tmpfs" ino=2236 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 688.193119][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 688.359420][ T30] audit: type=1400 audit(1756070437.949:610): avc: denied { mounton } for pid=14458 comm="syz.2.2135" path="/syzcgroup/unified/syz2" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 688.361000][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.361045][ T9] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 688.361069][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.816311][ T9] usb 6-1: config 0 descriptor?? [ 688.842696][T14478] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2141'. [ 688.894074][ T5965] vhci_hcd: vhci_device speed not set [ 688.934342][T14486] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2141'. [ 688.997119][T14479] tty tty23: ldisc open failed (-12), clearing slot 22 [ 689.331802][ T9] isku 0003:1E7D:319C.0028: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.5-1/input0 [ 689.381840][T14506] trusted_key: encrypted_key: insufficient parameters specified [ 689.389922][T14506] trusted_key: encrypted_key: keylen parameter is missing [ 689.398701][T14506] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 689.409722][T14506] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 689.639088][ T9] isku 0003:1E7D:319C.0028: couldn't init struct isku_device [ 689.670754][ T9] isku 0003:1E7D:319C.0028: couldn't install keyboard [ 689.724706][ T9] isku 0003:1E7D:319C.0028: probe with driver isku failed with error -71 [ 689.820798][ T9] usb 6-1: USB disconnect, device number 59 [ 690.422013][T14520] syz.5.2150: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 690.439977][T14520] CPU: 0 UID: 0 PID: 14520 Comm: syz.5.2150 Not tainted syzkaller #0 PREEMPT(full) [ 690.440002][T14520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 690.440012][T14520] Call Trace: [ 690.440019][T14520] [ 690.440026][T14520] dump_stack_lvl+0x16c/0x1f0 [ 690.440050][T14520] warn_alloc+0x248/0x3a0 [ 690.440071][T14520] ? __pfx_warn_alloc+0x10/0x10 [ 690.440087][T14520] ? __pfx_stack_trace_save+0x10/0x10 [ 690.440117][T14520] ? kasan_save_stack+0x42/0x60 [ 690.440132][T14520] ? kasan_save_stack+0x33/0x60 [ 690.440147][T14520] ? kasan_save_track+0x14/0x30 [ 690.440162][T14520] ? xskq_create+0x52/0x1d0 [ 690.440185][T14520] ? xsk_setsockopt+0x792/0x9a0 [ 690.440207][T14520] ? do_sock_setsockopt+0xf3/0x1d0 [ 690.440231][T14520] ? xskq_create+0xfb/0x1d0 [ 690.440257][T14520] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 690.440292][T14520] ? xskq_create+0xfb/0x1d0 [ 690.440324][T14520] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 690.440357][T14520] ? xskq_create+0xfb/0x1d0 [ 690.440382][T14520] vmalloc_user_noprof+0x9e/0xe0 [ 690.440406][T14520] ? xskq_create+0xfb/0x1d0 [ 690.440432][T14520] xskq_create+0xfb/0x1d0 [ 690.440458][T14520] xsk_setsockopt+0x792/0x9a0 [ 690.440484][T14520] ? __pfx_xsk_setsockopt+0x10/0x10 [ 690.440507][T14520] ? find_held_lock+0x2b/0x80 [ 690.440533][T14520] ? selinux_socket_setsockopt+0x6a/0x80 [ 690.440555][T14520] ? __pfx_xsk_setsockopt+0x10/0x10 [ 690.440580][T14520] do_sock_setsockopt+0xf3/0x1d0 [ 690.440605][T14520] __sys_setsockopt+0x1a0/0x230 [ 690.440628][T14520] __x64_sys_setsockopt+0xbd/0x160 [ 690.440645][T14520] ? do_syscall_64+0x91/0x4c0 [ 690.440665][T14520] ? lockdep_hardirqs_on+0x7c/0x110 [ 690.440683][T14520] do_syscall_64+0xcd/0x4c0 [ 690.440704][T14520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.440721][T14520] RIP: 0033:0x7fae3818ebe9 [ 690.440735][T14520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 690.440759][T14520] RSP: 002b:00007fae38f80038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 690.440776][T14520] RAX: ffffffffffffffda RBX: 00007fae383b6090 RCX: 00007fae3818ebe9 [ 690.440786][T14520] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 690.440795][T14520] RBP: 00007fae38211e19 R08: 0000000000000004 R09: 0000000000000000 [ 690.440806][T14520] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 690.440817][T14520] R13: 00007fae383b6128 R14: 00007fae383b6090 R15: 00007ffdb1655678 [ 690.440842][T14520] [ 690.440849][T14520] Mem-Info: [ 690.706833][T14520] active_anon:10172 inactive_anon:0 isolated_anon:0 [ 690.706833][T14520] active_file:15959 inactive_file:40880 isolated_file:0 [ 690.706833][T14520] unevictable:768 dirty:256 writeback:0 [ 690.706833][T14520] slab_reclaimable:12857 slab_unreclaimable:118197 [ 690.706833][T14520] mapped:31891 shmem:1363 pagetables:1448 [ 690.706833][T14520] sec_pagetables:0 bounce:0 [ 690.706833][T14520] kernel_misc_reclaimable:0 [ 690.706833][T14520] free:1245788 free_pcp:18572 free_cma:0 [ 690.723285][T14523] block nbd0: Attempted send on invalid socket [ 690.752325][ C0] vkms_vblank_simulate: vblank timer overrun [ 690.752878][T14520] Node 0 active_anon:40688kB inactive_anon:0kB active_file:63836kB inactive_file:163320kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127564kB dirty:1024kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12968kB pagetables:5648kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 690.800759][T14523] blk_print_req_error: 2 callbacks suppressed [ 690.800777][T14523] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 690.831116][T14520] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 690.864097][T14520] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 690.892835][ C0] vkms_vblank_simulate: vblank timer overrun [ 690.915186][T14520] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 690.931426][T14520] Node 0 DMA32 free:1071288kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40676kB inactive_anon:0kB active_file:63836kB inactive_file:161992kB unevictable:1536kB writepending:1024kB present:3129332kB managed:2539384kB mlocked:0kB bounce:0kB free_pcp:57176kB local_pcp:22540kB free_cma:0kB [ 690.991132][T14520] lowmem_reserve[]: 0 0 1 1 1 [ 691.005305][T14520] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:1328kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:8kB free_cma:0kB [ 691.034408][ C0] vkms_vblank_simulate: vblank timer overrun [ 691.073901][ T30] audit: type=1400 audit(1756070440.669:611): avc: denied { append } for pid=14519 comm="syz.0.2148" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 691.097375][T14520] lowmem_reserve[]: 0 0 0 0 0 [ 691.107365][T14520] Node 1 Normal free:3896492kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17028kB local_pcp:8352kB free_cma:0kB [ 691.138571][ C0] vkms_vblank_simulate: vblank timer overrun [ 691.154481][T14520] lowmem_reserve[]: 0 0 0 0 0 [ 691.159372][T14520] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 691.179057][T14520] Node 0 DMA32: 905*4kB (UME) 239*8kB (UME) 556*16kB (UME) 207*32kB (UME) 137*64kB (UME) 49*128kB (UME) 21*256kB (UM) 21*512kB (UM) 1*1024kB (M) 3*2048kB (UM) 247*4096kB (M) = 1071100kB [ 691.243977][T14520] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 691.336137][T14520] Node 1 Normal: 193*4kB (UE) 47*8kB (UME) 35*16kB (UME) 64*32kB (UME) 22*64kB (UME) 7*128kB (UME) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 948*4096kB (M) = 3896492kB [ 691.390968][ T9] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 691.405232][T14520] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 691.431155][T13777] vhci_hcd: vhci_device speed not set [ 691.462961][T14520] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 691.504674][T14534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2153'. [ 691.513905][T14534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2153'. [ 691.526525][T14534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2153'. [ 691.535668][T14534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2153'. [ 691.618937][T14520] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 691.628553][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 691.635339][ T9] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 691.658055][T14520] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 691.669070][ T9] usb 2-1: config 0 has no interface number 0 [ 691.729713][T14539] overlayfs: overlapping lowerdir path [ 691.812684][T14540] trusted_key: encrypted_key: insufficient parameters specified [ 691.827722][T14540] trusted_key: encrypted_key: keylen parameter is missing [ 691.855500][T14540] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 692.154496][T14534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2153'. [ 692.173839][T14534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2153'. [ 692.177090][T14520] 61048 total pagecache pages [ 692.186088][ T9] usb 2-1: config 0 interface 230 has no altsetting 0 [ 692.194760][T14534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2153'. [ 692.205852][T14534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2153'. [ 692.206154][ T9] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 692.224107][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.232153][ T9] usb 2-1: Product: syz [ 692.232175][ T9] usb 2-1: Manufacturer: syz [ 692.232190][ T9] usb 2-1: SerialNumber: syz [ 692.241400][ T9] usb 2-1: config 0 descriptor?? [ 692.252586][T14520] 0 pages in swap cache [ 692.421462][T14520] Free swap = 124996kB [ 692.426321][T14520] Total swap = 124996kB [ 692.430475][T14520] 2097051 pages RAM [ 692.444719][ T9] ums-usbat 2-1:0.230: USB Mass Storage device detected [ 692.473476][ T9] ums-usbat 2-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 692.482797][T14520] 0 pages HighMem/MovableOnly [ 692.487690][T14520] 430243 pages reserved [ 692.509395][T14520] 0 pages cma reserved [ 693.161033][ T10] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 693.372680][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 693.383830][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 693.451196][T14557] loop2: detected capacity change from 0 to 7 [ 693.465798][ T10] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 693.475470][T14557] loop2: p1 p4 [ 693.480173][T14557] loop2: partition table partially beyond EOD, truncated [ 693.489571][T14557] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 693.561036][T14557] loop2: p4 start 2495 is beyond EOD, truncated [ 693.569519][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.600160][ T30] audit: type=1400 audit(1756070443.179:612): avc: denied { create } for pid=14553 comm="syz.2.2158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 693.706089][ T10] usb 5-1: config 0 descriptor?? [ 694.271527][ T10] isku 0003:1E7D:319C.0029: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.4-1/input0 [ 694.480477][T14570] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 694.487003][T14570] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 694.491005][T13777] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 694.573284][ T5957] usb 5-1: USB disconnect, device number 54 [ 694.596985][T14570] vhci_hcd vhci_hcd.0: Device attached [ 694.701705][T13777] usb 1-1: Using ep0 maxpacket: 32 [ 694.771021][ T10] vhci_hcd: vhci_device speed not set [ 694.813126][T13777] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 694.828763][T13777] usb 1-1: config 0 has no interface number 0 [ 694.843549][ T10] usb 43-1: new full-speed USB device number 10 using vhci_hcd [ 694.855506][ T9] ums-usbat 2-1:0.230: probe with driver ums-usbat failed with error -5 [ 694.871073][T13777] usb 1-1: config 0 interface 196 has no altsetting 0 [ 694.892677][T13777] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 694.896630][ T9] usb 2-1: USB disconnect, device number 46 [ 694.901934][T13777] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.923074][ T978] usb 6-1: new full-speed USB device number 60 using dummy_hcd [ 694.986951][T13777] usb 1-1: Product: syz [ 694.994654][T13777] usb 1-1: Manufacturer: syz [ 695.001007][T13777] usb 1-1: SerialNumber: syz [ 695.027697][T13777] usb 1-1: config 0 descriptor?? [ 695.084480][ T978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 695.103518][ T978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 695.124614][ T978] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 695.181998][ T978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.611044][T14581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.620976][T14581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.723783][ T978] usb 6-1: config 0 descriptor?? [ 695.974774][T13777] ipheth 1-1:0.196: Unable to find endpoints [ 696.098983][T13777] usb 1-1: USB disconnect, device number 53 [ 697.122634][ T978] isku 0003:1E7D:319C.002A: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.5-1/input0 [ 697.627106][T13777] usb 6-1: USB disconnect, device number 60 [ 697.640127][T14571] vhci_hcd: connection reset by peer [ 697.654726][T12419] vhci_hcd: stop threads [ 697.674881][T12419] vhci_hcd: release socket [ 697.782083][T12419] vhci_hcd: disconnect device [ 697.938547][T14605] lo speed is unknown, defaulting to 1000 [ 697.945740][T14605] lo speed is unknown, defaulting to 1000 [ 698.588894][T14611] mkiss: ax0: crc mode is auto. [ 699.069669][T14617] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 699.992504][ T10] vhci_hcd: vhci_device speed not set [ 700.461435][T14637] __nla_validate_parse: 44 callbacks suppressed [ 700.461449][T14637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2178'. [ 700.985493][T14646] FAULT_INJECTION: forcing a failure. [ 700.985493][T14646] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 701.000551][T14646] CPU: 1 UID: 0 PID: 14646 Comm: syz.1.2182 Not tainted syzkaller #0 PREEMPT(full) [ 701.000576][T14646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 701.000587][T14646] Call Trace: [ 701.000601][T14646] [ 701.000609][T14646] dump_stack_lvl+0x16c/0x1f0 [ 701.000635][T14646] should_fail_ex+0x512/0x640 [ 701.000660][T14646] should_fail_alloc_page+0xe7/0x130 [ 701.000684][T14646] prepare_alloc_pages+0x3c2/0x610 [ 701.000713][T14646] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 701.000736][T14646] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 701.000763][T14646] ? is_bpf_text_address+0x94/0x1a0 [ 701.000783][T14646] ? kernel_text_address+0x8d/0x100 [ 701.000804][T14646] ? __kernel_text_address+0xd/0x40 [ 701.000824][T14646] ? unwind_get_return_address+0x59/0xa0 [ 701.000845][T14646] ? arch_stack_walk+0xa6/0x100 [ 701.000869][T14646] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 701.000903][T14646] ? __pfx_stack_trace_save+0x10/0x10 [ 701.000929][T14646] ? __lock_acquire+0x62e/0x1ce0 [ 701.000955][T14646] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 701.000978][T14646] ? policy_nodemask+0xea/0x4e0 [ 701.001000][T14646] alloc_pages_mpol+0x1fb/0x550 [ 701.001022][T14646] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 701.001045][T14646] ? filemap_get_entry+0x1a7/0x3b0 [ 701.001069][T14646] folio_alloc_noprof+0x20/0x2d0 [ 701.001093][T14646] filemap_alloc_folio_noprof+0x3a1/0x470 [ 701.001122][T14646] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 701.001158][T14646] __filemap_get_folio+0x5e1/0xc30 [ 701.001186][T14646] kvm_gmem_fallocate+0x2de/0x870 [ 701.001220][T14646] ? __pfx_kvm_gmem_fallocate+0x10/0x10 [ 701.001255][T14646] ? __pfx_kvm_gmem_fallocate+0x10/0x10 [ 701.001282][T14646] vfs_fallocate+0x5b1/0x10e0 [ 701.001306][T14646] ? __pfx_vfs_fallocate+0x10/0x10 [ 701.001334][T14646] __x64_sys_fallocate+0xd5/0x150 [ 701.001358][T14646] do_syscall_64+0xcd/0x4c0 [ 701.001381][T14646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.001399][T14646] RIP: 0033:0x7f491278ebe9 [ 701.001415][T14646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 701.001432][T14646] RSP: 002b:00007f49109f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 701.001450][T14646] RAX: ffffffffffffffda RBX: 00007f49129b6180 RCX: 00007f491278ebe9 [ 701.001462][T14646] RDX: 0000000100000000 RSI: 0000000000000001 RDI: 0000000000000007 [ 701.001474][T14646] RBP: 00007f49109f6090 R08: 0000000000000000 R09: 0000000000000000 [ 701.001485][T14646] R10: 0000000080000000 R11: 0000000000000246 R12: 0000000000000001 [ 701.001496][T14646] R13: 00007f49129b6218 R14: 00007f49129b6180 R15: 00007ffe3861aae8 [ 701.001522][T14646] [ 701.774158][ T30] audit: type=1400 audit(1756070451.319:613): avc: denied { remount } for pid=14653 comm="syz.4.2184" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 701.911109][ T5965] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 702.076415][ T5965] usb 3-1: Using ep0 maxpacket: 8 [ 702.311443][T13777] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 702.393135][ T5965] usb 3-1: config 6 has an invalid interface number: 213 but max is 1 [ 702.414818][ T5965] usb 3-1: config 6 has an invalid interface number: 211 but max is 1 [ 702.425061][ T5965] usb 3-1: config 6 has no interface number 0 [ 702.433313][ T5965] usb 3-1: config 6 has no interface number 1 [ 702.479573][ T5965] usb 3-1: config 6 interface 213 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 702.493841][ T5965] usb 3-1: config 6 interface 213 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 702.505758][ T5965] usb 3-1: config 6 interface 213 altsetting 0 endpoint 0x83 has an invalid bInterval 63, changing to 7 [ 702.518186][ T5965] usb 3-1: config 6 interface 213 altsetting 0 endpoint 0x83 has invalid maxpacket 57448, setting to 1024 [ 702.549698][ T5965] usb 3-1: config 6 interface 213 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 702.563145][T13777] usb 6-1: Using ep0 maxpacket: 8 [ 702.578388][ T5965] usb 3-1: config 6 interface 211 has no altsetting 0 [ 702.585377][T13777] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 702.593910][T13777] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 702.606066][T13777] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 702.621019][T13777] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 702.639827][ T5965] usb 3-1: New USB device found, idVendor=eb1a, idProduct=e357, bcdDevice=85.86 [ 702.656466][T13777] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 702.675076][ T5965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.745513][ T5965] usb 3-1: Product: syz [ 702.753353][T13777] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 702.763409][ T5965] usb 3-1: Manufacturer: syz [ 702.775789][ T5965] usb 3-1: SerialNumber: syz [ 702.781133][T13777] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.025902][T13777] usb 6-1: GET_CAPABILITIES returned 0 [ 703.036014][T13777] usbtmc 6-1:16.0: can't read capabilities [ 703.282879][T14676] FAULT_INJECTION: forcing a failure. [ 703.282879][T14676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 703.330370][T14656] usbtmc 6-1:16.0: usb_control_msg returned -71 [ 703.333383][T13777] usb 6-1: USB disconnect, device number 61 [ 703.343938][T14677] usbtmc 6-1:16.0: send_request_dev_dep_msg_in returned -19 [ 703.358963][T14676] CPU: 0 UID: 0 PID: 14676 Comm: syz.1.2192 Not tainted syzkaller #0 PREEMPT(full) [ 703.358991][T14676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 703.359002][T14676] Call Trace: [ 703.359008][T14676] [ 703.359016][T14676] dump_stack_lvl+0x16c/0x1f0 [ 703.359041][T14676] should_fail_ex+0x512/0x640 [ 703.359065][T14676] _copy_from_user+0x2e/0xd0 [ 703.359089][T14676] copy_msghdr_from_user+0x98/0x160 [ 703.359109][T14676] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 703.359142][T14676] ___sys_sendmsg+0xfe/0x1d0 [ 703.359161][T14676] ? __pfx____sys_sendmsg+0x10/0x10 [ 703.359210][T14676] __sys_sendmsg+0x16d/0x220 [ 703.359230][T14676] ? __pfx___sys_sendmsg+0x10/0x10 [ 703.359269][T14676] do_syscall_64+0xcd/0x4c0 [ 703.359291][T14676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.359309][T14676] RIP: 0033:0x7f491278ebe9 [ 703.359324][T14676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 703.359341][T14676] RSP: 002b:00007f4913542038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 703.359358][T14676] RAX: ffffffffffffffda RBX: 00007f49129b5fa0 RCX: 00007f491278ebe9 [ 703.359370][T14676] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 703.359387][T14676] RBP: 00007f4913542090 R08: 0000000000000000 R09: 0000000000000000 [ 703.359397][T14676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 703.359408][T14676] R13: 00007f49129b6038 R14: 00007f49129b5fa0 R15: 00007ffe3861aae8 [ 703.359433][T14676] [ 704.358798][T14687] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2195'. [ 704.960844][T14694] trusted_key: encrypted_key: insufficient parameters specified [ 704.972401][T14694] trusted_key: encrypted_key: keylen parameter is missing [ 704.998218][T14694] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 705.009981][T14694] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 705.571002][ T10] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 705.634497][T14698] FAULT_INJECTION: forcing a failure. [ 705.634497][T14698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 705.647694][T14698] CPU: 0 UID: 0 PID: 14698 Comm: syz.0.2198 Not tainted syzkaller #0 PREEMPT(full) [ 705.647720][T14698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 705.647729][T14698] Call Trace: [ 705.647738][T14698] [ 705.647745][T14698] dump_stack_lvl+0x16c/0x1f0 [ 705.647770][T14698] should_fail_ex+0x512/0x640 [ 705.647793][T14698] _copy_from_user+0x2e/0xd0 [ 705.647815][T14698] copy_msghdr_from_user+0x98/0x160 [ 705.647832][T14698] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 705.647844][T14698] ? trace_sched_exit_tp+0xd1/0x120 [ 705.647864][T14698] ___sys_sendmsg+0xfe/0x1d0 [ 705.647877][T14698] ? __pfx____sys_sendmsg+0x10/0x10 [ 705.647891][T14698] ? lockdep_hardirqs_on+0x7c/0x110 [ 705.647939][T14698] ? __sys_sendmmsg+0x1bc/0x420 [ 705.647955][T14698] ? __sys_sendmmsg+0x1c9/0x420 [ 705.647976][T14698] __sys_sendmmsg+0x200/0x420 [ 705.647990][T14698] ? __pfx___sys_sendmmsg+0x10/0x10 [ 705.648007][T14698] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 705.648026][T14698] ? fput+0x9b/0xd0 [ 705.648044][T14698] ? ksys_write+0x1ac/0x250 [ 705.648062][T14698] ? __pfx_ksys_write+0x10/0x10 [ 705.648084][T14698] __x64_sys_sendmmsg+0x9c/0x100 [ 705.648101][T14698] ? lockdep_hardirqs_on+0x7c/0x110 [ 705.648117][T14698] do_syscall_64+0xcd/0x4c0 [ 705.648133][T14698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.648145][T14698] RIP: 0033:0x7f42f038ebe9 [ 705.648155][T14698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 705.648166][T14698] RSP: 002b:00007f42ee5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 705.648178][T14698] RAX: ffffffffffffffda RBX: 00007f42f05b6090 RCX: 00007f42f038ebe9 [ 705.648188][T14698] RDX: 0400000000000174 RSI: 0000200000008380 RDI: 0000000000000004 [ 705.648199][T14698] RBP: 00007f42ee5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 705.648209][T14698] R10: 0000000004008890 R11: 0000000000000246 R12: 0000000000000001 [ 705.648219][T14698] R13: 00007f42f05b6128 R14: 00007f42f05b6090 R15: 00007ffe1a2763f8 [ 705.648263][T14698] [ 706.010984][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 706.017812][ T10] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 706.028796][ T10] usb 5-1: config 0 has no interface number 0 [ 706.034945][ T10] usb 5-1: config 0 interface 196 has no altsetting 0 [ 706.046872][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 706.055992][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.064027][ T10] usb 5-1: Product: syz [ 706.068176][ T10] usb 5-1: Manufacturer: syz [ 706.072784][ T10] usb 5-1: SerialNumber: syz [ 706.079595][ T10] usb 5-1: config 0 descriptor?? [ 707.055673][T14693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.064336][T14693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.081134][ T10] ipheth 5-1:0.196: Unable to find endpoints [ 707.180682][ T10] usb 5-1: USB disconnect, device number 55 [ 707.221262][T14706] netlink: 'syz.5.2199': attribute type 1 has an invalid length. [ 707.545168][T14714] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2202'. [ 707.581771][ T5965] em28xx 3-1:6.213: New device syz syz @ 480 Mbps (eb1a:e357, interface 213, class 213) [ 707.608431][ T5965] em28xx 3-1:6.213: Audio interface 213 found (Vendor Class) [ 707.614855][ T30] audit: type=1326 audit(1756070457.199:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14713 comm="syz.0.2202" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f42f038ebe9 code=0x0 [ 707.616368][T14704] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2199'. [ 707.964243][T14706] 8021q: adding VLAN 0 to HW filter on device bond1 [ 708.001417][ T5965] em28xx 3-1:6.213: unknown em28xx chip ID (0) [ 708.010560][T14719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2202'. [ 708.052404][ T5965] em28xx 3-1:6.213: Config register raw data: 0xfffffffb [ 708.075862][ T5965] em28xx 3-1:6.213: AC97 chip type couldn't be determined [ 708.106749][ T5965] em28xx 3-1:6.213: No AC97 audio processor [ 708.258527][ T5965] usb 3-1: USB disconnect, device number 56 [ 708.493243][ T5965] em28xx 3-1:6.213: Disconnecting em28xx [ 708.535589][T14727] binder: BINDER_SET_CONTEXT_MGR already set [ 708.548057][ T5965] em28xx 3-1:6.213: Freeing device [ 708.565713][T14728] mkiss: ax0: crc mode is auto. [ 708.580585][T14727] binder: 14726:14727 ioctl 4018620d 200000004a80 returned -16 [ 708.889314][T14731] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2206'. [ 709.460503][T14742] siw: device registration error -23 [ 710.445412][ T30] audit: type=1400 audit(1756070459.999:615): avc: denied { setattr } for pid=14745 comm="syz.0.2211" path="socket:[59876]" dev="sockfs" ino=59876 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 710.640674][ T5965] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 710.650711][ T24] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 710.821049][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 710.827446][ T5965] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 710.839897][ T24] usb 6-1: config 0 has an invalid interface number: 237 but max is 0 [ 710.853930][ T5965] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 710.866548][ T24] usb 6-1: config 0 has no interface number 0 [ 710.874053][ T24] usb 6-1: config 0 interface 237 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 710.884115][ T5965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.892517][ T24] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid maxpacket 943, setting to 64 [ 710.966821][ T5965] usb 5-1: config 0 descriptor?? [ 711.023279][ T24] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice=72.aa [ 711.032568][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.040534][ T24] usb 6-1: Product: syz [ 711.044880][ T24] usb 6-1: Manufacturer: syz [ 711.049526][ T24] usb 6-1: SerialNumber: syz [ 711.061350][ T5965] pwc: Askey VC010 type 2 USB webcam detected. [ 711.088511][ T24] usb 6-1: config 0 descriptor?? [ 711.098849][T14753] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 711.492803][ T5965] pwc: recv_control_msg error -32 req 02 val 2b00 [ 711.578425][ T5965] pwc: recv_control_msg error -32 req 02 val 2700 [ 711.653734][ T5965] pwc: recv_control_msg error -32 req 02 val 2c00 [ 711.661625][ T5965] pwc: recv_control_msg error -32 req 04 val 1000 [ 711.668912][ T5965] pwc: recv_control_msg error -32 req 04 val 1300 [ 711.676032][ T5965] pwc: recv_control_msg error -32 req 04 val 1400 [ 711.683150][ T5965] pwc: recv_control_msg error -32 req 02 val 2000 [ 711.690185][ T5965] pwc: recv_control_msg error -32 req 02 val 2100 [ 711.697270][ T5965] pwc: recv_control_msg error -32 req 04 val 1500 [ 711.704293][ T5965] pwc: recv_control_msg error -32 req 02 val 2500 [ 711.711396][ T5965] pwc: recv_control_msg error -32 req 02 val 2400 [ 711.814233][ T5965] pwc: recv_control_msg error -32 req 02 val 2600 [ 711.822971][ T5965] pwc: recv_control_msg error -71 req 02 val 2900 [ 711.829752][ T5965] pwc: recv_control_msg error -71 req 02 val 2800 [ 711.847811][ T5965] pwc: recv_control_msg error -71 req 04 val 1100 [ 711.855596][ T5965] pwc: recv_control_msg error -71 req 04 val 1200 [ 711.882531][ T5965] pwc: Registered as video103. [ 712.936273][ T5965] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input21 [ 712.995060][ T5965] usb 5-1: USB disconnect, device number 56 [ 714.090184][T14774] netlink: 'syz.0.2216': attribute type 1 has an invalid length. [ 714.139365][T14774] 8021q: adding VLAN 0 to HW filter on device bond4 [ 714.154578][T14774] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2216'. [ 714.177698][ T912] usb 6-1: USB disconnect, device number 62 [ 714.231281][ T5849] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 714.239865][ T5849] Bluetooth: hci1: Injecting HCI hardware error event [ 714.249567][ T5850] Bluetooth: hci1: hardware error 0x00 [ 714.381088][ T5965] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 714.638213][ T5965] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 714.650487][ T5965] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 714.660688][ T5965] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 714.669820][ T5965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.690389][ T5965] usb 5-1: config 0 descriptor?? [ 714.738702][T14796] siw: device registration error -23 [ 714.781595][ T912] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 715.581083][ T912] usb 2-1: Using ep0 maxpacket: 32 [ 715.609545][ T912] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 715.789071][ T912] usb 2-1: config 0 has no interface number 0 [ 715.804578][ T912] usb 2-1: config 0 interface 196 has no altsetting 0 [ 715.814907][ T912] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 715.834381][T13777] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 715.845512][ T5965] isku 0003:1E7D:319C.002B: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.4-1/input0 [ 715.859439][ T912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.868992][ T912] usb 2-1: Product: syz [ 715.874266][ T912] usb 2-1: Manufacturer: syz [ 715.879662][ T912] usb 2-1: SerialNumber: syz [ 715.915977][ T912] usb 2-1: config 0 descriptor?? [ 716.025068][ T5965] isku 0003:1E7D:319C.002B: couldn't init struct isku_device [ 716.032782][T13777] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 716.057144][ T5965] isku 0003:1E7D:319C.002B: couldn't install keyboard [ 716.067074][T13777] usb 1-1: config 0 has no interfaces? [ 716.079672][ T5965] isku 0003:1E7D:319C.002B: probe with driver isku failed with error -71 [ 716.089010][T13777] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 716.098546][T13777] usb 1-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 716.117362][ T5965] usb 5-1: USB disconnect, device number 57 [ 716.123654][T13777] usb 1-1: Product: syz [ 716.152750][T13777] usb 1-1: Manufacturer: syz [ 716.363026][T14814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.373776][T14814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.473815][ T5850] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 716.524536][T13777] usb 1-1: SerialNumber: syz [ 716.548490][T13777] usb 1-1: config 0 descriptor?? [ 716.783348][ T10] usb 1-1: USB disconnect, device number 54 [ 716.800294][ T912] ipheth 2-1:0.196: Unable to find endpoints [ 716.820598][ T912] usb 2-1: USB disconnect, device number 47 [ 716.890819][T14819] rdma_rxe: rxe_newlink: failed to add lo [ 717.504260][T14827] netlink: 'syz.2.2228': attribute type 1 has an invalid length. [ 717.544430][T14827] 8021q: adding VLAN 0 to HW filter on device bond8 [ 717.651105][ T5965] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 717.938906][T14830] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2228'. [ 718.082939][ T5965] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 718.096871][ T5965] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 718.107420][ T5965] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 718.119455][ T5965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.134432][ T5965] usb 5-1: config 0 descriptor?? [ 718.434742][T14836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2232'. [ 718.696653][T14843] dummy0: left allmulticast mode [ 718.708510][T14843] bridge0: port 3(dummy0) entered disabled state [ 718.782398][T14843] bridge_slave_0: left allmulticast mode [ 718.792172][T14843] bridge_slave_0: left promiscuous mode [ 718.811581][ T5965] isku 0003:1E7D:319C.002C: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.4-1/input0 [ 718.856895][T14843] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.949253][T14843] bridge_slave_1: left allmulticast mode [ 718.959806][T14843] bridge_slave_1: left promiscuous mode [ 718.968816][T14843] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.000671][ T5965] isku 0003:1E7D:319C.002C: couldn't init struct isku_device [ 719.018312][ T5965] isku 0003:1E7D:319C.002C: couldn't install keyboard [ 719.045786][T14843] bond0: (slave bond_slave_0): Releasing backup interface [ 719.075034][ T5965] isku 0003:1E7D:319C.002C: probe with driver isku failed with error -71 [ 719.122762][T14843] bond0: (slave bond_slave_1): Releasing backup interface [ 719.926502][T14843] team0: Port device team_slave_0 removed [ 719.968779][T14843] team0: Port device team_slave_1 removed [ 719.985734][ T5965] usb 5-1: USB disconnect, device number 58 [ 720.015178][T14843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 720.076453][T14843] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 720.191225][T14843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 720.210360][T14843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 720.285089][T13777] lo speed is unknown, defaulting to 1000 [ 720.665504][T14862] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2237'. [ 720.851215][ C0] af_packet: tpacket_rcv: packet too big, clamped from 28724 to 3952. macoff=96 [ 720.975122][ T5965] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 721.166128][ T5965] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 721.541811][ T5965] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 721.561079][ T5965] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 721.735112][ T5965] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.759496][ T5965] usb 1-1: config 0 descriptor?? [ 721.826957][ T30] audit: type=1400 audit(1756070471.409:616): avc: denied { write } for pid=14874 comm="syz.4.2244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 722.403690][ T5965] isku 0003:1E7D:319C.002D: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 722.414768][T13777] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 722.503434][T14877] netlink: 'syz.5.2242': attribute type 1 has an invalid length. [ 722.575896][ T5965] isku 0003:1E7D:319C.002D: couldn't init struct isku_device [ 722.583600][ T5965] isku 0003:1E7D:319C.002D: couldn't install keyboard [ 722.593437][T13777] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 722.605312][ T5965] isku 0003:1E7D:319C.002D: probe with driver isku failed with error -71 [ 722.613804][T13777] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 722.626845][T13777] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 722.636145][ T5965] usb 1-1: USB disconnect, device number 55 [ 722.655464][T13777] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.677147][T13777] usb 3-1: config 0 descriptor?? [ 722.697719][T14882] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2242'. [ 722.732310][T14886] fido_id[14886]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 722.776847][T14877] 8021q: adding VLAN 0 to HW filter on device bond2 [ 723.153288][T13777] isku 0003:1E7D:319C.002E: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 723.593871][T14901] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2248'. [ 723.776635][T13777] usb 3-1: USB disconnect, device number 57 [ 723.981498][T14904] siw: device registration error -23 [ 724.174474][ T30] audit: type=1400 audit(1756070473.769:617): avc: denied { create } for pid=14905 comm="syz.0.2249" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 724.268618][ T30] audit: type=1400 audit(1756070473.789:618): avc: denied { mounton } for pid=14905 comm="syz.0.2249" path="/458/file0" dev="tmpfs" ino=2458 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 724.385968][T14906] netlink: 'syz.0.2249': attribute type 4 has an invalid length. [ 725.313796][T14919] FAULT_INJECTION: forcing a failure. [ 725.313796][T14919] name failslab, interval 1, probability 0, space 0, times 0 [ 725.366913][T14919] CPU: 0 UID: 0 PID: 14919 Comm: syz.0.2253 Not tainted syzkaller #0 PREEMPT(full) [ 725.366941][T14919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 725.366951][T14919] Call Trace: [ 725.366957][T14919] [ 725.366965][T14919] dump_stack_lvl+0x16c/0x1f0 [ 725.366990][T14919] should_fail_ex+0x512/0x640 [ 725.367011][T14919] ? fs_reclaim_acquire+0xae/0x150 [ 725.367038][T14919] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 725.367065][T14919] should_failslab+0xc2/0x120 [ 725.367087][T14919] __kmalloc_noprof+0xd2/0x510 [ 725.367112][T14919] tomoyo_realpath_from_path+0xc2/0x6e0 [ 725.367142][T14919] ? tomoyo_profile+0x47/0x60 [ 725.367162][T14919] tomoyo_path_number_perm+0x245/0x580 [ 725.367184][T14919] ? tomoyo_path_number_perm+0x237/0x580 [ 725.367215][T14919] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 725.367240][T14919] ? find_held_lock+0x2b/0x80 [ 725.367290][T14919] ? find_held_lock+0x2b/0x80 [ 725.367311][T14919] ? hook_file_ioctl_common+0x145/0x410 [ 725.367337][T14919] ? __fget_files+0x20e/0x3c0 [ 725.367364][T14919] security_file_ioctl+0x9b/0x240 [ 725.367392][T14919] __x64_sys_ioctl+0xb7/0x210 [ 725.367422][T14919] do_syscall_64+0xcd/0x4c0 [ 725.367443][T14919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.367460][T14919] RIP: 0033:0x7f42f038ebe9 [ 725.367473][T14919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 725.367488][T14919] RSP: 002b:00007f42f1127038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 725.367505][T14919] RAX: ffffffffffffffda RBX: 00007f42f05b5fa0 RCX: 00007f42f038ebe9 [ 725.367515][T14919] RDX: 0000200000001980 RSI: 000000004004af61 RDI: 0000000000000003 [ 725.367526][T14919] RBP: 00007f42f1127090 R08: 0000000000000000 R09: 0000000000000000 [ 725.367536][T14919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 725.367546][T14919] R13: 00007f42f05b6038 R14: 00007f42f05b5fa0 R15: 00007ffe1a2763f8 [ 725.367568][T14919] [ 725.367632][T14919] ERROR: Out of memory at tomoyo_realpath_from_path. [ 725.784421][T14924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2256'. [ 725.793616][ T10] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 725.951045][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 725.967186][ T10] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 725.976656][ T10] usb 2-1: config 0 has no interface number 0 [ 725.991085][ T10] usb 2-1: config 0 interface 196 has no altsetting 0 [ 726.009677][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 726.037502][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.050674][ T10] usb 2-1: Product: syz [ 726.055740][T14929] netlink: 'syz.0.2257': attribute type 1 has an invalid length. [ 726.063973][ T10] usb 2-1: Manufacturer: syz [ 726.078299][ T10] usb 2-1: SerialNumber: syz [ 726.085447][ T10] usb 2-1: config 0 descriptor?? [ 726.265973][T14930] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2257'. [ 726.430246][T14941] rdma_rxe: rxe_newlink: failed to add lo [ 726.828542][T14922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 726.837289][T14922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.860858][ T10] ipheth 2-1:0.196: Unable to find endpoints [ 726.884492][T14943] netlink: 'syz.5.2260': attribute type 27 has an invalid length. [ 726.902371][ T10] usb 2-1: USB disconnect, device number 48 [ 726.972625][ T5965] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 727.013612][T14929] 8021q: adding VLAN 0 to HW filter on device bond5 [ 727.134190][T14943] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.141502][T14943] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.201000][ T5957] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 727.213720][ T5965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 727.404575][ T5957] usb 6-1: Using ep0 maxpacket: 16 [ 727.510295][ T5957] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 727.538800][ T5965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 727.538949][ T5957] usb 6-1: config 0 has no interface number 0 [ 727.581296][ T5965] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 727.604399][ T5957] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 727.621298][ T5965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.635153][ T5957] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.645554][ T5965] usb 3-1: config 0 descriptor?? [ 727.669613][ T5957] usb 6-1: Product: syz [ 727.674494][ T5957] usb 6-1: Manufacturer: syz [ 727.682667][ T5957] usb 6-1: SerialNumber: syz [ 727.691429][ T5957] usb 6-1: config 0 descriptor?? [ 727.708061][ T5957] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 727.725651][T14959] FAULT_INJECTION: forcing a failure. [ 727.725651][T14959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 727.912213][T14959] CPU: 0 UID: 0 PID: 14959 Comm: syz.1.2263 Not tainted syzkaller #0 PREEMPT(full) [ 727.912241][T14959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 727.912252][T14959] Call Trace: [ 727.912258][T14959] [ 727.912266][T14959] dump_stack_lvl+0x16c/0x1f0 [ 727.912295][T14959] should_fail_ex+0x512/0x640 [ 727.912320][T14959] _copy_from_user+0x2e/0xd0 [ 727.912345][T14959] copy_msghdr_from_user+0x98/0x160 [ 727.912365][T14959] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 727.912400][T14959] ___sys_sendmsg+0xfe/0x1d0 [ 727.912421][T14959] ? __pfx____sys_sendmsg+0x10/0x10 [ 727.912477][T14959] __sys_sendmsg+0x16d/0x220 [ 727.912497][T14959] ? __pfx___sys_sendmsg+0x10/0x10 [ 727.912537][T14959] do_syscall_64+0xcd/0x4c0 [ 727.912560][T14959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.912577][T14959] RIP: 0033:0x7f491278ebe9 [ 727.912592][T14959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 727.912610][T14959] RSP: 002b:00007f4913521038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 727.912629][T14959] RAX: ffffffffffffffda RBX: 00007f49129b6090 RCX: 00007f491278ebe9 [ 727.912641][T14959] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000006 [ 727.912652][T14959] RBP: 00007f4913521090 R08: 0000000000000000 R09: 0000000000000000 [ 727.912663][T14959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 727.912673][T14959] R13: 00007f49129b6128 R14: 00007f49129b6090 R15: 00007ffe3861aae8 [ 727.912696][T14959] [ 728.075867][ C0] vkms_vblank_simulate: vblank timer overrun [ 728.120104][T14943] veth1_virt_wifi: left promiscuous mode [ 728.137435][ T5965] isku 0003:1E7D:319C.002F: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 728.510640][T14943] vlan2: left promiscuous mode [ 728.515549][T14943] macvtap0: left promiscuous mode [ 728.573377][ T5965] usb 3-1: USB disconnect, device number 58 [ 728.641725][ T5957] gspca_spca1528: reg_w err -110 [ 728.890133][ T5957] spca1528 6-1:0.1: probe with driver spca1528 failed with error -110 [ 728.914443][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.923978][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.938069][T14970] batadv_slave_0: entered promiscuous mode [ 728.965626][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.022738][ T5957] usb 6-1: USB disconnect, device number 63 [ 729.028870][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.251379][ T9] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 729.422979][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 729.454575][ T9] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 729.476966][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.495344][ T9] usb 5-1: Product: syz [ 729.503533][T14983] ref_ctr increment failed for inode: 0xa45 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88802ba3ab00 [ 729.515197][ T9] usb 5-1: Manufacturer: syz [ 729.515218][ T9] usb 5-1: SerialNumber: syz [ 729.529306][ T9] r8152-cfgselector 5-1: Unknown version 0x0000 [ 729.650950][ T9] r8152-cfgselector 5-1: config 0 descriptor?? [ 729.857699][T14990] lo speed is unknown, defaulting to 1000 [ 729.914257][T14997] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.2274'. [ 729.934030][T14990] lo speed is unknown, defaulting to 1000 [ 730.080992][ T5965] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 730.269324][ T5965] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 730.335119][T15001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2275'. [ 730.448117][ T5965] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.604418][ T5965] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 730.632802][ T5965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.648810][ T5965] usb 2-1: config 0 descriptor?? [ 731.040971][T13777] usb 6-1: new full-speed USB device number 64 using dummy_hcd [ 731.155932][ T5965] isku 0003:1E7D:319C.0030: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 731.240774][T13777] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 731.292370][T13777] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 731.432650][T15014] netlink: 'syz.0.2279': attribute type 1 has an invalid length. [ 731.486636][T13777] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 731.501854][T15016] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2279'. [ 732.001021][T13777] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.010071][ T5965] isku 0003:1E7D:319C.0030: couldn't init struct isku_device [ 732.019288][ T5965] isku 0003:1E7D:319C.0030: couldn't install keyboard [ 732.047888][ T5965] isku 0003:1E7D:319C.0030: probe with driver isku failed with error -71 [ 732.053803][T15014] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 732.075978][T13777] usb 6-1: config 0 descriptor?? [ 732.089315][ T43] r8152-cfgselector 5-1: USB disconnect, device number 59 [ 732.137894][ T5965] usb 2-1: USB disconnect, device number 49 [ 732.491153][ T9] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 732.563199][T13777] isku 0003:1E7D:319C.0031: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.5-1/input0 [ 732.662558][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 732.675903][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 732.833895][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 732.859271][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.880845][ T9] usb 1-1: config 0 descriptor?? [ 732.917173][T15038] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.2285'. [ 733.076587][T13777] usb 6-1: USB disconnect, device number 64 [ 733.741231][ T9] isku 0003:1E7D:319C.0032: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 733.852206][ T9] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 733.907700][ T9] hid-generic 0000:0000:0000.0033: hidraw1: HID v0.00 Device [syz1] on syz0 [ 734.015197][ T9] usb 1-1: USB disconnect, device number 56 [ 734.122441][T15045] fido_id[15045]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 734.224748][ T10] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 734.276898][ T10] hid-generic 0000:0000:0000.0034: hidraw0: HID v0.00 Device [syz1] on syz0 [ 734.979626][T15072] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.2294'. [ 735.401138][ T10] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 735.633323][T15088] mkiss: ax0: crc mode is auto. [ 735.741015][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 735.747664][ T10] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 735.755936][ T10] usb 3-1: config 0 has no interface number 0 [ 735.762248][ T10] usb 3-1: config 0 interface 89 has no altsetting 0 [ 735.771247][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 735.780595][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.833431][ T10] usb 3-1: Product: syz [ 735.960051][ T10] usb 3-1: Manufacturer: syz [ 735.964882][ T10] usb 3-1: SerialNumber: syz [ 735.980125][ T10] usb 3-1: config 0 descriptor?? [ 736.013688][ T10] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 736.026876][ T10] em28xx 3-1:0.89: Video interface 89 found: bulk [ 736.312616][T15089] netlink: 'syz.1.2298': attribute type 21 has an invalid length. [ 736.434964][ T30] audit: type=1400 audit(1756070486.009:619): avc: denied { ioctl } for pid=15090 comm="syz.0.2301" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x4501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 736.702725][ T10] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 737.110788][T15106] FAULT_INJECTION: forcing a failure. [ 737.110788][T15106] name failslab, interval 1, probability 0, space 0, times 0 [ 737.123551][T15106] CPU: 0 UID: 0 PID: 15106 Comm: syz.4.2303 Not tainted syzkaller #0 PREEMPT(full) [ 737.123575][T15106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 737.123582][T15106] Call Trace: [ 737.123586][T15106] [ 737.123590][T15106] dump_stack_lvl+0x16c/0x1f0 [ 737.123607][T15106] should_fail_ex+0x512/0x640 [ 737.123621][T15106] ? fs_reclaim_acquire+0xae/0x150 [ 737.123637][T15106] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 737.123655][T15106] should_failslab+0xc2/0x120 [ 737.123669][T15106] __kmalloc_noprof+0xd2/0x510 [ 737.123684][T15106] tomoyo_realpath_from_path+0xc2/0x6e0 [ 737.123702][T15106] ? tomoyo_profile+0x47/0x60 [ 737.123715][T15106] tomoyo_path_number_perm+0x245/0x580 [ 737.123729][T15106] ? tomoyo_path_number_perm+0x237/0x580 [ 737.123744][T15106] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 737.123760][T15106] ? find_held_lock+0x2b/0x80 [ 737.123787][T15106] ? find_held_lock+0x2b/0x80 [ 737.123801][T15106] ? hook_file_ioctl_common+0x145/0x410 [ 737.123820][T15106] ? __fget_files+0x20e/0x3c0 [ 737.123837][T15106] security_file_ioctl+0x9b/0x240 [ 737.123854][T15106] __x64_sys_ioctl+0xb7/0x210 [ 737.123873][T15106] do_syscall_64+0xcd/0x4c0 [ 737.123887][T15106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.123900][T15106] RIP: 0033:0x7f5bc7b8ebe9 [ 737.123909][T15106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 737.123921][T15106] RSP: 002b:00007f5bc8a20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 737.123932][T15106] RAX: ffffffffffffffda RBX: 00007f5bc7db6090 RCX: 00007f5bc7b8ebe9 [ 737.123939][T15106] RDX: 0000200000002600 RSI: 000000008108551b RDI: 000000000000000b [ 737.123947][T15106] RBP: 00007f5bc8a20090 R08: 0000000000000000 R09: 0000000000000000 [ 737.123953][T15106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 737.123960][T15106] R13: 00007f5bc7db6128 R14: 00007f5bc7db6090 R15: 00007ffe036f0788 [ 737.123974][T15106] [ 737.123979][T15106] ERROR: Out of memory at tomoyo_realpath_from_path. [ 737.683275][ T10] em28xx 3-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64) [ 737.727169][ T10] em28xx 3-1:0.89: board has no eeprom [ 737.760554][T15121] mkiss: ax0: crc mode is auto. [ 737.906339][T15123] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.2307'. [ 737.923056][ T10] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 737.930396][ T10] em28xx 3-1:0.89: analog set to bulk mode. [ 737.936972][ T5957] em28xx 3-1:0.89: Registering V4L2 extension [ 738.239540][ T10] usb 3-1: USB disconnect, device number 59 [ 738.246621][ T10] em28xx 3-1:0.89: Disconnecting em28xx [ 738.265093][ T5957] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 738.280696][ T5957] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 738.297198][ T5957] em28xx 3-1:0.89: No AC97 audio processor [ 738.330748][ T5957] usb 3-1: Decoder not found [ 738.349988][ T5957] em28xx 3-1:0.89: failed to create media graph [ 738.621415][ T5957] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 738.629233][ T5957] em28xx 3-1:0.89: Registering snapshot button... [ 738.638799][ T5957] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input22 [ 738.679650][ T5957] em28xx 3-1:0.89: Remote control support is not available for this card. [ 738.691009][ T10] em28xx 3-1:0.89: Closing input extension [ 738.696836][ T10] em28xx 3-1:0.89: Deregistering snapshot button [ 738.706307][T15138] FAULT_INJECTION: forcing a failure. [ 738.706307][T15138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 738.801027][T15138] CPU: 0 UID: 0 PID: 15138 Comm: syz.5.2311 Not tainted syzkaller #0 PREEMPT(full) [ 738.801046][T15138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 738.801053][T15138] Call Trace: [ 738.801057][T15138] [ 738.801062][T15138] dump_stack_lvl+0x16c/0x1f0 [ 738.801080][T15138] should_fail_ex+0x512/0x640 [ 738.801096][T15138] _copy_from_user+0x2e/0xd0 [ 738.801111][T15138] copy_msghdr_from_user+0x98/0x160 [ 738.801125][T15138] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 738.801140][T15138] ? __pfx__kstrtoull+0x10/0x10 [ 738.801153][T15138] ___sys_sendmsg+0xfe/0x1d0 [ 738.801166][T15138] ? __pfx____sys_sendmsg+0x10/0x10 [ 738.801185][T15138] ? find_held_lock+0x2b/0x80 [ 738.801207][T15138] __sys_sendmmsg+0x200/0x420 [ 738.801221][T15138] ? __pfx___sys_sendmmsg+0x10/0x10 [ 738.801238][T15138] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 738.801257][T15138] ? fput+0x9b/0xd0 [ 738.801272][T15138] ? ksys_write+0x1ac/0x250 [ 738.801285][T15138] ? __pfx_ksys_write+0x10/0x10 [ 738.801298][T15138] __x64_sys_sendmmsg+0x9c/0x100 [ 738.801310][T15138] ? lockdep_hardirqs_on+0x7c/0x110 [ 738.801322][T15138] do_syscall_64+0xcd/0x4c0 [ 738.801337][T15138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.801349][T15138] RIP: 0033:0x7fae3818ebe9 [ 738.801358][T15138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 738.801369][T15138] RSP: 002b:00007fae38fa1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 738.801381][T15138] RAX: ffffffffffffffda RBX: 00007fae383b5fa0 RCX: 00007fae3818ebe9 [ 738.801388][T15138] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 738.801395][T15138] RBP: 00007fae38fa1090 R08: 0000000000000000 R09: 0000000000000000 [ 738.801401][T15138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 738.801408][T15138] R13: 00007fae383b6038 R14: 00007fae383b5fa0 R15: 00007ffdb1655678 [ 738.801421][T15138] [ 739.116394][T15136] mkiss: ax0: crc mode is auto. [ 739.375986][ T10] em28xx 3-1:0.89: Freeing device [ 739.495886][ T30] audit: type=1400 audit(1756070489.089:620): avc: denied { read } for pid=5205 comm="acpid" name="mouse6" dev="devtmpfs" ino=3649 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 739.583787][ T30] audit: type=1400 audit(1756070489.089:621): avc: denied { open } for pid=5205 comm="acpid" path="/dev/input/mouse6" dev="devtmpfs" ino=3649 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 739.844725][ T30] audit: type=1400 audit(1756070489.089:622): avc: denied { ioctl } for pid=5205 comm="acpid" path="/dev/input/mouse6" dev="devtmpfs" ino=3649 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 740.322650][T15145] [U] ^@ [ 740.435066][ T10] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 740.564529][T15163] mkiss: ax0: crc mode is auto. [ 740.609652][T15168] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.2320'. [ 740.633024][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 740.651521][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 740.683363][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 740.713157][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 740.740452][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.784372][ T10] usb 2-1: config 0 descriptor?? [ 740.803092][ T10] em28xx 2-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 740.969913][ T30] audit: type=1400 audit(1756070490.549:623): avc: denied { map } for pid=15169 comm="syz.2.2321" path="/447/file0" dev="tmpfs" ino=2403 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 741.092948][T15161] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 741.105842][ T30] audit: type=1400 audit(1756070490.549:624): avc: denied { execute } for pid=15169 comm="syz.2.2321" path="/447/file0" dev="tmpfs" ino=2403 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 741.220588][ T5965] usb 2-1: USB disconnect, device number 50 [ 741.671318][ T10] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 741.806132][ T5965] lo speed is unknown, defaulting to 1000 [ 741.814497][ T5965] syz0: Port: 1 Link DOWN [ 741.825014][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 741.841767][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 741.851762][ T9] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 741.875418][ T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 741.896532][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.917220][ T10] usb 1-1: config 0 descriptor?? [ 742.021042][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 742.072321][ T9] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 742.089227][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.140550][ T9] usb 6-1: Product: syz [ 742.144822][ T9] usb 6-1: Manufacturer: syz [ 742.149618][ T9] usb 6-1: SerialNumber: syz [ 742.204692][ T5965] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 742.218577][ T9] r8152-cfgselector 6-1: Unknown version 0x0000 [ 742.225081][ T9] r8152-cfgselector 6-1: config 0 descriptor?? [ 742.357127][ T10] isku 0003:1E7D:319C.0035: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 742.361427][ T5965] usb 2-1: Using ep0 maxpacket: 32 [ 742.375024][ T5965] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 742.384066][ T5965] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 742.421089][ T43] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 742.472282][ T5965] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 742.525772][ T5965] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 742.591272][ T10] isku 0003:1E7D:319C.0035: couldn't init struct isku_device [ 742.591577][ T5965] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 742.632514][ T10] isku 0003:1E7D:319C.0035: couldn't install keyboard [ 742.650674][ T43] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 742.673420][ T43] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 742.675290][ T10] isku 0003:1E7D:319C.0035: probe with driver isku failed with error -71 [ 742.710092][ T43] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 742.710370][ T10] usb 1-1: USB disconnect, device number 57 [ 742.720492][ T5965] usb 2-1: config 0 interface 0 has no altsetting 0 [ 742.749128][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.770706][ T5965] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 742.802996][ T5965] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 742.849753][T15195] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 742.860096][ T43] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 742.943145][ T5965] usb 2-1: Product: syz [ 742.947336][ T5965] usb 2-1: Manufacturer: syz [ 743.003131][ T5965] usb 2-1: SerialNumber: syz [ 743.013686][ T5965] usb 2-1: config 0 descriptor?? [ 743.027228][ T5965] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 743.049932][ T5965] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 743.256811][T15193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.265434][T15193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.432183][T15201] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2327'. [ 743.690966][ T5965] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 743.841075][ T5965] usb 1-1: Using ep0 maxpacket: 32 [ 743.848030][ T5965] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 743.856346][ T5965] usb 1-1: config 0 has no interface number 0 [ 743.862687][ T5965] usb 1-1: config 0 interface 196 has no altsetting 0 [ 743.871906][ T5965] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 743.881141][ T5965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.889145][ T5965] usb 1-1: Product: syz [ 743.893410][ T5965] usb 1-1: Manufacturer: syz [ 743.898054][ T5965] usb 1-1: SerialNumber: syz [ 743.906945][ T5965] usb 1-1: config 0 descriptor?? [ 744.452186][T15200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.460840][T15200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.475266][ T5965] ipheth 1-1:0.196: Unable to find endpoints [ 744.487942][ T10] r8152-cfgselector 6-1: USB disconnect, device number 65 [ 744.520538][ T5965] usb 1-1: USB disconnect, device number 58 [ 744.972720][T15207] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 744.974174][ T5965] usb 2-1: USB disconnect, device number 51 [ 744.979247][T15207] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 744.979377][T15207] vhci_hcd vhci_hcd.0: Device attached [ 745.018160][ T5965] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 745.070016][ T30] audit: type=1400 audit(1756070494.659:625): avc: denied { map } for pid=15210 comm="syz.2.2331" path="/dev/video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 745.251495][ T9] vhci_hcd: vhci_device speed not set [ 745.390941][ T9] usb 43-1: new full-speed USB device number 11 using vhci_hcd [ 745.431149][ T30] audit: type=1400 audit(1756070494.689:626): avc: denied { execute } for pid=15210 comm="syz.2.2331" path="/dev/video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 745.532814][ T10] usb 5-1: USB disconnect, device number 60 [ 745.550968][ T43] usb 6-1: new full-speed USB device number 66 using dummy_hcd [ 745.701681][T15223] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2333'. [ 745.884876][T15224] netlink: 'syz.2.2334': attribute type 1 has an invalid length. [ 745.948553][T15227] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2334'. [ 746.457530][T15224] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 746.486649][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 746.517713][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 746.541027][ T43] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 746.550149][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.805405][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.809977][T15233] mkiss: ax0: crc mode is auto. [ 746.878886][ T43] usb 6-1: config 0 descriptor?? [ 747.061772][T15226] netlink: 'syz.4.2336': attribute type 1 has an invalid length. [ 747.112971][T15229] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2336'. [ 747.128289][T15226] 8021q: adding VLAN 0 to HW filter on device bond5 [ 747.291878][T15246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2340'. [ 747.324477][ T43] isku 0003:1E7D:319C.0036: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.5-1/input0 [ 747.914255][ T5957] usb 6-1: USB disconnect, device number 66 [ 748.044117][T15208] vhci_hcd: connection reset by peer [ 748.057794][T12397] vhci_hcd: stop threads [ 748.063156][T12397] vhci_hcd: release socket [ 748.129801][T12397] vhci_hcd: disconnect device [ 748.340737][T15253] netlink: 'syz.4.2342': attribute type 4 has an invalid length. [ 748.756824][T15263] FAULT_INJECTION: forcing a failure. [ 748.756824][T15263] name failslab, interval 1, probability 0, space 0, times 0 [ 748.804610][T15263] CPU: 0 UID: 0 PID: 15263 Comm: syz.5.2345 Not tainted syzkaller #0 PREEMPT(full) [ 748.804638][T15263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 748.804649][T15263] Call Trace: [ 748.804655][T15263] [ 748.804663][T15263] dump_stack_lvl+0x16c/0x1f0 [ 748.804689][T15263] should_fail_ex+0x512/0x640 [ 748.804709][T15263] ? fs_reclaim_acquire+0xae/0x150 [ 748.804735][T15263] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 748.804761][T15263] should_failslab+0xc2/0x120 [ 748.804783][T15263] __kmalloc_noprof+0xd2/0x510 [ 748.804807][T15263] tomoyo_realpath_from_path+0xc2/0x6e0 [ 748.804835][T15263] ? tomoyo_profile+0x47/0x60 [ 748.804855][T15263] tomoyo_path_number_perm+0x245/0x580 [ 748.804876][T15263] ? tomoyo_path_number_perm+0x237/0x580 [ 748.804901][T15263] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 748.804925][T15263] ? find_held_lock+0x2b/0x80 [ 748.804969][T15263] ? find_held_lock+0x2b/0x80 [ 748.804991][T15263] ? hook_file_ioctl_common+0x145/0x410 [ 748.805015][T15263] ? __fget_files+0x20e/0x3c0 [ 748.805040][T15263] security_file_ioctl+0x9b/0x240 [ 748.805068][T15263] __x64_sys_ioctl+0xb7/0x210 [ 748.805097][T15263] do_syscall_64+0xcd/0x4c0 [ 748.805119][T15263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.805138][T15263] RIP: 0033:0x7fae3818ebe9 [ 748.805154][T15263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 748.805170][T15263] RSP: 002b:00007fae38fa1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 748.805188][T15263] RAX: ffffffffffffffda RBX: 00007fae383b5fa0 RCX: 00007fae3818ebe9 [ 748.805200][T15263] RDX: 0000000000000000 RSI: 00000000c008ae88 RDI: 0000000000000005 [ 748.805210][T15263] RBP: 00007fae38fa1090 R08: 0000000000000000 R09: 0000000000000000 [ 748.805221][T15263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 748.805231][T15263] R13: 00007fae383b6038 R14: 00007fae383b5fa0 R15: 00007ffdb1655678 [ 748.805257][T15263] [ 748.805264][T15263] ERROR: Out of memory at tomoyo_realpath_from_path. [ 749.026384][T15267] dvmrp0: entered allmulticast mode [ 749.194739][ T5957] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 749.311603][T15271] siw: device registration error -23 [ 749.361241][ T5957] usb 5-1: Using ep0 maxpacket: 32 [ 749.371754][ T5957] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 749.380729][ T5957] usb 5-1: config 0 has no interface number 0 [ 749.387359][ T5957] usb 5-1: config 0 interface 196 has no altsetting 0 [ 749.419745][ T5957] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 749.479519][ T5957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.520388][ T5957] usb 5-1: Product: syz [ 749.543011][ T5957] usb 5-1: Manufacturer: syz [ 749.567792][ T5957] usb 5-1: SerialNumber: syz [ 749.637188][ T5957] usb 5-1: config 0 descriptor?? [ 749.987830][T15281] nfs: Unknown parameter '' [ 749.994555][ T30] audit: type=1400 audit(1756070499.529:627): avc: denied { shutdown } for pid=15274 comm="syz.2.2351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 750.421639][T15279] mkiss: ax0: crc mode is auto. [ 750.425116][ T30] audit: type=1400 audit(1756070499.529:628): avc: denied { connect } for pid=15274 comm="syz.2.2351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 750.538892][T15283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 750.548466][T15283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.791103][ T9] vhci_hcd: vhci_device speed not set [ 750.807607][ T5957] ipheth 5-1:0.196: Unable to find endpoints [ 750.849040][ T5957] usb 5-1: USB disconnect, device number 61 [ 751.933699][ T30] audit: type=1400 audit(1756070500.769:629): avc: denied { ioctl } for pid=15285 comm="syz.2.2353" path="socket:[63118]" dev="sockfs" ino=63118 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 752.436726][T15290] lo speed is unknown, defaulting to 1000 [ 752.443862][T15290] lo speed is unknown, defaulting to 1000 [ 752.791585][T15300] rdma_rxe: rxe_newlink: failed to add lo [ 754.167476][ T30] audit: type=1400 audit(1756070503.759:630): avc: denied { watch } for pid=15313 comm="syz.0.2358" path="/480/file1" dev="tmpfs" ino=2573 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 754.213886][ T5965] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 754.214960][ T30] audit: type=1400 audit(1756070503.759:631): avc: denied { watch_sb } for pid=15313 comm="syz.0.2358" path="/480/file1" dev="tmpfs" ino=2573 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 754.500387][ T5965] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 754.565821][ T5965] usb 3-1: config 0 has no interfaces? [ 754.591263][ T5965] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 754.610109][ T5965] usb 3-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 754.621958][ T5965] usb 3-1: Product: syz [ 754.630814][ T5965] usb 3-1: Manufacturer: syz [ 754.637543][ T5965] usb 3-1: SerialNumber: syz [ 754.740428][ T5965] usb 3-1: config 0 descriptor?? [ 754.854781][T15324] FAULT_INJECTION: forcing a failure. [ 754.854781][T15324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 754.856257][T15324] [ 754.856264][T15324] ====================================================== [ 754.856270][T15324] WARNING: possible circular locking dependency detected [ 754.856278][T15324] syzkaller #0 Not tainted [ 754.856287][T15324] ------------------------------------------------------ [ 754.856293][T15324] syz.1.2359/15324 is trying to acquire lock: [ 754.856302][T15324] ffffffff8e4ce840 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x9f/0xd0 [ 754.856348][T15324] [ 754.856348][T15324] but task is already holding lock: [ 754.856353][T15324] ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 754.856391][T15324] [ 754.856391][T15324] which lock already depends on the new lock. [ 754.856391][T15324] [ 754.856396][T15324] [ 754.856396][T15324] the existing dependency chain (in reverse order) is: [ 754.856402][T15324] [ 754.856402][T15324] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 754.856423][T15324] _raw_spin_lock_nested+0x31/0x40 [ 754.856455][T15324] raw_spin_rq_lock_nested+0x29/0x130 [ 754.856474][T15324] task_rq_lock+0xcf/0x490 [ 754.856493][T15324] cgroup_move_task+0x81/0x2a0 [ 754.856515][T15324] css_set_move_task+0x288/0x5f0 [ 754.856530][T15324] cgroup_post_fork+0x201/0x9e0 [ 754.856548][T15324] copy_process+0x5cfa/0x7690 [ 754.856570][T15324] kernel_clone+0xfc/0x930 [ 754.856591][T15324] user_mode_thread+0xc7/0x110 [ 754.856611][T15324] rest_init+0x23/0x2b0 [ 754.856631][T15324] start_kernel+0x3ee/0x4d0 [ 754.856645][T15324] x86_64_start_reservations+0x18/0x30 [ 754.856660][T15324] x86_64_start_kernel+0x130/0x190 [ 754.856679][T15324] common_startup_64+0x13e/0x148 [ 754.856696][T15324] [ 754.856696][T15324] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 754.856717][T15324] _raw_spin_lock_irqsave+0x3a/0x60 [ 754.856742][T15324] try_to_wake_up+0xb7/0x1870 [ 754.856760][T15324] __wake_up_common+0x135/0x1f0 [ 754.856784][T15324] __wake_up+0x31/0x60 [ 754.856804][T15324] tty_port_default_wakeup+0x2a/0x40 [ 754.856823][T15324] serial8250_tx_chars+0x68e/0x860 [ 754.856843][T15324] serial8250_handle_irq+0x761/0xcb0 [ 754.856863][T15324] serial8250_default_handle_irq+0x9a/0x250 [ 754.856884][T15324] serial8250_interrupt+0xf8/0x1b0 [ 754.856905][T15324] __handle_irq_event_percpu+0x229/0x7d0 [ 754.856925][T15324] handle_irq_event+0xab/0x1e0 [ 754.856943][T15324] handle_edge_irq+0x3ca/0x9e0 [ 754.856960][T15324] __common_interrupt+0xd0/0x2f0 [ 754.856982][T15324] common_interrupt+0xba/0xe0 [ 754.857004][T15324] asm_common_interrupt+0x26/0x40 [ 754.857020][T15324] pv_native_safe_halt+0xf/0x20 [ 754.857035][T15324] default_idle+0x13/0x20 [ 754.857053][T15324] default_idle_call+0x6d/0xb0 [ 754.857072][T15324] do_idle+0x391/0x510 [ 754.857091][T15324] cpu_startup_entry+0x4f/0x60 [ 754.857109][T15324] start_secondary+0x21d/0x2b0 [ 754.857132][T15324] common_startup_64+0x13e/0x148 [ 754.857149][T15324] [ 754.857149][T15324] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 754.857170][T15324] _raw_spin_lock_irqsave+0x3a/0x60 [ 754.857194][T15324] __wake_up+0x1c/0x60 [ 754.857213][T15324] tty_port_default_wakeup+0x2a/0x40 [ 754.857231][T15324] serial8250_tx_chars+0x68e/0x860 [ 754.857250][T15324] serial8250_handle_irq+0x761/0xcb0 [ 754.857270][T15324] serial8250_default_handle_irq+0x9a/0x250 [ 754.857291][T15324] serial8250_interrupt+0xf8/0x1b0 [ 754.857311][T15324] __handle_irq_event_percpu+0x229/0x7d0 [ 754.857331][T15324] handle_irq_event+0xab/0x1e0 [ 754.857349][T15324] handle_edge_irq+0x3ca/0x9e0 [ 754.857366][T15324] __common_interrupt+0xd0/0x2f0 [ 754.857387][T15324] common_interrupt+0xba/0xe0 [ 754.857408][T15324] asm_common_interrupt+0x26/0x40 [ 754.857423][T15324] pv_native_safe_halt+0xf/0x20 [ 754.857438][T15324] default_idle+0x13/0x20 [ 754.857461][T15324] default_idle_call+0x6d/0xb0 [ 754.857481][T15324] do_idle+0x391/0x510 [ 754.857498][T15324] cpu_startup_entry+0x4f/0x60 [ 754.857517][T15324] start_secondary+0x21d/0x2b0 [ 754.857539][T15324] common_startup_64+0x13e/0x148 [ 754.857556][T15324] [ 754.857556][T15324] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 754.857577][T15324] _raw_spin_lock_irqsave+0x3a/0x60 [ 754.857601][T15324] serial8250_console_write+0x181/0x1890 [ 754.857622][T15324] console_flush_all+0x801/0xc60 [ 754.857641][T15324] console_unlock+0xd8/0x210 [ 754.857658][T15324] vprintk_emit+0x418/0x6d0 [ 754.857677][T15324] _printk+0xc7/0x100 [ 754.857690][T15324] register_console+0xc2d/0x11b0 [ 754.857709][T15324] univ8250_console_init+0x5f/0x90 [ 754.857725][T15324] console_init+0x14f/0x680 [ 754.857741][T15324] start_kernel+0x29f/0x4d0 [ 754.857755][T15324] x86_64_start_reservations+0x18/0x30 [ 754.857769][T15324] x86_64_start_kernel+0x130/0x190 [ 754.857784][T15324] common_startup_64+0x13e/0x148 [ 754.857801][T15324] [ 754.857801][T15324] -> #0 (console_owner){-.-.}-{0:0}: [ 754.857823][T15324] __lock_acquire+0x12a6/0x1ce0 [ 754.857846][T15324] lock_acquire+0x179/0x350 [ 754.857869][T15324] console_lock_spinning_enable+0xb0/0xd0 [ 754.857887][T15324] console_flush_all+0x7aa/0xc60 [ 754.857905][T15324] console_unlock+0xd8/0x210 [ 754.857923][T15324] vprintk_emit+0x418/0x6d0 [ 754.857942][T15324] _printk+0xc7/0x100 [ 754.857955][T15324] should_fail_ex+0x4e7/0x640 [ 754.857973][T15324] copy_to_user_nofault+0xac/0x1c0 [ 754.857992][T15324] bpf_probe_write_user+0xaf/0xf0 [ 754.858015][T15324] bpf_prog_6303d92f98284ad8+0x44/0x4c [ 754.858028][T15324] bpf_trace_run4+0x252/0x5b0 [ 754.858044][T15324] __bpf_trace_sched_switch+0x145/0x190 [ 754.858062][T15324] __traceiter_sched_switch+0x6f/0xc0 [ 754.858078][T15324] __schedule+0x183b/0x5de0 [ 754.858092][T15324] schedule+0xe7/0x3a0 [ 754.858105][T15324] exit_to_user_mode_loop+0x67/0x110 [ 754.858122][T15324] do_syscall_64+0x3f6/0x4c0 [ 754.858139][T15324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.858155][T15324] [ 754.858155][T15324] other info that might help us debug this: [ 754.858155][T15324] [ 754.858160][T15324] Chain exists of: [ 754.858160][T15324] console_owner --> &p->pi_lock --> &rq->__lock [ 754.858160][T15324] [ 754.858185][T15324] Possible unsafe locking scenario: [ 754.858185][T15324] [ 754.858190][T15324] CPU0 CPU1 [ 754.858194][T15324] ---- ---- [ 754.858199][T15324] lock(&rq->__lock); [ 754.858209][T15324] lock(&p->pi_lock); [ 754.858220][T15324] lock(&rq->__lock); [ 754.858232][T15324] lock(console_owner); [ 754.858242][T15324] [ 754.858242][T15324] *** DEADLOCK *** [ 754.858242][T15324] [ 754.858246][T15324] 4 locks held by syz.1.2359/15324: [ 754.858256][T15324] #0: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 754.858298][T15324] #1: ffffffff8e5c1220 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x1d5/0x5b0 [ 754.858336][T15324] #2: ffffffff8e5aec80 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 754.858371][T15324] #3: ffffffff8e5aecf0 (console_srcu){....}-{0:0}, at: console_flush_all+0x158/0xc60 [ 754.858411][T15324] [ 754.858411][T15324] stack backtrace: [ 754.858419][T15324] CPU: 1 UID: 0 PID: 15324 Comm: syz.1.2359 Not tainted syzkaller #0 PREEMPT(full) [ 754.858439][T15324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 754.858455][T15324] Call Trace: [ 754.858461][T15324] [ 754.858468][T15324] dump_stack_lvl+0x116/0x1f0 [ 754.858486][T15324] print_circular_bug+0x275/0x350 [ 754.858512][T15324] check_noncircular+0x14c/0x170 [ 754.858540][T15324] __lock_acquire+0x12a6/0x1ce0 [ 754.858570][T15324] lock_acquire+0x179/0x350 [ 754.858595][T15324] ? console_lock_spinning_enable+0x9f/0xd0 [ 754.858617][T15324] ? console_lock_spinning_enable+0x88/0xd0 [ 754.858639][T15324] console_lock_spinning_enable+0xb0/0xd0 [ 754.858658][T15324] ? console_lock_spinning_enable+0x9f/0xd0 [ 754.858678][T15324] console_flush_all+0x7aa/0xc60 [ 754.858700][T15324] ? __pfx_console_flush_all+0x10/0x10 [ 754.858724][T15324] ? is_printk_cpu_sync_owner+0x32/0x40 [ 754.858748][T15324] console_unlock+0xd8/0x210 [ 754.858767][T15324] ? __pfx_console_unlock+0x10/0x10 [ 754.858787][T15324] ? do_raw_spin_unlock+0xd0/0x230 [ 754.858806][T15324] ? _printk+0xc7/0x100 [ 754.858821][T15324] ? __down_trylock_console_sem+0xb0/0x140 [ 754.858839][T15324] vprintk_emit+0x418/0x6d0 [ 754.858859][T15324] ? __pfx_vprintk_emit+0x10/0x10 [ 754.858880][T15324] ? rcu_is_watching+0x12/0xc0 [ 754.858901][T15324] ? trace_sched_exit_tp+0xd1/0x120 [ 754.858922][T15324] _printk+0xc7/0x100 [ 754.858936][T15324] ? __pfx__printk+0x10/0x10 [ 754.858952][T15324] ? __lock_acquire+0x62e/0x1ce0 [ 754.858977][T15324] ? __pfx____ratelimit+0x10/0x10 [ 754.858996][T15324] should_fail_ex+0x4e7/0x640 [ 754.859016][T15324] copy_to_user_nofault+0xac/0x1c0 [ 754.859036][T15324] bpf_probe_write_user+0xaf/0xf0 [ 754.859061][T15324] bpf_prog_6303d92f98284ad8+0x44/0x4c [ 754.859076][T15324] bpf_trace_run4+0x252/0x5b0 [ 754.859093][T15324] ? __pfx_bpf_trace_run4+0x10/0x10 [ 754.859112][T15324] ? __lock_acquire+0xb97/0x1ce0 [ 754.859139][T15324] __bpf_trace_sched_switch+0x145/0x190 [ 754.859159][T15324] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 754.859179][T15324] ? lock_acquire+0x179/0x350 [ 754.859206][T15324] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 754.859229][T15324] __traceiter_sched_switch+0x6f/0xc0 [ 754.859246][T15324] ? set_next_task_rt+0x403/0x6a0 [ 754.859271][T15324] __schedule+0x183b/0x5de0 [ 754.859293][T15324] ? __pfx___schedule+0x10/0x10 [ 754.859308][T15324] ? __fget_files+0x20e/0x3c0 [ 754.859330][T15324] ? fput+0x9b/0xd0 [ 754.859352][T15324] ? ksys_write+0x1ac/0x250 [ 754.859371][T15324] schedule+0xe7/0x3a0 [ 754.859386][T15324] exit_to_user_mode_loop+0x67/0x110 [ 754.859404][T15324] do_syscall_64+0x3f6/0x4c0 [ 754.859423][T15324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.859440][T15324] RIP: 0033:0x7f491278d69f [ 754.859458][T15324] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 754.859474][T15324] RSP: 002b:00007f49109f6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 754.859490][T15324] RAX: 0000000000000001 RBX: 0000000000000008 RCX: 00007f491278d69f [ 754.859501][T15324] RDX: 0000000000000001 RSI: 00007f49109f6090 RDI: 0000000000000008 [ 754.859512][T15324] RBP: 00007f49109f6090 R08: 0000000000000000 R09: 00007f49109f5df7 [ 754.859523][T15324] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 754.859533][T15324] R13: 00007f49129b6218 R14: 00007f49129b6180 R15: 00007ffe3861aae8 [ 754.859550][T15324] [ 755.915576][T15324] CPU: 1 UID: 0 PID: 15324 Comm: syz.1.2359 Not tainted syzkaller #0 PREEMPT(full) [ 755.915592][T15324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 755.915600][T15324] Call Trace: [ 755.915606][T15324] [ 755.915611][T15324] dump_stack_lvl+0x116/0x1f0 [ 755.915627][T15324] should_fail_ex+0x512/0x640 [ 755.915641][T15324] copy_to_user_nofault+0xac/0x1c0 [ 755.915656][T15324] bpf_probe_write_user+0xaf/0xf0 [ 755.915674][T15324] bpf_prog_6303d92f98284ad8+0x44/0x4c [ 755.915684][T15324] bpf_trace_run4+0x252/0x5b0 [ 755.915696][T15324] ? __pfx_bpf_trace_run4+0x10/0x10 [ 755.915709][T15324] ? __lock_acquire+0xb97/0x1ce0 [ 755.915727][T15324] __bpf_trace_sched_switch+0x145/0x190 [ 755.915741][T15324] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 755.915755][T15324] ? lock_acquire+0x179/0x350 [ 755.915772][T15324] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 755.915787][T15324] __traceiter_sched_switch+0x6f/0xc0 [ 755.915799][T15324] ? set_next_task_rt+0x403/0x6a0 [ 755.915815][T15324] __schedule+0x183b/0x5de0 [ 755.915830][T15324] ? __pfx___schedule+0x10/0x10 [ 755.915839][T15324] ? __fget_files+0x20e/0x3c0 [ 755.915852][T15324] ? fput+0x9b/0xd0 [ 755.915866][T15324] ? ksys_write+0x1ac/0x250 [ 755.915878][T15324] schedule+0xe7/0x3a0 [ 755.915888][T15324] exit_to_user_mode_loop+0x67/0x110 [ 755.915900][T15324] do_syscall_64+0x3f6/0x4c0 [ 755.915914][T15324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.915926][T15324] RIP: 0033:0x7f491278d69f [ 755.915935][T15324] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 755.915946][T15324] RSP: 002b:00007f49109f6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 755.915958][T15324] RAX: 0000000000000001 RBX: 0000000000000008 RCX: 00007f491278d69f [ 755.915966][T15324] RDX: 0000000000000001 RSI: 00007f49109f6090 RDI: 0000000000000008 [ 755.915973][T15324] RBP: 00007f49109f6090 R08: 0000000000000000 R09: 00007f49109f5df7 [ 755.915980][T15324] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 755.915986][T15324] R13: 00007f49129b6218 R14: 00007f49129b6180 R15: 00007ffe3861aae8 [ 755.915996][T15324] [ 755.916028][ C1] vkms_vblank_simulate: vblank timer overrun [ 756.137009][ C1] vkms_vblank_simulate: vblank timer overrun [ 756.734481][ T43] usb 3-1: USB disconnect, device number 60