last executing test programs: 8m36.873873943s ago: executing program 3 (id=541): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) fsopen(&(0x7f00000001c0)='pstore\x00', 0x1) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0xa}, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan1\x00') setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e20, 0x50, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, @in6={0xa, 0x4e23, 0x4, @loopback, 0x4}], 0x38) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000280)={0x1, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f00000001c0)="0f20e035000001000f22e00f0966b8cd008ed0c4e279dbcbf30f1ee98fe978cbd90f01cbf36c0f017001b9800000c00f3235001000000f30", 0x38}], 0x1, 0x44, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x7, 0x280040) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000140)={0x1, 0x0, 0x10000}) ioctl$DRM_IOCTL_SG_FREE(r5, 0x40106439, &(0x7f0000000240)={0x5, r6}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendto$inet6(r0, &(0x7f0000000180)="d4", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x80000001, @loopback, 0x9}, 0x1c) 8m36.779076407s ago: executing program 3 (id=542): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x40000009, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = socket(0x1d, 0x2, 0x6) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x2, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) futex_waitv(&(0x7f0000000a80)=[{0x5, 0x0, 0x80}], 0x3c, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r4, &(0x7f0000000240), 0x0, 0x7000, 0x0, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) syz_open_procfs(0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000a40)=ANY=[@ANYBLOB="aaaaaa3dcfb1b9c6399954ff86dd604dd31800180600fe800000ee0400000000000000002689fe8000000000000000000000120000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078000022"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = io_uring_setup(0x76bd, &(0x7f0000000380)={0x0, 0x531c, 0x100, 0x0, 0x350}) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000824}, 0x20004000) ioctl$VIDIOC_QBUF(r6, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "230700dd"}, 0x0, 0x2, {}, 0x58603}) close_range(r5, 0xffffffffffffffff, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="7f0386155e7b00000000", @ANYRES16=r8, @ANYBLOB="000425bd7000fddbdf251300000008000580040002800400038004000280040007803c00028008000100ffffff7f0400040008000100010000000800010001feffff1c000380080001000600000008000100080000000800010000000000"], 0x64}, 0x1, 0x0, 0x0, 0x40004}, 0x24040814) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000100)=0x3) recvmmsg$unix(r7, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 8m35.630759815s ago: executing program 3 (id=547): mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION(r0, 0x79f, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000140)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="01000000400000f3414c9ccd938501024e00010003df"], 0x84}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$bt_l2cap(r3, &(0x7f0000000340)={0x1f, 0x3244, @none, 0x6}, 0xe) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r2, @ANYBLOB="01000000005c000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb00000800060000000000080005000000000024000780080005"], 0xd0}}, 0x80440d4) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCRMFF(r4, 0x40045506, 0x0) 8m34.43416137s ago: executing program 3 (id=552): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000005c0), 0x4000000000001f0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x4) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x4) socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r7}, 0x18) syz_open_procfs(0x0, 0x0) connect$pppl2tp(r6, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r0) sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002240)=@delchain={0x260, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0xb, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_bpf={{0x8}, {0x220, 0x2, [@TCA_BPF_FD={0x8, 0x6, r7}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x208, 0x1, [@m_simple={0x74, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x46, 0x6, "750ae847b2bef8a83e5f7888454acaf16a7a8b3cd67dc6be7745e2031382b08e6ffd50881ccbce67790b85d7fb07000000000000006c1aef4ff81519f94e78a9c59a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x190, 0x1e, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xa, 0x8, 0xffffffffffffffff, 0x28b, 0xa}}]}, {0x149, 0x6, "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"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x260}, 0x1, 0x0, 0x0, 0x81}, 0x20008051) r8 = socket(0x10, 0x803, 0x0) syz_io_uring_setup(0x7125, &(0x7f0000000300)={0x0, 0x9ea7, 0x2000, 0x8, 0x329, 0x0, r0}, &(0x7f0000000540), &(0x7f0000000580)) sendto(0xffffffffffffffff, &(0x7f0000000c40)="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", 0x1f6, 0x4004884, 0x0, 0x0) recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 8m33.297621698s ago: executing program 3 (id=556): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000300)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value=0x7000000}, 0x50) 8m32.917284959s ago: executing program 3 (id=559): pipe2$9p(&(0x7f0000000000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x38, &(0x7f00000002c0)=ANY=[@ANYBLOB="120110038121e940e60491553994010203010902260001000000000904000002e515bb0009050402090000000009058802"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) sched_setaffinity(0x0, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x3a) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioprio_get$pid(0x2, r2) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x13, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc2042, 0x184) r3 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x890, &(0x7f0000000c40)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@msize={'msize', 0x3d, 0x400000}}]}}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'sit0\x00', @ifru_settings={0x4, 0xffffffff, @te1=0x0}}) 8m17.337691597s ago: executing program 32 (id=559): pipe2$9p(&(0x7f0000000000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x38, &(0x7f00000002c0)=ANY=[@ANYBLOB="120110038121e940e60491553994010203010902260001000000000904000002e515bb0009050402090000000009058802"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) sched_setaffinity(0x0, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x3a) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioprio_get$pid(0x2, r2) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x13, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="b700000050000008bca30000000000002403000040feffff7b1af0ff0000000079a4f0ff000000001f030000000000002e030200000000002604fdffffff000e61141800000000001d430000000000007a0a00fe0000001f6114140000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c88629a6c921c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fbf05b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71ca3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60f132a2bf8a858392f34072d99aee0ec70aa6d75096e608d97ac4b7bfa2e0ae3e59718e7a7691a98b1334e34553300000000000000000000000000000000062c7cf52e9624806a4833e1c0059e5a703ab9c2e9b38779270dc5e80af75d509b1a31fe6ed3f8c0172659256dc88de4e377c8a07e95ec5549ae47dc43b93a159a201be254048b9e0857ea3c736c761e686f9b3d0690f035617a12055b2cb3a03794d67b95e7f4fc6af323120c09d0503c8ce92e869e22bb2590299ad76d541f844d32f96184f74d433793bbd75ec15fb1497ce835445212421cb4e3ce08395c9055a2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc2042, 0x184) r3 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x890, &(0x7f0000000c40)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@msize={'msize', 0x3d, 0x400000}}]}}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'sit0\x00', @ifru_settings={0x4, 0xffffffff, @te1=0x0}}) 9.714285012s ago: executing program 5 (id=2431): mkdir(&(0x7f0000000000)='./file0\x00', 0x18a) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)=@known='trusted.overlay.impure\x00') r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') fchdir(r2) exit(0xffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200c90, 0x0) syz_usb_connect(0x4, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010019033dd608f80600b0a85d0102030109021b00010908b006090405090184435f070905d7"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r5, 0x20, &(0x7f0000000580)={&(0x7f0000000340)=""/204, 0xcc, 0x0, &(0x7f0000000480)=""/236, 0xec}}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x0, 0x12, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8bf}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@exit, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x66d11d5c44fc5d2c}}}, &(0x7f0000000700)='syzkaller\x00', 0x2, 0x48, &(0x7f0000000740)=""/72, 0x41100, 0x50, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000007c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0x5, 0x7, 0x7}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000840)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000880)=[{0x2, 0x1, 0xb, 0x3}, {0x3, 0x4, 0x9, 0x2}, {0x2, 0x3, 0xa}, {0x1, 0x4, 0x7, 0x8}, {0x2, 0x5, 0x6, 0xb}, {0x5, 0x2, 0x3, 0x6}, {0x0, 0x401, 0xa, 0x3}, {0x5, 0x3, 0x0, 0xa}], 0x10, 0x1ff}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000009c0)=@o_path={&(0x7f0000000600)='./bus\x00', r6, 0x4000, r5}, 0x18) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="192c2fbd7000fcdbdf2515000000080014006e66631008000100", @ANYRES32=r4, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x840) 8.825056563s ago: executing program 2 (id=2437): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="11072abd7000fcdbdf250400"], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x400c40, 0x0) epoll_create1(0x0) mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) io_setup(0x800, &(0x7f0000002180)=0x0) io_submit(r2, 0x1, &(0x7f0000003200)=[&(0x7f00000031c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}]) mq_unlink(&(0x7f0000000000)='eth0\x00') prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r4, 0xffffffffffffffff, 0x0, 0x1) read$msr(r3, &(0x7f0000004c00)=""/102392, 0x18ff8) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="249a2cbd7000fcdbdf250e00000008110400ff0000009a89a3e8e9c7fcd304769cc5a8b560fc4ad3e78e90a3278f3227839d66aae6b503e0cd72d6d0f39d84f94a7ebd9432fd5d3acb2e981195d47582a3551c2fca625f637aee4369b94cb622da506e49b0c88beceef403d404bb872ed0ebd9e84430864c73abc0f3b474c6c286aed442e6dbbceb53aa77f9a596ff4268a6495d665bdd359d9d0474bc345bb6496e08a2de4c0137564c8ec322dfcae044e2c7403db00f297f00f0910cb0f5254e5bbae28f60657fe8c06123efd17463cebf7bed4ac2dff7652c709afa3fbac7aafb60d56b1843c9b61a8d4957a90d668d024e4b8733e248231e2b06875db82b82a6c35784c6384208b358f2d409b2"], 0x1c}, 0x1, 0x0, 0x0, 0x4000881}, 0x4040080) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="100024f0ab2426000456a229aef4", @ANYRES64=0x3], 0xfffffffffffffef0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000780)='./binderfs/binder1\x00', 0x802, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0xc0000006}) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) fsopen(0x0, 0x0) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x216, r8, &(0x7f0000000340)="4dd28d61f797c9254323731e51f665ef867626635c0f7098303660b213bb21aa6efdafd2b43ef24c21303ddf4d67adb35c810de1594c93f08700534414e09432526947a47eec2a5632331e007a060e5fbad5a7a6bf12ae4c8c94a1a1bad8f19059796e67b8b54a825fb3ba1a2420dc36a185b84ebdf72aceb4adc8c07dfac1b18288729e4f9b5bf06597ed7ae522a1c7700461a8960f918042b5a706bc2e53cbd9642bc2e139f475209d898bac13", 0xae, 0x1ff, 0x0, 0x2}]) 8.713029969s ago: executing program 0 (id=2439): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'erspan0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x700, 0x8000, 0x29a7, 0x3, {{0x10, 0x4, 0x2, 0x8, 0x40, 0x67, 0x0, 0x56, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @generic={0x44, 0xc, "e925dbad8995e62e8893"}, @noop, @timestamp={0x44, 0x1c, 0x47, 0x0, 0xf, [0x0, 0x4, 0x0, 0x10000, 0x4, 0x8]}, @noop]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@deltclass={0x38, 0x29, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r0, {0x8, 0xe}, {0xa, 0x7}, {0x1c}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x7}}, @tclass_kind_options=@c_prio={0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0x0, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc4}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef00090599"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8.463539093s ago: executing program 4 (id=2441): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) ptrace$pokeuser(0x6, 0x0, 0x358, 0xffff8880b870dfff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/timer_list\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000500)={0x0, 0x79af, 0x3180, 0x1, 0x36}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0xc, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r4}}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x60a80, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) writev(r6, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 8.303818735s ago: executing program 4 (id=2442): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_debug_messages', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f0000000140)) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)={[{@dyn}], [{@fsuuid={'fsuuid', 0x3d, {[0x64, 0x30, 0x31, 0x38, 0x61, 0x33, 0x64, 0x31], 0x2d, [0x65, 0x64, 0x34, 0x65], 0x2d, [0x35, 0x5a, 0x34, 0x35], 0x2d, [0x62, 0x38, 0x39, 0x37], 0x2d, [0x35, 0x4c, 0x30, 0x38, 0x30, 0x30, 0x34, 0x33]}}}, {@uid_eq={'uid', 0x3d, r1}}]}) chdir(&(0x7f00000000c0)='./file0\x00') ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, 0x0, 0x0, 0x4004) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x105042, 0x189) 8.25148401s ago: executing program 4 (id=2443): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='task_newtask\x00', r3, 0x0, 0x4}, 0x18) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="99e175a629626c2915dc1ad2b8d79820c7b4e73d92384ee6e00e565bda5b61f7af6685e4b9689cbe73d84dda92a18b5c2b4c80ef4a3ca9c11efa0158714af1683a5f844f2de2ff8fc02e66920705cb7653625974a14daad77725e199e922c146f6447661dd98e919783fda69380788d54615adbf2d3e8fc05527bd26c9ec9700518aa507cbcba9213f766f0af3fe6602d32b2fb7365fc890"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x19}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)=ANY=[@ANYRES32=r6, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="bac28c2ca071789d8f377c7f2c9e8f682e5ad34d3f4add3b107c2e6c5e8444fccc643618dc54ec830295470ca0d569f18754ac7214e56b767ccf33d204d9a6b66ad05a51a4efecb5b2b95b14a0c1a26cf7db0d94d6e59ca155d1ff80a4e9034eba5db3f6082c12ec82fa621447c8933fa9191b0ca2", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000010c0)=ANY=[@ANYRES32=r2, @ANYRES32=r5, @ANYBLOB="2f00000018"], 0x20) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$rds(0x15, 0x5, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87}, {@in=@remote, 0x0, 0x33}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x20}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x13c}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r10 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r10, 0xb702, 0x0) close(r9) 7.869908734s ago: executing program 1 (id=2444): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf000000}, {0x85, 0x0, 0x0, 0xa0}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf9}, 0x94) 7.818544617s ago: executing program 1 (id=2445): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffd74, 0x40004, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000340)={0x28, 0x5, r2, 0x0, 0x0, 0x0, 0x100000001}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000008c0)={0x28, 0x7, r2, 0x0, &(0x7f0000ae0000/0x4000)=nil, 0x4000, 0x8}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r2}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) dup(r4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000300)=""/102392, 0x18ff8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r8, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r6}, 0x20) sendmmsg$inet6(r6, &(0x7f0000019300), 0x400000000000164, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='bbr', 0x3) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 7.81592746s ago: executing program 2 (id=2446): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r0}, 0x10) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x8070bd2a, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x3c}}, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000000200)=r7) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 7.585944039s ago: executing program 2 (id=2447): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x2, 0x6}}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 7.277143017s ago: executing program 4 (id=2448): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={r1, 0x0, 0x1, 0x0, 0x1000000000000}) syz_usb_connect(0x3, 0x43, &(0x7f0000000300)={{0x12, 0x1, 0x310, 0x3f, 0xda, 0x7f, 0x40, 0x403, 0x9e90, 0x7e4b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x31, 0x1, 0x9, 0x1, 0x80, 0xc1, [{{0x9, 0x4, 0x35, 0x1, 0x0, 0xb0, 0x4a, 0x92, 0x8, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "98e0"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x6bf, 0x800, 0xf4}, {0x6, 0x24, 0x1a, 0x6, 0x25}}]}}]}}]}}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0}) 7.259926182s ago: executing program 0 (id=2449): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="210329bd7000fbdbdf25010000001c0002800c00018008000100080000000c000180"], 0x30}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0x0, 0x0, 0x14d300, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r5, 0x0, 0x310) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x110, r1, 0x9bf11000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r1, &(0x7f00000063c0), 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c080}, 0x8002) ioctl$BLKGETZONESZ(0xffffffffffffffff, 0x80041284, &(0x7f0000000000)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_calipso(0x0, r6) sendmsg$NLBL_CALIPSO_C_ADD(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x84a00803}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000fddbdf250100000008000200020000000800020002000000100002000800000000000000020000000800010002000000"], 0x3c}}, 0x20000880) syz_open_dev$vcsn(&(0x7f0000000b40), 0x1ff, 0x400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 6.905780722s ago: executing program 1 (id=2450): mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, 0x0) 6.625740383s ago: executing program 5 (id=2451): creat(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000000)={0x1d, r5}, 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0), 0xf00) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8, {0x7, 0x6}, {0xffff}, {0x1}}}, 0x24}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x61, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x11503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) 6.185882675s ago: executing program 0 (id=2452): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000001200), 0xffffffffffffffff) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r1 = socket(0x2, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xe4002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1400200bce) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002940)=""/102392, 0x18ff8) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) recvmmsg(r3, &(0x7f0000006100), 0x49f, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x200) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x200000a) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x3, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB="1002000000000000536f1e2892661800000000fcffffff85000000280000001801000020200b00000000000020202d7b1af8ff00000000bfa1000000000000070100545f8000000000000008000000b7030000000000008500000017000000954c28ccd67c797c7166723a602861f4d20e3e48d766a4b7b026040a98df70d4eb7c14b4a523c43828ef8d1dc50571be012d3f438d07dd905efb32b1178cba76edb5cc54e7e4b4599bd37cfc609ecfbaf47cec6a78158ef7facd598a35026444e2cac62b61af9d274faaae4de1014639c7824f975aaf521cba7fead96a43dcd6688ef0e0f042fabc6567f18232bec79b5365c3", @ANYRESOCT=0x0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc41, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9e654d387dbe9abc8ac6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r6, 0x84, 0x0, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) 5.560906323s ago: executing program 2 (id=2453): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) writev(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}], 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$ARCH_MAP_VDSO_32(0x1e, r0, 0xf8f, 0x2002) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000002c0)=@ccm_128={{0x304}, "f5ae67ce1867046c", "d45c0fb3b50879aba2adf149b3094195", "4783e287", "9dfe706cf5063d65"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304, 0x35}, "1ccdfb37f9d563e6", "65ce72e74a036530ae9a16c91786e7de9fae2a8fe379148751dfc40abc07a68b", "008000", "c99b4f9268be5a59"}, 0x4f) 5.484856522s ago: executing program 1 (id=2454): bind$alg(0xffffffffffffffff, &(0x7f0000003880)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00', @ANYBLOB="ec002cbd700205000000050000000600016feedaef924f5a25c82226000000000008000c00ac0a0000080009000200000005"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000140)={'wg2\x00', @local}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xe, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4, 0x0, @mcast2}}, 0x5c) 4.095944101s ago: executing program 4 (id=2455): bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') rseq(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) lseek(r0, 0x2004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x2004000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r2, 0x5601, 0xfffffffffffffffc) chdir(&(0x7f00000001c0)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x458002, 0x55) 3.234612462s ago: executing program 2 (id=2456): mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='hpfs\x00', 0x4080, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x8, &(0x7f0000000040)=@raw=[@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ldst={0x3, 0x2, 0x2, 0x7, 0x8, 0x50}, @tail_call], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x73, &(0x7f0000000140)=""/115, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x10, 0x2640, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x1, 0x7800, 0x0, 0x2, {{0x22, 0x4, 0x3, 0x1c, 0x88, 0x66, 0x0, 0x6, 0x29, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x42}, {[@rr={0x7, 0x13, 0x4c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x1b, 0xc9, [@local, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @private=0xa010100, @loopback]}, @timestamp_addr={0x44, 0x14, 0x2d, 0x1, 0x5, [{@private=0xa010100, 0x8000}, {@multicast2, 0x5}]}, @rr={0x7, 0x13, 0x21, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast1, @broadcast]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x18, 0xe1, 0x0, 0x7, [0x5, 0x0, 0x5, 0x100, 0x6]}]}}}}}) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x8, 0xc9}}}, 0x6) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f0000000040)={0x1, @sdr={0x34325842, 0x7}}) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x1, 0xc9}}}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff0001}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r0, r1, 0x25, 0xc, @val=@target_btf_id=0xffffffffffffffff}, 0x14) 2.899901277s ago: executing program 0 (id=2457): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x2c, &(0x7f0000002540)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg0\x00'}}]}, 0x38}, 0x1, 0xff0f0000, 0x0, 0x800}, 0x20000000) 2.763670781s ago: executing program 5 (id=2458): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = getpgrp(r0) process_vm_readv(r3, &(0x7f0000000680)=[{&(0x7f0000000300)=""/195, 0xc3}, {0x0}, {&(0x7f0000000040)=""/53, 0x35}, {0x0}, {0x0}, {&(0x7f0000002080)=""/4096, 0x1000}], 0x6, &(0x7f0000000bc0), 0x0, 0x0) ioperm(0x0, 0x2, 0x7e) gettid() timer_create(0xb, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syslog(0x2, &(0x7f00000001c0)=""/229, 0xe5) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r5}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 2.701796861s ago: executing program 0 (id=2459): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='task_newtask\x00', r3, 0x0, 0x4}, 0x18) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="99e175a629626c2915dc1ad2b8d79820c7b4e73d92384ee6e00e565bda5b61f7af6685e4b9689cbe73d84dda92a18b5c2b4c80ef4a3ca9c11efa0158714af1683a5f844f2de2ff8fc02e66920705cb7653625974a14daad77725e199e922c146f6447661dd98e919783fda69380788d54615adbf2d3e8fc05527bd26c9ec9700518aa507cbcba9213f766f0af3fe6602d32b2fb7365fc890"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x19}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)=ANY=[@ANYRES32=r6, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="bac28c2ca071789d8f377c7f2c9e8f682e5ad34d3f4add3b107c2e6c5e8444fccc643618dc54ec830295470ca0d569f18754ac7214e56b767ccf33d204d9a6b66ad05a51a4efecb5b2b95b14a0c1a26cf7db0d94d6e59ca155d1ff80a4e9034eba5db3f6082c12ec82fa621447c8933fa9191b0ca2", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000010c0)=ANY=[@ANYRES32=r2, @ANYRES32=r5, @ANYBLOB="2f00000018"], 0x20) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$rds(0x15, 0x5, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87}, {@in=@remote, 0x0, 0x33}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x20}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x13c}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r10 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r10, 0xb702, 0x0) close(r9) 1.77378677s ago: executing program 5 (id=2460): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt(r3, 0x5, 0x3, &(0x7f0000000140)=""/116, &(0x7f0000000000)=0x74) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x66, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0x1, 0xffffffffffffffff], 0x0, 0x10, 0xc000000}, 0x94) sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 1.645688602s ago: executing program 4 (id=2461): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x1, 0x3, 0xfffffffe, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x6, 0x2}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000020c0), 0x60081, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r3, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x4, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0xf7) mq_notify(r2, &(0x7f0000000340)={0x0, 0x5, 0x4, @tid=r0}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {r4, r5+10000000}}, &(0x7f00000000c0)) timer_settime(r1, 0x1, &(0x7f0000000300)={{}, {0x0, 0x989680}}, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x10) r6 = add_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="6eefc067ae7d684430a94839fd03c2aa04a321fa8da9cc180544bdc8a2e77a1efc00fccba9ba25", 0x27, 0xfffffffffffffffb) add_key$user(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="328384d38462c999d09463fba80383bfa7beb593520bd0f7c84e3947c616dfd46ecda9099253914c4bd091d1a0e9a14cb77eebd8cc937ad5cac17b7f14cd0e76d464ac3d0fb69bd7", 0x48, r6) 1.524679549s ago: executing program 5 (id=2462): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x6c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4081}, 0x4000185) 1.521045391s ago: executing program 1 (id=2463): syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340), &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000100000000000000440005000000000000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f00000000c0)={0x7, 0x11, 0x0, 0x17, 0x4, 0x0, 0x5, 0x149, 0x1}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, 0x0, 0x0}, 0x20) syz_open_procfs(0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0xc) socket$inet(0x2, 0x3, 0xd) 1.479246805s ago: executing program 5 (id=2464): mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, 0x0) 39.307386ms ago: executing program 0 (id=2465): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x32400, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x200000000000000) ioctl$TIOCVHANGUP(r0, 0x5437, 0x300) 4.124308ms ago: executing program 2 (id=2466): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x2d6}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0400f9f407000904018000200000000000000000000800010000000000", 0x24) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x7f, 0x0, &(0x7f0000000000)) setsockopt$inet6_int(r3, 0x29, 0x34, &(0x7f0000000000)=0x5, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x11}]}}]}, 0x38}}, 0x0) sendmmsg$inet(r1, &(0x7f0000007080)=[{{&(0x7f00000001c0)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)="bd4b0276c6deec20d479dac7ffa654e66a4bfdd155b810c2f7b23a06f425ea60034f6d58f2d7b34065c03507017138f74f42cdad7fed499410c9cd4cdba7c0796b7ecec9149e1cd7c50126b8513112dbc34b9287b88c7ab1651ba5379cae1e214515f8e8a16d132c787d1e45eaf183e040ff95c50276d75be036ef55f02d288c70ee26394f0aadfc2622e429163dc46c", 0x90}], 0x1, &(0x7f00000003c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x401}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x400}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0xcf, 0x0, 0x4, [0x7f, 0x0]}, @cipso={0x86, 0x17, 0x1, [{0x7, 0xb, "be599ea817f62b4b54"}, {0x0, 0x6, "e4eed897"}]}, @generic={0x7, 0x9, "36e33d622bbc3c"}, @lsrr={0x83, 0x3, 0xfc}, @cipso={0x86, 0xa, 0x3, [{0x5, 0x4, "2c9a"}]}]}}}], 0xf8}}, {{&(0x7f0000000500)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001940)=[{0x0}, {&(0x7f0000000940)="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", 0x1000}, {0x0}, {&(0x7f0000000780)}, {&(0x7f0000000880)="cc6d650564341bc5805ed8ecde3665248816a25922ba6dbcf449809e1aa76fba", 0x20}], 0x5, &(0x7f00000019c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x30}}, {{&(0x7f0000003d80)={0x2, 0x4e24, @remote}, 0x10, 0x0}}, {{&(0x7f00000042c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000004380)=[@ip_retopts={{0x10}}, @ip_retopts={{0x18, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0xe, 0x0, 0x9}, @ra={0x94, 0x4, 0x1}]}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x4, 0x64, 0x0, 0x4}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0xcc, 0x0, 0x7, {[@cipso={0x86, 0x1c, 0x1, [{0x1, 0x12, "8825be02225938d483971092a47dcba4"}, {0x7, 0x2}, {0x2, 0x2}]}, @cipso={0x86, 0x49, 0x0, [{0x6, 0x8, "e8f066c7ada5"}, {0x6, 0x6, "529a0d99"}, {0x1, 0x8, "b3a090d4a118"}, {0x7, 0x4, "f9fe"}, {0x6, 0x7, "684c6651f5"}, {0x0, 0x12, "ed6903a4b71495c4b72ad792694be1b4"}, {0x5, 0x10, "9718b3f284aad322b5e7f91c3814"}]}, @timestamp_addr={0x44, 0x54, 0xd, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@multicast1, 0x3}, {@broadcast, 0x1000}, {@broadcast, 0x2}, {@broadcast}, {@private=0xa010101, 0x401}, {@remote, 0x1}, {@rand_addr=0x64010101, 0x1}, {@empty, 0x5}, {@multicast2, 0x6}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_retopts={{0x74, 0x0, 0x7, {[@noop, @lsrr={0x83, 0x1f, 0xb2, [@loopback, @rand_addr=0x64010102, @empty, @empty, @remote, @broadcast, @remote]}, @noop, @timestamp_addr={0x44, 0x1c, 0xf9, 0x1, 0x6, [{@rand_addr=0x64010101, 0x6}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x80}, {@dev={0xac, 0x14, 0x14, 0x39}, 0xc78}]}, @ra={0x94, 0x4}, @rr={0x7, 0xf, 0x95, [@loopback, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x14, 0xbf, 0x0, 0x0, [0x6, 0x7, 0x4, 0x0]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x1f0}}, {{&(0x7f0000004680)={0x2, 0x4e20, @empty}, 0x10, &(0x7f00000047c0)=[{&(0x7f00000046c0)}], 0x1, &(0x7f0000004840)=[@ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14}}, @ip_retopts={{0x40, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x2c, 0x72, 0x3, 0x5, [{@empty, 0x4}, {@multicast1, 0x9}, {@broadcast, 0xafb}, {@private=0xa010102}, {@remote}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x13}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0xf0}}, {{0x0, 0x0, &(0x7f0000006d40)=[{&(0x7f0000004980)="5c507139a7d2416fc0a23cbcd0d93b53ca5ee8e65f21d76943ec944996ad0517f7f82d51dec4d949550e43e951e8ed", 0x2f}, {&(0x7f0000004a80)="e3306948c1f3b24c8984274fc82db2f9acb9eb1f1398488f1d2b182958824b9db056109e32794d576a73c45d82a9dd522063b6eb175a3bb1b1e0a49c3a4cf7cf444a396e21a7d98be9d2d43b4c428419cc256387e2c3eec44a692b0fb8c2b22afb4e71d7ac2a75ba36ba596f977630d1b4020ec58f15ab16718c93578c372e544644a463f3eaa584c6", 0x89}, {&(0x7f0000004b40)="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", 0x1000}, {0x0}, {&(0x7f0000005c00)="58dcdb8dd8ad2c3edf5856ab47d5043d552ffe396c09e1e32b492463871441f7acbf", 0x22}, {&(0x7f0000005c40)="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", 0x1000}, {&(0x7f0000006c40)="0505179e1000ddad7f3dfb96127efee76046c014cf2186c60ef51d3658c1266547f81a7c79d44d1ae27c7ae0656d20eb818a0a84da56246b05464861915a019ca0afce", 0x43}, {&(0x7f0000006cc0)="fdbbcdf94e419ea84f2028bf77c92acedd81917c9a5d020ad19ed172177dc470794eb163dd5961f06d4d0aa6805addb6558e44eafadb09a7b64e9c395d9075576ee948cc42744ae08361703e6131e6637ca891082997b3af247a5250d3e3649cb208527c35ce926c33e08720142ab9", 0x6f}], 0x8, &(0x7f0000006e00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @empty}}}], 0x20}}, {{&(0x7f0000006e40)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f0000006f80)=[{0x0}, {&(0x7f0000006f40)="fcee8d598171", 0x6}], 0x2, &(0x7f0000006fc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x400}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7ff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x80}}], 0x7, 0x40000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000040)) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfff9, 0x8}, 0x8) sendto$inet6(r5, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x81}, 0x1c) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x1) ioctl$SIOCAX25ADDFWD(r6, 0x89ea, &(0x7f0000000040)={@default, @default}) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0xfffffff4}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, 0x0, &(0x7f0000000140)) close(0x3) r7 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) connect$inet(r7, &(0x7f0000000140)={0x2, 0xc000, @remote}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000100001000035245c84e5b6b937b888adec9cb5a91900000000000000f000000a140000311100010200000000000000000000000a"], 0x28}}, 0x8800) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, &(0x7f0000000040)) 0s ago: executing program 1 (id=2467): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1bd33d3c46e231f9, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000005ac0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="eb13456f46a765abf639b72b8a139f359b9ab775ac089217bd34619d163b302fe5b56c83ba36f2ad5754652a659f4ca2976163de39b0b1cb89a196cf345297dcd360a49eb55a17802e01dd8889e790398c694d209ea9ec4b5a7b2137842999f05efaaffad4d5fc4c297426d39e2973afd17797c56f1ee7565a175f08702135bc531a8f2f45a6e2256a06a59cd5c0e8f04a30cf162903e042383dcf85118a5c0512d767cca0b677800dbe39150990370afcbbc0550c13d62bdd242cc9dfab2e194bc4103e3293bcb3d55fb5e7887c07d23157b978ce1378c755f654a5eeed63e488fafc22fa520f8c974e901ac57ad1072d8362d5022583ce4698aa51a1ba478ec2128d2467a4a5c8ba0e0e073115c783458d5cc562d473a42b8693dfa2f5047ad4484c9000fc70303560903325dba08cc0ca84652ac269a33e43981372f5f0cbf016385b579c2e3bae9fe2ae1b537dae375160794c21e1d0346bd9577ce62bfb3634105ebfa216cd9a2d693b4eb420af5b94b2a35c024a2199f72280b96ebbd50d1f934e2ed5e809b7eb513b932f049846c783c755c2997d9213d3be892dcbd11e9618aebd610b230b78c5fd673741063fb3603c3c87989eb6a2ca0d2029d8c055c35e3b918c234abc1287ad6665fc04995434cd078d5997edc4b2f86ee29412688aafbb274b1837783edf0cea84870a97a13b5acd0e409ea7bf9ae009785b5effd2745231f0d95b42649f41d4fe01b9", 0x210}], 0x1, 0x0, 0x0, 0x40045}], 0x1, 0x4081) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffff", @ANYRES32=r3, @ANYBLOB="010000"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newqdisc={0x54, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}}, 0x0) sendto$packet(r0, &(0x7f0000000580)="44c394f305916c4516999da20800", 0x36, 0x0, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) kernel console output (not intermixed with test programs): x870 [ 497.475086][T11914] ? __pfx_netlink_unicast+0x10/0x10 [ 497.475113][T11914] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 497.475148][T11914] netlink_sendmsg+0x8c8/0xdd0 [ 497.475180][T11914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.475218][T11914] ____sys_sendmsg+0xa98/0xc70 [ 497.475239][T11914] ? copy_msghdr_from_user+0x10a/0x160 [ 497.475263][T11914] ? __pfx_____sys_sendmsg+0x10/0x10 [ 497.475295][T11914] ___sys_sendmsg+0x134/0x1d0 [ 497.475322][T11914] ? __pfx____sys_sendmsg+0x10/0x10 [ 497.475381][T11914] __sys_sendmsg+0x16d/0x220 [ 497.475405][T11914] ? __pfx___sys_sendmsg+0x10/0x10 [ 497.475448][T11914] do_syscall_64+0xcd/0x4e0 [ 497.475475][T11914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.475493][T11914] RIP: 0033:0x7fa6ccf8eec9 [ 497.475509][T11914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.475526][T11914] RSP: 002b:00007fa6cdeca038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.475542][T11914] RAX: ffffffffffffffda RBX: 00007fa6cd1e5fa0 RCX: 00007fa6ccf8eec9 [ 497.475553][T11914] RDX: 000000000000c010 RSI: 0000200000000280 RDI: 0000000000000004 [ 497.475563][T11914] RBP: 00007fa6cdeca090 R08: 0000000000000000 R09: 0000000000000000 [ 497.475573][T11914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 497.475583][T11914] R13: 00007fa6cd1e6038 R14: 00007fa6cd1e5fa0 R15: 00007ffc271ff178 [ 497.475606][T11914] [ 497.786075][ C1] vkms_vblank_simulate: vblank timer overrun [ 497.970860][ T9654] pwc: recv_control_msg error -71 req 04 val 1500 [ 497.977767][ T9654] pwc: recv_control_msg error -71 req 02 val 2500 [ 497.988036][ T9654] pwc: recv_control_msg error -71 req 02 val 2400 [ 498.008635][ T9654] pwc: recv_control_msg error -71 req 02 val 2600 [ 498.017463][ T9654] pwc: recv_control_msg error -71 req 02 val 2900 [ 498.036443][ T9654] pwc: recv_control_msg error -71 req 02 val 2800 [ 498.044967][ T9654] pwc: recv_control_msg error -71 req 04 val 1100 [ 498.061138][ T9654] pwc: recv_control_msg error -71 req 04 val 1200 [ 498.162591][ T9654] pwc: Registered as video103. [ 498.178422][ T9654] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input28 [ 498.200021][ T9654] usb 2-1: USB disconnect, device number 35 [ 498.377182][T11926] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32874 sclass=netlink_route_socket pid=11926 comm=syz.0.1705 [ 499.726142][ T5967] usb 3-1: USB disconnect, device number 52 [ 501.566884][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.738770][T11974] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1719'. [ 503.520470][ T24] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 503.704259][ T24] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 503.712914][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.764618][ T24] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 503.793434][ T24] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 503.812431][ T24] usb 6-1: Manufacturer: syz [ 503.854682][ T24] usb 6-1: config 0 descriptor?? [ 504.052740][ T24] rc_core: IR keymap rc-hauppauge not found [ 504.063901][ T24] Registered IR keymap rc-empty [ 504.079781][ T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 504.219031][ T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input29 [ 504.760098][ T24] usb 6-1: USB disconnect, device number 26 [ 505.060410][ T5822] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 505.071148][T12022] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1733'. [ 505.082520][ T30] audit: type=1400 audit(1759568996.435:2246): avc: denied { nlmsg_read } for pid=12021 comm="syz.5.1733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 505.207675][T12031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1736'. [ 505.374823][T12031] netlink: 5136 bytes leftover after parsing attributes in process `syz.2.1736'. [ 505.390998][ T5822] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 505.410965][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.857637][ T5822] usb 2-1: Product: syz [ 505.876600][ T5822] usb 2-1: Manufacturer: syz [ 505.888201][ T5822] usb 2-1: SerialNumber: syz [ 505.909364][ T5822] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 505.953583][ T9654] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 505.978656][T12044] FAULT_INJECTION: forcing a failure. [ 505.978656][T12044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 506.010470][T12044] CPU: 1 UID: 0 PID: 12044 Comm: syz.2.1738 Not tainted syzkaller #0 PREEMPT(full) [ 506.010495][T12044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 506.010506][T12044] Call Trace: [ 506.010512][T12044] [ 506.010520][T12044] dump_stack_lvl+0x16c/0x1f0 [ 506.010550][T12044] should_fail_ex+0x512/0x640 [ 506.010586][T12044] _copy_to_user+0x32/0xd0 [ 506.010616][T12044] simple_read_from_buffer+0xcb/0x170 [ 506.010637][T12044] proc_fail_nth_read+0x197/0x240 [ 506.010660][T12044] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 506.010683][T12044] ? rw_verify_area+0xcf/0x6c0 [ 506.010713][T12044] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 506.010735][T12044] vfs_read+0x1e1/0xcf0 [ 506.010757][T12044] ? __pfx___mutex_lock+0x10/0x10 [ 506.010783][T12044] ? __pfx_vfs_read+0x10/0x10 [ 506.010808][T12044] ? __fget_files+0x20e/0x3c0 [ 506.010835][T12044] ksys_read+0x12a/0x250 [ 506.010852][T12044] ? __pfx_ksys_read+0x10/0x10 [ 506.010878][T12044] do_syscall_64+0xcd/0x4e0 [ 506.010904][T12044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.010923][T12044] RIP: 0033:0x7fa4fb18d8dc [ 506.010937][T12044] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 506.010953][T12044] RSP: 002b:00007fa4fbf8e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 506.010970][T12044] RAX: ffffffffffffffda RBX: 00007fa4fb3e5fa0 RCX: 00007fa4fb18d8dc [ 506.010981][T12044] RDX: 000000000000000f RSI: 00007fa4fbf8e0a0 RDI: 0000000000000008 [ 506.010990][T12044] RBP: 00007fa4fbf8e090 R08: 0000000000000000 R09: 0000000000000000 [ 506.011000][T12044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.011010][T12044] R13: 00007fa4fb3e6038 R14: 00007fa4fb3e5fa0 R15: 00007ffd6d725f98 [ 506.011035][T12044] [ 506.265596][ T5967] usb 2-1: USB disconnect, device number 36 [ 506.339607][ T30] audit: type=1400 audit(1759568997.705:2247): avc: denied { accept } for pid=12047 comm="syz.2.1740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 506.560433][ T24] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 506.710947][ T5826] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 506.720854][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 506.727189][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 506.733865][ T24] usb 1-1: New USB device found, idVendor=1e71, idProduct=200e, bcdDevice= 0.00 [ 506.742960][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.753057][ T24] usb 1-1: config 0 descriptor?? [ 506.849244][T12058] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 506.851469][ T5822] IPVS: starting estimator thread 0... [ 506.891574][ T5826] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 506.901319][ T5826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.909335][ T5826] usb 3-1: Product: syz [ 506.914421][ T5826] usb 3-1: Manufacturer: syz [ 506.919029][ T5826] usb 3-1: SerialNumber: syz [ 506.933519][ T5826] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 506.947979][ T5894] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 506.957003][T12060] IPVS: using max 44 ests per chain, 105600 per kthread [ 506.976144][ T24] usb 1-1: string descriptor 0 read error: -71 [ 506.986540][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 506.993447][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 507.450240][ T9654] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 507.452942][ T24] usb 1-1: USB disconnect, device number 58 [ 507.463387][ T9654] ath9k_htc: Failed to initialize the device [ 507.480892][ T5967] usb 2-1: ath9k_htc: USB layer deinitialized [ 507.497725][T12068] FAULT_INJECTION: forcing a failure. [ 507.497725][T12068] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 507.511359][T12068] CPU: 1 UID: 0 PID: 12068 Comm: syz.4.1747 Not tainted syzkaller #0 PREEMPT(full) [ 507.511382][T12068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 507.511392][T12068] Call Trace: [ 507.511398][T12068] [ 507.511406][T12068] dump_stack_lvl+0x16c/0x1f0 [ 507.511434][T12068] should_fail_ex+0x512/0x640 [ 507.511465][T12068] should_fail_alloc_page+0xe7/0x130 [ 507.511487][T12068] prepare_alloc_pages+0x3c2/0x610 [ 507.511512][T12068] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 507.511538][T12068] ? __pfx_try_to_migrate_one+0x10/0x10 [ 507.511572][T12068] ? __up_read+0x1f8/0x750 [ 507.511594][T12068] ? __pfx___up_read+0x10/0x10 [ 507.511614][T12068] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 507.511638][T12068] ? rmap_walk_anon+0x503/0x710 [ 507.511680][T12068] __folio_alloc_noprof+0x11/0x220 [ 507.511696][T12068] alloc_migration_target+0x24a/0x660 [ 507.511720][T12068] migrate_pages_batch+0x3b9/0x3bb0 [ 507.511746][T12068] ? __pfx_alloc_migration_target+0x10/0x10 [ 507.511777][T12068] ? __pfx_migrate_pages_batch+0x10/0x10 [ 507.511804][T12068] ? __pfx_walk_pgd_range+0x10/0x10 [ 507.511824][T12068] migrate_pages_sync+0x12d/0x8a0 [ 507.511849][T12068] ? __pfx_alloc_migration_target+0x10/0x10 [ 507.511875][T12068] ? queue_pages_test_walk+0x279/0x410 [ 507.511898][T12068] ? __pfx_migrate_pages_sync+0x10/0x10 [ 507.511921][T12068] ? walk_page_test+0x9b/0x180 [ 507.511939][T12068] ? walk_page_range_mm+0x235/0xb40 [ 507.511960][T12068] migrate_pages+0x1b5f/0x23a0 [ 507.511985][T12068] ? __pfx_alloc_migration_target+0x10/0x10 [ 507.512013][T12068] ? __pfx_migrate_pages+0x10/0x10 [ 507.512037][T12068] ? queue_pages_range+0x11e/0x180 [ 507.512059][T12068] ? __pfx___up_read+0x10/0x10 [ 507.512079][T12068] ? do_migrate_pages+0x458/0x750 [ 507.512098][T12068] ? do_migrate_pages+0x39a/0x750 [ 507.512122][T12068] do_migrate_pages+0x48e/0x750 [ 507.512148][T12068] ? __pfx_do_migrate_pages+0x10/0x10 [ 507.512167][T12068] ? irqentry_exit+0x3b/0x90 [ 507.512189][T12068] ? rcu_is_watching+0x12/0xc0 [ 507.512216][T12068] ? cap_capable+0xb3/0x250 [ 507.512239][T12068] ? security_capable+0x250/0x260 [ 507.512262][T12068] kernel_migrate_pages+0x55b/0x700 [ 507.512283][T12068] ? __pfx_kernel_migrate_pages+0x10/0x10 [ 507.512304][T12068] ? ksys_write+0x1ac/0x250 [ 507.512320][T12068] ? __pfx_ksys_write+0x10/0x10 [ 507.512342][T12068] __x64_sys_migrate_pages+0x96/0x100 [ 507.512362][T12068] ? lockdep_hardirqs_on+0x7c/0x110 [ 507.512384][T12068] do_syscall_64+0xcd/0x4e0 [ 507.512409][T12068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.512425][T12068] RIP: 0033:0x7f55b038eec9 [ 507.512438][T12068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.512454][T12068] RSP: 002b:00007f55b1220038 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 507.512470][T12068] RAX: ffffffffffffffda RBX: 00007f55b05e6180 RCX: 00007f55b038eec9 [ 507.512481][T12068] RDX: 0000200000000000 RSI: 0000000000000005 RDI: 0000000000000000 [ 507.512491][T12068] RBP: 00007f55b1220090 R08: 0000000000000000 R09: 0000000000000000 [ 507.512501][T12068] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 507.512511][T12068] R13: 00007f55b05e6218 R14: 00007f55b05e6180 R15: 00007ffd498ecae8 [ 507.512533][T12068] [ 507.917756][T12073] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1749'. [ 507.952222][T12073] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 507.984176][T12075] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 508.053034][ T5894] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 508.081359][ T5894] ath9k_htc: Failed to initialize the device [ 508.091218][T12077] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1750'. [ 508.102197][T12077] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 508.113590][T12077] FAULT_INJECTION: forcing a failure. [ 508.113590][T12077] name failslab, interval 1, probability 0, space 0, times 0 [ 508.127200][T12077] CPU: 1 UID: 0 PID: 12077 Comm: syz.5.1750 Not tainted syzkaller #0 PREEMPT(full) [ 508.127223][T12077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 508.127237][T12077] Call Trace: [ 508.127243][T12077] [ 508.127250][T12077] dump_stack_lvl+0x16c/0x1f0 [ 508.127280][T12077] should_fail_ex+0x512/0x640 [ 508.127305][T12077] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 508.127327][T12077] should_failslab+0xc2/0x120 [ 508.127350][T12077] kmem_cache_alloc_node_noprof+0x78/0x770 [ 508.127366][T12077] ? __alloc_skb+0x2b2/0x380 [ 508.127393][T12077] ? __alloc_skb+0x2b2/0x380 [ 508.127413][T12077] __alloc_skb+0x2b2/0x380 [ 508.127436][T12077] ? __pfx___alloc_skb+0x10/0x10 [ 508.127464][T12077] ? kasan_check_range+0x15c/0x1b0 [ 508.127493][T12077] netlink_ack+0x15d/0xb80 [ 508.127528][T12077] netlink_rcv_skb+0x332/0x420 [ 508.127561][T12077] ? __pfx_genl_rcv_msg+0x10/0x10 [ 508.127581][T12077] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 508.127619][T12077] ? netlink_deliver_tap+0x1ae/0xd30 [ 508.127650][T12077] genl_rcv+0x28/0x40 [ 508.127667][T12077] netlink_unicast+0x5a7/0x870 [ 508.127697][T12077] ? __pfx_netlink_unicast+0x10/0x10 [ 508.127724][T12077] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 508.127759][T12077] netlink_sendmsg+0x8c8/0xdd0 [ 508.127791][T12077] ? __pfx_netlink_sendmsg+0x10/0x10 [ 508.127828][T12077] ____sys_sendmsg+0xa98/0xc70 [ 508.127848][T12077] ? copy_msghdr_from_user+0x10a/0x160 [ 508.127873][T12077] ? __pfx_____sys_sendmsg+0x10/0x10 [ 508.127905][T12077] ___sys_sendmsg+0x134/0x1d0 [ 508.127930][T12077] ? __pfx____sys_sendmsg+0x10/0x10 [ 508.127986][T12077] __sys_sendmsg+0x16d/0x220 [ 508.128007][T12077] ? __pfx___sys_sendmsg+0x10/0x10 [ 508.128032][T12077] do_syscall_64+0xcd/0x4e0 [ 508.128049][T12077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.128061][T12077] RIP: 0033:0x7fa6ccf8eec9 [ 508.128071][T12077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 508.128082][T12077] RSP: 002b:00007fa6cdeca038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 508.128093][T12077] RAX: ffffffffffffffda RBX: 00007fa6cd1e5fa0 RCX: 00007fa6ccf8eec9 [ 508.128100][T12077] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000003 [ 508.128107][T12077] RBP: 00007fa6cdeca090 R08: 0000000000000000 R09: 0000000000000000 [ 508.128113][T12077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 508.128120][T12077] R13: 00007fa6cd1e6038 R14: 00007fa6cd1e5fa0 R15: 00007ffc271ff178 [ 508.128134][T12077] [ 508.414535][ T5894] usb 3-1: ath9k_htc: USB layer deinitialized [ 508.441450][T12080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1751'. [ 508.488374][T12080] FAULT_INJECTION: forcing a failure. [ 508.488374][T12080] name failslab, interval 1, probability 0, space 0, times 0 [ 508.501815][T12080] CPU: 1 UID: 0 PID: 12080 Comm: syz.4.1751 Not tainted syzkaller #0 PREEMPT(full) [ 508.501837][T12080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 508.501848][T12080] Call Trace: [ 508.501853][T12080] [ 508.501860][T12080] dump_stack_lvl+0x16c/0x1f0 [ 508.501891][T12080] should_fail_ex+0x512/0x640 [ 508.501916][T12080] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 508.501943][T12080] should_failslab+0xc2/0x120 [ 508.501963][T12080] kmem_cache_alloc_noprof+0x75/0x6e0 [ 508.501989][T12080] ? skb_clone+0x190/0x3f0 [ 508.502016][T12080] ? skb_clone+0x190/0x3f0 [ 508.502037][T12080] skb_clone+0x190/0x3f0 [ 508.502060][T12080] netlink_deliver_tap+0xabd/0xd30 [ 508.502090][T12080] netlink_unicast+0x71f/0x870 [ 508.502117][T12080] ? __pfx_netlink_unicast+0x10/0x10 [ 508.502139][T12080] ? __pfx_tc_new_tfilter+0x10/0x10 [ 508.502164][T12080] netlink_ack+0x696/0xb80 [ 508.502195][T12080] netlink_rcv_skb+0x332/0x420 [ 508.502218][T12080] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 508.502243][T12080] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 508.502292][T12080] netlink_unicast+0x5a7/0x870 [ 508.502322][T12080] ? __pfx_netlink_unicast+0x10/0x10 [ 508.502358][T12080] netlink_sendmsg+0x8c8/0xdd0 [ 508.502387][T12080] ? __pfx_netlink_sendmsg+0x10/0x10 [ 508.502420][T12080] ____sys_sendmsg+0xa98/0xc70 [ 508.502438][T12080] ? copy_msghdr_from_user+0x10a/0x160 [ 508.502460][T12080] ? __pfx_____sys_sendmsg+0x10/0x10 [ 508.502482][T12080] ? __pfx__kstrtoull+0x10/0x10 [ 508.502511][T12080] ___sys_sendmsg+0x134/0x1d0 [ 508.502536][T12080] ? __pfx____sys_sendmsg+0x10/0x10 [ 508.502571][T12080] ? find_held_lock+0x2b/0x80 [ 508.502612][T12080] __sys_sendmmsg+0x200/0x420 [ 508.502640][T12080] ? __pfx___sys_sendmmsg+0x10/0x10 [ 508.502671][T12080] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 508.502705][T12080] ? fput+0x9b/0xd0 [ 508.502730][T12080] ? xfd_validate_state+0x61/0x180 [ 508.502746][T12080] ? __pfx_ksys_write+0x10/0x10 [ 508.502767][T12080] __x64_sys_sendmmsg+0x9c/0x100 [ 508.502790][T12080] ? lockdep_hardirqs_on+0x7c/0x110 [ 508.502813][T12080] do_syscall_64+0xcd/0x4e0 [ 508.502840][T12080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.502857][T12080] RIP: 0033:0x7f55b038eec9 [ 508.502872][T12080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 508.502888][T12080] RSP: 002b:00007f55b1262038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 508.502904][T12080] RAX: ffffffffffffffda RBX: 00007f55b05e5fa0 RCX: 00007f55b038eec9 [ 508.502915][T12080] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 508.502925][T12080] RBP: 00007f55b1262090 R08: 0000000000000000 R09: 0000000000000000 [ 508.502935][T12080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 508.502945][T12080] R13: 00007f55b05e6038 R14: 00007f55b05e5fa0 R15: 00007ffd498ecae8 [ 508.502969][T12080] [ 508.914226][ T5967] usb 3-1: USB disconnect, device number 53 [ 509.258377][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.987950][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.002749][T12092] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 510.016953][ T30] audit: type=1400 audit(1759569001.385:2248): avc: denied { call } for pid=12091 comm="syz.4.1755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 510.052554][ T30] audit: type=1400 audit(1759569001.415:2249): avc: denied { transfer } for pid=12091 comm="syz.4.1755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 510.222574][T12100] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 510.229112][T12100] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 510.237287][T12100] vhci_hcd vhci_hcd.0: Device attached [ 510.461981][ T5967] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 510.480396][ T9] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 510.580652][T12106] trusted_key: syz.2.1757 sent an empty control message without MSG_MORE. [ 511.070389][ T5967] usb 6-1: Using ep0 maxpacket: 16 [ 511.077107][ T5967] usb 6-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.088353][ T5967] usb 6-1: config 1 interface 0 has no altsetting 0 [ 511.099314][ T5967] usb 6-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.40 [ 511.108430][ T5967] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.116541][ T5967] usb 6-1: Product: syz [ 511.121552][ T5967] usb 6-1: Manufacturer: syz [ 511.128778][ T5967] usb 6-1: SerialNumber: syz [ 511.843682][ T5967] usb 6-1: can't set config #1, error -71 [ 511.991579][ T5967] usb 6-1: USB disconnect, device number 27 [ 512.163566][T12116] ubi: mtd0 is already attached to ubi31 [ 512.553908][ T30] audit: type=1400 audit(1759569003.915:2250): avc: denied { write } for pid=12114 comm="syz.5.1760" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 513.020461][ T5967] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 513.615079][T12101] vhci_hcd: connection reset by peer [ 513.622666][ T36] vhci_hcd: stop threads [ 513.623118][ T5967] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 513.628467][ T36] vhci_hcd: release socket [ 513.642704][ T5967] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.645007][ T36] vhci_hcd: disconnect device [ 513.653836][ T5967] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.671011][ T5967] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 513.691376][ T5967] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 513.703608][ T5967] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 513.734707][ T5967] usb 6-1: Manufacturer: syz [ 513.874398][ T5967] usb 6-1: config 0 descriptor?? [ 514.522783][T12156] syzkaller0: entered promiscuous mode [ 514.528490][T12156] syzkaller0: entered allmulticast mode [ 514.664138][ T5967] hid_parser_main: 22 callbacks suppressed [ 514.664159][ T5967] appleir 0003:05AC:8243.000A: unknown main item tag 0x0 [ 514.684949][ T5967] appleir 0003:05AC:8243.000A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 514.986824][ T5822] usb 6-1: USB disconnect, device number 28 [ 515.631495][ T9] vhci_hcd: vhci_device speed not set [ 515.842238][T12162] wg0 speed is unknown, defaulting to 1000 [ 515.854897][ T5967] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 515.976439][T12181] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 516.041481][ T5967] usb 6-1: Using ep0 maxpacket: 8 [ 516.052315][ T5967] usb 6-1: unable to get BOS descriptor or descriptor too short [ 516.076650][ T5967] usb 6-1: config 12 interface 0 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0 [ 516.087343][ T5967] usb 6-1: config 12 interface 0 has no altsetting 0 [ 516.096078][ T5967] usb 6-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 516.106052][ T5967] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.132201][ T5967] usb 6-1: Product: syz [ 516.161278][ T5967] usb 6-1: Manufacturer: syz [ 516.167322][ T5967] usb 6-1: SerialNumber: syz [ 516.186197][ T5894] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 516.539705][T12171] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23312 sclass=netlink_route_socket pid=12171 comm=syz.5.1774 [ 516.540438][ T5894] usb 3-1: Using ep0 maxpacket: 32 [ 516.588876][ T5967] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 516.598883][ T5967] usb 6-1: selecting invalid altsetting 0 [ 516.657637][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.680748][ T5967] usb 6-1: USB disconnect, device number 29 [ 516.700403][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.725992][ T5894] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 516.882565][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.896513][ T5894] usb 3-1: config 0 descriptor?? [ 517.800643][ T5894] savu 0003:1E7D:2D5A.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 517.906948][T12215] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 518.733977][T12246] ubi: mtd0 is already attached to ubi31 [ 519.274045][ T5894] usb 3-1: reset high-speed USB device number 54 using dummy_hcd [ 520.402529][T12261] FAULT_INJECTION: forcing a failure. [ 520.402529][T12261] name failslab, interval 1, probability 0, space 0, times 0 [ 520.456693][T12261] CPU: 1 UID: 0 PID: 12261 Comm: syz.1.1802 Not tainted syzkaller #0 PREEMPT(full) [ 520.456719][T12261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 520.456730][T12261] Call Trace: [ 520.456738][T12261] [ 520.456746][T12261] dump_stack_lvl+0x16c/0x1f0 [ 520.456776][T12261] should_fail_ex+0x512/0x640 [ 520.456803][T12261] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 520.456829][T12261] should_failslab+0xc2/0x120 [ 520.456853][T12261] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 520.456875][T12261] ? ethnl_default_set_doit+0x2bb/0x9d0 [ 520.456908][T12261] ? kmemdup_noprof+0x29/0x60 [ 520.456926][T12261] kmemdup_noprof+0x29/0x60 [ 520.456944][T12261] ethnl_default_set_doit+0x2bb/0x9d0 [ 520.456976][T12261] genl_family_rcv_msg_doit+0x209/0x2f0 [ 520.456999][T12261] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 520.457028][T12261] ? bpf_lsm_capable+0x9/0x10 [ 520.457051][T12261] ? security_capable+0x7e/0x260 [ 520.457075][T12261] ? ns_capable+0xd7/0x110 [ 520.457102][T12261] genl_rcv_msg+0x55c/0x800 [ 520.457125][T12261] ? __pfx_genl_rcv_msg+0x10/0x10 [ 520.457145][T12261] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 520.457183][T12261] netlink_rcv_skb+0x158/0x420 [ 520.457211][T12261] ? __pfx_genl_rcv_msg+0x10/0x10 [ 520.457232][T12261] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 520.457273][T12261] ? netlink_deliver_tap+0x1ae/0xd30 [ 520.457304][T12261] genl_rcv+0x28/0x40 [ 520.457321][T12261] netlink_unicast+0x5a7/0x870 [ 520.457359][T12261] ? __pfx_netlink_unicast+0x10/0x10 [ 520.457388][T12261] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 520.457424][T12261] netlink_sendmsg+0x8c8/0xdd0 [ 520.457457][T12261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 520.457496][T12261] ____sys_sendmsg+0xa98/0xc70 [ 520.457517][T12261] ? copy_msghdr_from_user+0x10a/0x160 [ 520.457543][T12261] ? __pfx_____sys_sendmsg+0x10/0x10 [ 520.457575][T12261] ___sys_sendmsg+0x134/0x1d0 [ 520.457603][T12261] ? __pfx____sys_sendmsg+0x10/0x10 [ 520.457665][T12261] __sys_sendmsg+0x16d/0x220 [ 520.457690][T12261] ? __pfx___sys_sendmsg+0x10/0x10 [ 520.457730][T12261] do_syscall_64+0xcd/0x4e0 [ 520.457758][T12261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.457777][T12261] RIP: 0033:0x7fee4a38eec9 [ 520.457793][T12261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.457811][T12261] RSP: 002b:00007fee4b161038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 520.457829][T12261] RAX: ffffffffffffffda RBX: 00007fee4a5e5fa0 RCX: 00007fee4a38eec9 [ 520.457842][T12261] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000001b [ 520.457854][T12261] RBP: 00007fee4b161090 R08: 0000000000000000 R09: 0000000000000000 [ 520.457865][T12261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.457876][T12261] R13: 00007fee4a5e6038 R14: 00007fee4a5e5fa0 R15: 00007fff55bb3b38 [ 520.457903][T12261] [ 521.187738][ T5828] usb 3-1: USB disconnect, device number 54 [ 521.338474][T12275] siw: device registration error -23 [ 521.480797][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.904904][ T30] audit: type=1400 audit(1759569013.015:2251): avc: denied { watch_reads } for pid=12267 comm="syz.4.1805" path="/353" dev="tmpfs" ino=1886 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 523.095453][T12288] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 523.843461][T12300] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 527.701314][T12357] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1827'. [ 527.733885][T12357] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1827'. [ 530.943926][T12398] netlink: 120 bytes leftover after parsing attributes in process `syz.5.1837'. [ 530.954844][T12398] openvswitch: netlink: Flow actions attr not present in new flow. [ 531.058004][ T30] audit: type=1400 audit(1759569022.425:2252): avc: denied { associate } for pid=12402 comm="syz.4.1839" name="file1" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 531.230402][ T5822] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 531.325026][T12412] ubi: mtd0 is already attached to ubi31 [ 531.704313][ T30] audit: type=1400 audit(1759569023.075:2253): avc: denied { setopt } for pid=12413 comm="syz.4.1842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 531.802325][ T5822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.830625][ T5822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.485128][ T5822] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 532.508960][ T5822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.539271][ T5822] usb 3-1: config 0 descriptor?? [ 532.846637][T12401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.915287][T12401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.087152][T12401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.121333][T12401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.305801][T12401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.368169][T12401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.511094][T12401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.519853][T12401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.756161][T12401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.900778][T12401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.025279][ T5822] usbhid 3-1:0.0: can't add hid device: -71 [ 534.039664][ T5822] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 534.370783][ T5967] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 534.677182][ T5822] usb 3-1: USB disconnect, device number 55 [ 534.703036][ T5967] usb 2-1: Using ep0 maxpacket: 8 [ 534.718610][ T5967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.763450][ T5967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.785142][ T5967] usb 2-1: New USB device found, idVendor=0404, idProduct=c20e, bcdDevice= 0.00 [ 534.797682][ T5967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.822828][ T5967] usb 2-1: config 0 descriptor?? [ 535.484212][T12457] netlink: 'syz.1.1850': attribute type 2 has an invalid length. [ 537.025608][T12467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1856'. [ 537.427087][ T5967] usbhid 2-1:0.0: can't add hid device: -71 [ 537.457646][ T5967] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 537.547597][ T5967] usb 2-1: USB disconnect, device number 37 [ 539.292905][T12493] ubi: mtd0 is already attached to ubi31 [ 539.922500][T12498] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1865'. [ 540.818623][T12505] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1867'. [ 540.844956][ T30] audit: type=1400 audit(1759569032.215:2254): avc: denied { write } for pid=12503 comm="syz.4.1867" name="usbmon7" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 541.089719][T12511] mkiss: ax1: crc mode is auto. [ 541.129918][ T30] audit: type=1400 audit(1759569032.485:2255): avc: denied { listen } for pid=12504 comm="syz.5.1868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 541.694316][ T30] audit: type=1400 audit(1759569033.065:2256): avc: denied { getopt } for pid=12523 comm="syz.0.1875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 543.188314][ T5140] Bluetooth: hci5: command 0x0405 tx timeout [ 545.592956][ T5828] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 545.643605][T12570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1887'. [ 545.653741][T12570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1887'. [ 545.792256][ T5828] usb 1-1: unable to get BOS descriptor or descriptor too short [ 545.853899][ T5868] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 546.286072][ T5828] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 546.305998][ T5828] usb 1-1: config 1 interface 1 has no altsetting 0 [ 546.373707][ T5828] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 546.386894][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.400403][ T5828] usb 1-1: Product: syz [ 546.413651][ T5828] usb 1-1: Manufacturer: syz [ 546.420667][ T5828] usb 1-1: SerialNumber: syz [ 546.462070][ T5868] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.472443][ T5868] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 546.488753][ T5868] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 546.520182][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.551478][ T5868] usb 3-1: config 0 descriptor?? [ 546.963206][T12557] binder: BC_ACQUIRE_RESULT not supported [ 546.970739][T12557] binder: 12556:12557 ioctl c0306201 200000000500 returned -22 [ 547.414023][ T5967] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 547.730277][ T5828] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 547.739383][ T5828] usb 1-1: found format II with max.bitrate = 2418, frame size=7 [ 547.750334][ T5828] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 547.758925][ T5828] usb 1-1: found format II with max.bitrate = 2418, frame size=7 [ 547.864638][ T5828] usb 1-1: USB disconnect, device number 59 [ 547.881156][ T5967] usb 2-1: Using ep0 maxpacket: 8 [ 547.889102][ T5967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.461284][ T5967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.515136][ T5967] usb 2-1: New USB device found, idVendor=0404, idProduct=c20e, bcdDevice= 0.00 [ 548.535132][ T5967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.566888][ T5967] usb 2-1: config 0 descriptor?? [ 548.916831][T12599] netlink: 'syz.1.1890': attribute type 2 has an invalid length. [ 550.601438][ T5967] usbhid 2-1:0.0: can't add hid device: -71 [ 550.607402][ T5967] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 550.641712][ T5967] usb 2-1: USB disconnect, device number 38 [ 550.925476][T12607] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1898'. [ 550.945195][ T5967] usb 3-1: USB disconnect, device number 56 [ 550.963523][T12607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1898'. [ 550.982001][ T30] audit: type=1400 audit(1759569042.325:2257): avc: denied { create } for pid=12606 comm="syz.0.1898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 554.493295][ T24] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 554.663587][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.688477][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.863517][ T24] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 554.872699][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.891120][ T24] usb 3-1: config 0 descriptor?? [ 555.314324][ T24] usbhid 3-1:0.0: can't add hid device: -32 [ 555.320520][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 556.179692][ T24] usb 3-1: USB disconnect, device number 57 [ 557.380388][ T5828] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 557.800616][ T5828] usb 6-1: config 64 has an invalid interface number: 56 but max is 0 [ 557.808998][ T5828] usb 6-1: config 64 has no interface number 0 [ 557.818944][ T5828] usb 6-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 557.829029][ T5828] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.838175][ T5828] usb 6-1: Product: syz [ 557.847943][ T5828] usb 6-1: Manufacturer: syz [ 557.860420][ T5828] usb 6-1: SerialNumber: syz [ 559.001192][ T5828] peak_usb 6-1:64.56: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 559.203765][T12676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.217588][T12676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.258701][ T5828] peak_usb 6-1:64.56 can0: sending command failure: -22 [ 559.277126][ T5828] peak_usb 6-1:64.56 can0: sending command failure: -22 [ 559.290768][ T5828] peak_usb 6-1:64.56 can0: sending command failure: -22 [ 559.401069][ T5140] Bluetooth: hci5: command 0x0405 tx timeout [ 559.842348][ T5828] peak_usb 6-1:64.56: probe with driver peak_usb failed with error -22 [ 559.891785][ T5828] usb 6-1: USB disconnect, device number 30 [ 560.360936][ T30] audit: type=1400 audit(1759569051.625:2258): avc: denied { read append } for pid=12728 comm="syz.0.1933" name="fb0" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 560.489423][ T30] audit: type=1400 audit(1759569051.635:2259): avc: denied { map } for pid=12728 comm="syz.0.1933" path="/dev/fb0" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 560.870466][ T30] audit: type=1400 audit(1759569051.635:2260): avc: denied { execute } for pid=12728 comm="syz.0.1933" path="/dev/fb0" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 562.237323][T12764] kAFS: unable to lookup cell '.,' [ 562.325516][T12770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1947'. [ 562.334648][T12770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1947'. [ 562.343521][T12770] netlink: 'syz.1.1947': attribute type 1 has an invalid length. [ 562.351236][T12770] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1947'. [ 562.540930][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.580826][ T5822] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 562.717692][ T5868] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 562.800508][ T5822] usb 3-1: Using ep0 maxpacket: 8 [ 562.821458][ T5822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.115970][ T5822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 563.126141][ T5822] usb 3-1: New USB device found, idVendor=0404, idProduct=c20e, bcdDevice= 0.00 [ 563.145421][T12781] ISOFS: Unable to identify CD-ROM format. [ 563.152153][ T5868] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 563.181542][ T5822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.190326][ T5868] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 563.199733][ T5868] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 563.215975][ T5822] usb 3-1: config 0 descriptor?? [ 563.232227][ T5868] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 563.242354][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.250412][ T5868] usb 6-1: Product: syz [ 563.260418][ T5868] usb 6-1: Manufacturer: syz [ 563.266838][ T5868] usb 6-1: SerialNumber: syz [ 563.351289][ T5868] cdc_mbim 6-1:1.0: skipping garbage [ 563.356940][ T5868] cdc_mbim 6-1:1.0: CDC Union missing and no IAD found [ 563.370384][ T5868] cdc_mbim 6-1:1.0: bind() failure [ 563.614565][T12762] netlink: 'syz.2.1944': attribute type 2 has an invalid length. [ 563.634039][ T5868] usb 6-1: USB disconnect, device number 31 [ 564.062081][T12788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1952'. [ 564.570564][T12794] ubi: mtd0 is already attached to ubi31 [ 565.607693][ T5822] usbhid 3-1:0.0: can't add hid device: -71 [ 565.630930][ T5822] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 565.654108][ T5822] usb 3-1: USB disconnect, device number 58 [ 566.162208][ T30] audit: type=1400 audit(1759569057.505:2261): avc: denied { append } for pid=12803 comm="syz.0.1956" name="sg0" dev="devtmpfs" ino=769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 566.614481][ T30] audit: type=1400 audit(1759569057.975:2262): avc: denied { create } for pid=12812 comm="syz.4.1959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 568.025774][T12836] usb usb8: usbfs: process 12836 (syz.4.1963) did not claim interface 0 before use [ 568.441615][T12835] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 568.451388][T12835] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 59449 - 0 [ 568.461243][T12835] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 568.848264][T12835] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 568.858073][T12835] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 59449 - 0 [ 568.867882][T12835] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 568.941928][T12835] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 568.951880][T12835] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 59449 - 0 [ 568.961704][T12835] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 568.996027][ T5967] hid (null): unknown global tag 0xd [ 569.016158][ T5967] hid (null): unknown global tag 0xc [ 569.027811][T12835] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 569.035476][ T5967] hid-generic 0009:0008:0EC3.000C: unexpected long global item [ 569.037692][T12835] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 59449 - 0 [ 569.054898][T12835] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 569.055592][ T5967] hid-generic 0009:0008:0EC3.000C: probe with driver hid-generic failed with error -22 [ 569.422303][ T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 569.440879][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 59449 - 0 [ 569.453018][ T13] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 569.463036][ T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 569.480530][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 59449 - 0 [ 569.489999][ T13] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 569.518186][ T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 569.535928][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 59449 - 0 [ 569.549995][ T13] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 569.560393][ T5822] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 569.579939][ T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 569.588496][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 59449 - 0 [ 569.802868][ T5828] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 569.909752][ T13] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 569.923457][T12841] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 569.942614][ T5822] usb 2-1: unable to get BOS descriptor or descriptor too short [ 569.952782][ T5822] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 569.961033][ T5822] usb 2-1: can't read configurations, error -71 [ 570.092336][T12862] tipc: Enabled bearer , priority 0 [ 570.111251][ T5828] usb 3-1: Using ep0 maxpacket: 8 [ 570.119714][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.136771][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.151816][ T5828] usb 3-1: New USB device found, idVendor=0404, idProduct=c20e, bcdDevice= 0.00 [ 570.162022][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.251310][ T5828] usb 3-1: config 0 descriptor?? [ 570.576311][T12865] netlink: 'syz.2.1968': attribute type 2 has an invalid length. [ 573.189610][ T5828] usbhid 3-1:0.0: can't add hid device: -71 [ 573.250374][ T5828] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 573.280527][ T5828] usb 3-1: USB disconnect, device number 59 [ 573.286794][ T30] audit: type=1400 audit(1759569064.655:2263): avc: denied { ioctl } for pid=12881 comm="syz.2.1978" path="socket:[39883]" dev="sockfs" ino=39883 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 573.713516][T12890] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=12890 comm=syz.2.1978 [ 575.006446][T12899] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1982'. [ 575.364689][ T30] audit: type=1400 audit(1759569066.345:2264): avc: denied { setopt } for pid=12895 comm="syz.5.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 575.390594][ T30] audit: type=1400 audit(1759569066.755:2265): avc: denied { execute } for pid=12894 comm="syz.1.1981" path="/proc/partitions" dev="proc" ino=4026532177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 576.914315][T12924] overlayfs: failed to resolve './file1': -2 [ 576.957325][T12926] netlink: 'syz.2.1992': attribute type 1 has an invalid length. [ 576.974614][T12926] bond2: entered promiscuous mode [ 576.986015][T12926] 8021q: adding VLAN 0 to HW filter on device bond2 [ 577.009193][T12926] 8021q: adding VLAN 0 to HW filter on device bond2 [ 577.024470][T12926] bond2: (slave gre2): The slave device specified does not support setting the MAC address [ 577.048278][T12926] bond2: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 577.069339][T12926] bond2: (slave gre2): making interface the new active one [ 577.090706][T12926] gre2: entered promiscuous mode [ 577.096852][T12926] bond2: (slave gre2): Enslaving as an active interface with an up link [ 578.784549][T12947] veth0: entered promiscuous mode [ 579.151801][T12947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1996'. [ 579.171805][T12956] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2001'. [ 579.180902][T12956] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 580.241770][T12979] FAULT_INJECTION: forcing a failure. [ 580.241770][T12979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 580.254962][T12979] CPU: 0 UID: 0 PID: 12979 Comm: syz.4.2007 Not tainted syzkaller #0 PREEMPT(full) [ 580.254985][T12979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 580.254995][T12979] Call Trace: [ 580.255002][T12979] [ 580.255009][T12979] dump_stack_lvl+0x16c/0x1f0 [ 580.255038][T12979] should_fail_ex+0x512/0x640 [ 580.255068][T12979] _copy_to_user+0x32/0xd0 [ 580.255095][T12979] simple_read_from_buffer+0xcb/0x170 [ 580.255115][T12979] proc_fail_nth_read+0x197/0x240 [ 580.255138][T12979] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 580.255160][T12979] ? rw_verify_area+0xcf/0x6c0 [ 580.255186][T12979] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 580.255207][T12979] vfs_read+0x1e1/0xcf0 [ 580.255228][T12979] ? __pfx___mutex_lock+0x10/0x10 [ 580.255250][T12979] ? __pfx_vfs_read+0x10/0x10 [ 580.255274][T12979] ? __fget_files+0x20e/0x3c0 [ 580.255299][T12979] ksys_read+0x12a/0x250 [ 580.255316][T12979] ? __pfx_ksys_read+0x10/0x10 [ 580.255333][T12979] ? fput+0x9b/0xd0 [ 580.255360][T12979] do_syscall_64+0xcd/0x4e0 [ 580.255387][T12979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.255405][T12979] RIP: 0033:0x7f55b038d8dc [ 580.255419][T12979] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 580.255436][T12979] RSP: 002b:00007f55b1241030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 580.255452][T12979] RAX: ffffffffffffffda RBX: 00007f55b05e6090 RCX: 00007f55b038d8dc [ 580.255463][T12979] RDX: 000000000000000f RSI: 00007f55b12410a0 RDI: 0000000000000006 [ 580.255473][T12979] RBP: 00007f55b1241090 R08: 0000000000000000 R09: 0000000000000000 [ 580.255489][T12979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 580.255498][T12979] R13: 00007f55b05e6128 R14: 00007f55b05e6090 R15: 00007ffd498ecae8 [ 580.255523][T12979] [ 583.412787][T13007] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2015'. [ 583.941367][ T5828] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 584.490375][ T5828] usb 3-1: device descriptor read/64, error -71 [ 584.900405][ T5828] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 585.071518][ T5828] usb 3-1: device descriptor read/64, error -71 [ 585.281596][ T5828] usb usb3-port1: attempt power cycle [ 585.359804][T13033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2019'. [ 585.412579][T13028] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2019'. [ 585.630364][ T5828] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 585.650870][ T5828] usb 3-1: device descriptor read/8, error -71 [ 586.420346][ T5828] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 586.669242][ T5828] usb 3-1: device not accepting address 63, error -71 [ 586.880928][ T5828] usb usb3-port1: unable to enumerate USB device [ 588.140154][ T30] audit: type=1400 audit(1759569079.255:2266): avc: denied { ioctl } for pid=13054 comm="syz.0.2026" path="/dev/nullb0" dev="devtmpfs" ino=695 ioctlcmd=0x70cc scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 588.227700][T13064] fuse: Bad value for 'user_id' [ 588.229785][ T30] audit: type=1400 audit(1759569079.595:2267): avc: denied { mounton } for pid=13061 comm="syz.1.2029" path="/415/file0" dev="tmpfs" ino=2219 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 588.255912][ C1] vkms_vblank_simulate: vblank timer overrun [ 588.334723][T13064] fuse: Bad value for 'user_id' [ 588.631258][T13081] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2028'. [ 588.661340][T13081] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2028'. [ 588.681680][ T30] audit: type=1400 audit(1759569080.015:2268): avc: denied { getopt } for pid=13073 comm="syz.0.2030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 588.710361][ T30] audit: type=1400 audit(1759569080.015:2269): avc: denied { write } for pid=13073 comm="syz.0.2030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 588.783321][ T5828] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 588.793518][ T30] audit: type=1400 audit(1759569080.015:2270): avc: denied { read } for pid=13073 comm="syz.0.2030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 588.940359][ T5828] usb 2-1: device descriptor read/64, error -71 [ 589.358036][ T5828] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 589.590375][ T5828] usb 2-1: device descriptor read/64, error -71 [ 589.701325][ T5828] usb usb2-port1: attempt power cycle [ 589.819873][T13088] netlink: 'syz.5.2033': attribute type 6 has an invalid length. [ 590.220395][ T5828] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 590.255806][ T5828] usb 2-1: device descriptor read/8, error -71 [ 590.575872][ T5828] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 591.645516][ T5828] usb 2-1: device descriptor read/8, error -71 [ 591.850579][ T5828] usb usb2-port1: unable to enumerate USB device [ 593.136864][T13122] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=13122 comm=syz.2.2043 [ 593.376698][T13127] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=13127 comm=syz.1.2044 [ 595.676541][T13149] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 596.919719][T13165] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2054'. [ 597.151186][T13167] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2056'. [ 598.540642][ T30] audit: type=1400 audit(1759569089.905:2271): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 599.099374][T13202] FAULT_INJECTION: forcing a failure. [ 599.099374][T13202] name failslab, interval 1, probability 0, space 0, times 0 [ 599.113800][T13202] CPU: 0 UID: 0 PID: 13202 Comm: syz.1.2066 Not tainted syzkaller #0 PREEMPT(full) [ 599.113824][T13202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 599.113834][T13202] Call Trace: [ 599.113839][T13202] [ 599.113843][T13202] dump_stack_lvl+0x16c/0x1f0 [ 599.113864][T13202] should_fail_ex+0x512/0x640 [ 599.113881][T13202] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 599.113901][T13202] should_failslab+0xc2/0x120 [ 599.113916][T13202] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 599.113934][T13202] ? __lock_acquire+0xb97/0x1ce0 [ 599.113947][T13202] ? __d_alloc+0x32/0xae0 [ 599.113963][T13202] ? __d_alloc+0x32/0xae0 [ 599.113975][T13202] __d_alloc+0x32/0xae0 [ 599.113990][T13202] d_alloc_pseudo+0x1c/0xc0 [ 599.114008][T13202] alloc_file_pseudo+0xcf/0x230 [ 599.114025][T13202] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 599.114042][T13202] ? _raw_spin_unlock+0x28/0x50 [ 599.114055][T13202] ? alloc_fd+0x471/0x7d0 [ 599.114068][T13202] __anon_inode_getfile+0xe8/0x280 [ 599.114086][T13202] anon_inode_getfd+0x52/0xb0 [ 599.114102][T13202] __x64_sys_fsopen+0x18b/0x240 [ 599.114119][T13202] do_syscall_64+0xcd/0x4e0 [ 599.114136][T13202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.114147][T13202] RIP: 0033:0x7fee4a38eec9 [ 599.114157][T13202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.114167][T13202] RSP: 002b:00007fee4b161038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 599.114178][T13202] RAX: ffffffffffffffda RBX: 00007fee4a5e5fa0 RCX: 00007fee4a38eec9 [ 599.114185][T13202] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000480 [ 599.114192][T13202] RBP: 00007fee4b161090 R08: 0000000000000000 R09: 0000000000000000 [ 599.114199][T13202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 599.114205][T13202] R13: 00007fee4a5e6038 R14: 00007fee4a5e5fa0 R15: 00007fff55bb3b38 [ 599.114219][T13202] [ 599.789583][ T5828] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 600.450564][ T5828] usb 1-1: Using ep0 maxpacket: 8 [ 600.457282][ T5828] usb 1-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9 [ 600.562367][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.769354][ T9654] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 600.861958][ T5828] usb 1-1: config 0 descriptor?? [ 600.878842][ T5828] usblcd 1-1:0.0: USBLCD model not supported. [ 600.901360][T13225] virtio-fs: tag not found [ 601.037510][T13231] tipc: Enabled bearer , priority 0 [ 601.045786][T13231] syzkaller0: entered promiscuous mode [ 601.054309][T13231] syzkaller0: entered allmulticast mode [ 601.082801][T13198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.091682][ T9654] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.093437][T13198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.111374][ T9654] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.133558][T13231] tipc: Resetting bearer [ 601.139879][ T9654] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 601.150495][T13230] tipc: Resetting bearer [ 601.507629][ T9654] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.516336][T13230] tipc: Disabling bearer [ 601.532358][ T9654] usb 2-1: config 0 descriptor?? [ 601.680736][ T5868] usb 1-1: USB disconnect, device number 60 [ 601.956477][ T9654] hid-steam 0003:28DE:1142.000D: unknown main item tag 0x0 [ 602.339313][ T9654] hid-steam 0003:28DE:1142.000D: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 603.006343][ T9654] hid-steam 0003:28DE:1142.000D: Steam wireless receiver connected [ 603.006565][ T9654] hid-steam 0003:28DE:1142.000D: No HID_FEATURE_REPORT submitted - nothing to read [ 603.009296][ T9654] hid-steam 0003:28DE:1142.000E: unknown main item tag 0x0 [ 603.013419][ T9654] hid-steam 0003:28DE:1142.000E: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 603.017789][ T9654] usb 2-1: USB disconnect, device number 45 [ 603.029552][ T9654] hid-steam 0003:28DE:1142.000D: Steam wireless receiver disconnected [ 603.135564][T13245] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2079'. [ 608.332811][ T30] audit: type=1400 audit(1759569099.695:2272): avc: denied { write } for pid=13311 comm="syz.0.2097" lport=57074 faddr=::ffff:100.1.1.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 608.409652][T13313] sctp: [Deprecated]: syz.0.2097 (pid 13313) Use of struct sctp_assoc_value in delayed_ack socket option. [ 608.409652][T13313] Use struct sctp_sack_info instead [ 608.487920][ T30] audit: type=1400 audit(1759569099.775:2273): avc: denied { getopt } for pid=13311 comm="syz.0.2097" lport=57074 faddr=::ffff:100.1.1.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 609.293370][T13328] ubi: mtd0 is already attached to ubi31 [ 609.806850][T13331] ubi31: detaching mtd0 [ 610.650056][T13331] ubi31: mtd0 is detached [ 610.703796][T13341] FAULT_INJECTION: forcing a failure. [ 610.703796][T13341] name failslab, interval 1, probability 0, space 0, times 0 [ 610.731668][T13341] CPU: 1 UID: 0 PID: 13341 Comm: syz.4.2104 Not tainted syzkaller #0 PREEMPT(full) [ 610.731696][T13341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 610.731706][T13341] Call Trace: [ 610.731712][T13341] [ 610.731719][T13341] dump_stack_lvl+0x16c/0x1f0 [ 610.731749][T13341] should_fail_ex+0x512/0x640 [ 610.731775][T13341] ? __kmalloc_cache_noprof+0x5f/0x780 [ 610.731805][T13341] should_failslab+0xc2/0x120 [ 610.731830][T13341] __kmalloc_cache_noprof+0x72/0x780 [ 610.731857][T13341] ? ____ip_mc_inc_group+0x403/0x10f0 [ 610.731888][T13341] ? ____ip_mc_inc_group+0x403/0x10f0 [ 610.731911][T13341] ? lockdep_rtnl_is_held+0x26/0x40 [ 610.731933][T13341] ____ip_mc_inc_group+0x403/0x10f0 [ 610.731963][T13341] ? __pfx_____ip_mc_inc_group+0x10/0x10 [ 610.731988][T13341] ? __pfx___inet_insert_ifa+0x10/0x10 [ 610.732019][T13341] ip_mc_up+0x154/0x3b0 [ 610.732037][T13341] inetdev_event+0xafb/0x18a0 [ 610.732057][T13341] ? ib_netdevice_event+0xfc/0x330 [ 610.732084][T13341] ? __pfx_inetdev_event+0x10/0x10 [ 610.732103][T13341] ? wext_netdev_notifier_call+0xe/0x20 [ 610.732127][T13341] ? cfg802154_netdev_notifier_call+0x391/0xa00 [ 610.732156][T13341] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 610.732186][T13341] notifier_call_chain+0xb9/0x410 [ 610.732204][T13341] ? __pfx_inetdev_event+0x10/0x10 [ 610.732228][T13341] call_netdevice_notifiers_info+0xbe/0x140 [ 610.732252][T13341] __dev_notify_flags+0x12c/0x2e0 [ 610.732278][T13341] ? __pfx___dev_notify_flags+0x10/0x10 [ 610.732310][T13341] ? __pfx___dev_change_flags+0x10/0x10 [ 610.732334][T13341] ? validate_linkmsg+0x57c/0xb60 [ 610.732367][T13341] netif_change_flags+0x108/0x160 [ 610.732396][T13341] do_setlink.constprop.0+0xb53/0x4380 [ 610.732425][T13341] ? bpf_trace_run2+0x26b/0x590 [ 610.732447][T13341] ? dev_map_lookup_elem+0x1a8/0x1f0 [ 610.732475][T13341] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 610.732498][T13341] ? bpf_trace_run2+0x2ab/0x590 [ 610.732520][T13341] ? __pfx_bpf_trace_run2+0x10/0x10 [ 610.732545][T13341] ? __lock_acquire+0xb97/0x1ce0 [ 610.732567][T13341] ? rtnl_newlink+0x600/0x2000 [ 610.732590][T13341] ? __bpf_trace_contention_end+0xc9/0x110 [ 610.732609][T13341] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 610.732632][T13341] ? __pfx___mutex_trylock_common+0x10/0x10 [ 610.732667][T13341] ? __pfx___might_resched+0x10/0x10 [ 610.732693][T13341] ? rcu_is_watching+0x12/0xc0 [ 610.732717][T13341] ? trace_contention_end+0xdd/0x130 [ 610.732736][T13341] ? __mutex_lock+0x1c5/0x1060 [ 610.732767][T13341] ? __pfx___mutex_lock+0x10/0x10 [ 610.732790][T13341] ? cap_capable+0xb3/0x250 [ 610.732827][T13341] rtnl_newlink+0x18e0/0x2000 [ 610.732861][T13341] ? __pfx_rtnl_newlink+0x10/0x10 [ 610.732885][T13341] ? find_held_lock+0x2b/0x80 [ 610.732910][T13341] ? avc_has_perm_noaudit+0x117/0x3b0 [ 610.732934][T13341] ? avc_has_perm_noaudit+0x149/0x3b0 [ 610.732960][T13341] ? __lock_acquire+0x62e/0x1ce0 [ 610.732993][T13341] ? find_held_lock+0x2b/0x80 [ 610.733023][T13341] ? __pfx_rtnl_newlink+0x10/0x10 [ 610.733048][T13341] ? __pfx_rtnl_newlink+0x10/0x10 [ 610.733071][T13341] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 610.733098][T13341] ? __pfx_rtnl_newlink+0x10/0x10 [ 610.733125][T13341] rtnetlink_rcv_msg+0x95e/0xe90 [ 610.733153][T13341] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 610.733188][T13341] ? ref_tracker_free+0x37c/0x830 [ 610.733219][T13341] netlink_rcv_skb+0x158/0x420 [ 610.733248][T13341] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 610.733277][T13341] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 610.733314][T13341] ? netlink_deliver_tap+0x1ae/0xd30 [ 610.733345][T13341] netlink_unicast+0x5a7/0x870 [ 610.733377][T13341] ? __pfx_netlink_unicast+0x10/0x10 [ 610.733403][T13341] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 610.733437][T13341] netlink_sendmsg+0x8c8/0xdd0 [ 610.733467][T13341] ? __pfx_netlink_sendmsg+0x10/0x10 [ 610.733503][T13341] ____sys_sendmsg+0xa98/0xc70 [ 610.733523][T13341] ? copy_msghdr_from_user+0x10a/0x160 [ 610.733548][T13341] ? __pfx_____sys_sendmsg+0x10/0x10 [ 610.733579][T13341] ___sys_sendmsg+0x134/0x1d0 [ 610.733604][T13341] ? __pfx____sys_sendmsg+0x10/0x10 [ 610.733661][T13341] __sys_sendmsg+0x16d/0x220 [ 610.733686][T13341] ? __pfx___sys_sendmsg+0x10/0x10 [ 610.733727][T13341] do_syscall_64+0xcd/0x4e0 [ 610.733754][T13341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.733771][T13341] RIP: 0033:0x7f55b038eec9 [ 610.733785][T13341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.733802][T13341] RSP: 002b:00007f55b1262038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 610.733819][T13341] RAX: ffffffffffffffda RBX: 00007f55b05e5fa0 RCX: 00007f55b038eec9 [ 610.733830][T13341] RDX: 0000000000008000 RSI: 0000200000000140 RDI: 0000000000000006 [ 610.733841][T13341] RBP: 00007f55b1262090 R08: 0000000000000000 R09: 0000000000000000 [ 610.733852][T13341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 610.733863][T13341] R13: 00007f55b05e6038 R14: 00007f55b05e5fa0 R15: 00007ffd498ecae8 [ 610.733889][T13341] [ 611.227892][ T5828] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 611.250039][T13341] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 611.921031][T13345] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 611.927570][T13345] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 611.984081][T13345] vhci_hcd vhci_hcd.0: Device attached [ 612.060640][T13352] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(10) [ 612.067266][T13352] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 612.078183][T13352] vhci_hcd vhci_hcd.0: Device attached [ 612.555822][ T5967] usb 42-1: SetAddress Request (2) to port 0 [ 612.724332][ T5967] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 612.851186][T13368] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2111'. [ 613.335207][T13379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2113'. [ 613.394569][T13380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2113'. [ 614.659539][ T30] audit: type=1400 audit(1759569105.798:2274): avc: denied { getopt } for pid=13385 comm="syz.0.2115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 614.684217][T13353] vhci_hcd: connection closed [ 614.694025][T13348] vhci_hcd: connection reset by peer [ 614.698104][ T8445] vhci_hcd: stop threads [ 614.720308][ T8445] vhci_hcd: release socket [ 614.728564][ T8445] vhci_hcd: disconnect device [ 614.775515][ T8445] vhci_hcd: stop threads [ 614.779862][ T8445] vhci_hcd: release socket [ 614.785053][ T8445] vhci_hcd: disconnect device [ 616.410387][ T5828] usb 2-1: device descriptor read/64, error -110 [ 616.650349][ T5828] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 617.300349][ T5828] usb 2-1: device descriptor read/64, error -32 [ 617.474596][ T5828] usb usb2-port1: attempt power cycle [ 617.540839][ T30] audit: type=1400 audit(1759569108.868:2275): avc: denied { mount } for pid=13413 comm="syz.1.2124" name="/" dev="autofs" ino=42459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 617.739064][T13422] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2124'. [ 617.831275][ T5828] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 617.860599][ T5828] usb 2-1: device descriptor read/8, error -32 [ 617.990399][ T5828] raw-gadget.0 gadget.1: failed to queue suspend event [ 618.015662][ T5828] raw-gadget.0 gadget.1: failed to queue reset event [ 618.068305][T13338] raw-gadget.0 gadget.1: failed to queue disconnect event [ 618.280609][ T5967] usb 42-1: device descriptor read/8, error -110 [ 618.293315][ T30] audit: type=1400 audit(1759569109.658:2276): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 618.701363][ T5967] usb usb42-port1: attempt power cycle [ 618.880380][ T9654] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 619.690735][T13446] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2133'. [ 619.740441][T13446] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 619.741026][ T9654] usb 3-1: Using ep0 maxpacket: 16 [ 619.813927][ T5967] usb usb42-port1: unable to enumerate USB device [ 619.846687][ T9654] usb 3-1: config 0 has an invalid interface number: 185 but max is 0 [ 619.855045][ T9654] usb 3-1: config 0 has no interface number 0 [ 619.866950][ T9654] usb 3-1: New USB device found, idVendor=05ac, idProduct=120a, bcdDevice=60.45 [ 619.880495][ T9654] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.908912][ T9654] usb 3-1: Product: syz [ 619.913157][ T9654] usb 3-1: Manufacturer: syz [ 619.940475][ T9654] usb 3-1: SerialNumber: syz [ 619.946374][ T9654] apple-mfi-fastcharge 3-1: config 0 descriptor?? [ 619.963414][ T9654] usb-storage 3-1:0.185: USB Mass Storage device detected [ 620.002695][ T9654] usb-storage 3-1:0.185: Quirks match for vid 05ac pid 120a: 10 [ 620.461500][ T5822] apple-mfi-fastcharge 3-1: USB disconnect, device number 64 [ 620.697007][T13461] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2135'. [ 620.721160][T13461] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2135'. [ 622.190424][ T30] audit: type=1326 audit(1759569113.538:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13473 comm="syz.5.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ccf8eec9 code=0x7ffc0000 [ 622.252492][ T30] audit: type=1326 audit(1759569113.538:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13473 comm="syz.5.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ccf8eec9 code=0x7ffc0000 [ 622.295888][ T30] audit: type=1326 audit(1759569113.588:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13473 comm="syz.5.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7fa6ccf8eec9 code=0x7ffc0000 [ 622.331636][T13486] tipc: Enabled bearer , priority 0 [ 622.339188][T13486] syzkaller0: entered promiscuous mode [ 622.345184][ T30] audit: type=1326 audit(1759569113.588:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13473 comm="syz.5.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ccf8eec9 code=0x7ffc0000 [ 622.369803][T13486] syzkaller0: entered allmulticast mode [ 622.406047][T13489] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2143'. [ 622.415191][ T30] audit: type=1326 audit(1759569113.588:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13473 comm="syz.5.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ccf8eec9 code=0x7ffc0000 [ 622.452304][ T30] audit: type=1326 audit(1759569113.768:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13487 comm="syz.5.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ccf8eec9 code=0x7ffc0000 [ 622.476748][ T30] audit: type=1326 audit(1759569113.768:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13487 comm="syz.5.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ccf8eec9 code=0x7ffc0000 [ 622.514331][ T30] audit: type=1326 audit(1759569113.768:2284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13487 comm="syz.5.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7fa6ccf8eec9 code=0x7ffc0000 [ 622.514544][T13485] tipc: Resetting bearer [ 622.566674][T13485] tipc: Disabling bearer [ 622.694414][ T30] audit: type=1326 audit(1759569113.768:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13487 comm="syz.5.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ccf8eec9 code=0x7ffc0000 [ 622.718069][ T30] audit: type=1326 audit(1759569113.768:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13487 comm="syz.5.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ccf8eec9 code=0x7ffc0000 [ 623.560341][ T5822] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 623.925617][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.950419][ T5822] usb 1-1: Using ep0 maxpacket: 8 [ 623.975157][ T5822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.990438][ T5822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.020514][ T5822] usb 1-1: New USB device found, idVendor=0404, idProduct=c20e, bcdDevice= 0.00 [ 624.042245][ T5822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.052468][ T5822] usb 1-1: config 0 descriptor?? [ 624.978369][T13522] netlink: 'syz.0.2147': attribute type 2 has an invalid length. [ 625.572607][T13523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2151'. [ 626.059442][T13525] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2151'. [ 627.990637][ T5822] usbhid 1-1:0.0: can't add hid device: -71 [ 627.996891][ T5822] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 628.006008][ T5822] usb 1-1: USB disconnect, device number 61 [ 628.083940][T13539] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 628.107610][ T24] IPVS: starting estimator thread 0... [ 628.386405][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 628.386419][ T30] audit: type=1400 audit(1759569119.668:2298): avc: denied { watch watch_reads } for pid=13542 comm="syz.4.2157" path="/437/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 628.510401][T13546] IPVS: using max 43 ests per chain, 103200 per kthread [ 628.750690][ T30] audit: type=1400 audit(1759569120.118:2299): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 629.554476][ T30] audit: type=1400 audit(1759569120.918:2300): avc: denied { accept } for pid=13566 comm="syz.0.2163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 629.726033][T13573] block nbd1: not configured, cannot reconfigure [ 629.743061][T13573] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2165'. [ 630.121428][T13573] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 630.190472][T13583] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2164'. [ 630.231150][T13576] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2164'. [ 630.489264][ T30] audit: type=1400 audit(1759569121.848:2301): avc: denied { name_bind } for pid=13592 comm="syz.1.2170" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 630.514719][ T30] audit: type=1400 audit(1759569121.878:2302): avc: denied { read } for pid=13592 comm="syz.1.2170" path="socket:[43477]" dev="sockfs" ino=43477 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 630.633524][ T5967] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 630.662484][T13597] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2170'. [ 631.370034][ T5967] usb 3-1: Using ep0 maxpacket: 8 [ 631.445850][ T5967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.473973][ T5967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.483857][ T5967] usb 3-1: New USB device found, idVendor=0404, idProduct=c20e, bcdDevice= 0.00 [ 631.611586][ T5967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.633480][ T5967] usb 3-1: config 0 descriptor?? [ 632.307464][T13613] netlink: 'syz.2.2167': attribute type 2 has an invalid length. [ 633.731256][ T5967] usbhid 3-1:0.0: can't add hid device: -71 [ 633.765203][ T5967] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 633.803937][ T5967] usb 3-1: USB disconnect, device number 65 [ 634.142308][T13625] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2178'. [ 634.379851][T13628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.388592][T13628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.900498][ T930] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 638.964860][T13665] vxfs: unable to read disk superblock at 1 [ 638.974201][T13665] vxfs: unable to read disk superblock at 8 [ 639.040557][T13665] vxfs: can't find superblock. [ 639.190938][T13665] netlink: 'syz.0.2189': attribute type 21 has an invalid length. [ 639.350735][ T930] usb 6-1: Using ep0 maxpacket: 8 [ 639.364500][ T930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.378874][ T930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.390880][ T930] usb 6-1: New USB device found, idVendor=0404, idProduct=c20e, bcdDevice= 0.00 [ 639.401691][ T930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.410332][ T5822] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 639.421302][ T930] usb 6-1: config 0 descriptor?? [ 639.622998][ T5822] usb 2-1: config 0 interface 0 has no altsetting 0 [ 639.632984][ T5822] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 639.642802][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.659654][ T5822] usb 2-1: config 0 descriptor?? [ 639.795622][T13675] netlink: 'syz.5.2188': attribute type 2 has an invalid length. [ 640.210691][ T5822] (null): keene_cmd_main failed (-110) [ 640.250650][ T5822] video4linux radio48: keene_cmd_main failed (-32) [ 640.257553][ T5822] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 641.744230][ T930] usbhid 6-1:0.0: can't add hid device: -71 [ 641.756365][T13666] netlink: 'syz.1.2190': attribute type 39 has an invalid length. [ 641.764519][ T930] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 641.812815][ T930] usb 6-1: USB disconnect, device number 32 [ 643.355713][ T5967] usb 2-1: USB disconnect, device number 50 [ 647.418799][T13737] geneve2: entered promiscuous mode [ 647.424194][T13737] geneve2: entered allmulticast mode [ 647.654480][T13745] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.812718][T13754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2211'. [ 647.830169][T13754] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2211'. [ 647.844508][T13745] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.918461][T13745] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.954239][T13757] rdma_rxe: rxe_newlink: failed to add bond0 [ 647.985817][T13745] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.076672][ T6083] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.086766][ T6083] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.098068][ T6083] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.117413][ T6083] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.532644][T13766] comedi comedi2: board detection failed [ 648.989004][T13770] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 649.046091][T13774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2221'. [ 649.062012][T13774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2221'. [ 649.078564][T13774] netlink: 'syz.4.2221': attribute type 1 has an invalid length. [ 649.089327][T13774] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2221'. [ 649.131700][T13774] FAULT_INJECTION: forcing a failure. [ 649.131700][T13774] name failslab, interval 1, probability 0, space 0, times 0 [ 649.148643][T13774] CPU: 1 UID: 0 PID: 13774 Comm: syz.4.2221 Not tainted syzkaller #0 PREEMPT(full) [ 649.148669][T13774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 649.148680][T13774] Call Trace: [ 649.148686][T13774] [ 649.148693][T13774] dump_stack_lvl+0x16c/0x1f0 [ 649.148723][T13774] should_fail_ex+0x512/0x640 [ 649.148748][T13774] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 649.148769][T13774] should_failslab+0xc2/0x120 [ 649.148791][T13774] kmem_cache_alloc_node_noprof+0x78/0x770 [ 649.148808][T13774] ? __alloc_skb+0x2b2/0x380 [ 649.148837][T13774] ? __alloc_skb+0x2b2/0x380 [ 649.148857][T13774] __alloc_skb+0x2b2/0x380 [ 649.148879][T13774] ? __pfx___alloc_skb+0x10/0x10 [ 649.148902][T13774] ? genl_rcv_msg+0x4bb/0x800 [ 649.148927][T13774] netlink_ack+0x15d/0xb80 [ 649.148960][T13774] netlink_rcv_skb+0x332/0x420 [ 649.148985][T13774] ? __pfx_genl_rcv_msg+0x10/0x10 [ 649.149004][T13774] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 649.149041][T13774] ? netlink_deliver_tap+0x1ae/0xd30 [ 649.149064][T13774] ? selinux_netlink_send+0x578/0x830 [ 649.149085][T13774] ? is_vmalloc_addr+0x86/0xa0 [ 649.149113][T13774] genl_rcv+0x28/0x40 [ 649.149128][T13774] netlink_unicast+0x5a7/0x870 [ 649.149157][T13774] ? __pfx_netlink_unicast+0x10/0x10 [ 649.149183][T13774] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 649.149215][T13774] netlink_sendmsg+0x8c8/0xdd0 [ 649.149245][T13774] ? __pfx_netlink_sendmsg+0x10/0x10 [ 649.149281][T13774] ____sys_sendmsg+0xa98/0xc70 [ 649.149299][T13774] ? copy_msghdr_from_user+0x10a/0x160 [ 649.149323][T13774] ? __pfx_____sys_sendmsg+0x10/0x10 [ 649.149352][T13774] ___sys_sendmsg+0x134/0x1d0 [ 649.149377][T13774] ? __pfx____sys_sendmsg+0x10/0x10 [ 649.149432][T13774] __sys_sendmsg+0x16d/0x220 [ 649.149464][T13774] ? __pfx___sys_sendmsg+0x10/0x10 [ 649.149504][T13774] do_syscall_64+0xcd/0x4e0 [ 649.149531][T13774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.149548][T13774] RIP: 0033:0x7f55b038eec9 [ 649.149561][T13774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 649.149577][T13774] RSP: 002b:00007f55b1262038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 649.149594][T13774] RAX: ffffffffffffffda RBX: 00007f55b05e5fa0 RCX: 00007f55b038eec9 [ 649.149605][T13774] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000a [ 649.149615][T13774] RBP: 00007f55b1262090 R08: 0000000000000000 R09: 0000000000000000 [ 649.149625][T13774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.149634][T13774] R13: 00007f55b05e6038 R14: 00007f55b05e5fa0 R15: 00007ffd498ecae8 [ 649.149658][T13774] [ 649.151902][T13770] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2219'. [ 651.732564][ T5822] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 651.786201][T13822] block nbd2: Unsupported socket: should be TCP or UNIX. [ 651.902129][ T5822] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 652.145791][ T5822] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 652.160623][ T5822] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 652.160649][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.176376][ T5822] usb 2-1: config 0 descriptor?? [ 653.380113][ T30] audit: type=1400 audit(1759569144.658:2303): avc: denied { ioctl } for pid=13824 comm="syz.4.2235" path="/dev/loop-control" dev="devtmpfs" ino=645 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 653.827686][ T30] audit: type=1400 audit(1759569145.188:2304): avc: denied { append } for pid=13824 comm="syz.4.2235" name="renderD128" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 655.870589][T13858] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2242'. [ 656.740378][ T5822] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 657.203221][ T5894] usb 2-1: USB disconnect, device number 51 [ 657.340346][ T5822] usb 6-1: Using ep0 maxpacket: 8 [ 657.348618][ T5822] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 657.360279][ T5822] usb 6-1: config 0 has no interface number 0 [ 657.366393][ T5822] usb 6-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 657.944331][ T5822] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 657.955553][ T5822] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 657.976000][ T5822] usb 6-1: config 0 interface 186 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 657.995198][ T5822] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 658.013507][ T5822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.023159][ T5822] usb 6-1: Product: syz [ 658.027359][ T5822] usb 6-1: Manufacturer: syz [ 658.032154][ T5822] usb 6-1: SerialNumber: syz [ 658.046259][ T5822] usb 6-1: config 0 descriptor?? [ 658.164388][ T5822] iowarrior 6-1:0.186: no interrupt-out endpoint found [ 659.260796][T13910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2254'. [ 659.784043][ T5894] usb 6-1: USB disconnect, device number 33 [ 660.818059][ T30] audit: type=1400 audit(1759569152.168:2305): avc: denied { create } for pid=13923 comm="syz.5.2258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 660.984321][T13930] block nbd2: Unsupported socket: should be TCP or UNIX. [ 664.001229][T13961] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2269'. [ 664.122193][ T30] audit: type=1400 audit(1759569155.488:2306): avc: denied { create } for pid=13962 comm="syz.2.2270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 664.142191][ C1] vkms_vblank_simulate: vblank timer overrun [ 664.799494][T13975] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2271'. [ 665.590464][T13976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2268'. [ 665.707548][T13970] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2268'. [ 665.784636][T13987] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2272'. [ 665.890365][ T30] audit: type=1400 audit(1759569157.238:2307): avc: denied { getopt } for pid=13988 comm="syz.1.2274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 666.608009][ T30] audit: type=1400 audit(1759569157.968:2308): avc: denied { map } for pid=13988 comm="syz.1.2274" path="socket:[44804]" dev="sockfs" ino=44804 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 666.657400][ T30] audit: type=1400 audit(1759569157.968:2309): avc: denied { read accept } for pid=13988 comm="syz.1.2274" path="socket:[44804]" dev="sockfs" ino=44804 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 666.681228][ C1] vkms_vblank_simulate: vblank timer overrun [ 666.689226][ T30] audit: type=1400 audit(1759569157.968:2310): avc: denied { write } for pid=13988 comm="syz.1.2274" dev="sockfs" ino=44804 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 666.710603][ C1] vkms_vblank_simulate: vblank timer overrun [ 667.622335][T14014] block nbd5: Unsupported socket: should be TCP or UNIX. [ 667.890345][T14021] netlink: 5452 bytes leftover after parsing attributes in process `syz.0.2283'. [ 667.910016][T14021] openvswitch: netlink: Missing key (keys=40, expected=80) [ 669.240741][T14029] trusted_key: encrypted_key: keylen parameter is missing [ 669.759823][ T24] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 669.860584][T14054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2290'. [ 669.957386][T14061] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2290'. [ 670.052313][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 670.087579][ T24] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 670.170495][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.255359][ T24] usb 1-1: Product: syz [ 670.259612][ T24] usb 1-1: Manufacturer: syz [ 670.272732][ T24] usb 1-1: SerialNumber: syz [ 670.304773][ T24] usb 1-1: config 0 descriptor?? [ 670.341733][ T24] yurex 1-1:0.0: Could not find endpoints [ 670.502966][T14063] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2292'. [ 670.787890][T14067] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2291'. [ 670.797063][T14067] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 670.804785][ T5822] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 671.162968][ T5822] usb 3-1: device descriptor read/64, error -71 [ 671.552254][ T5822] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 673.495316][ T5822] usb 3-1: device descriptor read/64, error -71 [ 673.536226][ T24] usb 1-1: USB disconnect, device number 62 [ 673.897291][ T5822] usb usb3-port1: attempt power cycle [ 673.919416][T14102] FAULT_INJECTION: forcing a failure. [ 673.919416][T14102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 673.932939][T14101] FAULT_INJECTION: forcing a failure. [ 673.932939][T14101] name failslab, interval 1, probability 0, space 0, times 0 [ 673.940333][T14102] CPU: 0 UID: 0 PID: 14102 Comm: syz.5.2300 Not tainted syzkaller #0 PREEMPT(full) [ 673.940356][T14102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 673.940366][T14102] Call Trace: [ 673.940373][T14102] [ 673.940379][T14102] dump_stack_lvl+0x16c/0x1f0 [ 673.940407][T14102] should_fail_ex+0x512/0x640 [ 673.940433][T14102] _copy_to_user+0x32/0xd0 [ 673.940460][T14102] simple_read_from_buffer+0xcb/0x170 [ 673.940478][T14102] proc_fail_nth_read+0x197/0x240 [ 673.940499][T14102] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 673.940520][T14102] ? rw_verify_area+0xcf/0x6c0 [ 673.940544][T14102] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 673.940564][T14102] vfs_read+0x1e1/0xcf0 [ 673.940584][T14102] ? __pfx___mutex_lock+0x10/0x10 [ 673.940606][T14102] ? __pfx_vfs_read+0x10/0x10 [ 673.940629][T14102] ? __fget_files+0x20e/0x3c0 [ 673.940653][T14102] ksys_read+0x12a/0x250 [ 673.940668][T14102] ? __pfx_ksys_read+0x10/0x10 [ 673.940685][T14102] ? fput+0x9b/0xd0 [ 673.940709][T14102] do_syscall_64+0xcd/0x4e0 [ 673.940733][T14102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.940750][T14102] RIP: 0033:0x7fa6ccf8d8dc [ 673.940763][T14102] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 673.940778][T14102] RSP: 002b:00007fa6cdeca030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 673.940793][T14102] RAX: ffffffffffffffda RBX: 00007fa6cd1e5fa0 RCX: 00007fa6ccf8d8dc [ 673.940803][T14102] RDX: 000000000000000f RSI: 00007fa6cdeca0a0 RDI: 0000000000000004 [ 673.940813][T14102] RBP: 00007fa6cdeca090 R08: 0000000000000000 R09: 0000000000000000 [ 673.940823][T14102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 673.940832][T14102] R13: 00007fa6cd1e6038 R14: 00007fa6cd1e5fa0 R15: 00007ffc271ff178 [ 673.940854][T14102] [ 674.134127][T14101] CPU: 1 UID: 0 PID: 14101 Comm: syz.0.2299 Not tainted syzkaller #0 PREEMPT(full) [ 674.134152][T14101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 674.134164][T14101] Call Trace: [ 674.134170][T14101] [ 674.134177][T14101] dump_stack_lvl+0x16c/0x1f0 [ 674.134208][T14101] should_fail_ex+0x512/0x640 [ 674.134233][T14101] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 674.134263][T14101] should_failslab+0xc2/0x120 [ 674.134287][T14101] kmem_cache_alloc_noprof+0x75/0x6e0 [ 674.134316][T14101] ? skb_clone+0x190/0x3f0 [ 674.134346][T14101] ? skb_clone+0x190/0x3f0 [ 674.134369][T14101] skb_clone+0x190/0x3f0 [ 674.134395][T14101] netlink_deliver_tap+0xabd/0xd30 [ 674.134428][T14101] netlink_unicast+0x71f/0x870 [ 674.134459][T14101] ? __pfx_netlink_unicast+0x10/0x10 [ 674.134484][T14101] ? __pfx_ipmr_rtm_getroute+0x10/0x10 [ 674.134512][T14101] netlink_ack+0x696/0xb80 [ 674.134547][T14101] netlink_rcv_skb+0x332/0x420 [ 674.134574][T14101] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 674.134603][T14101] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 674.134640][T14101] ? netlink_deliver_tap+0x1ae/0xd30 [ 674.134672][T14101] netlink_unicast+0x5a7/0x870 [ 674.134703][T14101] ? __pfx_netlink_unicast+0x10/0x10 [ 674.134730][T14101] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 674.134766][T14101] netlink_sendmsg+0x8c8/0xdd0 [ 674.134797][T14101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 674.134840][T14101] sock_write_iter+0x563/0x610 [ 674.134861][T14101] ? __pfx_sock_write_iter+0x10/0x10 [ 674.134889][T14101] ? bpf_lsm_file_permission+0x9/0x10 [ 674.134909][T14101] ? security_file_permission+0x71/0x210 [ 674.134938][T14101] ? rw_verify_area+0xcf/0x6c0 [ 674.134967][T14101] vfs_write+0x7d3/0x11d0 [ 674.134984][T14101] ? __pfx_sock_write_iter+0x10/0x10 [ 674.135003][T14101] ? __pfx_vfs_write+0x10/0x10 [ 674.135018][T14101] ? find_held_lock+0x2b/0x80 [ 674.135054][T14101] ksys_write+0x1f8/0x250 [ 674.135070][T14101] ? __pfx_ksys_write+0x10/0x10 [ 674.135092][T14101] do_syscall_64+0xcd/0x4e0 [ 674.135118][T14101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.135134][T14101] RIP: 0033:0x7f7a8138eec9 [ 674.135147][T14101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 674.135167][T14101] RSP: 002b:00007f7a7f5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 674.135184][T14101] RAX: ffffffffffffffda RBX: 00007f7a815e5fa0 RCX: 00007f7a8138eec9 [ 674.135195][T14101] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000003 [ 674.135205][T14101] RBP: 00007f7a7f5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 674.135215][T14101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 674.135224][T14101] R13: 00007f7a815e6038 R14: 00007f7a815e5fa0 R15: 00007ffefc69b7f8 [ 674.135248][T14101] [ 675.207948][T14115] netlink: 'syz.4.2305': attribute type 10 has an invalid length. [ 675.359009][T14117] netlink: 'syz.4.2305': attribute type 10 has an invalid length. [ 675.585115][T14117] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 678.495465][ T24] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 678.662397][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 678.761031][ T24] usb 6-1: config 9 has an invalid interface number: 53 but max is 0 [ 678.769129][ T24] usb 6-1: config 9 has no interface number 0 [ 678.783651][ T24] usb 6-1: config 9 interface 53 has no altsetting 0 [ 678.802365][ T24] usb 6-1: New USB device found, idVendor=0403, idProduct=9e90, bcdDevice=7e.4b [ 678.813306][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.821368][ T24] usb 6-1: Product: syz [ 678.825685][ T24] usb 6-1: Manufacturer: syz [ 678.830402][ T24] usb 6-1: SerialNumber: syz [ 678.893429][T14158] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2316'. [ 679.023443][T14163] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2318'. [ 679.053800][T14164] block nbd4: Unsupported socket: should be TCP or UNIX. [ 679.077730][ T24] ftdi_sio 6-1:9.53: FTDI USB Serial Device converter detected [ 679.108963][ T24] ftdi_sio ttyUSB0: unknown device type: 0x7e4b [ 679.133347][ T24] usb 6-1: USB disconnect, device number 34 [ 679.170286][ T24] ftdi_sio 6-1:9.53: device disconnected [ 679.190333][ T5822] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 679.715852][T14160] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 679.787173][ T5822] usb 3-1: unable to get BOS descriptor or descriptor too short [ 679.797190][ T5822] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 679.805210][ T5822] usb 3-1: can't read configurations, error -71 [ 679.952079][T14181] vxlan1: entered promiscuous mode [ 679.968371][T14181] vxlan1: entered allmulticast mode [ 679.988998][ T6083] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.005412][ T6083] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.047972][ T6083] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.057246][ T6083] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.797552][T14191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=874 sclass=netlink_route_socket pid=14191 comm=syz.0.2327 [ 681.659869][T14197] FAULT_INJECTION: forcing a failure. [ 681.659869][T14197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 681.755267][T14197] CPU: 1 UID: 0 PID: 14197 Comm: syz.4.2328 Not tainted syzkaller #0 PREEMPT(full) [ 681.755294][T14197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 681.755305][T14197] Call Trace: [ 681.755311][T14197] [ 681.755318][T14197] dump_stack_lvl+0x16c/0x1f0 [ 681.755347][T14197] should_fail_ex+0x512/0x640 [ 681.755375][T14197] __fpu_restore_sig+0xfe/0x13a0 [ 681.755403][T14197] ? __lock_acquire+0xb97/0x1ce0 [ 681.755421][T14197] ? __pfx___fpu_restore_sig+0x10/0x10 [ 681.755460][T14197] ? __might_fault+0xe3/0x190 [ 681.755476][T14197] ? __might_fault+0x13b/0x190 [ 681.755496][T14197] fpu__restore_sig+0x151/0x190 [ 681.755523][T14197] restore_sigcontext+0x4c9/0x6a0 [ 681.755547][T14197] ? __pfx_restore_sigcontext+0x10/0x10 [ 681.755588][T14197] ? __pfx_restore_altstack+0x10/0x10 [ 681.755608][T14197] ? _raw_spin_unlock_irq+0x23/0x50 [ 681.755628][T14197] ? lockdep_hardirqs_on+0x7c/0x110 [ 681.755655][T14197] __do_sys_rt_sigreturn+0x1bb/0x230 [ 681.755678][T14197] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 681.755709][T14197] do_syscall_64+0xcd/0x4e0 [ 681.755734][T14197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.755751][T14197] RIP: 0033:0x7f55b038eec7 [ 681.755766][T14197] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 681.755782][T14197] RSP: 002b:00007f55b1241038 EFLAGS: 00000246 [ 681.755796][T14197] RAX: 0000000000000000 RBX: 00007f55b05e6090 RCX: 00007f55b038eec9 [ 681.755808][T14197] RDX: 0000000000001004 RSI: 00002000000013c0 RDI: 0000000000000004 [ 681.755818][T14197] RBP: 00007f55b1241090 R08: 0000000000000000 R09: 0000000000000000 [ 681.755828][T14197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 681.755838][T14197] R13: 00007f55b05e6128 R14: 00007f55b05e6090 R15: 00007ffd498ecae8 [ 681.755861][T14197] [ 682.111124][T14215] tipc: Enabled bearer , priority 0 [ 682.434851][T14218] mac80211_hwsim hwsim13 syzkaller0: entered promiscuous mode [ 682.464371][T14218] mac80211_hwsim hwsim13 syzkaller0: entered allmulticast mode [ 682.496788][T14222] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2335'. [ 682.549962][T14215] tipc: Resetting bearer [ 682.573250][T14215] tipc: Enabling of bearer rejected, already enabled [ 683.337761][ T24] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 683.684580][T14225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 683.711976][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 683.734790][ T24] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 683.759692][ T24] usb 3-1: can't read configurations, error -71 [ 685.347027][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.903739][T14268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2344'. [ 685.913485][T14268] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2344'. [ 686.650294][ T9] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 686.821581][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 686.838274][ T9] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 686.881227][ T9] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 686.891546][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.073689][ T30] audit: type=1400 audit(1759569178.348:2311): avc: denied { read } for pid=14274 comm="syz.1.2349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 687.354710][ T30] audit: type=1400 audit(1759569178.418:2312): avc: denied { lock } for pid=14274 comm="syz.1.2349" path="socket:[47419]" dev="sockfs" ino=47419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 687.389150][ T9] usb 6-1: config 0 descriptor?? [ 688.746127][ T30] audit: type=1400 audit(1759569180.028:2313): avc: denied { append } for pid=14292 comm="syz.2.2352" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 689.536571][T14300] FAULT_INJECTION: forcing a failure. [ 689.536571][T14300] name failslab, interval 1, probability 0, space 0, times 0 [ 689.558706][T14300] CPU: 0 UID: 0 PID: 14300 Comm: syz.4.2353 Not tainted syzkaller #0 PREEMPT(full) [ 689.558731][T14300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 689.558741][T14300] Call Trace: [ 689.558747][T14300] [ 689.558754][T14300] dump_stack_lvl+0x16c/0x1f0 [ 689.558783][T14300] should_fail_ex+0x512/0x640 [ 689.558813][T14300] should_failslab+0xc2/0x120 [ 689.558835][T14300] kmem_cache_alloc_noprof+0x75/0x6e0 [ 689.558864][T14300] ? vm_area_dup+0x27/0x8d0 [ 689.558899][T14300] ? vm_area_dup+0x27/0x8d0 [ 689.558924][T14300] vm_area_dup+0x27/0x8d0 [ 689.558950][T14300] __split_vma+0x18e/0x1070 [ 689.558979][T14300] ? __pfx___split_vma+0x10/0x10 [ 689.559015][T14300] ? mtree_range_walk+0x7e6/0xc00 [ 689.559043][T14300] vms_gather_munmap_vmas+0x1cb/0x1340 [ 689.559078][T14300] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 689.559109][T14300] ? mas_walk+0x6f5/0x980 [ 689.559141][T14300] __mmap_region+0x434/0x27a0 [ 689.559159][T14300] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 689.559186][T14300] ? __pfx___mmap_region+0x10/0x10 [ 689.559202][T14300] ? kvm_sched_clock_read+0x11/0x20 [ 689.559223][T14300] ? sched_clock+0x38/0x60 [ 689.559249][T14300] ? sched_clock_cpu+0x6c/0x530 [ 689.559271][T14300] ? __pfx_sched_clock_cpu+0x10/0x10 [ 689.559287][T14300] ? __pick_eevdf+0x127/0x670 [ 689.559302][T14300] ? arch_scale_cpu_capacity+0x15/0xb0 [ 689.559332][T14300] ? rcu_is_watching+0x12/0xc0 [ 689.559357][T14300] ? trace_sched_exit_tp+0xd1/0x120 [ 689.559380][T14300] ? __schedule+0x11a3/0x5de0 [ 689.559402][T14300] ? trace_sched_exit_tp+0xd1/0x120 [ 689.559474][T14300] mmap_region+0x32b/0x3f0 [ 689.559496][T14300] do_mmap+0xa3e/0x1210 [ 689.559523][T14300] ? __pfx_do_mmap+0x10/0x10 [ 689.559545][T14300] ? __pfx_down_write_killable+0x10/0x10 [ 689.559577][T14300] vm_mmap_pgoff+0x29e/0x470 [ 689.559604][T14300] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 689.559629][T14300] ? __fget_files+0x20e/0x3c0 [ 689.559653][T14300] ksys_mmap_pgoff+0x32c/0x5c0 [ 689.559679][T14300] __x64_sys_mmap+0x125/0x190 [ 689.559701][T14300] do_syscall_64+0xcd/0x4e0 [ 689.559729][T14300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.559746][T14300] RIP: 0033:0x7f55b038eec9 [ 689.559761][T14300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 689.559777][T14300] RSP: 002b:00007f55b1241038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 689.559795][T14300] RAX: ffffffffffffffda RBX: 00007f55b05e6090 RCX: 00007f55b038eec9 [ 689.559807][T14300] RDX: 0000000003000013 RSI: 0000000000001000 RDI: 0000200000ffc000 [ 689.559819][T14300] RBP: 00007f55b1241090 R08: 0000000000000003 R09: 0000000000000000 [ 689.559830][T14300] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 689.559841][T14300] R13: 00007f55b05e6128 R14: 00007f55b05e6090 R15: 00007ffd498ecae8 [ 689.559867][T14300] [ 690.250467][ T30] audit: type=1400 audit(1759569181.618:2314): avc: denied { ioctl } for pid=14302 comm="syz.1.2354" path="socket:[46358]" dev="sockfs" ino=46358 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 690.278070][T14305] netlink: zone id is out of range [ 690.294708][T14305] netlink: set zone limit has 8 unknown bytes [ 690.413823][T14307] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2355'. [ 690.988971][T14313] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2357'. [ 691.246519][ T5894] usb 6-1: USB disconnect, device number 35 [ 691.285476][ T30] audit: type=1400 audit(1759569182.628:2315): avc: denied { accept } for pid=14311 comm="syz.4.2357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 691.933368][T14327] wg0 speed is unknown, defaulting to 1000 [ 692.210411][ T9] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 692.379613][ T9] usb 1-1: config index 0 descriptor too short (expected 165, got 18) [ 692.400814][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 692.411851][ T9] usb 1-1: config 0 has no interfaces? [ 692.419395][ T9] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 692.430281][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.438421][ T9] usb 1-1: Product: syz [ 692.442957][ T9] usb 1-1: Manufacturer: syz [ 692.447622][ T9] usb 1-1: SerialNumber: syz [ 692.455219][ T9] usb 1-1: config 0 descriptor?? [ 692.540288][ T5822] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 692.547898][ T9654] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 692.721855][ T5822] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 692.760633][ T5822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 692.761021][ T9654] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 692.782863][ T9654] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 692.792395][ T5822] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 692.801688][ T5822] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 692.809793][ T9654] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 692.820835][ T5822] usb 6-1: Manufacturer: syz [ 692.832246][ T9654] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.841449][ T5822] usb 6-1: config 0 descriptor?? [ 692.855471][ T9654] usb 2-1: config 0 descriptor?? [ 692.886685][ T9654] usb 1-1: USB disconnect, device number 63 [ 692.913358][ T5822] rc_core: IR keymap rc-hauppauge not found [ 692.922390][ T5822] Registered IR keymap rc-empty [ 692.933251][ T5822] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 692.948947][ T5822] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input34 [ 693.056354][ T5822] usb 6-1: USB disconnect, device number 36 [ 693.205270][T14356] can: request_module (can-proto-0) failed. [ 693.539861][T14368] comedi comedi0: comedi_config --init_data is deprecated [ 694.016336][ T5822] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 694.050179][T14378] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2375'. [ 694.190450][ T5822] usb 1-1: Using ep0 maxpacket: 8 [ 694.197273][ T5822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 694.327476][ T5822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 694.378994][ T5822] usb 1-1: New USB device found, idVendor=0404, idProduct=c20e, bcdDevice= 0.00 [ 694.388227][ T5822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.423116][ T5822] usb 1-1: config 0 descriptor?? [ 696.379093][ T5822] usbhid 1-1:0.0: can't add hid device: -71 [ 696.395699][ T5822] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 696.413942][ T5822] usb 1-1: USB disconnect, device number 64 [ 697.365939][T14405] mkiss: ax1: crc mode is auto. [ 697.436614][T14405] 9pnet_fd: Insufficient options for proto=fd [ 697.463163][ T5894] usb 2-1: USB disconnect, device number 52 [ 698.264180][T14417] : entered promiscuous mode [ 699.471915][T14446] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2398'. [ 699.524134][T14446] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2398'. [ 699.738549][T14446] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2398'. [ 700.365043][T14464] CUSE: info not properly terminated [ 700.427721][ T24] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 700.436833][ T30] audit: type=1400 audit(1759569191.728:2316): avc: denied { create } for pid=14456 comm="syz.1.2401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 700.654501][ T24] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 700.671512][ T9] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 700.679213][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 700.730357][ T24] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 700.748026][ T24] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 700.757201][ T24] usb 3-1: Manufacturer: syz [ 700.788018][ T24] usb 3-1: config 0 descriptor?? [ 700.850285][ T24] rc_core: IR keymap rc-hauppauge not found [ 700.856265][ T24] Registered IR keymap rc-empty [ 700.868391][ T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 700.885472][ T9] usb 2-1: config 0 has no interfaces? [ 700.918039][ T9] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 701.026946][ T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input35 [ 701.156164][ T24] usb 3-1: USB disconnect, device number 73 [ 701.184403][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.263266][ T9] usb 2-1: Product: syz [ 701.302345][T14485] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2408'. [ 701.362747][ T9] usb 2-1: Manufacturer: syz [ 701.545970][ T9] usb 2-1: SerialNumber: syz [ 701.588162][ T9] usb 2-1: config 0 descriptor?? [ 701.799038][T14490] 9pnet_fd: Insufficient options for proto=fd [ 701.842256][T14493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2410'. [ 702.466113][T14503] FAULT_INJECTION: forcing a failure. [ 702.466113][T14503] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 702.479535][T14503] CPU: 0 UID: 0 PID: 14503 Comm: syz.5.2413 Not tainted syzkaller #0 PREEMPT(full) [ 702.479551][T14503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 702.479557][T14503] Call Trace: [ 702.479561][T14503] [ 702.479566][T14503] dump_stack_lvl+0x16c/0x1f0 [ 702.479587][T14503] should_fail_ex+0x512/0x640 [ 702.479607][T14503] should_fail_alloc_page+0xe7/0x130 [ 702.479623][T14503] prepare_alloc_pages+0x3c2/0x610 [ 702.479640][T14503] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 702.479664][T14503] ? __pfx_try_to_migrate_one+0x10/0x10 [ 702.479684][T14503] ? __up_read+0x1f8/0x750 [ 702.479699][T14503] ? __pfx___up_read+0x10/0x10 [ 702.479712][T14503] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 702.479730][T14503] ? rmap_walk_anon+0x503/0x710 [ 702.479757][T14503] __folio_alloc_noprof+0x11/0x220 [ 702.479768][T14503] alloc_migration_target+0x24a/0x660 [ 702.479784][T14503] migrate_pages_batch+0x3b9/0x3bb0 [ 702.479802][T14503] ? __pfx_alloc_migration_target+0x10/0x10 [ 702.479823][T14503] ? __pfx_migrate_pages_batch+0x10/0x10 [ 702.479841][T14503] ? __pfx_walk_pgd_range+0x10/0x10 [ 702.479854][T14503] migrate_pages_sync+0x12d/0x8a0 [ 702.479870][T14503] ? __pfx_alloc_migration_target+0x10/0x10 [ 702.479888][T14503] ? queue_pages_test_walk+0x279/0x410 [ 702.479904][T14503] ? __pfx_migrate_pages_sync+0x10/0x10 [ 702.479920][T14503] ? walk_page_test+0x9b/0x180 [ 702.479932][T14503] ? walk_page_range_mm+0x235/0xb40 [ 702.479946][T14503] migrate_pages+0x1b5f/0x23a0 [ 702.479963][T14503] ? __pfx_alloc_migration_target+0x10/0x10 [ 702.479982][T14503] ? __pfx_migrate_pages+0x10/0x10 [ 702.479998][T14503] ? queue_pages_range+0x11e/0x180 [ 702.480013][T14503] ? __pfx___up_read+0x10/0x10 [ 702.480027][T14503] ? do_migrate_pages+0x458/0x750 [ 702.480043][T14503] do_migrate_pages+0x48e/0x750 [ 702.480061][T14503] ? __pfx_do_migrate_pages+0x10/0x10 [ 702.480076][T14503] ? rcu_is_watching+0x12/0xc0 [ 702.480094][T14503] ? cap_capable+0xb3/0x250 [ 702.480107][T14503] ? get_task_mm+0xc2/0xf0 [ 702.480123][T14503] ? security_capable+0x250/0x260 [ 702.480139][T14503] kernel_migrate_pages+0x55b/0x700 [ 702.480153][T14503] ? __pfx_kernel_migrate_pages+0x10/0x10 [ 702.480167][T14503] ? ksys_write+0x1ac/0x250 [ 702.480179][T14503] ? __pfx_ksys_write+0x10/0x10 [ 702.480204][T14503] __x64_sys_migrate_pages+0x96/0x100 [ 702.480227][T14503] ? lockdep_hardirqs_on+0x7c/0x110 [ 702.480250][T14503] do_syscall_64+0xcd/0x4e0 [ 702.480277][T14503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.480295][T14503] RIP: 0033:0x7fa6ccf8eec9 [ 702.480310][T14503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 702.480326][T14503] RSP: 002b:00007fa6cdeca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 702.480341][T14503] RAX: ffffffffffffffda RBX: 00007fa6cd1e5fa0 RCX: 00007fa6ccf8eec9 [ 702.480352][T14503] RDX: 0000200000000000 RSI: 0000000000000005 RDI: 0000000000000000 [ 702.480363][T14503] RBP: 00007fa6cdeca090 R08: 0000000000000000 R09: 0000000000000000 [ 702.480373][T14503] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 702.480380][T14503] R13: 00007fa6cd1e6038 R14: 00007fa6cd1e5fa0 R15: 00007ffc271ff178 [ 702.480394][T14503] [ 702.994376][ T930] usb 2-1: USB disconnect, device number 53 [ 703.870302][ T5822] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 703.895272][T14517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2416'. [ 703.960033][T14517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2416'. [ 703.974074][T14517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2416'. [ 703.988231][T14517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2416'. [ 704.013707][ T5822] usb 2-1: device descriptor read/64, error -71 [ 704.312752][ T5822] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 704.462135][ T5822] usb 2-1: device descriptor read/64, error -71 [ 704.585210][ T5822] usb usb2-port1: attempt power cycle [ 704.698551][ T30] audit: type=1326 audit(1759569196.058:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14525 comm="syz.0.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8138eec9 code=0x7ffc0000 [ 704.775169][ T30] audit: type=1326 audit(1759569196.058:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14525 comm="syz.0.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8138eec9 code=0x7ffc0000 [ 704.814590][ T30] audit: type=1326 audit(1759569196.058:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14525 comm="syz.0.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f7a8138eec9 code=0x7ffc0000 [ 704.850815][T14533] FAULT_INJECTION: forcing a failure. [ 704.850815][T14533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 704.853574][ T30] audit: type=1326 audit(1759569196.058:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14525 comm="syz.0.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8138eec9 code=0x7ffc0000 [ 704.900103][ T30] audit: type=1326 audit(1759569196.058:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14525 comm="syz.0.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f7a8138eec9 code=0x7ffc0000 [ 704.923586][T14533] CPU: 1 UID: 0 PID: 14533 Comm: syz.5.2423 Not tainted syzkaller #0 PREEMPT(full) [ 704.923610][T14533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 704.923621][T14533] Call Trace: [ 704.923627][T14533] [ 704.923634][T14533] dump_stack_lvl+0x16c/0x1f0 [ 704.923663][T14533] should_fail_ex+0x512/0x640 [ 704.923694][T14533] _copy_to_iter+0x463/0x1710 [ 704.923728][T14533] ? __pfx__copy_to_iter+0x10/0x10 [ 704.923754][T14533] ? gid_m_show+0x179/0x230 [ 704.923778][T14533] ? gid_m_start+0x127/0x180 [ 704.923801][T14533] ? traverse.part.0.constprop.0+0x2c5/0x650 [ 704.923830][T14533] seq_read_iter+0x71e/0x12d0 [ 704.923860][T14533] seq_read+0x3a3/0x570 [ 704.923877][T14533] ? __pfx_seq_read+0x10/0x10 [ 704.923894][T14533] ? get_pid_task+0xfc/0x250 [ 704.923917][T14533] ? avc_policy_seqno+0x9/0x20 [ 704.923944][T14533] ? rw_verify_area+0xcf/0x6c0 [ 704.923969][T14533] ? __pfx_seq_read+0x10/0x10 [ 704.923985][T14533] vfs_read+0x1e1/0xcf0 [ 704.924007][T14533] ? __pfx_vfs_read+0x10/0x10 [ 704.924024][T14533] ? find_held_lock+0x2b/0x80 [ 704.924049][T14533] ? __fget_files+0x204/0x3c0 [ 704.924073][T14533] ? __fget_files+0x20e/0x3c0 [ 704.924091][T14533] ? __fget_files+0x170/0x3c0 [ 704.924116][T14533] __x64_sys_pread64+0x1eb/0x250 [ 704.924137][T14533] ? __pfx___x64_sys_pread64+0x10/0x10 [ 704.924162][T14533] do_syscall_64+0xcd/0x4e0 [ 704.924186][T14533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.924203][T14533] RIP: 0033:0x7fa6ccf8eec9 [ 704.924216][T14533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 704.924232][T14533] RSP: 002b:00007fa6cdeca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 704.924247][T14533] RAX: ffffffffffffffda RBX: 00007fa6cd1e5fa0 RCX: 00007fa6ccf8eec9 [ 704.924257][T14533] RDX: 0000000000000098 RSI: 0000200000000080 RDI: 0000000000000003 [ 704.924267][T14533] RBP: 00007fa6cdeca090 R08: 0000000000000000 R09: 0000000000000000 [ 704.924277][T14533] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 704.924286][T14533] R13: 00007fa6cd1e6038 R14: 00007fa6cd1e5fa0 R15: 00007ffc271ff178 [ 704.924308][T14533] [ 705.142039][ T5822] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 705.153829][ T30] audit: type=1326 audit(1759569196.058:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14525 comm="syz.0.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8138eec9 code=0x7ffc0000 [ 705.178328][ T30] audit: type=1326 audit(1759569196.058:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14525 comm="syz.0.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8138eec9 code=0x7ffc0000 [ 705.202107][ T30] audit: type=1326 audit(1759569196.058:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14525 comm="syz.0.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f7a8138eec9 code=0x7ffc0000 [ 705.225637][ T5822] usb 2-1: device descriptor read/8, error -71 [ 705.276534][ T30] audit: type=1326 audit(1759569196.058:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14525 comm="syz.0.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8138eec9 code=0x7ffc0000 [ 705.394249][T14539] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 705.472328][ T5822] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 705.811304][ T5822] usb 2-1: device descriptor read/8, error -71 [ 705.818365][T14545] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2426'. [ 705.930768][ T5822] usb usb2-port1: unable to enumerate USB device [ 706.675920][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 706.675936][ T30] audit: type=1400 audit(1759569198.038:2327): avc: denied { read } for pid=14570 comm="syz.2.2433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 707.011920][T14574] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2433'. [ 707.540272][ T5822] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 707.619269][ T5816] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 707.697710][T14598] afs: Unknown parameter 'fsuuid' [ 707.705215][ T5822] usb 1-1: Using ep0 maxpacket: 8 [ 707.713161][ T5822] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 707.750782][ T5822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 707.763179][ T5822] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 707.780695][ T5822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.791924][ T5822] usb 1-1: Product: syz [ 707.796209][ T5822] usb 1-1: Manufacturer: syz [ 707.802445][ T5822] usb 1-1: SerialNumber: syz [ 707.816646][ T5822] usb 1-1: config 0 descriptor?? [ 707.914477][ T5822] streamzap 1-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 708.033504][T14588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2439'. [ 708.048883][T14588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2439'. [ 708.078278][T14588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2439'. [ 708.102660][T14588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2439'. [ 708.131290][ T5894] usb 1-1: USB disconnect, device number 65 [ 708.804292][T14618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2449'. [ 708.881796][ T30] audit: type=1400 audit(1759569200.248:2328): avc: denied { map } for pid=14617 comm="syz.0.2449" path="socket:[48066]" dev="sockfs" ino=48066 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 708.907567][ T30] audit: type=1400 audit(1759569200.248:2329): avc: denied { accept } for pid=14617 comm="syz.0.2449" path="socket:[48066]" dev="sockfs" ino=48066 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 709.441349][ T5894] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 709.682255][ T5894] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 709.700300][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 709.726226][ T5894] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 709.741170][ T5894] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 709.758249][ T5894] usb 2-1: Manufacturer: syz [ 709.770890][ T5894] usb 2-1: config 0 descriptor?? [ 709.866531][T14634] block nbd0: Unsupported socket: should be TCP or UNIX. [ 709.880072][ T5894] rc_core: IR keymap rc-hauppauge not found [ 709.896492][ T5894] Registered IR keymap rc-empty [ 709.921162][T14638] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2451'. [ 709.930936][T14630] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2451'. [ 710.015419][ T5894] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 710.074936][ T5894] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input36 [ 710.305480][ T5894] usb 2-1: USB disconnect, device number 58 [ 712.934184][T14655] ªªªªªª: renamed from wg2 (while UP) [ 713.031952][T14654] hpfs: hpfs_map_sector(): read error [ 713.255286][T14659] siw: device registration error -23 [ 714.596726][T14681] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2463'. [ 716.040480][ C1] ------------[ cut here ]------------ [ 716.046372][ C1] ODEBUG: free active (active state 0) object: ffff88805dc89890 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 716.059666][ C1] WARNING: CPU: 1 PID: 14684 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 716.069260][ C1] Modules linked in: [ 716.073568][ C1] CPU: 1 UID: 0 PID: 14684 Comm: syz.0.2465 Not tainted syzkaller #0 PREEMPT(full) [ 716.082976][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 716.093058][ C1] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 716.098872][ C1] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd a0 21 d0 8b 4c 89 e6 48 c7 c7 20 16 d0 8b e8 9f a8 d1 fc 90 <0f> 0b 90 90 58 83 05 b6 51 b7 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 716.118519][ C1] RSP: 0018:ffffc90000a08a18 EFLAGS: 00010282 [ 716.124623][ C1] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff8179bd78 [ 716.129145][T14691] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2467'. [ 716.132625][ C1] RDX: ffff88805dae8000 RSI: ffffffff8179bd85 RDI: 0000000000000001 [ 716.132664][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 716.132677][ C1] R10: 0000000000000000 R11: fffffffffffd9f60 R12: ffffffff8bd01cc0 [ 716.132690][ C1] R13: ffffffff8b6ffec0 R14: ffffffff8a41dfb0 R15: ffffc90000a08b18 [ 716.132703][ C1] FS: 0000000000000000(0000) GS:ffff888124f85000(0000) knlGS:0000000000000000 [ 716.132722][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 716.132735][ C1] CR2: 00007fa4fb3e7dac CR3: 000000005e4a3000 CR4: 00000000003526f0 [ 716.132748][ C1] Call Trace: [ 716.132757][ C1] [ 716.203134][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 716.208772][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 716.214617][ C1] debug_check_no_obj_freed+0x4b7/0x600 [ 716.220220][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 716.226306][ C1] kfree+0x291/0x6d0 [ 716.230229][ C1] ? rose_timer_expiry+0x53f/0x630 [ 716.235349][ C1] ? rose_timer_expiry+0x53f/0x630 [ 716.240487][ C1] rose_timer_expiry+0x53f/0x630 [ 716.245429][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 716.250912][ C1] call_timer_fn+0x19a/0x620 [ 716.255504][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 716.260643][ C1] ? mark_held_locks+0x49/0x80 [ 716.265407][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 716.270892][ C1] __run_timers+0x6ef/0x960 [ 716.275405][ C1] ? __pfx___run_timers+0x10/0x10 [ 716.280484][ C1] run_timer_base+0x114/0x190 [ 716.285167][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 716.290392][ C1] run_timer_softirq+0x1a/0x40 [ 716.295153][ C1] handle_softirqs+0x219/0x8e0 [ 716.299925][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 716.305252][ C1] __irq_exit_rcu+0x109/0x170 [ 716.309935][ C1] irq_exit_rcu+0x9/0x30 [ 716.314207][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 716.319846][ C1] [ 716.322807][ C1] [ 716.325735][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 716.331746][ C1] RIP: 0010:lock_acquire+0x62/0x350 [ 716.336948][ C1] Code: 4c e2 11 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 d2 d0 c7 0e 0f 82 74 02 00 00 8b 35 2a 01 c8 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 29 4c e2 11 0f 85 c7 02 00 00 48 83 c4 [ 716.356584][ C1] RSP: 0018:ffffc90002e976c8 EFLAGS: 00000206 [ 716.362711][ C1] RAX: 0000000000000046 RBX: ffffffff8e1c4060 RCX: 0000000078e4eb4b [ 716.370711][ C1] RDX: 0000000000000000 RSI: ffffffff8d7fb115 RDI: ffffffff8bd010c0 [ 716.378682][ C1] RBP: 0000000000000002 R08: 7f2fd16e60a37ad9 R09: 0000000000000000 [ 716.386673][ C1] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 716.394226][T14700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2468'. [ 716.394665][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 716.411485][ C1] ? find_held_lock+0x2b/0x80 [ 716.416179][ C1] pfn_valid+0x15c/0x4d0 [ 716.420448][ C1] ? pfn_valid+0x140/0x4d0 [ 716.421395][T14700] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2468'. [ 716.424862][ C1] page_table_check_clear+0x21/0x740 [ 716.424891][ C1] __page_table_check_pte_clear+0xf1/0x100 [ 716.424912][ C1] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 716.451287][ C1] ? __tlb_remove_folio_pages_size.constprop.0+0x162/0x560 [ 716.458467][ C1] unmap_page_range+0x24d9/0x41b0 [ 716.463496][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 716.468844][ C1] ? mas_next_slot+0x12d3/0x1cb0 [ 716.473805][ C1] ? uprobe_munmap+0x20/0x600 [ 716.478494][ C1] unmap_single_vma.constprop.0+0x153/0x240 [ 716.484429][ C1] unmap_vmas+0x218/0x470 [ 716.488772][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 716.493682][ C1] exit_mmap+0x1b2/0xb90 [ 716.497935][ C1] ? trace_contention_end+0xdd/0x130 [ 716.503258][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 716.508035][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 716.513009][ C1] ? arch_uprobe_clear_state+0x16/0x150 [ 716.518560][ C1] __mmput+0x12a/0x410 [ 716.522647][ C1] mmput+0x62/0x70 [ 716.526353][ C1] do_exit+0x7c7/0x2bf0 [ 716.530514][ C1] ? __pfx_do_exit+0x10/0x10 [ 716.535096][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 716.540469][ C1] do_group_exit+0xd3/0x2a0 [ 716.544951][ C1] __x64_sys_exit_group+0x3e/0x50 [ 716.549948][ C1] x64_sys_call+0x150b/0x1730 [ 716.554625][ C1] do_syscall_64+0xcd/0x4e0 [ 716.559110][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.564991][ C1] RIP: 0033:0x7f7a8138eec9 [ 716.569378][ C1] Code: Unable to access opcode bytes at 0x7f7a8138ee9f. [ 716.576517][ C1] RSP: 002b:00007ffefc69bb58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 716.584953][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7a8138eec9 [ 716.592946][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 716.600951][ C1] RBP: 00007ffefc69bbbc R08: 00000003fc69bc4f R09: 00000000000927c0 [ 716.608930][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 00000000000001e3 [ 716.616921][ C1] R13: 00000000000927c0 R14: 00000000000ae6a8 R15: 00007ffefc69bc10 [ 716.624899][ C1] [ 716.627898][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 716.635158][ C1] CPU: 1 UID: 0 PID: 14684 Comm: syz.0.2465 Not tainted syzkaller #0 PREEMPT(full) [ 716.644521][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 716.654576][ C1] Call Trace: [ 716.657842][ C1] [ 716.660664][ C1] dump_stack_lvl+0x3d/0x1f0 [ 716.665239][ C1] vpanic+0x640/0x6f0 [ 716.669217][ C1] ? debug_print_object+0x1a2/0x2b0 [ 716.674393][ C1] panic+0xca/0xd0 [ 716.678088][ C1] ? __pfx_panic+0x10/0x10 [ 716.682495][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 716.687599][ C1] check_panic_on_warn+0xab/0xb0 [ 716.692511][ C1] __warn+0xf6/0x3c0 [ 716.696382][ C1] ? debug_print_object+0x1a2/0x2b0 [ 716.701556][ C1] report_bug+0x3c3/0x580 [ 716.705862][ C1] ? debug_print_object+0x1a2/0x2b0 [ 716.711036][ C1] handle_bug+0x184/0x210 [ 716.715346][ C1] exc_invalid_op+0x17/0x50 [ 716.719842][ C1] asm_exc_invalid_op+0x1a/0x20 [ 716.724666][ C1] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 716.730450][ C1] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd a0 21 d0 8b 4c 89 e6 48 c7 c7 20 16 d0 8b e8 9f a8 d1 fc 90 <0f> 0b 90 90 58 83 05 b6 51 b7 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 716.750074][ C1] RSP: 0018:ffffc90000a08a18 EFLAGS: 00010282 [ 716.756124][ C1] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff8179bd78 [ 716.764069][ C1] RDX: ffff88805dae8000 RSI: ffffffff8179bd85 RDI: 0000000000000001 [ 716.772029][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 716.779981][ C1] R10: 0000000000000000 R11: fffffffffffd9f60 R12: ffffffff8bd01cc0 [ 716.787949][ C1] R13: ffffffff8b6ffec0 R14: ffffffff8a41dfb0 R15: ffffc90000a08b18 [ 716.795899][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 716.801516][ C1] ? __warn_printk+0x198/0x350 [ 716.806253][ C1] ? __warn_printk+0x1a5/0x350 [ 716.810998][ C1] ? debug_print_object+0x1a1/0x2b0 [ 716.816170][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 716.821780][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 716.827581][ C1] debug_check_no_obj_freed+0x4b7/0x600 [ 716.833112][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 716.839184][ C1] kfree+0x291/0x6d0 [ 716.843075][ C1] ? rose_timer_expiry+0x53f/0x630 [ 716.848167][ C1] ? rose_timer_expiry+0x53f/0x630 [ 716.853253][ C1] rose_timer_expiry+0x53f/0x630 [ 716.858171][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 716.863602][ C1] call_timer_fn+0x19a/0x620 [ 716.868167][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 716.873270][ C1] ? mark_held_locks+0x49/0x80 [ 716.878031][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 716.883478][ C1] __run_timers+0x6ef/0x960 [ 716.887978][ C1] ? __pfx___run_timers+0x10/0x10 [ 716.892992][ C1] run_timer_base+0x114/0x190 [ 716.897674][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 716.902847][ C1] run_timer_softirq+0x1a/0x40 [ 716.907581][ C1] handle_softirqs+0x219/0x8e0 [ 716.912323][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 716.917585][ C1] __irq_exit_rcu+0x109/0x170 [ 716.922236][ C1] irq_exit_rcu+0x9/0x30 [ 716.926456][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 716.932066][ C1] [ 716.934971][ C1] [ 716.937876][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 716.943831][ C1] RIP: 0010:lock_acquire+0x62/0x350 [ 716.949005][ C1] Code: 4c e2 11 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 d2 d0 c7 0e 0f 82 74 02 00 00 8b 35 2a 01 c8 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 29 4c e2 11 0f 85 c7 02 00 00 48 83 c4 [ 716.968583][ C1] RSP: 0018:ffffc90002e976c8 EFLAGS: 00000206 [ 716.974621][ C1] RAX: 0000000000000046 RBX: ffffffff8e1c4060 RCX: 0000000078e4eb4b [ 716.982571][ C1] RDX: 0000000000000000 RSI: ffffffff8d7fb115 RDI: ffffffff8bd010c0 [ 716.990538][ C1] RBP: 0000000000000002 R08: 7f2fd16e60a37ad9 R09: 0000000000000000 [ 716.998496][ C1] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 717.006439][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 717.014402][ C1] ? find_held_lock+0x2b/0x80 [ 717.019060][ C1] pfn_valid+0x15c/0x4d0 [ 717.023276][ C1] ? pfn_valid+0x140/0x4d0 [ 717.027664][ C1] page_table_check_clear+0x21/0x740 [ 717.032925][ C1] __page_table_check_pte_clear+0xf1/0x100 [ 717.038705][ C1] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 717.045094][ C1] ? __tlb_remove_folio_pages_size.constprop.0+0x162/0x560 [ 717.052290][ C1] unmap_page_range+0x24d9/0x41b0 [ 717.057305][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 717.062650][ C1] ? mas_next_slot+0x12d3/0x1cb0 [ 717.067569][ C1] ? uprobe_munmap+0x20/0x600 [ 717.072221][ C1] unmap_single_vma.constprop.0+0x153/0x240 [ 717.078096][ C1] unmap_vmas+0x218/0x470 [ 717.082401][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 717.087237][ C1] exit_mmap+0x1b2/0xb90 [ 717.091459][ C1] ? trace_contention_end+0xdd/0x130 [ 717.096734][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 717.101474][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 717.106393][ C1] ? arch_uprobe_clear_state+0x16/0x150 [ 717.111927][ C1] __mmput+0x12a/0x410 [ 717.115973][ C1] mmput+0x62/0x70 [ 717.119671][ C1] do_exit+0x7c7/0x2bf0 [ 717.123801][ C1] ? __pfx_do_exit+0x10/0x10 [ 717.128364][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 717.133716][ C1] do_group_exit+0xd3/0x2a0 [ 717.138192][ C1] __x64_sys_exit_group+0x3e/0x50 [ 717.143189][ C1] x64_sys_call+0x150b/0x1730 [ 717.147841][ C1] do_syscall_64+0xcd/0x4e0 [ 717.152325][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.158207][ C1] RIP: 0033:0x7f7a8138eec9 [ 717.162593][ C1] Code: Unable to access opcode bytes at 0x7f7a8138ee9f. [ 717.169579][ C1] RSP: 002b:00007ffefc69bb58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 717.177961][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7a8138eec9 [ 717.185904][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 717.196540][ C1] RBP: 00007ffefc69bbbc R08: 00000003fc69bc4f R09: 00000000000927c0 [ 717.204484][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 00000000000001e3 [ 717.212427][ C1] R13: 00000000000927c0 R14: 00000000000ae6a8 R15: 00007ffefc69bc10 [ 717.220378][ C1] [ 717.223588][ C1] Kernel Offset: disabled [ 717.227888][ C1] Rebooting in 86400 seconds..