last executing test programs: 15m14.040037469s ago: executing program 0 (id=124): r0 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x42, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xa, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x2, 0x4, 0x5, 0x143, 0x1014}, 0x50) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000002c0)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x1000, 0x0) splice(r3, 0x0, r7, 0x0, 0x80, 0x0) write$binfmt_misc(r4, &(0x7f0000000100)='F', 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r8}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000400000000000000050000007201300000003b3f95"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc3cb}, 0x94) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="200000c2a20e9187b6157452fc82"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) 15m11.672764939s ago: executing program 0 (id=134): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ff9000/0x2000)=nil) shmat(r3, &(0x7f0000000000/0x2000)=nil, 0x5000) shmctl$SHM_LOCK(r3, 0xb) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]) shmctl$SHM_UNLOCK(r3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0xc) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001b700)=""/102392, 0x18ff8) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$kcm(0x2, 0x200000000000001, 0x106) 15m10.664350993s ago: executing program 0 (id=138): syz_open_dev$sndctrl(&(0x7f0000000000), 0x100000001, 0x1) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r2, 0x400000000000003a, 0x1, 0x0, &(0x7f0000000300)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r3, 0x400454cd, 0x308) 15m9.531913844s ago: executing program 0 (id=142): r0 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x42, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xa, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x2, 0x4, 0x5, 0x143, 0x1014}, 0x50) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000002c0)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x1000, 0x0) splice(r3, 0x0, r7, 0x0, 0x80, 0x0) write$binfmt_misc(r4, &(0x7f0000000100)='F', 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r8}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000400000000000000050000007201300000003b3f95"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc3cb}, 0x94) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="200000c2a20e9187b6157452fc82"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) 15m6.891131537s ago: executing program 0 (id=152): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sync_file_range(r0, 0xff, 0x7, 0xb) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0xc0384707, &(0x7f0000000040)={0x0, 0x7, 0xffffffff, 0x93, 0x3, "3eccd8f9d20000000000001000000200000500"}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40086602, &(0x7f0000000000)) fstat(r4, &(0x7f0000000340)) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r4, @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES64=r4, @ANYBLOB=',group_ad=', @ANYRESDEC=0x0]) mount$9p_virtio(0x0, &(0x7f0000000080)='./file0/file1\x00', &(0x7f00000000c0), 0x280000, &(0x7f0000000480)=ANY=[@ANYBLOB="7472616e733d76697274699f5323"]) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, r6}, 0x14) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r7}, 0x10) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='fscache_active\x00', r0}, 0x18) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r8, 0x29, 0x39, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x400, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r6, {0xfffd, 0xfff0}, {0xfff3, 0xfff2}, {0xb, 0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x88c0) 15m6.788319453s ago: executing program 0 (id=153): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000028c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000002900)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x2}}]}, 0x44}, 0x1, 0x3f, 0x0, 0x800}, 0x80a0) 14m51.643762625s ago: executing program 32 (id=153): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000028c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000002900)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x2}}]}, 0x44}, 0x1, 0x3f, 0x0, 0x800}, 0x80a0) 14m41.710999841s ago: executing program 3 (id=212): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2721, &(0x7f0000001e00)=""/102400, &(0x7f0000000040)=0x19000) 14m39.8242463s ago: executing program 3 (id=219): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) read$dsp(r0, &(0x7f00000011c0)=""/4117, 0x200021d5) (fail_nth: 26) 14m38.708230811s ago: executing program 3 (id=222): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40040d4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0xfffffdef}], 0x1}}], 0x1, 0x0) 14m37.714290507s ago: executing program 3 (id=224): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x8031, 0xffffffffffffffff, 0xeb38e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8001) 14m37.464770404s ago: executing program 3 (id=226): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x4, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000008c0)=""/132, 0x84}, {&(0x7f0000000980)=""/221, 0xdd}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000006, 0x10, r3, 0xcf032000) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1c63643ecd702802, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40086602, &(0x7f0000000000)) r5 = socket(0x1, 0x3, 0x0) bind$unix(r5, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000040)) getdents64(r7, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 14m35.593809218s ago: executing program 3 (id=230): openat$ppp(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x116b, 0x3, 0x2527, 0x1, 0x10, "8900c1ff4ff6739ef901bac30db4da1fc24b84"}) timer_create(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x42000, 0x0) read$FUSE(r2, &(0x7f0000002600)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(r3, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000003c0)='fscache_access_volume\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) set_mempolicy_home_node(&(0x7f000024f000/0x3000)=nil, 0x3000, 0x2, 0x0) getsockopt(r2, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102380, &(0x7f00000001c0)=0x18fec) 14m20.354653618s ago: executing program 33 (id=230): openat$ppp(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x116b, 0x3, 0x2527, 0x1, 0x10, "8900c1ff4ff6739ef901bac30db4da1fc24b84"}) timer_create(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x42000, 0x0) read$FUSE(r2, &(0x7f0000002600)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(r3, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000003c0)='fscache_access_volume\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) set_mempolicy_home_node(&(0x7f000024f000/0x3000)=nil, 0x3000, 0x2, 0x0) getsockopt(r2, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102380, &(0x7f00000001c0)=0x18fec) 13m7.201392694s ago: executing program 5 (id=487): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0xe0000000, 0x3}, {&(0x7f00000001c0)=""/117, 0x75}, 0xffffffffffffffff, 0x1}}, @cswp={0x58, 0x114, 0x7, {{0x7, 0x1}, 0x0, 0x0, 0xa, 0x9, 0xc, 0x9, 0x4, 0x41}}], 0xa0, 0x20004885}, 0x0) 13m7.068214097s ago: executing program 5 (id=488): r0 = syz_open_dev$admmidi(&(0x7f0000000000), 0x20, 0x0) readv(r0, &(0x7f0000001540)=[{&(0x7f0000001580)=""/4085, 0xff5}], 0x1) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x400}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) 13m6.195500394s ago: executing program 5 (id=494): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000200)=ANY=[], 0x0, 0xfffffffe}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3357, 0x40800) ioctl$VIDIOC_ENUMSTD(r2, 0xc0485619, &(0x7f0000000180)={0xa01a, 0xb700, "61e279b55575fff94ab39115ee67545d89865fa2f186d249", {0x7fffffff, 0x3ff}, 0x172}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xff60}, 0x20004000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_usb_connect(0x2, 0x440, 0x0, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000340), &(0x7f0000000380)) ioctl$VIDIOC_S_PRIORITY(r2, 0x40045644, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000340)={0x2a, 0xffffffff00000002, 0x7fff}, 0xc) bind$qrtr(r3, &(0x7f0000000500)={0x2a, 0x1, 0x1}, 0xc) socket(0x10, 0x3, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) r6 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) 13m4.632304909s ago: executing program 5 (id=498): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010003b15000800"/20, @ANYRES32=0x0, @ANYRESOCT=r0], 0x3c}}, 0x40) 13m3.621501091s ago: executing program 5 (id=503): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$bind(&(0x7f0000000280)='./bus\x00', &(0x7f0000000340)='./bus\x00', 0x0, 0x15000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) mlockall(0x4) 13m2.995706478s ago: executing program 5 (id=504): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x240000, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f0000000180)={0xe0, &(0x7f0000000280)=""/224}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af8295", 0x13c}], 0x2, 0x0, 0x48}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) socket$isdn(0x22, 0x2, 0x10) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000034c0)={0x0, 0x0, 0x0}, 0x43) syz_open_dev$vcsu(&(0x7f00000001c0), 0xf253, 0x500) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 12m47.755185117s ago: executing program 34 (id=504): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x240000, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f0000000180)={0xe0, &(0x7f0000000280)=""/224}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) socket$isdn(0x22, 0x2, 0x10) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000034c0)={0x0, 0x0, 0x0}, 0x43) syz_open_dev$vcsu(&(0x7f00000001c0), 0xf253, 0x500) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 6m15.307991631s ago: executing program 7 (id=1826): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x5, &(0x7f0000019580)=""/102389, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(r2, 0x0, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004f0033", @ANYRES32], 0x4394) sendmsg$can_bcm(r2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = syz_usbip_server_init(0x2) write$usbip_server(r5, &(0x7f00000000c0)=@ret_unlink={{0x4, 0x2d, 0x0, 0x1, 0x9}, {0x10000000}}, 0x30) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x228002) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x22081) close_range(r6, 0xffffffffffffffff, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380)={'#! ', './file0', [{0x20, '/dev/cpu/#/msr\x00'}], 0xa, "c03346a21c53b548793b2ed46bcba0f01cf369df1bba1f8927c18a2181ed577538ca5dbd6ad70da9514c0a0ca84f13c98e49e0b2c0e0b30798b6ce9bd59041215ce1da0ea47120d4d085d55d5512070676bd60d5f60d6fc6019e4e0cc3d1d37324686377c8649c7d02786e1b9569ed1a5440b8eef6a9fed56d13877ada6d3cbdd5dc78c5221ce826a0aca2a50d8ab5ba5cc8f06ef8034ac8700e377919eace118e2c88393c424ac124ca873498c4b96d8e158ba2a57114e5ae8296e57d8be4e2d7"}, 0xdc) 6m14.001481482s ago: executing program 7 (id=1830): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0xf401, 0x0, 0x0, 0xb3550aa4ba878396, 0x0, 0x4}, 0x9c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r2, &(0x7f0000003e00)=[{{0x0, 0x0, &(0x7f0000003d40)=[{0x0, 0xf4}, {&(0x7f00000026c0)=""/4089, 0xff9}, {&(0x7f0000003780)=""/139, 0x8b}, {&(0x7f00000005c0)=""/211, 0xd3}], 0x4}, 0x1c0}], 0x1, 0x40002162, 0x0) 6m12.911536511s ago: executing program 7 (id=1834): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e000000000000000400"], 0x48) mkdir(0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) r3 = io_uring_setup(0x2e71, &(0x7f00000003c0)={0x0, 0x800000, 0x400, 0x2, 0x131}) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000740)={&(0x7f0000002000)={[{0x0}, {0x0, 0x0, 0xfffe}, {0x0}]}, 0x3}, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\x00'/24], 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x83, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f19}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m11.264557972s ago: executing program 7 (id=1835): r0 = socket(0xa, 0x3, 0x87) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0xb) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r2}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) syz_usb_connect(0x2, 0x62, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES8=r2, @ANYRES8=r2, @ANYRESDEC=r2, @ANYRES32=r2, @ANYRES64=r2], 0x0) 6m8.012051331s ago: executing program 7 (id=1846): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0x2000, 0x80, 0x3231564e, 0x3, [0x2], [0x2000], [], [0x400000000000001]}) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = gettid() tkill(r1, 0x16) waitid(0x0, r1, 0x0, 0x8, &(0x7f0000000400)) r2 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=0xffffffffffffffff, 0x4) sendfile(r2, r3, 0x0, 0x81) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x0, 0x2, 0x2}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000200)=0x0) sendto$inet(r5, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000006a}, 0x10) setrlimit(0x8, &(0x7f0000000340)={0x800}) listen(0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044884) prlimit64(r7, 0x7, &(0x7f0000000240)={0xe}, &(0x7f0000000280)) 6m6.71163877s ago: executing program 7 (id=1850): bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm3)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x8000) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000a00)=@newtfilter={0x444, 0x2c, 0x8, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xc}, {0x9}, {0xffff, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x418, 0x2, [@TCA_U32_POLICE={0x414, 0x6, [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x92, 0x0, 0x1, 0x3b, 0xf, 0xed, 0x68, 0x2, 0x5, 0x271, 0x2, 0x10c00, 0x9, 0x8, 0x8, 0x8, 0x8, 0x6, 0x8, 0x9, 0x81, 0x1e, 0x10001, 0x38c3c9a5, 0x7fffffff, 0x2, 0xffff, 0x5, 0xe, 0x5, 0x81, 0x7, 0x0, 0xfffffffd, 0x71, 0xfffffff0, 0x7, 0x8, 0x2, 0x0, 0x9, 0x151, 0x77d, 0x9f, 0x80, 0x2, 0x800, 0x1000, 0x5, 0x7fffffff, 0xaf, 0x7754, 0x100, 0x5, 0x7, 0x6, 0x8, 0x3, 0x0, 0x101, 0x2, 0x2, 0x5, 0x1000, 0x1c, 0x8, 0x2, 0x0, 0x4, 0x7, 0xfffffffd, 0x7fff, 0x3, 0x7fffffff, 0x6, 0x200, 0x5, 0xfffffffe, 0x7, 0x8, 0xd, 0x6, 0x6, 0x3, 0xffffff01, 0x1, 0x800, 0x80000000, 0xb659, 0xef, 0xf, 0x1, 0x9, 0xffff0000, 0x8, 0x3, 0x1000, 0x1, 0x7, 0x9, 0x3ff, 0xb, 0xb, 0x7, 0xfff, 0x9, 0x60, 0x0, 0xfffffff9, 0x3, 0x10, 0x1, 0x0, 0x4, 0xb, 0x3a2, 0x7, 0x0, 0x50, 0x8b, 0xf, 0x8, 0x2, 0x8001, 0x23, 0x642, 0xe0df, 0x7000, 0x9, 0xffffffff, 0xfffffffc, 0xfff, 0xfffffffb, 0x1, 0x6, 0x0, 0xfffffffb, 0x4, 0x2, 0x80000001, 0x3, 0x8, 0x10, 0x3, 0x3, 0x5, 0x9, 0x3, 0x1, 0x9, 0xb944, 0xffff1fbc, 0x6, 0x40, 0x7, 0x7, 0x6, 0xc, 0x0, 0xe, 0x2, 0x5, 0x1, 0x9, 0x0, 0x7, 0x2, 0x2, 0x9, 0x4, 0x8, 0xfffffeff, 0x1, 0x8, 0x0, 0x6, 0x0, 0x8, 0xb1, 0x2, 0x9, 0x2, 0xf9, 0xffff, 0x72, 0x4, 0x2, 0x1, 0x1, 0x800, 0xe03, 0x80000000, 0x30c, 0x97bb, 0x5, 0x0, 0x80000000, 0x0, 0x3, 0x5, 0x3, 0xa, 0xa0, 0x36, 0x7fffffff, 0x0, 0xffff, 0xae, 0x4, 0x3, 0x4, 0x3, 0x9, 0x3, 0x1, 0x3, 0xd, 0x81, 0x6, 0x8, 0x1267161c, 0x3, 0x80000000, 0x1, 0x9, 0x9, 0xffff, 0x0, 0x2, 0x29f, 0x1, 0x7, 0x5, 0x5e, 0x6, 0x8f6b, 0x4, 0x5, 0xc18, 0x4, 0x9e6, 0x4, 0x0, 0xff, 0x5, 0x10001, 0x1, 0x0, 0x0, 0x8, 0x3, 0xfffffffc, 0x7fff, 0x8, 0x3]}]}]}}]}, 0x444}, 0x1, 0x0, 0x0, 0x800}, 0x40010) 6m5.584273249s ago: executing program 35 (id=1850): bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm3)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x8000) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000a00)=@newtfilter={0x444, 0x2c, 0x8, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xc}, {0x9}, {0xffff, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x418, 0x2, [@TCA_U32_POLICE={0x414, 0x6, [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x92, 0x0, 0x1, 0x3b, 0xf, 0xed, 0x68, 0x2, 0x5, 0x271, 0x2, 0x10c00, 0x9, 0x8, 0x8, 0x8, 0x8, 0x6, 0x8, 0x9, 0x81, 0x1e, 0x10001, 0x38c3c9a5, 0x7fffffff, 0x2, 0xffff, 0x5, 0xe, 0x5, 0x81, 0x7, 0x0, 0xfffffffd, 0x71, 0xfffffff0, 0x7, 0x8, 0x2, 0x0, 0x9, 0x151, 0x77d, 0x9f, 0x80, 0x2, 0x800, 0x1000, 0x5, 0x7fffffff, 0xaf, 0x7754, 0x100, 0x5, 0x7, 0x6, 0x8, 0x3, 0x0, 0x101, 0x2, 0x2, 0x5, 0x1000, 0x1c, 0x8, 0x2, 0x0, 0x4, 0x7, 0xfffffffd, 0x7fff, 0x3, 0x7fffffff, 0x6, 0x200, 0x5, 0xfffffffe, 0x7, 0x8, 0xd, 0x6, 0x6, 0x3, 0xffffff01, 0x1, 0x800, 0x80000000, 0xb659, 0xef, 0xf, 0x1, 0x9, 0xffff0000, 0x8, 0x3, 0x1000, 0x1, 0x7, 0x9, 0x3ff, 0xb, 0xb, 0x7, 0xfff, 0x9, 0x60, 0x0, 0xfffffff9, 0x3, 0x10, 0x1, 0x0, 0x4, 0xb, 0x3a2, 0x7, 0x0, 0x50, 0x8b, 0xf, 0x8, 0x2, 0x8001, 0x23, 0x642, 0xe0df, 0x7000, 0x9, 0xffffffff, 0xfffffffc, 0xfff, 0xfffffffb, 0x1, 0x6, 0x0, 0xfffffffb, 0x4, 0x2, 0x80000001, 0x3, 0x8, 0x10, 0x3, 0x3, 0x5, 0x9, 0x3, 0x1, 0x9, 0xb944, 0xffff1fbc, 0x6, 0x40, 0x7, 0x7, 0x6, 0xc, 0x0, 0xe, 0x2, 0x5, 0x1, 0x9, 0x0, 0x7, 0x2, 0x2, 0x9, 0x4, 0x8, 0xfffffeff, 0x1, 0x8, 0x0, 0x6, 0x0, 0x8, 0xb1, 0x2, 0x9, 0x2, 0xf9, 0xffff, 0x72, 0x4, 0x2, 0x1, 0x1, 0x800, 0xe03, 0x80000000, 0x30c, 0x97bb, 0x5, 0x0, 0x80000000, 0x0, 0x3, 0x5, 0x3, 0xa, 0xa0, 0x36, 0x7fffffff, 0x0, 0xffff, 0xae, 0x4, 0x3, 0x4, 0x3, 0x9, 0x3, 0x1, 0x3, 0xd, 0x81, 0x6, 0x8, 0x1267161c, 0x3, 0x80000000, 0x1, 0x9, 0x9, 0xffff, 0x0, 0x2, 0x29f, 0x1, 0x7, 0x5, 0x5e, 0x6, 0x8f6b, 0x4, 0x5, 0xc18, 0x4, 0x9e6, 0x4, 0x0, 0xff, 0x5, 0x10001, 0x1, 0x0, 0x0, 0x8, 0x3, 0xfffffffc, 0x7fff, 0x8, 0x3]}]}]}}]}, 0x444}, 0x1, 0x0, 0x0, 0x800}, 0x40010) 29.002151224s ago: executing program 4 (id=2934): syz_open_procfs(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0xc00000)=nil, 0xc00000, &(0x7f0000000140)=""/142) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) dup(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000a00)="00000000076f00001abd8cf0eedf", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_io_uring_setup(0x460, &(0x7f0000000400)={0x0, 0x40000020, 0x800, 0x0, 0x1ef}, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0xffffffffffffff8a) 25.628409953s ago: executing program 4 (id=2944): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x3cd}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x4000000000009, 0xd, 0x1000000000424, 0x2, 0xffffffffffffffff, 0x800000000f423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x7ff, 0x0, 0x5, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x40000000, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f000003e000/0x1000)=nil, 0x1000, 0x800000, 0x2, &(0x7f0000130000/0x800000)=nil) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) rename(0x0, &(0x7f0000000100)='./file0\x00') ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 22.706769213s ago: executing program 4 (id=2954): syz_open_procfs(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0xc00000)=nil, 0xc00000, &(0x7f0000000140)=""/142) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) dup(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000a00)="00000000076f00001abd8cf0eedf", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_io_uring_setup(0x460, &(0x7f0000000400)={0x0, 0x40000020, 0x800, 0x0, 0x1ef}, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0xffffffffffffff8a) 20.089083384s ago: executing program 4 (id=2959): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x18}], 0x1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/56, 0x0}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 18.925741261s ago: executing program 4 (id=2964): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001480)=[{{&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000a00)=[{&(0x7f00000003c0)="4cfb594978880c6316bee9ebb9b3470ef1e01594d562868d7eab960251a03d7c0c3b215a905f2bbbb59aeb340de1227e2a2b4f6b50646d44ef93decd6a45e76cc5f49076d57ff9c0256a972db5d57d6c0911ebbf27641648180f6caeebd2d2c10d0e843436a63e105512ec9e0b169ee1bac233d4fffcdca5c1626a11aeba082b123b7a", 0x83}, {&(0x7f0000000540)="a3d18f65a11457b01b27f6567445eba9aef9f5c398a9f1bbc2eca483d1710f7293b6abb28237b47bb50851086c8680303877654f5e985a534a2488b82f6d6a3e6b67cce29e621d4e3169f7f2fd85d2e0d502ad057fb0b8d1ed971d0c2a407a1bb9ace23633e488d2a8e8660a72891f50e2d6be3222d8a2538165c1aad3f68530d20fe1c2a1c1a03a58629fef", 0x8c}, {&(0x7f0000000480)="075aeea7a349a03ff5c5d1880c7b2c9a4ffa62ea2fed7e79400e129aba", 0x1d}, {&(0x7f0000000600)="eaa0d20812f4382a7dfb958d05a7417a647dddad6a16ab1ae659d58d7ca5bf4bf32c9420d7fbcc84477edf14c3f129da87511104eca47734a3c7d33173d729325e394886bdc87c555db6bace1d49b837e368badc6a8119af77b88528ce754e3571f0f7dfe6de88bd1c41dae3e1d90f0534e81fab369ad732b90edea1687591e0c690d45f934b1471baa38d581bd8ebbde5986ebefb3d3efeb6d35c0b18d2f0d2f3985262a31b4f285a0500cd7a51ba", 0xaf}, {&(0x7f0000000740)="e05093240b67e398490826c642c126a0676f822f8520f41b23f0732169236bc80579669ff5384f7a035cfbf876b27da1c7563e607461f51bc425ae1a28a21fbf8a9ba836afcbd60399189bbcb574e775535c1b8a775502cfc9aa95cdcdd126aa3a2a7b05f31e3e77f11fe8786abcf78dd077bca02584e76aa5d1e6c51e475856435309c3b580cb5670c02957c78b6014cfbc9aeff5177220d40f52ce67895d1aefe272f2d65d77dbe0e51d889a1da427584dba38eb5f97e37d7ab8454bcd2e3215617713935d3a894beccfa000741b7c012f17e486aa047b1bed259cab371fd6e6e64c32562a0f9c5d50", 0xea}, {&(0x7f0000000840)="e79a8b59d1280cebf806e1e59785a0df7d75c427b704b872ff4381fc5642c03d64a3a9dfa4e93d15c72ad03cccda97d5b555dc4b1af1bae301d5fd6d2b5dfaa19a5be32e55d8fefa49837302bb8b6963b41de56ea9f4a17ec3935f12b72234ec0978226d8f1b58ef81b86e20a543db36d12d9458898fff134afeea35d31c1fed1db3fc686d4d53a847a0a4389bf3dffd9a8e066f93197e415fdd490994a319e325a246fee79ca903aa459dde7d3b56f21686c3ffffa91968352685ba8e40907d5129302201d7aa1c53580c68e68c5f03fe9a82d5c26365", 0xfc}, {&(0x7f0000000940)="6c71fa1f77903efac352ed5c4497dbdc1a9d0eddf87b88c52d80eed38f182a72d8ac8fc44fce0970675da4aec887b4e0c96a7a994526ba4f5467c45242bb62b08c09b40dd3d6516d6ca40d958d758f411e65dd3051c5714dc255153ec16fced50971a5426b789b45293cdf66052b9ea46355890348b88632caa1299217fdb01cdf7f1a8e7b3b564d6f4812c543cad8c9942c8c08dd289df3587300b326c0d21a0176476b859c5c719503dab91520076621dba9f5864358e6", 0xb8}], 0x7, &(0x7f0000001540)=[@cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xffffffffffffffff}}}, @cred={{0x0, 0x1, 0x2, {r0, 0x0, 0xee01}}}, @cred={{0x0, 0x1, 0x2, {r0, 0xffffffffffffffff}}}, @rights={{0x0, 0x1, 0x1, [r2, r2, r2]}}, @rights={{0x0, 0x1, 0x1, [r2, r1]}}, @cred={{0x0, 0x1, 0x2, {r0}}}], 0x20, 0x851}}, {{&(0x7f0000000a80)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001240)=[{&(0x7f0000000b00)="be2cc93cf4ec46faa1c991443ee098514d76a99d360896aee13fb3c93ec25064af6642bcfc23846b3eaf29f4d28e1a002befe74b63c8657fdabcbc41de9d62e966cda818107581969a6a0b266488de957cca87ea67aa2a404fd4282f9179", 0x5e}, {&(0x7f0000000b80)="c432351ae0e0467605c4dc1e1589b4f306e1708b6e8c5ab7868f6b842e9b23b594e954d296707091807fbd30146ba1a8b841c2ab6825ee75a0968c915e75bc0027a00055c42efd2baf76cb3f64477d7721dc56cbcd73f1be81c4f5acbf1fb01cbbbf82faffc1111343c3ec653948f58c91f5c5bf850c7349c7ccf317ea84cdecc3f45c4b8fa0beefa7a1e0e7dad15ff13f88262967e7bd52ab68183ddfa4c9fb9ef21bddbe41366e24", 0xa9}, {&(0x7f0000000d40)="47b52054b17386f103790606ce47ef3ad5c85a7fec5bf5cdd97961c7ee58d311c2e20cb8450dbbc9923b31e259335969aeeb48f9988ffb984356425f924fcf565ab9b705a0153c746f9ee361317fb3f78811b9cc314ad6e996fb061a7f422b6e7b90bd4bbefcd2d5cfc04e28288c24787c372596085d0824c5d13f7bc360e84e601b223ad0347700"/145, 0x91}, {&(0x7f0000000e00)="dfeabbd758aee16b585ba1bbe9a646b97bb7f68b4f3e14101094b69d39cd7dc56e0a25c87fff367be2c6cbdd827bc647318ac82b6b3df358a831dda60823012b514843c23cc8171cf0b69bd809b60f8eafe48355999d1abc6ae0dbc48ea60ce1c468bd3adcdbea40e195164bb313621694d860466c858f45d347f1bc5dcb0b7adcef34bb37beefff8efa00553be86e91c41d3936cfe3d3a3c91e2db8573988a54599f5524abfa64f17227c", 0xab}, {&(0x7f0000000ec0)="ad65661691dbdfac3469b293c76a2eb978e4cfdc0a29bb6a40acf375be9390d95e2f75cf81df7f44dc45cd4881eebfe03fb16f0ee2d944158e243fb11e4c17d200bfa89a8bf0f2a45338f36674a5c0f18b9379578b39e27ee9ca26499e58120c8ec132ca51660198feb69488ec1b4277500bebb0d1d76c95b419d5edb2cc26eec184a7de959354dab6bd0a4e4af979a6315a30855c5e9bdccf73d76562f111aaccb96c14f3abe82b3db8b37c48", 0xad}, {&(0x7f0000000f80)="b7362fb03a478497c8ca3335203f0c0b1e2ebd1b338baece9a6c05d642d66a632f1dd517d25f077d99d208bfac2b0452579d70a2afb9c7ab07b7cc8212ead909d431862068c8d68dd37a44a905088ab72ac82d6bc25c39071251b830605b8570a84b5881f34f1d161a596797250f1f620d2a5755ce0da2c1700ef3e3b0935bea584aa06a9c5a58e10bca9da15a43d0cb9884bf2ad7741475f7e858991bcc385fcb994fa432ce473404e588c3bdce5f77f72ba9b5ccfad8c5e01a4ad9412669cbd8bf0b09b3e7", 0xc6}, {&(0x7f0000001080)="7df9c0f768ab8ea4a1f1a1707a26e1aa726593e984a1f6af10accf6aba0cd011dc5312ab521e3f7770d5f4e644adfbf7f2ada799d9030855aba328eb4c5aca969613553732a0947f32ed263b898598a8d95ee9d35a0d89d18c38e3e3b38ae5497d32d0b4c55230ab61a79d423d9dfad54104e666b54e057ea9e5b465eb82dfc7f86e685a1ba1e997841609760266f04a3d5b206e93af9798ef30eba69f372448f4e6cf7b136ee7863d23b8c760d4ac5ceda059", 0xfffffffffffffd81}, {&(0x7f0000001140)="2bddea1a8c1106cb92c0ff09f338ec7bca7c1d67d9a16b3e2b85d5e8cb5ab27d5970de1db47d2234bac50f0ad47ac279e5c432afe07f127b7b9db6794f2dec88d75bc608b3df87651872d390096dd100c8fb4d8e8ce9332b3e4d81c67aaeb649eb3f13b0d37ab490b505ea2484e00157a2b657aa38c05d5e5f090543c8b86b44a9d3f1c8602dc9c296c61e3b4c00ace591c98776f58fede458812b1f00707aa9f0a06be3bffda71e3ab27dc611b6fa48cf0d786ace77378e40a254cb7dca2d6b848bdbe703fcdd1a6c6eada666d8785f1abfeabdd85f4d17c097", 0xda}], 0x8, &(0x7f0000001340)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x88, 0x40}}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001400)="b629470c7d3f6b2f003222311cb3a32f9c", 0x11}], 0x1, 0x0, 0x0, 0x40010}}], 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008e8805208680009509021200010000f000090401000015cc1c00"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f00000006c0)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="00000001000014"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mq_timedreceive(r2, &(0x7f0000000180)=""/109, 0x6d, 0x8001, &(0x7f0000000000)={0x0, 0x989680}) syz_init_net_socket$llc(0x1a, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRES32=r5, @ANYBLOB="010027bd7000fedbdf2501000000080000000005000300000000000500030002000000080002000200"], 0x40}}, 0x80c1) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) getpid() r7 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r7, 0xff03, 0x0) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x616001, 0x0) r9 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) r10 = pidfd_getfd(0xffffffffffffffff, r3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000280)={r9, r10}) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000300)=@urb_type_control={0x2, {}, 0x2000000b, 0x6, &(0x7f0000000240)={0x4, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r6, 0x4008550d, 0x0) prctl$PR_MCE_KILL(0x29, 0x1, 0x2) 14.220376644s ago: executing program 4 (id=2975): r0 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x100, 0x10}, 0x18) getdents64(r1, &(0x7f00000000c0)=""/192, 0xc0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 13.95612187s ago: executing program 1 (id=2978): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xbd, 0xf7, 0x13, 0x8, 0x2770, 0x930c, 0x8d6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0xc5, 0x98}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 10.328036925s ago: executing program 1 (id=2986): r0 = socket$inet(0x2, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$ttynull(0xffffffffffffff9c, 0x0, 0x141440, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) r5 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r6 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000002c40)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r5, 0xc1007c01, &(0x7f0000000300)={r7}) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x9000000) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r8, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 9.531992205s ago: executing program 2 (id=2989): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7fffffff, 0x0, 0xb49, 0x9, 0x8, 0x1000, 0x3}, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000002c0)="615d21d9e030654d3e496eb7a85c254f688a0c0dc2a0b9c135a259d164c7322279416375ca5ac3da6cacf9a495da53a6ad73714665f6dfe0711d849ea880ba5acd626dc277b00f6ae1f659463baa91a9f7802af30a439977aac5598f1d5a20418d899e567c9b603bc14e3fcac3f36489f71d066b3ccdcfd3b6a231ff6733c5e0aec0b3e4c873b8c1b4528c4dd4bdfd6c276832280d04513a179d1119b8de1addf5a91dc17d1d649e3eacd65693d3da03b5db908cd4c9075d8c352ca4fe22ed67a9d4d5ec9049f7", 0xc7}], 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="30000000000000008400000001000000010000000c0000000000000000000000000000000001000000000000a95fcc303bd9851d8939d6f4fe37ee58b4f94582125a272cb4696d214fff79f7455141b5ecb07da092b61bb67a2c8d103c60434307246dac91d3d715e01923b6c09453a31f3a91503b7343c32e2e97eea42b", @ANYRES32=0x0], 0x30}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x23c, &(0x7f0000000740)={0x0, 0x1c2c, 0x10100, 0x2, 0x315, 0x0, r3}, &(0x7f0000000500), &(0x7f00000001c0)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x7, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x800000000d2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8000}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x200000c0) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020}, 0x2020) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x4c, 0x0, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x4c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECUREBITS(0x1c, 0x2d) setuid(0xee00) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x89b1, &(0x7f0000000040)={'macvlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x44e3763ac5239ba7}}) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8923, &(0x7f0000000000)={'bridge_slave_0\x00', 0x1}) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r8, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) 9.20809448s ago: executing program 1 (id=2991): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x20bc, 0x5500, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7, 0x4, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x8}}}}}]}}]}}, 0x0) r0 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') pread64(r1, &(0x7f0000000140)=""/15, 0xf, 0x4) ioprio_set$pid(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r2 = getpid() r3 = syz_open_procfs(r2, &(0x7f0000000000)='net/ip6_flowlabel\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x630e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r7 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) ioctl$SG_SET_RESERVED_SIZE(r7, 0x2275, &(0x7f0000000080)=0x2e9aa845) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6fb}, 0x94) waitid(0x1, r4, &(0x7f0000000400), 0x40000000, &(0x7f00000002c0)) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) 8.350033925s ago: executing program 8 (id=2992): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b6a, &(0x7f0000000000)={0x20, 0x0, 0x0, 0xfeff200d, 0xf00000, 0x0}) 7.381501519s ago: executing program 8 (id=2993): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x5}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r3, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/46, 0x2e}], 0x1) close(r4) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000940)={0x28, 0x0, 0x0, @local}, 0x10) listen(r7, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r8, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r9 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000840)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r9, 0x82, 0x84, &(0x7f00000008c0)={[{0x80, 0x4e00, "01861af97ea6872f8b7f4df574f82847a26222c56718db702bbbd12b7e5ce5c31c4bb119f956174b17ab5a44c00fa351e581da77bb981a0d3e04a812b0aa3135ddb9233393a8e67b262defbe29d8ad077389fce61f9c3c957343e769fd8cae1f2a510f4c739f293b0b05dbd924ef5d77963292e1e1a4c891ddb25c31c5c2d59e"}]}) 7.377923411s ago: executing program 2 (id=2994): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x80080}, 0x24000000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x9c, 0x23b) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x4a) 6.756280554s ago: executing program 6 (id=2995): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$radio(0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) sendmsg$nl_route_sched_retired(r2, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x914, 0x2c, 0x804, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4, 0xb}, {0xfff3, 0xe}, {0x10, 0x8}}, [@f_rsvp={{0x9}, {0x8e4, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x9fb, 0x4, 0xfffffffe}, {0x6, 0x7, 0x8}, 0x89, 0xeb, 0x6}}, @TCA_RSVP_ACT={0x8c0, 0x6, [@m_mirred={0x16c, 0x1d, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7fffffff, 0x9, 0x20000000, 0xfffff45d, 0x6}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xc292, 0xfffffff8, 0x20000000}, 0x1}}]}, {0xfd, 0x6, "fc8a4433ba7d454f9b32a7c9fa0553f734d43697463065103a14a26254c809257b96e27763b13e0d07cde285a750bb2bb51c427e88367b1d35ff4e2dd89ac7abde0d05d22bfc1c50966895fff54bf15885dce88950d35a9f0ec99669b7e258c350f3b9da2271ff62064052672d180bcd73dace3baf5c3ccd5536ab510fda8420c0639a4d85bf5d540e1db6cc700b5bc462c729edebdf46a29a014134236bc4101334fb2ae6855a421fd1eba3fd6bf3e8366c6e5aac1890457fef677ca8bc87027d6878492345cbbab805dc24b011b80a2fe74c6b0994cbd72929d09d523c2cfc645c2830415e6e3dcbcfae4e8b6d3282ac02b96fd822621bec"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_bpf={0xb4, 0x12, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_OPS_LEN={0x6}]}, {0x79, 0x6, "6cfa454fd8b69ae1dcd0e4ffba3b1e88b8d8c756ff98cf1818a4e18d1ea964142465e7ba1c523f6c83d3d90dff2d2251162e2775f11b909532a19ea30558d07b1875ad8c1869a070b8c77dfde7afd86d233fe5ec291f5b32483ac74088e6917b0ed3ed9e3410d8b15acea110d554a9b03816d9d2b3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x104, 0xe, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x100}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}]}, {0xbd, 0x6, "b692836763240c7e443cb1d4f21fd8438b8a1f1d4889156e23d703d60229e60e1803b8d7a956764e3a9a03cffde3f9d045df18a1e7f8f7769a6908ff2453ca8608f0cac4b1e5ebfadce0af4650d4b324260f8b614409d7502f81d2cda9f6cca34fafeb11f32fe379b687baafc341ced54ffa378b4b0c35ef349bd677311dd0add7b02ad41f238ed0ca464e4753c348ad768af27a1938464002233430de81a4371ad28a9a9a28f45a12778bcff7f861cc6a35f11310385ae903"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_gact={0x19c, 0x12, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x80000001, 0x5, 0x0, 0x3ff, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffeffff, 0xfffffff6, 0x10000000, 0x7, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x80000000, 0x7, 0x6, 0xd0, 0xf3b1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0x1, 0x6, 0x1, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x7, 0x10000000, 0xd6, 0xc37}}]}, {0xf5, 0x6, "75a7a8aac2e3577e45e02cc5e3d48c702a28aaa199facb0f9527feeea5247e5a8aacb638c0ff19ca7a33c8ad9abddbfc5fa843ff3c19bff932a7223665e4a04443f140328a71182a15350d6e16f4d70a983026f40e9a2398464c89c8d3b1413e3c2b64429d64f0e65510d9a5026ed9fe28fa9fcac514ff72bad454e4249ff75fe58323730a4502653b07b92b4b1273be06df2eb67c375484748201efc5c20f270d91fbc66879880957f78665094a4769ea3b1f13639abb17078d72f8c0370a7fb95b046188e79cfb65ed928d5e55697363af8b43d839a6ec759fbbb883d759e6d5e49e0d0762843d94df1d4ee71394eddd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbmod={0x6c, 0x14, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x621}]}, {0x35, 0x6, "0abbceb68d89f081eb97232a9551ea6cc60e52d82778f2a079a9f6e8f00cb4dfd7cf8efd7622bf0deea14752dd1beea501"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_pedit={0x4c, 0x19, 0x0, 0x0, {{0xa}, {0x4}, {0x1d, 0x6, "887b62b7079d8c2a72b06467f188a49be6fa6a860153dc78c1"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_tunnel_key={0x68, 0x1f, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}]}, {0x19, 0x6, "8fe4f376e23339ad6113c680de9c1ef123d1e0bbe7"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x2dc, 0x20, 0x0, 0x0, {{0xc}, {0x4}, {0x2b0, 0x6, "6e8f25a99c690259e0e12c3bb819a00ddcc25faee5d1be3264e8329a50d318d9b42847ef7537fa7a64889e703ac1a0ceb31e804b88ff37d42d64b9abacc43e7e40ba5fa1695037809d47c91ade3e5ab4c2ef4a393f59712faff7245718def03b71f7be564f7a8cf71e60e8fefa697b63a4586992c79b7e69b63c054e18dde5a0abce6af5a76b22688586e6b756e1f464c1d9927bcc2f9771666ea36a432c1a6ecbe16683bbed89be734945cb98eb3a6d94db37bf56ecf7ee8306b72b17942f2a6f426b8f6265c9a8961a729750ce6a0adc4912312aeb00460ca002422ef786b06548edd3e2549773631701e91d913cb11e18591da7d8bbbc03c5572177ff93ab3720f4628a0b3d5d96909a8229ff609496fb18152a88012684753317a87f28f3e5043b514f5e7ab51b55f4e77a28a3a7d72a4a06fc63d941cd42a38d163ba0582268e3582bfadfd1e4ffda04e7e07c95e3ea3efe298e676b121b24e65b42d71dd7561421c5ca9b23fc64a8b42d0151e6f7ef55cb3b94d2a57f9ac3a00698f6a5d554bcd1844f3f1a4fb0a68b506cba5d62e747d4d7172fc42f318b26e90f0418e9e6197932268aaa721d8f2276fb7a9e22dc2e7bd3ab52be5b5fcff0401c60dc59ef4e4ec93da1442e0f106d032644372cec61cd5ad364ea840328eaa2796f3039bd5a2ac10fdf77293fdaafa341bd068e0167def7b334535ad94678c1db9ad310a4c85aa0f7a009f15784057bbcd0c91064fe1d97528409e71a4c7b0f24aed8cef86c51a18cefaab2aed67b63616a98eb1e3b202f5adb5ec8e16cb78fcfa61ce09884c4444f32a74d02f44cebe6652ab10f187440a194bd599af5cfa8adc0eb240894da682ce8484d3f56dcfffb50b3e03705f9f384fdff0b2ffff88745db050e3edfcb03350f372e1e0bfd61a666aac456a044d0bc236d7e095c524f8eeafa18c189b1240f98cd0cf84c6a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x914}, 0x1, 0x0, 0x0, 0x539b1cfd2cf5b5e5}, 0x40000) 4.337922954s ago: executing program 8 (id=2996): socket$inet_tcp(0x2, 0x1, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 4.245474424s ago: executing program 2 (id=2997): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x3e8, 0x218, 0x218, 0x108, 0x108, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@local, @broadcast, 0xff000000, 0xff000000, 0xf, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0x0, 0xff]}}, 0xffff, 0x9, 0x0, 0x40, 0x3f0, 0x2, 'bond0\x00', 'pimreg0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6af, 'syz1\x00', {0xed}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @broadcast, 0x8, 0x1}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffff00, 0x5, 0xe, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x80, 0x9, 0x0, 0x6, 0x9, 0x5, 'veth0_to_bridge\x00', 'gretap0\x00', {0xff}, {0xff}, 0x0, 0x13}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c460407000305000000000000000300030006000000e902000200000000fdffffff0e00000000402000c1789b1b504a1e5852aae9427f5406adbe9e46c7f084faf6e470b5d8e990f90ab6bb139dc6bbf07e703e83f19acc3182c06368d7727e5b23e793d1b046578c4bcdee1e176eea999d4ef9c03d5863b4bb3f2c1a1139cb871124007f51105aa60e9aaf8f66fa8c9ca3629aca599710043c3742f43064f2c028f1dda1ad1a3ea196c8d8a6e21127b3b70f15218d0885feb48a7eebd5bebd3ed17cb6b6a9424fb734e8a2bcb4c38ef4e772e402f9b4"], 0x38) close(r0) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000100)={0x0, @bt={0xffff5fbc, 0x1, 0x0, 0x3, 0xd, 0x0, 0x0, 0x5, 0x2, 0xfffffffc, 0xfff, 0x0, 0x4000, 0x3ff, 0x0, 0x2c, {0x2, 0x4}, 0x9e, 0x9}}) getpid() prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000006c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x1}}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x822b01) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2(0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, 0x0, 0x0) setsockopt(r4, 0x84, 0x80, &(0x7f0000000240)="2df7976309000000", 0x8) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000001c0)=0x2) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 3.748813514s ago: executing program 6 (id=2998): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102400, 0x19000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) syz_genetlink_get_family_id$ethtool(0x0, r3) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) syz_clone(0x50010000, &(0x7f0000000100)="ffb965c6afdb1666b6240da29f51ada20278f166717f0e7e3c35091bd243b70c682340e1f875a0db29f089c015ded6105cf74d4323bb14ac233ea9b83bc655623f936f4294a2243c857f409a85f2f13648367bb196ec", 0x56, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280)="4fe261aef95e606ba71b4418e44eea9fd5c592e65bafaa800e3c58cbe136a2f5139be671a30e895e2eb65f63281569a90a28bedc64df2b91c13cb4ac6fec3d318a1d26d26d07dc45b1a9f5b04b017218fd694ddbdea0211495beba5461678c1feb7bc75660354d400e86cfb2e5e497f962be4382d8139072960e693eb4263dc4e5522a0183b89bda823cc90ac796c04b715e19e7919f9426da489fd617fc09d732e86e2ea88e63b15b342b88c608ed") r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x801) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r6, 0xc05c5340, &(0x7f0000000080)={0x0, 0x5, 0x7f, {0x0, 0x7}, 0x1f, 0x3}) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001ac0)={r4, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x140000, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001c00)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0xfffffe38) 3.564660598s ago: executing program 8 (id=2999): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0xd5, 0x1, 0x4, 0x4, 0x3, 0x1, 0xff, 0x5, 0x0, 0xe, 0x9, 0xa, 0x2, 0xd, 0x3}}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @pic={0x2, 0xf6, 0x5, 0x7, 0x6, 0x3, 0x5, 0x3, 0xba, 0xff, 0x3a, 0x7, 0xf9, 0xc, 0x8, 0x4}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_names\x00') preadv(r3, &(0x7f0000001640)=[{&(0x7f0000000280)=""/191, 0xbf}], 0x1, 0x86, 0x451) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r4, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}}, &(0x7f0000000040)) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4008840) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a030200020000000000000200000009000200"], 0x80}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r6 = shmget(0x0, 0x3000, 0x10, &(0x7f000038b000/0x3000)=nil) shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x2000) 3.562302388s ago: executing program 1 (id=3000): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, &(0x7f0000000380)=""/240, &(0x7f0000000900)=""/103, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) 2.800914634s ago: executing program 8 (id=3001): syz_open_procfs(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0xc00000)=nil, 0xc00000, &(0x7f0000000140)=""/142) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) dup(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000a00)="00000000076f00001abd8cf0eedf", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_io_uring_setup(0x460, &(0x7f0000000400)={0x0, 0x40000020, 0x800, 0x0, 0x1ef}, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0xffffffffffffff8a) 2.797554799s ago: executing program 6 (id=3002): select(0x28, 0x0, &(0x7f0000000080)={0x3}, &(0x7f00000000c0), 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000000100)={0xda, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2710, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='adfs\x00', 0x2000010, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r6, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x3c, r5, 0x1, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x3, 0xb, 0xff}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40801}, 0x10) fsmount(r0, 0x1, 0x2) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000140), 0x1) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x4058534c, &(0x7f0000000040)={0x80, 0x8, 0x2, 0xfffffffc}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0xeaea, 0xfffffff7, {}, {}, 0x200, 0x6}) 2.74845463s ago: executing program 1 (id=3003): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x80000) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) 2.540653864s ago: executing program 1 (id=3004): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x5, &(0x7f0000019580)=""/102389, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004f0033", @ANYRES32], 0x4394) sendmsg$can_bcm(r3, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = syz_usbip_server_init(0x2) write$usbip_server(r6, &(0x7f00000000c0)=@ret_unlink={{0x4, 0x2d, 0x0, 0x1, 0x9}, {0x10000000}}, 0x30) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x228002) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x22081) close_range(r8, 0xffffffffffffffff, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYRES32=r7, @ANYBLOB="003000000000000014001a80100006"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 1.686752767s ago: executing program 2 (id=3005): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x17) 1.616911381s ago: executing program 6 (id=3006): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000005400019b4abd70010086dd0007000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES64=r0, @ANYRES32=r0], 0x38}}, 0x0) 1.388080285s ago: executing program 2 (id=3007): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x200080, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000140)={@empty, @rand_addr=0x64010100}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000280)=ANY=[@ANYBLOB="000000000000000002020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000009000000000001000000000001000000000000000200000000000000010000000000000000000000000000000000000000000000000000000000000003000000ffffffff0200000000000000cb090000000000000a00000000000000b51b00"/315]) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) close(r4) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'gretap0\x00', &(0x7f00000003c0)=@ethtool_rxnfc={0x2f, 0x0, 0x4000000000003a, {0xe, @ah_ip4_spec={@multicast2, @multicast1, 0x7, 0x99}, {0x0, @remote, 0x5, 0x4, [0x7, 0xc]}, @hdata="9abc26cee2e06a7a21c55498365f27100c408d874358860e3a20dd2f89d4ef72a23c9a2a8f3e32400f467c348dd17c706cd0b3ee", {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, 0x4, 0x0, [0x1, 0x4]}, 0x7}, 0x3, [0x8, 0xad0, 0x7]}}) socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) getpid() syz_open_dev$evdev(&(0x7f00000000c0), 0xd9a, 0x8e80) pselect6(0x40, &(0x7f0000000080)={0x5, 0x0, 0x120000000000, 0x2, 0x500, 0x0, 0x1000001000, 0x49}, 0x0, 0x0, 0x0, 0x0) 1.310174204s ago: executing program 6 (id=3008): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040), 0x49) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x29, 0x81, 0x1, 0x7, 0x41, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x8, 0x101, 0x4}}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="ff0700"/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x10, 0x1418, 0x1, 0x0, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4000804}, 0x44810) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x10000}, 0xc) r8 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r9, 0x0, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r10, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r8, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(r10, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}]}}}]}, 0x48}}, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000240)) 209.529311ms ago: executing program 6 (id=3009): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r0}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) 31.903257ms ago: executing program 2 (id=3010): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x5, 0x1, 0x0, 0x67, 0xcc7, 0x8, 0x7, 0xa, 0x4, 0x2, 0x1, 0x8, 0x1, 0x6, 0x101, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) mmap(&(0x7f00000f4000/0x2000)=nil, 0x2000, 0x5000000, 0x11, r0, 0xffffd000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000001b40), r4) sendmsg$NFC_CMD_LLC_GET_PARAMS(r4, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250f000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) 0s ago: executing program 8 (id=3011): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f00000004000000060000000700000080130000", @ANYRES32, @ANYBLOB="0000000000000000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x50) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(0x0, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3a0000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000054000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005080007006e617400"], 0xf0}}, 0x0) ioprio_set$uid(0x0, 0xee00, 0x4000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440), 0x8) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) shmget(0x1, 0x4000, 0x54000000, &(0x7f0000ffb000/0x4000)=nil) wait4(0x0, 0x0, 0x8, 0x0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x3, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000040)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)={r3}) bind$xdp(r4, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) close(r3) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000580)=ANY=[], 0xfe33) kernel console output (not intermixed with test programs): 8.501656][ T5899] pwc: Askey VC010 type 2 USB webcam detected. [ 858.566649][T16145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 858.587563][ T5824] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 858.682566][T16149] netlink: 'syz.8.2456': attribute type 4 has an invalid length. [ 858.699080][T16149] netlink: 152 bytes leftover after parsing attributes in process `syz.8.2456'. [ 858.782397][T16149] : renamed from bond0 (while UP) [ 858.930186][ T5899] pwc: recv_control_msg error -32 req 02 val 2b00 [ 859.138302][ T5899] pwc: recv_control_msg error -32 req 02 val 2c00 [ 859.146217][ T5899] pwc: recv_control_msg error -32 req 04 val 1000 [ 859.155157][ T5899] pwc: recv_control_msg error -32 req 04 val 1300 [ 859.162285][ T5899] pwc: recv_control_msg error -32 req 04 val 1400 [ 859.169341][ T5899] pwc: recv_control_msg error -32 req 02 val 2000 [ 859.176485][ T5899] pwc: recv_control_msg error -32 req 02 val 2100 [ 859.187169][ T5899] pwc: recv_control_msg error -32 req 04 val 1500 [ 859.201437][ T5899] pwc: recv_control_msg error -32 req 02 val 2500 [ 859.243510][ T5899] pwc: recv_control_msg error -32 req 02 val 2400 [ 859.267577][ T5899] pwc: recv_control_msg error -32 req 02 val 2600 [ 859.589812][ T5899] pwc: recv_control_msg error -32 req 02 val 2800 [ 859.893665][ T5899] pwc: recv_control_msg error -71 req 04 val 1200 [ 859.911093][ T5899] pwc: Registered as video103. [ 859.933149][ T5899] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input51 [ 859.982776][ T5899] usb 2-1: USB disconnect, device number 69 [ 860.459306][T16179] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 860.864111][T16184] program syz.8.2464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 861.651063][T16206] JFS: charset not found [ 862.743114][T16213] ptrace attach of "./syz-executor exec"[13681] was attempted by "./syz-executor exec"[16213] [ 865.141138][ T5899] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 865.370794][ T5899] usb 7-1: Using ep0 maxpacket: 8 [ 865.381805][ T5899] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 865.410759][ T5899] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 865.424637][ T5899] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 865.563469][ T5899] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 865.673487][ T5899] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 865.892239][ T5899] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 866.005249][ T5899] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.224311][ T5899] usbtmc 7-1:16.0: probe with driver usbtmc failed with error -22 [ 867.590777][ T24] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 868.083605][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 868.104430][ T24] usb 2-1: config 0 has no interface number 0 [ 868.106854][T16270] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2487'. [ 868.116753][ T24] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 868.136764][ T24] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 868.148678][ T24] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 868.151213][T16270] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.162017][ T24] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 868.168901][T16270] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.178071][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.207240][ T24] usb 2-1: config 0 descriptor?? [ 868.465880][T16273] netlink: 'syz.4.2488': attribute type 1 has an invalid length. [ 868.487490][T16273] netlink: 'syz.4.2488': attribute type 2 has an invalid length. [ 868.511641][T16273] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2488'. [ 870.788863][ T24] usbhid 2-1:0.1: can't add hid device: -71 [ 870.802049][ T24] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 870.846433][ T24] usb 2-1: USB disconnect, device number 70 [ 870.930030][T16293] program syz.4.2493 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 871.626177][T16298] netlink: 17279 bytes leftover after parsing attributes in process `syz.8.2495'. [ 871.648432][T16298] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(9) [ 871.654943][T16298] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 871.690852][T16298] vhci_hcd vhci_hcd.0: Device attached [ 871.738858][T16299] vhci_hcd: connection closed [ 871.739084][ T7189] vhci_hcd: stop threads [ 871.751228][ T7189] vhci_hcd: release socket [ 871.755647][ T7189] vhci_hcd: disconnect device [ 872.134457][ T24] usb 7-1: USB disconnect, device number 45 [ 872.259718][T16312] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2500'. [ 872.279566][T16310] FAULT_INJECTION: forcing a failure. [ 872.279566][T16310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 872.331307][T16310] CPU: 0 UID: 0 PID: 16310 Comm: syz.2.2499 Not tainted syzkaller #0 PREEMPT(full) [ 872.331333][T16310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 872.331344][T16310] Call Trace: [ 872.331350][T16310] [ 872.331358][T16310] dump_stack_lvl+0x16c/0x1f0 [ 872.331390][T16310] should_fail_ex+0x512/0x640 [ 872.331421][T16310] _copy_from_iter+0x29f/0x1720 [ 872.331453][T16310] ? _copy_from_iter+0x15d/0x1720 [ 872.331480][T16310] ? __pfx__copy_from_iter+0x10/0x10 [ 872.331512][T16310] ? __pfx__copy_from_iter+0x10/0x10 [ 872.331539][T16310] ? _copy_from_iter+0x15d/0x1720 [ 872.331570][T16310] copy_page_from_iter+0xde/0x180 [ 872.331601][T16310] skb_copy_datagram_from_iter+0x2a0/0x740 [ 872.331635][T16310] tun_get_user+0x1850/0x3cc0 [ 872.331668][T16310] ? __pfx_tun_get_user+0x10/0x10 [ 872.331689][T16310] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 872.331716][T16310] ? find_held_lock+0x2b/0x80 [ 872.331739][T16310] ? tun_get+0x191/0x370 [ 872.331761][T16310] tun_chr_write_iter+0xdc/0x210 [ 872.331783][T16310] vfs_write+0x7d0/0x11d0 [ 872.331801][T16310] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 872.331822][T16310] ? __pfx_vfs_write+0x10/0x10 [ 872.331836][T16310] ? find_held_lock+0x2b/0x80 [ 872.331874][T16310] ksys_write+0x12a/0x250 [ 872.331890][T16310] ? __pfx_ksys_write+0x10/0x10 [ 872.331913][T16310] do_syscall_64+0xcd/0xfa0 [ 872.331940][T16310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.331958][T16310] RIP: 0033:0x7f354e98eec9 [ 872.331972][T16310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 872.331987][T16310] RSP: 002b:00007f354f79c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 872.332004][T16310] RAX: ffffffffffffffda RBX: 00007f354ebe5fa0 RCX: 00007f354e98eec9 [ 872.332014][T16310] RDX: 0000000000000ffe RSI: 0000200000000240 RDI: 0000000000000003 [ 872.332024][T16310] RBP: 00007f354f79c090 R08: 0000000000000000 R09: 0000000000000000 [ 872.332034][T16310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 872.332043][T16310] R13: 00007f354ebe6038 R14: 00007f354ebe5fa0 R15: 00007fffcfac1ec8 [ 872.332066][T16310] [ 873.018138][T16330] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 873.057464][T16330] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2504'. [ 874.127570][T16338] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 874.145716][T16338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2507'. [ 874.906550][T16351] vivid-002: disconnect [ 874.940454][T16348] vivid-002: reconnect [ 875.302689][T16368] netlink: 17279 bytes leftover after parsing attributes in process `syz.6.2515'. [ 875.442930][T16368] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 875.449467][T16368] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 875.491307][T16368] vhci_hcd vhci_hcd.0: Device attached [ 875.645350][T16375] FAULT_INJECTION: forcing a failure. [ 875.645350][T16375] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 875.659108][T16375] CPU: 0 UID: 0 PID: 16375 Comm: syz.1.2516 Not tainted syzkaller #0 PREEMPT(full) [ 875.659132][T16375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 875.659139][T16375] Call Trace: [ 875.659143][T16375] [ 875.659149][T16375] dump_stack_lvl+0x16c/0x1f0 [ 875.659170][T16375] should_fail_ex+0x512/0x640 [ 875.659190][T16375] should_fail_alloc_page+0xe7/0x130 [ 875.659209][T16375] prepare_alloc_pages+0x3c2/0x610 [ 875.659225][T16375] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 875.659244][T16375] ? rcu_is_watching+0x12/0xc0 [ 875.659260][T16375] ? __pv_queued_spin_lock_slowpath+0x28d/0xcf0 [ 875.659282][T16375] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 875.659300][T16375] ? kvm_sched_clock_read+0x11/0x20 [ 875.659315][T16375] ? sched_clock+0x38/0x60 [ 875.659331][T16375] ? sched_clock_cpu+0x6c/0x530 [ 875.659349][T16375] ? __pfx_sched_clock_cpu+0x10/0x10 [ 875.659365][T16375] ? __pick_eevdf+0x127/0x670 [ 875.659382][T16375] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 875.659398][T16375] ? policy_nodemask+0xea/0x4e0 [ 875.659412][T16375] alloc_pages_mpol+0x1fb/0x550 [ 875.659426][T16375] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 875.659437][T16375] ? kvm_sched_clock_read+0x11/0x20 [ 875.659453][T16375] ? sched_clock_cpu+0x6c/0x530 [ 875.659471][T16375] alloc_pages_noprof+0x131/0x390 [ 875.659485][T16375] pte_alloc_one+0x1e/0x350 [ 875.659499][T16375] __pte_alloc+0x6d/0x380 [ 875.659510][T16375] ? __pfx___pte_alloc+0x10/0x10 [ 875.659522][T16375] ? rcu_is_watching+0x12/0xc0 [ 875.659535][T16375] ? trace_sched_exit_tp+0xd1/0x120 [ 875.659549][T16375] do_pte_missing+0x282c/0x3ba0 [ 875.659570][T16375] __handle_mm_fault+0x1556/0x2aa0 [ 875.659589][T16375] ? __pfx___handle_mm_fault+0x10/0x10 [ 875.659617][T16375] handle_mm_fault+0x589/0xd10 [ 875.659634][T16375] __get_user_pages+0x54e/0x3530 [ 875.659652][T16375] ? down_read_killable+0x220/0x4b0 [ 875.659664][T16375] ? __pfx___get_user_pages+0x10/0x10 [ 875.659677][T16375] ? kvm_sched_clock_read+0x11/0x20 [ 875.659692][T16375] ? sched_clock+0x38/0x60 [ 875.659709][T16375] __gup_longterm_locked+0xa92/0x17e0 [ 875.659724][T16375] ? find_held_lock+0x2b/0x80 [ 875.659740][T16375] ? __pfx___gup_longterm_locked+0x10/0x10 [ 875.659755][T16375] ? find_held_lock+0x2b/0x80 [ 875.659768][T16375] ? sanity_check_pinned_pages+0x23/0x11d0 [ 875.659784][T16375] gup_fast_fallback+0xee2/0x22a0 [ 875.659798][T16375] ? __lock_acquire+0xb97/0x1ce0 [ 875.659823][T16375] ? __pfx_gup_fast_fallback+0x10/0x10 [ 875.659836][T16375] ? __resched_curr+0xfd/0x3b0 [ 875.659848][T16375] ? find_held_lock+0x2b/0x80 [ 875.659866][T16375] pin_user_pages_fast+0xa7/0xf0 [ 875.659879][T16375] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 875.659893][T16375] ? crypto_md5_final+0x1/0x30 [ 875.659911][T16375] iov_iter_extract_pages+0x3a2/0x1ed0 [ 875.659925][T16375] ? __pfx___schedule+0x10/0x10 [ 875.659940][T16375] ? lockdep_hardirqs_on+0x7c/0x110 [ 875.659959][T16375] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 875.659975][T16375] ? irqentry_exit+0x3b/0x90 [ 875.659991][T16375] ? lockdep_hardirqs_on+0x7c/0x110 [ 875.660010][T16375] extract_iter_to_sg+0xf6e/0x20c0 [ 875.660027][T16375] ? write_comp_data+0x3c/0x90 [ 875.660042][T16375] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 875.660059][T16375] ? __pfx_unpin_user_page+0x10/0x10 [ 875.660071][T16375] ? af_alg_free_sg+0x1be/0x260 [ 875.660093][T16375] hash_sendmsg+0x435/0xfa0 [ 875.660109][T16375] ____sys_sendmsg+0xa98/0xc70 [ 875.660124][T16375] ? copy_msghdr_from_user+0x10a/0x160 [ 875.660140][T16375] ? __pfx_____sys_sendmsg+0x10/0x10 [ 875.660155][T16375] ? __pfx__kstrtoull+0x10/0x10 [ 875.660171][T16375] ___sys_sendmsg+0x134/0x1d0 [ 875.660189][T16375] ? __pfx____sys_sendmsg+0x10/0x10 [ 875.660216][T16375] ? find_held_lock+0x2b/0x80 [ 875.660239][T16375] __sys_sendmmsg+0x200/0x420 [ 875.660257][T16375] ? __pfx___sys_sendmmsg+0x10/0x10 [ 875.660278][T16375] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 875.660295][T16375] ? fput+0x9b/0xd0 [ 875.660308][T16375] ? ksys_write+0x1ac/0x250 [ 875.660318][T16375] ? __pfx_ksys_write+0x10/0x10 [ 875.660331][T16375] __x64_sys_sendmmsg+0x9c/0x100 [ 875.660347][T16375] ? lockdep_hardirqs_on+0x7c/0x110 [ 875.660363][T16375] do_syscall_64+0xcd/0xfa0 [ 875.660380][T16375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.660392][T16375] RIP: 0033:0x7face1d8eec9 [ 875.660402][T16375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 875.660413][T16375] RSP: 002b:00007facdfff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 875.660424][T16375] RAX: ffffffffffffffda RBX: 00007face1fe6090 RCX: 00007face1d8eec9 [ 875.660431][T16375] RDX: 0000000000000001 RSI: 0000200000003e80 RDI: 0000000000000005 [ 875.660438][T16375] RBP: 00007facdfff6090 R08: 0000000000000000 R09: 0000000000000000 [ 875.660444][T16375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 875.660451][T16375] R13: 00007face1fe6128 R14: 00007face1fe6090 R15: 00007ffdb563a498 [ 875.660466][T16375] [ 876.520862][T16369] vhci_hcd: connection closed [ 876.530900][ T7187] vhci_hcd: stop threads [ 876.539848][ T7187] vhci_hcd: release socket [ 876.544625][ T7187] vhci_hcd: disconnect device [ 876.580776][T12262] vhci_hcd: vhci_device speed not set [ 878.715231][T16395] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 878.732622][T16395] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2521'. [ 879.102816][T16397] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2523'. [ 879.141903][T16402] netlink: 360 bytes leftover after parsing attributes in process `syz.4.2524'. [ 879.462239][T12262] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 879.902757][T12262] usb 2-1: Using ep0 maxpacket: 16 [ 880.006637][T12262] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 880.050533][T12262] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 880.105454][T12262] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.148014][T12262] usb 2-1: config 0 descriptor?? [ 880.615234][ T24] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 881.190850][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 881.197715][ T24] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 881.207322][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.218529][ T24] usb 3-1: config 0 descriptor?? [ 881.323577][ T24] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 881.377993][T12262] usbhid 2-1:0.0: can't add hid device: -71 [ 881.384676][T12262] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 881.412921][T12262] usb 2-1: USB disconnect, device number 71 [ 881.533754][ T24] usb 3-1: Detected FT232A [ 881.548126][ T24] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 881.849955][T16441] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 881.857648][T16441] UDF-fs: Scanning with blocksize 512 failed [ 881.868239][T16441] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 881.876064][T16441] UDF-fs: Scanning with blocksize 1024 failed [ 881.883678][T16441] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 881.891726][T16441] UDF-fs: Scanning with blocksize 2048 failed [ 881.905535][T16441] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 881.914569][T16441] UDF-fs: Scanning with blocksize 4096 failed [ 882.217923][ T24] usb 3-1: USB disconnect, device number 64 [ 882.240254][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 882.261980][ T24] ftdi_sio 3-1:0.0: device disconnected [ 883.672120][T16446] ptrace attach of "./syz-executor exec"[5811] was attempted by "./syz-executor exec"[16446] [ 884.231201][T16445] loop6: detected capacity change from 0 to 2560 [ 884.237877][T16445] buffer_io_error: 32 callbacks suppressed [ 884.237887][T16445] Buffer I/O error on dev loop6, logical block 0, async page read [ 884.251845][T16445] Buffer I/O error on dev loop6, logical block 0, async page read [ 884.259680][T16445] Buffer I/O error on dev loop6, logical block 0, async page read [ 884.267651][T16445] Buffer I/O error on dev loop6, logical block 0, async page read [ 884.275539][T16445] Buffer I/O error on dev loop6, logical block 0, async page read [ 884.283417][T16445] Buffer I/O error on dev loop6, logical block 0, async page read [ 884.291429][T16445] Buffer I/O error on dev loop6, logical block 0, async page read [ 884.299252][T16445] Buffer I/O error on dev loop6, logical block 0, async page read [ 884.307100][T16445] ldm_validate_partition_table(): Disk read failed. [ 884.313731][T16445] Buffer I/O error on dev loop6, logical block 0, async page read [ 884.321609][T16445] Buffer I/O error on dev loop6, logical block 0, async page read [ 884.329486][T16445] Dev loop6: unable to read RDB block 0 [ 884.335233][T16445] loop6: unable to read partition table [ 884.340962][T16445] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 885.701657][T16470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2542'. [ 885.745129][T16470] binder: 16469:16470 ioctl c018620c 2000000001c0 returned -1 [ 886.610378][T16486] FAULT_INJECTION: forcing a failure. [ 886.610378][T16486] name failslab, interval 1, probability 0, space 0, times 0 [ 886.654046][T16486] CPU: 1 UID: 0 PID: 16486 Comm: syz.1.2548 Not tainted syzkaller #0 PREEMPT(full) [ 886.654074][T16486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 886.654084][T16486] Call Trace: [ 886.654095][T16486] [ 886.654104][T16486] dump_stack_lvl+0x16c/0x1f0 [ 886.654142][T16486] should_fail_ex+0x512/0x640 [ 886.654164][T16486] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 886.654177][T16486] should_failslab+0xc2/0x120 [ 886.654191][T16486] kmem_cache_alloc_noprof+0x75/0x6e0 [ 886.654208][T16486] ? skb_clone+0x190/0x3f0 [ 886.654229][T16486] ? skb_clone+0x190/0x3f0 [ 886.654248][T16486] skb_clone+0x190/0x3f0 [ 886.654265][T16486] netlink_deliver_tap+0xabd/0xd30 [ 886.654287][T16486] netlink_unicast+0x71f/0x870 [ 886.654300][T16486] ? __pfx_netlink_unicast+0x10/0x10 [ 886.654311][T16486] ? genl_rcv_msg+0x4bb/0x800 [ 886.654327][T16486] netlink_ack+0x696/0xb80 [ 886.654342][T16486] netlink_rcv_skb+0x332/0x420 [ 886.654353][T16486] ? __pfx_genl_rcv_msg+0x10/0x10 [ 886.654366][T16486] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 886.654383][T16486] ? netlink_deliver_tap+0x1ae/0xd30 [ 886.654402][T16486] genl_rcv+0x28/0x40 [ 886.654417][T16486] netlink_unicast+0x5a7/0x870 [ 886.654436][T16486] ? __pfx_netlink_unicast+0x10/0x10 [ 886.654459][T16486] netlink_sendmsg+0x8c8/0xdd0 [ 886.654473][T16486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 886.654489][T16486] ____sys_sendmsg+0xa98/0xc70 [ 886.654502][T16486] ? copy_msghdr_from_user+0x10a/0x160 [ 886.654520][T16486] ? __pfx_____sys_sendmsg+0x10/0x10 [ 886.654539][T16486] ___sys_sendmsg+0x134/0x1d0 [ 886.654557][T16486] ? __pfx____sys_sendmsg+0x10/0x10 [ 886.654592][T16486] __sys_sendmsg+0x16d/0x220 [ 886.654609][T16486] ? __pfx___sys_sendmsg+0x10/0x10 [ 886.654639][T16486] do_syscall_64+0xcd/0xfa0 [ 886.654669][T16486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.654689][T16486] RIP: 0033:0x7face1d8eec9 [ 886.654698][T16486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 886.654710][T16486] RSP: 002b:00007face2b45038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 886.654721][T16486] RAX: ffffffffffffffda RBX: 00007face1fe5fa0 RCX: 00007face1d8eec9 [ 886.654728][T16486] RDX: 0000000026004808 RSI: 0000200000000400 RDI: 0000000000000004 [ 886.654735][T16486] RBP: 00007face2b45090 R08: 0000000000000000 R09: 0000000000000000 [ 886.654742][T16486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 886.654748][T16486] R13: 00007face1fe6038 R14: 00007face1fe5fa0 R15: 00007ffdb563a498 [ 886.654764][T16486] [ 888.659768][T16499] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 889.017196][T16505] ptrace attach of "./syz-executor exec"[5810] was attempted by "./syz-executor exec"[16505] [ 889.112587][T16505] loop6: detected capacity change from 0 to 2560 [ 889.131265][T16505] ldm_validate_partition_table(): Disk read failed. [ 889.140855][T16505] Dev loop6: unable to read RDB block 0 [ 889.149853][T16505] loop6: unable to read partition table [ 889.157139][T16505] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 889.286240][ T5807] buffer_io_error: 27 callbacks suppressed [ 889.286257][ T5807] Buffer I/O error on dev loop6, logical block 0, async page read [ 889.406504][ T5807] Buffer I/O error on dev loop6, logical block 0, async page read [ 889.583690][T16509] CUSE: unknown device info "KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 889.595925][T16509] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 889.601801][T16509] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q ´ƒ [ 889.601801][T16509] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw— üæšxRÉQ÷®(hÒj pøVdY0¨Æ|M?2JÿúIšvö^RÎ@´å" [ 889.620764][T16509] CUSE: unknown device info "!ToÛ}Ý&|L+U²®oæõϲ±„Ð"–¨FstVµ:׌E• gJºî‹ÂÁ<@cÁ”²ûŽ4ÊTáM˜M|©·š‚ô" [ 889.632131][T16509] CUSE: DEVNAME unspecified [ 889.824849][ T5807] Buffer I/O error on dev loop6, logical block 0, async page read [ 889.911346][ T5807] Buffer I/O error on dev loop6, logical block 0, async page read [ 889.943193][ T5807] Buffer I/O error on dev loop6, logical block 0, async page read [ 890.097510][ T5181] Buffer I/O error on dev loop6, logical block 0, async page read [ 890.112683][ T5181] Buffer I/O error on dev loop6, logical block 0, async page read [ 890.214187][ T5181] Buffer I/O error on dev loop6, logical block 0, async page read [ 890.341045][ T5899] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 890.372947][ T5181] Buffer I/O error on dev loop6, logical block 0, async page read [ 890.456720][T16520] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2559'. [ 890.529060][ T5181] Buffer I/O error on dev loop6, logical block 0, async page read [ 890.537587][ T5181] ldm_validate_partition_table(): Disk read failed. [ 890.545275][ T5181] Dev loop6: unable to read RDB block 0 [ 890.561236][ T5181] loop6: unable to read partition table [ 890.661642][ T5899] usb 7-1: device descriptor read/64, error -71 [ 891.377769][T16528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2562'. [ 891.420867][ T5899] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 891.586365][ T5899] usb 7-1: device descriptor read/64, error -71 [ 891.616298][T16537] FAULT_INJECTION: forcing a failure. [ 891.616298][T16537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 891.653040][T16537] CPU: 0 UID: 0 PID: 16537 Comm: syz.2.2564 Not tainted syzkaller #0 PREEMPT(full) [ 891.653067][T16537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 891.653076][T16537] Call Trace: [ 891.653080][T16537] [ 891.653085][T16537] dump_stack_lvl+0x16c/0x1f0 [ 891.653107][T16537] should_fail_ex+0x512/0x640 [ 891.653126][T16537] _copy_from_user+0x2e/0xd0 [ 891.653138][T16537] copy_msghdr_from_user+0x98/0x160 [ 891.653156][T16537] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 891.653180][T16537] ___sys_sendmsg+0xfe/0x1d0 [ 891.653197][T16537] ? __pfx____sys_sendmsg+0x10/0x10 [ 891.653231][T16537] __sys_sendmsg+0x16d/0x220 [ 891.653248][T16537] ? __pfx___sys_sendmsg+0x10/0x10 [ 891.653274][T16537] do_syscall_64+0xcd/0xfa0 [ 891.653292][T16537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.653303][T16537] RIP: 0033:0x7f354e98eec9 [ 891.653313][T16537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 891.653325][T16537] RSP: 002b:00007f354f79c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 891.653336][T16537] RAX: ffffffffffffffda RBX: 00007f354ebe5fa0 RCX: 00007f354e98eec9 [ 891.653343][T16537] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 891.653349][T16537] RBP: 00007f354f79c090 R08: 0000000000000000 R09: 0000000000000000 [ 891.653356][T16537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 891.653362][T16537] R13: 00007f354ebe6038 R14: 00007f354ebe5fa0 R15: 00007fffcfac1ec8 [ 891.653377][T16537] [ 891.856198][ T5899] usb usb7-port1: attempt power cycle [ 892.103340][T16546] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.110903][T16546] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.524604][ T30] audit: type=1400 audit(1760215010.194:918): avc: denied { ioctl } for pid=16558 comm="syz.2.2571" path="socket:[51372]" dev="sockfs" ino=51372 ioctlcmd=0x9402 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 894.945055][T16568] netlink: 'syz.2.2572': attribute type 2 has an invalid length. [ 895.225051][T16578] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 895.246910][T16578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2575'. [ 896.261329][T16581] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 896.268053][T16581] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 896.321811][T16581] vhci_hcd vhci_hcd.0: Device attached [ 896.476639][T16592] ptrace attach of "./syz-executor exec"[7211] was attempted by "./syz-executor exec"[16592] [ 896.501417][ T24] vhci_hcd: vhci_device speed not set [ 896.503178][T16592] loop6: detected capacity change from 0 to 2560 [ 896.514021][T16592] buffer_io_error: 11 callbacks suppressed [ 896.514036][T16592] Buffer I/O error on dev loop6, logical block 0, async page read [ 896.529549][T16592] Buffer I/O error on dev loop6, logical block 0, async page read [ 896.538370][T16592] Buffer I/O error on dev loop6, logical block 0, async page read [ 896.546818][T16592] Buffer I/O error on dev loop6, logical block 0, async page read [ 896.560430][T16592] Buffer I/O error on dev loop6, logical block 0, async page read [ 896.570881][T16592] Buffer I/O error on dev loop6, logical block 0, async page read [ 896.579768][T16592] Buffer I/O error on dev loop6, logical block 0, async page read [ 896.588224][T16592] Buffer I/O error on dev loop6, logical block 0, async page read [ 896.596805][T16592] ldm_validate_partition_table(): Disk read failed. [ 896.603799][T16592] Buffer I/O error on dev loop6, logical block 0, async page read [ 896.612330][T16592] Buffer I/O error on dev loop6, logical block 0, async page read [ 896.620820][T16592] Dev loop6: unable to read RDB block 0 [ 896.627008][ T24] usb 35-1: new full-speed USB device number 4 using vhci_hcd [ 896.628602][T16592] loop6: unable to read partition table [ 896.642922][T16592] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 896.852236][T16582] vhci_hcd: connection reset by peer [ 896.861256][ T8133] vhci_hcd: stop threads [ 896.865573][ T8133] vhci_hcd: release socket [ 896.902650][ T8133] vhci_hcd: disconnect device [ 897.277738][ T5181] ldm_validate_partition_table(): Disk read failed. [ 897.284879][ T5181] Dev loop6: unable to read RDB block 0 [ 897.285243][ T5181] loop6: unable to read partition table [ 897.320235][T16600] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 897.455450][ T30] audit: type=1400 audit(1760215014.214:919): avc: denied { read } for pid=16585 comm="syz.2.2577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 897.700840][T16607] netlink: 128 bytes leftover after parsing attributes in process `syz.8.2583'. [ 897.720912][ T30] audit: type=1400 audit(1760215014.504:920): avc: denied { append } for pid=16606 comm="syz.8.2583" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 897.721228][T16607] binder: BINDER_SET_CONTEXT_MGR already set [ 897.760919][T16607] binder: 16606:16607 ioctl 4018620d 200000000680 returned -16 [ 897.773044][T16607] binder: 16606:16607 unknown command 0 [ 897.778600][T16607] binder: 16606:16607 ioctl c0306201 200000000180 returned -22 [ 898.319245][ T30] audit: type=1326 audit(1760215015.084:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16618 comm="syz.6.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f721fd8eec9 code=0x7ffc0000 [ 898.407004][ T30] audit: type=1326 audit(1760215015.084:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16618 comm="syz.6.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f721fd8eec9 code=0x7ffc0000 [ 898.436607][ T30] audit: type=1326 audit(1760215015.084:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16618 comm="syz.6.2588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f721fd8eec9 code=0x7ffc0000 [ 898.721460][T16634] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 898.743512][T16634] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2591'. [ 900.741318][ T5899] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 900.896995][T12262] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 901.087970][T12262] usb 2-1: Using ep0 maxpacket: 32 [ 901.093596][ T5899] usb 7-1: Using ep0 maxpacket: 32 [ 901.153790][T16660] vivid-000: disconnect [ 901.161467][T16660] vivid-000: reconnect [ 901.410941][ T30] audit: type=1400 audit(1760215017.914:924): avc: denied { watch } for pid=16657 comm="syz.2.2599" path="/516/file0" dev="tmpfs" ino=2747 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 901.434028][ T30] audit: type=1400 audit(1760215017.934:925): avc: denied { bind } for pid=16657 comm="syz.2.2599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 901.454265][T12262] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 901.462452][ T5899] usb 7-1: config 235 has an invalid interface number: 171 but max is 1 [ 901.472384][T12262] usb 2-1: config 0 has no interface number 0 [ 901.482899][ T5899] usb 7-1: config 235 has an invalid interface number: 50 but max is 1 [ 901.502156][ T5899] usb 7-1: config 235 has no interface number 0 [ 901.510219][T12262] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 901.521781][ T5899] usb 7-1: config 235 has no interface number 1 [ 901.528071][ T5899] usb 7-1: config 235 interface 171 altsetting 4 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 901.539299][T12262] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.549324][T12262] usb 2-1: Product: syz [ 901.554706][T12262] usb 2-1: Manufacturer: syz [ 901.559418][ T5899] usb 7-1: config 235 interface 171 altsetting 4 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 901.579709][T12262] usb 2-1: SerialNumber: syz [ 901.590568][ T5899] usb 7-1: config 235 interface 171 altsetting 4 endpoint 0x84 has invalid maxpacket 13430, setting to 64 [ 901.602905][T12262] usb 2-1: config 0 descriptor?? [ 901.611694][T12262] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 901.620884][ T5899] usb 7-1: config 235 interface 171 altsetting 4 endpoint 0x8 has invalid wMaxPacketSize 0 [ 901.634664][ T5899] usb 7-1: config 235 interface 171 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 901.645828][ T5899] usb 7-1: config 235 interface 171 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 901.658858][ T5899] usb 7-1: config 235 interface 171 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 901.669992][ T5899] usb 7-1: config 235 interface 171 altsetting 4 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 901.686252][ T5899] usb 7-1: config 235 interface 50 altsetting 5 endpoint 0x3 has an invalid bInterval 112, changing to 10 [ 901.698757][ T5899] usb 7-1: config 235 interface 171 has no altsetting 0 [ 901.706827][ T5899] usb 7-1: config 235 interface 50 has no altsetting 0 [ 901.725362][ T5899] usb 7-1: New USB device found, idVendor=1608, idProduct=0244, bcdDevice=fa.51 [ 901.736523][ T5899] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.746797][ T5899] usb 7-1: Product: 厧ᾊ鵯愚좇黹孈棺ꛗ椯៘亰쀥殖â¸ìˆ­íž‘궂쩗藌䪸稼 [ 901.757270][ T5899] usb 7-1: Manufacturer: 橋풼旾䃵䉠硠㛕ᘽ閩è±á…¥â‚œä©ºéŽ¥å“¾ã·µæ…žã»³î§©ì‘–뀲裱栚䥦é§æ˜–ꓟ캢槫枉ҳ볼嚘꫙⥻懹匠ê³æª¬â»¢ášå‚³í—¢äœ‚ྟ᳎䢇ඕ봴ê¹çœœë«á¦‰ë”ªï†ï¡™å˜‰é¹°í…§î¤¤í›âµ’è¼ë©í–£ä¼¡â‘ˆíŸ¸ï€‰ë±¨äŒãŒåµ³å–µæ½ê–¿å¿›ãë°å¶é¤™è²¾ì†‡êº€äºë•‰êˆ–ä ¼é›ï§±îœ²âƒ°å¬±é­™ç´ [ 901.789903][ T5899] usb 7-1: SerialNumber: Щ [ 901.873169][T12262] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 901.929310][T12262] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 901.940912][ T24] vhci_hcd: vhci_device speed not set [ 902.607193][ T30] audit: type=1400 audit(1760215019.064:926): avc: denied { write } for pid=16648 comm="syz.6.2596" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 902.646208][T16667] ./file0: Can't lookup blockdev [ 902.646251][T16637] FAULT_INJECTION: forcing a failure. [ 902.646251][T16637] name failslab, interval 1, probability 0, space 0, times 0 [ 902.664358][T16637] CPU: 0 UID: 0 PID: 16637 Comm: syz.4.2592 Not tainted syzkaller #0 PREEMPT(full) [ 902.664382][T16637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 902.664392][T16637] Call Trace: [ 902.664398][T16637] [ 902.664405][T16637] dump_stack_lvl+0x16c/0x1f0 [ 902.664434][T16637] should_fail_ex+0x512/0x640 [ 902.664451][T16637] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 902.664470][T16637] should_failslab+0xc2/0x120 [ 902.664483][T16637] kmem_cache_alloc_noprof+0x75/0x6e0 [ 902.664500][T16637] ? alloc_empty_file+0x55/0x1e0 [ 902.664517][T16637] ? alloc_empty_file+0x55/0x1e0 [ 902.664529][T16637] alloc_empty_file+0x55/0x1e0 [ 902.664544][T16637] path_openat+0xda/0x2cb0 [ 902.664561][T16637] ? __pfx_path_openat+0x10/0x10 [ 902.664576][T16637] do_filp_open+0x20b/0x470 [ 902.664587][T16637] ? __pfx_do_filp_open+0x10/0x10 [ 902.664609][T16637] ? alloc_fd+0x471/0x7d0 [ 902.664625][T16637] do_sys_openat2+0x11b/0x1d0 [ 902.664640][T16637] ? __pfx_do_sys_openat2+0x10/0x10 [ 902.664655][T16637] ? __fget_files+0x20e/0x3c0 [ 902.664668][T16637] __x64_sys_openat+0x174/0x210 [ 902.664683][T16637] ? __pfx___x64_sys_openat+0x10/0x10 [ 902.664696][T16637] ? ksys_write+0x1ac/0x250 [ 902.664712][T16637] do_syscall_64+0xcd/0xfa0 [ 902.664729][T16637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.664741][T16637] RIP: 0033:0x7fbf34d8d710 [ 902.664751][T16637] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 902.664767][T16637] RSP: 002b:00007fbf35c49b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 902.664778][T16637] RAX: ffffffffffffffda RBX: 0000000000183a20 RCX: 00007fbf34d8d710 [ 902.664786][T16637] RDX: 0000000000183a20 RSI: 00007fbf35c49c10 RDI: 00000000ffffff9c [ 902.664793][T16637] RBP: 00007fbf35c49c10 R08: 0000000000000000 R09: 0000000000000000 [ 902.664799][T16637] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 902.664806][T16637] R13: 00007fbf34fe6038 R14: 00007fbf34fe5fa0 R15: 00007ffd9b7d5fc8 [ 902.664822][T16637] [ 903.292403][T16667] netlink: 84 bytes leftover after parsing attributes in process `syz.8.2601'. [ 903.532599][T16681] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2605'. [ 903.691799][ T5899] io_ti 7-1:235.171: required endpoints missing [ 903.728650][ T5899] io_ti 7-1:235.50: required endpoints missing [ 903.769239][ T5899] usb 7-1: USB disconnect, device number 49 [ 904.547282][T16694] ptrace attach of "./syz-executor exec"[5813] was attempted by "./syz-executor exec"[16694] [ 904.559150][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 904.566973][ T5899] usb 2-1: USB disconnect, device number 72 [ 904.574690][ T5899] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 904.622175][ T5899] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 904.832007][ T5899] quatech2 2-1:0.51: device disconnected [ 907.372072][T16720] ptrace attach of "./syz-executor exec"[5811] was attempted by "./syz-executor exec"[16720] [ 907.965997][T16735] netlink: 47 bytes leftover after parsing attributes in process `syz.8.2619'. [ 908.195555][ T30] audit: type=1400 audit(1760215024.984:927): avc: denied { bind } for pid=16738 comm="syz.8.2621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 908.215941][T16740] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2621'. [ 908.375316][ T30] audit: type=1400 audit(1760215025.004:928): avc: denied { listen } for pid=16738 comm="syz.8.2621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 908.576304][T16748] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.2620'. [ 908.640045][T16748] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 908.646577][T16748] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 908.698275][T16749] vhci_hcd: connection closed [ 908.698478][T16748] vhci_hcd vhci_hcd.0: Device attached [ 908.806331][ T49] vhci_hcd: stop threads [ 908.811540][ T49] vhci_hcd: release socket [ 908.813685][T16752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2622'. [ 908.817019][ T49] vhci_hcd: disconnect device [ 909.730759][ T5899] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 909.881324][ T5899] usb 3-1: Using ep0 maxpacket: 32 [ 909.888634][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 909.925264][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 909.945927][ T5899] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 909.955836][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.970092][ T5899] usb 3-1: config 0 descriptor?? [ 910.792638][T16777] ptrace attach of "./syz-executor exec"[5810] was attempted by "./syz-executor exec"[16777] [ 910.977877][ T5899] ft260 0003:0403:6030.0017: unbalanced delimiter at end of report description [ 910.989625][ T5899] ft260 0003:0403:6030.0017: failed to parse HID [ 911.070840][ T5899] ft260 0003:0403:6030.0017: probe with driver ft260 failed with error -22 [ 911.194531][ T5899] usb 3-1: USB disconnect, device number 65 [ 911.244249][T16784] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2634'. [ 911.635145][T16801] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2638'. [ 911.644233][T16800] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2638'. [ 911.653203][T16801] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2638'. [ 911.662305][T16800] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2638'. [ 912.353222][T16809] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 912.370365][T16809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2640'. [ 913.888263][T16827] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2646'. [ 914.090875][T16831] 9pnet_virtio: no channels available for device syz [ 915.643636][ T30] audit: type=1326 audit(1760215032.434:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16850 comm="syz.4.2651" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbf34d8eec9 code=0x0 [ 917.497847][T16877] loop3: detected capacity change from 0 to 7 [ 919.039743][T16900] netlink: 'syz.4.2665': attribute type 2 has an invalid length. [ 919.065770][T16900] netlink: 51 bytes leftover after parsing attributes in process `syz.4.2665'. [ 919.082414][T16906] netlink: 'syz.4.2665': attribute type 2 has an invalid length. [ 919.094825][T16900] netlink: 'syz.4.2665': attribute type 2 has an invalid length. [ 919.117050][T16906] netlink: 51 bytes leftover after parsing attributes in process `syz.4.2665'. [ 919.134319][T16900] netlink: 51 bytes leftover after parsing attributes in process `syz.4.2665'. [ 919.153896][T16900] netlink: 'syz.4.2665': attribute type 2 has an invalid length. [ 919.254780][T16908] ptrace attach of "./syz-executor exec"[7211] was attempted by "./syz-executor exec"[16908] [ 919.414390][T16900] netlink: 51 bytes leftover after parsing attributes in process `syz.4.2665'. [ 919.436735][T16900] netlink: 'syz.4.2665': attribute type 2 has an invalid length. [ 919.445784][T16900] netlink: 51 bytes leftover after parsing attributes in process `syz.4.2665'. [ 919.455762][T16900] netlink: 'syz.4.2665': attribute type 2 has an invalid length. [ 919.463670][T16900] netlink: 51 bytes leftover after parsing attributes in process `syz.4.2665'. [ 919.489845][T16900] netlink: 'syz.4.2665': attribute type 2 has an invalid length. [ 919.498555][T16900] netlink: 51 bytes leftover after parsing attributes in process `syz.4.2665'. [ 919.507826][T16900] netlink: 'syz.4.2665': attribute type 2 has an invalid length. [ 919.516913][T16900] netlink: 51 bytes leftover after parsing attributes in process `syz.4.2665'. [ 919.527622][T16900] netlink: 'syz.4.2665': attribute type 2 has an invalid length. [ 919.563770][T16900] netlink: 51 bytes leftover after parsing attributes in process `syz.4.2665'. [ 919.583766][T16900] netlink: 'syz.4.2665': attribute type 2 has an invalid length. [ 919.595881][T16900] netlink: 51 bytes leftover after parsing attributes in process `syz.4.2665'. [ 920.274723][ T30] audit: type=1400 audit(1760215037.064:930): avc: denied { map } for pid=16920 comm="syz.4.2671" path="socket:[53070]" dev="sockfs" ino=53070 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 922.190031][T16953] loop6: detected capacity change from 0 to 63 [ 922.229046][ T5807] buffer_io_error: 27 callbacks suppressed [ 922.229063][ T5807] Buffer I/O error on dev loop6, logical block 0, async page read [ 922.250524][T16953] Buffer I/O error on dev loop6, logical block 0, async page read [ 922.264917][T16953] Buffer I/O error on dev loop6, logical block 0, async page read [ 922.276905][ T5807] Buffer I/O error on dev loop6, logical block 0, async page read [ 922.288937][T16953] Buffer I/O error on dev loop6, logical block 1, async page read [ 922.298625][ T5807] Buffer I/O error on dev loop6, logical block 0, async page read [ 922.309287][ T5807] Buffer I/O error on dev loop6, logical block 0, async page read [ 922.318108][T16953] Buffer I/O error on dev loop6, logical block 1, async page read [ 922.331575][ T5807] Buffer I/O error on dev loop6, logical block 0, async page read [ 922.339684][T16953] Buffer I/O error on dev loop6, logical block 1, async page read [ 922.460786][ T5822] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 922.610730][ T5822] usb 2-1: Using ep0 maxpacket: 16 [ 922.619236][ T5822] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 922.630075][ T5822] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 922.647070][ T5822] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 922.656341][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.664424][ T5822] usb 2-1: Manufacturer: Ћ [ 922.669037][ T5822] usb 2-1: SerialNumber: ≠[ 922.906663][T16950] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 923.219814][ T5822] cdc_ncm 2-1:1.0: bind() failure [ 923.257174][ T5822] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 923.797223][ T5822] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 923.807870][ T5822] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 923.832120][ T5822] usb 2-1: USB disconnect, device number 73 [ 924.067935][ T30] audit: type=1400 audit(1760215040.854:931): avc: denied { getopt } for pid=16987 comm="syz.6.2688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 924.648120][ T2163] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 924.942539][ T2163] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 924.974209][T16994] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 924.991578][T16994] __nla_validate_parse: 56 callbacks suppressed [ 924.991612][T16994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2689'. [ 925.330553][ T2163] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 925.342415][ T30] audit: type=1400 audit(1760215042.124:932): avc: denied { ioctl } for pid=16995 comm="syz.6.2691" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0xae8b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 925.344136][ T2163] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 925.405077][ T5944] hid_parser_main: 5 callbacks suppressed [ 925.405090][ T5944] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 925.544588][ T5944] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 926.137461][ T2163] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.318448][T16986] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 926.352965][ T2163] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 927.032564][ T2163] usb 9-1: USB disconnect, device number 9 [ 927.406688][T17020] random: crng reseeded on system resumption [ 927.442536][ T30] audit: type=1400 audit(1760215044.224:933): avc: denied { ioctl } for pid=17019 comm="syz.1.2697" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 928.426394][T17031] ptrace attach of "./syz-executor exec"[13681] was attempted by "./syz-executor exec"[17031] [ 928.452714][T17031] loop6: detected capacity change from 0 to 2560 [ 928.464308][T17031] buffer_io_error: 8 callbacks suppressed [ 928.464340][T17031] Buffer I/O error on dev loop6, logical block 0, async page read [ 928.484966][T17031] Buffer I/O error on dev loop6, logical block 0, async page read [ 928.500849][T17031] Buffer I/O error on dev loop6, logical block 0, async page read [ 929.347169][T17031] Buffer I/O error on dev loop6, logical block 0, async page read [ 929.358715][T17031] Buffer I/O error on dev loop6, logical block 0, async page read [ 929.390752][T17031] Buffer I/O error on dev loop6, logical block 0, async page read [ 929.401852][T17031] Buffer I/O error on dev loop6, logical block 0, async page read [ 929.410840][T17031] Buffer I/O error on dev loop6, logical block 0, async page read [ 929.420021][T17031] ldm_validate_partition_table(): Disk read failed. [ 929.429251][T17031] Buffer I/O error on dev loop6, logical block 0, async page read [ 929.439852][T17031] Buffer I/O error on dev loop6, logical block 0, async page read [ 929.522126][T17031] Dev loop6: unable to read RDB block 0 [ 929.530888][T17031] loop6: unable to read partition table [ 929.539072][T17031] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 930.183289][T17047] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 930.449012][T17054] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 930.460331][T17054] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2703'. [ 930.990263][T17063] random: crng reseeded on system resumption [ 930.997602][T17061] xt_connbytes: Forcing CT accounting to be enabled [ 931.011539][T17061] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 931.050211][T17063] input: syz1 as /devices/virtual/input/input53 [ 931.303451][T17076] ptrace attach of "./syz-executor exec"[13681] was attempted by "./syz-executor exec"[17076] [ 931.349412][T17076] loop6: detected capacity change from 0 to 2560 [ 931.367576][T17076] ldm_validate_partition_table(): Disk read failed. [ 931.381886][T17076] Dev loop6: unable to read RDB block 0 [ 931.393716][T17076] loop6: unable to read partition table [ 931.411183][ T5822] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 931.541002][T17076] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 931.731824][ T5822] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 931.754558][ T5822] usb 3-1: config 1 has no interface number 0 [ 931.792740][ T5822] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 931.855224][ T5822] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 931.909680][ T5822] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 931.959121][ T5822] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 932.044020][ T5822] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 932.072499][ T5822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.084535][ T5822] usb 3-1: Product: syz [ 932.089104][ T5822] usb 3-1: Manufacturer: syz [ 932.094193][ T5822] usb 3-1: SerialNumber: syz [ 932.113342][T17071] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 932.131223][T17071] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 932.526899][T17086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2717'. [ 933.044232][ T5822] usb 3-1: Error in usbnet_get_endpoints (-71) [ 933.062885][ T5822] usb 3-1: USB disconnect, device number 66 [ 933.436550][T17102] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 933.458696][T17102] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2720'. [ 934.733576][ T30] audit: type=1400 audit(1760215051.524:934): avc: denied { listen } for pid=17107 comm="syz.2.2723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 934.853816][T17125] ptrace attach of "./syz-executor exec"[7211] was attempted by "./syz-executor exec"[17125] [ 934.917400][T17125] loop6: detected capacity change from 0 to 2560 [ 934.928592][T17125] buffer_io_error: 27 callbacks suppressed [ 934.928621][T17125] Buffer I/O error on dev loop6, logical block 0, async page read [ 934.943348][T17125] Buffer I/O error on dev loop6, logical block 0, async page read [ 934.952098][T17125] Buffer I/O error on dev loop6, logical block 0, async page read [ 934.962239][T17125] Buffer I/O error on dev loop6, logical block 0, async page read [ 934.979919][T17125] Buffer I/O error on dev loop6, logical block 0, async page read [ 934.989501][ T30] audit: type=1326 audit(1760215051.784:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17107 comm="syz.2.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354e98eec9 code=0x7fc00000 [ 934.989707][T17125] Buffer I/O error on dev loop6, logical block 0, async page read [ 935.023443][T17125] Buffer I/O error on dev loop6, logical block 0, async page read [ 935.033098][T17125] Buffer I/O error on dev loop6, logical block 0, async page read [ 935.041624][T17125] ldm_validate_partition_table(): Disk read failed. [ 935.048507][T17125] Buffer I/O error on dev loop6, logical block 0, async page read [ 935.058501][T17125] Buffer I/O error on dev loop6, logical block 0, async page read [ 935.068007][T17125] Dev loop6: unable to read RDB block 0 [ 935.076204][T17125] loop6: unable to read partition table [ 935.082955][T17125] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 935.222033][ T30] audit: type=1326 audit(1760215051.804:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17107 comm="syz.2.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f354e98eec9 code=0x7fc00000 [ 935.268655][ T30] audit: type=1326 audit(1760215051.804:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17107 comm="syz.2.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354e98eec9 code=0x7fc00000 [ 935.360844][ T30] audit: type=1326 audit(1760215051.804:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17107 comm="syz.2.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354e98eec9 code=0x7fc00000 [ 935.385174][ T30] audit: type=1326 audit(1760215051.804:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17107 comm="syz.2.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354e98eec9 code=0x7fc00000 [ 935.412750][ T30] audit: type=1326 audit(1760215051.804:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17107 comm="syz.2.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354e98eec9 code=0x7fc00000 [ 935.614734][ T30] audit: type=1326 audit(1760215051.804:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17107 comm="syz.2.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354e98eec9 code=0x7fc00000 [ 935.639434][ T30] audit: type=1326 audit(1760215051.804:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17107 comm="syz.2.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354e98eec9 code=0x7fc00000 [ 935.670972][ T30] audit: type=1326 audit(1760215051.804:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17107 comm="syz.2.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354e98eec9 code=0x7fc00000 [ 935.751636][T17135] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 935.768828][T17135] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2728'. [ 936.133585][T17134] tipc: Started in network mode [ 936.138486][T17134] tipc: Node identity 6, cluster identity 4711 [ 936.161054][T17134] tipc: Node number set to 6 [ 937.603033][T17150] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.2731'. [ 937.719824][T17158] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2735'. [ 937.739788][T17150] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 937.746337][T17150] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 937.754923][T17150] vhci_hcd vhci_hcd.0: Device attached [ 937.941302][ T5944] vhci_hcd: vhci_device speed not set [ 938.020918][ T5944] usb 35-1: new full-speed USB device number 5 using vhci_hcd [ 938.229764][T17154] vhci_hcd: cannot find the pending unlink 45 [ 938.637779][T17173] Cannot find add_set index 4 as target [ 939.267918][T17154] vhci_hcd: connection reset by peer [ 939.353210][ T13] vhci_hcd: stop threads [ 939.377765][ T13] vhci_hcd: release socket [ 939.384576][ T13] vhci_hcd: disconnect device [ 939.502301][T17179] netlink: 17279 bytes leftover after parsing attributes in process `syz.6.2739'. [ 939.595747][T17179] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 939.602406][T17179] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 939.610574][T17179] vhci_hcd vhci_hcd.0: Device attached [ 939.910807][ T5899] vhci_hcd: vhci_device speed not set [ 939.980823][ T5899] usb 45-1: new full-speed USB device number 6 using vhci_hcd [ 940.111137][ T24] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 940.221607][T17180] vhci_hcd: connection closed [ 940.787314][ T62] vhci_hcd: stop threads [ 940.821701][ T62] vhci_hcd: release socket [ 940.831730][ T62] vhci_hcd: disconnect device [ 940.918837][T17198] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2744'. [ 940.950976][ T24] usb 2-1: device descriptor read/64, error -71 [ 941.391238][ T24] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 941.775882][T17206] /dev/nullb0: Can't open blockdev [ 941.788340][T17206] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2746'. [ 942.081292][T17208] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17208 comm=syz.8.2747 [ 942.120772][ T24] usb 2-1: device descriptor read/64, error -71 [ 942.254626][ T24] usb usb2-port1: attempt power cycle [ 942.910974][ T24] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 942.982592][ T24] usb 2-1: device descriptor read/8, error -71 [ 943.371206][ T5944] vhci_hcd: vhci_device speed not set [ 943.897947][T17242] netlink: 17279 bytes leftover after parsing attributes in process `syz.6.2756'. [ 944.086768][T17242] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 944.093400][T17242] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 944.136480][T17252] validate_nla: 56 callbacks suppressed [ 944.136497][T17252] netlink: 'syz.1.2757': attribute type 1 has an invalid length. [ 944.150456][T17252] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2757'. [ 944.454959][T17256] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 944.472658][T17256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2759'. [ 945.147840][T17242] vhci_hcd vhci_hcd.0: Device attached [ 945.149323][T17243] vhci_hcd: connection closed [ 945.153528][T17248] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 945.181721][T11728] vhci_hcd: stop threads [ 945.185983][T11728] vhci_hcd: release socket [ 945.214393][T11728] vhci_hcd: disconnect device [ 945.871142][T17272] FAULT_INJECTION: forcing a failure. [ 945.871142][T17272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 945.884785][T17272] CPU: 0 UID: 0 PID: 17272 Comm: syz.2.2764 Not tainted syzkaller #0 PREEMPT(full) [ 945.884811][T17272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 945.884821][T17272] Call Trace: [ 945.884826][T17272] [ 945.884831][T17272] dump_stack_lvl+0x16c/0x1f0 [ 945.884854][T17272] should_fail_ex+0x512/0x640 [ 945.884874][T17272] _copy_from_user+0x2e/0xd0 [ 945.884885][T17272] memdup_user+0x6b/0xe0 [ 945.884897][T17272] i2cdev_ioctl_rdwr+0x2de/0x710 [ 945.884915][T17272] i2cdev_ioctl+0x5ff/0x820 [ 945.884927][T17272] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 945.884940][T17272] ? selinux_file_ioctl+0x180/0x270 [ 945.884954][T17272] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 945.884967][T17272] __x64_sys_ioctl+0x18e/0x210 [ 945.884984][T17272] do_syscall_64+0xcd/0xfa0 [ 945.885002][T17272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.885014][T17272] RIP: 0033:0x7f354e98eec9 [ 945.885023][T17272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 945.885034][T17272] RSP: 002b:00007f354f77b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 945.885045][T17272] RAX: ffffffffffffffda RBX: 00007f354ebe6090 RCX: 00007f354e98eec9 [ 945.885053][T17272] RDX: 00002000000001c0 RSI: 0000000000000707 RDI: 0000000000000006 [ 945.885060][T17272] RBP: 00007f354f77b090 R08: 0000000000000000 R09: 0000000000000000 [ 945.885066][T17272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 945.885072][T17272] R13: 00007f354ebe6128 R14: 00007f354ebe6090 R15: 00007fffcfac1ec8 [ 945.885087][T17272] [ 946.048139][ T5899] vhci_hcd: vhci_device speed not set [ 946.481378][T17275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2763'. [ 946.549881][T17275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 946.557715][T17290] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 950.000855][ T2163] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 950.079428][T17327] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.2775'. [ 950.233739][T17327] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 950.240283][T17327] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 950.325304][ T2163] usb 9-1: config 1 has an invalid interface number: 7 but max is 0 [ 950.333565][T17327] vhci_hcd vhci_hcd.0: Device attached [ 950.340011][ T2163] usb 9-1: config 1 has no interface number 0 [ 950.363425][ T2163] usb 9-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 950.385305][ T2163] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 950.473524][T17328] vhci_hcd: connection closed [ 950.490731][ T2163] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 950.505268][ T1100] vhci_hcd: stop threads [ 950.510861][ T5944] vhci_hcd: vhci_device speed not set [ 950.512182][ T1100] vhci_hcd: release socket [ 950.522401][ T1100] vhci_hcd: disconnect device [ 950.535841][ T2163] usb 9-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 950.583308][ T2163] usb 9-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 950.585082][ T5944] usb 37-1: new full-speed USB device number 4 using vhci_hcd [ 950.593101][ T2163] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.609073][ T2163] usb 9-1: Product: syz [ 950.617903][ T5944] usb 37-1: enqueue for inactive port 0 [ 950.622728][ T2163] usb 9-1: Manufacturer: syz [ 950.638637][ T2163] usb 9-1: SerialNumber: syz [ 950.652042][T17321] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 950.659864][T17321] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 950.788299][ T5944] vhci_hcd: vhci_device speed not set [ 950.954763][T17344] CUSE: unknown device info "KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 950.966681][T17344] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 950.972790][T17344] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q ´ƒ [ 950.972790][T17344] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw— üæšxRÉQ÷®(hÒj pøVdY0¨Æ|M?2JÿúIšvö^RÎ@´å" [ 950.991959][T17344] CUSE: unknown device info "!ToÛ}Ý&|L+U²®oæõϲ±„Ð"–¨FstVµ:׌E• gJºî‹ÂÁ<@cÁ”²ûŽ4ÊTáM˜M|©·š‚ô" [ 951.003250][T17344] CUSE: DEVNAME unspecified [ 951.965587][T17354] overlay: Unknown parameter 'smackfsfloor' [ 952.611141][T17360] trusted_key: syz.1.2780 sent an empty control message without MSG_MORE. [ 953.919252][T17378] No control pipe specified [ 954.617588][T17385] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 954.625916][T17385] macsec1: entered promiscuous mode [ 954.637153][T17385] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 955.402163][ T2163] usb 9-1: Error in usbnet_get_endpoints (-71) [ 955.609898][ T2163] usb 9-1: USB disconnect, device number 10 [ 956.139988][T17403] CUSE: unknown device info "KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 956.151957][T17403] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 956.157834][T17403] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q ´ƒ [ 956.157834][T17403] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw— üæšxRÉQ÷®(hÒj pøVdY0¨Æ|M?2JÿúIšvö^RÎ@´å" [ 956.177167][T17403] CUSE: unknown device info "!ToÛ}Ý&|L+U²®oæõϲ±„Ð"–¨FstVµ:׌E• gJºî‹ÂÁ<@cÁ”²ûŽ4ÊTáM˜M|©·š‚ô" [ 956.188479][T17403] CUSE: DEVNAME unspecified [ 956.566760][ T5899] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 957.049736][ T5899] usb 7-1: Using ep0 maxpacket: 16 [ 957.067530][ T5899] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 957.104325][ T5899] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.114492][ T5899] usb 7-1: Product: syz [ 957.126714][ T5899] usb 7-1: Manufacturer: syz [ 957.150827][ T5899] usb 7-1: SerialNumber: syz [ 957.169751][ T5899] r8152-cfgselector 7-1: Unknown version 0x0000 [ 957.177263][ T5899] r8152-cfgselector 7-1: config 0 descriptor?? [ 957.831064][ T5824] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 957.899410][ T24] r8152-cfgselector 7-1: USB disconnect, device number 50 [ 958.890976][ T24] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 959.082550][ T24] usb 3-1: config 0 has no interfaces? [ 959.166634][ T24] usb 3-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 959.201875][T17438] netlink: 'syz.6.2799': attribute type 1 has an invalid length. [ 959.210183][T17438] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2799'. [ 959.307731][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 959.320605][ T24] usb 3-1: SerialNumber: syz [ 959.430204][ T24] usb 3-1: config 0 descriptor?? [ 960.514470][T17451] netlink: 17279 bytes leftover after parsing attributes in process `syz.6.2803'. [ 960.749584][T17456] FAULT_INJECTION: forcing a failure. [ 960.749584][T17456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 960.781457][T17451] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 960.788084][T17451] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 960.797175][T17451] vhci_hcd vhci_hcd.0: Device attached [ 960.807072][T17456] CPU: 0 UID: 0 PID: 17456 Comm: syz.8.2804 Not tainted syzkaller #0 PREEMPT(full) [ 960.807100][T17456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 960.807111][T17456] Call Trace: [ 960.807117][T17456] [ 960.807128][T17456] dump_stack_lvl+0x16c/0x1f0 [ 960.807166][T17456] should_fail_ex+0x512/0x640 [ 960.807196][T17456] _copy_to_user+0x32/0xd0 [ 960.807215][T17456] simple_read_from_buffer+0xcb/0x170 [ 960.807244][T17456] proc_fail_nth_read+0x197/0x240 [ 960.807264][T17456] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 960.807283][T17456] ? rw_verify_area+0xcf/0x6c0 [ 960.807307][T17456] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 960.807326][T17456] vfs_read+0x1e4/0xcf0 [ 960.807344][T17456] ? __pfx___mutex_lock+0x10/0x10 [ 960.807361][T17456] ? __pfx_vfs_read+0x10/0x10 [ 960.807393][T17456] ? __fget_files+0x20e/0x3c0 [ 960.807408][T17456] ? __x64_sys_mount+0x1c0/0x310 [ 960.807434][T17456] ksys_read+0x12a/0x250 [ 960.807449][T17456] ? __pfx_ksys_read+0x10/0x10 [ 960.807473][T17456] do_syscall_64+0xcd/0xfa0 [ 960.807501][T17456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.807519][T17456] RIP: 0033:0x7f4ca518d8dc [ 960.807533][T17456] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 960.807549][T17456] RSP: 002b:00007f4ca5f64030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 960.807567][T17456] RAX: ffffffffffffffda RBX: 00007f4ca53e5fa0 RCX: 00007f4ca518d8dc [ 960.807579][T17456] RDX: 000000000000000f RSI: 00007f4ca5f640a0 RDI: 0000000000000005 [ 960.807589][T17456] RBP: 00007f4ca5f64090 R08: 0000000000000000 R09: 0000000000000000 [ 960.807600][T17456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 960.807610][T17456] R13: 00007f4ca53e6038 R14: 00007f4ca53e5fa0 R15: 00007ffe4d5624a8 [ 960.807633][T17456] [ 961.129522][T17453] vhci_hcd: connection closed [ 961.134482][ T7187] vhci_hcd: stop threads [ 961.143496][ T7187] vhci_hcd: release socket [ 961.148070][ T7187] vhci_hcd: disconnect device [ 961.221695][ T24] vhci_hcd: vhci_device speed not set [ 961.466515][ T5944] usb 3-1: USB disconnect, device number 67 [ 961.905956][T17475] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2806'. [ 961.920316][T17478] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.2809'. [ 962.161245][T17478] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 962.167798][T17478] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 962.205408][T17478] vhci_hcd vhci_hcd.0: Device attached [ 962.209750][T17480] vhci_hcd: connection closed [ 962.218730][ T62] vhci_hcd: stop threads [ 962.218750][ T62] vhci_hcd: release socket [ 962.218761][ T62] vhci_hcd: disconnect device [ 962.344097][T17493] FAULT_INJECTION: forcing a failure. [ 962.344097][T17493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 962.344138][T17493] CPU: 0 UID: 0 PID: 17493 Comm: syz.6.2813 Not tainted syzkaller #0 PREEMPT(full) [ 962.344151][T17493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 962.344158][T17493] Call Trace: [ 962.344162][T17493] [ 962.344167][T17493] dump_stack_lvl+0x16c/0x1f0 [ 962.344188][T17493] should_fail_ex+0x512/0x640 [ 962.344208][T17493] _copy_to_user+0x32/0xd0 [ 962.344220][T17493] simple_read_from_buffer+0xcb/0x170 [ 962.344239][T17493] proc_fail_nth_read+0x197/0x240 [ 962.344252][T17493] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 962.344265][T17493] ? rw_verify_area+0xcf/0x6c0 [ 962.344281][T17493] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 962.344294][T17493] vfs_read+0x1e4/0xcf0 [ 962.344306][T17493] ? __pfx___mutex_lock+0x10/0x10 [ 962.344317][T17493] ? __pfx_vfs_read+0x10/0x10 [ 962.344337][T17493] ? __fget_files+0x20e/0x3c0 [ 962.344352][T17493] ksys_read+0x12a/0x250 [ 962.344362][T17493] ? __pfx_ksys_read+0x10/0x10 [ 962.344376][T17493] do_syscall_64+0xcd/0xfa0 [ 962.344394][T17493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.344406][T17493] RIP: 0033:0x7f721fd8d8dc [ 962.344415][T17493] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 962.344425][T17493] RSP: 002b:00007f7220c61030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 962.344436][T17493] RAX: ffffffffffffffda RBX: 00007f721ffe5fa0 RCX: 00007f721fd8d8dc [ 962.344443][T17493] RDX: 000000000000000f RSI: 00007f7220c610a0 RDI: 0000000000000004 [ 962.344450][T17493] RBP: 00007f7220c61090 R08: 0000000000000000 R09: 0000000000000000 [ 962.344456][T17493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 962.344463][T17493] R13: 00007f721ffe6038 R14: 00007f721ffe5fa0 R15: 00007fff0fc17718 [ 962.344478][T17493] [ 962.481266][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 962.481284][ T30] audit: type=1400 audit(1760215079.234:1004): avc: denied { listen } for pid=17494 comm="syz.6.2814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 965.118304][ T30] audit: type=1400 audit(1760215081.724:1005): avc: denied { ioctl } for pid=17507 comm="syz.2.2817" path="socket:[55593]" dev="sockfs" ino=55593 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 965.379338][ C1] vkms_vblank_simulate: vblank timer overrun [ 965.379671][ T5885] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 965.534033][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 965.535734][ T5885] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 965.535760][ T5885] usb 3-1: config 0 has no interface number 0 [ 965.537832][ T5885] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 965.537858][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.537876][ T5885] usb 3-1: Product: syz [ 965.537890][ T5885] usb 3-1: Manufacturer: syz [ 965.537905][ T5885] usb 3-1: SerialNumber: syz [ 965.543943][ T5885] usb 3-1: config 0 descriptor?? [ 965.546225][ T5885] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 965.644904][ C1] vkms_vblank_simulate: vblank timer overrun [ 966.010407][T17520] tipc: New replicast peer: 0.0.0.0 [ 966.013072][T17520] tipc: Enabled bearer , priority 10 [ 966.021407][T17520] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2819'. [ 966.021521][T17520] tipc: Disabling bearer [ 966.030138][T17520] netem: change failed [ 966.317681][ T5885] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 966.322029][ T5885] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 966.603389][T17516] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2820'. [ 967.234573][ T30] audit: type=1400 audit(1760215084.024:1006): avc: denied { unmount } for pid=7211 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 967.372274][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 967.381194][ T5885] usb 3-1: USB disconnect, device number 68 [ 967.391436][ T5885] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 967.393389][ T5885] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 967.393866][ T5885] quatech2 3-1:0.51: device disconnected [ 967.409147][T17531] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2822'. [ 967.870557][T17514] tty tty1: ldisc open failed (-12), clearing slot 0 [ 968.310740][ T5885] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 968.331696][T17551] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 968.348752][T17551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2826'. [ 968.515814][ T5885] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 968.683861][ T5885] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 968.714918][ T5885] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.749155][ T5885] usb 7-1: config 0 descriptor?? [ 968.764701][ T5885] pwc: Askey VC010 type 2 USB webcam detected. [ 969.194612][T17559] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 969.547698][ T5885] pwc: recv_control_msg error -32 req 02 val 2700 [ 969.612714][T17569] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 969.634414][T17569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2831'. [ 970.234311][ T5885] pwc: recv_control_msg error -32 req 02 val 2c00 [ 970.375988][ T5885] pwc: recv_control_msg error -32 req 04 val 1000 [ 970.427001][ T5885] pwc: recv_control_msg error -32 req 04 val 1300 [ 970.436992][ T5885] pwc: recv_control_msg error -32 req 04 val 1400 [ 970.460517][ T5885] pwc: recv_control_msg error -32 req 02 val 2000 [ 970.471644][ T5885] pwc: recv_control_msg error -32 req 02 val 2100 [ 970.488433][ T5885] pwc: recv_control_msg error -32 req 04 val 1500 [ 970.503389][ T5885] pwc: recv_control_msg error -32 req 02 val 2500 [ 970.514136][ T5885] pwc: recv_control_msg error -32 req 02 val 2400 [ 970.543654][T17572] [U] [ 970.546613][T17572] [U] [ 970.549279][T17572] [U] [ 970.552025][T17572] [U] [ 970.601311][T17572] [U] [ 970.604007][T17572] [U] [ 970.606665][T17572] [U] [ 970.609319][T17572] [U] [ 970.671084][T17572] [U] [ 970.673794][T17572] [U] [ 970.676463][T17572] [U] [ 970.727223][ T5885] pwc: recv_control_msg error -32 req 02 val 2900 [ 970.769203][T17571] [U] [ 970.938334][ T5885] pwc: recv_control_msg error -71 req 04 val 1100 [ 970.947350][ T5885] pwc: recv_control_msg error -71 req 04 val 1200 [ 970.971288][ T5885] pwc: Registered as video103. [ 970.991016][ T5885] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input55 [ 971.087058][ T5885] usb 7-1: USB disconnect, device number 51 [ 971.124182][T17583] input: syz0 as /devices/virtual/input/input56 [ 971.491688][ T2163] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 971.554495][T17580] netlink: 10 bytes leftover after parsing attributes in process `syz.8.2833'. [ 971.665759][ T2163] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 971.676905][ T2163] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 971.690690][ T2163] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 971.716598][ T2163] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.724774][ T5899] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 971.785769][T17584] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 971.797162][ T2163] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 971.920819][ T5899] usb 3-1: Using ep0 maxpacket: 16 [ 971.932197][ T5899] usb 3-1: config 0 has an invalid interface number: 203 but max is 0 [ 971.943647][ T5899] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 971.981869][ T5899] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 972.047539][ T5899] usb 3-1: config 0 has no interface number 0 [ 972.389248][ T5899] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a5e, bcdDevice=33.6d [ 972.421007][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.596268][ T5899] usb 3-1: Product: syz [ 972.606286][ T5899] usb 3-1: Manufacturer: syz [ 972.612800][ T5899] usb 3-1: SerialNumber: syz [ 972.631421][ T5899] usb 3-1: config 0 descriptor?? [ 972.713658][T17603] lo speed is unknown, defaulting to 1000 [ 972.722402][T17603] lo speed is unknown, defaulting to 1000 [ 973.098536][ T5899] usb 3-1: USB disconnect, device number 69 [ 973.110949][T17605] ptrace attach of "./syz-executor exec"[13681] was attempted by "./syz-executor exec"[17605] [ 973.123005][T17605] loop6: detected capacity change from 0 to 2560 [ 973.129641][T17605] buffer_io_error: 11 callbacks suppressed [ 973.129652][T17605] Buffer I/O error on dev loop6, logical block 0, async page read [ 973.143348][T17605] Buffer I/O error on dev loop6, logical block 0, async page read [ 973.151309][T17605] Buffer I/O error on dev loop6, logical block 0, async page read [ 973.159138][T17605] Buffer I/O error on dev loop6, logical block 0, async page read [ 973.167006][T17605] Buffer I/O error on dev loop6, logical block 0, async page read [ 973.174970][T17605] Buffer I/O error on dev loop6, logical block 0, async page read [ 973.182851][T17605] Buffer I/O error on dev loop6, logical block 0, async page read [ 973.190730][T17605] Buffer I/O error on dev loop6, logical block 0, async page read [ 973.198536][T17605] ldm_validate_partition_table(): Disk read failed. [ 973.205173][T17605] Buffer I/O error on dev loop6, logical block 0, async page read [ 973.213047][T17605] Buffer I/O error on dev loop6, logical block 0, async page read [ 973.220993][T17605] Dev loop6: unable to read RDB block 0 [ 973.226754][T17605] loop6: unable to read partition table [ 973.232507][T17605] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 973.374829][T17611] ptrace attach of "./syz-executor exec"[7211] was attempted by "./syz-executor exec"[17611] [ 973.530841][T17611] loop6: detected capacity change from 0 to 2560 [ 973.538159][T17611] ldm_validate_partition_table(): Disk read failed. [ 973.575300][T17611] Dev loop6: unable to read RDB block 0 [ 973.582111][T17611] loop6: unable to read partition table [ 973.600941][T17611] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 973.727920][ T5885] usb 2-1: USB disconnect, device number 78 [ 974.202255][T17621] netlink: 'syz.6.2842': attribute type 1 has an invalid length. [ 975.443982][ T2163] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 975.600771][ T2163] usb 3-1: Using ep0 maxpacket: 16 [ 975.612295][ T2163] usb 3-1: config 0 has an invalid interface number: 158 but max is 0 [ 975.641639][ T2163] usb 3-1: config 0 has no interface number 0 [ 975.665291][ T2163] usb 3-1: New USB device found, idVendor=05ac, idProduct=e535, bcdDevice=e8.73 [ 975.676827][ T2163] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.737943][ T2163] usb 3-1: Product: syz [ 975.770299][ T2163] usb 3-1: Manufacturer: syz [ 975.925439][T17653] sp0: Synchronizing with TNC [ 976.109574][ T2163] usb 3-1: SerialNumber: syz [ 976.155067][ T2163] usb 3-1: config 0 descriptor?? [ 976.218031][ T2163] ipheth 3-1:0.158: Unable to find alternate settings interface [ 976.609991][ T2163] usb 3-1: USB disconnect, device number 70 [ 976.658457][T17650] [U] è`` [ 979.082684][T17681] ªªªªªª: renamed from wg2 (while UP) [ 979.247785][T17687] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2859'. [ 980.195740][T17697] netlink: 17279 bytes leftover after parsing attributes in process `syz.6.2863'. [ 980.330935][T17697] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 980.337479][T17697] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 980.350796][T17697] vhci_hcd vhci_hcd.0: Device attached [ 980.610741][ T5899] vhci_hcd: vhci_device speed not set [ 980.680822][ T5899] usb 45-1: new full-speed USB device number 8 using vhci_hcd [ 980.712431][T17698] vhci_hcd: connection reset by peer [ 980.717991][ T7189] vhci_hcd: stop threads [ 980.722444][ T7189] vhci_hcd: release socket [ 980.741217][ T7189] vhci_hcd: disconnect device [ 980.860759][T13946] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 981.766555][T13946] usb 9-1: device descriptor read/64, error -71 [ 982.164364][T13946] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 982.233268][ T30] audit: type=1326 audit(1760215099.024:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17717 comm="syz.6.2869" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f721fd8eec9 code=0x7ff70000 [ 982.320791][T13946] usb 9-1: device descriptor read/64, error -71 [ 982.431196][T13946] usb usb9-port1: attempt power cycle [ 982.780739][T13946] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 982.801722][T13946] usb 9-1: device descriptor read/8, error -71 [ 983.040800][T13946] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 983.071364][ T2163] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 983.072969][T13946] usb 9-1: device descriptor read/8, error -71 [ 983.201710][T13946] usb usb9-port1: unable to enumerate USB device [ 983.220702][ T2163] usb 2-1: Using ep0 maxpacket: 32 [ 983.227067][ T2163] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 983.238943][ T2163] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 983.248094][ T2163] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.256320][ T2163] usb 2-1: Product: syz [ 983.260532][ T2163] usb 2-1: Manufacturer: syz [ 983.265369][ T2163] usb 2-1: SerialNumber: syz [ 983.324827][ T2163] usb 2-1: config 0 descriptor?? [ 983.370266][ T2163] usb 2-1: bad CDC descriptors [ 983.388340][ T2163] usb 2-1: unsupported MDLM descriptors [ 983.684937][T17721] vlan2: entered promiscuous mode [ 983.690161][T17721] vlan2: entered allmulticast mode [ 983.695421][T17721] hsr_slave_1: entered allmulticast mode [ 983.707760][ T2163] usb 2-1: USB disconnect, device number 79 [ 983.740758][ T24] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 983.890742][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 983.897620][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 983.909063][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 983.919626][ T24] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 983.929447][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.042335][ T24] usb 3-1: config 0 descriptor?? [ 984.295473][ T30] audit: type=1400 audit(1760215101.074:1008): avc: denied { accept } for pid=17734 comm="syz.6.2874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 984.537467][ T24] ft260 0003:0403:6030.0019: unbalanced delimiter at end of report description [ 984.564992][ T24] ft260 0003:0403:6030.0019: failed to parse HID [ 984.598747][ T24] ft260 0003:0403:6030.0019: probe with driver ft260 failed with error -22 [ 984.884050][ T2163] usb 3-1: USB disconnect, device number 71 [ 985.150815][ T10] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 985.793702][ T5899] vhci_hcd: vhci_device speed not set [ 985.941014][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 985.948127][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 985.960958][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 986.421510][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 986.440696][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 986.459082][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 986.477716][T17759] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 986.480687][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.484252][T17759] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 986.508529][T17759] vhci_hcd vhci_hcd.0: Device attached [ 986.603618][T17764] vhci_hcd: connection closed [ 986.603978][ T1100] vhci_hcd: stop threads [ 986.622227][ T1100] vhci_hcd: release socket [ 986.630129][ T1100] vhci_hcd: disconnect device [ 986.730212][ T10] usb 2-1: GET_CAPABILITIES returned 0 [ 986.735861][ T10] usbtmc 2-1:16.0: can't read capabilities [ 986.880857][ T24] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 987.010996][ T24] usb 3-1: device descriptor read/64, error -71 [ 987.271812][ T24] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 987.517912][T17785] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 987.520746][ T24] usb 3-1: device descriptor read/64, error -71 [ 987.651664][ T24] usb usb3-port1: attempt power cycle [ 988.070667][T17801] CIFS mount error: No usable UNC path provided in device string! [ 988.070667][T17801] [ 988.080734][T17801] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 988.403865][ T24] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 988.425673][ T30] audit: type=1326 audit(1760215105.134:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17796 comm="syz.4.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf34d8eec9 code=0x7ffc0000 [ 988.452778][ T24] usb 3-1: device descriptor read/8, error -71 [ 988.473781][ T30] audit: type=1326 audit(1760215105.134:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17796 comm="syz.4.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf34d8eec9 code=0x7ffc0000 [ 988.497270][ C1] vkms_vblank_simulate: vblank timer overrun [ 988.517868][ T30] audit: type=1326 audit(1760215105.134:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17796 comm="syz.4.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf34d8eec9 code=0x7ffc0000 [ 988.532040][T17806] ptrace attach of "./syz-executor exec"[13681] was attempted by "./syz-executor exec"[17806] [ 988.546891][ T30] audit: type=1326 audit(1760215105.134:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17796 comm="syz.4.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf34d8eec9 code=0x7ffc0000 [ 988.753276][ T24] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 988.895732][ T24] usb 3-1: device descriptor read/8, error -71 [ 988.925321][ T5899] usb 2-1: USB disconnect, device number 80 [ 988.931666][ T30] audit: type=1326 audit(1760215105.134:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17796 comm="syz.4.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fbf34d8eec9 code=0x7ffc0000 [ 988.956720][ T30] audit: type=1326 audit(1760215105.134:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17796 comm="syz.4.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf34d8eec9 code=0x7ffc0000 [ 988.980180][ C1] vkms_vblank_simulate: vblank timer overrun [ 988.994729][ T30] audit: type=1326 audit(1760215105.144:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17796 comm="syz.4.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf34d8eec9 code=0x7ffc0000 [ 989.021910][ T24] usb usb3-port1: unable to enumerate USB device [ 989.030018][ T30] audit: type=1326 audit(1760215105.144:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17796 comm="syz.4.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf34dc1785 code=0x7ffc0000 [ 989.150839][ T30] audit: type=1326 audit(1760215105.144:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17796 comm="syz.4.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf34dc1785 code=0x7ffc0000 [ 989.368250][ T30] audit: type=1326 audit(1760215105.144:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17796 comm="syz.4.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf34dc1785 code=0x7ffc0000 [ 990.720919][ T10] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 991.064751][ T10] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 991.086973][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.129476][ T10] usb 3-1: config 0 descriptor?? [ 991.344937][ T10] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 991.547244][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 991.592140][ T10] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 991.599177][ T10] [drm] Initialized udl on minor 2 [ 991.608630][ T10] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 991.706469][ T10] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 991.720347][ T5899] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 991.732984][ T10] usb 3-1: USB disconnect, device number 76 [ 991.740442][ T5899] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 992.620894][ T5944] usb 7-1: new full-speed USB device number 52 using dummy_hcd [ 992.801951][ T5944] usb 7-1: device descriptor read/64, error -71 [ 993.032105][ T24] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 993.142305][ T5944] usb 7-1: new full-speed USB device number 53 using dummy_hcd [ 993.153827][T17856] ptrace attach of "./syz-executor exec"[5813] was attempted by "./syz-executor exec"[17856] [ 993.224430][ T24] usb 2-1: device descriptor read/64, error -71 [ 993.281550][ T5944] usb 7-1: device descriptor read/64, error -71 [ 993.460153][ T5944] usb usb7-port1: attempt power cycle [ 993.480808][ T24] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 993.611067][ T24] usb 2-1: device descriptor read/64, error -71 [ 993.769131][ T24] usb usb2-port1: attempt power cycle [ 993.988847][ T5944] usb 7-1: new full-speed USB device number 54 using dummy_hcd [ 994.070416][ T5944] usb 7-1: device descriptor read/8, error -71 [ 994.280707][T13946] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 994.310769][ T24] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 994.318460][ T5944] usb 7-1: new full-speed USB device number 55 using dummy_hcd [ 994.341535][ T24] usb 2-1: device descriptor read/8, error -71 [ 994.358458][ T5944] usb 7-1: device descriptor read/8, error -71 [ 994.493820][T13946] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 994.511228][ T5944] usb usb7-port1: unable to enumerate USB device [ 994.527811][T13946] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 994.558322][T13946] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.571635][T13946] usb 9-1: config 0 descriptor?? [ 994.600944][ T24] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 994.621443][ T24] usb 2-1: device descriptor read/8, error -71 [ 994.674333][T13946] pwc: Askey VC010 type 2 USB webcam detected. [ 994.732132][ T24] usb usb2-port1: unable to enumerate USB device [ 994.773665][T17875] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.2909'. [ 994.802406][T17872] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 994.809016][T17872] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 994.816747][T17872] vhci_hcd vhci_hcd.0: Device attached [ 994.828688][T17876] vhci_hcd: cannot find the pending unlink 45 [ 994.900267][T17876] vhci_hcd: connection closed [ 994.900463][ T7187] vhci_hcd: stop threads [ 994.912432][ T7187] vhci_hcd: release socket [ 994.919751][ T7187] vhci_hcd: disconnect device [ 995.430593][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 995.430610][ T30] audit: type=1400 audit(1760215112.214:1084): avc: denied { getopt } for pid=17880 comm="syz.6.2910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 995.517601][ T30] audit: type=1400 audit(1760215112.304:1085): avc: denied { setattr } for pid=17880 comm="syz.6.2910" name="SCTPv6" dev="sockfs" ino=56862 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 995.549457][ T30] audit: type=1400 audit(1760215112.304:1086): avc: denied { bind } for pid=17880 comm="syz.6.2910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 995.717658][T17889] gretap1: entered promiscuous mode [ 995.801932][T17892] ptrace attach of "./syz-executor exec"[5810] was attempted by "./syz-executor exec"[17892] [ 996.401807][T17898] raw_sendmsg: syz.2.2915 forgot to set AF_INET. Fix it! [ 996.410952][ T30] audit: type=1400 audit(1760215113.204:1087): avc: denied { read } for pid=17897 comm="syz.2.2915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 997.151118][T13946] pwc: send_video_command error -71 [ 997.177814][T13946] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 997.215021][T13946] Philips webcam 9-1:0.0: probe with driver Philips webcam failed with error -71 [ 997.249893][T13946] usb 9-1: USB disconnect, device number 15 [ 998.364591][ T30] audit: type=1326 audit(1760215114.984:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17916 comm="syz.4.2920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf34d8eec9 code=0x7ffc0000 [ 998.390433][ T30] audit: type=1326 audit(1760215114.984:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17916 comm="syz.4.2920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fbf34d8eec9 code=0x7ffc0000 [ 998.413954][ C1] vkms_vblank_simulate: vblank timer overrun [ 998.427461][ T30] audit: type=1326 audit(1760215114.984:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17916 comm="syz.4.2920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf34d8eec9 code=0x7ffc0000 [ 998.450942][ C1] vkms_vblank_simulate: vblank timer overrun [ 998.458596][ T30] audit: type=1326 audit(1760215114.984:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17916 comm="syz.4.2920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7fbf34d8eec9 code=0x7ffc0000 [ 998.482000][ C1] vkms_vblank_simulate: vblank timer overrun [ 998.488878][ T30] audit: type=1326 audit(1760215114.984:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17916 comm="syz.4.2920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf34d8eec9 code=0x7ffc0000 [ 998.514329][T17921] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 998.514376][ C1] vkms_vblank_simulate: vblank timer overrun [ 998.531320][ T30] audit: type=1326 audit(1760215114.984:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17916 comm="syz.4.2920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fbf34d8eec9 code=0x7ffc0000 [ 999.671023][ T24] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 999.675924][T17942] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.2926'. [ 999.726685][T17942] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 999.733657][T17942] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 999.743208][T17942] vhci_hcd vhci_hcd.0: Device attached [ 999.831512][T17943] vhci_hcd: cannot find the pending unlink 45 [ 999.910799][ T24] usb 7-1: device descriptor read/64, error -71 [ 1000.043277][T17950] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 1000.049986][T17950] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1000.057795][T17950] vhci_hcd vhci_hcd.0: Device attached [ 1000.105011][ T10] vhci_hcd: vhci_device speed not set [ 1000.160963][ T24] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1000.243196][ T10] usb 37-1: new full-speed USB device number 5 using vhci_hcd [ 1000.253360][T17955] Device name cannot be null; rc = [-22] [ 1000.311019][ T24] usb 7-1: device descriptor read/64, error -71 [ 1000.351047][ T5944] usb 42-1: SetAddress Request (6) to port 0 [ 1000.357560][ T5944] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1000.370754][T17943] vhci_hcd: connection closed [ 1000.373287][ T62] vhci_hcd: stop threads [ 1000.424725][ T62] vhci_hcd: release socket [ 1000.429318][ T62] vhci_hcd: disconnect device [ 1000.434683][ T24] usb usb7-port1: attempt power cycle [ 1000.780886][ T24] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1000.801554][ T24] usb 7-1: device descriptor read/8, error -71 [ 1000.862971][T17952] vhci_hcd: connection reset by peer [ 1000.868545][ T13] vhci_hcd: stop threads [ 1000.873031][ T13] vhci_hcd: release socket [ 1000.877580][ T13] vhci_hcd: disconnect device [ 1000.993049][T17967] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1001.000722][T17967] UDF-fs: Scanning with blocksize 512 failed [ 1001.007161][T17967] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1001.015488][T17967] UDF-fs: Scanning with blocksize 1024 failed [ 1001.023027][T17967] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1001.032496][T17967] UDF-fs: Scanning with blocksize 2048 failed [ 1001.038906][T17967] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1001.041006][ T24] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1001.047889][T17967] UDF-fs: Scanning with blocksize 4096 failed [ 1001.063960][T17967] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2930'. [ 1001.073537][ T24] usb 7-1: device descriptor read/8, error -71 [ 1001.182715][ T24] usb usb7-port1: unable to enumerate USB device [ 1003.202581][T18002] syzkaller1: entered promiscuous mode [ 1003.208234][T18002] syzkaller1: entered allmulticast mode [ 1005.488334][ T5944] usb 42-1: device descriptor read/8, error -110 [ 1005.521212][T18006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2941'. [ 1005.540740][ T10] vhci_hcd: vhci_device speed not set [ 1005.906800][ T5944] usb usb42-port1: attempt power cycle [ 1005.957365][T18020] netlink: 'syz.2.2945': attribute type 3 has an invalid length. [ 1005.967437][T18020] netlink: 187368 bytes leftover after parsing attributes in process `syz.2.2945'. [ 1006.430961][T13946] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1006.964113][ T5944] usb usb42-port1: unable to enumerate USB device [ 1007.041352][T13946] usb 2-1: device descriptor read/64, error -71 [ 1007.069403][T18032] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2949'. [ 1007.321287][T13946] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1007.437442][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1007.437485][ T30] audit: type=1400 audit(1760215124.214:1102): avc: denied { ioctl } for pid=18025 comm="syz.1.2947" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1007.575658][T18044] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1007.587171][T18044] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2946'. [ 1007.601217][T13946] usb 2-1: device descriptor read/64, error -71 [ 1007.723542][T13946] usb usb2-port1: attempt power cycle [ 1008.350332][ T30] audit: type=1400 audit(1760215124.224:1103): avc: denied { create } for pid=18036 comm="syz.6.2950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1008.446724][ T30] audit: type=1400 audit(1760215124.234:1104): avc: denied { prog_load } for pid=18036 comm="syz.6.2950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1008.466973][ T30] audit: type=1400 audit(1760215124.234:1105): avc: denied { bpf } for pid=18036 comm="syz.6.2950" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1008.500951][ T30] audit: type=1400 audit(1760215124.234:1106): avc: denied { perfmon } for pid=18036 comm="syz.6.2950" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1008.538977][ T30] audit: type=1400 audit(1760215124.234:1107): avc: denied { create } for pid=18036 comm="syz.6.2950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1008.594482][ T30] audit: type=1400 audit(1760215124.234:1108): avc: denied { module_request } for pid=18036 comm="syz.6.2950" kmod="net-pf-2-proto-0-type-3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1008.761360][T13946] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1008.762316][ T30] audit: type=1400 audit(1760215124.304:1109): avc: denied { sys_module } for pid=18031 comm="syz.2.2949" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1008.790069][ C0] vkms_vblank_simulate: vblank timer overrun [ 1008.796807][ T30] audit: type=1400 audit(1760215124.364:1110): avc: denied { create } for pid=18023 comm="syz.8.2946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1008.816356][ T30] audit: type=1400 audit(1760215124.364:1111): avc: denied { getopt } for pid=18023 comm="syz.8.2946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1008.857674][T13946] usb 2-1: device descriptor read/8, error -71 [ 1009.352378][T13946] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1009.390512][T18058] netlink: 17279 bytes leftover after parsing attributes in process `syz.6.2951'. [ 1009.444615][T18058] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 1009.451153][T18058] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1009.463595][T18058] vhci_hcd vhci_hcd.0: Device attached [ 1009.464563][T18061] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1009.581821][T13946] usb 2-1: device not accepting address 88, error -71 [ 1009.608535][T13946] usb usb2-port1: unable to enumerate USB device [ 1009.660951][ T5944] vhci_hcd: vhci_device speed not set [ 1010.023532][T18062] vhci_hcd: connection closed [ 1010.040772][ T8133] vhci_hcd: stop threads [ 1010.091015][ T8133] vhci_hcd: release socket [ 1010.100744][ T8133] vhci_hcd: disconnect device [ 1010.108397][ T5944] usb 45-1: new full-speed USB device number 9 using vhci_hcd [ 1010.125937][ T5944] usb 45-1: enqueue for inactive port 0 [ 1010.211314][ T5944] vhci_hcd: vhci_device speed not set [ 1011.571955][T12262] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1011.665269][T18094] block nbd8: not configured, cannot reconfigure [ 1011.711127][T12262] usb 3-1: device descriptor read/64, error -71 [ 1012.211044][T12262] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1012.223532][T18103] ptrace attach of "./syz-executor exec"[13681] was attempted by "./syz-executor exec"[18103] [ 1012.430821][T12262] usb 3-1: device descriptor read/64, error -71 [ 1012.553623][T12262] usb usb3-port1: attempt power cycle [ 1012.692371][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 1012.692388][ T30] audit: type=1400 audit(1760215129.484:1171): avc: denied { create } for pid=18104 comm="syz.4.2964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1013.032740][ T30] audit: type=1400 audit(1760215129.824:1172): avc: denied { ioctl } for pid=18107 comm="syz.2.2965" path="ipc:[4026532943]" dev="nsfs" ino=4026532943 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1013.200004][ T30] audit: type=1400 audit(1760215129.874:1173): avc: denied { bind } for pid=18107 comm="syz.2.2965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1013.279600][ T30] audit: type=1400 audit(1760215129.874:1174): avc: denied { name_bind } for pid=18107 comm="syz.2.2965" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1013.312106][ T30] audit: type=1400 audit(1760215129.874:1175): avc: denied { node_bind } for pid=18107 comm="syz.2.2965" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1013.335129][ T30] audit: type=1400 audit(1760215129.894:1176): avc: denied { setopt } for pid=18107 comm="syz.2.2965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1013.355739][ T30] audit: type=1400 audit(1760215129.904:1177): avc: denied { create } for pid=18109 comm="syz.6.2966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1013.438564][ T30] audit: type=1400 audit(1760215129.904:1178): avc: denied { getopt } for pid=18109 comm="syz.6.2966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1013.668444][ T30] audit: type=1400 audit(1760215129.984:1179): avc: denied { write } for pid=18112 comm="syz.6.2967" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1013.691271][ C0] vkms_vblank_simulate: vblank timer overrun [ 1014.202054][ T30] audit: type=1400 audit(1760215130.014:1180): avc: denied { create } for pid=18107 comm="syz.2.2965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1014.222315][ C0] vkms_vblank_simulate: vblank timer overrun [ 1017.660787][ T24] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1017.821505][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 1018.691132][ T24] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1018.700210][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.728695][ T24] usb 2-1: Product: syz [ 1018.738981][ T24] usb 2-1: Manufacturer: syz [ 1018.777358][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1018.777373][ T30] audit: type=1400 audit(1760215135.564:1188): avc: denied { create } for pid=18152 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1018.779292][ T24] usb 2-1: SerialNumber: syz [ 1018.787233][ T30] audit: type=1400 audit(1760215135.574:1189): avc: denied { ioctl } for pid=18152 comm="syz-executor" path="socket:[57973]" dev="sockfs" ino=57973 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1018.841540][T15386] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1018.878741][T15386] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1018.887610][T15386] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1018.897550][T15386] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1018.906777][T15386] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1018.934114][ T24] usb 2-1: config 0 descriptor?? [ 1018.959923][ T30] audit: type=1400 audit(1760215135.734:1190): avc: denied { mounton } for pid=18152 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1018.993447][T13343] : (slave syz_tun): Releasing backup interface [ 1018.993565][ T24] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1019.037150][T18152] lo speed is unknown, defaulting to 1000 [ 1019.044418][T18152] lo speed is unknown, defaulting to 1000 [ 1019.448011][T18164] ptrace attach of "./syz-executor exec"[7211] was attempted by "./syz-executor exec"[18164] [ 1020.132266][T18152] chnl_net:caif_netlink_parms(): no params data found [ 1020.380877][ T24] gspca_sq930x: reg_w 0105 0c00 failed -71 [ 1020.473194][T18152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.484351][T18152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.492599][T18152] bridge_slave_0: entered allmulticast mode [ 1020.511029][T18152] bridge_slave_0: entered promiscuous mode [ 1020.523342][T18152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.534631][T18152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.550962][T18152] bridge_slave_1: entered allmulticast mode [ 1020.570238][T18152] bridge_slave_1: entered promiscuous mode [ 1020.581209][ T30] audit: type=1400 audit(1760215137.374:1191): avc: denied { create } for pid=18173 comm="syz.2.2983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1020.602412][ T24] gspca_sq930x: Sensor ov9630 not yet treated [ 1020.608561][ T24] sq930x 2-1:0.0: probe with driver sq930x failed with error -22 [ 1020.645363][ T30] audit: type=1400 audit(1760215137.414:1192): avc: denied { write } for pid=18173 comm="syz.2.2983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1020.646829][ T24] usb 2-1: USB disconnect, device number 89 [ 1020.689391][ T30] audit: type=1400 audit(1760215137.434:1193): avc: denied { bind } for pid=18176 comm="syz.6.2984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1020.734268][T18152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1020.757157][ T30] audit: type=1400 audit(1760215137.434:1194): avc: denied { name_bind } for pid=18176 comm="syz.6.2984" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1020.803007][T18152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1020.831038][ T30] audit: type=1400 audit(1760215137.434:1195): avc: denied { node_bind } for pid=18176 comm="syz.6.2984" saddr=ff01::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1020.912197][T18152] team0: Port device team_slave_0 added [ 1020.919416][T18152] team0: Port device team_slave_1 added [ 1020.990839][T15386] Bluetooth: hci3: command tx timeout [ 1021.026507][T18152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1021.040572][T18152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1021.058236][T18186] overlayfs: failed to resolve '/ÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿ [ 1021.067034][ T30] audit: type=1400 audit(1760215137.834:1196): avc: denied { mounton } for pid=18185 comm="syz.1.2986" path="/592/file0" dev="tmpfs" ino=3123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1021.181802][T18152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1021.211334][T18152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1021.219592][T18152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1021.246386][T18152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1021.320399][T18189] netlink: 'syz.1.2986': attribute type 4 has an invalid length. [ 1021.320816][ T30] audit: type=1400 audit(1760215137.834:1197): avc: denied { mount } for pid=18185 comm="syz.1.2986" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1021.560287][T18152] hsr_slave_0: entered promiscuous mode [ 1021.572725][T18152] hsr_slave_1: entered promiscuous mode [ 1021.594621][T18191] netlink: 'syz.1.2986': attribute type 4 has an invalid length. [ 1021.605407][T18152] debugfs: 'hsr0' already exists in 'hsr' [ 1021.633073][T18152] Cannot create hsr debugfs directory [ 1021.835127][T18199] wireguard0: entered promiscuous mode [ 1021.850883][T18199] wireguard0: entered allmulticast mode [ 1022.290787][ T24] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1022.715234][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 1022.736315][ T24] usb 7-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1022.748080][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.769010][ T24] usb 7-1: Product: syz [ 1022.796743][ T24] usb 7-1: Manufacturer: syz [ 1022.822759][ T24] usb 7-1: SerialNumber: syz [ 1022.868729][ T24] usb 7-1: config 0 descriptor?? [ 1022.928614][ T24] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1022.991190][T12262] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1023.071063][T15386] Bluetooth: hci3: command tx timeout [ 1023.143379][T18152] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.651307][T12262] usb 2-1: Using ep0 maxpacket: 32 [ 1023.668465][ T24] gspca_sq930x: ucbus_write failed -110 [ 1023.672913][T12262] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1023.688588][T12262] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1023.758975][T12262] usb 2-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 1023.769810][T12262] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.784071][T12262] usb 2-1: config 0 descriptor?? [ 1023.910396][T18152] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.992938][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1023.992956][ T30] audit: type=1400 audit(1760215140.774:1205): avc: denied { ioctl } for pid=18219 comm="syz.8.2993" path="/dev/video7" dev="devtmpfs" ino=949 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1023.998350][T18152] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.051147][T18206] netlink: 'syz.6.2990': attribute type 62 has an invalid length. [ 1024.056129][ T30] audit: type=1400 audit(1760215140.824:1206): avc: denied { create } for pid=18219 comm="syz.8.2993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1024.397525][T18152] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.436668][ T30] audit: type=1400 audit(1760215140.844:1207): avc: denied { bind } for pid=18219 comm="syz.8.2993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1024.485643][ T30] audit: type=1400 audit(1760215140.904:1208): avc: denied { listen } for pid=18219 comm="syz.8.2993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1024.492446][ T5822] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1024.505650][ T30] audit: type=1400 audit(1760215140.904:1209): avc: denied { connect } for pid=18219 comm="syz.8.2993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1025.484917][ T24] gspca_sq930x: Unknown sensor [ 1025.494462][ T24] sq930x 7-1:0.0: probe with driver sq930x failed with error -22 [ 1025.509687][ T24] usb 7-1: USB disconnect, device number 60 [ 1025.521137][T15386] Bluetooth: hci3: command tx timeout [ 1025.528831][ T30] audit: type=1400 audit(1760215140.914:1210): avc: denied { write } for pid=18219 comm="syz.8.2993" path="socket:[57290]" dev="sockfs" ino=57290 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1026.466710][ T30] audit: type=1400 audit(1760215141.384:1211): avc: denied { ioctl } for pid=18209 comm="syz.1.2991" path="/dev/sg0" dev="devtmpfs" ino=774 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1026.511219][ T30] audit: type=1400 audit(1760215141.424:1212): avc: denied { read } for pid=18209 comm="syz.1.2991" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1026.534578][ T30] audit: type=1400 audit(1760215141.424:1213): avc: denied { open } for pid=18209 comm="syz.1.2991" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1026.639631][ T5822] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1027.010510][ T5822] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.046027][ T5822] usb 9-1: Product: syz [ 1027.059717][ T5822] usb 9-1: Manufacturer: syz [ 1027.085835][ T5822] usb 9-1: SerialNumber: syz [ 1027.273265][ T5822] usb 9-1: can't set config #1, error -71 [ 1027.417941][ T5822] usb 9-1: USB disconnect, device number 16 [ 1027.551060][T15386] Bluetooth: hci3: command tx timeout [ 1027.652871][T12262] usbhid 2-1:0.0: can't add hid device: -71 [ 1027.659719][T12262] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1027.672902][T12262] usb 2-1: USB disconnect, device number 90 [ 1027.753530][T18152] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1027.790953][ T10] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1027.873635][ T30] audit: type=1400 audit(1760215144.664:1214): avc: denied { read write } for pid=18242 comm="syz.6.2998" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1028.012092][T18152] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1028.046535][T18244] loop6: detected capacity change from 0 to 2560 [ 1028.063206][T18244] buffer_io_error: 27 callbacks suppressed [ 1028.063241][T18244] Buffer I/O error on dev loop6, logical block 0, async page read [ 1028.079329][T18244] Buffer I/O error on dev loop6, logical block 0, async page read [ 1028.089537][T18244] Buffer I/O error on dev loop6, logical block 0, async page read [ 1028.109078][T18244] Buffer I/O error on dev loop6, logical block 0, async page read [ 1028.120065][T18244] Buffer I/O error on dev loop6, logical block 0, async page read [ 1028.133775][T18244] Buffer I/O error on dev loop6, logical block 0, async page read [ 1028.144691][T18244] Buffer I/O error on dev loop6, logical block 0, async page read [ 1028.155833][T18244] Buffer I/O error on dev loop6, logical block 0, async page read [ 1028.165307][T18244] ldm_validate_partition_table(): Disk read failed. [ 1028.175522][T18244] Buffer I/O error on dev loop6, logical block 0, async page read [ 1028.184497][T18244] Buffer I/O error on dev loop6, logical block 0, async page read [ 1028.198695][T18244] Dev loop6: unable to read RDB block 0 [ 1028.214078][T18244] loop6: unable to read partition table [ 1028.223563][T18152] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1028.233199][T18244] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1028.260812][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 1028.281305][T18152] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1028.308263][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1028.318317][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.333965][ T10] usb 3-1: Product: syz [ 1028.360968][ T10] usb 3-1: Manufacturer: syz [ 1028.365593][ T10] usb 3-1: SerialNumber: syz [ 1028.737473][ T10] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 80 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1028.751084][T18152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1028.771057][T18152] 8021q: adding VLAN 0 to HW filter on device team0 [ 1028.789411][T11736] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.796661][T11736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1028.860967][T18268] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1028.877906][T18268] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3002'. [ 1029.273980][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1029.273996][ T30] audit: type=1400 audit(1760215146.064:1219): avc: denied { read write } for pid=18240 comm="syz.2.2997" name="lp0" dev="devtmpfs" ino=3731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1029.274057][T11736] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.284644][ T30] audit: type=1400 audit(1760215146.064:1220): avc: denied { open } for pid=18240 comm="syz.2.2997" path="/dev/usb/lp0" dev="devtmpfs" ino=3731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1029.303790][T11736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1029.626525][T18152] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1029.659494][ T5944] usb 3-1: USB disconnect, device number 80 [ 1029.673734][ T5944] usblp0: removed [ 1029.742439][T18270] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 1029.748965][T18270] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1029.765626][T18152] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1029.780849][ T30] audit: type=1400 audit(1760215146.564:1221): avc: denied { name_bind } for pid=18274 comm="syz.2.3005" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1029.781289][T18273] vhci_hcd: connection closed [ 1029.808785][T18270] vhci_hcd vhci_hcd.0: Device attached [ 1029.867108][T18269] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.3004'. [ 1029.870194][ T7187] vhci_hcd: stop threads [ 1029.884898][ T7187] vhci_hcd: release socket [ 1029.896544][ T7187] vhci_hcd: disconnect device [ 1030.296915][ T30] audit: type=1400 audit(1760215147.074:1222): avc: denied { ioctl } for pid=18280 comm="syz.2.3007" path="socket:[59421]" dev="sockfs" ino=59421 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1030.445263][ T30] audit: type=1400 audit(1760215147.074:1223): avc: denied { append } for pid=18280 comm="syz.2.3007" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1031.056823][ T30] audit: type=1400 audit(1760215147.074:1224): avc: denied { bind } for pid=18283 comm="syz.6.3008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1031.159802][ T30] audit: type=1400 audit(1760215147.444:1225): avc: denied { getopt } for pid=18283 comm="syz.6.3008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1031.487352][ T30] audit: type=1400 audit(1760215148.264:1226): avc: denied { bind } for pid=18294 comm="syz.8.3011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1031.540294][ T30] audit: type=1400 audit(1760215148.314:1227): avc: denied { setopt } for pid=18294 comm="syz.8.3011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1031.645490][T18297] netlink: 'syz.8.3011': attribute type 2 has an invalid length. [ 1031.653611][T18297] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3011'. [ 1031.687782][T18300] Oops: general protection fault, probably for non-canonical address 0xed25e9cd2c4e65ea: 0000 [#1] SMP KASAN NOPTI [ 1031.699874][T18300] KASAN: maybe wild-memory-access in range [0x692f6e6962732f50-0x692f6e6962732f57] [ 1031.709171][T18300] CPU: 0 UID: 0 PID: 18300 Comm: syz.2.3010 Not tainted syzkaller #0 PREEMPT(full) [ 1031.718548][T18300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1031.728614][T18300] RIP: 0010:kernfs_root+0x67/0x2a0 [ 1031.733745][T18300] Code: 89 c6 e8 1c 01 58 ff 58 85 db 0f 85 b7 00 00 00 e8 ce 05 58 ff 48 8d 7d 30 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 1a 02 00 00 48 8b 5d 30 e8 66 d8 00 09 31 ff 41 [ 1031.753367][T18300] RSP: 0018:ffffc9001c76f998 EFLAGS: 00010202 [ 1031.759466][T18300] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffc90005464000 [ 1031.767469][T18300] RDX: 0d25edcd2c4e65ea RSI: ffffffff82646ee2 RDI: 692f6e6962732f50 [ 1031.770790][ T30] audit: type=1400 audit(1760215148.374:1228): avc: denied { create } for pid=18294 comm="syz.8.3011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1031.775461][T18300] RBP: 692f6e6962732f20 R08: 0000000000000001 R09: 0000000000000000 [ 1031.775477][T18300] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1fce20 [ 1031.775491][T18300] R13: 0000000000000000 R14: 0000000000000002 R15: ffff88802d2b3120 [ 1031.818857][T18300] FS: 00007f354f79c6c0(0000) GS:ffff8881249dc000(0000) knlGS:0000000000000000 [ 1031.827793][T18300] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1031.834360][T18300] CR2: 0000001b2fc21ff8 CR3: 00000000572f4000 CR4: 00000000003526f0 [ 1031.842314][T18300] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1031.850285][T18300] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1031.858240][T18300] Call Trace: [ 1031.861507][T18300] [ 1031.864435][T18300] kernfs_remove_by_name_ns+0x2e/0x110 [ 1031.869891][T18300] driver_remove_file+0x4a/0x60 [ 1031.874732][T18300] bus_remove_driver+0x224/0x2c0 [ 1031.879654][T18300] driver_unregister+0x76/0xb0 [ 1031.884405][T18300] comedi_device_detach_locked+0x12c/0xa50 [ 1031.890199][T18300] do_devconfig_ioctl+0x555/0x710 [ 1031.895204][T18300] ? __mutex_lock+0x1c5/0x1060 [ 1031.899950][T18300] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 1031.905481][T18300] ? find_held_lock+0x2b/0x80 [ 1031.910149][T18300] comedi_unlocked_ioctl+0x165d/0x2f00 [ 1031.915636][T18300] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1031.921429][T18300] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1031.927310][T18300] ? do_vfs_ioctl+0x128/0x14f0 [ 1031.932236][T18300] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1031.937269][T18300] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1031.944102][T18300] ? hook_file_ioctl_common+0x145/0x410 [ 1031.949638][T18300] ? selinux_file_ioctl+0x180/0x270 [ 1031.954819][T18300] ? selinux_file_ioctl+0xb4/0x270 [ 1031.959911][T18300] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1031.965701][T18300] __x64_sys_ioctl+0x18e/0x210 [ 1031.970471][T18300] do_syscall_64+0xcd/0xfa0 [ 1031.974980][T18300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.980918][T18300] RIP: 0033:0x7f354e98eec9 [ 1031.985314][T18300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1032.004910][T18300] RSP: 002b:00007f354f79c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1032.013303][T18300] RAX: ffffffffffffffda RBX: 00007f354ebe5fa0 RCX: 00007f354e98eec9 [ 1032.021254][T18300] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003 [ 1032.029205][T18300] RBP: 00007f354ea11f91 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1032.037182][T18300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1032.045151][T18300] R13: 00007f354ebe6038 R14: 00007f354ebe5fa0 R15: 00007fffcfac1ec8 [ 1032.053124][T18300] [ 1032.056133][T18300] Modules linked in: [ 1032.060488][T18300] ---[ end trace 0000000000000000 ]--- [ 1032.071606][T18152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1032.160729][T18300] RIP: 0010:kernfs_root+0x67/0x2a0 [ 1032.165897][T18300] Code: 89 c6 e8 1c 01 58 ff 58 85 db 0f 85 b7 00 00 00 e8 ce 05 58 ff 48 8d 7d 30 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 1a 02 00 00 48 8b 5d 30 e8 66 d8 00 09 31 ff 41 [ 1032.250447][T18300] RSP: 0018:ffffc9001c76f998 EFLAGS: 00010202 [ 1032.288954][T18300] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffc90005464000 [ 1032.313298][T18300] RDX: 0d25edcd2c4e65ea RSI: ffffffff82646ee2 RDI: 692f6e6962732f50 [ 1032.330954][T18300] RBP: 692f6e6962732f20 R08: 0000000000000001 R09: 0000000000000000 [ 1032.339029][T18300] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1fce20 [ 1032.354897][T18300] R13: 0000000000000000 R14: 0000000000000002 R15: ffff88802d2b3120 [ 1032.363214][T18300] FS: 00007f354f79c6c0(0000) GS:ffff888124adc000(0000) knlGS:0000000000000000 [ 1032.372880][T18300] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1032.379493][T18300] CR2: 00007f06a838ee9c CR3: 00000000572f4000 CR4: 00000000003526f0 [ 1032.387796][T18300] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1032.396147][T18300] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1032.404524][T18300] Kernel panic - not syncing: Fatal exception [ 1032.410802][T18300] Kernel Offset: disabled [ 1032.415110][T18300] Rebooting in 86400 seconds..