last executing test programs: 2m32.910443559s ago: executing program 3 (id=833): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) write$tun(0xffffffffffffffff, &(0x7f0000000740)={@void, @void, @ipv6=@dccp_packet={0x7, 0x6, "df06a5", 0xdf, 0x21, 0x1, @mcast1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, {[@routing={0x3, 0x2, 0x0, 0x8, 0x0, [@private2]}, @srh={0x32, 0x2, 0x4, 0x1, 0x0, 0x10, 0x81, [@local]}], {{0x4e24, 0x4e22, 0x4, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, "1335a0", 0x1, "e766e2"}, "37be61c7345b9ba98775508833e3af6dfacb97f946001c8f1237d7b7a4391908460d95821fcd471bc0e43a35cec0b55e63f164091f17982df1dcd05a57456d2e6e2c89f74701bcad75db3944bcb5d479b76be8153f9453fa66a551c3d76c51505ac1c4e20b0dad462817e5a4d8b105433ded51aa3952d852ddfea377fce0c8e3dbeadf8529553afa9f3db373a5c995717144f2c9b94ae95d813cddab1e2674"}}}}, 0x107) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 2m32.654167034s ago: executing program 3 (id=836): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7a4, &(0x7f0000000d00)={{@any, 0x4}, 0x0, 0x8, 0x23, 0x5}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$nfc_llcp(r5, 0x118, 0x1, &(0x7f0000000300)=""/93, 0x5d) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x3}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xdb, 0x7ff, 0x2, 0x9, 0x6, 0x2, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) close(r5) preadv(0xffffffffffffffff, 0x0, 0x0, 0xe7, 0xf) close(r2) 2m31.169824166s ago: executing program 3 (id=842): socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) r4 = gettid() tkill(r4, 0xb) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setreuid(0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000000c0), 0x12) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x2, 0x0, 0x0, 0x100, 0xffff, 0x3}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m29.499581037s ago: executing program 3 (id=844): mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) (async, rerun: 32) r0 = socket$igmp6(0xa, 0x3, 0x2) (rerun: 32) sendmsg$sock(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)="fb5c1d0df2ac538bdc9ebb02406c23146d249455854c838477f9b167e2f5f43fa09936096a8eaf79a3c7", 0x2a}, {&(0x7f0000000240)="ecead31ffeecd7b4c83f6611e973fb0de48c7d380a153b4b682ac4efb313209c7f662d3925b435d4a0ac42e35f85c9af25b3bba62697598518b352310ae519ac253df7642c4daada43d21d2bdd9b586553f3222f5627c989b59b32ee5c9214f8af4a5ab1efbb25173c2257540d77e785ff72744f82204fd4e657f082bd6036836475116cd40fdfb822a93ff21562bfcfa0f28e98880872b82c2f8cb480f9", 0x9e}, {&(0x7f0000000300)="fc5703adac3b1d1ed68cb70f6226591c9ef584f9b285020632354b7af3bfa7489ea6c8097bd6e9e4b5f99cb6566c6c2a472c4661c24d54dedb1e5791bcf92f6d6dd173a9d3408a759a1f2fb75936e3d964cfb1dabf23c8d06a6a946b3e39df439a5be3ad5ba652822ff2c8fb978b1d7538b4bd9927b7fd141d07f8eb851f3c8c805f7054951d3c52db4b02d9c08d54ccf88755ca51076f2b26fd0564a0e49c9416758a7bff7dac4023ed9b31c0c25187402cb5fe6519025d83a0e7584d6083be46f046dcde94037c4c", 0x30}, {&(0x7f0000000400)="50c8240bd31f905b8c9b4f47becaef9a2137a81e7ff3f84ab9c44a8d39c8b813bd6587584dfac8a08610f7f75166313ccbe3e51145290ffaaef5d174c204d354c1af21ca7859f4de1d780d2d6f2d6db3dbfc0491ad778770b29f0e689c513cb3ff436a5d64c20133b73b778e23f563dbdffcf7d8ecb4d1aec7b6db", 0x7b}, {&(0x7f0000000480)="29fbdd8d3d69d7e557aa633a8e7c92eae1b578d97f30091c92f8c4ee5e608bfb0f115c818071732ebc48f0e239c8470c7b3bd564cd6b07cc829f615dfc5a9ca72f4c241d8abbb67bbb8e6188c98fdeb8eabedb00f978e066abea1fd754f2af9df6b6cb83d990d3b60ec1846a0b5bb9c7b5b1385fae3c5a602ba2d61ae141c494895a545a440f3c7efa5c1829fd2e403cb1ea9bec488a390c444590603cfc8aa1297463d15d5bda261a8fa43fddfedf6bd29e2d6a8ac44fb226154a6053ca147c43cd943137d9337480", 0xc9}, {&(0x7f0000000580)="aa6da7b0616668ba5f6c242a49b00435b53084c33ae59b60fc7605fdf9a8bf868566591e0e9cea83a8e06ed19710136f5e20cd160ac59b", 0x37}], 0x6, &(0x7f0000000640)=[@txtime={{0x0, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0xf}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0xd}}, @timestamping={{0x14, 0x1, 0x25, 0xfa7e}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0xd64}}, @txtime={{0x18, 0x1, 0x3d, 0x200}}], 0xd8}, 0x4) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000008c0)={'sit0\x00', 0x0, 0x7800, 0x7800, 0x5, 0xd89, {{0x3a, 0x4, 0x1, 0x9, 0xe8, 0x64, 0x0, 0x5, 0x2f, 0x0, @local, @empty, {[@generic={0x82, 0xb, "cfd4d9e552ba0b3a49"}, @timestamp={0x44, 0x8, 0x1f, 0x0, 0x2, [0x8]}, @cipso={0x86, 0x5e, 0x1, [{0x1, 0x7, "2ee2186eef"}, {0x7, 0xb, "5d68904e90c3e81d74"}, {0x5, 0x4, 'mI'}, {0x5, 0xb, "1c3aa2a8ff544ca09f"}, {0x0, 0x12, "c1dcb374b85bb0552ecca67809a42d04"}, {0x1, 0xb, "43e35a916401f17370"}, {0x0, 0xf, "a1f33bfff046d14e3290392adf"}, {0x2, 0x4, "a12c"}, {0x1, 0x7, "a787a6108f"}]}, @timestamp={0x44, 0xc, 0xe2, 0x0, 0x1, [0x0, 0x3]}, @end, @timestamp_prespec={0x44, 0x14, 0xdc, 0x3, 0x3, [{@empty, 0x800000}, {@multicast2, 0x7}]}, @ra={0x94, 0x4}, @rr={0x7, 0x17, 0xd8, [@rand_addr=0x64010101, @multicast1, @remote, @loopback, @multicast1]}, @timestamp={0x44, 0x24, 0x4e, 0x0, 0x7, [0x6, 0x5, 0x1, 0x10000, 0x3, 0xffff, 0x7, 0xb]}]}}}}}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x4000, 0x6000}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9fae702d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b9f802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963cd14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb193213f4bccab1c34c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f0d9ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d579531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a785d820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37dfd149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f2729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab21842da1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336343f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) (async, rerun: 32) r5 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 32) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) (async) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r1, 0x1, {0x1, 0xf0}, 0x2}, 0x18) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000080)={r7, 0x7, 0x20}, 0xc) ioctl$KVM_RUN(r4, 0xae80, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$SIOCSIFHWADDR(r10, 0x89e0, 0x0) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) (async) r11 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async) ioctl$KVM_RUN(r11, 0xae80, 0x0) 2m28.166544636s ago: executing program 3 (id=848): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) open(&(0x7f0000000180)='./file0\x00', 0x440, 0xc2) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="b9"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22) writev(r3, &(0x7f0000000000)=[{&(0x7f00000006c0)='\t', 0x2003f}], 0x1) (fail_nth: 7) 2m27.533314537s ago: executing program 3 (id=850): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0x2000, 0x80, 0x3231564e, 0x2, [0x2], [0x2000], [], [0x5]}) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x4) setsockopt$ax25_int(r1, 0x101, 0xa, &(0x7f0000000480)=0xfff, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000000)=0x6ab7, 0x1) r3 = socket$nl_rdma(0x10, 0x3, 0x14) socket$pppoe(0x18, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000086be7440480b0810deb701020301090212000100000000090400060000004700"], 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000000a1404002dbd7000ffdbdf250800030002000000080015000000000013000100000000000800030001000000"], 0x30}}, 0x20008410) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x45833af92e4abbbe, 0x0) syz_usb_connect(0x2, 0xe4, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRES16=r3], 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, 0x0) umount2(&(0x7f00000001c0)='./cgroup\x00', 0x3) 2m11.987457672s ago: executing program 32 (id=850): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0x2000, 0x80, 0x3231564e, 0x2, [0x2], [0x2000], [], [0x5]}) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x4) setsockopt$ax25_int(r1, 0x101, 0xa, &(0x7f0000000480)=0xfff, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000000)=0x6ab7, 0x1) r3 = socket$nl_rdma(0x10, 0x3, 0x14) socket$pppoe(0x18, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000086be7440480b0810deb701020301090212000100000000090400060000004700"], 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000000a1404002dbd7000ffdbdf250800030002000000080015000000000013000100000000000800030001000000"], 0x30}}, 0x20008410) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x45833af92e4abbbe, 0x0) syz_usb_connect(0x2, 0xe4, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRES16=r3], 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, 0x0) umount2(&(0x7f00000001c0)='./cgroup\x00', 0x3) 16.390383844s ago: executing program 0 (id=1238): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) semget(0x3, 0x2, 0x284) socket$inet(0x2, 0x3, 0x6) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x28c81, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x3000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001180)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r4, {}, {0x0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xfffffc00}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) 13.426343614s ago: executing program 0 (id=1243): socket$pppoe(0x18, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000300)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(0x0, 0x0, 0x2) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4", 0xcc}, {&(0x7f0000000c40)="6dd950135126", 0x6}], 0x2}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c200000300000000000008004500007800000000fb019078ac1e0001ac1414aa0400907800000000473a0006006400020401000fac1e01019377ffff440cdcf17f0000010000000900940401004434d183ffffffff000001000000000000000008ac1414bb000000017f000001ffff80010000000000007fffac1434bb00007fff100000511533c9b5ab0f04e9b950bf001e1cfc8de475efcc1a66ed43494bdccfdfe3cb728ccf87f4f5758548bfcca422b4ef5dd706884ad142c488c67f6b586974a761b7c6b36670d0dcebd9767956068f4d"], 0x0) syz_clone3(&(0x7f0000003c80)={0x200000000, &(0x7f0000000440), &(0x7f0000003b40), &(0x7f0000003b80), {0x15}, &(0x7f0000000040), 0x0, &(0x7f0000003c00)=""/36, &(0x7f0000003c40)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r5, r5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x9ec, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20040800) 11.513447352s ago: executing program 5 (id=1247): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@bridge_delneigh={0x1b, 0x1c, 0x1, 0x70bd28, 0x0, {0x7, 0x0, 0x0, 0x0, 0x1, 0x64, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040051}, 0x4048080) socket$inet_tcp(0x2, 0x1, 0x0) r1 = semget(0x0, 0x3, 0x35e) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000300)={{0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, 0x997f, 0x9, 0x5146}) semctl$GETZCNT(r1, 0x0, 0x7, 0x0) semctl$GETVAL(r1, 0x1, 0x5, &(0x7f0000000080)=""/165) munmap(&(0x7f000049b000/0x400000)=nil, 0x400000) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r2 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast2}}}}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e000000100"/32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x76, 0x28, 0xa6, 0x10, 0x45e, 0xf5, 0xb84b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xc0, 0xd8, 0x90, 0xc, [{{0x9, 0x4, 0xfd, 0xe, 0x0, 0xb7, 0x58, 0xaa}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x4d, &(0x7f00000003c0)=ANY=[@ANYBLOB="050f4d000514100408d2acf161be8aa70cd1ed01f0a61f09"], 0x1, [{0x0, 0x0}]}) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r6, &(0x7f0000003a00)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0xffffff83, @local, 0x9}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000200)='D', 0x1}], 0x1, 0x0, 0x0, 0xf5}}], 0x1, 0x4c040) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @empty}}}}) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000240)={@none, 0xf}) 10.855992423s ago: executing program 0 (id=1248): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x40000f63c) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) 10.778554765s ago: executing program 1 (id=1249): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x11, r2, 0x83000000) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20040001, 0x3, 0xacd1, 0x0, 0x0, 0x40}}) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r5 = eventfd(0xc) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000b000000000e000000"], 0x14}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000500)=""/74, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000800000001a000000280022800414008004000080040000808341f1680200008014000080040000800400008004000080060021"], 0x44}}, 0x0) unshare(0x64000600) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) 10.359657209s ago: executing program 0 (id=1252): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$cec(0x0, 0x0, 0x416400) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x271b, 0x0, &(0x7f0000000040)) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8004, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0cc5605, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) timerfd_create(0x0, 0x0) socket(0x15, 0x5, 0x0) shutdown(0xffffffffffffffff, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mkdir(&(0x7f00000003c0)='./file0\x00', 0xffe9) pread64(0xffffffffffffffff, &(0x7f0000000340)=""/251, 0xfb, 0xacab) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) socket(0x10, 0x803, 0x0) 9.332528366s ago: executing program 4 (id=1254): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708dd0140000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000005c000000090a010400000000000000000a0000040900010073797a31000000000800054000000002090002008d797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) 9.165636161s ago: executing program 4 (id=1255): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x2000000000000021, 0x2, 0x10000000000002) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) r5 = socket(0x2, 0x80805, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0x105, 0x70bd28}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000340)=0x8) readv(r4, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="05160000102f00002c0012800b00010067726574617000001c00028006000e000100000008000700e000", @ANYRES32=r1, @ANYBLOB="58fe45c953c24e7a44249d2da7f0a8a90c5f5279e2ba588230aba384ae12abb007ab4d842052b39932f6ca6c02a1b99e"], 0x54}}, 0x4000) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xa1) recvmmsg(r6, &(0x7f0000007bc0)=[{{&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002580)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000080)=""/249, 0xf9}, {0x0}, {&(0x7f0000000180)=""/157, 0x9d}, {&(0x7f0000002300)=""/254, 0xfe}, {&(0x7f0000002400)=""/152, 0x98}, {&(0x7f00000024c0)=""/161, 0xa1}], 0x7, &(0x7f0000002600)=""/107, 0x6b}, 0xfffffff2}, {{&(0x7f0000002680)=@sco, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002700)=""/148, 0x94}, {&(0x7f0000000240)=""/12, 0xc}], 0x2, &(0x7f0000002800)=""/214, 0xd6}, 0x5}, {{&(0x7f0000002900)=@isdn, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002980)=""/132, 0x84}, {&(0x7f0000002a40)=""/227, 0xe3}, {&(0x7f0000002b40)=""/31, 0x1f}, {0x0}, {&(0x7f0000002c80)=""/33, 0x21}], 0x5, &(0x7f0000002d40)=""/4, 0x4}, 0x7}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000002d80)=""/234, 0xea}, {&(0x7f0000002e80)=""/84, 0x54}], 0x2, &(0x7f0000002f40)=""/186, 0xba}, 0x6}, {{&(0x7f0000003000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f00000053c0), 0x0, &(0x7f0000005480)=""/234, 0xea}, 0x3}, {{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005a40)=[{&(0x7f0000005600)=""/59, 0x3b}, {&(0x7f0000005640)=""/236, 0xec}, {&(0x7f0000005740)=""/118, 0x76}, {&(0x7f00000057c0)=""/211, 0xd3}, {&(0x7f00000058c0)=""/157, 0x9d}, {&(0x7f0000005980)=""/145, 0x91}], 0x6}, 0x5}, {{0x0, 0x0, &(0x7f0000006180)=[{&(0x7f0000005ac0)=""/96, 0x60}, {&(0x7f0000005b40)=""/211, 0xd3}, {&(0x7f0000005c40)=""/150, 0x96}, {&(0x7f0000005d00)=""/236, 0xec}, {&(0x7f0000005e00)=""/133, 0x85}, {&(0x7f0000005ec0)=""/222, 0xde}, {&(0x7f0000007f80)=""/38, 0x26}, {&(0x7f0000006000)=""/98, 0x62}, {&(0x7f0000006080)=""/213, 0xd5}], 0x9, &(0x7f0000006240)=""/250, 0xfa}, 0x3}, {{0x0, 0x0, &(0x7f0000007580)=[{&(0x7f0000006340)=""/4096, 0x1000}, {&(0x7f0000007340)=""/208, 0xd0}, {&(0x7f0000007440)=""/82, 0x52}, {&(0x7f00000074c0)=""/156, 0x9c}], 0x4, &(0x7f00000075c0)=""/79, 0x4f}, 0x1}, {{0x0, 0x0, &(0x7f0000007800)=[{&(0x7f00000076c0)=""/157, 0x9d}, {&(0x7f0000007780)=""/84, 0x54}], 0x2, &(0x7f0000007840)=""/181, 0xb5}, 0x2}, {{0x0, 0x0, &(0x7f0000007b00)=[{&(0x7f0000007900)=""/85, 0x55}, {&(0x7f0000007980)=""/222, 0xde}, {&(0x7f0000007a80)=""/115, 0x73}], 0x3, &(0x7f0000007b40)=""/91, 0x5b}, 0x7f}], 0xa, 0x2023, &(0x7f0000007e40)={0x77359400}) write(r7, &(0x7f0000007e80)="c2d56a16473442ebe82c729a160967c32538afa464cf58eae21a2e6a35922c29bfb6579175476f5b229b77b65918cfb7bdc0ce465137e3461db07d8e291912b8eeecfe3663dce76bcee434e2f7e09be680b24e3e76d00172ff94b23da3581b080a4d0125192d0396643eed61c7db9908a694b43f757744ba3ed332273eebc2c7633989b803a420dd2dc9960d6f4a18e5c4a07023e25f444ada4d2ffc6d879bb78504f68a514b8626ff4fc9acd7cb4ea6f29f7633c8754bd719e008a5e08f24fb581d0e1e70cfbbac5ab9352ecfe52957e84fa6671428de5e", 0xd8) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r8, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 8.738160446s ago: executing program 2 (id=1256): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x3, [@restrict={0x1, 0x0, 0x0, 0xb, 0x3}, @struct={0xc, 0x5, 0x0, 0x4, 0x1, 0x1, [{0x4, 0x2, 0x1}, {0x7, 0x5, 0x7fff}, {0x1, 0x1, 0x3}, {0x2, 0x4, 0xd81}, {0x2, 0x3, 0x9}]}]}, {0x0, [0x5f]}}, &(0x7f0000000300)=""/64, 0x6f, 0x40, 0x1, 0x3}, 0x28) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r0}, 0x18) write$tun(0xffffffffffffffff, &(0x7f0000000740)={@void, @void, @ipv6=@dccp_packet={0x7, 0x6, "df06a5", 0xdf, 0x21, 0x1, @mcast1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, {[@routing={0x3, 0x2, 0x0, 0x8, 0x0, [@private2]}, @srh={0x32, 0x2, 0x4, 0x1, 0x0, 0x10, 0x81, [@local]}], {{0x4e24, 0x4e22, 0x4, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, "1335a0", 0x1, "e766e2"}, "37be61c7345b9ba98775508833e3af6dfacb97f946001c8f1237d7b7a4391908460d95821fcd471bc0e43a35cec0b55e63f164091f17982df1dcd05a57456d2e6e2c89f74701bcad75db3944bcb5d479b76be8153f9453fa66a551c3d76c51505ac1c4e20b0dad462817e5a4d8b105433ded51aa3952d852ddfea377fce0c8e3dbeadf8529553afa9f3db373a5c995717144f2c9b94ae95d813cddab1e2674"}}}}, 0x107) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 8.667270093s ago: executing program 5 (id=1257): socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) r3 = gettid() tkill(r3, 0xb) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) setreuid(0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000000c0), 0x12) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000006c0)={0x2, 0x0, 0x0, 0x100, 0xffff, 0x3}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 8.599291522s ago: executing program 2 (id=1258): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0xfe80, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6000000000000000290000000b0000000008000000000000c910fe8000000000000000000000000000bbc9100000000000000000000000000000000107200000000006000000bb2c0000000000000000000000000000000000000000000000001800000000000000290000000400000000000000000000000801"], 0x180}, 0x0) 7.78994502s ago: executing program 2 (id=1259): socket$pppoe(0x18, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000300)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(0x0, 0x0, 0x2) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4", 0xcc}, {&(0x7f0000000c40)="6dd950135126d19aaf", 0x9}], 0x2}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c200000300000000000008004500007800000000fb019078ac1e0001ac1414aa0400907800000000473a0006006400020401000fac1e01019377ffff440cdcf17f0000010000000900940401004434d183ffffffff000001000000000000000008ac1414bb000000017f000001ffff80010000000000007fffac1434bb00007fff100000511533c9b5ab0f04e9b950bf001e1cfc8de475efcc1a66ed43494bdccfdfe3cb728ccf87f4f5758548bfcca422b4ef5dd706884ad142c488c67f6b586974a761b7c6b36670d0dcebd9767956068f4d"], 0x0) syz_clone3(&(0x7f0000003c80)={0x200000000, &(0x7f0000000440), &(0x7f0000003b40), &(0x7f0000003b80), {0x15}, &(0x7f0000000040), 0x0, &(0x7f0000003c00)=""/36, &(0x7f0000003c40)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r5, r5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x9ec, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20040800) 7.657173829s ago: executing program 5 (id=1260): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xfb998b673fdec582) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000480), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) openat$cgroup_ro(r4, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup, 0x24, 0x0, 0x8000, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r6 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x2, 0x101002) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@fallback=r6, r2, 0xa, 0x0, 0x0, @void, @value=r7, @void, @void, r5}, 0x20) r8 = socket(0x10, 0x3, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000040)=""/203) sendto$inet6(r8, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040011000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) write(r1, &(0x7f00000002c0)="23000000010006", 0x7) 7.051674817s ago: executing program 0 (id=1261): syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="94010000100001000000000000000000fc0000000000000000000000000000000000000000000000000100000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0004000000000048000200656362286369706865725f6e756c6c"], 0x194}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x24000154}, 0x20000050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d00000f7020a030000000000000000000100000a0900010073797a31000000000900ffffff7f7a3000000000a4000300978bbba1454858a53aaf78b9a37e346d710ff6ca7f5c280bbc2b705c68b3c397938682b5fd21db8761c59987113b42a2da118f67625c1763c8e53b0fda532492f6c8f1fee6ca"], 0x118}, 0x1, 0x0, 0x0, 0x4040994}, 0x20000050) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800) r1 = gettid() r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x10, 0x3, 'xfrm0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x39, 0x1, @tid=r1}, &(0x7f0000000000)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xeea635ac96802a65, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000021401"], 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x20000000) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, 0x0, 0x20000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = getpid() kcmp(r7, r7, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="c30000001c0081044e81f782db64b904070000000e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803606f1dd7ee0cfab94f94007134cf6ee08000a0e408e8ddef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe749fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece2b42a9ecbee5de6ccd40dd69a", 0xc3}], 0x1, 0x0, 0x0, 0x7400}, 0x800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) mmap(&(0x7f000060b000/0x2000)=nil, 0x2000, 0x1000000, 0x11, r8, 0x12df2000) 6.761538789s ago: executing program 1 (id=1262): r0 = socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f40)=ANY=[@ANYRESOCT=r7, @ANYBLOB="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"], 0x30}], 0x1, 0x40040c8) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r6, 0x3}, 0x8) r8 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r8, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000045, 0x8) bind$vsock_stream(r8, &(0x7f0000000940), 0x10) listen(r8, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r9, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c000000120001002bbd7000fbdbdf251502070e4e", @ANYRES32=0x0, @ANYBLOB="0010000006000000a0ee66f7ff0d0000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) syz_init_net_socket$ax25(0x3, 0x2, 0x6) 6.693669013s ago: executing program 2 (id=1263): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) listen(0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1000000000000000, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 6.624993766s ago: executing program 4 (id=1264): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='gpio_direction\x00', r0, 0x0, 0x291}, 0xffffffffffffffa2) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0xbd, 0x92, 0x35, @mcast1, @private1, 0x7800, 0x700, 0x0, 0x2000b}}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x204240) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = syz_pidfd_open(0x0, 0x0) mmap(&(0x7f00007ca000/0x3000)=nil, 0x3000, 0x1, 0x26970, r4, 0x3836f000) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r5 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x0, 0x20, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x4b4c, &(0x7f0000000100)) openat$sequencer2(0xffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f0000000340), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000280)={'rose0\x00', @broadcast}) 5.785903149s ago: executing program 5 (id=1265): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) timerfd_create(0x0, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_open_dev$sg(0x0, 0x5, 0x484ec1) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @sliced={0x6, [0xfff, 0x2, 0x0, 0x7, 0x36ef, 0x1, 0x51e, 0x0, 0x1, 0x5, 0x6, 0x101, 0x5, 0xf551, 0x7, 0x3, 0x8, 0x8, 0x2, 0x5, 0x6, 0xc5ce, 0x8, 0x1, 0x6682, 0x1, 0x7, 0x101, 0x100, 0xecf, 0xffff, 0x3, 0x1, 0xb, 0x401, 0x18, 0x9, 0x1, 0x3, 0x8cd, 0xd5c, 0x9, 0x5, 0x6, 0xf800, 0xced, 0x9, 0xc119], 0x401}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs$pagemap(0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') connect$pppoe(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2800000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000000, 0x3, 0xfffffffffffffffb, 0xfffffffffedfff83, 0x3, 0x1, {0xffffffffffffffff, 0x3ff, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7fffffff, 0x6, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x12}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080)=0x1, 0x800000000007f04) 5.76648022s ago: executing program 2 (id=1266): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000240)) r0 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0xffffffffffffffae, 0x0, 0x0}, 0x58) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x25, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x3, 0xffb, 0x0, 0xb49, 0xc, 0x8, 0x0, 0x3}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24000004) madvise(&(0x7f000003e000/0x3000)=nil, 0x3000, 0x14) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f0000000280)={0xdddd1000, 0x11f000}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$vcsn(&(0x7f0000000040), 0x7f, 0x131880) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_ivalue=0x6}) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x5, 0x7a880bb668777da9}, 0x9c) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="000c0000000c00000002000000000000000000000400"/38], 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYRESHEX=r0], 0x0, 0x5, 0xdd, &(0x7f0000000840)=""/221, 0x41000, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x3, 0x10}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x8}, 0x94) r7 = epoll_create1(0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/stat\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f00000000c0)={0x60000005}) read$FUSE(r1, &(0x7f0000002100)={0x2020}, 0x2020) 5.696311723s ago: executing program 1 (id=1267): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20040800) r4 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r5 = shmat(r4, &(0x7f0000ff1000/0x3000)=nil, 0x400c) mkdir(&(0x7f0000000000)='./file0\x00', 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYRES32=r3], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, 0x0, 0x0) write$FUSE_DIRENT(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416", @ANYRES32], 0x58) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB="010000000000fcdbdf2524000000180001801400020064756d6d7900"/38], 0x2c}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000002340), 0x2800040, 0x0) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) syz_emit_ethernet(0x0, 0x0, 0x0) shmdt(r5) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x22000, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="000600a2000056536648e61a18310f7d9f2907e994a046eed67c9d1e76cf518ff186ff9f604f03251dbb91491f3f69c059d801387c1c56a1e2a2fdb8854c48000000000000008023594717f31688471971328f047c06e5386d4b6dd5054937347642b7289290d09aa22684a9bb76c508832acc5088b9cfc753835f4edf18f48bfd43fe9fe1c6dab513a17413eff987835661d9626ea23879b89158728bbb861b2d62fded80cd103abaee68d33975f213768d00"/201, @ANYRES16=r1, @ANYBLOB="010329bd7000fcdbdf2524000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4.573939051s ago: executing program 4 (id=1268): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000007100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x712, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) listen(0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 4.570602653s ago: executing program 5 (id=1269): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000a93000/0x4000)=nil, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz0\x00', 0x1ff) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="6c6fe36b20696f2b6d6552000968459c0a357f7f28cebd87d2b7c7bad9a4137f0fdbe11667a120aeb295191972b2cb1e87631108416104b2edf45da00c03ed5e9f59e5cf68f9a997f45c0a78bfde43b2e10800"], 0xc) write$vga_arbiter(r5, &(0x7f0000000100)=ANY=[@ANYBLOB='unlock ao\x00'], 0xa) r6 = dup(r4) io_setup(0x19, &(0x7f00000009c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000f40)=ANY=[@ANYBLOB="0100000000000000008000000700000014f7ffff0900000009000000af010000a2b9000001000000100000000800760002000000"]) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r8, 0x100000000) socket$netlink(0x10, 0x3, 0x12) lremovexattr(0x0, &(0x7f00000001c0)=@known='system.posix_acl_default\x00') write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0x2, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000001) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[], 0x2e) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$nl_route(0x10, 0x3, 0x0) 3.938574526s ago: executing program 1 (id=1270): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000040)={'veth1_to_bond\x00'}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300), 0x100, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000e40)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x248) close(r5) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000040)={'veth0_to_bond\x00', 0x500}) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40043d0d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES64=0x0, @ANYBLOB="36776635c4856f3d", @ANYRESHEX=r2]) socket$inet6_sctp(0xa, 0x801, 0x84) 2.550181531s ago: executing program 4 (id=1271): syz_open_pts(0xffffffffffffffff, 0x2800) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff85000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x8980, 0x0) ioctl$FBIOGET_FSCREENINFO(r4, 0x4602, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000100)='-1\x00', 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x3, 0x2, 0x5) 2.393818143s ago: executing program 0 (id=1272): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000000000)=""/188, 0xbc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f00000001c0)='%pS \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() read(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@type_tag={0x7, 0x0, 0x0, 0x12, 0x5}, @func_proto, @func_proto]}}, 0x0, 0x3e, 0x0, 0x1, 0x7}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r7, r6, 0x25, 0x4, @void}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x4}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb1}}]}, &(0x7f00000005c0)='GPL\x00'}, 0x90) r8 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @initdev, @loopback}, &(0x7f0000000340)=0xc) socket$netlink(0x10, 0x3, 0xc) close(0x4) 1.665985622s ago: executing program 1 (id=1273): socket$pppoe(0x18, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000300)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(0x0, 0x0, 0x2) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4", 0xcc}, {&(0x7f0000000c40)="6dd950135126d19aaf", 0x9}], 0x2}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c200000300000000000008004500007800000000fb019078ac1e0001ac1414aa0400907800000000473a0006006400020401000fac1e01019377ffff440cdcf17f0000010000000900940401004434d183ffffffff000001000000000000000008ac1414bb000000017f000001ffff80010000000000007fffac1434bb00007fff100000511533c9b5ab0f04e9b950bf001e1cfc8de475efcc1a66ed43494bdccfdfe3cb728ccf87f4f5758548bfcca422b4ef5dd706884ad142c488c67f6b586974a761b7c6b36670d0dcebd9767956068f4d"], 0x0) syz_clone3(&(0x7f0000003c80)={0x200000000, &(0x7f0000000440), &(0x7f0000003b40), &(0x7f0000003b80), {0x15}, &(0x7f0000000040), 0x0, &(0x7f0000003c00)=""/36, &(0x7f0000003c40)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r5, r5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x9ec, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20040800) 1.496803119s ago: executing program 4 (id=1274): bpf$MAP_CREATE(0x0, 0x0, 0x48) timerfd_create(0x0, 0x80800) getresuid(&(0x7f0000000000), 0x0, &(0x7f0000000140)) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_open_dev$sg(0x0, 0x5, 0x484ec1) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @sliced={0x6, [0xfff, 0x2, 0x0, 0x7, 0x36ef, 0x1, 0x51e, 0x0, 0x1, 0x5, 0x6, 0x101, 0x5, 0xf551, 0x7, 0x3, 0x8, 0x8, 0x2, 0x5, 0x6, 0xc5ce, 0x8, 0x1, 0x6682, 0x1, 0x7, 0x101, 0x100, 0xecf, 0xffff, 0x3, 0x1, 0xb, 0x401, 0x18, 0x9, 0x1, 0x3, 0x8cd, 0xd5c, 0x9, 0x5, 0x6, 0xf800, 0xced, 0x9, 0xc119], 0x401}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs$pagemap(0x0, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) chdir(&(0x7f0000000280)='./file0\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000000, 0x3, 0xfffffffffffffffb, 0xfffffffffedfff83, 0x3, 0x1, {0xffffffffffffffff, 0x3ff, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7fffffff, 0x6, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x12}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080)=0x1, 0x800000000007f04) 763.013825ms ago: executing program 2 (id=1275): timerfd_create(0x0, 0x80800) getresuid(&(0x7f0000000000), &(0x7f00000000c0), 0x0) socket(0x2a, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_open_dev$sg(0x0, 0x5, 0x484ec1) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @sliced={0x6, [0xfff, 0x2, 0x0, 0x7, 0x36ef, 0x1, 0x51e, 0x0, 0x1, 0x5, 0x6, 0x101, 0x5, 0xf551, 0x7, 0x3, 0x8, 0x8, 0x2, 0x5, 0x6, 0xc5ce, 0x8, 0x1, 0x6682, 0x1, 0x7, 0x101, 0x100, 0xecf, 0xffff, 0x3, 0x1, 0xb, 0x401, 0x18, 0x9, 0x1, 0x3, 0x8cd, 0xd5c, 0x9, 0x5, 0x6, 0xf800, 0xced, 0x9, 0xc119], 0x401}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs$pagemap(0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') connect$pppoe(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8) chdir(&(0x7f0000000280)='./file0\x00') r2 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000000, 0x3, 0xfffffffffffffffb, 0xfffffffffedfff83, 0x3, 0x1, {0xffffffffffffffff, 0x3ff, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7fffffff, 0x6, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x12}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080)=0x1, 0x800000000007f04) 155.566068ms ago: executing program 1 (id=1276): syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003ac9bcc20d118af1ebb5a0102030109022400010700800b0904"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x891, &(0x7f00000007c0)={{0x12, 0x1, 0x250, 0x80, 0x79, 0x31, 0x40, 0x7b8, 0xb000, 0x9a4a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87f, 0x2, 0x5, 0x5, 0x40, 0x0, [{{0x9, 0x4, 0x5b, 0x0, 0x7, 0x33, 0xb4, 0x96, 0x8, [], [{{0x9, 0x5, 0x0, 0x0, 0x8, 0x8, 0x6, 0x10, [@generic={0x72, 0x7, "376bc6f2461ad9f2e039684515ee97293060414d118a0c565cb5c3eedf4df402b67aab4dd52addfd15066393c905b1fc0e2923e6d4a3d00920f043f04cfa8493657d17c2e75c822d753039a919c774c43b281889e8c29a43d65c07fd95563632cddd4f9921a61b2482cc1f53bd15d23c"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x1be, 0x5, 0x6, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x101, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xfe, 0x6}]}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0xc, 0x7, 0xa, [@generic={0xe0, 0x5, "ccc007da522fcc32b1d8c48981e1c32e1517daccd82d461b455460938f63530bee45aa6d281fc8250381dd8b9465f6895ccbe89cc8ab7cc62041ddc5ab02de63e9cc6d168efb2e092a5309a3273d7746405a3344bfbe5ada97024fd48ac3aca2184fb24b5a40d0cb541c19bdbf9942f69588bc0c3c76490983950682e6995d83dc9f8acfe76606a1fbda5dbcf33f19bd19bb82f1e7252550b896be168492a18ea454c6d8a074ed6199f82b74aa2a000badf72b0dd2dc24ba7c3789ecb25dc7c0ea4ac57309178f0839bc9ab9424807e4f9b2beab99c6cd0a63f37ba8ac56"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x1f, 0x4, 0x0, [@generic={0xe7, 0x31, "a318a71aa7dbdd56f7ea5ba85e42be602c4f748d1c8ff1cd8889e625ad3c7004d7cf5656ad21ad01850172a662abe08c2d8b0627dbb58e95eab91628c4f88f5fb050003c117817fffde76dfb17bcb51e4f48596c6a063e1ad177cb818d8ef87ab654eeae0a0fcc4a874050b5f3bdf2429384c286e5b9eb464a1d01e75380a1de19c1006429577798bdfc92e733adb99da0d64af9cfa7acd76be51625ed60eac5a3e22a16724a3d2a23939b5588eb26823c08da1d06290dbc669cc3b4e9cd483a026adad9b911b26a57ca01f6e866056e483f286b4c1d0bf968fbfcd167823735d5918452df"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x787}]}}, {{0x9, 0x5, 0xa, 0xc, 0xe0872856baba3a37, 0x2, 0x8, 0x6b, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x3, 0xfff1}, @generic={0xc1, 0x1, "d3516cd2c0d9ccfe550010a772ec46625f2d16399fdc17c8263142cb4fa50c3c59c7d7c390717f158b1e43cbc89bb23bf996a468c552e49a09f35f6f60d9ea935ba338675f6ab24de889679677dbaf148a441f683ea6c53ec6856a343c43c0dbf5d1001ad02c9c05542423b050ffa95d5d6548942f84613c04ae749a12b4e7403e6dd89d71dc7dd8a5722343ca7c00dfba49718a557778b4e45d4f183451f02785d288f1d556af45ca66277bc8eda714b9ea2305291dfbb6d50b7669530cf3"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0xf7, 0x4d, 0xd, [@generic={0x7d, 0xe, "1b164857fca6f477ce37f4b37e9b3b786213e28354084be30d0aa5bbf860560d44358fb5121ec584d0093d734e16c777e8743ea91087e647021680b3dcb883316f010e98c33901b59a9b8538f0e0e50c311a0f11545281d8e93507a94094a93a482ba060f5614c91f60784c595eb71da289d18fc8130f1d8d882d4"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x0, 0x9, 0x74, 0xfb, [@generic={0x34, 0x1, "0f47147abf2152049c33fb601a31f69f03be5f5d698de87de8323beb4fa41777dddd3bd4e7d531e3d85a328c2691aba0a815"}]}}]}}, {{0x9, 0x4, 0x82, 0x1, 0xb, 0x56, 0x16, 0x18, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x99, 0x1}, [@processing_unit={0x7, 0x24, 0x7, 0x6, 0x2, 0x3}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x303, 0x4, 0x5, 0xff}, @selector_unit={0x9, 0x24, 0x5, 0x4, 0xa, "d1b59cbe"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x206, 0x2, 0xfc, 0x200, 0x80, 0x2}, @selector_unit={0x5, 0x24, 0x5, 0x5, 0xfe}]}, @uac_control={{0xa, 0x24, 0x1, 0x100, 0xe}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x304, 0x2, 0x4}, @mixer_unit={0x6, 0x24, 0x4, 0x5, 0x5, "c1"}, @extension_unit={0x9, 0x24, 0x8, 0x1, 0x4, 0x1, "8c25"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x201, 0x3, 0xb, 0xc, 0x67, 0x9}]}], [{{0x9, 0x5, 0xf, 0x0, 0x20, 0x0, 0x6, 0x4}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x4, 0x7f, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0xc34}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x2}]}}, {{0x9, 0x5, 0x6, 0xc, 0x400, 0x4, 0x79, 0xfe, [@generic={0x49, 0xb, "dfbd1c7352c97df9aa079abcc8a59f73058ca1e60fedee291fd6285a67d9d23a1ae25613d00f956785a2982cde62c6d04229ce2511f3fba5080266f775f6602b36c47a7d5a0ded"}, @generic={0x76, 0x9, "a8a407783ce59ddb68c432f8abf6be6c25a52276053615d48b00d1bdb89d6ba47effb1a135dc50ff8b3079b775d736204f3076a32cc8baf64c910cfa88e11a91613a5ddbac59115ae1168552556f6e9b0ef1dd21f6aa06dca41234a71113334ad7686b946da9288963608f38321b526076ee129b"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0xe, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xd, 0x9}]}}, {{0x9, 0x5, 0xe, 0x10, 0x30, 0xa4, 0xff, 0x2, [@generic={0x8f, 0x1, "6e62d7413da482626e7467cacd4c072239fe5139972978c384d00d4786f73f20f314b56e014a50ea8b1390b0022f0af39af3a1ca60ed4812389c24ac2c13fddf3d376c51e15a067f3d4208d15a94bd9aa56b300b3e98871ac346742cef0f6c9e368aeac1df96e6d3c9014809a1a4e95dd4755b4ed8308d7b86a1b52229a75e1d38e415f6e892ba51c744d60a36"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x40, 0x0, 0x0, 0x5, [@generic={0x7c, 0x6, "101f9898520f2ca493675627895908efdc558dd03cc279b105d7c3518135030b1805612f7bd7bf90d7e47ee66d1d90c1791ad8ec378b1f37bc3881c08a08447ed8fc8dd68578ac421ab08a9a7f5c51c23a0f3a209cbf7aa032f63b20513da38c2ce5a8f37e9520640e52c1cb0f8d1bedd2fc74a900319bcf8dcb"}, @generic={0xf5, 0x23, "267854d0a8ab3cc7d4cf00b49916cab3d2570f151d296b41bc4036e174d1b371e4cad95360ce48309e146b63393367f8b487c143db4e2defa065dfa00b52d53ce15f5810d2d3918cdbcc683f7f9804149398efd8a9e51d8844c0366de1920d07c1405d52dc856d2215f93d8101f5051ca0e37acc5874c73e330106f4c87c0bd09543e9af717b790d035e6833b99c035f4f0f3c7ed7e69ae0f96322123a22803d8febace91b8a0ce7ee48a4d6a472a626f73f507282c66d7cf6b28e7f30c30c51834381a43448c01f9910f8bd2497df4eea9f721dabe04f9235759925ebe6b14ff1a92527de9bf96218a0b87fa7157ac8515395"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x3, 0x8, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x2}]}}, {{0x9, 0x5, 0x3, 0x1, 0x8, 0x2, 0x9, 0x40}}, {{0x9, 0x5, 0x0, 0x1, 0x0, 0xf5, 0x4, 0x1, [@generic={0x24, 0xa, "08356350c5f1f75624696c6381de714b3f2e913face305ab651eca9716bf8fab87d1"}, @generic={0x8e, 0x4, "2ef603341b415a7f04c945584e420f4b680ad7a2fad7d5ab5d14af65622181ae864bb99940b922a5e2947cd6dcd32cc553da709b6d672abe61ae6535f99dc532dd9fe682599e98fcd9ab1db71aa5d056f25ea034b778e73caf9ec23f48a6b9bfcea114c83c3f1f2e6b9ed8e473bcb49ad6bb8abf1adcf7cd2b55f7dac17dd733609525e4be1bec2fc7973f79"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x7ef, 0x4, 0x7, 0x8f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x4c0b}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x3, 0x4, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5e, 0x5}]}}]}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x1, 0xd2, 0x80, 0xff, 0xb}, 0x83, &(0x7f0000000080)={0x5, 0xf, 0x83, 0x6, [@ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x3, 0xff00, 0x3, [0x80bf00, 0xc030, 0x0, 0xc030, 0xff0180, 0xc0f0]}, @ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x5, 0xf000, 0x9, [0xf, 0xff00c0, 0x0, 0xc060]}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "79f7fb368818fe9d69823505c1fff55c"}, @ssp_cap={0xc, 0x10, 0xa, 0xd, 0x0, 0xf, 0x0, 0x7fff}, @ss_container_id={0x14, 0x10, 0x4, 0xfa, "6c129c4d2a800c12b3572312222f7ad5"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0xe, 0xfe, 0x5}]}, 0x4, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x1f, &(0x7f0000000180)=@string={0x1f, 0x3, "1549f8f22311104f1b9e465013e0308ac0a3a21e955d1197005d146021"}}, {0xa6, &(0x7f00000001c0)=@string={0xa6, 0x3, "9bb2b8f8d4ccc22ada3733ae6ee74bf1a476d9d4696d42614ef57c69b2e4376aece77ea1f08f278ba3044e29710c5f945d06b8f7275933e1169b9810cf7cf6a4e314021cea0d059814b3d1ce3d3819f1b3fba669286cbeb71c53088a3b69e7b6d292c4f34e025666f910afa23fd257499e843fe587a575c43d6609af35a700b02fccf6cf2e971d3de35b846e64cd593e6f94790a47bc9aa226ce204f2bf166009c77f733"}}, {0x6e, &(0x7f0000000280)=@string={0x6e, 0x3, "44c04133556589b5339b1456246133fc28db6c766450aa810b332e6c3d982fb581ea67a68251c97d3d571a4e334143588854e268fbe71382e5ecde25b7a16234b08d71d70d548e7b2ca6b96d5a304fd396a629f9b27ccf98b6c2552d939acbdbcca45487f40267816be2a95c"}}]}) 0s ago: executing program 5 (id=1277): syz_usb_connect$uac1(0x5, 0x71, &(0x7f0000000100)=ANY=[@ANYBLOB="12015002000000206b1d010140000102030109025f0003010140060904000000010100000a240100000c020102090401000001020000090401010101020000090501090800a507080725018007090009040200000102000009040201010102000009048209400004ff0307250183028000"], &(0x7f00000004c0)={0x0, 0x0, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="050f0c000107100216810000204a697300d6e5125c2a1236d5ad94776142321bd13076a9290c9ce899c6d0ca48308ec459454f35c1215fc4b0744190735ec5261d0792328280b49cea3bffa9f0b5a23426a23779ad5e8103"]}) r0 = getpgid(0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x202c00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x38) ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x1, 0x5003) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$nfs(0x0, &(0x7f00000005c0)='./bus\x00', 0x0, 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1100000004000000040000000400010014000800", @ANYRES8=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYRES16=r4], 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff"], 0xf0}, 0x1, 0xe}, 0x90) r5 = socket(0x28, 0x1, 0x0) r6 = syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65d, 0x10, 0x2, 0x20040}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x10000, 0x0, {0x3}}) io_uring_enter(r6, 0x47f6, 0xb277, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0) r10 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r9, 0x4004af07, &(0x7f0000000240)=r10) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) ioctl$VHOST_SET_VRING_KICK(r9, 0x4008af20, &(0x7f0000000040)={0x1, r10}) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r9, 0x4004af61, &(0x7f0000000000)=0x1) kernel console output (not intermixed with test programs): =2, SerialNumber=3 [ 315.837459][ T5995] usb 3-1: Product: syz [ 315.876247][ T5995] usb 3-1: Manufacturer: syz [ 315.880961][ T5995] usb 3-1: SerialNumber: syz [ 315.891023][ T5995] usb 3-1: config 0 descriptor?? [ 316.116585][ T9103] FAULT_INJECTION: forcing a failure. [ 316.116585][ T9103] name failslab, interval 1, probability 0, space 0, times 0 [ 316.160861][ T9103] CPU: 0 UID: 0 PID: 9103 Comm: syz.3.708 Not tainted syzkaller #0 PREEMPT(full) [ 316.160890][ T9103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 316.160899][ T9103] Call Trace: [ 316.160905][ T9103] [ 316.160913][ T9103] dump_stack_lvl+0x16c/0x1f0 [ 316.160943][ T9103] should_fail_ex+0x512/0x640 [ 316.160969][ T9103] ? __kmalloc_noprof+0xbf/0x510 [ 316.160986][ T9103] ? copy_splice_read+0x1a8/0xc20 [ 316.160998][ T9103] should_failslab+0xc2/0x120 [ 316.161011][ T9103] __kmalloc_noprof+0xd2/0x510 [ 316.161027][ T9103] copy_splice_read+0x1a8/0xc20 [ 316.161042][ T9103] ? __pfx_copy_splice_read+0x10/0x10 [ 316.161055][ T9103] ? lockdep_hardirqs_on+0x7c/0x110 [ 316.161075][ T9103] ? do_splice_read+0x1d1/0x370 [ 316.161087][ T9103] ? __pfx_copy_splice_read+0x10/0x10 [ 316.161098][ T9103] do_splice_read+0x282/0x370 [ 316.161112][ T9103] splice_direct_to_actor+0x2a1/0xa30 [ 316.161125][ T9103] ? __pfx_direct_splice_actor+0x10/0x10 [ 316.161140][ T9103] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 316.161153][ T9103] ? __pfx_file_has_perm+0x10/0x10 [ 316.161170][ T9103] do_splice_direct+0x174/0x240 [ 316.161182][ T9103] ? __pfx_do_splice_direct+0x10/0x10 [ 316.161195][ T9103] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 316.161208][ T9103] ? bpf_lsm_file_permission+0x9/0x10 [ 316.161223][ T9103] ? security_file_permission+0x71/0x210 [ 316.161242][ T9103] ? rw_verify_area+0xcf/0x6c0 [ 316.161262][ T9103] do_sendfile+0xb06/0xe50 [ 316.161275][ T9103] ? __pfx_do_sendfile+0x10/0x10 [ 316.161287][ T9103] ? __fget_files+0x20e/0x3c0 [ 316.161304][ T9103] __x64_sys_sendfile64+0x1d8/0x220 [ 316.161320][ T9103] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 316.161340][ T9103] do_syscall_64+0xcd/0x4e0 [ 316.161357][ T9103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.161370][ T9103] RIP: 0033:0x7f2e2d78eec9 [ 316.161380][ T9103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.161392][ T9103] RSP: 002b:00007f2e2e6a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 316.161403][ T9103] RAX: ffffffffffffffda RBX: 00007f2e2d9e6090 RCX: 00007f2e2d78eec9 [ 316.161411][ T9103] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007 [ 316.161418][ T9103] RBP: 00007f2e2e6a2090 R08: 0000000000000000 R09: 0000000000000000 [ 316.161424][ T9103] R10: 0000020000023893 R11: 0000000000000246 R12: 0000000000000001 [ 316.161431][ T9103] R13: 00007f2e2d9e6128 R14: 00007f2e2d9e6090 R15: 00007ffd4bfbb718 [ 316.161445][ T9103] [ 316.413590][ C0] vkms_vblank_simulate: vblank timer overrun [ 316.870550][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.877043][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.037600][ T9113] tipc: Started in network mode [ 317.055746][ T9113] tipc: Node identity 9e99e9b02d7f, cluster identity 4711 [ 317.085999][ T9113] tipc: Enabled bearer , priority 0 [ 317.116810][ T9113] syzkaller0: entered promiscuous mode [ 317.124469][ T9113] syzkaller0: entered allmulticast mode [ 317.183078][ T9113] tipc: Resetting bearer [ 317.210627][ T9112] tipc: Resetting bearer [ 317.272444][ T9112] tipc: Disabling bearer [ 317.561625][ T9119] ALSA: mixer_oss: invalid OSS volume '8' [ 318.061912][ T5995] usb 3-1: USB disconnect, device number 9 [ 318.256862][ T5862] udevd[5862]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 318.425360][ T5852] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 318.721406][ T5852] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.870576][ T5852] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 318.934898][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.968394][ T5852] usb 4-1: Product: syz [ 318.997553][ T5852] usb 4-1: Manufacturer: syz [ 319.045082][ T5852] usb 4-1: SerialNumber: syz [ 319.971796][ T9144] netlink: 28 bytes leftover after parsing attributes in process `syz.0.717'. [ 319.998942][ T9119] syz.4.711 (9119): drop_caches: 2 [ 321.358816][ T5852] usb 4-1: bad CDC descriptors [ 321.388346][ T5852] usb 4-1: USB disconnect, device number 22 [ 321.548005][ T9139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.714199][ T30] audit: type=1326 audit(2000000193.973:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.1.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 322.290893][ T30] audit: type=1326 audit(2000000193.973:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.1.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 322.495416][ T30] audit: type=1326 audit(2000000193.973:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.1.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 322.518627][ C1] vkms_vblank_simulate: vblank timer overrun [ 322.697908][ T30] audit: type=1326 audit(2000000193.973:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.1.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 322.721164][ C1] vkms_vblank_simulate: vblank timer overrun [ 322.786577][ T30] audit: type=1326 audit(2000000193.973:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.1.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 322.814274][ T30] audit: type=1326 audit(2000000193.973:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.1.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 322.837441][ C1] vkms_vblank_simulate: vblank timer overrun [ 323.276587][ T30] audit: type=1326 audit(2000000193.973:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.1.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 323.350815][ T30] audit: type=1326 audit(2000000193.973:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.1.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 324.225933][ T30] audit: type=1326 audit(2000000193.973:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.1.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 324.249195][ T30] audit: type=1326 audit(2000000193.973:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.1.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 324.272373][ C1] vkms_vblank_simulate: vblank timer overrun [ 324.655532][ T43] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 324.856988][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 324.973851][ T9205] fuse: Bad value for 'fd' [ 325.302040][ T43] usb 4-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=b7.de [ 325.324730][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.344475][ T43] usb 4-1: Product: syz [ 325.351924][ T43] usb 4-1: Manufacturer: syz [ 325.358492][ T43] usb 4-1: SerialNumber: syz [ 325.370668][ T43] usb 4-1: config 0 descriptor?? [ 325.384966][ T43] ttusb_dec_send_command: command bulk message failed: error -22 [ 325.421269][ T43] ttusb-dec 4-1:0.0: probe with driver ttusb-dec failed with error -22 [ 325.636869][ T9198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.645749][ T9198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.751587][ T43] usb 4-1: USB disconnect, device number 23 [ 325.862903][ T9211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.734'. [ 327.261046][ T9227] netlink: 48 bytes leftover after parsing attributes in process `syz.1.738'. [ 327.304621][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 327.304642][ T30] audit: type=1400 audit(2000000199.583:803): avc: denied { accept } for pid=9226 comm="syz.1.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 327.666435][ T43] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 327.948954][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 327.958046][ T43] usb 4-1: not running at top speed; connect to a high speed hub [ 327.968392][ T43] usb 4-1: config 56 has an invalid interface number: 33 but max is 0 [ 327.976978][ T43] usb 4-1: config 56 has no interface number 0 [ 327.983517][ T43] usb 4-1: config 56 interface 33 has no altsetting 0 [ 327.992663][ T43] usb 4-1: New USB device found, idVendor=106c, idProduct=ed66, bcdDevice=f1.81 [ 328.002026][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.010296][ T43] usb 4-1: Product: syz [ 328.014625][ T43] usb 4-1: Manufacturer: syz [ 328.019662][ T43] usb 4-1: SerialNumber: syz [ 328.246199][ T43] qmi_wwan 4-1:56.33: probe with driver qmi_wwan failed with error -22 [ 328.268906][ T43] usb 4-1: USB disconnect, device number 24 [ 328.583633][ T9250] batman_adv: batadv0: Adding interface: gretap1 [ 328.598837][ T9250] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.624172][ C1] vkms_vblank_simulate: vblank timer overrun [ 328.634670][ T9250] batman_adv: batadv0: Interface activated: gretap1 [ 329.120674][ T30] audit: type=1400 audit(2000000201.393:804): avc: denied { connect } for pid=9256 comm="syz.2.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 329.159195][ T30] audit: type=1400 audit(2000000201.443:805): avc: denied { setopt } for pid=9256 comm="syz.2.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 331.186651][ T5859] Bluetooth: hci4: command 0x0406 tx timeout [ 331.261860][ T30] audit: type=1400 audit(2000000203.173:806): avc: denied { write } for pid=9283 comm="syz.2.749" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 331.331768][ T9274] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 331.634283][ T30] audit: type=1400 audit(2000000203.923:807): avc: denied { ioctl } for pid=9289 comm="syz.4.750" path="socket:[20011]" dev="sockfs" ino=20011 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 331.800570][ T9298] netlink: 36 bytes leftover after parsing attributes in process `syz.4.750'. [ 331.841025][ T9298] netlink: 24 bytes leftover after parsing attributes in process `syz.4.750'. [ 332.145604][ T5929] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 332.320552][ T9311] netlink: 'syz.3.754': attribute type 11 has an invalid length. [ 332.328536][ T9311] netlink: 28 bytes leftover after parsing attributes in process `syz.3.754'. [ 332.372314][ T5929] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 332.492862][ T5929] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 332.553578][ T5929] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 332.564450][ T5929] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 332.584292][ T5929] usb 2-1: Manufacturer: syz [ 332.616153][ T5929] usb 2-1: config 0 descriptor?? [ 332.627908][ T9316] 9pnet_fd: Insufficient options for proto=fd [ 332.639885][ T5929] igorplugusb 2-1:0.0: incorrect number of endpoints [ 332.955537][ T9316] tipc: Started in network mode [ 333.272823][ T30] audit: type=1400 audit(2000000205.173:808): avc: denied { create } for pid=9315 comm="syz.3.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 333.292584][ T9316] tipc: Node identity ae0a3658f159, cluster identity 4711 [ 333.293868][ T9316] tipc: Enabled bearer , priority 0 [ 333.316173][ T9] usb 2-1: USB disconnect, device number 20 [ 333.331635][ T9319] syzkaller0: entered promiscuous mode [ 333.356323][ T9319] syzkaller0: entered allmulticast mode [ 333.380152][ T9316] tipc: Resetting bearer [ 333.393154][ T9313] tipc: Resetting bearer [ 333.414688][ T9313] tipc: Disabling bearer [ 334.936304][ T9349] tipc: Enabling of bearer rejected, failed to enable media [ 335.675103][ T30] audit: type=1400 audit(2000000207.963:809): avc: denied { bind } for pid=9355 comm="syz.1.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 335.821212][ T9367] FAULT_INJECTION: forcing a failure. [ 335.821212][ T9367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.881149][ T9367] CPU: 0 UID: 0 PID: 9367 Comm: syz.3.769 Not tainted syzkaller #0 PREEMPT(full) [ 335.881177][ T9367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 335.881188][ T9367] Call Trace: [ 335.881194][ T9367] [ 335.881203][ T9367] dump_stack_lvl+0x16c/0x1f0 [ 335.881230][ T9367] should_fail_ex+0x512/0x640 [ 335.881263][ T9367] _copy_from_user+0x2e/0xd0 [ 335.881289][ T9367] __sys_bpf+0x21d/0x4de0 [ 335.881316][ T9367] ? __pfx___sys_bpf+0x10/0x10 [ 335.881339][ T9367] ? ksys_write+0x190/0x250 [ 335.881364][ T9367] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 335.881402][ T9367] ? fput+0x9b/0xd0 [ 335.881425][ T9367] ? ksys_write+0x1ac/0x250 [ 335.881443][ T9367] ? __pfx_ksys_write+0x10/0x10 [ 335.881466][ T9367] __x64_sys_bpf+0x78/0xc0 [ 335.881487][ T9367] ? lockdep_hardirqs_on+0x7c/0x110 [ 335.881507][ T9367] do_syscall_64+0xcd/0x4e0 [ 335.881533][ T9367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.881552][ T9367] RIP: 0033:0x7f2e2d78eec9 [ 335.881566][ T9367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.881583][ T9367] RSP: 002b:00007f2e2e6c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 335.881600][ T9367] RAX: ffffffffffffffda RBX: 00007f2e2d9e5fa0 RCX: 00007f2e2d78eec9 [ 335.881612][ T9367] RDX: 0000000000000050 RSI: 0000200000000580 RDI: 0000000000000000 [ 335.881622][ T9367] RBP: 00007f2e2e6c3090 R08: 0000000000000000 R09: 0000000000000000 [ 335.881632][ T9367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.881641][ T9367] R13: 00007f2e2d9e6038 R14: 00007f2e2d9e5fa0 R15: 00007ffd4bfbb718 [ 335.881665][ T9367] [ 336.362900][ T30] audit: type=1400 audit(2000000208.633:810): avc: denied { mount } for pid=9379 comm="syz.4.774" name="/" dev="rpc_pipefs" ino=20832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 336.535498][ T5929] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 336.661980][ T6380] Bluetooth: hci5: Frame reassembly failed (-84) [ 336.696747][ T5929] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 336.705759][ T5929] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 336.817733][ T5929] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 336.826852][ T5929] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 336.834855][ T5929] usb 3-1: Manufacturer: syz [ 336.843668][ T5929] usb 3-1: config 0 descriptor?? [ 336.854214][ T5929] igorplugusb 3-1:0.0: incorrect number of endpoints [ 337.326340][ T5929] usb 3-1: USB disconnect, device number 10 [ 338.713456][ T5859] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 340.862633][ T30] audit: type=1400 audit(2000000213.143:811): avc: denied { read } for pid=9419 comm="syz.1.785" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 340.934999][ T30] audit: type=1400 audit(2000000213.193:812): avc: denied { load_policy } for pid=9422 comm="syz.3.786" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 341.051740][ T9423] SELinux: failed to load policy [ 342.202827][ T9438] netlink: 20 bytes leftover after parsing attributes in process `syz.1.789'. [ 342.316815][ T9440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.791'. [ 342.361200][ T9439] netlink: 20 bytes leftover after parsing attributes in process `syz.1.789'. [ 342.390984][ T9440] bridge_slave_1: left allmulticast mode [ 342.515829][ T9440] bridge_slave_1: left promiscuous mode [ 342.838383][ T9440] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.849976][ T9440] bridge_slave_0: left allmulticast mode [ 342.855909][ T9440] bridge_slave_0: left promiscuous mode [ 342.868692][ T9440] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.396166][ T30] audit: type=1400 audit(2000000216.673:813): avc: denied { watch watch_reads } for pid=9453 comm="syz.0.795" path="/140" dev="tmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 345.610924][ T9475] tipc: Enabling of bearer rejected, failed to enable media [ 345.703833][ T9478] ubi31: detaching mtd0 [ 345.747853][ T9478] ubi31: mtd0 is detached [ 345.858534][ T9480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.799'. [ 346.416889][ T5922] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 346.755986][ T5922] usb 1-1: Using ep0 maxpacket: 16 [ 346.778810][ T5922] usb 1-1: descriptor type invalid, skip [ 346.784824][ T5922] usb 1-1: descriptor type invalid, skip [ 346.816567][ T5922] usb 1-1: descriptor type invalid, skip [ 346.836806][ T5922] usb 1-1: descriptor type invalid, skip [ 346.867822][ T5922] usb 1-1: config 192 has an invalid interface number: 253 but max is 0 [ 346.895473][ T5922] usb 1-1: config 192 has no interface number 0 [ 346.903546][ T5922] usb 1-1: config 192 interface 253 has no altsetting 0 [ 346.921983][ T5922] usb 1-1: string descriptor 0 read error: -22 [ 346.928663][ T5922] usb 1-1: New USB device found, idVendor=045e, idProduct=00f5, bcdDevice=b8.4b [ 347.027505][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.055475][ T5922] gspca_main: sonixj-2.14.0 probing 045e:00f5 [ 347.318399][ T5922] gspca_sonixj: reg_w1 err -71 [ 347.327266][ T5922] sonixj 1-1:192.253: probe with driver sonixj failed with error -71 [ 347.340928][ T9480] vxcan1 speed is unknown, defaulting to 1000 [ 347.364502][ T5922] usb 1-1: USB disconnect, device number 15 [ 347.790553][ T9499] netlink: 20 bytes leftover after parsing attributes in process `syz.2.804'. [ 347.972096][ T9500] netlink: 20 bytes leftover after parsing attributes in process `syz.2.804'. [ 350.078052][ T9521] tipc: Enabling of bearer rejected, failed to enable media [ 350.345555][ T5852] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 350.367592][ T5854] Bluetooth: hci0: unexpected event for opcode 0x040e [ 350.379804][ T30] audit: type=1400 audit(2000000222.663:814): avc: denied { listen } for pid=9523 comm="syz.2.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 350.467756][ T30] audit: type=1400 audit(2000000222.673:815): avc: denied { accept } for pid=9523 comm="syz.2.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 350.807078][ T5852] usb 1-1: config 0 interface 0 has no altsetting 0 [ 350.822872][ T5852] usb 1-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=b7.de [ 350.832672][ T5852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.842344][ T5852] usb 1-1: Product: syz [ 350.848590][ T5852] usb 1-1: Manufacturer: syz [ 350.853395][ T5852] usb 1-1: SerialNumber: syz [ 350.869540][ T5852] usb 1-1: config 0 descriptor?? [ 350.880698][ T5852] ttusb_dec_send_command: command bulk message failed: error -22 [ 350.903206][ T5852] ttusb-dec 1-1:0.0: probe with driver ttusb-dec failed with error -22 [ 351.225266][ T9519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.243160][ T9519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.257011][ T9541] netlink: 20 bytes leftover after parsing attributes in process `syz.2.817'. [ 351.325929][ T5852] usb 1-1: USB disconnect, device number 16 [ 351.467469][ T6843] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.467538][ T9541] netlink: 20 bytes leftover after parsing attributes in process `syz.2.817'. [ 351.477147][ T6843] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.494637][ T6843] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.503951][ T6843] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.788873][ T30] audit: type=1400 audit(2000000224.083:816): avc: denied { read } for pid=9535 comm="syz.3.816" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 351.876491][ T30] audit: type=1400 audit(2000000224.083:817): avc: denied { open } for pid=9535 comm="syz.3.816" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 353.725517][ T9567] tipc: Enabling of bearer rejected, failed to enable media [ 354.752912][ T9585] ubi31: attaching mtd0 [ 354.757997][ T9585] ubi31: scanning is finished [ 355.289450][ T9590] netlink: 'syz.0.830': attribute type 1 has an invalid length. [ 355.298951][ T9590] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 355.306346][ T9590] IPv6: NLM_F_CREATE should be set when creating new route [ 355.313603][ T9590] IPv6: NLM_F_CREATE should be set when creating new route [ 355.869380][ T9585] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 355.894480][ T9585] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 355.905642][ T9585] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 355.951787][ T9585] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 356.115872][ T9585] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 356.134221][ T9585] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 356.143576][ T9585] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 398515870 [ 356.155495][ T9585] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 356.167056][ T9600] ubi31: detaching mtd0 [ 356.179000][ T9600] ubi31: mtd0 is detached [ 357.588974][ T9629] netlink: 60 bytes leftover after parsing attributes in process `syz.2.837'. [ 357.824186][ T30] audit: type=1400 audit(2000000230.113:818): avc: denied { mount } for pid=9632 comm="syz.0.840" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 357.846500][ C1] vkms_vblank_simulate: vblank timer overrun [ 358.386540][ T30] audit: type=1400 audit(2000000230.253:819): avc: denied { remount } for pid=9632 comm="syz.0.840" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 358.619824][ T30] audit: type=1400 audit(2000000230.913:820): avc: denied { unmount } for pid=5849 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 360.186788][ T9661] input: syz1 as /devices/virtual/input/input36 [ 360.529453][ T9668] ubi31: attaching mtd0 [ 360.656689][ T9668] ubi31: scanning is finished [ 360.777149][ T9671] FAULT_INJECTION: forcing a failure. [ 360.777149][ T9671] name failslab, interval 1, probability 0, space 0, times 0 [ 360.823410][ T9668] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 360.847483][ T9671] CPU: 1 UID: 0 PID: 9671 Comm: syz.4.847 Not tainted syzkaller #0 PREEMPT(full) [ 360.847520][ T9671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 360.847533][ T9671] Call Trace: [ 360.847541][ T9671] [ 360.847551][ T9671] dump_stack_lvl+0x16c/0x1f0 [ 360.847589][ T9671] should_fail_ex+0x512/0x640 [ 360.847617][ T9671] ? fs_reclaim_acquire+0xae/0x150 [ 360.847649][ T9671] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 360.847682][ T9671] should_failslab+0xc2/0x120 [ 360.847708][ T9671] __kmalloc_noprof+0xd2/0x510 [ 360.847738][ T9671] tomoyo_realpath_from_path+0xc2/0x6e0 [ 360.847774][ T9671] ? tomoyo_profile+0x47/0x60 [ 360.847798][ T9671] tomoyo_path_number_perm+0x245/0x580 [ 360.847825][ T9671] ? tomoyo_path_number_perm+0x237/0x580 [ 360.847855][ T9671] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 360.847885][ T9671] ? find_held_lock+0x2b/0x80 [ 360.847941][ T9671] ? find_held_lock+0x2b/0x80 [ 360.847966][ T9671] ? hook_file_ioctl_common+0x145/0x410 [ 360.847997][ T9671] ? __fget_files+0x20e/0x3c0 [ 360.848024][ T9671] security_file_ioctl+0x9b/0x240 [ 360.848052][ T9671] __x64_sys_ioctl+0xb7/0x210 [ 360.848082][ T9671] do_syscall_64+0xcd/0x4e0 [ 360.848108][ T9671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.848126][ T9671] RIP: 0033:0x7f206df8eec9 [ 360.848140][ T9671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.848159][ T9671] RSP: 002b:00007f206ee56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 360.848178][ T9671] RAX: ffffffffffffffda RBX: 00007f206e1e5fa0 RCX: 00007f206df8eec9 [ 360.848189][ T9671] RDX: 0000200000000440 RSI: 0000000040046f41 RDI: 0000000000000003 [ 360.848200][ T9671] RBP: 00007f206ee56090 R08: 0000000000000000 R09: 0000000000000000 [ 360.848210][ T9671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.848221][ T9671] R13: 00007f206e1e6038 R14: 00007f206e1e5fa0 R15: 00007ffe08fa3578 [ 360.848245][ T9671] [ 360.848258][ T9671] ERROR: Out of memory at tomoyo_realpath_from_path. [ 361.077129][ T9668] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 361.084578][ T9668] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 361.091994][ T9668] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 361.096769][ T30] audit: type=1400 audit(2000000233.393:821): avc: denied { read write } for pid=9673 comm="syz.3.848" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 361.126230][ T9668] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 361.136461][ T9668] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 361.161944][ T9668] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 398515870 [ 361.162393][ T9674] FAULT_INJECTION: forcing a failure. [ 361.162393][ T9674] name failslab, interval 1, probability 0, space 0, times 0 [ 361.173025][ T9668] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 361.244336][ T30] audit: type=1400 audit(2000000233.423:822): avc: denied { open } for pid=9673 comm="syz.3.848" path="/177/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 361.269730][ T9671] ubi31: detaching mtd0 [ 361.277611][ T9671] ubi31: mtd0 is detached [ 361.323839][ T9674] CPU: 0 UID: 0 PID: 9674 Comm: syz.3.848 Not tainted syzkaller #0 PREEMPT(full) [ 361.323870][ T9674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 361.323882][ T9674] Call Trace: [ 361.323889][ T9674] [ 361.323897][ T9674] dump_stack_lvl+0x16c/0x1f0 [ 361.323929][ T9674] should_fail_ex+0x512/0x640 [ 361.323954][ T9674] ? __kvmalloc_node_noprof+0x124/0x620 [ 361.323978][ T9674] should_failslab+0xc2/0x120 [ 361.324001][ T9674] __kvmalloc_node_noprof+0x137/0x620 [ 361.324021][ T9674] ? netfs_extract_user_iter+0x164/0x620 [ 361.324052][ T9674] ? netfs_extract_user_iter+0x164/0x620 [ 361.324074][ T9674] netfs_extract_user_iter+0x164/0x620 [ 361.324104][ T9674] ? rcu_is_watching+0x12/0xc0 [ 361.324129][ T9674] ? trace_netfs_folioq+0x188/0x210 [ 361.324164][ T9674] ? __pfx_netfs_extract_user_iter+0x10/0x10 [ 361.324186][ T9674] ? iov_iter_folio_queue+0x3e/0x1f0 [ 361.324215][ T9674] ? rolling_buffer_init+0x8a/0xb0 [ 361.324243][ T9674] ? netfs_create_write_req+0x527/0x890 [ 361.324266][ T9674] netfs_unbuffered_write_iter_locked+0x4b9/0xa00 [ 361.324297][ T9674] netfs_unbuffered_write_iter+0x414/0x6d0 [ 361.324327][ T9674] v9fs_file_write_iter+0xbf/0x100 [ 361.324355][ T9674] do_iter_readv_writev+0x65f/0x9e0 [ 361.324389][ T9674] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 361.324434][ T9674] vfs_writev+0x35f/0xde0 [ 361.324462][ T9674] ? __pfx_vfs_writev+0x10/0x10 [ 361.324478][ T9674] ? __mutex_lock+0x1c5/0x1060 [ 361.324512][ T9674] ? __pfx___mutex_lock+0x10/0x10 [ 361.324547][ T9674] ? __fget_files+0x20e/0x3c0 [ 361.324568][ T9674] ? __fget_files+0x190/0x3c0 [ 361.324595][ T9674] ? do_writev+0x132/0x340 [ 361.324611][ T9674] do_writev+0x132/0x340 [ 361.324630][ T9674] ? __pfx_do_writev+0x10/0x10 [ 361.324657][ T9674] do_syscall_64+0xcd/0x4e0 [ 361.324684][ T9674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.324704][ T9674] RIP: 0033:0x7f2e2d78eec9 [ 361.324720][ T9674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.324739][ T9674] RSP: 002b:00007f2e2e6c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 361.324758][ T9674] RAX: ffffffffffffffda RBX: 00007f2e2d9e5fa0 RCX: 00007f2e2d78eec9 [ 361.324771][ T9674] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000007 [ 361.324782][ T9674] RBP: 00007f2e2e6c3090 R08: 0000000000000000 R09: 0000000000000000 [ 361.324794][ T9674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.324804][ T9674] R13: 00007f2e2d9e6038 R14: 00007f2e2d9e5fa0 R15: 00007ffd4bfbb718 [ 361.324832][ T9674] [ 362.530369][ T30] audit: type=1326 audit(2000000234.823:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9687 comm="syz.4.852" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f206df8eec9 code=0x0 [ 362.867438][ T30] audit: type=1326 audit(2000000235.003:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9689 comm="syz.1.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 362.898295][ T30] audit: type=1326 audit(2000000235.003:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9689 comm="syz.1.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 362.965204][ T9698] sg_write: process 612 (syz.4.855) changed security contexts after opening file descriptor, this is not allowed. [ 362.971364][ T30] audit: type=1326 audit(2000000235.003:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9689 comm="syz.1.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 363.015807][ T5929] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 363.076505][ T30] audit: type=1326 audit(2000000235.003:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9689 comm="syz.1.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 363.099777][ C0] vkms_vblank_simulate: vblank timer overrun [ 363.225592][ T5929] usb 3-1: Using ep0 maxpacket: 16 [ 363.243852][ T5929] usb 3-1: descriptor type invalid, skip [ 363.252664][ T5929] usb 3-1: descriptor type invalid, skip [ 363.385371][ T5929] usb 3-1: descriptor type invalid, skip [ 363.390494][ T30] audit: type=1326 audit(2000000235.003:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9689 comm="syz.1.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 363.405605][ T5929] usb 3-1: descriptor type invalid, skip [ 363.414208][ C0] vkms_vblank_simulate: vblank timer overrun [ 363.503694][ T5929] usb 3-1: config 192 has an invalid interface number: 253 but max is 0 [ 363.519715][ T5929] usb 3-1: config 192 has no interface number 0 [ 363.529912][ T30] audit: type=1326 audit(2000000235.013:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9689 comm="syz.1.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 363.542103][ T5929] usb 3-1: config 192 interface 253 has no altsetting 0 [ 363.646809][ T30] audit: type=1326 audit(2000000235.013:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9689 comm="syz.1.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 363.764889][ T5929] usb 3-1: string descriptor 0 read error: -22 [ 363.775346][ T5929] usb 3-1: New USB device found, idVendor=045e, idProduct=00f5, bcdDevice=b8.4b [ 363.815185][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.815198][ T30] audit: type=1326 audit(2000000235.013:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9689 comm="syz.1.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 363.815240][ T30] audit: type=1326 audit(2000000235.013:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9689 comm="syz.1.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 363.849866][ C0] vkms_vblank_simulate: vblank timer overrun [ 363.979611][ T5929] gspca_main: sonixj-2.14.0 probing 045e:00f5 [ 364.020320][ T30] audit: type=1326 audit(2000000235.013:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9689 comm="syz.1.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 364.269084][ T9702] vxcan1 speed is unknown, defaulting to 1000 [ 364.311485][ T5929] gspca_sonixj: reg_w1 err -71 [ 364.321244][ T5929] sonixj 3-1:192.253: probe with driver sonixj failed with error -71 [ 364.391458][ T5929] usb 3-1: USB disconnect, device number 11 [ 365.261377][ T9735] binder: 9734:9735 ioctl c0306201 200000000640 returned -22 [ 365.307723][ T9735] binder: 9734:9735 ioctl 890b 200000000000 returned -22 [ 365.942325][ T9742] input: syz1 as /devices/virtual/input/input37 [ 367.611070][ T9764] cgroup: none used incorrectly [ 368.113159][ T9768] netlink: 20 bytes leftover after parsing attributes in process `syz.1.872'. [ 368.279391][ T9772] netlink: 'syz.0.871': attribute type 5 has an invalid length. [ 368.707614][ T841] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 368.783719][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 368.784765][ T30] audit: type=1400 audit(2000000241.073:854): avc: denied { create } for pid=9773 comm="syz.2.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 369.039706][ T9783] netlink: 'syz.4.874': attribute type 5 has an invalid length. [ 369.075432][ T841] usb 1-1: Using ep0 maxpacket: 32 [ 369.173865][ T841] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 369.190845][ T841] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 369.200192][ T841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.215843][ T841] usb 1-1: Product: syz [ 369.222077][ T841] usb 1-1: Manufacturer: syz [ 369.227261][ T841] usb 1-1: SerialNumber: syz [ 369.234396][ T841] usb 1-1: config 0 descriptor?? [ 370.347415][ T5852] usb 1-1: USB disconnect, device number 17 [ 372.396685][ T9804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.878'. [ 372.413649][ T9804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.878'. [ 372.490908][ T9806] FAULT_INJECTION: forcing a failure. [ 372.490908][ T9806] name failslab, interval 1, probability 0, space 0, times 0 [ 372.516078][ T9804] netlink: 'syz.4.878': attribute type 21 has an invalid length. [ 372.525032][ T9804] netlink: 128 bytes leftover after parsing attributes in process `syz.4.878'. [ 372.535154][ T9804] netlink: 'syz.4.878': attribute type 5 has an invalid length. [ 372.543027][ T9806] CPU: 1 UID: 0 PID: 9806 Comm: syz.2.881 Not tainted syzkaller #0 PREEMPT(full) [ 372.543055][ T9806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 372.543064][ T9806] Call Trace: [ 372.543070][ T9806] [ 372.543076][ T9806] dump_stack_lvl+0x16c/0x1f0 [ 372.543105][ T9806] should_fail_ex+0x512/0x640 [ 372.543127][ T9806] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 372.543149][ T9806] should_failslab+0xc2/0x120 [ 372.543170][ T9806] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 372.543189][ T9806] ? __alloc_skb+0x2b2/0x380 [ 372.543214][ T9806] __alloc_skb+0x2b2/0x380 [ 372.543233][ T9806] ? __pfx___alloc_skb+0x10/0x10 [ 372.543250][ T9806] ? __pfx_rtnl_bridge_setlink+0x10/0x10 [ 372.543281][ T9806] netlink_ack+0x15d/0xb80 [ 372.543313][ T9806] netlink_rcv_skb+0x332/0x420 [ 372.543336][ T9806] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 372.543360][ T9806] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 372.543391][ T9806] ? netlink_deliver_tap+0x1ae/0xd30 [ 372.543418][ T9806] netlink_unicast+0x5a7/0x870 [ 372.543445][ T9806] ? __pfx_netlink_unicast+0x10/0x10 [ 372.543468][ T9806] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 372.543497][ T9806] netlink_sendmsg+0x8d1/0xdd0 [ 372.543522][ T9806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.543553][ T9806] ____sys_sendmsg+0xa95/0xc70 [ 372.543578][ T9806] ? copy_msghdr_from_user+0x10a/0x160 [ 372.543600][ T9806] ? __pfx_____sys_sendmsg+0x10/0x10 [ 372.543637][ T9806] ___sys_sendmsg+0x134/0x1d0 [ 372.543660][ T9806] ? __pfx____sys_sendmsg+0x10/0x10 [ 372.543711][ T9806] __sys_sendmsg+0x16d/0x220 [ 372.543734][ T9806] ? __pfx___sys_sendmsg+0x10/0x10 [ 372.543772][ T9806] do_syscall_64+0xcd/0x4e0 [ 372.543796][ T9806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.543814][ T9806] RIP: 0033:0x7fd102d8eec9 [ 372.543828][ T9806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.543845][ T9806] RSP: 002b:00007fd103cd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.543862][ T9806] RAX: ffffffffffffffda RBX: 00007fd102fe5fa0 RCX: 00007fd102d8eec9 [ 372.543873][ T9806] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 372.543884][ T9806] RBP: 00007fd103cd5090 R08: 0000000000000000 R09: 0000000000000000 [ 372.543894][ T9806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.543904][ T9806] R13: 00007fd102fe6038 R14: 00007fd102fe5fa0 R15: 00007ffd4f5d7148 [ 372.543927][ T9806] [ 372.550335][ T9804] netlink: 'syz.4.878': attribute type 6 has an invalid length. [ 372.655479][ T5922] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 372.819332][ T9804] netlink: 3 bytes leftover after parsing attributes in process `syz.4.878'. [ 372.935282][ T30] audit: type=1400 audit(2000000245.223:855): avc: denied { ioctl } for pid=9813 comm="syz.0.883" path="socket:[22345]" dev="sockfs" ino=22345 ioctlcmd=0x4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 372.985483][ T5922] usb 2-1: Using ep0 maxpacket: 8 [ 372.996254][ T5922] usb 2-1: no configurations [ 373.001098][ T5922] usb 2-1: can't read configurations, error -22 [ 373.166702][ T5922] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 373.335644][ T5922] usb 2-1: Using ep0 maxpacket: 8 [ 373.529194][ T5922] usb 2-1: no configurations [ 373.549608][ T5922] usb 2-1: can't read configurations, error -22 [ 373.780769][ T5922] usb usb2-port1: attempt power cycle [ 374.195686][ T5922] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 374.284418][ T5922] usb 2-1: Using ep0 maxpacket: 8 [ 374.290169][ T5922] usb 2-1: no configurations [ 374.294762][ T5922] usb 2-1: can't read configurations, error -22 [ 374.437602][ T5922] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 374.580776][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 374.588274][ T5922] usb 2-1: device descriptor read/8, error -32 [ 374.709287][ T5922] usb usb2-port1: unable to enumerate USB device [ 376.138493][ T30] audit: type=1400 audit(2000000248.113:856): avc: denied { write } for pid=9838 comm="syz.0.890" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 378.099969][ T30] audit: type=1400 audit(2000000250.393:857): avc: denied { mounton } for pid=9870 comm="syz.1.902" path="/188/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 378.317601][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.324423][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.316737][ T5854] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 379.327629][ T5854] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 379.336483][ T5854] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 379.344496][ T5854] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 379.362425][ T5854] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 379.897423][ T9891] netlink: 80 bytes leftover after parsing attributes in process `syz.0.905'. [ 380.256023][ T5922] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 380.562661][ T5922] usb 1-1: config 0 has an invalid descriptor of length 44, skipping remainder of the config [ 380.576964][ T30] audit: type=1400 audit(2000000252.873:858): avc: denied { ioctl } for pid=9895 comm="syz.2.907" path="socket:[23551]" dev="sockfs" ino=23551 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 380.628316][ T5922] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 380.656898][ T5922] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 380.688440][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.874628][ T5922] usb 1-1: config 0 descriptor?? [ 380.933576][ T9899] bridge0: entered promiscuous mode [ 381.009684][ T9899] bridge0: entered allmulticast mode [ 381.180926][ T9880] vxcan1 speed is unknown, defaulting to 1000 [ 381.425817][ T5854] Bluetooth: hci5: command tx timeout [ 382.787978][ T841] usb 1-1: USB disconnect, device number 18 [ 383.035407][ T5922] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 383.201860][ T9880] chnl_net:caif_netlink_parms(): no params data found [ 383.208801][ T5922] usb 3-1: Using ep0 maxpacket: 8 [ 383.218267][ T5922] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 383.225457][ T841] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 383.235346][ T5922] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 383.278673][ T5922] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 383.300126][ T5922] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 383.313307][ T5922] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 383.324773][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.407477][ T841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 383.420793][ T841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 383.475998][ T841] usb 1-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 383.485427][ T9880] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.485575][ T9880] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.485773][ T9880] bridge_slave_0: entered allmulticast mode [ 383.509955][ T9880] bridge_slave_0: entered promiscuous mode [ 383.511627][ T5854] Bluetooth: hci5: command tx timeout [ 383.519413][ T9880] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.523377][ T841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.532097][ T9880] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.536766][ T5852] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 383.544478][ T9880] bridge_slave_1: entered allmulticast mode [ 383.554001][ T5854] Bluetooth: hci1: unexpected cc 0x203e length: 2 > 1 [ 383.562599][ T5922] usb 3-1: GET_CAPABILITIES returned 0 [ 383.565022][ T5854] Bluetooth: hci1: unexpected event for opcode 0x203e [ 383.571120][ T30] audit: type=1400 audit(2000000255.863:859): avc: denied { bind } for pid=9929 comm="syz.4.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 383.600954][ T5922] usbtmc 3-1:16.0: can't read capabilities [ 383.608568][ T9880] bridge_slave_1: entered promiscuous mode [ 383.616751][ T841] usb 1-1: config 0 descriptor?? [ 383.625870][ T9917] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 383.760854][ T5852] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 383.787154][ T5852] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.795061][ T9913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.811157][ T9913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.827027][ T5852] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 383.839466][ T30] audit: type=1400 audit(2000000255.863:860): avc: denied { write } for pid=9929 comm="syz.4.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 383.840999][ T9913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.914'. [ 383.865725][ T5852] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 383.880269][ T9913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.914'. [ 383.884401][ T9880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.902752][ T5852] usb 2-1: Manufacturer: syz [ 383.913798][ T9880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.925029][ T5852] usb 2-1: config 0 descriptor?? [ 383.943045][ T5929] usb 3-1: USB disconnect, device number 12 [ 384.029370][ T9880] team0: Port device team_slave_0 added [ 384.041825][ T9880] team0: Port device team_slave_1 added [ 384.065512][ T5852] rc_core: IR keymap rc-hauppauge not found [ 384.071576][ T5852] Registered IR keymap rc-empty [ 384.078914][ T5852] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 384.079563][ T9917] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 384.104610][ T5852] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input38 [ 384.120920][ T9880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.138203][ T9880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.182212][ T5929] usb 2-1: USB disconnect, device number 25 [ 384.202782][ T9880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.237680][ T9880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.245198][ T9880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.274364][ T9880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.319034][ T841] usbhid 1-1:0.0: can't add hid device: -71 [ 384.326247][ T841] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 384.338827][ T841] usb 1-1: USB disconnect, device number 19 [ 384.362444][ T9880] hsr_slave_0: entered promiscuous mode [ 384.369182][ T9880] hsr_slave_1: entered promiscuous mode [ 384.375155][ T9880] debugfs: 'hsr0' already exists in 'hsr' [ 384.381866][ T9880] Cannot create hsr debugfs directory [ 384.529196][ T9880] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 384.542287][ T9880] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 384.847648][ T9880] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 384.956055][ T9880] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 385.306381][ T9880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.542573][ T9880] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.586851][ T5854] Bluetooth: hci5: command tx timeout [ 385.991430][ T199] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.998641][ T199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.438170][ T199] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.445273][ T199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.618607][ T30] audit: type=1400 audit(2000000258.903:861): avc: denied { ioctl } for pid=9966 comm="syz.0.924" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 386.855759][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 386.934003][ T9880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.021491][ T9] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 387.033181][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.062179][ T9] usb 1-1: Product: syz [ 387.077446][ T9] usb 1-1: Manufacturer: syz [ 387.086862][ T9] usb 1-1: SerialNumber: syz [ 387.113938][ T9] usb 1-1: config 0 descriptor?? [ 387.137714][ T9982] input: syz1 as /devices/virtual/input/input39 [ 387.323810][ T9] usb 1-1: f81604_read: reg: 105 failed: -EPIPE [ 387.344635][ T9] f81604 1-1:0.0: Setting termination of CH#0 failed: -EPIPE [ 387.359076][ T9] f81604 1-1:0.0: probe with driver f81604 failed with error -32 [ 387.529859][ T9880] veth0_vlan: entered promiscuous mode [ 387.548458][ T9989] FAULT_INJECTION: forcing a failure. [ 387.548458][ T9989] name failslab, interval 1, probability 0, space 0, times 0 [ 387.557297][ T9880] veth1_vlan: entered promiscuous mode [ 387.562326][ T9989] CPU: 1 UID: 0 PID: 9989 Comm: syz.2.929 Not tainted syzkaller #0 PREEMPT(full) [ 387.562347][ T9989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 387.562356][ T9989] Call Trace: [ 387.562361][ T9989] [ 387.562367][ T9989] dump_stack_lvl+0x16c/0x1f0 [ 387.562392][ T9989] should_fail_ex+0x512/0x640 [ 387.562411][ T9989] ? fs_reclaim_acquire+0xae/0x150 [ 387.562433][ T9989] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 387.562457][ T9989] should_failslab+0xc2/0x120 [ 387.562475][ T9989] __kmalloc_noprof+0xd2/0x510 [ 387.562498][ T9989] tomoyo_realpath_from_path+0xc2/0x6e0 [ 387.562522][ T9989] ? tomoyo_profile+0x47/0x60 [ 387.562540][ T9989] tomoyo_path_number_perm+0x245/0x580 [ 387.562558][ T9989] ? tomoyo_path_number_perm+0x237/0x580 [ 387.562584][ T9989] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 387.562621][ T9989] ? find_held_lock+0x2b/0x80 [ 387.562659][ T9989] ? find_held_lock+0x2b/0x80 [ 387.562677][ T9989] ? hook_file_ioctl_common+0x145/0x410 [ 387.562702][ T9989] ? __fget_files+0x20e/0x3c0 [ 387.562723][ T9989] security_file_ioctl+0x9b/0x240 [ 387.562748][ T9989] __x64_sys_ioctl+0xb7/0x210 [ 387.562772][ T9989] do_syscall_64+0xcd/0x4e0 [ 387.562794][ T9989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.562809][ T9989] RIP: 0033:0x7fd102d8eec9 [ 387.562822][ T9989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.562836][ T9989] RSP: 002b:00007fd103cd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 387.562852][ T9989] RAX: ffffffffffffffda RBX: 00007fd102fe5fa0 RCX: 00007fd102d8eec9 [ 387.562862][ T9989] RDX: 0000200000000040 RSI: 0000000080404509 RDI: 0000000000000003 [ 387.562871][ T9989] RBP: 00007fd103cd5090 R08: 0000000000000000 R09: 0000000000000000 [ 387.562880][ T9989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.562889][ T9989] R13: 00007fd102fe6038 R14: 00007fd102fe5fa0 R15: 00007ffd4f5d7148 [ 387.562910][ T9989] [ 387.562964][ T9989] ERROR: Out of memory at tomoyo_realpath_from_path. [ 387.587701][ T5854] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 387.695358][ T5859] Bluetooth: hci5: command tx timeout [ 387.715763][ T5854] Bluetooth: hci1: Injecting HCI hardware error event [ 387.797589][ T5854] Bluetooth: hci1: hardware error 0x00 [ 387.854819][ T5995] usb 1-1: USB disconnect, device number 20 [ 387.856394][ T9880] veth0_macvtap: entered promiscuous mode [ 387.910995][ T9880] veth1_macvtap: entered promiscuous mode [ 387.946736][ T9880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.964010][ T9880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.984297][ T6843] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.004333][ T6843] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.035151][ T6843] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.095192][ T6843] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.284487][ T9998] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 388.294064][ T9998] team0: Port device batadv1 added [ 388.456765][ T5995] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 388.491472][ T3490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.509749][ T3490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.584379][ T3490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.610411][ T3490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.784632][ T30] audit: type=1400 audit(2000000261.073:862): avc: denied { mounton } for pid=9880 comm="syz-executor" path="/root/syzkaller.AElPaJ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 388.831261][T10004] input: syz1 as /devices/virtual/input/input40 [ 388.866335][ T5995] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 388.874731][ T5995] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.905044][ T30] audit: type=1400 audit(2000000261.113:863): avc: denied { mount } for pid=9880 comm="syz-executor" name="/" dev="gadgetfs" ino=8307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 388.938450][ T5995] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 388.996748][ T5995] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 389.013417][ T5995] usb 1-1: Manufacturer: syz [ 389.021099][T10010] netlink: 48 bytes leftover after parsing attributes in process `syz.5.896'. [ 389.035958][ T30] audit: type=1400 audit(2000000261.123:864): avc: denied { mounton } for pid=9880 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 389.195644][T10010] netlink: 48 bytes leftover after parsing attributes in process `syz.5.896'. [ 389.270474][ T5995] usb 1-1: config 0 descriptor?? [ 389.970064][ T5854] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 390.066778][ T5995] rc_core: IR keymap rc-hauppauge not found [ 390.074651][ T5995] Registered IR keymap rc-empty [ 390.100009][ T5995] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 390.148870][ T30] audit: type=1400 audit(2000000262.433:865): avc: denied { bind } for pid=10020 comm="syz.0.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 390.556610][ T5995] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input41 [ 390.613934][ T5995] usb 1-1: USB disconnect, device number 21 [ 391.348162][T10037] netlink: 20 bytes leftover after parsing attributes in process `syz.1.942'. [ 391.495515][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 391.778248][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 391.793557][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 55, changing to 7 [ 391.827461][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 8496, setting to 1024 [ 391.842765][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 391.853458][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.862774][ T9] usb 6-1: Product: syz [ 391.868353][ T9] usb 6-1: Manufacturer: syz [ 391.874671][ T9] usb 6-1: SerialNumber: syz [ 391.887437][ T9] usb 6-1: config 0 descriptor?? [ 391.903501][ T9] usb 6-1: 0:0 : invalid sync pipe. bmAttributes e5, bLength 9, bSynchAddress 37 [ 393.087588][ T9] usb 6-1: USB disconnect, device number 2 [ 393.171922][ T30] audit: type=1400 audit(2000000265.463:866): avc: denied { setopt } for pid=10057 comm="syz.0.948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 393.180358][ T6213] udevd[6213]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 393.421944][T10071] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 393.591086][ T5859] Bluetooth: hci0: unexpected event for opcode 0x0c1c [ 394.479487][T10080] netlink: 20 bytes leftover after parsing attributes in process `syz.4.955'. [ 397.761072][T10128] mkiss: ax0: crc mode is auto. [ 397.867196][ T30] audit: type=1326 audit(2000000270.153:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10125 comm="syz.2.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd102d8eec9 code=0x7ffc0000 [ 397.928100][ T30] audit: type=1326 audit(2000000270.153:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10125 comm="syz.2.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd102d8eec9 code=0x7ffc0000 [ 398.539392][ T30] audit: type=1326 audit(2000000270.153:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10125 comm="syz.2.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fd102d8eec9 code=0x7ffc0000 [ 398.645054][ T30] audit: type=1326 audit(2000000270.153:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10125 comm="syz.2.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd102d8eec9 code=0x7ffc0000 [ 398.683184][ T30] audit: type=1326 audit(2000000270.153:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10125 comm="syz.2.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd102d8eec9 code=0x7ffc0000 [ 398.815848][ T30] audit: type=1326 audit(2000000270.153:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10125 comm="syz.2.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd102d8eec9 code=0x7ffc0000 [ 398.842539][ T30] audit: type=1326 audit(2000000270.153:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10125 comm="syz.2.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd102d8eec9 code=0x7ffc0000 [ 398.869675][T10139] input: syz1 as /devices/virtual/input/input42 [ 399.075440][ T30] audit: type=1326 audit(2000000270.153:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10125 comm="syz.2.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd102d8eec9 code=0x7ffc0000 [ 399.100001][ T30] audit: type=1326 audit(2000000270.153:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10125 comm="syz.2.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd102d8eec9 code=0x7ffc0000 [ 399.165704][ T30] audit: type=1326 audit(2000000270.153:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10125 comm="syz.2.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd102d8eec9 code=0x7ffc0000 [ 400.523541][T10150] netlink: 68 bytes leftover after parsing attributes in process `syz.1.971'. [ 400.775705][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 400.936475][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 400.942970][ T9] usb 2-1: descriptor type invalid, skip [ 400.949182][ T9] usb 2-1: descriptor type invalid, skip [ 400.954940][ T9] usb 2-1: descriptor type invalid, skip [ 400.965495][ T9] usb 2-1: descriptor type invalid, skip [ 400.983547][ T9] usb 2-1: config 192 has an invalid interface number: 253 but max is 0 [ 400.992885][ T9] usb 2-1: config 192 has no interface number 0 [ 401.001138][ T9] usb 2-1: config 192 interface 253 has no altsetting 0 [ 401.025731][ T9] usb 2-1: string descriptor 0 read error: -22 [ 401.033143][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=00f5, bcdDevice=b8.4b [ 401.067759][T10159] input: syz1 as /devices/virtual/input/input44 [ 401.082313][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.477412][ T9] gspca_main: sonixj-2.14.0 probing 045e:00f5 [ 401.989761][ T9] gspca_sonixj: reg_w1 err -71 [ 401.996078][ T9] sonixj 2-1:192.253: probe with driver sonixj failed with error -71 [ 402.024133][ T9] usb 2-1: USB disconnect, device number 26 [ 403.889777][ T5922] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 404.057420][ T5922] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 404.114536][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.161425][ T5922] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 404.173810][ T5922] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 404.219452][T10203] siw: device registration error -23 [ 404.228794][ T5922] usb 2-1: Manufacturer: syz [ 404.235512][T10203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.983'. [ 404.260382][ T5922] usb 2-1: config 0 descriptor?? [ 404.327594][ T5922] rc_core: IR keymap rc-hauppauge not found [ 404.333693][ T5922] Registered IR keymap rc-empty [ 404.342453][ T5922] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 404.374474][ T5922] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input45 [ 404.599406][ T5922] usb 2-1: USB disconnect, device number 27 [ 404.710150][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 404.710164][ T30] audit: type=1326 audit(2000000276.994:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10209 comm="syz.5.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae818eec9 code=0x7ffc0000 [ 404.847866][ T30] audit: type=1326 audit(2000000276.994:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10209 comm="syz.5.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7feae818eec9 code=0x7ffc0000 [ 404.875388][ T30] audit: type=1326 audit(2000000276.994:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10209 comm="syz.5.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae818eec9 code=0x7ffc0000 [ 404.899741][ T30] audit: type=1326 audit(2000000276.994:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10209 comm="syz.5.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae818eec9 code=0x7ffc0000 [ 404.939034][ T30] audit: type=1326 audit(2000000276.994:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10209 comm="syz.5.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feae818eec9 code=0x7ffc0000 [ 404.962681][ T30] audit: type=1326 audit(2000000276.994:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10209 comm="syz.5.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae818eec9 code=0x7ffc0000 [ 404.987120][ T30] audit: type=1326 audit(2000000276.994:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10209 comm="syz.5.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae818eec9 code=0x7ffc0000 [ 404.998154][T10218] input: syz1 as /devices/virtual/input/input46 [ 405.010910][ T30] audit: type=1326 audit(2000000276.994:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10209 comm="syz.5.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feae818eec9 code=0x7ffc0000 [ 405.153378][ T30] audit: type=1326 audit(2000000276.994:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10209 comm="syz.5.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae818eec9 code=0x7ffc0000 [ 405.217402][ T30] audit: type=1326 audit(2000000276.994:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10209 comm="syz.5.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae818eec9 code=0x7ffc0000 [ 407.611229][ T9] hid-generic 000E:0800:0000.0007: unknown main item tag 0x0 [ 407.636186][ T9] hid-generic 000E:0800:0000.0007: unknown main item tag 0x0 [ 407.643629][ T9] hid-generic 000E:0800:0000.0007: unknown main item tag 0x0 [ 407.680391][ T9] hid-generic 000E:0800:0000.0007: unknown main item tag 0x0 [ 407.701131][ T9] hid-generic 000E:0800:0000.0007: unknown main item tag 0x0 [ 407.720133][ T9] hid-generic 000E:0800:0000.0007: unknown main item tag 0x0 [ 407.748418][ T9] hid-generic 000E:0800:0000.0007: unknown main item tag 0x0 [ 407.770843][ T9] hid-generic 000E:0800:0000.0007: unknown main item tag 0x0 [ 407.789010][ T9] hid-generic 000E:0800:0000.0007: unknown main item tag 0x0 [ 407.816994][ T9] hid-generic 000E:0800:0000.0007: unknown main item tag 0x0 [ 407.826044][ T9] hid-generic 000E:0800:0000.0007: item fetching failed at offset 100/223 [ 407.840645][ T9] hid-generic 000E:0800:0000.0007: probe with driver hid-generic failed with error -22 [ 407.946746][T10253] netlink: 28 bytes leftover after parsing attributes in process `syz.0.992'. [ 408.981495][T10274] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1001'. [ 409.089766][ T5922] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 409.796328][ T5922] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 409.805085][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.816345][ T5922] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 409.828710][ T5922] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 409.836796][ T5922] usb 2-1: Manufacturer: syz [ 409.843706][ T5922] usb 2-1: config 0 descriptor?? [ 409.945943][ T5922] rc_core: IR keymap rc-hauppauge not found [ 409.951863][ T5922] Registered IR keymap rc-empty [ 409.980324][ T5922] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 410.017422][ T5922] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input47 [ 410.084200][ T5922] usb 2-1: USB disconnect, device number 28 [ 410.750437][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 410.750457][ T30] audit: type=1400 audit(2000000283.044:921): avc: denied { map } for pid=10293 comm="syz.5.1004" path="socket:[25464]" dev="sockfs" ino=25464 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 411.288045][ T30] audit: type=1400 audit(2000000283.044:922): avc: denied { read } for pid=10293 comm="syz.5.1004" path="socket:[25464]" dev="sockfs" ino=25464 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 411.497566][T10304] input: syz1 as /devices/virtual/input/input48 [ 412.267737][ T30] audit: type=1326 audit(2000000284.554:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10305 comm="syz.5.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae818eec9 code=0x7ffc0000 [ 412.353543][ T30] audit: type=1326 audit(2000000284.584:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10305 comm="syz.5.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7feae818eec9 code=0x7ffc0000 [ 412.729824][ T30] audit: type=1326 audit(2000000284.584:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10305 comm="syz.5.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae818eec9 code=0x7ffc0000 [ 412.753227][ C1] vkms_vblank_simulate: vblank timer overrun [ 412.795568][ T30] audit: type=1326 audit(2000000284.584:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10305 comm="syz.5.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feae818eec9 code=0x7ffc0000 [ 412.818877][ C1] vkms_vblank_simulate: vblank timer overrun [ 412.841678][ T30] audit: type=1326 audit(2000000284.594:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10305 comm="syz.5.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae818eec9 code=0x7ffc0000 [ 412.985545][ T30] audit: type=1326 audit(2000000284.594:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10305 comm="syz.5.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feae818eec9 code=0x7ffc0000 [ 413.055662][ T30] audit: type=1326 audit(2000000284.594:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10305 comm="syz.5.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae818eec9 code=0x7ffc0000 [ 414.031904][ T30] audit: type=1326 audit(2000000284.594:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10305 comm="syz.5.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7feae818eec9 code=0x7ffc0000 [ 415.764682][T10351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.781541][T10351] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1017'. [ 416.399443][T10358] netlink: 'syz.5.1021': attribute type 4 has an invalid length. [ 416.768210][T10361] netlink: 'syz.5.1021': attribute type 4 has an invalid length. [ 417.705413][ T5995] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 417.829117][T10351] syz.4.1017 (10351): drop_caches: 2 [ 417.886768][ T5995] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.943415][ T5995] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 418.002472][ T5995] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.014487][ T5995] usb 2-1: config 0 descriptor?? [ 418.048075][ T5995] pwc: Askey VC010 type 2 USB webcam detected. [ 418.454768][ T5995] pwc: recv_control_msg error -32 req 02 val 2b00 [ 418.480733][ T5995] pwc: recv_control_msg error -32 req 02 val 2700 [ 418.538959][T10369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.550366][T10369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.564352][ T5995] pwc: recv_control_msg error -32 req 02 val 2c00 [ 418.576541][ T5995] pwc: recv_control_msg error -32 req 04 val 1000 [ 418.650273][ T5995] pwc: recv_control_msg error -71 req 04 val 1300 [ 418.682378][ T5995] pwc: recv_control_msg error -71 req 04 val 1400 [ 418.705764][ T5852] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 418.722434][ T5995] pwc: recv_control_msg error -71 req 02 val 2000 [ 418.754119][ T5995] pwc: recv_control_msg error -71 req 02 val 2100 [ 418.774935][ T5995] pwc: recv_control_msg error -71 req 04 val 1500 [ 418.848938][ T5995] pwc: recv_control_msg error -71 req 02 val 2500 [ 418.862643][T10391] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1029'. [ 418.875094][ T5995] pwc: recv_control_msg error -71 req 02 val 2400 [ 418.885369][ T5852] usb 5-1: device descriptor read/64, error -71 [ 418.920692][ T5995] pwc: recv_control_msg error -71 req 02 val 2600 [ 418.938960][ T5995] pwc: recv_control_msg error -71 req 02 val 2900 [ 418.953263][ T5995] pwc: recv_control_msg error -71 req 02 val 2800 [ 418.978743][ T5995] pwc: recv_control_msg error -71 req 04 val 1100 [ 419.033252][ T5995] pwc: recv_control_msg error -71 req 04 val 1200 [ 419.049554][ T5995] pwc: Registered as video103. [ 419.064871][ T5995] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input49 [ 419.115144][ T5995] usb 2-1: USB disconnect, device number 29 [ 419.165735][ T5852] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 419.335457][ T5852] usb 5-1: device descriptor read/64, error -71 [ 419.455744][ T5852] usb usb5-port1: attempt power cycle [ 419.917079][ T5852] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 419.949658][ T5852] usb 5-1: device descriptor read/8, error -71 [ 420.225471][ T5852] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 420.311065][T10410] evm: overlay not supported [ 420.325392][T10410] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=10410 comm=syz.0.1034 [ 420.410332][ T5852] usb 5-1: device descriptor read/8, error -71 [ 420.411139][T10408] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1035'. [ 420.535699][ T5852] usb usb5-port1: unable to enumerate USB device [ 420.775864][ T841] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 421.255506][ T841] usb 6-1: Using ep0 maxpacket: 16 [ 421.265203][ T841] usb 6-1: descriptor type invalid, skip [ 421.295480][ T841] usb 6-1: descriptor type invalid, skip [ 421.311429][ T841] usb 6-1: descriptor type invalid, skip [ 421.328280][ T841] usb 6-1: descriptor type invalid, skip [ 421.384100][ T841] usb 6-1: config 192 has an invalid interface number: 253 but max is 0 [ 421.394299][ T841] usb 6-1: config 192 has no interface number 0 [ 421.405135][ T841] usb 6-1: config 192 interface 253 has no altsetting 0 [ 421.414831][ T841] usb 6-1: string descriptor 0 read error: -22 [ 421.423410][ T841] usb 6-1: New USB device found, idVendor=045e, idProduct=00f5, bcdDevice=b8.4b [ 421.434631][ T841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.640328][ T841] gspca_main: sonixj-2.14.0 probing 045e:00f5 [ 422.184695][ T841] gspca_sonixj: reg_w1 err -110 [ 422.193416][ T841] sonixj 6-1:192.253: probe with driver sonixj failed with error -110 [ 422.425024][ T841] usb 6-1: USB disconnect, device number 3 [ 424.020561][T10459] input: syz1 as /devices/virtual/input/input51 [ 426.201149][T10483] input: syz1 as /devices/virtual/input/input52 [ 427.113649][T10500] FAULT_INJECTION: forcing a failure. [ 427.113649][T10500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 427.137954][T10500] CPU: 0 UID: 0 PID: 10500 Comm: syz.4.1049 Not tainted syzkaller #0 PREEMPT(full) [ 427.137983][T10500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 427.137994][T10500] Call Trace: [ 427.138000][T10500] [ 427.138007][T10500] dump_stack_lvl+0x16c/0x1f0 [ 427.138036][T10500] should_fail_ex+0x512/0x640 [ 427.138066][T10500] _copy_from_user+0x2e/0xd0 [ 427.138092][T10500] copy_msghdr_from_user+0x98/0x160 [ 427.138115][T10500] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 427.138150][T10500] ___sys_sendmsg+0xfe/0x1d0 [ 427.138172][T10500] ? __pfx____sys_sendmsg+0x10/0x10 [ 427.138204][T10500] ? rcu_is_watching+0x12/0xc0 [ 427.138226][T10500] ? irqentry_exit+0x3b/0x90 [ 427.138260][T10500] ? __sanitizer_cov_trace_pc+0x4/0x70 [ 427.138285][T10500] __sys_sendmsg+0x16d/0x220 [ 427.138307][T10500] ? __pfx___sys_sendmsg+0x10/0x10 [ 427.138345][T10500] do_syscall_64+0xcd/0x4e0 [ 427.138370][T10500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.138388][T10500] RIP: 0033:0x7f206df8eec9 [ 427.138402][T10500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.138419][T10500] RSP: 002b:00007f206ee14038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 427.138443][T10500] RAX: ffffffffffffffda RBX: 00007f206e1e6180 RCX: 00007f206df8eec9 [ 427.138455][T10500] RDX: 0000000000000000 RSI: 00002000000096c0 RDI: 0000000000000008 [ 427.138465][T10500] RBP: 00007f206ee14090 R08: 0000000000000000 R09: 0000000000000000 [ 427.138476][T10500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.138486][T10500] R13: 00007f206e1e6218 R14: 00007f206e1e6180 R15: 00007ffe08fa3578 [ 427.138510][T10500] [ 428.541367][T10531] input: syz1 as /devices/virtual/input/input53 [ 428.626640][T10534] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 428.744145][T10534] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 428.756596][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 428.756616][ T30] audit: type=1400 audit(2000000300.924:954): avc: denied { watch watch_reads } for pid=10533 comm="syz.4.1054" path="/" dev="ramfs" ino=26969 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 428.812736][T10534] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 428.897721][T10533] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 428.975658][T10538] fuse: Bad value for 'fd' [ 428.981456][T10538] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1055'. [ 430.567374][ T5862] udevd[5862]: symlink '../../loop9' '/dev/disk/by-diskseq/73.tmp-b7:9' failed: Read-only file system [ 430.920374][ T5862] udevd[5862]: symlink '../../loop9' '/dev/disk/by-diskseq/73.tmp-b7:9' failed: Read-only file system [ 431.548515][ T5862] udevd[5862]: symlink '../../loop9' '/dev/disk/by-diskseq/73.tmp-b7:9' failed: Read-only file system [ 431.612048][ T5862] udevd[5862]: symlink '../../loop9' '/dev/disk/by-diskseq/74.tmp-b7:9' failed: Read-only file system [ 431.678529][T10575] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 431.794639][T10584] ======================================================= [ 431.794639][T10584] WARNING: The mand mount option has been deprecated and [ 431.794639][T10584] and is ignored by this kernel. Remove the mand [ 431.794639][T10584] option from the mount to silence this warning. [ 431.794639][T10584] ======================================================= [ 431.923175][ T30] audit: type=1400 audit(2000000304.214:955): avc: denied { mount } for pid=10577 comm="syz.1.1063" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 431.975659][ T5902] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 432.094798][T10591] input: syz1 as /devices/virtual/input/input54 [ 432.192490][ T5902] usb 5-1: config 0 has an invalid interface number: 202 but max is 0 [ 432.220679][ T5902] usb 5-1: config 0 has no interface number 0 [ 432.251145][ T5902] usb 5-1: New USB device found, idVendor=58b6, idProduct=1a57, bcdDevice=89.20 [ 432.269659][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.277872][ T5902] usb 5-1: Product: syz [ 432.292291][ T5902] usb 5-1: Manufacturer: syz [ 432.314529][ T5902] usb 5-1: SerialNumber: syz [ 432.389566][ T5902] usb 5-1: config 0 descriptor?? [ 432.412802][ T30] audit: type=1326 audit(2000000304.704:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10592 comm="syz.2.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd102d8eec9 code=0x7ffc0000 [ 432.584829][ T30] audit: type=1326 audit(2000000304.734:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10592 comm="syz.2.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd102d8eec9 code=0x7ffc0000 [ 432.662977][T10602] veth0_to_batadv: mtu less than device minimum [ 432.696504][ T30] audit: type=1326 audit(2000000304.734:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10592 comm="syz.2.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fd102d8eec9 code=0x7ffc0000 [ 432.720381][ T30] audit: type=1326 audit(2000000304.734:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10592 comm="syz.2.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd102d8eec9 code=0x7ffc0000 [ 432.765973][ T30] audit: type=1326 audit(2000000304.734:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10592 comm="syz.2.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd102d8eec9 code=0x7ffc0000 [ 432.806208][ T5902] usb-storage 5-1:0.202: USB Mass Storage device detected [ 432.826509][ T30] audit: type=1326 audit(2000000304.744:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10592 comm="syz.2.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd102d8eec9 code=0x7ffc0000 [ 432.929506][ T30] audit: type=1326 audit(2000000304.744:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10592 comm="syz.2.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd102d8eec9 code=0x7ffc0000 [ 433.114233][T10608] fuse: Bad value for 'fd' [ 433.120176][T10608] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1068'. [ 433.138534][ T30] audit: type=1326 audit(2000000304.744:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10592 comm="syz.2.1067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd102d8eec9 code=0x7ffc0000 [ 433.634541][ T5902] usb 5-1: USB disconnect, device number 26 [ 436.329346][T10649] trusted_key: syz.1.1075 sent an empty control message without MSG_MORE. [ 436.763616][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 436.763633][ T30] audit: type=1400 audit(2000000309.054:994): avc: denied { getopt } for pid=10646 comm="syz.0.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 438.684771][ T30] audit: type=1400 audit(2000000310.974:995): avc: denied { create } for pid=10675 comm="syz.1.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 438.705131][T10677] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1082'. [ 438.714362][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1082'. [ 439.236511][T10650] vxcan1 speed is unknown, defaulting to 1000 [ 439.758251][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.765094][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.959175][T10702] batman_adv: batadv0: Adding interface: gretap1 [ 440.013026][T10702] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.192643][T10702] batman_adv: batadv0: Interface activated: gretap1 [ 440.836582][ T30] audit: type=1400 audit(2000000313.114:996): avc: denied { ioctl } for pid=10711 comm="syz.4.1088" path="socket:[27310]" dev="sockfs" ino=27310 ioctlcmd=0x7201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 440.862454][ C1] vkms_vblank_simulate: vblank timer overrun [ 441.515055][T10729] netlink: 'syz.2.1090': attribute type 20 has an invalid length. [ 441.523341][T10729] IPv6: NLM_F_CREATE should be specified when creating new route [ 441.531721][T10729] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 441.538970][T10729] IPv6: NLM_F_CREATE should be set when creating new route [ 443.568489][ T5849] block device autoloading is deprecated and will be removed. [ 443.613447][ T5843] udevd[5843]: setting mode of /dev/loop0 to 060660 failed: Read-only file system [ 443.781167][ T5843] udevd[5843]: setting owner of /dev/loop0 to uid=0, gid=6 failed: Read-only file system [ 444.722822][ T5862] udevd[5862]: symlink '../../loop0' '/dev/disk/by-diskseq/75.tmp-b7:0' failed: Read-only file system [ 445.224273][T10759] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1099'. [ 446.208728][T10773] FAULT_INJECTION: forcing a failure. [ 446.208728][T10773] name failslab, interval 1, probability 0, space 0, times 0 [ 446.281890][T10773] CPU: 0 UID: 0 PID: 10773 Comm: syz.1.1102 Not tainted syzkaller #0 PREEMPT(full) [ 446.281931][T10773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 446.281948][T10773] Call Trace: [ 446.281955][T10773] [ 446.281961][T10773] dump_stack_lvl+0x16c/0x1f0 [ 446.281990][T10773] should_fail_ex+0x512/0x640 [ 446.282013][T10773] ? __kmalloc_noprof+0xbf/0x510 [ 446.282035][T10773] ? memcg_list_lru_alloc+0x4e9/0x740 [ 446.282053][T10773] should_failslab+0xc2/0x120 [ 446.282075][T10773] __kmalloc_noprof+0xd2/0x510 [ 446.282091][T10773] ? __lock_acquire+0x62e/0x1ce0 [ 446.282124][T10773] memcg_list_lru_alloc+0x4e9/0x740 [ 446.282151][T10773] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 446.282177][T10773] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 446.282210][T10773] __memcg_slab_post_alloc_hook+0x133/0x960 [ 446.282238][T10773] ? kasan_save_track+0x14/0x30 [ 446.282260][T10773] kmem_cache_alloc_lru_noprof+0x30f/0x3b0 [ 446.282280][T10773] ? __d_alloc+0x32/0xae0 [ 446.282307][T10773] __d_alloc+0x32/0xae0 [ 446.282334][T10773] d_alloc_parallel+0x111/0x1480 [ 446.282366][T10773] ? find_held_lock+0x2b/0x80 [ 446.282396][T10773] ? __pfx_d_alloc_parallel+0x10/0x10 [ 446.282426][T10773] ? lockdep_init_map_type+0x5c/0x280 [ 446.282443][T10773] ? lockdep_init_map_type+0x5c/0x280 [ 446.282464][T10773] __lookup_slow+0x193/0x460 [ 446.282494][T10773] ? __pfx___lookup_slow+0x10/0x10 [ 446.282536][T10773] ? lookup_fast+0x156/0x610 [ 446.282557][T10773] walk_component+0x353/0x5b0 [ 446.282577][T10773] path_lookupat+0x142/0x6d0 [ 446.282600][T10773] filename_lookup+0x224/0x5f0 [ 446.282621][T10773] ? __pfx_filename_lookup+0x10/0x10 [ 446.282657][T10773] ? __might_fault+0xe3/0x190 [ 446.282673][T10773] ? __might_fault+0xe3/0x190 [ 446.282689][T10773] ? __might_fault+0x13b/0x190 [ 446.282713][T10773] filename_setxattr+0x9d/0x1d0 [ 446.282735][T10773] ? __pfx_filename_setxattr+0x10/0x10 [ 446.282756][T10773] ? getname_flags.part.0+0x1c5/0x550 [ 446.282789][T10773] path_setxattrat+0x1de/0x2a0 [ 446.282811][T10773] ? __pfx_path_setxattrat+0x10/0x10 [ 446.282837][T10773] ? ksys_write+0x190/0x250 [ 446.282878][T10773] ? fput+0x9b/0xd0 [ 446.282902][T10773] ? ksys_write+0x1ac/0x250 [ 446.282920][T10773] ? __pfx_ksys_write+0x10/0x10 [ 446.282951][T10773] __x64_sys_setxattr+0xc6/0x140 [ 446.282972][T10773] ? do_syscall_64+0x91/0x4e0 [ 446.282996][T10773] ? lockdep_hardirqs_on+0x7c/0x110 [ 446.283019][T10773] do_syscall_64+0xcd/0x4e0 [ 446.283046][T10773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.283065][T10773] RIP: 0033:0x7f5515f8eec9 [ 446.283081][T10773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.283099][T10773] RSP: 002b:00007f5516e84038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 446.283118][T10773] RAX: ffffffffffffffda RBX: 00007f55161e5fa0 RCX: 00007f5515f8eec9 [ 446.283131][T10773] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000200000000800 [ 446.283143][T10773] RBP: 00007f5516e84090 R08: 0000000000000001 R09: 0000000000000000 [ 446.283153][T10773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.283164][T10773] R13: 00007f55161e6038 R14: 00007f55161e5fa0 R15: 00007ffd9a73dee8 [ 446.283191][T10773] [ 447.164027][T10788] input: syz1 as /devices/virtual/input/input55 [ 447.201342][ T5862] udevd[5862]: symlink '../../loop0' '/dev/disk/by-diskseq/75.tmp-b7:0' failed: Read-only file system [ 447.799257][ T5862] udevd[5862]: symlink '../../loop0' '/dev/disk/by-diskseq/75.tmp-b7:0' failed: Read-only file system [ 448.114104][ T30] audit: type=1326 audit(2000000320.354:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10797 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 448.282192][ T30] audit: type=1326 audit(2000000320.354:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10797 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 448.323468][ T30] audit: type=1326 audit(2000000320.354:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10797 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 448.347752][ T30] audit: type=1326 audit(2000000320.354:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10797 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 448.372934][ T30] audit: type=1326 audit(2000000320.354:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10797 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 448.399901][ T5862] udevd[5862]: symlink '../../loop0' '/dev/disk/by-diskseq/75.tmp-b7:0' failed: Read-only file system [ 448.411020][ T30] audit: type=1326 audit(2000000320.354:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10797 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 448.450004][ T30] audit: type=1326 audit(2000000320.354:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10797 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 448.478179][ T30] audit: type=1326 audit(2000000320.354:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10797 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 448.504473][ T30] audit: type=1326 audit(2000000320.354:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10797 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 448.530649][ T30] audit: type=1326 audit(2000000320.354:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10797 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 448.569874][T10613] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 448.746443][T10613] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 448.867637][T10613] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.949613][T10613] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 448.969337][T10613] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 449.080846][T10810] I/O error, dev loop5, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 449.109265][T10613] usb 1-1: Manufacturer: syz [ 449.126867][T10812] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1114'. [ 449.136473][T10613] usb 1-1: config 0 descriptor?? [ 449.167235][T10812] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1114'. [ 449.195529][T10613] rc_core: IR keymap rc-hauppauge not found [ 449.201512][T10613] Registered IR keymap rc-empty [ 449.217963][T10613] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 449.248505][T10809] overlayfs: overlapping lowerdir path [ 449.262234][T10613] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input56 [ 449.388085][T10613] usb 1-1: USB disconnect, device number 22 [ 450.077017][ T5862] udevd[5862]: symlink '../../loop0' '/dev/disk/by-diskseq/75.tmp-b7:0' failed: Read-only file system [ 450.143089][T10824] ubi31: attaching mtd0 [ 450.160808][T10824] ubi31: scanning is finished [ 450.638930][T10824] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 450.646721][T10824] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 450.654150][T10824] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 450.661261][T10824] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 450.668834][T10824] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 450.676161][T10824] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 450.684222][T10824] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 398515870 [ 450.694221][T10824] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 450.722661][T10826] ubi31: background thread "ubi_bgt31d" started, PID 10826 [ 452.331575][T10854] input: syz1 as /devices/virtual/input/input57 [ 452.535200][ T5862] udevd[5862]: symlink '../../loop0' '/dev/disk/by-diskseq/75.tmp-b7:0' failed: Read-only file system [ 455.195902][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 455.195922][ T30] audit: type=1326 audit(2000000327.494:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10878 comm="syz.1.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 455.447613][ T30] audit: type=1326 audit(2000000327.494:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10878 comm="syz.1.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 455.491557][ T5995] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 455.535710][ T30] audit: type=1326 audit(2000000327.504:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10878 comm="syz.1.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 455.589563][ T30] audit: type=1326 audit(2000000327.524:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10878 comm="syz.1.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 455.615621][ T30] audit: type=1326 audit(2000000327.524:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10878 comm="syz.1.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 455.639737][ T30] audit: type=1326 audit(2000000327.564:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10878 comm="syz.1.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 455.665410][ T30] audit: type=1326 audit(2000000327.564:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10878 comm="syz.1.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 455.689254][ T30] audit: type=1326 audit(2000000327.594:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10878 comm="syz.1.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 455.690465][ T5995] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.723908][ T30] audit: type=1326 audit(2000000327.594:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10878 comm="syz.1.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 455.753361][ T5862] udevd[5862]: symlink '../../loop0' '/dev/disk/by-diskseq/75.tmp-b7:0' failed: Read-only file system [ 455.765911][ T30] audit: type=1326 audit(2000000327.634:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10878 comm="syz.1.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 455.793848][ T5995] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 455.807661][ T5995] usb 5-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 455.817263][ T5995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.834496][ T5995] usb 5-1: config 0 descriptor?? [ 456.351890][ T199] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.366538][ T199] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.446245][ T5995] usbhid 5-1:0.0: can't add hid device: -71 [ 456.453765][ T5995] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 456.479804][ T5995] usb 5-1: USB disconnect, device number 27 [ 457.269625][T10909] ubi31: detaching mtd0 [ 457.474520][T10909] ubi31: mtd0 is detached [ 459.570529][ T5862] udevd[5862]: symlink '../../loop0' '/dev/disk/by-diskseq/75.tmp-b7:0' failed: Read-only file system [ 459.830960][ T5862] udevd[5862]: symlink '../../loop0' '/dev/disk/by-diskseq/75.tmp-b7:0' failed: Read-only file system [ 459.860132][T10924] input: syz1 as /devices/virtual/input/input58 [ 460.825238][ T5862] udevd[5862]: symlink '../../loop0' '/dev/disk/by-diskseq/75.tmp-b7:0' failed: Read-only file system [ 461.195617][T10613] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 461.345437][T10613] usb 1-1: Using ep0 maxpacket: 32 [ 461.369904][T10613] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.414620][T10613] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.445364][T10613] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 461.476293][T10613] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.511672][T10613] usb 1-1: config 0 descriptor?? [ 462.895478][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 462.895498][ T30] audit: type=1400 audit(2000000335.164:1051): avc: denied { execute } for pid=10952 comm="syz.2.1151" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=28853 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 463.626074][T10953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1151'. [ 463.816225][T10613] usbhid 1-1:0.0: can't add hid device: -71 [ 463.822318][T10613] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 464.048315][T10965] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1156'. [ 464.106830][ T30] audit: type=1400 audit(2000000336.384:1052): avc: denied { read } for pid=10954 comm="syz.4.1153" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 464.156197][T10613] usb 1-1: USB disconnect, device number 23 [ 464.690891][ T5862] udevd[5862]: symlink '../../loop0' '/dev/disk/by-diskseq/75.tmp-b7:0' failed: Read-only file system [ 466.641838][T10986] netlink: 'syz.5.1160': attribute type 10 has an invalid length. [ 466.843316][ T30] audit: type=1400 audit(2000000339.014:1053): avc: denied { name_connect } for pid=10980 comm="syz.5.1160" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 466.957397][T10986] team0: Device hsr_slave_0 failed to register rx_handler [ 466.972870][T10975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1157'. [ 466.996052][T10975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1157'. [ 467.011817][ T5843] udevd[5843]: inotify_add_watch(7, /dev/loop33, 10) failed: No such file or directory [ 467.028531][ T30] audit: type=1400 audit(2000000339.034:1054): avc: denied { listen } for pid=10980 comm="syz.5.1160" lport=52141 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 467.105238][ T30] audit: type=1400 audit(2000000339.104:1055): avc: denied { accept } for pid=10980 comm="syz.5.1160" lport=52141 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 467.490164][T10975] netlink: 'syz.0.1157': attribute type 21 has an invalid length. [ 467.498118][T10975] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1157'. [ 467.517716][T10975] netlink: 'syz.0.1157': attribute type 5 has an invalid length. [ 467.529378][T10987] sctp: failed to load transform for md5: -2 [ 467.595667][T10975] netlink: 'syz.0.1157': attribute type 6 has an invalid length. [ 467.613704][T10975] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1157'. [ 468.691247][ T5862] udevd[5862]: symlink '../../loop0' '/dev/disk/by-diskseq/75.tmp-b7:0' failed: Read-only file system [ 468.977256][T11011] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1165'. [ 469.225676][ T30] audit: type=1400 audit(2000000341.444:1056): avc: denied { map } for pid=11003 comm="syz.2.1165" path="socket:[28930]" dev="sockfs" ino=28930 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 469.694174][ T5862] udevd[5862]: symlink '../../loop0' '/dev/disk/by-diskseq/75.tmp-b7:0' failed: Read-only file system [ 470.325589][ T30] audit: type=1400 audit(2000000342.604:1057): avc: denied { append } for pid=11017 comm="syz.0.1168" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 470.351396][T11021] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1169'. [ 473.634362][T11055] input: syz1 as /devices/virtual/input/input59 [ 474.246513][ T5862] udevd[5862]: symlink '../../loop0' '/dev/disk/by-diskseq/75.tmp-b7:0' failed: Read-only file system [ 474.705858][T10613] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 474.968484][T10613] usb 5-1: Using ep0 maxpacket: 32 [ 474.987124][T10613] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.094019][T10613] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.189787][T10613] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 475.209178][T10613] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.240431][T10613] usb 5-1: config 0 descriptor?? [ 475.267087][T11080] netlink: 'syz.2.1187': attribute type 13 has an invalid length. [ 475.365139][T11080] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 475.457772][T10613] usbhid 5-1:0.0: can't add hid device: -71 [ 475.463938][T10613] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 475.490821][T10613] usb 5-1: USB disconnect, device number 28 [ 476.326170][ T5862] udevd[5862]: symlink '../../loop0' '/dev/disk/by-diskseq/75.tmp-b7:0' failed: Read-only file system [ 476.490380][T11095] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1190'. [ 478.085770][ T841] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 478.366276][ T841] usb 2-1: Using ep0 maxpacket: 8 [ 478.486675][ T841] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 478.624680][ T30] audit: type=1400 audit(2000000350.914:1058): avc: denied { read } for pid=11113 comm="syz.4.1194" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 478.681122][ T841] usb 2-1: config 0 has no interface number 0 [ 478.782885][ T841] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 479.568225][ T841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.673394][ T30] audit: type=1400 audit(2000000350.944:1059): avc: denied { open } for pid=11113 comm="syz.4.1194" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 479.674278][ T841] usb 2-1: config 0 descriptor?? [ 479.907205][T11109] nvme_fabrics: missing parameter 'transport=%s' [ 479.922800][ T6220] udevd[6220]: symlink '../../loop0' '/dev/disk/by-diskseq/75.tmp-b7:0' failed: Read-only file system [ 479.955816][T11109] nvme_fabrics: missing parameter 'nqn=%s' [ 480.064369][ T841] usb 2-1: can't set config #0, error -71 [ 480.082748][ T841] usb 2-1: USB disconnect, device number 30 [ 481.624261][T11134] input: syz1 as /devices/virtual/input/input60 [ 481.659064][ T5843] udevd[5843]: symlink '../../loop0' '/dev/disk/by-diskseq/75.tmp-b7:0' failed: Read-only file system [ 481.712259][ T30] audit: type=1400 audit(2000000354.004:1060): avc: denied { compute_member } for pid=11136 comm="syz.0.1203" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 481.743650][T11140] syzkaller0: tun_chr_ioctl cmd 1074025672 [ 481.749667][T11140] syzkaller0: ignored: set checksum disabled [ 482.382975][ T5862] udevd[5862]: symlink '../../loop0' '/dev/disk/by-diskseq/75.tmp-b7:0' failed: Read-only file system [ 483.654092][ T5862] udevd[5862]: symlink '../../loop0' '/dev/disk/by-diskseq/75.tmp-b7:0' failed: Read-only file system [ 484.149202][ T30] audit: type=1400 audit(2000000356.034:1061): avc: denied { create } for pid=11160 comm="syz.2.1207" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 484.421842][ T30] audit: type=1400 audit(2000000356.704:1062): avc: denied { unlink } for pid=5842 comm="syz-executor" name="file0" dev="tmpfs" ino=1403 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 484.510985][ T5862] udevd[5862]: symlink '../../loop0' '/dev/disk/by-diskseq/75.tmp-b7:0' failed: Read-only file system [ 484.739701][ T5862] udevd[5862]: symlink '../../loop0' '/dev/disk/by-diskseq/75.tmp-b7:0' failed: Read-only file system [ 484.908646][ T30] audit: type=1326 audit(2000000357.184:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11173 comm="syz.0.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82cd98eec9 code=0x7ffc0000 [ 485.088457][ T30] audit: type=1326 audit(2000000357.184:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11173 comm="syz.0.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f82cd98eec9 code=0x7ffc0000 [ 485.113377][ T30] audit: type=1326 audit(2000000357.184:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11173 comm="syz.0.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82cd98eec9 code=0x7ffc0000 [ 485.219618][ T30] audit: type=1326 audit(2000000357.184:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11173 comm="syz.0.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f82cd98eec9 code=0x7ffc0000 [ 485.281896][ T30] audit: type=1326 audit(2000000357.184:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11173 comm="syz.0.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82cd98eec9 code=0x7ffc0000 [ 485.305612][ T30] audit: type=1326 audit(2000000357.184:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11173 comm="syz.0.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f82cd98eec9 code=0x7ffc0000 [ 485.340072][T11192] /dev/nullb0: Can't open blockdev [ 485.345428][ T43] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 485.358429][ T30] audit: type=1326 audit(2000000357.194:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11173 comm="syz.0.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82cd98eec9 code=0x7ffc0000 [ 485.401710][ T30] audit: type=1326 audit(2000000357.194:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11173 comm="syz.0.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f82cd98eec9 code=0x7ffc0000 [ 485.548941][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 485.772894][ T43] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 485.782289][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.826008][ T43] usb 5-1: config 0 descriptor?? [ 485.831622][T11181] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 486.412422][ T43] hid_parser_main: 87 callbacks suppressed [ 486.412443][ T43] elan 0003:04F3:0755.0008: unknown main item tag 0x0 [ 486.782026][ T43] elan 0003:04F3:0755.0008: unknown global tag 0xe [ 486.786333][T11181] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1213'. [ 486.788739][ T43] elan 0003:04F3:0755.0008: item 0 0 1 14 parsing failed [ 486.807656][ T43] elan 0003:04F3:0755.0008: Hid Parse failed [ 486.834095][ T5862] udevd[5862]: symlink '../../loop0' '/dev/disk/by-diskseq/75.tmp-b7:0' failed: Read-only file system [ 486.922449][T11192] netlink: 'syz.1.1216': attribute type 1 has an invalid length. [ 486.949343][ T43] elan 0003:04F3:0755.0008: probe with driver elan failed with error -22 [ 487.020310][T11192] bond1: entered promiscuous mode [ 487.026157][T11192] 8021q: adding VLAN 0 to HW filter on device bond1 [ 487.038442][ T43] usb 5-1: USB disconnect, device number 29 [ 487.090762][T11198] 8021q: adding VLAN 0 to HW filter on device bond2 [ 487.101706][T11198] bond1: (slave bond2): making interface the new active one [ 487.109876][T11198] bond2: entered promiscuous mode [ 487.118105][T11198] bond1: (slave bond2): Enslaving as an active interface with an up link [ 487.205796][ T841] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 487.375569][ T841] usb 3-1: Using ep0 maxpacket: 16 [ 487.386977][ T841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.400944][ T841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.423605][ T841] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 487.452518][ T841] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.562019][T11212] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1221'. [ 487.604666][ T841] usb 3-1: config 0 descriptor?? [ 487.841374][ T841] usbhid 3-1:0.0: can't add hid device: -71 [ 487.855484][ T841] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 487.879117][ T841] usb 3-1: USB disconnect, device number 13 [ 487.963745][ T5862] udevd[5862]: symlink '../../loop0' '/dev/disk/by-diskseq/75.tmp-b7:0' failed: Read-only file system [ 488.182425][T11229] input: syz1 as /devices/virtual/input/input61 [ 488.191546][T11231] input: syz1 as /devices/virtual/input/input62 [ 489.174906][T11235] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyڇv[Dwz [ 489.726488][ T5862] udevd[5862]: symlink '../../loop0' '/dev/disk/by-diskseq/75.tmp-b7:0' failed: Read-only file system [ 490.712039][ T30] kauditd_printk_skb: 92 callbacks suppressed [ 490.712054][ T30] audit: type=1326 audit(2000000363.004:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11250 comm="syz.1.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 491.268510][ T30] audit: type=1326 audit(2000000363.034:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11250 comm="syz.1.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 491.362187][ T30] audit: type=1326 audit(2000000363.034:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11250 comm="syz.1.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 491.390422][ T5843] udevd[5843]: symlink '../../loop0' '/dev/disk/by-diskseq/75.tmp-b7:0' failed: Read-only file system [ 491.405402][T10613] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 491.512192][ T30] audit: type=1326 audit(2000000363.034:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11250 comm="syz.1.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 491.561178][ T5862] udevd[5862]: symlink '../../loop0' '/dev/disk/by-diskseq/75.tmp-b7:0' failed: Read-only file system [ 491.584221][T10613] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 491.594196][ T30] audit: type=1326 audit(2000000363.034:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11250 comm="syz.1.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 491.619512][T10613] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 491.655944][T10613] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 491.667717][T10613] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.749384][ T30] audit: type=1326 audit(2000000363.034:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11250 comm="syz.1.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 491.767104][T10613] usb 6-1: config 0 descriptor?? [ 491.781075][ T30] audit: type=1326 audit(2000000363.034:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11250 comm="syz.1.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 491.835876][ T30] audit: type=1326 audit(2000000363.034:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11250 comm="syz.1.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 492.070190][T11258] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 492.077688][ T30] audit: type=1326 audit(2000000363.044:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11250 comm="syz.1.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 492.136559][ T30] audit: type=1326 audit(2000000363.044:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11250 comm="syz.1.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5515f8eec9 code=0x7ffc0000 [ 492.160054][ C0] vkms_vblank_simulate: vblank timer overrun [ 492.178749][T10613] hub 6-1:0.0: USB hub found [ 492.397114][T10613] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 492.450355][T10613] usbhid 6-1:0.0: can't add hid device: -71 [ 492.466705][T10613] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 492.645499][T10613] usb 6-1: USB disconnect, device number 4 [ 492.655364][ T5902] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 492.765170][ T5862] udevd[5862]: symlink '../../loop0' '/dev/disk/by-diskseq/75.tmp-b7:0' failed: Read-only file system [ 492.855683][ T5902] usb 3-1: Using ep0 maxpacket: 8 [ 492.864432][ T5902] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 493.119364][ T5902] usb 3-1: config 179 has no interface number 0 [ 493.126635][ T5902] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 493.138674][ T5902] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 493.150016][ T5902] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 493.161353][ T5902] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 493.175057][ T5902] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 493.200438][T11298] input: syz1 as /devices/virtual/input/input63 [ 493.206789][ T5902] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 493.227159][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.251560][T11283] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 493.260887][ T5902] xpad 3-1:179.65: probe with driver xpad failed with error -5 [ 493.490678][T11299] input: syz1 as /devices/virtual/input/input64 [ 493.605045][ T841] usb 3-1: USB disconnect, device number 14 [ 495.752771][ T5862] udevd[5862]: symlink '../../loop0' '/dev/disk/by-diskseq/75.tmp-b7:0' failed: Read-only file system [ 495.850733][ T30] kauditd_printk_skb: 115 callbacks suppressed [ 495.850752][ T30] audit: type=1400 audit(2000000368.094:1288): avc: denied { nlmsg_read } for pid=11305 comm="syz.2.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 497.683083][T11331] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1247'. [ 498.155472][ T43] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 498.364429][ T5862] udevd[5862]: symlink '../../loop0' '/dev/disk/by-diskseq/75.tmp-b7:0' failed: Read-only file system [ 498.500641][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 498.518918][ T43] usb 6-1: descriptor type invalid, skip [ 498.525050][ T43] usb 6-1: descriptor type invalid, skip [ 498.546206][T11345] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11345 comm=syz.1.1249 [ 498.570055][T11345] netlink: 'syz.1.1249': attribute type 1 has an invalid length. [ 498.651603][ T43] usb 6-1: descriptor type invalid, skip [ 498.661445][ T43] usb 6-1: descriptor type invalid, skip [ 498.717806][ T43] usb 6-1: config 192 has an invalid interface number: 253 but max is 0 [ 498.741385][ T43] usb 6-1: config 192 has no interface number 0 [ 498.755726][ T43] usb 6-1: config 192 interface 253 has no altsetting 0 [ 498.770110][ T43] usb 6-1: string descriptor 0 read error: -22 [ 498.802639][ T43] usb 6-1: New USB device found, idVendor=045e, idProduct=00f5, bcdDevice=b8.4b [ 498.818504][ T5862] udevd[5862]: symlink '../../loop0' '/dev/disk/by-diskseq/75.tmp-b7:0' failed: Read-only file system [ 498.865988][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.883677][ T43] gspca_main: sonixj-2.14.0 probing 045e:00f5 [ 499.485477][ T43] gspca_sonixj: reg_w1 err -71 [ 499.517861][ T43] sonixj 6-1:192.253: probe with driver sonixj failed with error -71 [ 499.568272][ T43] usb 6-1: USB disconnect, device number 5 [ 499.807509][T11345] vxcan1 speed is unknown, defaulting to 1000 [ 499.842785][T11363] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1254'. [ 500.261322][T11368] input: syz1 as /devices/virtual/input/input65 [ 501.191427][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.198059][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.130019][ T5862] udevd[5862]: symlink '../../loop0' '/dev/disk/by-diskseq/75.tmp-b7:0' failed: Read-only file system [ 502.341537][T11385] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 502.415629][T11385] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1260'. [ 502.425130][T11385] Bluetooth: MGMT ver 1.23 [ 502.515567][ T841] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 502.707912][ T841] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 502.744015][ T841] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 502.798372][ T841] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 502.814812][ T841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.258269][T11388] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 503.290691][ T841] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 503.329324][ T30] audit: type=1400 audit(2000000375.614:1289): avc: denied { unmount } for pid=9880 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 503.876813][ T30] audit: type=1326 audit(2000000376.164:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11394 comm="syz.4.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206df8eec9 code=0x7ffc0000 [ 503.916783][T11388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=11388 comm=syz.0.1261 [ 504.014343][ T30] audit: type=1326 audit(2000000376.164:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11394 comm="syz.4.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206df8eec9 code=0x7ffc0000 [ 504.254086][ T30] audit: type=1326 audit(2000000376.164:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11394 comm="syz.4.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f206df8eec9 code=0x7ffc0000 [ 504.568097][ T30] audit: type=1326 audit(2000000376.164:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11394 comm="syz.4.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206df8eec9 code=0x7ffc0000 [ 504.628839][ T30] audit: type=1326 audit(2000000376.164:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11394 comm="syz.4.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206df8eec9 code=0x7ffc0000 [ 504.727775][T11417] netlink: 111 bytes leftover after parsing attributes in process `syz.0.1261'. [ 504.771074][ T30] audit: type=1326 audit(2000000376.164:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11394 comm="syz.4.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f206df8eec9 code=0x7ffc0000 [ 504.935345][T11419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.994060][ T30] audit: type=1326 audit(2000000376.164:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11394 comm="syz.4.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206df8eec9 code=0x7ffc0000 [ 505.031071][ T841] usb 1-1: USB disconnect, device number 24 [ 505.037334][ T30] audit: type=1326 audit(2000000376.164:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11394 comm="syz.4.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206df8eec9 code=0x7ffc0000 [ 505.061255][ T30] audit: type=1326 audit(2000000376.164:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11394 comm="syz.4.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f206df8eec9 code=0x7ffc0000 [ 505.644330][T11425] 9pnet_fd: Insufficient options for proto=fd [ 506.871110][ T5862] udevd[5862]: symlink '../../loop0' '/dev/disk/by-diskseq/75.tmp-b7:0' failed: Read-only file system [ 507.645702][ T43] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 508.235483][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 508.259138][ T43] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 508.397970][ T43] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 508.416051][ T43] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 508.460245][ T43] usb 1-1: Product: syz [ 508.464439][ T43] usb 1-1: Manufacturer: syz [ 508.470246][ T43] usb 1-1: SerialNumber: syz [ 508.476924][ T43] usb 1-1: config 0 descriptor?? [ 508.484598][T11430] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 509.748241][ T31] INFO: task syz-executor:5850 blocked for more than 143 seconds. [ 509.849580][ T31] Not tainted syzkaller #0 [ 509.869636][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 509.891017][ T31] task:syz-executor state:D stack:22728 pid:5850 tgid:5850 ppid:1 task_flags:0x400140 flags:0x00004004 [ 509.921229][ T31] Call Trace: [ 509.925206][ T31] [ 509.928981][ T31] __schedule+0x1190/0x5de0 [ 509.937670][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 509.942819][ T31] ? __pfx___schedule+0x10/0x10 [ 509.947867][ T31] ? find_held_lock+0x2b/0x80 [ 509.952994][ T31] ? schedule+0x2d7/0x3a0 [ 509.958089][ T31] schedule+0xe7/0x3a0 [ 509.962266][ T31] v9fs_evict_inode+0x26f/0x300 [ 509.967408][ T31] ? __pfx_v9fs_evict_inode+0x10/0x10 [ 509.980541][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 509.986356][ T31] ? evict+0x3a2/0x920 [ 509.990544][ T31] ? __pfx_v9fs_evict_inode+0x10/0x10 [ 509.996086][ T31] evict+0x3e3/0x920 [ 510.000049][ T31] ? __pfx_evict+0x10/0x10 [ 510.004511][ T31] ? iput+0x519/0x880 [ 510.008640][ T31] iput+0x521/0x880 [ 510.012862][ T31] ? __pfx_v9fs_drop_inode+0x10/0x10 [ 510.018583][ T31] dentry_unlink_inode+0x29c/0x480 [ 510.023893][ T31] __dentry_kill+0x1d0/0x600 [ 510.029244][ T31] dput.part.0+0x4b1/0x9b0 [ 510.033795][ T31] shrink_dcache_for_umount+0x159/0x3e0 [ 510.039537][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 510.044835][ T31] generic_shutdown_super+0x6c/0x390 [ 510.051075][ T31] kill_anon_super+0x3a/0x60 [ 510.055814][ T31] v9fs_kill_super+0x3d/0xa0 [ 510.060483][ T31] deactivate_locked_super+0xc1/0x1a0 [ 510.066247][ T31] deactivate_super+0xde/0x100 [ 510.071149][ T31] cleanup_mnt+0x225/0x450 [ 510.075908][ T31] task_work_run+0x150/0x240 [ 510.080640][ T31] ? __pfx_task_work_run+0x10/0x10 [ 510.085944][ T31] ? __pfx___x64_sys_umount+0x10/0x10 [ 510.091521][ T31] exit_to_user_mode_loop+0xeb/0x110 [ 510.097028][ T31] do_syscall_64+0x41c/0x4e0 [ 510.101695][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.107770][ T5995] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 510.116791][ T31] RIP: 0033:0x7f2e2d7901f7 [ 510.121313][ T31] RSP: 002b:00007ffd4bfba9a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 510.130020][ T31] RAX: 0000000000000000 RBX: 00007f2e2d811d7d RCX: 00007f2e2d7901f7 [ 510.138186][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd4bfbaa60 [ 510.146386][ T31] RBP: 00007ffd4bfbaa60 R08: 0000000000000000 R09: 0000000000000000 [ 510.154417][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd4bfbbaf0 [ 510.162578][ T31] R13: 00007f2e2d811d7d R14: 0000000000058372 R15: 00007ffd4bfbbb30 [ 510.170869][ T31] [ 510.174107][ T31] [ 510.174107][ T31] Showing all locks held in the system: [ 510.191398][ T841] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 510.199801][ T31] 1 lock held by khungtaskd/31: [ 510.204652][ T31] #0: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 510.216421][ T5852] usb 1-1: USB disconnect, device number 25 [ 510.228416][ T31] 5 locks held by kworker/0:2/841: [ 510.233814][ T31] #0: ffff88814468a548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 510.245428][ T31] #1: ffffc90003627d10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 510.257243][ T31] #2: ffff888029874198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 510.266456][ T31] #3: ffff888029877518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2981/0x4fe0 [ 510.275338][ T5995] usb 2-1: Using ep0 maxpacket: 32 [ 510.276891][ T31] #4: ffff888029807768 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x29aa/0x4fe0 [ 510.293447][ T31] 2 locks held by getty/5611: [ 510.299004][ T5995] usb 2-1: unable to get BOS descriptor or descriptor too short [ 510.307469][ T31] #0: ffff8880367930a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 510.318077][ T5995] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 510.328550][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 510.340905][ T31] 1 lock held by syz-executor/5850: [ 510.347139][ T31] #0: ffff88804be760e0 (&type->s_umount_key#79){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 510.357922][ T31] 3 locks held by kworker/0:3/5852: [ 510.363447][ T31] #0: ffff88814468a548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 510.374597][ T5995] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 510.384423][ T31] #1: ffffc90002f37d10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 510.396169][ T841] usb 6-1: Using ep0 maxpacket: 32 [ 510.402109][ T5995] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.411368][ T5995] usb 2-1: Product: syz [ 510.411705][ T31] #2: [ 510.416114][ T5995] usb 2-1: Manufacturer: syz [ 510.423936][ T31] ffff88802967c220 (&dev->power.lock){-...}-{3:3}, at: rpm_idle+0x65a/0x730 [ 510.424302][ T5995] usb 2-1: SerialNumber: syz [ 510.438048][ T841] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 510.447100][ T841] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 510.467279][ T31] 5 locks held by kworker/0:6/5995: [ 510.471796][ T841] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 510.473653][ T31] [ 510.484224][ T31] ============================================= [ 510.484224][ T31] [ 510.488542][ T841] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 510.507218][ T841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.510605][ T31] NMI backtrace for cpu 1 [ 510.510621][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 510.510639][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 510.510648][ T31] Call Trace: [ 510.510653][ T31] [ 510.510660][ T31] dump_stack_lvl+0x116/0x1f0 [ 510.510685][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 510.510701][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 510.510727][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 510.510745][ T31] watchdog+0xf0e/0x1260 [ 510.510767][ T31] ? __pfx_watchdog+0x10/0x10 [ 510.510783][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 510.510803][ T31] ? __kthread_parkme+0x19e/0x250 [ 510.510827][ T31] ? __pfx_watchdog+0x10/0x10 [ 510.510843][ T31] kthread+0x3c2/0x780 [ 510.510859][ T31] ? __pfx_kthread+0x10/0x10 [ 510.510875][ T31] ? rcu_is_watching+0x12/0xc0 [ 510.510895][ T31] ? __pfx_kthread+0x10/0x10 [ 510.510912][ T31] ret_from_fork+0x56a/0x730 [ 510.510926][ T31] ? __pfx_kthread+0x10/0x10 [ 510.510941][ T31] ret_from_fork_asm+0x1a/0x30 [ 510.510970][ T31] [ 510.510975][ T31] Sending NMI from CPU 1 to CPUs 0: [ 510.519886][ T841] usb 6-1: Product: syz [ 510.529039][ C0] NMI backtrace for cpu 0 [ 510.529056][ C0] CPU: 0 UID: 0 PID: 841 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 510.529074][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 510.529083][ C0] Workqueue: usb_hub_wq hub_event [ 510.529109][ C0] RIP: 0010:io_serial_in+0x87/0xb0 [ 510.529127][ C0] Code: da 56 fc 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c c3 cc cc cc cc e8 f8 41 bd fc eb a2 e8 81 42 [ 510.529140][ C0] RSP: 0018:ffffc90003627288 EFLAGS: 00000002 [ 510.529151][ C0] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000 [ 510.529160][ C0] RDX: 00000000000003fd RSI: ffffffff8564c2d0 RDI: ffffffff9b118120 [ 510.529169][ C0] RBP: ffffffff9b1180e0 R08: 0000000000000001 R09: 000000000000001f [ 510.529177][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 510.529185][ C0] R13: 0000000000000020 R14: fffffbfff3623076 R15: dffffc0000000000 [ 510.529193][ C0] FS: 0000000000000000(0000) GS:ffff8881246b2000(0000) knlGS:0000000000000000 [ 510.529208][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 510.529217][ C0] CR2: 0000001b31ed8ff8 CR3: 00000000255d1000 CR4: 00000000003526f0 [ 510.529226][ C0] Call Trace: [ 510.529231][ C0] [ 510.529238][ C0] wait_for_lsr+0x137/0x210 [ 510.529257][ C0] ? __pfx_io_serial_out+0x10/0x10 [ 510.529277][ C0] serial8250_console_write+0xf81/0x1890 [ 510.529299][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 510.529319][ C0] ? lock_acquire+0x179/0x350 [ 510.529335][ C0] console_flush_all+0x7fe/0xc60 [ 510.529355][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 510.529374][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 510.529393][ C0] console_unlock+0xd8/0x210 [ 510.529408][ C0] ? __pfx_console_unlock+0x10/0x10 [ 510.529427][ C0] vprintk_emit+0x418/0x6d0 [ 510.529443][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 510.529463][ C0] dev_printk_emit+0xfa/0x140 [ 510.529478][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 510.529501][ C0] __dev_printk+0xf5/0x270 [ 510.529516][ C0] _dev_info+0xe4/0x120 [ 510.529531][ C0] ? __pfx__dev_info+0x10/0x10 [ 510.529546][ C0] ? usb_match_device+0xd5/0x570 [ 510.529566][ C0] ? usb_detect_static_quirks+0x335/0x3e0 [ 510.529584][ C0] ? usb_cache_string+0xf2/0x150 [ 510.529600][ C0] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 510.529623][ C0] usb_new_device+0x8b0/0x1a60 [ 510.529641][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 510.529656][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 510.529674][ C0] ? mark_held_locks+0x49/0x80 [ 510.529695][ C0] hub_event+0x2f34/0x4fe0 [ 510.529722][ C0] ? __pfx_hub_event+0x10/0x10 [ 510.529738][ C0] ? assoc_array_insert+0x1520/0x3970 [ 510.529762][ C0] ? rcu_is_watching+0x12/0xc0 [ 510.529780][ C0] process_one_work+0x9cc/0x1b70 [ 510.529799][ C0] ? __pfx_hcd_resume_work+0x10/0x10 [ 510.529818][ C0] ? __pfx_process_one_work+0x10/0x10 [ 510.529836][ C0] ? assign_work+0x1a0/0x250 [ 510.529850][ C0] worker_thread+0x6c8/0xf10 [ 510.529867][ C0] ? __kthread_parkme+0x19e/0x250 [ 510.529886][ C0] ? __pfx_worker_thread+0x10/0x10 [ 510.529901][ C0] kthread+0x3c2/0x780 [ 510.529914][ C0] ? __pfx_kthread+0x10/0x10 [ 510.529927][ C0] ? rcu_is_watching+0x12/0xc0 [ 510.529943][ C0] ? __pfx_kthread+0x10/0x10 [ 510.529955][ C0] ret_from_fork+0x56a/0x730 [ 510.529968][ C0] ? __pfx_kthread+0x10/0x10 [ 510.529981][ C0] ret_from_fork_asm+0x1a/0x30 [ 510.530003][ C0] [ 510.984277][T11447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.998645][ T5995] usb 2-1: Cannot retrieve CPort count: -110 [ 511.004469][T11447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.004713][ T5995] usb 2-1: Cannot retrieve CPort count: -110 [ 511.024282][ T5995] es2_ap_driver 2-1:7.0: probe with driver es2_ap_driver failed with error -110 [ 511.030863][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 511.030883][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 511.030902][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 511.030911][ T31] Call Trace: [ 511.030919][ T31] [ 511.030926][ T31] dump_stack_lvl+0x3d/0x1f0 [ 511.030952][ T31] vpanic+0x6e8/0x7a0 [ 511.030976][ T31] ? __pfx_vpanic+0x10/0x10 [ 511.031001][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 511.031023][ T31] panic+0xca/0xd0 [ 511.031036][ T31] ? __pfx_panic+0x10/0x10 [ 511.031060][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 511.031084][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 511.031102][ T31] ? watchdog+0xd78/0x1260 [ 511.031120][ T31] ? watchdog+0xd6b/0x1260 [ 511.031138][ T31] watchdog+0xd89/0x1260 [ 511.031158][ T31] ? __pfx_watchdog+0x10/0x10 [ 511.031174][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 511.031195][ T31] ? __kthread_parkme+0x19e/0x250 [ 511.031219][ T31] ? __pfx_watchdog+0x10/0x10 [ 511.031236][ T31] kthread+0x3c2/0x780 [ 511.031252][ T31] ? __pfx_kthread+0x10/0x10 [ 511.031269][ T31] ? rcu_is_watching+0x12/0xc0 [ 511.031289][ T31] ? __pfx_kthread+0x10/0x10 [ 511.031306][ T31] ret_from_fork+0x56a/0x730 [ 511.031321][ T31] ? __pfx_kthread+0x10/0x10 [ 511.031337][ T31] ret_from_fork_asm+0x1a/0x30 [ 511.031365][ T31] [ 511.033646][ T31] Kernel Offset: disabled