last executing test programs: 7m13.398035346s ago: executing program 3 (id=1326): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pivot_root(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00') socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x800, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x47ffffa, 0x60500) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) unshare(0x22020400) r5 = memfd_create(&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\v\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\xd5)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) gettid() execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) 7m10.287410227s ago: executing program 3 (id=1332): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r0, &(0x7f0000000000), 0x4001) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') socket$inet(0x2b, 0x801, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) getsockopt$inet6_tcp_int(r3, 0x6, 0x2, 0x0, &(0x7f0000000100)) 7m8.726674403s ago: executing program 3 (id=1335): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000480)={0x0, 0x5}, &(0x7f00000004c0)=0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) socket(0x15, 0x5, 0x5) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0xc931ce0b7ee6dc2e, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x1e, 0x4, 0x0) r3 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) read$msr(r4, &(0x7f0000000300)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x14, 0x14, 0x1, 0x800000, 0x0, "", [@nested={0x4, 0x2, 0x0, 0x1, [@generic]}]}, 0x14}], 0x1}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0x7c81, 0x0) 7m5.108925515s ago: executing program 3 (id=1343): r0 = socket$nl_generic(0x10, 0x3, 0x10) inotify_add_watch(0xffffffffffffffff, 0x0, 0x2800047e) socket$kcm(0x10, 0x7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$COMEDI_BUFCONFIG(r4, 0x8020640d, &(0x7f0000000180)={0x800, 0x3, 0xec, 0xa}) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid\x00') recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, &(0x7f0000002080)=0x64, 0x21c) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ftruncate(r5, 0xfffffffffffffbcd) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fddbdf252100000008000300", @ANYRES32=r7, @ANYBLOB="0a00f5"], 0x28}, 0x1, 0x0, 0x0, 0x805}, 0x40084) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x2f, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0xdffffffa]}) 7m4.195452578s ago: executing program 3 (id=1345): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pivot_root(0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x800, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x47ffffa, 0x60500) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28) r4 = memfd_create(&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\v\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\xd5)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) gettid() execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94) socket$packet(0x11, 0x3, 0x300) 7m3.202158961s ago: executing program 3 (id=1347): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat$fb0(0xffffffffffffff9c, 0x0, 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x3, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3502, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xffffffc0, 0x6, 0x800, 0x1000000, 0x709d}, 0x7, 0x1, 0x7, 0xfffffffe, 0xb38, 0xe, 0x3, 0xc, 0x1, 0x30, {0x99, 0x7, 0x6, 0x401, 0x6, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000) r7 = io_uring_setup(0x4128, &(0x7f0000000680)={0x0, 0xa74f, 0x10000, 0x0, 0x246}) io_uring_register$IORING_REGISTER_RING_FDS(r7, 0x13, &(0x7f0000001bc0), 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) ppoll(&(0x7f0000000240)=[{}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, 0x0, 0x0) 6m53.97601929s ago: executing program 2 (id=1367): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB='M\x00'/17, @ANYRES32], 0x50) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x80}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x24000000) (fail_nth: 13) 6m53.647131995s ago: executing program 2 (id=1368): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file2/../file0\x00', 0x80900) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r0], 0x0, 0x56}, 0x28) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x40010, r0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfffffffffffffffd, 0x0) read$FUSE(r6, &(0x7f0000001680)={0x2020}, 0x2020) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r3, 0x0, 0x1, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 6m48.260892075s ago: executing program 2 (id=1380): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) r0 = syz_io_uring_setup(0x5340, &(0x7f0000000440)={0x0, 0x199e, 0x8000, 0x3, 0x3be}, &(0x7f00000000c0), &(0x7f00000001c0)) r1 = syz_io_uring_setup(0x88d, &(0x7f0000000140)={0x0, 0xd037, 0x200, 0x3, 0x121, 0x0, r0}, &(0x7f0000000080)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xfffffffc, 0x0, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r4}, 0x18) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8bd6095d4dd1d71160d96070200001ea89de2b7fb0000e60080b8785d960001000000000000d100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) r7 = socket$can_raw(0x1d, 0x3, 0x1) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x10, 0x16, r7, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x9, r8}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0x13, 0x0, &(0x7f00000007c0)) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) (async) syz_io_uring_setup(0x5340, &(0x7f0000000440)={0x0, 0x199e, 0x8000, 0x3, 0x3be}, &(0x7f00000000c0), &(0x7f00000001c0)) (async) syz_io_uring_setup(0x88d, &(0x7f0000000140)={0x0, 0xd037, 0x200, 0x3, 0x121, 0x0, r0}, &(0x7f0000000080), &(0x7f00000003c0)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xfffffffc, 0x0, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r4}, 0x18) (async) syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8bd6095d4dd1d71160d96070200001ea89de2b7fb0000e60080b8785d960001000000000000d100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) (async) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x10, 0x16, r7, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x9, r8}}) (async) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) getsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0x13, 0x0, &(0x7f00000007c0)) (async) 6m48.129081022s ago: executing program 32 (id=1347): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat$fb0(0xffffffffffffff9c, 0x0, 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x3, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3502, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xffffffc0, 0x6, 0x800, 0x1000000, 0x709d}, 0x7, 0x1, 0x7, 0xfffffffe, 0xb38, 0xe, 0x3, 0xc, 0x1, 0x30, {0x99, 0x7, 0x6, 0x401, 0x6, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000) r7 = io_uring_setup(0x4128, &(0x7f0000000680)={0x0, 0xa74f, 0x10000, 0x0, 0x246}) io_uring_register$IORING_REGISTER_RING_FDS(r7, 0x13, &(0x7f0000001bc0), 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) ppoll(&(0x7f0000000240)=[{}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, 0x0, 0x0) 6m48.088212679s ago: executing program 2 (id=1383): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000015000072000040"]) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/rt_cache\x00') r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x2000) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000cc540)={0x1000, [], 0x2, "afde17170822b7"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, &(0x7f0000000700)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004005) socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x54}}, 0x20000000) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01864ba, &(0x7f0000000300)={0x2, 0x0, r7}) 6m40.018764233s ago: executing program 2 (id=1396): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pivot_root(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00') socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x800, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x47ffffa, 0x60500) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) unshare(0x22020400) r3 = memfd_create(&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\v\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\xd5)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) gettid() execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) 6m37.904534947s ago: executing program 2 (id=1401): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r0, &(0x7f0000000000), 0x4001) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') r3 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_int(r3, 0x0, 0x22, 0x0, 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x257) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) getsockopt$inet6_tcp_int(r5, 0x6, 0x2, 0x0, &(0x7f0000000100)) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) getpid() r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f5, &(0x7f0000000200)={'gre0\x00', &(0x7f00000002c0)={'erspan0\x00', r7, 0x0, 0x7800, 0x0, 0x0, {{0xf, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @multicast2, {[@rr={0x7, 0x14, 0xf0, [@rand_addr=0x64010102, @remote, @multicast1, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3a}, @broadcast, @empty, @private=0xa010102, @loopback]}]}}}}}) 6m21.805129085s ago: executing program 33 (id=1401): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r0, &(0x7f0000000000), 0x4001) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') r3 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_int(r3, 0x0, 0x22, 0x0, 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x257) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) getsockopt$inet6_tcp_int(r5, 0x6, 0x2, 0x0, &(0x7f0000000100)) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) getpid() r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f5, &(0x7f0000000200)={'gre0\x00', &(0x7f00000002c0)={'erspan0\x00', r7, 0x0, 0x7800, 0x0, 0x0, {{0xf, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @multicast2, {[@rr={0x7, 0x14, 0xf0, [@rand_addr=0x64010102, @remote, @multicast1, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3a}, @broadcast, @empty, @private=0xa010102, @loopback]}]}}}}}) 12.144722138s ago: executing program 6 (id=2371): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x0, 0x785, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000c40)=[{0x8, 0x3, 0x6, 0x6}, {0x5, 0x1, 0x7, 0x9}, {0x100001, 0x1, 0x4, 0xb}], 0x10, 0x3}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800786a00"/28, @ANYRES32=r0, @ANYBLOB="7f000001ac141400000000011c0e000000000000000027006fc90200000000000000000e38a54e39f794b74795faafacfeaf31c80c116eb95ed665822b83c5a25ec25f929c78b6d1c59634b705b5558c8fa77cf2f1a239bcb2b1df57b79a5b72f09f2dccda05d8ea677f4777aae08951c8477f8d03d6b78abb88ed9d01a88ed745d368ced0ef553a92be97dd5030870275a45b82ffe8f838c4e85f8c5bdb269626437a9add971360a32b90e2cccc27c01df9e75abbe9aa7ec2e4531ae57462c7e3c095d09ded0a23079a3decc53c372b3e198905da35ecfee29d33e5b709aa01b7d1fd1513981919625143ce1abadc4b15f86028fc772e42"], 0x230}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) r2 = socket$kcm(0x2, 0x0, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x9, &(0x7f0000000380), 0x4) 12.13273657s ago: executing program 4 (id=2372): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44050) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRES8=r1, @ANYRES32, @ANYBLOB="0000cf00000000020000000000000000000000003b79b20cc83a4b96", @ANYBLOB="c934f400bf6bd7d90a89c024f37a0b28138ebb00df1a5c2f5399102311b6f6e7c87163a2799d66688ac19c8a95a8df9be3bdeaf63e7aedadb45b9366d12e859aa8ec9f757d4ff88491c9dae08dc48770ba0c73c9ffdb6edf581b9da734c57e5426708ee37d4b8cfc4f0d2aa66ec3bc3ef43060e1e2a4c89a844617d0459f0db3f1c0be9c1a114fed53a5f815c2221b6359ff2c4cbeeaddabd8ecf44da4e31f32327324c414ba0ff6332e9dfc5096c41c3efce1cfe3f3e70ea84eaf8522d47d4c76d23640c2496d54094abdcf4446288b0787920fdb325e600b18e781c47a69a5a9bd8f1ffeb8d2fd14d985783f0e500c08002ab8608ae813585edb662df125b1612aa2626f9060415a2a557a551f9329321a04080b7f15eb1fce930ab67821e0c40aae2edbd9df39328d57ecbebaed45894089be60d1c403f9b45f70d501daac02d184a4c72098074aca7e564ec820fba5d3448ce27da73109b0531808cbe5c65bbf9be9c2cbca27c9830d31587f6c82e8b6b7af8a1e135517b8eaf6e5fd4a62035f34ad587ef0d2fbbb9af0d4babcf32173182689e91abba8d807fb2698226ec0d5f2676a27f3de76cfdfd48495d9db9da211b44849cf71d35759f0293932232a931b1f702fff4ea575bc289ba5afbbefd4ec4447ac5de4cdc4220ee4d90b0e63f1b03e1173dde3fb558c9526f6c4aefd98c857c548b4ca723e9f87e297f00cd54c06c9301188c2f78c1e8a4b28eadc0e682bd5d410ccdaf467f28fc6ec69c73e519af8c7e69ac56677d47f217da698811f690821f22d6ba03fb02896d5cc0ee65165594ef17729452a429a3486d002ed4e56ec12ade35532a5d3b6b7bb67ea2f99d304f7b956b1bacad5469314f4f95416c07a031ffa1ec0d9a61ee84e6635f44c59314df1869e17b443809fc5992d20ee557328452ca52e8f216c1f5a5565dfc0e89675816eab8483b894bfae09dc7a349ef142d8074bfa1476139a02ea004b2b868f00d5461f7efdfec7b3e67726538a74fec338c98394bd4501c7a858a17cae7006569799b18ac6d9e531ff3c650d8f3e6e28ee1eb6cff0a230794529f722225ddd11d43fe8f80f3bef1ea6b42e09b61beabc171f3110a611415fc97560ae44a8ee1f4265d525b23737d6ef77704fd060752b2547a5de4df998fa8b234f56103f68c0f4ef424525b8f036e7e2d40f110ac6e33604d0882091708c5a38312c90b1c57c73ef3e7f872028d54ae59a0533a1df840da4767f4ed58cbeb5f5b90303459c53e3582dab18c665d9d593f0757e0ab90311f48052762519817a719bffa4921c93c14d766face670354055fa39244cca141cb3785bd79cc160a574649c151d61bc0dffd0ce0745cf930785d3b703db10ad142a5ed769f4e3c5fd497b868838cc7cb40bc53f2fad1abc849b7a1495d4f9f07052428a91c1ff7d536dfd3afff7a8961ccd9485aec526c65221c69933d7a526e045123f52ff652850cadec225d58b19bc65c5a7ccceace60e8464349a89f09a7d27339947c11b10e2fdda62ff0f72e9080943fb6ae31f8fbe3a21e81e6804b075be6281e4ad9a8726f3b72115da3ad86cf8fc5ca7abdd997637469a586685d6484de3a57217e6153f1223eb9f2b69c61ed30aed54cef709654d76d86d0b678e814ef96c5c415c3ba5e37a41dbd759ab7a3b3aaa94115a9f527c5fea5590a5ca76167f1c43639d2b9c2a85940d2844846ace6d43301e2fd5549ec97b5d902180b72bc0a975252d1dfa3c791f1034280234b242131ae993a85e2b696adbfb6012a9593954619bcd7511ea7b3afc2c497b5e1cd6c5432681ad862fe831d9f13a809d67c7a9fbc25f28b0536df21fc3d77a6dffc3103d19b34ba0771e69362399c3e340fa82ecce96543faf0113a4a1e087342eb1f9732df21b4d480b6aa06d376107bed8339d9b5c64b8b65c4345fb79d8ef5db772bcd4cc413b55fd6e3cff9751f89d09a36de80aa60ed6e68a424685c83c1e7295dda9eed68cb061f44c15568f0dc4b158e6ecc8832db5a38717d5cc5b7ec3941f244c78431d7af38b4ba1bb90b04bc35b3c059db4d783a8ef9c1a0d18b9b496073c6c39e810372fb836edac5129e14dbc18bcdde4cb0da2ccc0f9e304d9e4d7d96fdafe03b1eab2f72aca373af6b404b839336b0d1afa2a0dfcf88e215f1fc9e63ad2d00dcb0c249f87c740662ed678ae6104862622ebccfe4e3aae47806e36ceeecb5566ad830a70cd3070eba5ccd72c0421deb1941cfda6a103a04dcea8802930078b1befb9c497e79e9150da77b842bb73aa46884a830a624904542e9c4387f8c361af857f4f8f1aeb225a1e029c097221fc1d0c1a172244c81954b7bd44d6711acf192b730b811433e102ef6fb8ba57f9bad1d367126003befe5f9850bf1b3b057c87bd4e9dc2ef1c864119e14478ccbfd49e37d59c0866867a2789aca86b06199f14ec1d1d005522f056669d5a081e238178fb3322cfe49fb3cb2433cea28a10c6433241e60fd827886553d251341bcb15a4e72b2b8dce8376b275315f99ca93d3bd897ae57f9ea2c30538df3c0c49d8fd6d3850a031c8cb4bab349c1aa9cd90dadbc5eb66298e6fbb65734118acf41ce84fa326a21ba5f632a59ee8dff11697ca3ddcfd86d9a2021549a607fde2c5fe7d9d056bf3c0c33119ef6db13cfc683c203176717b5cfc9cc9a2bbf6453f4957ec1102f2716e52f2669059e112da22266d9c952a834d45dd8cfc95b14031a5086e0ec82c86b022f4ba1631a0692be749140719dfd2b3ce3b1f061e71835cb6986a353d1991e3be69f4759ed153004c99000ff43443d908fdd772c5924f165411bfadead2a86047dbea2d74d93337b20dfa0e285c286ee43b2ec090d68cb48f5393f4f8d6c9fde5a5820628e7f17680930f331fdab6772f8a1426fe388c9b9e6848aa403269819aabba7cb9cee6797883c00ea46809d61e751d748c82583266ab75a5e867b726227274954a4b1a8786f3209a3a551ecde5dc302959a2a1182581a5e537070b83d2302475696fee38b4950b48a9290b7b88039747c6e55f9e00ef63421d426fca97aae34910f2c5340a9fbe99950d633f9fc3de0c5c310e16fb01d702b993d12551e62a5ba515db713930235ec78cc46d4eb345948deae3249e928f9d529cea34fcd38f4ea261f87c201848f0b48da9abcfe1c312783bdac62249b70c2a0c5687a122528e300a69c130232aea21f553bc9328ddd99c2d938a306ddece753bbd2b2de29ac71150f1c8ba0bdb50429698b8196be69ce76c60be3555324608bbe21cfda9b19dd3a6a493b43d7c34c85e33bfa38b01201914d6059dfafbbb42c637ed75d14142a85a25e3432deea7e7ce778f4eaad7c8679b7f35539c9807c566e3ec515b8fa55ab93c6bacf83e2f5f1d86a92595355c55a57c3710b20243994a5bd346d4aecce3e18f2d2fdbca282e836bfd395210578b289eb951f3ef62c038280835d1687cf43b2325aec63eb4003f6c7327672fd163a2f7a06fb6ce28c9bb4d879f68a3b245c9e64c61bfc4050ecdf9e6d0c6754b44e8a042d40c2a4be226fcfc9e35711df48a16fdec90e64c37ad5a9c652e1ee740703b0ec99f31f317a8a675b14e3f0f7a05587bd34474f8ad47ef8c664ce9b83895ada8612440196ad37956210ee1856e3b6dad583565267a4c95eb1ad51b773023bcf8a474eb670670be7a9a8eb876f94c4c8913970824186a351b29a492d118350fb436d621e67db0cc5c35d1b100b0591100c862cfb8e17cdd127665828ddee655dbd3f4a27f61c89e2055e012ef2b3b1ff5bbd1c0a7aba2207a4964493a4f3c14f5d9a480b390e5aa8e70aee85aa2a5b025ad718d29b8de050ee565fac21f955448a653ab76bb0bc23fa44cdc984151dbac357bff7852d536d68a36af6a98a568e73bc402e1487d979091b410863d091cabe293a6bf5846659bbf7c42cd4e03a111ffc4939fdf09d2ab828f8ac3fc1be2753fedfdf980db16f429f6e3ccf95d2af70e63e2c795977cec5ff69a8b1a3111cdc1a914f4a6137f4837e52159c1480190f60f428f32d1d4370d6c644b8199e4ec1bcf5f0d5d5a2d52a3786854a38dd77cf6f1657d60d69562fec46ba3220afdcabf1227637c1669e6c81c6d986d10184755fba8d874c499dbbc28035533827a0a1950296add948842ac57002c040241bcefb68d026ee38f964b8aa6f295741f5722c74c67810775f938487650f621db04c14678538f9bcb576a740b557c5b010041e5820a9342b5e8d5daa9313ebd89eb5e38bf98c2ada97daa3903934b27d397c205ed3065b37bd1e3a10b9baedcc36e9ed1f567f7814e9a6c28f8360971284fd83e7893de4c7cfa12b261ed66f4bc522c0d15c7b4ce62b55ccda92996e0a98bb7d369f0948e7e4db3d441de73bb73e5daebf4f71ba20f1d7ea80216e4d746ed21dc5c7a3c8d6e3a652c53a4bcbda8ae8b4cc376b503d0dea0e287e25afc09abc16bea12c54f62fcafe77ca338cfb35eeeff2b9137f66d8bf4a9a2dbd4dabd707dba21232509afb4b1d79f3378f07a1e7e05b830db9c0f22d164cdfa79508b5453f7dba66da3ffb93ade5cbf27a528562d44aeca184e64aacaea4826a90821a46691fe59cf6dad42bcec02e93bd136d4f5e365e3d332630bc8e7cad46d5db344bd1fe06b3ae327f2e1f47452d05f1dac3c42b87d161041eb80cbfcae415f0170df2bfbad45fd8f340067eb17cb5eb9cfa283b5349fa18c2147ef4ba23f41a1f2ce2b85689deba5edec0c3741cffec7e450bab5b16e2c1e0f01c35a7fe89066567880aa4c3e803dcf99c076501985e946b1b47b3c830f38f0c9eff050bf9f32e79b89464452ccf8f9d584af814085f4170ea3327faa413cc2f2497397d54a9c740703f4d2a5b63ea47015036324d56bb480bf4954f4fa40bd20152321cd5ddc96eedd12158a08eeb29a39b9718850cd8246b8753b7c0306fd7da6827ec9246fe86954a72be181342cc63783b537c24f779f0f69721e69496a6bc042366cb6db50251e4e43785b750f62c913ced6ae19a2fb4a224e4eca79737d88e609c7efb63f7488aa3a858c097a34f61bf2cf1d63c3b7587f8b491154faa90cbc6873cd5efbb5258d4977548961fbf020895fc82dff2a8dc3481546685026efa08369a39589ea3eea1a65e9fe02b00d5f095bacfe05286ee7a2ce8c1baaf892f680c242d5c1842a475a89000a4aa22add57457bf15ef5b151fa13b58154c77ead4561e911aceb7894c70e288fef973428e652482f775ffcfb0f74b5d4bd4d722ce73b6bc38c90dc3a86e16234a6ea74b9e0de760c68e3b254c8195ae78f95221c146e91fb8eee30cb3b8bdeffb5e5fa4abb4d7d835ee894e6de214e0c29d568135790f532cd31c1328f7cce1dfa410bf4ba26e6d45a55dd4e2adf887d467330c38c1e62036d9ad6f08ff24e83b452d9470eaff046e4842253c289e936d3657c1dc5fbf1c1ca54b5b24ef8f75311e6abf5f839aaa253de1b09607cda605249c6c48ee7120cea1e0bf9fe2b3d394a449b4270e3864fd1cca3bc012ba7d57ecdacbba0695d1dde31231c2da05dc11b11e4aac2de7c1278443a5fe6fc15215139eecd1c98e66dc08a7b19eee6b8a26d61ffc07d4428ce6266a02a02f42d3790b2f2b31177b99fa8f70a493990b2846e7dc4c3456d24b175400c18bd951953fe95dac5797f115ea7f229f7a6941154bc1344a35c9962a80a3220af767dc7a1f2ff59911f05eaf18b62dc668b9560f27c3fd9cc382dfba9b28d7b152789bd8b", @ANYRES32, @ANYRES16=r1], 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x0, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xff, 0x9}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000808000/0x1000)=nil, 0x1000, 0xb635773f04ebbee5, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x99) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000ff008000052de5c6e6984e4ec42f344f000000b42920000000010000005f20d4fb", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRESDEC=r4, @ANYRES32, @ANYBLOB="00ffffff4e489fb67ddc441810030000000c9b55cf000000000000003767f3d833ce3b18802d"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r5}, &(0x7f0000000780)=0x7d8, &(0x7f0000000180)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, &(0x7f0000000200)=""/197, &(0x7f0000000380), &(0x7f0000000300), 0x2, r6}, 0x38) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000300)={@local, 0x0, 0x1, 0x3, 0x8}, &(0x7f00000004c0)=0x20) 11.4689103s ago: executing program 6 (id=2375): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f00000024c0)=[@reply_sg={0x40486312, {0x3, 0x1000000, 0x0, 0x0, 0x21, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 11.156852151s ago: executing program 6 (id=2377): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d3030303030303030303030303030704f14d687e898a5d565da9f75303030304a34303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) listen(0xffffffffffffffff, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x48c59) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fcdbdf2521000000080003006d56ff804046fa94589be6a395d10900000000000000dd53419383ddd8335dde231816b796d5819d8cdd1922dcf445a9c8770f5183f1718ac6d783ecbec2998ff8af929ea68659aa6b8b9e09f64c2bdad9ae1094570186064b23fb0eb2782a4ed6198147c1d761093eb90f2767d3f06b497bf77474ad8f2045", @ANYRES32=r6, @ANYBLOB="14002d8005000400010000000800020002000000"], 0x30}}, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x8000}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008280)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x8, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xfffffffffffffffd, 0x0, 0x1, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0xfffffffd, 0xc000, 0xffffff99, 0x0, 0xee01}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000006280)="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", 0x2000, &(0x7f00000001c0)={&(0x7f0000000080)={0x50, 0xfffffffffffffffe, 0x4, {0x7, 0x2b, 0xc, 0x20000400, 0x0, 0x7f, 0x1008, 0x6, 0x0, 0x0, 0x80, 0x40}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000c40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x429, 0x200000000000000, 0xfffffffffffffffc, 0x0, 0x80000, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x8, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x100000001, 0x0, 0xfffffffffffffffc, 0x1, 0x400000000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0x50b, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x2080000000000000, 0x0, 0x4, 0x20000, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x5, 0x401, 0x0, 0x8000000000000002, 0x0, 0x0, 0x0, 0x400000000000, 0x3, 0x1, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0xfffffffffffffffc, 0xffffffff, 0x3, 0x6, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x200, 0x9, 0x3, 0x2, 0x0, 0x0, 0x0, 0xffff7ffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xde4, 0x7, 0x0, 0x100000000]}) 11.144307696s ago: executing program 4 (id=2378): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000000)={0x1}) sched_setscheduler(r1, 0x6, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xbbb71000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) dup(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r8, 0xffffffffffffffff}) close_range(r0, r6, 0x0) ioctl$SYNC_IOC_FILE_INFO(r9, 0x40103e05, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) 10.47966604s ago: executing program 6 (id=2379): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x1418, 0x1, 0x0, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000804}, 0x44810) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e005", 0x26}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a0", 0xca}], 0x3}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 9.611846584s ago: executing program 6 (id=2382): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, &(0x7f0000000040)) mmap$snddsp_status(&(0x7f0000ffa000/0x3000)=nil, 0x1000, 0x100000b, 0x810, 0xffffffffffffffff, 0x82000000) fcntl$setown(0xffffffffffffffff, 0x8, r0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0xc, 0x101000) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getrule={0x1c, 0x22, 0x100, 0x70bd28, 0x25dfdbff, {0x2, 0x10, 0x14, 0x3, 0x40, 0x0, 0x0, 0x6, 0x1}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x14) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getpeername$llc(r3, &(0x7f0000000200)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000240)=0x10) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000280)={r1, 0x3, 0x32, 0x1ff}) r5 = accept4$llc(r4, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000300)=0x10, 0x80800) sched_setaffinity(r0, 0x8, &(0x7f0000000340)=0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = syz_usb_connect$uac1(0x3, 0xc7, &(0x7f0000000380)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb5, 0x3, 0x1, 0x8, 0x60, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x40}, [@selector_unit={0x5, 0x24, 0x5, 0x5, 0xff}, @extension_unit={0xc, 0x24, 0x8, 0x2, 0x5, 0xff, "459f2f5692"}, @mixer_unit={0x6, 0x24, 0x4, 0x1, 0x0, ';'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x81, 0x0, 0x7, "897c2c"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xd, 0x3, 0x3, 0x3, ')'}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x10, 0x7167, 0x3, "9aa346"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x3, 0x3, 0xfa, {0x7, 0x25, 0x1, 0x0, 0x96, 0x10}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x7, 0x1, 0x4, 0x7}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x8, 0x3, 0x4a, 0xab}, @as_header={0x7, 0x24, 0x1, 0x0, 0x3, 0x1001}, @as_header={0x7, 0x24, 0x1, 0xfd, 0xdf}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x4, 0x10, 0x5, {0x7, 0x25, 0x1, 0x80, 0x8, 0x6}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x201, 0x8, 0x21, 0x1, 0x8, 0x5}, 0x68, &(0x7f00000004c0)={0x5, 0xf, 0x68, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0xcd, 0xf2, 0x0, 0x100, 0x4}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1e, 0x3, 0x7, 0x0, 0xa}, @generic={0x23, 0x10, 0xb, "0c6325573f7d8093ba08b2493b4f37467b2c106b70a40cd725e5daa9846ca040"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x40, 0x8, 0xd, 0x9, 0x3e}, @ss_container_id={0x14, 0x10, 0x4, 0xc3, "653e28aba62038a5b4698a76be4b64fa"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x4a, 0xd, 0x9f, 0x4, 0x4}]}, 0x4, [{0xd7, &(0x7f0000000540)=@string={0xd7, 0x3, "33bd4ff59201b9b665a4cf1f5f0ebc558f7bcde4e3297871f137e2fd6fc0c5b053f4f0b5a03bc7b255dd636f72598a7fb6e49ec6d91e4df9de1cddb3d782c63c2aceca3153154ff9cc857bb04f7f8e016228a52602e69943656e29f66d049ee0081ad330e424700b7835872cd30b51635f1580021b0fe34f507d02b8d5cc17a14d01369fe376294c3616ddac62f0380fd449abd6980be1f3e1036e7a5601ab72c82c536668052a13d25081e61ca4f891bae37271dd39008910d133c76ace65df83f99cf47bd3dcdb9fd902bf5aba11fcd7341216b8"}}, {0x27, &(0x7f0000000640)=@string={0x27, 0x3, "5e6554dce64c83f0fded822c8bac2c2c3aac815766ee846efd47fb14e8c378f2a3ba8d7357"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x419}}, {0x40, &(0x7f00000006c0)=@string={0x40, 0x3, "83a15a0fe984ee5708482ac866d0cad97b13c56db761042541973d973551307fd75499d7dd2933fcb5b26f7717efaf0072807ddbaaefe930746115f1499a"}}]}) setsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f0000000780)=0x1, 0x4) getpeername$llc(r4, &(0x7f00000007c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000800)=0x10) syz_usb_control_io(r6, &(0x7f0000000a00)={0x2c, &(0x7f0000000840)={0x40, 0x8, 0x96, {0x96, 0x16, "2ef565c039a7d4ff96d5ad0814ddd691a1d34137015cbad9ec30e4be30dd9e946dafd8cb75a7605ce9abc61e89c0c52b7a37b4e29d89bb4130e0756d748e5b7469e03f01f619803fee741aae216f624eff64dd4f2d4c02722c02cb272d74698ec3d5c90731e63dc8c175b7b4a8feb4efe94186533bfb50ab1e0d14d604056b478e3dc148b0cd536a4961cc57553f95ae69f11176"}}, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x426}}, &(0x7f0000000940)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x7, 0x0, 0x40}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x9, 0x8, 0x200, 0xa}, @wireless={0xb, 0x10, 0x1, 0x0, 0x6e, 0xf7, 0x5b, 0xdf42, 0x40}, @ssp_cap={0xc, 0x10, 0xa, 0x8, 0x0, 0x136f9d9, 0xf00, 0x5}, @wireless={0xb, 0x10, 0x1, 0x83291c60e7adb018, 0x10, 0x5, 0x10, 0x1, 0x9}]}}, &(0x7f0000000980)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x18, 0x1d, 0x0, "7b7077fe", "f7086d2f"}}, &(0x7f00000009c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x80, 0xea, 0x80, 0x4, 0x8, 0x4}}}, &(0x7f0000000e40)={0x84, &(0x7f0000000a40)={0x40, 0xc, 0xb, "6adc9a4b6f280d7c453901"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000ac0)={0x0, 0x8, 0x1}, &(0x7f0000000b00)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000b40)={0x20, 0x0, 0x8, {0x10, 0x40, [0xf0f]}}, &(0x7f0000000b80)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000bc0)={0x40, 0x9, 0x1, 0x16}, &(0x7f0000000c00)={0x40, 0xb, 0x2, "f95c"}, &(0x7f0000000c40)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000c80)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000cc0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000d00)={0x40, 0x19, 0x2, "d285"}, &(0x7f0000000d40)={0x40, 0x1a, 0x2, 0x7ff}, &(0x7f0000000d80)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000000dc0)={0x40, 0x1e, 0x1, 0x7e}, &(0x7f0000000e00)={0x40, 0x21, 0x1, 0x5}}) recvmsg$unix(r1, &(0x7f0000001100)={&(0x7f0000000f00)=@abs, 0x6e, &(0x7f0000001040)=[{&(0x7f0000000f80)=""/133, 0x85}], 0x1, &(0x7f0000001080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x78}, 0x2020) r11 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x41, &(0x7f0000001140)=0x2, 0x4) ioctl$USBDEVFS_RELEASEINTERFACE(r7, 0x80045510, &(0x7f0000001180)) r12 = accept4$llc(r4, 0x0, &(0x7f00000011c0), 0x800) bind$llc(r12, &(0x7f0000001200)={0x1a, 0x325, 0x6, 0xfd, 0x6d, 0xa8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, 0x10) listen(r12, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001340)={@cgroup=r4, 0x8, 0x0, 0xc, &(0x7f0000001240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000001280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000012c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001300)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001380)={@fallback=r5, r7, 0x26, 0x6, r8, @void, @value=r4, @void, @void, r13}, 0x20) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000001400)={'team0\x00', &(0x7f00000013c0)=@ethtool_channels={0x3c, 0x7e4, 0x8, 0x43b, 0x2, 0x6, 0xfffffff0, 0x8, 0x2}}) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000001440)={{{@in6=@private0, @in=@private=0xa010100, 0x4e20, 0x0, 0x4e20, 0xf, 0x2, 0x50, 0x180, 0xc, 0x0, r10}, {0xa292, 0x7, 0x4, 0x2, 0x3, 0x3000000000000000, 0x8000, 0x3}, {0x5, 0x57b0000000, 0xf800000000000000, 0xc}, 0x8000000, 0x6e6bbb, 0x0, 0x0, 0x2, 0x2}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d5, 0xff}, 0x2, @in6=@remote, 0x3507, 0x1, 0x1, 0x6, 0x6, 0x3, 0x8}}, 0xe8) recvfrom$inet(r9, &(0x7f0000001540)=""/52, 0x34, 0x4042, 0x0, 0x0) 8.911582009s ago: executing program 1 (id=2384): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x5, 0x5, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200}, [@ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x94) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r4 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x800, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000100)={0x3f, 0x2, 0x0, "4a5ae5f6f99826beb34789a56a62b5b92b9010128130e6d352b97b35207cf97d", 0x43353039}) 8.809904618s ago: executing program 1 (id=2385): epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0000004}) poll(&(0x7f00000000c0)=[{r1, 0x1009}], 0x1, 0x8000007) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000300)={0x400000000001ffc, 0x1000000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fchmod(r6, 0x32) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, 0x0, 0x0) r8 = socket(0x1e, 0x4, 0x0) r9 = syz_open_dev$video(&(0x7f0000000140), 0x80000000, 0x40) ioctl$VIDIOC_S_SELECTION(r9, 0xc0405668, &(0x7f0000000000)={0x0, 0x0, 0x6}) connect$tipc(r8, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) lchown(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0xee01, 0x0) sendfile(r8, r7, 0x0, 0x8010002b) sendto$inet6(r7, &(0x7f0000000200)="5a8572f855c4c27765dd3285e944ec23ba84654cc773b5e8c089d115bc8fd3b835fc6e588daf480800889ab7d35120044f716a154daf492e", 0x38, 0xa0, &(0x7f0000000280)={0xa, 0x4e22, 0x7, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0xbe, 0x3}, 0x0) 8.648726543s ago: executing program 4 (id=2387): r0 = syz_usb_connect(0x6, 0x2d, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) getpid() getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r4, 0x517a3000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = socket$inet(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000080)='G%\t\x00\x00\x00\x00\x00\x00\x00', 0xa}], 0x2}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, 0x0) recvmmsg(r5, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f00000004c0)=""/224, 0xe0, 0x0, &(0x7f0000000a00)=""/4096, 0x1000}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.616460076s ago: executing program 5 (id=2388): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44050) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRES8=r1, @ANYRES32, @ANYBLOB="0000cf00000000020000000000000000000000003b79b20cc83a4b96", @ANYBLOB="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", @ANYRES32, @ANYRES16=r1], 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x0, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xff, 0x9}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000808000/0x1000)=nil, 0x1000, 0xb635773f04ebbee5, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x99) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000ff008000052de5c6e6984e4ec42f344f000000b42920000000010000005f20d4fb", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRESDEC=r4, @ANYRES32, @ANYBLOB="00ffffff4e489fb67ddc441810030000000c9b55cf000000000000003767f3d833ce3b18802d"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r5}, &(0x7f0000000780)=0x7d8, &(0x7f0000000180)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, &(0x7f0000000200)=""/197, &(0x7f0000000380), &(0x7f0000000300), 0x2, r6}, 0x38) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000300)={@local, 0x0, 0x1, 0x3, 0x8}, &(0x7f00000004c0)=0x20) 7.621868596s ago: executing program 5 (id=2389): r0 = syz_io_uring_setup(0x88f, &(0x7f00000010c0)={0x0, 0xc941, 0x80, 0x2, 0xbfdffff8}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/73, 0x49}, 0x0, 0x2, 0x1, {0x1}}) io_uring_enter(r0, 0x47f6, 0x0, 0x4, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0xbe9b70533f0d9e1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fsmount(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) fchdir(r4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r5}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r5, @ANYBLOB="0000000000000000890200000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x90) 7.505395542s ago: executing program 0 (id=2390): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) 6.831612159s ago: executing program 0 (id=2391): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e0000000400000004000000020000000000df", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) writev(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) write$binfmt_elf32(r3, &(0x7f0000001e80)=ANY=[], 0x38) fcntl$setpipe(r2, 0x407, 0x8001a0) splice(r2, 0x0, r4, 0x0, 0x200002, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) r6 = accept4(r5, 0x0, 0x0, 0x800) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="120110038121e940e604915539b5010203010902240001000000000904000002e515bb000905eade807a00000009058802"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 5.570019707s ago: executing program 4 (id=2392): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5ca683a4b6fc89398f2b9000f224891060017c4700de60beac671e8e8fdecb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4a801efdf008499d7aca1afac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="2600000000000000000000009363dc74bfc575bbc428e8ec5f71912bc1d17c317c529a243c925942ef6dda6fe9b38bc6c5bce288bc0ceb31a656d73e231e8a13c153b397e2d5e67b852db7fc104865639cc83c041666189f7434a2f4985062b60efc6f7e5484935d8b1ec8e2cceefff2a8b0d7c4cd80783b", @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r6, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r4}, 0x20) recvmmsg(r4, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000080)}, 0x81}], 0x1, 0x140, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r8, 0x40045542, &(0x7f0000000180)=0xf) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x2) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) 5.445063168s ago: executing program 5 (id=2393): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES32=r1], 0x46}}, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x14008004) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = openat$fb0(0xffffffffffffff9c, 0x0, 0xc42, 0x0) write$fb(r3, &(0x7f0000000140), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{r6}, 0x0, &(0x7f00000013c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000007000000010001000900b025cac959dfa3000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002000090002000000ffdbdf250300000008000800ed3605fcb508bd36f7d5d4a43aa2b16a15fed93c5ee767916df37fb82abf3f55", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) socket(0x200000000000011, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8) 5.194313646s ago: executing program 6 (id=2394): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) open(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x2000000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd53, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 3.997005184s ago: executing program 4 (id=2395): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newchain={0xc80, 0x64, 0x214, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0x7}, {0x5, 0xfffd}, {0x6, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x82, 0xa}}, @TCA_RATE={0x6, 0x5, {0x9, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0xfffffffe}, @TCA_RATE={0x6, 0x5, {0x73, 0x4}}, @filter_kind_options=@f_basic={{0xa}, {0xc30, 0x2, [@TCA_BASIC_EMATCHES={0xc2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x400}}, @TCA_EMATCH_TREE_LIST={0xc20, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xd, 0x8, 0xaf96}, {0x2, 0x3, 0x1}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x4, 0x1, 0x2}, {0xa5, 0x4, 0x2, 0x2, 0x9, 0x0, 0xb0398febb7ebb8eb}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x3, 0x3, 0x6}, {0x8, 0x2, 0x47a, 0x95df}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x6, 0x8, 0x200}, {0x4, 0x0, 0x7}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xa, 0x7, 0x2}, {{0x0, 0x1, 0x1}, {0x4, 0x0, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x400, 0x7, 0x4}, {{0x2, 0x0, 0x1}, {0x1, 0x1, 0x1}}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x8, 0x2, 0x7f}, {0x3, 0x0, 0x2}}}, @TCF_EM_IPT={0x28, 0x1, 0x0, 0x0, {{0x2}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}, @TCF_EM_CONTAINER={0xb68, 0x2, 0x0, 0x0, {{0x5, 0x0, 0x2b}, "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"}}]}]}]}}]}, 0xc80}, 0x1, 0x0, 0x0, 0x40}, 0x20008014) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @mcast2, 0xb7}, 0x1c) getsockopt$sock_buf(r1, 0x1, 0x19, 0x0, &(0x7f0000003080)=0x7a) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000001940)={{0x12, 0x1, 0x310, 0xc3, 0x84, 0x34, 0x10, 0x2040, 0xb764, 0x8e4c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2e, 0x8, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x94, 0x9f, 0xa6, 0x6}}]}}]}}, &(0x7f0000002880)={0x0, 0x0, 0x0, 0x0}) 3.555892453s ago: executing program 0 (id=2396): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x5, 0x5, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200}, [@ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x94) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r4 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x800, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000100)={0x3f, 0x2, 0x0, "4a5ae5f6f99826beb34789a56a62b5b92b9010128130e6d352b97b35207cf97d", 0x43353039}) 3.500763515s ago: executing program 5 (id=2397): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a000b2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2c"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="010002006401010000000000000000000000000086dd"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$usbmon(0x0, 0xba, 0x280802) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a00)={&(0x7f0000000780)={0x208, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x1000000000}, {0xc, 0x90, 0x8000000000000000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x7f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x413d}, {0xc, 0x90, 0xffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x3}, {0xc, 0x90, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x5b1f641daba20097}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x579}}]}, 0x208}}, 0x4000000) r2 = syz_open_procfs(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2) r3 = socket(0x23, 0x5, 0x0) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@index_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir_follow}, {@nfs_export_on}, {@metacopy_on}, {@lowerdir={'lowerdir', 0x3d, './file1'}}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@seclabel}]}) read$qrtrtun(r2, &(0x7f00000004c0)=""/57, 0x39) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$can_j1939(r3, &(0x7f0000000400)={&(0x7f0000000180)={0x1d, r4, 0x0, {0x2}}, 0x18, &(0x7f0000000340)={&(0x7f0000000500)="e803381c0d85252185eb7a56df9c64a495b750dad297c7440bbf87b294fa0dfd1869855e58bfc52ac088b6abbd4b44b80923c5891dee76caa19f47735e867bc3b0925cac18afe20c5ceb2f65136fb1aad368493acac333cd07071235494366318fcfded107d429b73de0da1ef2ec49378eb93002bc8235b04413643c93e7b45f1394a00d494e97bb2e0dc324683074095d042fcc887b3f22ff3579e3edf9f3825de9415c5186c8c694", 0xa9}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$can_j1939(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)="ecd14766f9a06854dcceccfe3828a21e680fb9256ee18a11c4bede078b26b7f2aea80dbba647d25a54224f24913a33c4400f5ea0632cc1681be955f12d62580d33b6469798f0f21a56200ef0e381248b31b9a7a69b4b4bbb19ec1fdba6416c94e8d4d7932bf68f4ef43de43cd60624f8c82be4ba492c75dc403f1ea34bbc9c2aac79344af693d40308fffbe9c2a3526d9e3bfaf6f2b1bda764faa5", 0x9b}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000840) 3.41468597s ago: executing program 0 (id=2398): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000000)={0x1}) sched_setscheduler(r1, 0x6, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xbbb71000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) dup(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x10) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r8, 0xffffffffffffffff}) close_range(r0, r6, 0x0) ioctl$SYNC_IOC_FILE_INFO(r9, 0x40103e05, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) 2.453462315s ago: executing program 1 (id=2399): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080088a8"], 0xdc) 2.42060513s ago: executing program 5 (id=2400): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44050) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRES8=r1, @ANYRES32, @ANYBLOB="0000cf00000000020000000000000000000000003b79b20cc83a4b96", @ANYBLOB="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", @ANYRES32, @ANYRES16=r1], 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x0, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xff, 0x9}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000808000/0x1000)=nil, 0x1000, 0xb635773f04ebbee5, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000ff008000052de5c6e6984e4ec42f344f000000b42920000000010000005f20d4fb", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRESDEC=r4, @ANYRES32, @ANYBLOB="00ffffff4e489fb67ddc441810030000000c9b55cf000000000000003767f3d833ce3b18802d"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r6}, &(0x7f0000000780)=0x7d8, &(0x7f0000000180)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, &(0x7f0000000200)=""/197, &(0x7f0000000380), &(0x7f0000000300), 0x2, r7}, 0x38) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000300)={@local, 0x0, 0x1, 0x3, 0x8}, &(0x7f00000004c0)=0x20) 1.908275222s ago: executing program 5 (id=2401): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYRES8=r0], 0x28}}, 0x200440c4) inotify_init1(0x81800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0x200c17a) sendto$packet(r0, &(0x7f00000001c0)="867a172436704758994082350b398416ae9be4333ff9428e271d2a829c327e1fa9a1b1a4adc6b06c69b3cea0a9242fd0f26eb9c94fc4a5226a4f6f1c25bafc773b3a356ebc97660e20cc44e8757cc7320f88d27f8fffc1f21d7f287bc822560893cecb6815e5e5f4de396860e2396f61eb20bb6085b56344cb2556374a6798db69ab526d0c6f57bc3c5fa1744026c7d25dcdbe75f596ce2f4bc4fe5b281776beccb7124044", 0xa5, 0x0, &(0x7f0000000100)={0x11, 0x8, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x22800, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) read$FUSE(r2, 0x0, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000300)={0x7, 0x3, 0x8001, 0x9, 0x6, 0xbd}) mbind(&(0x7f00007ae000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000140)=0x9, 0x8, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000440)={&(0x7f0000000400)=[{0x7, 0x6200, 0x0, 0x0}, {0xeabb, 0x4000, 0x0, 0x0}], 0x2}) 1.786792019s ago: executing program 0 (id=2402): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 1.769389912s ago: executing program 1 (id=2403): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 560.195937ms ago: executing program 4 (id=2404): mount(0x0, &(0x7f0000000640)='./file0/../file0\x00', 0x0, 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000d980708b5192100c7980000000109021b00012000ac00090400000107000009090585", @ANYRES64], 0x0) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sched_switch\x00', r1, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x40000) r5 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r5, 0x400455c8, 0x20000000009) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 287.99078ms ago: executing program 1 (id=2405): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) 90.027216ms ago: executing program 0 (id=2406): sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000000f80), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pivot_root(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00') r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r4) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="6d932bbd70000000000001"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x24040800) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r4) r6 = syz_io_uring_setup(0x2bd7, &(0x7f0000000200)={0x0, 0x9e3e, 0x80, 0x80000, 0x19b}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x20000, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0xd, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x7f}}}}]}, 0x48}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="9400000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0003010c0002800500010000000000080007400000000030000e802c00018014000300fe8000000000000000000000000000aa040004"], 0x94}}, 0x48000) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 0s ago: executing program 1 (id=2407): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000080)=0x5, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}, @NFTA_SET_EXPRESSIONS={0x20, 0x12, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x21}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xac}}, 0x20050800) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000340)={&(0x7f00000014c0)=[{0x4, 0xca00, 0x0, 0x0}, {0x2, 0x2800, 0x0, 0x0}], 0x2}) kernel console output (not intermixed with test programs): or pid=14523 comm="syz.4.1845" path="socket:[46536]" dev="sockfs" ino=46536 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 871.615392][T13256] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 871.848071][T13256] usb 1-1: Using ep0 maxpacket: 16 [ 871.889980][T13256] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 871.926354][T13256] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.959230][T13256] usb 1-1: config 0 descriptor?? [ 871.978386][T14544] netlink: 'syz.5.1847': attribute type 1 has an invalid length. [ 871.999108][T13256] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 872.012649][T14544] netlink: 'syz.5.1847': attribute type 1 has an invalid length. [ 872.206123][T13256] usb 1-1: Detected FT232B [ 872.547395][T13256] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 872.595142][ T5944] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 872.628593][T13256] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 872.915159][ T5944] usb 5-1: Using ep0 maxpacket: 8 [ 872.932144][ T5944] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 872.942172][ T5944] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 872.957310][ T5944] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 872.970197][ T5944] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 873.211898][T13256] usb 1-1: USB disconnect, device number 50 [ 873.247723][ T5944] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 873.257097][ T5944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.274007][ T30] audit: type=1400 audit(1759277149.468:811): avc: denied { accept } for pid=14525 comm="syz.0.1844" path="socket:[47198]" dev="sockfs" ino=47198 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 873.309728][T13256] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 873.434603][T13256] ftdi_sio 1-1:0.0: device disconnected [ 873.483317][ T5944] usb 5-1: GET_CAPABILITIES returned 0 [ 873.489614][ T5944] usbtmc 5-1:16.0: can't read capabilities [ 873.760346][T14594] IPVS: set_ctl: invalid protocol: 157 224.0.0.2:20004 [ 874.927691][T14607] ufs: You didn't specify the type of your ufs filesystem [ 874.927691][T14607] [ 874.927691][T14607] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 874.927691][T14607] [ 874.927691][T14607] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 874.958359][ C0] vkms_vblank_simulate: vblank timer overrun [ 874.964461][T14607] ufs: ufstype=old is supported read-only [ 875.966087][T14626] FAULT_INJECTION: forcing a failure. [ 875.966087][T14626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 875.983617][T14626] CPU: 0 UID: 0 PID: 14626 Comm: syz.0.1858 Not tainted syzkaller #0 PREEMPT(full) [ 875.983645][T14626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 875.983657][T14626] Call Trace: [ 875.983665][T14626] [ 875.983673][T14626] dump_stack_lvl+0x16c/0x1f0 [ 875.983707][T14626] should_fail_ex+0x512/0x640 [ 875.983739][T14626] _copy_to_user+0x32/0xd0 [ 875.983759][T14626] rng_dev_read+0x1ea/0x810 [ 875.983782][T14626] ? __pfx_virtio_read+0x10/0x10 [ 875.983802][T14626] ? __pfx_rng_dev_read+0x10/0x10 [ 875.983819][T14626] ? __import_iovec+0x1dd/0x650 [ 875.983842][T14626] ? bpf_lsm_file_permission+0x9/0x10 [ 875.983866][T14626] ? security_file_permission+0x71/0x210 [ 875.983887][T14626] ? rw_verify_area+0xcf/0x6c0 [ 875.983918][T14626] ? __pfx_rng_dev_read+0x10/0x10 [ 875.983936][T14626] vfs_readv+0x5c1/0x8b0 [ 875.983961][T14626] ? __pfx_vfs_readv+0x10/0x10 [ 875.983981][T14626] ? find_held_lock+0x2b/0x80 [ 875.984022][T14626] ? __fget_files+0x20e/0x3c0 [ 875.984051][T14626] ? do_preadv+0x1a6/0x270 [ 875.984068][T14626] do_preadv+0x1a6/0x270 [ 875.984088][T14626] ? __pfx_do_preadv+0x10/0x10 [ 875.984114][T14626] do_syscall_64+0xcd/0x4e0 [ 875.984146][T14626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.984166][T14626] RIP: 0033:0x7f7045f8eec9 [ 875.984182][T14626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 875.984201][T14626] RSP: 002b:00007f7046edb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 875.984221][T14626] RAX: ffffffffffffffda RBX: 00007f70461e6090 RCX: 00007f7045f8eec9 [ 875.984235][T14626] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 875.984248][T14626] RBP: 00007f7046edb090 R08: 0000000000000000 R09: 0000000000000000 [ 875.984261][T14626] R10: 00000000ffff0000 R11: 0000000000000246 R12: 0000000000000001 [ 875.984273][T14626] R13: 00007f70461e6128 R14: 00007f70461e6090 R15: 00007ffde266b9b8 [ 875.984302][T14626] [ 876.478187][T14628] fuse: Bad value for 'user_id' [ 876.569574][T14630] netlink: 536 bytes leftover after parsing attributes in process `syz.1.1859'. [ 876.582909][T14630] tmpfs: Bad value for 'mpol' [ 876.627935][T14628] fuse: Bad value for 'user_id' [ 878.285248][T13256] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 879.104448][ T5944] usb 5-1: USB disconnect, device number 55 [ 879.296456][T13256] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 879.321118][T13256] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 879.354179][T14677] IPVS: set_ctl: invalid protocol: 157 224.0.0.2:20004 [ 879.370850][T13256] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 879.402693][T13256] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.481585][T13256] usb 7-1: config 0 descriptor?? [ 879.665010][ T5944] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 880.916967][T13256] usb 7-1: string descriptor 0 read error: -22 [ 880.935035][ T5944] usb 5-1: config 32 has an invalid descriptor of length 255, skipping remainder of the config [ 881.114896][ T5944] usb 5-1: too many endpoints for config 32 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 881.134363][T13256] uclogic 0003:256C:006D.0013: failed retrieving string descriptor #200: -71 [ 881.156432][T13256] uclogic 0003:256C:006D.0013: failed retrieving pen parameters: -71 [ 881.173762][T13256] uclogic 0003:256C:006D.0013: failed probing pen v2 parameters: -71 [ 881.264423][T14700] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1869'. [ 881.340293][T13256] uclogic 0003:256C:006D.0013: failed probing parameters: -71 [ 881.534092][T13256] uclogic 0003:256C:006D.0013: probe with driver uclogic failed with error -71 [ 881.661951][ T5944] usb 5-1: config 32 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 881.705268][ T5944] usb 5-1: config 32 interface 0 has no altsetting 0 [ 881.712089][ T5944] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 881.734859][ T5944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.746338][T13256] usb 7-1: USB disconnect, device number 22 [ 881.767964][T14707] futex_wake_op: syz.6.1871 tries to shift op by -1; fix this program [ 882.127121][T14720] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 882.138823][T14720] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 882.157029][T14720] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 882.178154][T14720] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 882.194443][T14720] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 882.205823][T14720] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 882.220551][T14720] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 882.231922][T14720] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 882.241653][T14720] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 882.535181][ T5944] usb 5-1: string descriptor 0 read error: -71 [ 882.673186][ T5944] usb 5-1: USB disconnect, device number 56 [ 884.614555][ T30] audit: type=1400 audit(1759277160.208:812): avc: denied { mount } for pid=14745 comm="syz.5.1876" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 885.225133][T14768] IPVS: set_ctl: invalid protocol: 157 224.0.0.2:20004 [ 885.487286][ T30] audit: type=1400 audit(1759277161.448:813): avc: denied { unmount } for pid=11827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 885.761578][T13255] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 886.008618][T13255] usb 7-1: Using ep0 maxpacket: 32 [ 886.055808][T13255] usb 7-1: config index 0 descriptor too short (expected 1060, got 36) [ 886.073123][T13255] usb 7-1: config 0 has an invalid interface number: 54 but max is 0 [ 886.082576][T13255] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 886.097560][T13255] usb 7-1: config 0 has no interface number 0 [ 886.104045][T13255] usb 7-1: config 0 interface 54 has no altsetting 0 [ 886.121634][T13255] usb 7-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=46.42 [ 886.132982][T13255] usb 7-1: New USB device strings: Mfr=1, Product=66, SerialNumber=3 [ 886.180068][T13255] usb 7-1: Product: syz [ 886.243865][T13255] usb 7-1: Manufacturer: syz [ 886.270618][T13255] usb 7-1: SerialNumber: syz [ 886.301333][T13255] usb 7-1: config 0 descriptor?? [ 886.535481][T13255] ums_eneub6250 7-1:0.54: USB Mass Storage device detected [ 886.657204][T13259] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 886.701073][T13255] usb 7-1: USB disconnect, device number 23 [ 886.926517][T13259] usb 1-1: config 32 has an invalid descriptor of length 255, skipping remainder of the config [ 886.945896][T13259] usb 1-1: too many endpoints for config 32 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 886.958833][T13259] usb 1-1: config 32 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 886.972774][T13259] usb 1-1: config 32 interface 0 has no altsetting 0 [ 886.981514][T13259] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 887.471773][T13259] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.574176][ T51] Bluetooth: hci6: command 0x0c1a tx timeout [ 888.859725][T14828] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1889'. [ 889.388367][T13259] usb 1-1: string descriptor 0 read error: -71 [ 889.500716][T13259] usb 1-1: USB disconnect, device number 51 [ 891.007461][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 891.310160][T14867] Invalid/unusable pipe [ 891.527617][T14880] 9pnet: Unknown protocol version 9p20\++} [ 891.734106][T14883] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 896.775250][T14956] fuse: Bad value for 'fd' [ 897.295677][ T30] audit: type=1400 audit(1759277173.618:814): avc: denied { lock } for pid=14934 comm="syz.5.1905" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 897.319230][ C0] vkms_vblank_simulate: vblank timer overrun [ 897.347769][T14958] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 899.352718][T15002] ./file0: Can't lookup blockdev [ 900.112817][T15008] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 900.130553][ C0] vkms_vblank_simulate: vblank timer overrun [ 901.144580][T15022] futex_wake_op: syz.1.1917 tries to shift op by -1; fix this program [ 901.791021][T15030] lo: entered promiscuous mode [ 901.795930][T15030] lo: entered allmulticast mode [ 901.814713][T15030] tunl0: entered promiscuous mode [ 901.819894][T15030] tunl0: entered allmulticast mode [ 901.827634][T15030] gre0: entered promiscuous mode [ 901.833752][T15030] gre0: entered allmulticast mode [ 901.841593][T15030] 0{X: entered promiscuous mode [ 901.849076][T15030] erspan0: entered promiscuous mode [ 901.854322][T15030] erspan0: entered allmulticast mode [ 901.862031][T15030] ip_vti0: entered promiscuous mode [ 901.867361][T15030] ip_vti0: entered allmulticast mode [ 901.875277][T15030] ip6_vti0: entered promiscuous mode [ 901.880613][T15030] ip6_vti0: entered allmulticast mode [ 901.917457][T15030] sit0: entered promiscuous mode [ 901.922475][T15030] sit0: entered allmulticast mode [ 901.929979][T15030] ip6tnl0: entered promiscuous mode [ 901.936318][T15030] ip6tnl0: entered allmulticast mode [ 901.944625][T15030] ip6gre0: entered promiscuous mode [ 901.949914][T15030] ip6gre0: entered allmulticast mode [ 901.955946][T15030] syz_tun: entered promiscuous mode [ 901.961161][T15030] syz_tun: entered allmulticast mode [ 901.967400][T15030] ip6gretap0: entered promiscuous mode [ 901.972901][T15030] ip6gretap0: entered allmulticast mode [ 901.979188][T15030] bridge0: entered allmulticast mode [ 901.985094][T15030] vcan0: entered promiscuous mode [ 901.990124][T15030] vcan0: entered allmulticast mode [ 901.995587][T15030] bond0: entered promiscuous mode [ 902.000629][T15030] bond_slave_0: entered promiscuous mode [ 902.006460][T15030] bond_slave_1: entered promiscuous mode [ 902.012252][T15030] bond0: entered allmulticast mode [ 902.017413][T15030] bond_slave_0: entered allmulticast mode [ 902.023131][T15030] bond_slave_1: entered allmulticast mode [ 902.029890][T15030] team0: entered promiscuous mode [ 902.034958][T15030] team_slave_0: entered promiscuous mode [ 902.041378][T15030] team_slave_1: entered promiscuous mode [ 902.047162][T15030] team0: entered allmulticast mode [ 902.052269][T15030] team_slave_0: entered allmulticast mode [ 902.058049][T15030] team_slave_1: entered allmulticast mode [ 902.064351][T15030] dummy0: entered promiscuous mode [ 902.069866][T15030] dummy0: entered allmulticast mode [ 902.075581][T15030] nlmon0: entered promiscuous mode [ 902.080687][T15030] nlmon0: entered allmulticast mode [ 902.102406][ T30] audit: type=1400 audit(1759277178.068:815): avc: denied { bind } for pid=15024 comm="syz.4.1918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 902.126480][ T30] audit: type=1400 audit(1759277178.078:816): avc: denied { write } for pid=15024 comm="syz.4.1918" path="socket:[46946]" dev="sockfs" ino=46946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 902.150940][T15030] caif0: entered promiscuous mode [ 902.156016][T15030] caif0: entered allmulticast mode [ 902.161109][T15030] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 903.285005][T13259] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 903.457353][T15049] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 903.892403][T13259] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 903.901572][T13259] usb 5-1: config 1 has no interface number 0 [ 903.913554][T13259] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 903.929190][T13259] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 904.055682][T15053] qrtr: Invalid version 0 [ 904.135237][ T51] Bluetooth: hci6: command 0x0c1a tx timeout [ 904.141350][T13259] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 904.496777][T13259] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 904.505932][T13259] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.533914][T13259] usb 5-1: Product: syz [ 904.553341][T13259] usb 5-1: Manufacturer: syz [ 904.562046][T13259] usb 5-1: SerialNumber: syz [ 904.595259][T15040] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 904.623699][ T30] audit: type=1400 audit(1759277180.938:817): avc: denied { setopt } for pid=15056 comm="syz.1.1925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 905.036749][T15069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1927'. [ 905.287470][T15039] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 905.545866][T13259] sierra_net 5-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 905.707012][T13259] sierra_net 5-1:1.7 wwan0: Submit SYNC failed -71 [ 905.735777][T13259] sierra_net 5-1:1.7 wwan0: Send SYNC failed, status -71 [ 905.743544][T13259] sierra_net 5-1:1.7 wwan0: Submit SYNC failed -71 [ 905.751084][T13259] sierra_net 5-1:1.7 wwan0: Send SYNC failed, status -71 [ 905.766764][T13259] usb 5-1: USB disconnect, device number 57 [ 905.776651][T13259] sierra_net 5-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem [ 905.831058][T13259] sierra_net 5-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 905.866073][ T5828] udevd[5828]: setting owner of /dev/bus/usb/005/057 to uid=0, gid=0 failed: No such file or directory [ 905.947757][ T30] audit: type=1400 audit(1759277182.258:818): avc: denied { map } for pid=15107 comm="syz.6.1933" path="/dev/dri/card0" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 905.987326][ T30] audit: type=1400 audit(1759277182.258:819): avc: denied { execute } for pid=15107 comm="syz.6.1933" path="/dev/dri/card0" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 906.621206][T15131] futex_wake_op: syz.0.1934 tries to shift op by -1; fix this program [ 906.944267][T15134] netlink: 'syz.5.1935': attribute type 6 has an invalid length. [ 907.321202][T15143] netlink: 'syz.5.1935': attribute type 6 has an invalid length. [ 907.407323][T15147] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1936'. [ 907.744219][T15203] qrtr: Invalid version 0 [ 908.417143][T15241] nfs: Unknown parameter 'mbz#h5[W"' [ 909.381927][T15268] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1940'. [ 910.621669][T15281] futex_wake_op: syz.6.1942 tries to shift op by -1; fix this program [ 913.598206][T15317] qrtr: Invalid version 0 [ 914.233129][T15321] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 914.247021][T15321] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 914.280877][T15321] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 914.293809][T15321] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 914.316590][T15321] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 914.329174][T15321] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 914.348066][T15321] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 914.359902][T15321] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 914.369582][T15321] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 915.093823][T15326] lo speed is unknown, defaulting to 1000 [ 915.124690][T15326] hsr0 speed is unknown, defaulting to 1000 [ 915.199152][T15333] usb usb8: usbfs: process 15333 (syz.6.1952) did not claim interface 0 before use [ 915.498501][T15358] netlink: 'syz.1.1956': attribute type 8 has an invalid length. [ 916.787368][ T30] audit: type=1326 audit(1759277193.108:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15325 comm="syz.4.1953" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feea378eec9 code=0x0 [ 917.547209][T15388] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1962'. [ 917.907840][T13259] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 917.922067][T15400] lo speed is unknown, defaulting to 1000 [ 917.929760][T15400] hsr0 speed is unknown, defaulting to 1000 [ 918.097110][T13259] usb 6-1: Using ep0 maxpacket: 16 [ 918.107582][T13259] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 918.129340][T13259] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 918.138271][T13259] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 918.157087][T13259] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 918.185294][T13259] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 918.201584][T13259] usb 6-1: config 0 has no interface number 0 [ 918.207932][T13259] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 918.222477][T13259] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 918.230572][T15436] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1969'. [ 918.232628][T13259] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 918.251774][T13259] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 918.269589][T13259] usb 6-1: config 0 interface 125 has no altsetting 0 [ 918.279106][T13259] usb 6-1: config 0 interface 125 has no altsetting 2 [ 918.288676][T13259] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 918.305068][T13259] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.333590][T13259] usb 6-1: Product: syz [ 918.337979][T13259] usb 6-1: Manufacturer: syz [ 918.342584][T13259] usb 6-1: SerialNumber: syz [ 918.402597][T13259] usb 6-1: config 0 descriptor?? [ 918.408096][ T30] audit: type=1400 audit(1759277194.678:821): avc: denied { append } for pid=15439 comm="syz.4.1970" name="nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 918.434713][T13259] usb 6-1: selecting invalid altsetting 2 [ 918.478438][ T30] audit: type=1326 audit(1759277194.788:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15399 comm="syz.0.1963" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7045f8eec9 code=0x0 [ 918.655931][T15447] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 918.663143][T15447] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 918.671300][T15447] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 918.679727][T15447] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 918.687580][T15447] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 918.694807][T15447] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 918.704265][T15447] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 918.711653][T15447] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 918.719047][T15447] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 918.726930][T15447] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 918.735490][T15447] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 918.742988][T15447] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 918.750951][T15447] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 918.759879][T15447] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 918.769291][T15447] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 918.778135][T15447] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 918.787029][T15447] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 918.794959][T15447] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 918.802145][T15447] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 918.809568][T15447] comedi comedi3: 8255: I/O port conflict (0x8000000,4) [ 918.817481][T15447] comedi comedi3: 8255: I/O port conflict (0xffffffffdffffffa,4) [ 919.260225][ C0] usb 6-1: async_complete: urb error -71 [ 919.266031][ C0] usb 6-1: async_complete: urb error -71 [ 919.290113][T13259] get_1284_register: usb error -71 [ 919.295426][T13259] uss720 6-1:0.125: probe with driver uss720 failed with error -71 [ 919.310261][T13259] usb 6-1: USB disconnect, device number 10 [ 919.435981][T15468] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1972'. [ 920.701198][T15483] netlink: 'syz.6.1975': attribute type 24 has an invalid length. [ 920.709139][T15483] netlink: 'syz.6.1975': attribute type 1 has an invalid length. [ 920.717000][T15483] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1975'. [ 921.042436][ T30] audit: type=1400 audit(1759277197.068:823): avc: denied { write } for pid=15478 comm="syz.6.1975" path="socket:[49531]" dev="sockfs" ino=49531 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 921.181253][T13733] Bluetooth: hci1: Frame reassembly failed (-84) [ 921.857921][ T30] audit: type=1400 audit(1759277198.178:824): avc: denied { accept } for pid=15501 comm="syz.6.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 922.207534][T15511] ufs: You didn't specify the type of your ufs filesystem [ 922.207534][T15511] [ 922.207534][T15511] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 922.207534][T15511] [ 922.207534][T15511] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 922.239412][T15511] ufs: ufstype=old is supported read-only [ 922.403896][ T5944] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 922.658893][ T5944] usb 6-1: Using ep0 maxpacket: 8 [ 922.667857][ T5944] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 922.695006][ T5944] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 922.705896][ T5944] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 922.729205][ T5944] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 922.742259][ T5944] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 922.754975][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.410206][T13182] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 923.421161][ T51] Bluetooth: hci1: command 0xfc11 tx timeout [ 923.425325][T15526] nvme_fabrics: unknown parameter or missing value 'P' in ctrl creation request [ 923.845129][ T5944] usb 6-1: GET_CAPABILITIES returned 0 [ 923.851741][ T5944] usbtmc 6-1:16.0: can't read capabilities [ 924.010610][T15541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1988'. [ 924.028880][T15543] IPVS: set_ctl: invalid protocol: 157 224.0.0.2:20004 [ 926.838271][T15581] ufs: You didn't specify the type of your ufs filesystem [ 926.838271][T15581] [ 926.838271][T15581] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 926.838271][T15581] [ 926.838271][T15581] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 926.888412][T15581] ufs: ufstype=old is supported read-only [ 927.238157][ T10] usb 6-1: USB disconnect, device number 11 [ 928.756033][T15610] dlm: plock device version mismatch: kernel (1.2.0), user (5001287.0.0) [ 928.880477][T15612] nfs: Unknown parameter 'mbz#h5[W"' [ 928.998941][T15615] IPVS: set_ctl: invalid protocol: 157 224.0.0.2:20004 [ 929.108668][ T5944] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 929.184791][T15624] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 929.373688][ T5944] usb 7-1: config 32 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 929.402635][ T5944] usb 7-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 929.431800][ T5944] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.571645][T15631] futex_wake_op: syz.4.2007 tries to shift op by -1; fix this program [ 930.583733][ T30] audit: type=1400 audit(1759277206.904:825): avc: denied { load_policy } for pid=15655 comm="syz.0.2011" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 930.607636][T15656] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 930.628590][T15656] SELinux: failed to load policy [ 930.644267][ T5944] usb 7-1: string descriptor 0 read error: -71 [ 930.675212][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 930.822066][ T5944] usb 7-1: USB disconnect, device number 24 [ 930.945101][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 930.952938][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 930.964575][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 930.974862][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 930.984881][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 930.998426][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 931.007610][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.119796][T15678] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2012'. [ 931.488999][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.495830][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.514806][ T10] usb 6-1: GET_CAPABILITIES returned 0 [ 931.530673][ T10] usbtmc 6-1:16.0: can't read capabilities [ 932.001247][T15691] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 932.435314][T15692] nvme_fabrics: unknown parameter or missing value 'P' in ctrl creation request [ 933.209537][T15705] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 933.941661][ T30] audit: type=1400 audit(1759277210.208:826): avc: denied { setattr } for pid=15708 comm="syz.1.2018" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 934.215060][ T977] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 934.300246][T15717] IPVS: set_ctl: invalid protocol: 157 224.0.0.2:20004 [ 934.517108][ T977] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 934.529579][ T977] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 934.557701][ T977] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 934.648645][T15723] futex_wake_op: syz.1.2020 tries to shift op by -1; fix this program [ 934.934055][ T977] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 934.943419][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.951549][ T977] usb 5-1: Product: syz [ 934.960828][ T977] usb 5-1: Manufacturer: syz [ 934.965543][ T977] usb 5-1: SerialNumber: syz [ 934.987696][ T977] cdc_mbim 5-1:1.0: skipping garbage [ 934.997362][ T977] cdc_mbim 5-1:1.0: CDC Union missing and no IAD found [ 935.004943][ T977] cdc_mbim 5-1:1.0: bind() failure [ 935.049090][ T10] usb 6-1: USB disconnect, device number 12 [ 935.457704][T15745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 935.470507][T15745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 935.583532][T15743] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 936.146352][T13255] usb 5-1: USB disconnect, device number 58 [ 936.426772][T15768] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 936.433855][T15768] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 936.441729][T15768] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 936.450622][T15768] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 936.458447][T15768] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 936.465341][T15768] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 936.474510][T15768] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 936.481855][T15768] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 936.489080][T15768] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 936.496646][T15768] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 936.503805][T15768] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 936.511033][T15768] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 936.518591][T15768] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 936.527136][T15768] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 936.536657][T15768] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 936.545038][T15768] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 936.554098][T15768] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 936.561977][T15768] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 936.569617][T15768] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 936.576903][T15768] comedi comedi3: 8255: I/O port conflict (0x8000000,4) [ 936.584654][T15768] comedi comedi3: 8255: I/O port conflict (0xffffffffdffffffa,4) [ 937.073563][T15779] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 937.101145][T15779] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 937.150644][T15779] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 937.167373][T15779] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 937.207639][T15779] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 937.224484][T15779] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 937.257701][T15779] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 937.274986][T15779] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 937.284735][T15779] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 937.978666][T15793] ubi: mtd0 is already attached to ubi31 [ 938.424454][T15795] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 939.961121][T15824] netlink: 'syz.5.2033': attribute type 8 has an invalid length. [ 940.065186][T13256] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 940.695037][T13256] usb 7-1: Using ep0 maxpacket: 8 [ 940.701942][T13256] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 940.712077][T13256] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 940.721874][T13256] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 941.021393][T13256] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 941.036915][T13256] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 941.048693][T13256] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.307846][T15809] overlay: ./file0 is not a directory [ 941.335055][ T30] audit: type=1400 audit(1759277217.618:827): avc: denied { mounton } for pid=15805 comm="syz.1.2031" path="/379/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 941.376969][ T30] audit: type=1400 audit(1759277217.618:828): avc: denied { mount } for pid=15805 comm="syz.1.2031" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 941.604021][T15842] lo: entered promiscuous mode [ 941.608872][T15842] lo: entered allmulticast mode [ 941.616225][T15842] tunl0: entered promiscuous mode [ 941.621281][T15842] tunl0: entered allmulticast mode [ 941.627194][T15842] gre0: entered promiscuous mode [ 941.632140][T15842] gre0: entered allmulticast mode [ 941.638151][T15842] gretap0: entered promiscuous mode [ 941.643383][T15842] gretap0: entered allmulticast mode [ 941.649376][T15842] erspan0: entered promiscuous mode [ 941.654624][T15842] erspan0: entered allmulticast mode [ 941.660645][T15842] ip_vti0: entered promiscuous mode [ 941.666733][T15842] ip_vti0: entered allmulticast mode [ 941.672751][T15842] ip6_vti0: entered promiscuous mode [ 941.678163][T15842] ip6_vti0: entered allmulticast mode [ 941.684424][T15842] sit0: entered promiscuous mode [ 941.689451][T15842] sit0: entered allmulticast mode [ 941.701131][T15842] ip6tnl0: entered promiscuous mode [ 941.706526][T15842] ip6tnl0: entered allmulticast mode [ 941.712674][T15842] ip6gre0: entered promiscuous mode [ 941.717932][T15842] ip6gre0: entered allmulticast mode [ 941.724597][T15842] syz_tun: entered promiscuous mode [ 941.731299][T15842] syz_tun: entered allmulticast mode [ 941.737313][T15842] ip6gretap0: entered promiscuous mode [ 941.742778][T15842] ip6gretap0: entered allmulticast mode [ 941.749053][T15842] bridge0: entered promiscuous mode [ 941.754279][T15842] bridge0: entered allmulticast mode [ 941.760237][T15842] vcan0: entered promiscuous mode [ 941.765346][T15842] vcan0: entered allmulticast mode [ 941.771632][T15842] bond0: entered promiscuous mode [ 941.777123][T15842] bond_slave_0: entered promiscuous mode [ 941.782929][T15842] bond_slave_1: entered promiscuous mode [ 941.788822][T15842] bond0: entered allmulticast mode [ 941.794019][T15842] bond_slave_0: entered allmulticast mode [ 941.800399][T15842] bond_slave_1: entered allmulticast mode [ 941.807134][T15842] team0: entered promiscuous mode [ 941.812449][T15842] team0: entered allmulticast mode [ 941.817616][T15842] team_slave_0: entered allmulticast mode [ 941.823391][T15842] team_slave_1: entered allmulticast mode [ 941.830184][T15842] dummy0: entered promiscuous mode [ 941.835419][T15842] dummy0: entered allmulticast mode [ 941.841387][T15842] nlmon0: entered promiscuous mode [ 941.846596][T15842] nlmon0: entered allmulticast mode [ 941.860492][T15842] caif0: entered promiscuous mode [ 941.865572][T15842] caif0: entered allmulticast mode [ 941.871277][T15842] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 941.987941][T13256] usb 7-1: GET_CAPABILITIES returned 0 [ 941.997877][T13256] usbtmc 7-1:16.0: can't read capabilities [ 942.277722][T15852] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 942.285934][T15852] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 942.293477][T15852] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 942.301459][T15852] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 942.309141][T15852] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 942.316198][T15852] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 942.325006][T15852] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 942.332246][T15852] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 942.339712][T15852] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 942.347601][T15852] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 942.354746][T15852] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 942.361862][T15852] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 942.369770][T15852] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 942.378450][T15852] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 942.388368][T15852] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 942.397031][T15852] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 942.405699][T15852] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 942.413572][T15852] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 942.420954][T15852] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 942.428272][T15852] comedi comedi3: 8255: I/O port conflict (0x8000000,4) [ 942.436066][T15852] comedi comedi3: 8255: I/O port conflict (0xffffffffdffffffa,4) [ 943.541423][ T977] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 943.675124][T13256] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 943.691163][ T6017] usb 7-1: USB disconnect, device number 25 [ 943.728586][ T977] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 943.830671][ T977] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 943.873560][T13256] usb 6-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 943.889265][T13256] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 943.901798][T13256] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 943.923551][ T977] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 943.924620][T13256] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.979878][T15862] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 943.998646][ T977] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 944.115065][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.144244][ T977] usb 5-1: Product: syz [ 944.597694][ T977] usb 5-1: Manufacturer: syz [ 944.602330][ T977] usb 5-1: SerialNumber: syz [ 944.629883][ T977] cdc_mbim 5-1:1.0: skipping garbage [ 944.664085][ T977] cdc_mbim 5-1:1.0: CDC Union missing and no IAD found [ 944.704199][ T977] cdc_mbim 5-1:1.0: bind() failure [ 945.077162][T15896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.094190][T15896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 945.368469][T15894] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 945.415007][T13259] usb 5-1: USB disconnect, device number 59 [ 946.459694][T13256] usb 6-1: string descriptor 0 read error: -71 [ 946.615586][T13256] usb 6-1: USB disconnect, device number 13 [ 946.723754][T15953] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 946.730968][T15953] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 946.738554][T15953] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 946.746459][T15953] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 946.754058][T15953] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 946.761209][T15953] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 946.769699][T15953] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 946.776835][T15953] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 946.783995][T15953] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 946.791810][T15953] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 946.799069][T15953] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 946.806338][T15953] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 946.814100][T15953] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 946.822593][T15953] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 946.831926][T15953] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 946.840529][T15953] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 946.849345][T15953] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 946.855970][T15953] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 946.863202][T15953] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 946.870404][T15953] comedi comedi3: 8255: I/O port conflict (0x8000000,4) [ 946.878062][T15953] comedi comedi3: 8255: I/O port conflict (0xffffffffdffffffa,4) [ 946.973322][ T30] audit: type=1326 audit(1759277223.288:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15927 comm="syz.0.2048" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7045f8eec9 code=0x0 [ 947.338881][ T30] audit: type=1400 audit(1759277223.648:830): avc: denied { write } for pid=15968 comm="syz.5.2051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 947.340933][T15977] overlayfs: failed to resolve './file1': -2 [ 947.406767][T15979] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2051'. [ 950.254976][T13255] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 950.579942][T13255] usb 7-1: config 8 has an invalid interface number: 177 but max is 0 [ 951.208604][T13255] usb 7-1: config 8 has no interface number 0 [ 951.222260][T13255] usb 7-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xFB, changing to 0x8B [ 951.254608][T13255] usb 7-1: config 8 interface 177 altsetting 9 endpoint 0x8B has invalid maxpacket 1023, setting to 64 [ 951.297323][T13255] usb 7-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 951.386877][T13255] usb 7-1: config 8 interface 177 has no altsetting 0 [ 951.393834][T13255] usb 7-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 951.414445][T13255] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.441627][T13255] usb 7-1: can't set config #8, error -71 [ 951.475092][ T977] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 951.505377][T13255] usb 7-1: USB disconnect, device number 26 [ 951.675285][ T977] usb 1-1: unable to get BOS descriptor or descriptor too short [ 951.706434][T16030] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2062'. [ 952.180067][ T977] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEA, changing to 0x8A [ 952.192177][ T977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 31360, setting to 1024 [ 952.225263][ T977] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 1024 [ 952.347858][ T977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 952.435785][ T977] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 952.448169][ T977] usb 1-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39 [ 952.463989][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.475022][ T977] usb 1-1: Product: syz [ 952.480284][ T977] usb 1-1: Manufacturer: syz [ 952.485178][ T977] usb 1-1: SerialNumber: syz [ 952.594356][ T977] usb 1-1: config 0 descriptor?? [ 952.621014][T16016] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 952.829671][T16046] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 952.836943][T16046] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 952.844714][T16046] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 952.852983][T16046] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 952.861079][T16046] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 952.868268][T16046] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 952.877586][T16046] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 952.884988][T16046] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 952.892390][T16046] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 952.900307][T16046] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 952.907767][T16046] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 952.915314][T16046] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 952.923632][T16046] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 952.932378][T16046] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 952.941740][T16046] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 952.950428][T16046] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 952.959055][T16046] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 952.967316][T16046] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 952.974944][T16046] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 952.982374][T16046] comedi comedi3: 8255: I/O port conflict (0x8000000,4) [ 952.990322][T16046] comedi comedi3: 8255: I/O port conflict (0xffffffffdffffffa,4) [ 953.047684][ T977] pn533_usb 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 953.258830][ T977] usb 1-1: USB disconnect, device number 52 [ 953.676336][T16060] FAULT_INJECTION: forcing a failure. [ 953.676336][T16060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 953.689906][T16060] CPU: 0 UID: 0 PID: 16060 Comm: syz.6.2068 Not tainted syzkaller #0 PREEMPT(full) [ 953.689936][T16060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 953.689949][T16060] Call Trace: [ 953.689958][T16060] [ 953.689967][T16060] dump_stack_lvl+0x16c/0x1f0 [ 953.690011][T16060] should_fail_ex+0x512/0x640 [ 953.690045][T16060] _copy_from_user+0x2e/0xd0 [ 953.690077][T16060] io_register_clone_buffers+0xca/0x1010 [ 953.690117][T16060] ? irqentry_exit+0x3b/0x90 [ 953.690146][T16060] ? __pfx_io_register_clone_buffers+0x10/0x10 [ 953.690185][T16060] ? __io_uring_register+0x171b/0x2440 [ 953.690217][T16060] __io_uring_register+0x1735/0x2440 [ 953.690243][T16060] ? trace_contention_end+0xdd/0x130 [ 953.690265][T16060] ? __pfx___io_uring_register+0x10/0x10 [ 953.690300][T16060] ? __pfx___mutex_lock+0x10/0x10 [ 953.690337][T16060] ? __fget_files+0x20e/0x3c0 [ 953.690370][T16060] __x64_sys_io_uring_register+0x169/0x280 [ 953.690402][T16060] do_syscall_64+0xcd/0x4e0 [ 953.690433][T16060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.690454][T16060] RIP: 0033:0x7fc4b9d8eec9 [ 953.690471][T16060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 953.690490][T16060] RSP: 002b:00007fc4b7fb4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 953.690510][T16060] RAX: ffffffffffffffda RBX: 00007fc4b9fe6180 RCX: 00007fc4b9d8eec9 [ 953.690524][T16060] RDX: 0000200000000000 RSI: 000000000000001e RDI: 0000000000000007 [ 953.690537][T16060] RBP: 00007fc4b7fb4090 R08: 0000000000000000 R09: 0000000000000000 [ 953.690549][T16060] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 953.690562][T16060] R13: 00007fc4b9fe6218 R14: 00007fc4b9fe6180 R15: 00007ffd2a42c158 [ 953.690592][T16060] [ 953.873099][ C0] vkms_vblank_simulate: vblank timer overrun [ 954.807940][T16070] qrtr: Invalid version 0 [ 955.142583][T16081] qrtr: Invalid version 0 [ 955.564141][T16085] qrtr: Invalid version 0 [ 956.724495][T13257] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 957.327719][T13257] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 957.351213][T13257] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 957.382794][T13257] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 957.404317][T13257] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.419003][T16095] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 957.433995][T13257] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 959.555009][T13256] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 959.982084][ T6017] usb 7-1: USB disconnect, device number 27 [ 960.172334][T16144] ufs: You didn't specify the type of your ufs filesystem [ 960.172334][T16144] [ 960.172334][T16144] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 960.172334][T16144] [ 960.172334][T16144] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 960.203574][T16144] ufs: ufstype=old is supported read-only [ 960.553630][T16145] nvme_fabrics: unknown parameter or missing value 'P' in ctrl creation request [ 960.946435][T13256] usb 6-1: unable to get BOS descriptor or descriptor too short [ 960.977108][T13256] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEA, changing to 0x8A [ 961.015023][T13256] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 31360, setting to 1024 [ 961.393524][T16153] qrtr: Invalid version 0 [ 961.406664][T13256] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 1024 [ 961.473677][T13256] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 961.504028][T13256] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 961.526371][T13256] usb 6-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39 [ 961.550889][T13256] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.569370][T13256] usb 6-1: Product: syz [ 961.574806][T13256] usb 6-1: Manufacturer: syz [ 962.973730][T13256] usb 6-1: SerialNumber: syz [ 963.298549][T13256] usb 6-1: config 0 descriptor?? [ 963.309985][T16176] futex_wake_op: syz.4.2088 tries to shift op by -1; fix this program [ 963.337665][T13256] usb 6-1: can't set config #0, error -71 [ 963.477537][T13256] usb 6-1: USB disconnect, device number 14 [ 963.547296][T16182] lo: entered promiscuous mode [ 963.552092][T16182] lo: entered allmulticast mode [ 963.558481][T16182] tunl0: entered promiscuous mode [ 963.563521][T16182] tunl0: entered allmulticast mode [ 963.569637][T16182] gre0: entered promiscuous mode [ 963.574574][T16182] gre0: entered allmulticast mode [ 963.581800][T16182] gretap0: entered promiscuous mode [ 963.587086][T16182] gretap0: entered allmulticast mode [ 963.593483][T16182] erspan0: entered promiscuous mode [ 963.598762][T16182] erspan0: entered allmulticast mode [ 963.605169][T16182] ip_vti0: entered promiscuous mode [ 963.610438][T16182] ip_vti0: entered allmulticast mode [ 963.616618][T16182] ip6_vti0: entered promiscuous mode [ 963.621913][T16182] ip6_vti0: entered allmulticast mode [ 963.628323][T16182] sit0: entered promiscuous mode [ 963.633344][T16182] sit0: entered allmulticast mode [ 963.641638][T16182] ip6tnl0: entered promiscuous mode [ 963.646904][T16182] ip6tnl0: entered allmulticast mode [ 963.653137][T16182] ip6gre0: entered promiscuous mode [ 963.658442][T16182] ip6gre0: entered allmulticast mode [ 963.664616][T16182] syz_tun: entered promiscuous mode [ 963.670970][T16182] ip6gretap0: entered promiscuous mode [ 963.676458][T16182] ip6gretap0: entered allmulticast mode [ 963.683175][T16182] bridge0: entered promiscuous mode [ 963.688418][T16182] bridge0: entered allmulticast mode [ 963.694343][T16182] vcan0: entered promiscuous mode [ 963.699567][T16182] vcan0: entered allmulticast mode [ 963.705328][T16182] bond0: entered promiscuous mode [ 963.710346][T16182] bond_slave_0: entered promiscuous mode [ 963.716308][T16182] bond_slave_1: entered promiscuous mode [ 963.722044][T16182] bond0: entered allmulticast mode [ 963.727192][T16182] bond_slave_0: entered allmulticast mode [ 963.732892][T16182] bond_slave_1: entered allmulticast mode [ 963.741041][T16182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 963.748177][T16182] team0: entered promiscuous mode [ 963.753185][T16182] team_slave_0: entered promiscuous mode [ 963.758921][T16182] team_slave_1: entered promiscuous mode [ 963.764605][T16182] team0: entered allmulticast mode [ 963.769798][T16182] team_slave_0: entered allmulticast mode [ 963.775535][T16182] team_slave_1: entered allmulticast mode [ 963.781695][T16182] 8021q: adding VLAN 0 to HW filter on device team0 [ 963.788803][T16182] dummy0: entered promiscuous mode [ 963.793895][T16182] dummy0: entered allmulticast mode [ 963.800755][T16182] nlmon0: entered promiscuous mode [ 963.805932][T16182] nlmon0: entered allmulticast mode [ 963.836578][T16204] FAULT_INJECTION: forcing a failure. [ 963.836578][T16204] name failslab, interval 1, probability 0, space 0, times 0 [ 963.854035][T16182] caif0: entered promiscuous mode [ 963.859132][T16182] caif0: entered allmulticast mode [ 963.864233][T16182] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 963.933548][T16204] CPU: 0 UID: 0 PID: 16204 Comm: syz.4.2091 Not tainted syzkaller #0 PREEMPT(full) [ 963.933575][T16204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 963.933586][T16204] Call Trace: [ 963.933593][T16204] [ 963.933601][T16204] dump_stack_lvl+0x16c/0x1f0 [ 963.933635][T16204] should_fail_ex+0x512/0x640 [ 963.933662][T16204] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 963.933692][T16204] should_failslab+0xc2/0x120 [ 963.933715][T16204] __kmalloc_cache_noprof+0x6a/0x3e0 [ 963.933740][T16204] ? v9fs_mount+0xa6/0xa90 [ 963.933764][T16204] v9fs_mount+0xa6/0xa90 [ 963.933786][T16204] ? __pfx_v9fs_mount+0x10/0x10 [ 963.933808][T16204] ? cap_capable+0xb3/0x250 [ 963.933833][T16204] ? __pfx_v9fs_mount+0x10/0x10 [ 963.933854][T16204] legacy_get_tree+0x109/0x220 [ 963.933878][T16204] vfs_get_tree+0x8e/0x340 [ 963.933907][T16204] path_mount+0x1516/0x2060 [ 963.933936][T16204] ? __pfx_path_mount+0x10/0x10 [ 963.933962][T16204] ? kmem_cache_free+0x2d1/0x4d0 [ 963.933989][T16204] ? putname+0x154/0x1a0 [ 963.934016][T16204] ? putname+0x154/0x1a0 [ 963.934040][T16204] ? __x64_sys_mount+0x28d/0x310 [ 963.934060][T16204] __x64_sys_mount+0x28d/0x310 [ 963.934080][T16204] ? __pfx___x64_sys_mount+0x10/0x10 [ 963.934108][T16204] do_syscall_64+0xcd/0x4e0 [ 963.934135][T16204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.934155][T16204] RIP: 0033:0x7feea378eec9 [ 963.934169][T16204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 963.934184][T16204] RSP: 002b:00007feea457f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 963.934201][T16204] RAX: ffffffffffffffda RBX: 00007feea39e5fa0 RCX: 00007feea378eec9 [ 963.934214][T16204] RDX: 00002000000004c0 RSI: 0000200000000480 RDI: 00002000000001c0 [ 963.934226][T16204] RBP: 00007feea457f090 R08: 0000000000000000 R09: 0000000000000000 [ 963.934237][T16204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 963.934248][T16204] R13: 00007feea39e6038 R14: 00007feea39e5fa0 R15: 00007ffef6462328 [ 963.934275][T16204] [ 964.774991][T16218] nvme_fabrics: unknown parameter or missing value 'P' in ctrl creation request [ 966.527554][ T30] audit: type=1400 audit(1759277242.795:831): avc: denied { map } for pid=16230 comm="syz.4.2098" path="socket:[50933]" dev="sockfs" ino=50933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 966.551346][ T30] audit: type=1400 audit(1759277242.795:832): avc: denied { read accept } for pid=16230 comm="syz.4.2098" path="socket:[50933]" dev="sockfs" ino=50933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 966.970834][ T30] audit: type=1400 audit(1759277243.295:833): avc: denied { write } for pid=16250 comm="syz.4.2101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 968.555522][ T30] audit: type=1400 audit(1759277244.695:834): avc: denied { bind } for pid=16267 comm="syz.1.2105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 968.994376][ T30] audit: type=1400 audit(1759277244.695:835): avc: denied { write } for pid=16267 comm="syz.1.2105" path="socket:[51596]" dev="sockfs" ino=51596 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 969.480179][T16285] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 970.954343][T16310] vlan0: entered allmulticast mode [ 970.963747][T16310] veth1: entered allmulticast mode [ 971.035460][ T977] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 971.266018][ T977] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 971.293362][ T977] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 971.398083][ T977] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 971.446097][ T977] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 971.498119][T16322] nvme_fabrics: unknown parameter or missing value 'P' in ctrl creation request [ 971.545921][ T977] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 971.778432][ T977] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 971.818650][ T977] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 971.828730][ T977] usb 7-1: Product: syz [ 971.834252][ T977] usb 7-1: Manufacturer: syz [ 971.853155][ T977] cdc_wdm 7-1:1.0: skipping garbage [ 971.883328][ T977] cdc_wdm 7-1:1.0: skipping garbage [ 972.974857][ T977] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 972.986155][ T977] cdc_wdm 7-1:1.0: Unknown control protocol [ 973.494999][T13258] usb 7-1: USB disconnect, device number 28 [ 973.727407][T16342] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2117'. [ 973.751941][T16342] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2117'. [ 974.081092][T16368] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 974.091360][T16368] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 974.115995][T16368] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 974.128596][T16368] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 974.202848][T16368] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 974.215317][T16368] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 974.235026][T16368] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 974.246923][T16368] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 974.256595][T16368] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 974.467489][T16366] IPv6: Can't replace route, no match found [ 975.004993][T16376] ./file0: Can't lookup blockdev [ 976.394837][T16389] nvme_fabrics: unknown parameter or missing value 'P' in ctrl creation request [ 976.723937][ T30] audit: type=1400 audit(1759277253.045:836): avc: denied { bind } for pid=16390 comm="syz.5.2126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 978.583708][T16417] qrtr: Invalid version 0 [ 979.075605][T16429] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 979.765117][ T5944] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 979.794920][T16448] nvme_fabrics: unknown parameter or missing value 'P' in ctrl creation request [ 979.915079][ T5944] usb 6-1: Using ep0 maxpacket: 32 [ 979.925237][ T5944] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 979.925335][ T5944] usb 6-1: config 0 has no interface number 0 [ 979.925657][ T5944] usb 6-1: config 0 interface 2 has no altsetting 0 [ 980.020693][T13256] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 980.116158][ T5944] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 980.116191][ T5944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.116212][ T5944] usb 6-1: Product: syz [ 980.116230][ T5944] usb 6-1: Manufacturer: syz [ 980.116247][ T5944] usb 6-1: SerialNumber: syz [ 980.118690][ T5944] usb 6-1: config 0 descriptor?? [ 980.228649][T13256] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 980.333127][T13256] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 980.334232][T13256] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 980.364400][T13256] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 980.364673][T13256] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.365290][T13256] usb 7-1: Product: syz [ 980.365431][T13256] usb 7-1: Manufacturer: syz [ 980.365575][T13256] usb 7-1: SerialNumber: syz [ 980.513847][T13256] cdc_mbim 7-1:1.0: skipping garbage [ 981.042806][T16460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 981.048822][T16460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 981.170553][T13182] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 981.175666][T13256] cdc_mbim 7-1:1.0: CDC Union missing and no IAD found [ 981.175718][T13256] cdc_mbim 7-1:1.0: bind() failure [ 981.262132][T16434] netlink: 'syz.5.2133': attribute type 1 has an invalid length. [ 981.311036][T16434] bond1: entered promiscuous mode [ 981.311395][T16434] 8021q: adding VLAN 0 to HW filter on device bond1 [ 981.743277][T16465] 8021q: adding VLAN 0 to HW filter on device bond1 [ 981.743561][T16465] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 981.743583][T16465] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 981.786514][T13256] usb 7-1: USB disconnect, device number 29 [ 981.826829][T16465] bond1: (slave wireguard0): making interface the new active one [ 981.826850][T16465] wireguard0: entered promiscuous mode [ 981.828349][T16465] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 983.001233][ T5944] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 983.150580][ T5944] usb 6-1: USB disconnect, device number 15 [ 983.244977][T13257] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 983.455184][T13257] usb 7-1: Using ep0 maxpacket: 8 [ 983.495270][T13257] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 983.509201][T13257] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 983.547215][T13257] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 983.581937][T13257] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 983.597261][T13257] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 983.653487][T13257] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.911194][T13257] usb 7-1: GET_CAPABILITIES returned 0 [ 983.923553][T13257] usbtmc 7-1:16.0: can't read capabilities [ 984.055585][T16579] nvme_fabrics: unknown parameter or missing value 'P' in ctrl creation request [ 984.761731][T16591] ./file0: Can't lookup blockdev [ 985.700380][T16603] qrtr: Invalid version 0 [ 986.255891][T16610] futex_wake_op: syz.4.2158 tries to shift op by -1; fix this program [ 986.749909][ T5944] usb 7-1: USB disconnect, device number 30 [ 987.057090][T16632] nvme_fabrics: unknown parameter or missing value 'P' in ctrl creation request [ 987.189498][T16633] comedi comedi0: rti800: I/O port conflict (0x1000000,16) [ 987.462846][T16640] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.2165'. [ 989.090978][T16671] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 989.215924][T16673] ufs: You didn't specify the type of your ufs filesystem [ 989.215924][T16673] [ 989.215924][T16673] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 989.215924][T16673] [ 989.215924][T16673] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 989.289526][T16673] ufs: ufstype=old is supported read-only [ 989.563511][ T30] audit: type=1400 audit(1759277265.885:837): avc: denied { read } for pid=16668 comm="syz.6.2172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 990.335696][T16692] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 990.345704][T16692] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 990.859234][T16692] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 990.869143][T16692] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 990.879580][T16692] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 990.900893][T16692] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 990.911064][T16692] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 990.920767][T16692] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 990.930320][T16692] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 991.142401][T16696] binder: 16695:16696 ioctl 4018620d 0 returned -22 [ 991.348702][T16696] geneve2: entered promiscuous mode [ 991.628598][T16703] nvme_fabrics: unknown parameter or missing value 'P' in ctrl creation request [ 992.099197][T13256] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 992.132486][T16719] SELinux: failed to load policy [ 992.322243][T16725] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 992.988900][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.995629][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.116727][T13256] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 993.147804][T16716] [U] [ 993.319586][T13256] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 993.367467][T13256] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 993.393162][T13256] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 993.422977][T13256] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.453781][T13256] usb 6-1: Product: syz [ 993.463879][T13256] usb 6-1: Manufacturer: syz [ 993.473949][T13256] usb 6-1: SerialNumber: syz [ 993.489211][T13256] cdc_mbim 6-1:1.0: skipping garbage [ 993.495617][T13256] cdc_mbim 6-1:1.0: CDC Union missing and no IAD found [ 993.504717][T13256] cdc_mbim 6-1:1.0: bind() failure [ 993.555078][ T977] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 993.665053][ T5944] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 993.719851][T16748] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 993.729797][T16748] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 993.740309][T16748] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 993.750077][T16748] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 993.760347][T16748] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 993.777744][T16748] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 993.788031][T16748] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 993.797783][T16748] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 993.807405][T16748] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 994.025554][T16751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 994.039761][T16751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 994.190297][ T977] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 994.296885][ T977] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 994.313493][ T5944] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 994.381675][ T977] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 994.390953][ T5944] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 994.411825][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.437136][ T5944] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 994.437502][T13257] usb 6-1: USB disconnect, device number 16 [ 994.569119][ T5944] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 994.578491][ T5944] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.586579][ T5944] usb 7-1: Product: syz [ 994.590768][ T5944] usb 7-1: Manufacturer: syz [ 994.595496][ T5944] usb 7-1: SerialNumber: syz [ 994.605078][ T5944] cdc_mbim 7-1:1.0: skipping garbage [ 994.610786][ T5944] cdc_mbim 7-1:1.0: CDC Union missing and no IAD found [ 994.618415][ T5944] cdc_mbim 7-1:1.0: bind() failure [ 994.681161][ T977] usb 5-1: usb_control_msg returned -32 [ 994.735972][T16776] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 994.753001][ T977] usbtmc 5-1:16.0: can't read capabilities [ 995.601518][T16786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 995.675329][T16786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 995.778580][ T30] audit: type=1400 audit(1759277272.105:838): avc: denied { read write } for pid=16790 comm="syz.0.2189" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 995.854257][ T5944] usb 7-1: USB disconnect, device number 31 [ 995.875968][ T30] audit: type=1400 audit(1759277272.105:839): avc: denied { open } for pid=16790 comm="syz.0.2189" path="/461/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 996.184923][T13257] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 996.405959][T16819] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 996.432111][T16819] CIFS mount error: No usable UNC path provided in device string! [ 996.432111][T16819] [ 996.442398][T16819] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 996.457094][T16819] binder: 16730:16819 ioctl c0046209 9999999999999999 returned -22 [ 996.554509][T16820] nvme_fabrics: unknown parameter or missing value 'P' in ctrl creation request [ 996.805136][T13257] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 65535, setting to 64 [ 996.832211][T13257] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 996.864721][T13257] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.020389][T16804] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 997.113857][T16829] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 997.731204][ T977] usb 5-1: USB disconnect, device number 60 [ 997.847962][T16836] sctp: [Deprecated]: syz.6.2196 (pid 16836) Use of int in maxseg socket option. [ 997.847962][T16836] Use struct sctp_assoc_value instead [ 998.772140][T16854] overlayfs: failed to resolve './file1': -2 [ 999.058270][T13257] usb 6-1: string descriptor 0 read error: -71 [ 999.202931][T16853] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2197'. [ 999.395119][T13257] usb 6-1: USB disconnect, device number 17 [ 1000.002646][T16888] FAULT_INJECTION: forcing a failure. [ 1000.002646][T16888] name failslab, interval 1, probability 0, space 0, times 0 [ 1000.104159][T16888] CPU: 0 UID: 0 PID: 16888 Comm: syz.6.2202 Not tainted syzkaller #0 PREEMPT(full) [ 1000.104178][T16888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1000.104185][T16888] Call Trace: [ 1000.104191][T16888] [ 1000.104198][T16888] dump_stack_lvl+0x16c/0x1f0 [ 1000.104230][T16888] should_fail_ex+0x512/0x640 [ 1000.104255][T16888] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1000.104275][T16888] should_failslab+0xc2/0x120 [ 1000.104296][T16888] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1000.104315][T16888] ? io_submit_one+0x122/0x1df0 [ 1000.104344][T16888] io_submit_one+0x122/0x1df0 [ 1000.104371][T16888] ? __lock_acquire+0xb97/0x1ce0 [ 1000.104414][T16888] ? __pfx_io_submit_one+0x10/0x10 [ 1000.104449][T16888] ? __might_fault+0xe3/0x190 [ 1000.104468][T16888] ? __might_fault+0x13b/0x190 [ 1000.104494][T16888] ? __x64_sys_io_submit+0x1a9/0x350 [ 1000.104518][T16888] __x64_sys_io_submit+0x1a9/0x350 [ 1000.104547][T16888] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 1000.104587][T16888] do_syscall_64+0xcd/0x4e0 [ 1000.104616][T16888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.104636][T16888] RIP: 0033:0x7fc4b9d8eec9 [ 1000.104651][T16888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1000.104669][T16888] RSP: 002b:00007fc4b7ff6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1000.104688][T16888] RAX: ffffffffffffffda RBX: 00007fc4b9fe5fa0 RCX: 00007fc4b9d8eec9 [ 1000.104701][T16888] RDX: 0000200000000080 RSI: 0000000000000001 RDI: 00007fc4bab1f000 [ 1000.104713][T16888] RBP: 00007fc4b7ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1000.104726][T16888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1000.104738][T16888] R13: 00007fc4b9fe6038 R14: 00007fc4b9fe5fa0 R15: 00007ffd2a42c158 [ 1000.104766][T16888] [ 1001.165110][T11371] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1001.966469][ T30] audit: type=1400 audit(1759277278.285:840): avc: denied { mount } for pid=16894 comm="syz.6.2205" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1002.036044][T16896] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1002.053087][T16896] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1002.074286][ T30] audit: type=1400 audit(1759277278.365:841): avc: denied { mounton } for pid=16894 comm="syz.6.2205" path="/136/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1002.120479][ T30] audit: type=1400 audit(1759277278.435:842): avc: denied { read } for pid=16894 comm="syz.6.2205" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1002.151067][T11371] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1002.213848][T11371] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEA, changing to 0x8A [ 1002.252122][ T30] audit: type=1400 audit(1759277278.435:843): avc: denied { open } for pid=16894 comm="syz.6.2205" path="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1002.270784][T16909] netlink: 6 bytes leftover after parsing attributes in process `syz.6.2205'. [ 1002.280043][T11371] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 31360, setting to 1024 [ 1002.336237][T16909] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1002.346619][T11371] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 1024 [ 1002.668517][ T30] audit: type=1400 audit(1759277278.435:844): avc: denied { read } for pid=16894 comm="syz.6.2205" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1002.709341][T11371] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1003.013634][T16919] futex_wake_op: syz.1.2208 tries to shift op by -1; fix this program [ 1003.030311][T11371] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 1003.056761][ T30] audit: type=1400 audit(1759277278.495:845): avc: denied { read } for pid=16894 comm="syz.6.2205" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1003.109587][ T30] audit: type=1400 audit(1759277278.525:846): avc: denied { getattr } for pid=16894 comm="syz.6.2205" name="saved_tgids" dev="tracefs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1003.158841][T11371] usb 5-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39 [ 1003.186932][T11371] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.314123][T11371] usb 5-1: Product: syz [ 1003.320954][T11371] usb 5-1: Manufacturer: syz [ 1003.366239][ T30] audit: type=1400 audit(1759277279.695:847): avc: denied { unmount } for pid=12053 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1003.405243][T11371] usb 5-1: SerialNumber: syz [ 1003.927015][T11371] usb 5-1: config 0 descriptor?? [ 1003.981759][T11371] usb 5-1: can't set config #0, error -71 [ 1004.013362][T11371] usb 5-1: USB disconnect, device number 61 [ 1004.180633][ T30] audit: type=1400 audit(1759277280.505:848): avc: denied { getopt } for pid=16933 comm="syz.5.2211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1004.233352][T16953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2213'. [ 1004.300668][T16956] netlink: 'syz.4.2214': attribute type 16 has an invalid length. [ 1004.316141][T16956] netlink: 'syz.4.2214': attribute type 17 has an invalid length. [ 1004.326769][T16948] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.367507][T16948] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.385822][ T5944] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 1004.518371][T16956] lo: left promiscuous mode [ 1004.538638][T16956] lo: left allmulticast mode [ 1004.556605][ T5944] usb 7-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 65535, setting to 64 [ 1004.587577][ T5944] usb 7-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1004.597996][T16956] tunl0: left promiscuous mode [ 1004.603117][T16956] tunl0: left allmulticast mode [ 1004.612646][ T5944] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.621858][T16956] gre0: left promiscuous mode [ 1004.631007][T16956] gre0: left allmulticast mode [ 1004.637189][T16939] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1004.648173][T16956] 0{X: left promiscuous mode [ 1004.666800][T16956] 0{X: left allmulticast mode [ 1004.688918][T16956] erspan0: left promiscuous mode [ 1004.704847][T16956] erspan0: left allmulticast mode [ 1004.723636][T16956] ip_vti0: left promiscuous mode [ 1004.743216][T16956] ip_vti0: left allmulticast mode [ 1004.762099][T16956] ip6_vti0: left promiscuous mode [ 1004.787436][T16956] ip6_vti0: left allmulticast mode [ 1004.806941][T16956] sit0: left promiscuous mode [ 1004.829104][T16956] sit0: left allmulticast mode [ 1004.846281][T16956] ip6tnl0: left promiscuous mode [ 1004.867106][T16956] ip6tnl0: left allmulticast mode [ 1004.897892][T16956] ip6gre0: left promiscuous mode [ 1004.928390][T16956] ip6gre0: left allmulticast mode [ 1004.973223][T16956] syz_tun: left promiscuous mode [ 1005.010330][T16956] syz_tun: left allmulticast mode [ 1005.043761][T16956] ip6gretap0: left promiscuous mode [ 1005.415018][T16956] ip6gretap0: left allmulticast mode [ 1005.441522][T16956] bridge0: left allmulticast mode [ 1005.487764][T16956] vcan0: left promiscuous mode [ 1005.535060][T16956] vcan0: left allmulticast mode [ 1005.540421][T16956] bond0: left promiscuous mode [ 1005.601007][T16956] bond_slave_0: left promiscuous mode [ 1005.619053][T16956] bond_slave_1: left promiscuous mode [ 1005.762280][T16956] bond0: left allmulticast mode [ 1005.767211][T16956] bond_slave_0: left allmulticast mode [ 1005.803615][T16956] bond_slave_1: left allmulticast mode [ 1005.821890][T16956] team0: left promiscuous mode [ 1005.835528][T16956] team_slave_0: left promiscuous mode [ 1005.841100][T16956] team_slave_1: left promiscuous mode [ 1005.875610][T16956] team0: left allmulticast mode [ 1005.880490][T16956] team_slave_0: left allmulticast mode [ 1005.945296][T16956] team_slave_1: left allmulticast mode [ 1005.968190][T16956] dummy0: left promiscuous mode [ 1005.999518][T16956] dummy0: left allmulticast mode [ 1006.027974][T16956] nlmon0: left promiscuous mode [ 1006.088942][T16956] nlmon0: left allmulticast mode [ 1006.116584][T16956] caif0: left promiscuous mode [ 1006.128744][T16956] caif0: left allmulticast mode [ 1006.140293][T16956] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1006.472482][T16982] overlayfs: failed to resolve './file1': -2 [ 1006.488981][T16982] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2219'. [ 1006.931320][T16983] overlayfs: failed to resolve './file1': -2 [ 1006.944843][T16983] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2220'. [ 1007.172806][ T5944] usb 7-1: string descriptor 0 read error: -71 [ 1007.350389][ T5944] usb 7-1: USB disconnect, device number 32 [ 1007.864752][T17010] netlink: 'syz.6.2223': attribute type 1 has an invalid length. [ 1008.206039][T17010] bond1: entered promiscuous mode [ 1008.211464][T17010] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1008.595528][ T5944] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1009.054214][ T5944] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1009.127972][ T5944] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEA, changing to 0x8A [ 1009.221259][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 31360, setting to 1024 [ 1009.531012][ T5944] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 1024 [ 1010.031117][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1010.171563][ T5944] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 1010.299940][ T5944] usb 6-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39 [ 1010.486185][ T5944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.637770][ T5944] usb 6-1: Product: syz [ 1010.642819][ T5944] usb 6-1: Manufacturer: syz [ 1010.647737][ T5944] usb 6-1: SerialNumber: syz [ 1010.672339][ T5944] usb 6-1: config 0 descriptor?? [ 1011.022775][ T5944] usb 6-1: can't set config #0, error -71 [ 1011.062081][ T5944] usb 6-1: USB disconnect, device number 18 [ 1011.151647][T17075] netlink: 'syz.4.2229': attribute type 8 has an invalid length. [ 1011.655033][ T5944] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 1011.827502][ T5944] usb 7-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 65535, setting to 64 [ 1011.845030][T11371] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1011.860037][ T5944] usb 7-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1011.893484][ T5944] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.912325][T17086] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1012.036681][T11371] usb 6-1: device descriptor read/64, error -71 [ 1012.295073][T11371] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1012.455138][T11371] usb 6-1: device descriptor read/64, error -71 [ 1012.498827][T12267] Bluetooth: hci1: Frame reassembly failed (-84) [ 1012.667569][T11371] usb usb6-port1: attempt power cycle [ 1013.278986][T11371] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1013.357488][T11371] usb 6-1: device descriptor read/8, error -71 [ 1013.633929][T11371] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1013.655835][T11371] usb 6-1: device descriptor read/8, error -71 [ 1013.787747][T11371] usb usb6-port1: unable to enumerate USB device [ 1014.525514][T13182] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1014.612108][ T5944] usb 7-1: string descriptor 0 read error: -71 [ 1014.623214][T17142] binder: BINDER_SET_CONTEXT_MGR already set [ 1014.630762][T17142] binder: 17137:17142 ioctl 4018620d 2000000002c0 returned -16 [ 1016.314059][ T5944] usb 7-1: USB disconnect, device number 33 [ 1016.646870][T17178] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2247'. [ 1016.701761][T17178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2247'. [ 1016.712038][T17178] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2247'. [ 1016.993683][T17180] overlayfs: failed to resolve './file1': -2 [ 1017.030800][T17180] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.2246'. [ 1017.370274][T17085] delete_channel: no stack [ 1017.526027][T17187] netlink: 'syz.5.2248': attribute type 7 has an invalid length. [ 1018.705541][T17200] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2251'. [ 1020.505347][T11371] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 1020.706671][T11371] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 65535, setting to 64 [ 1020.734366][T11371] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1020.768672][T11371] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.807984][T17213] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1021.020435][T17227] sd 0:0:1:0: PR command failed: 1026 [ 1021.027916][T17227] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1021.045126][ T30] audit: type=1400 audit(1759277297.345:849): avc: denied { write } for pid=17223 comm="syz.1.2257" name="file0" dev="fuse" ino=144115188075855873 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1021.083725][T17227] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1022.690149][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 1022.742030][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 1022.925134][T17247] overlayfs: failed to resolve './file1': -2 [ 1022.991312][T17248] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2260'. [ 1023.305003][T13257] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1023.985136][T13257] usb 7-1: Using ep0 maxpacket: 32 [ 1024.101019][T13257] usb 7-1: too many configurations: 17, using maximum allowed: 8 [ 1024.110622][T13257] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 1024.120837][T13257] usb 7-1: config 0 has no interface number 0 [ 1024.128822][T13257] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 1024.136944][T13257] usb 7-1: config 0 has no interface number 0 [ 1024.144113][T13257] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 1024.153374][T13257] usb 7-1: config 0 has no interface number 0 [ 1024.162539][T13257] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 1024.170744][T13257] usb 7-1: config 0 has no interface number 0 [ 1024.178007][T13257] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 1024.186230][T13257] usb 7-1: config 0 has no interface number 0 [ 1024.199891][T13257] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 1024.208387][T13257] usb 7-1: config 0 has no interface number 0 [ 1024.216016][T13257] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 1024.224149][T13257] usb 7-1: config 0 has no interface number 0 [ 1024.236729][T13257] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 1024.245283][T13257] usb 7-1: config 0 has no interface number 0 [ 1024.259868][T13257] usb 7-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1024.269195][T13257] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.277368][T13257] usb 7-1: Product: syz [ 1024.281652][T13257] usb 7-1: Manufacturer: syz [ 1024.286531][T13257] usb 7-1: SerialNumber: syz [ 1024.313374][T13257] usb 7-1: config 0 descriptor?? [ 1024.327987][T13257] etas_es58x 7-1:0.2: Starting syz syz (Serial Number syz) [ 1024.488512][T17265] FAULT_INJECTION: forcing a failure. [ 1024.488512][T17265] name failslab, interval 1, probability 0, space 0, times 0 [ 1024.502749][T17265] CPU: 0 UID: 0 PID: 17265 Comm: syz.1.2265 Not tainted syzkaller #0 PREEMPT(full) [ 1024.502778][T17265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1024.502790][T17265] Call Trace: [ 1024.502797][T17265] [ 1024.502805][T17265] dump_stack_lvl+0x16c/0x1f0 [ 1024.502842][T17265] should_fail_ex+0x512/0x640 [ 1024.502875][T17265] ? __kmalloc_noprof+0xbf/0x510 [ 1024.502898][T17265] ? constrain_params_by_rules+0x175/0xca0 [ 1024.502921][T17265] should_failslab+0xc2/0x120 [ 1024.502944][T17265] __kmalloc_noprof+0xd2/0x510 [ 1024.502962][T17265] ? unwind_get_return_address+0x59/0xa0 [ 1024.502992][T17265] constrain_params_by_rules+0x175/0xca0 [ 1024.503022][T17265] ? __lock_acquire+0xb97/0x1ce0 [ 1024.503054][T17265] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 1024.503076][T17265] ? __lock_acquire+0xb97/0x1ce0 [ 1024.503119][T17265] ? rcu_is_watching+0x12/0xc0 [ 1024.503144][T17265] ? trace_contention_end+0xdd/0x130 [ 1024.503163][T17265] ? snd_interval_refine+0x2fa/0x580 [ 1024.503194][T17265] snd_pcm_hw_refine+0x7de/0xad0 [ 1024.503223][T17265] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1024.503252][T17265] ? do_raw_spin_lock+0x12c/0x2b0 [ 1024.503278][T17265] ? mark_held_locks+0x49/0x80 [ 1024.503309][T17265] snd_pcm_hw_params+0x422/0x1ba0 [ 1024.503334][T17265] ? snd_pcm_hw_param_last+0x306/0x710 [ 1024.503354][T17265] ? snd_pcm_hw_param_near.constprop.0+0x72f/0x8e0 [ 1024.503380][T17265] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 1024.503406][T17265] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 1024.503433][T17265] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1024.503457][T17265] ? __asan_memset+0x23/0x50 [ 1024.503489][T17265] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 1024.503516][T17265] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 1024.503554][T17265] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1024.503593][T17265] ? find_held_lock+0x2b/0x80 [ 1024.503622][T17265] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 1024.503648][T17265] snd_pcm_oss_write+0x4c3/0xa10 [ 1024.503671][T17265] ? bpf_lsm_file_permission+0x9/0x10 [ 1024.503694][T17265] ? security_file_permission+0x71/0x210 [ 1024.503717][T17265] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 1024.503739][T17265] vfs_write+0x2a0/0x11d0 [ 1024.503766][T17265] ? __pfx_vfs_write+0x10/0x10 [ 1024.503783][T17265] ? find_held_lock+0x2b/0x80 [ 1024.503805][T17265] ? __fget_files+0x204/0x3c0 [ 1024.503830][T17265] ? __fget_files+0x20e/0x3c0 [ 1024.503865][T17265] ksys_write+0x12a/0x250 [ 1024.503885][T17265] ? __pfx_ksys_write+0x10/0x10 [ 1024.503915][T17265] do_syscall_64+0xcd/0x4e0 [ 1024.503946][T17265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.503966][T17265] RIP: 0033:0x7fad9978eec9 [ 1024.503983][T17265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1024.504002][T17265] RSP: 002b:00007fad9a65c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1024.504020][T17265] RAX: ffffffffffffffda RBX: 00007fad999e5fa0 RCX: 00007fad9978eec9 [ 1024.504033][T17265] RDX: 000000000000fdbc RSI: 0000200000000500 RDI: 0000000000000003 [ 1024.504046][T17265] RBP: 00007fad9a65c090 R08: 0000000000000000 R09: 0000000000000000 [ 1024.504058][T17265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1024.504069][T17265] R13: 00007fad999e6038 R14: 00007fad999e5fa0 R15: 00007fff5ef13ba8 [ 1024.504098][T17265] [ 1024.685350][ T51] Bluetooth: hci1: command 0xfc11 tx timeout [ 1024.692977][T13182] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1024.847218][T13257] etas_es58x 7-1:0.2: could not parse product info: 'Я' [ 1024.945161][T13257] usb 7-1: USB disconnect, device number 34 [ 1024.952733][T13257] etas_es58x 7-1:0.2: Disconnecting syz syz [ 1024.977181][T11371] usb 6-1: string descriptor 0 read error: -71 [ 1025.037605][ T5944] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1025.102956][T11371] usb 6-1: USB disconnect, device number 23 [ 1025.241504][T17315] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1025.252319][T17315] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1025.262373][T17315] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1025.272215][T17315] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1025.282309][T17315] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1025.291978][T17315] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1025.310913][T17315] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1025.321722][T17315] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1025.331242][T17315] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 1025.480772][ T5944] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.495363][ T5944] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1025.504501][ T5944] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1025.519649][ T5944] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1025.528832][ T5944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.537177][ T5944] usb 1-1: Product: syz [ 1025.541405][ T5944] usb 1-1: Manufacturer: syz [ 1025.550143][ T5944] usb 1-1: SerialNumber: syz [ 1025.564366][ T5944] cdc_mbim 1-1:1.0: skipping garbage [ 1025.618587][ T5944] cdc_mbim 1-1:1.0: CDC Union missing and no IAD found [ 1025.651004][ T5944] cdc_mbim 1-1:1.0: bind() failure [ 1026.330183][T17267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1026.338801][T17267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1026.630072][T17342] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2270'. [ 1026.703681][T11371] usb 1-1: USB disconnect, device number 53 [ 1028.285203][T13256] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1029.112198][T13256] usb 7-1: Using ep0 maxpacket: 32 [ 1029.132272][T13256] usb 7-1: too many configurations: 17, using maximum allowed: 8 [ 1029.141028][T13256] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 1029.160359][T13256] usb 7-1: config 0 has no interface number 0 [ 1029.193727][T13256] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 1029.264913][T13256] usb 7-1: config 0 has no interface number 0 [ 1029.312198][T13256] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 1029.341498][T13256] usb 7-1: config 0 has no interface number 0 [ 1029.363328][T13256] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 1029.377652][T13256] usb 7-1: config 0 has no interface number 0 [ 1029.398532][T13256] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 1029.408174][T13256] usb 7-1: config 0 has no interface number 0 [ 1029.423312][T13256] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 1029.439915][T13256] usb 7-1: config 0 has no interface number 0 [ 1029.456323][T13256] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 1029.478597][T13256] usb 7-1: config 0 has no interface number 0 [ 1029.506169][T13256] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 1029.514423][T13256] usb 7-1: config 0 has no interface number 0 [ 1029.522945][T13256] usb 7-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1029.532362][T13256] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.548972][T13256] usb 7-1: Product: syz [ 1029.558186][T17390] IPVS: set_ctl: invalid protocol: 157 224.0.0.2:20004 [ 1029.560102][T13256] usb 7-1: Manufacturer: syz [ 1029.571747][T13256] usb 7-1: SerialNumber: syz [ 1029.574229][T13256] usb 7-1: config 0 descriptor?? [ 1029.578259][T13256] etas_es58x 7-1:0.2: Starting syz syz (Serial Number syz) [ 1029.684977][T13258] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 1029.780877][T13256] etas_es58x 7-1:0.2: could not parse product info: 'Я' [ 1029.838628][T13258] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 65535, setting to 64 [ 1029.838677][T13258] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1029.838702][T13258] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.843490][T17383] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1030.035502][T13256] usb 7-1: USB disconnect, device number 35 [ 1030.040824][T13256] etas_es58x 7-1:0.2: Disconnecting syz syz [ 1030.731019][ T8452] Bluetooth: hci1: Frame reassembly failed (-84) [ 1031.243227][T17432] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2283'. [ 1031.995164][T13257] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1032.484923][T17448] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2286'. [ 1033.109632][T13182] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1033.117568][ T51] Bluetooth: hci1: command 0xfc11 tx timeout [ 1033.227748][T13257] usb 7-1: config 0 has an invalid interface number: 168 but max is 0 [ 1033.236152][T13257] usb 7-1: config 0 has no interface number 0 [ 1033.242446][T13257] usb 7-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 1033.252386][T13257] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.268347][T13257] usb 7-1: config 0 descriptor?? [ 1033.619133][T13258] usb 5-1: string descriptor 0 read error: -71 [ 1033.766368][T13258] usb 5-1: USB disconnect, device number 62 [ 1033.827755][T17474] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2289'. [ 1033.978298][T17439] lo speed is unknown, defaulting to 1000 [ 1033.986038][T17439] hsr0 speed is unknown, defaulting to 1000 [ 1034.025565][T13256] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1034.088733][T17495] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2288'. [ 1034.149175][T17495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2288'. [ 1034.158853][T17495] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2288'. [ 1034.599904][T13257] usb 7-1: string descriptor 0 read error: -71 [ 1034.619123][T13257] usb-storage 7-1:0.168: USB Mass Storage device detected [ 1034.788054][T17517] IPVS: set_ctl: invalid protocol: 157 224.0.0.2:20004 [ 1034.843211][T13257] usb-storage 7-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 1034.867414][T13256] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1034.900923][T13256] usb 6-1: config 0 has no interface number 0 [ 1035.320030][T13257] usb 7-1: USB disconnect, device number 36 [ 1035.344427][T13256] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1035.360053][T13256] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.368589][T13258] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1035.378351][T13256] usb 6-1: Product: syz [ 1035.386453][T13256] usb 6-1: Manufacturer: syz [ 1035.400199][T13256] usb 6-1: SerialNumber: syz [ 1035.421897][T13256] usb 6-1: config 0 descriptor?? [ 1035.627581][T13258] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1035.656714][T13256] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1035.667151][T13258] usb 5-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 1035.679249][T13256] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1035.689809][T13258] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.699309][T13258] usb 5-1: Product: syz [ 1035.703494][T13258] usb 5-1: Manufacturer: syz [ 1035.708941][T13256] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1035.717116][T13258] usb 5-1: SerialNumber: syz [ 1035.723272][T13256] usb 6-1: media controller created [ 1035.788697][T13258] usb 5-1: config 0 descriptor?? [ 1035.945376][ T6017] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1035.945676][T13258] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -32 [ 1036.030729][T13256] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1036.159784][ T6017] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1036.171822][T17506] netlink: 'syz.4.2290': attribute type 11 has an invalid length. [ 1036.179778][ T6017] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1036.195633][ T6017] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1036.213934][ T44] usb 5-1: USB disconnect, device number 63 [ 1036.222954][ T6017] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.243043][ T6017] usb 1-1: config 0 descriptor?? [ 1036.391479][ T5944] usb 6-1: USB disconnect, device number 24 [ 1036.957623][ T6017] pyra 0003:1E7D:2CF6.0014: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 1037.016626][T17581] lo speed is unknown, defaulting to 1000 [ 1037.024144][T17581] hsr0 speed is unknown, defaulting to 1000 [ 1037.270214][T17614] netlink: 'syz.4.2297': attribute type 8 has an invalid length. [ 1037.456978][T17616] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2298'. [ 1037.466140][T17616] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2298'. [ 1037.969033][ T6017] pyra 0003:1E7D:2CF6.0014: couldn't init struct pyra_device [ 1037.982055][ T6017] pyra 0003:1E7D:2CF6.0014: couldn't install mouse [ 1038.007419][ T6017] pyra 0003:1E7D:2CF6.0014: probe with driver pyra failed with error -71 [ 1038.222031][ T6017] usb 1-1: USB disconnect, device number 54 [ 1038.879051][T17640] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2299'. [ 1038.888237][T17640] netlink: 9 bytes leftover after parsing attributes in process `syz.6.2299'. [ 1039.053076][T17648] ptrace attach of "./syz-executor exec"[9648] was attempted by "./syz-executor exec"[17648] [ 1039.369662][T17656] IPVS: set_ctl: invalid protocol: 157 224.0.0.2:20004 [ 1039.543772][T17666] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1039.553735][T17666] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1039.564282][T17666] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1039.574340][T17666] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1039.584627][T17666] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1039.594334][T17666] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1039.604467][T17666] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1039.614088][T17666] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1039.623714][T17666] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 1041.211743][T17680] netlink: 'syz.1.2308': attribute type 8 has an invalid length. [ 1042.069484][ T30] audit: type=1400 audit(1759277318.395:850): avc: denied { cmd } for pid=17685 comm="syz.1.2310" path="socket:[55598]" dev="sockfs" ino=55598 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1043.685256][ T977] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1044.009977][T17710] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 1044.456453][ T977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1044.467720][ T977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1044.477905][ T977] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1044.489666][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.530145][ T30] audit: type=1400 audit(1759277320.855:851): avc: denied { read write } for pid=17713 comm="syz.6.2315" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1044.556763][ T977] usb 1-1: config 0 descriptor?? [ 1044.567497][ T30] audit: type=1400 audit(1759277320.855:852): avc: denied { open } for pid=17713 comm="syz.6.2315" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1044.934954][T17703] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1044.979786][ T977] pyra 0003:1E7D:2CF6.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 1045.132398][T17703] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1045.143781][T17703] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1045.156311][T17703] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1045.177778][T17703] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1045.189692][T17703] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.198704][T17703] usb 7-1: Product: syz [ 1045.203010][T17703] usb 7-1: Manufacturer: syz [ 1045.209589][T17703] usb 7-1: SerialNumber: syz [ 1045.269668][T17703] cdc_mbim 7-1:1.0: skipping garbage [ 1045.520908][ T977] pyra 0003:1E7D:2CF6.0015: couldn't init struct pyra_device [ 1045.918928][T17703] cdc_mbim 7-1:1.0: CDC Union missing and no IAD found [ 1045.982243][T17744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1045.994667][T17744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1046.015882][ T977] pyra 0003:1E7D:2CF6.0015: couldn't install mouse [ 1046.028264][T17703] cdc_mbim 7-1:1.0: bind() failure [ 1046.057846][ T977] pyra 0003:1E7D:2CF6.0015: probe with driver pyra failed with error -71 [ 1046.106774][T13257] usb 7-1: USB disconnect, device number 37 [ 1046.152064][ T977] usb 1-1: USB disconnect, device number 55 [ 1046.180975][ T30] audit: type=1400 audit(1759277322.505:853): avc: denied { setattr } for pid=17752 comm="syz.1.2320" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1046.185404][T17768] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2321'. [ 1047.374603][T17803] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 1048.340256][ T30] audit: type=1400 audit(1759277324.665:854): avc: denied { bind } for pid=17814 comm="syz.6.2328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1048.384705][T17820] comedi comedi0: aio_iiro_16: a I/O base address must be specified [ 1048.635007][T17703] usb 7-1: new low-speed USB device number 38 using dummy_hcd [ 1048.765021][T17703] usb 7-1: device descriptor read/64, error -71 [ 1048.808437][ T30] audit: type=1400 audit(1759277325.135:855): avc: denied { getopt } for pid=17828 comm="syz.0.2332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1049.065126][T17703] usb 7-1: new low-speed USB device number 39 using dummy_hcd [ 1049.364974][T17703] usb 7-1: device descriptor read/64, error -71 [ 1049.539367][T17842] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2334'. [ 1049.890482][T17703] usb usb7-port1: attempt power cycle [ 1050.235159][T17703] usb 7-1: new low-speed USB device number 40 using dummy_hcd [ 1051.147252][T17703] usb 7-1: device descriptor read/8, error -71 [ 1051.726870][T13256] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1051.735417][T17869] FAULT_INJECTION: forcing a failure. [ 1051.735417][T17869] name failslab, interval 1, probability 0, space 0, times 0 [ 1051.748652][T17869] CPU: 0 UID: 0 PID: 17869 Comm: syz.6.2341 Not tainted syzkaller #0 PREEMPT(full) [ 1051.748693][T17869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1051.748701][T17869] Call Trace: [ 1051.748707][T17869] [ 1051.748714][T17869] dump_stack_lvl+0x16c/0x1f0 [ 1051.748737][T17869] should_fail_ex+0x512/0x640 [ 1051.748754][T17869] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1051.748772][T17869] should_failslab+0xc2/0x120 [ 1051.748786][T17869] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1051.748804][T17869] ? assoc_array_insert+0x10c/0x3970 [ 1051.748819][T17869] assoc_array_insert+0x10c/0x3970 [ 1051.748840][T17869] ? __pfx_assoc_array_insert+0x10/0x10 [ 1051.748855][T17869] ? down_write+0x14d/0x200 [ 1051.748866][T17869] ? __pfx_down_write+0x10/0x10 [ 1051.748875][T17869] ? __pfx_key_set_index_key+0x10/0x10 [ 1051.748891][T17869] __key_link_begin+0xf5/0x260 [ 1051.748904][T17869] __key_create_or_update+0x4e3/0xe10 [ 1051.748917][T17869] ? __pfx___key_create_or_update+0x10/0x10 [ 1051.748928][T17869] ? lookup_user_key+0x2ce/0x1300 [ 1051.748952][T17869] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1051.748971][T17869] key_create_or_update+0x42/0x60 [ 1051.748984][T17869] __do_sys_add_key+0x298/0x470 [ 1051.748998][T17869] ? __pfx___do_sys_add_key+0x10/0x10 [ 1051.749012][T17869] ? __pfx___rdmsr_safe_on_cpu+0x10/0x10 [ 1051.749031][T17869] do_syscall_64+0xcd/0x4e0 [ 1051.749050][T17869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.749061][T17869] RIP: 0033:0x7fc4b9d8eec9 [ 1051.749072][T17869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1051.749082][T17869] RSP: 002b:00007fc4b7fb4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1051.749093][T17869] RAX: ffffffffffffffda RBX: 00007fc4b9fe6180 RCX: 00007fc4b9d8eec9 [ 1051.749101][T17869] RDX: 0000200000000100 RSI: 0000200000000180 RDI: 0000200000000140 [ 1051.749108][T17869] RBP: 00007fc4b7fb4090 R08: fffffffffffffffe R09: 0000000000000000 [ 1051.749115][T17869] R10: 00000000000000ca R11: 0000000000000246 R12: 0000000000000002 [ 1051.749122][T17869] R13: 00007fc4b9fe6218 R14: 00007fc4b9fe6180 R15: 00007ffd2a42c158 [ 1051.749137][T17869] [ 1052.291507][T13256] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1052.300758][T13256] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.312798][T13256] usb 6-1: Product: syz [ 1052.327851][T13256] usb 6-1: Manufacturer: syz [ 1052.342018][T13256] usb 6-1: SerialNumber: syz [ 1052.361070][T13256] usb 6-1: config 0 descriptor?? [ 1052.467748][T17875] futex_wake_op: syz.0.2343 tries to shift op by -1; fix this program [ 1052.504351][T17879] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2344'. [ 1052.747824][T17881] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.2345'. [ 1054.634651][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.665018][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.905275][T17903] overlayfs: failed to resolve './file1': -2 [ 1055.573524][T17909] fuse: Bad value for 'fd' [ 1055.977036][T17899] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2351'. [ 1056.131985][T17918] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.2356' sets config #64 [ 1056.142547][T17918] usb usb8: usbfs: process 17918 (syz.4.2356) did not claim interface 7 before use [ 1056.153709][T13256] usb 6-1: f81604_write: reg: 105 data: 56 failed: -EPROTO [ 1056.176441][T13256] f81604 6-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 1056.183944][T13256] f81604 6-1:0.0: probe with driver f81604 failed with error -71 [ 1056.236732][T13256] usb 6-1: USB disconnect, device number 25 [ 1057.078131][T17942] overlayfs: failed to resolve './file1': -2 [ 1057.278502][T17942] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.2358'. [ 1057.690290][T17953] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 1058.623867][T17967] netlink: 'syz.4.2367': attribute type 1 has an invalid length. [ 1058.711069][T17982] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1058.725522][T17982] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 1058.783974][T17967] bond1: (slave bridge2): Enslaving as an active interface with a down link [ 1058.821917][T17967] gretap0: entered promiscuous mode [ 1058.827482][T17967] gretap0: entered allmulticast mode [ 1058.837683][T17967] bond1: (slave gretap0): making interface the new active one [ 1058.846344][T17967] bond1: (slave gretap0): Enslaving as an active interface with an up link [ 1058.968673][T18019] dlm: non-version read from control device 0 [ 1059.137112][ T30] audit: type=1326 audit(1759277335.365:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18018 comm="syz.4.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea378eec9 code=0x7ffc0000 [ 1059.306791][ T30] audit: type=1326 audit(1759277335.365:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18018 comm="syz.4.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea378eec9 code=0x7ffc0000 [ 1059.833342][ T30] audit: type=1326 audit(1759277335.365:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18018 comm="syz.4.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7feea378eec9 code=0x7ffc0000 [ 1059.885245][ T30] audit: type=1326 audit(1759277335.375:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18018 comm="syz.4.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea378eec9 code=0x7ffc0000 [ 1059.909363][ T30] audit: type=1326 audit(1759277335.375:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18018 comm="syz.4.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea378eec9 code=0x7ffc0000 [ 1059.934375][ T30] audit: type=1326 audit(1759277335.375:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18018 comm="syz.4.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feea378eec9 code=0x7ffc0000 [ 1059.960318][ T30] audit: type=1326 audit(1759277335.385:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18018 comm="syz.4.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea378eec9 code=0x7ffc0000 [ 1060.005052][ T30] audit: type=1326 audit(1759277335.385:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18018 comm="syz.4.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea378eec9 code=0x7ffc0000 [ 1060.092893][T18037] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2371'. [ 1060.126816][T18037] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 1060.131062][ T30] audit: type=1326 audit(1759277335.385:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18018 comm="syz.4.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feea378eec9 code=0x7ffc0000 [ 1060.412487][ T30] audit: type=1326 audit(1759277335.385:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18018 comm="syz.4.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea378eec9 code=0x7ffc0000 [ 1060.859288][T18058] binder: BINDER_SET_CONTEXT_MGR already set [ 1060.883451][T18058] binder: 18056:18058 ioctl 4018620d 200000004a80 returned -16 [ 1061.126416][T18066] fuse: Bad value for 'rootmode' [ 1061.335204][T13256] usb 1-1: new low-speed USB device number 56 using dummy_hcd [ 1061.391310][T18071] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2377'. [ 1061.736440][T13256] usb 1-1: device descriptor read/64, error -71 [ 1061.994932][T13256] usb 1-1: new low-speed USB device number 57 using dummy_hcd [ 1062.425069][T13256] usb 1-1: device descriptor read/64, error -71 [ 1062.545461][T13256] usb usb1-port1: attempt power cycle [ 1062.858220][T18086] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 1063.250708][T13256] usb 1-1: new low-speed USB device number 58 using dummy_hcd [ 1063.285759][T13256] usb 1-1: device descriptor read/8, error -71 [ 1063.505178][T17703] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1063.595116][T13256] usb 1-1: new low-speed USB device number 59 using dummy_hcd [ 1063.725562][T13256] usb 1-1: device descriptor read/8, error -71 [ 1064.244081][T13256] usb usb1-port1: unable to enumerate USB device [ 1064.315130][T17703] usb 7-1: Using ep0 maxpacket: 16 [ 1064.583744][T17703] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1064.708233][T17703] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1064.768768][T17703] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1065.715074][T13256] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1066.941506][T17703] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1066.959570][T13256] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1066.976652][T13256] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEA, changing to 0x8A [ 1067.008664][T13256] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 31360, setting to 1024 [ 1067.954918][T17703] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.963030][T17703] usb 7-1: Product: Й [ 1067.977187][T13256] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 1024 [ 1068.006048][T13256] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1068.034958][T13256] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 1068.184934][T17703] usb 7-1: Manufacturer: 敞䳦Ⲃ겋Ⱜ갺垁溄䟽ᓻ쏨몣玍 [ 1068.200553][T13256] usb 1-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39 [ 1068.244995][T17703] usb 7-1: can't set config #1, error -71 [ 1068.265167][T17703] usb 7-1: USB disconnect, device number 42 [ 1068.281021][T13256] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.354475][T13256] usb 1-1: Product: syz [ 1068.371391][T13256] usb 1-1: Manufacturer: syz [ 1068.420631][T13256] usb 1-1: SerialNumber: syz [ 1068.460709][T13256] usb 1-1: config 0 descriptor?? [ 1068.613117][T13256] usb 1-1: can't set config #0, error -71 [ 1068.630869][T13256] usb 1-1: USB disconnect, device number 60 [ 1068.694950][ T44] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1069.112405][T18174] overlayfs: failed to resolve './file1': -2 [ 1069.150142][T18174] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2397'. [ 1069.275028][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 1069.773059][T18188] syzkaller1: entered promiscuous mode [ 1069.779052][ T44] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1069.781566][T18188] syzkaller1: entered allmulticast mode [ 1069.878412][ T44] usb 5-1: New USB device found, idVendor=2040, idProduct=b764, bcdDevice=8e.4c [ 1069.887730][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.902515][ T44] usb 5-1: Product: syz [ 1070.274218][ T44] usb 5-1: Manufacturer: syz [ 1070.286078][ T44] usb 5-1: SerialNumber: syz [ 1070.740261][T18207] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2403'. [ 1071.595010][T13256] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 1071.640834][ T44] usb 5-1: dvb_usb_v2: found a 'Hauppauge 117xxx DVBT' in warm state [ 1071.804702][T18209] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2402'. [ 1071.905513][T13256] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.010392][T13256] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1072.033410][T13256] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1072.151838][ T44] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1072.162375][T13256] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.189654][ T44] dvbdev: DVB: registering new adapter (Hauppauge 117xxx DVBT) [ 1072.200520][T13256] usb 6-1: config 0 descriptor?? [ 1072.201111][ T44] usb 5-1: media controller created [ 1072.214713][T13256] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1072.315578][T13256] dvb-usb: bulk message failed: -22 (3/0) [ 1072.345502][T13256] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1072.359484][T13256] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1072.368168][T13256] usb 6-1: media controller created [ 1072.377415][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1072.471588][T18237] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2406'. [ 1072.521715][T18237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2406'. [ 1072.531584][T18237] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2406'. [ 1072.795332][T18198] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 [#1] SMP KASAN NOPTI [ 1072.807420][T18198] KASAN: null-ptr-deref in range [0x00000000000000c8-0x00000000000000cf] [ 1072.815845][T18198] CPU: 0 UID: 0 PID: 18198 Comm: syz.5.2401 Not tainted syzkaller #0 PREEMPT(full) [ 1072.825212][T18198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1072.835256][T18198] RIP: 0010:__mutex_lock+0x14d/0x1060 [ 1072.840634][T18198] Code: 08 84 d2 0f 85 2e 0b 00 00 44 8b 15 7d 25 39 0f 45 85 d2 75 29 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 60 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 14 0b 00 00 48 3b 5b 60 0f 85 e8 01 00 00 bf 01 [ 1072.860254][T18198] RSP: 0018:ffffc90004ec77f0 EFLAGS: 00010202 [ 1072.866312][T18198] RAX: dffffc0000000000 RBX: 0000000000000068 RCX: 1ffffffff3512a10 [ 1072.874266][T18198] RDX: 0000000000000019 RSI: ffffffff8d98b1a1 RDI: 00000000000000c8 [ 1072.882315][T18198] RBP: ffffc90004ec7940 R08: ffffffff87b7c2d5 R09: 0000000000000000 [ 1072.890359][T18198] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 1072.898321][T18198] R13: 0000000000000000 R14: 1ffff920009d8f0a R15: ffffffff87b7c2d5 [ 1072.906290][T18198] FS: 00007fbf7c7dd6c0(0000) GS:ffff888124e81000(0000) knlGS:0000000000000000 [ 1072.915235][T18198] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1072.921817][T18198] CR2: 000000110c358e6c CR3: 000000005a3cb000 CR4: 00000000003526f0 [ 1072.929786][T18198] Call Trace: [ 1072.933071][T18198] [ 1072.935996][T18198] ? __mutex_lock+0x1c5/0x1060 [ 1072.940769][T18198] ? __pfx___mutex_lock+0x10/0x10 [ 1072.945795][T18198] ? rcu_is_watching+0x12/0xc0 [ 1072.950558][T18198] ? dvb_usbv2_generic_write+0x25/0x50 [ 1072.956010][T18198] dvb_usbv2_generic_write+0x25/0x50 [ 1072.961288][T18198] mxl111sf_ctrl_msg+0x215/0x300 [ 1072.966242][T18198] mxl111sf_write_reg+0x95/0x170 [ 1072.971172][T18198] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 1072.976737][T18198] mxl111sf_i2c_start+0x6e/0x280 [ 1072.981677][T18198] mxl111sf_i2c_xfer+0x1e9d/0x3be0 [ 1072.986815][T18198] ? i2cdev_ioctl_rdwr+0xcf/0x710 [ 1072.991829][T18198] ? kasan_save_stack+0x42/0x60 [ 1072.997662][T18198] ? kasan_save_stack+0x33/0x60 [ 1073.002636][T18198] ? kasan_save_track+0x14/0x30 [ 1073.007500][T18198] ? i2cdev_ioctl+0x5ff/0x820 [ 1073.012187][T18198] ? do_syscall_64+0xcd/0x4e0 [ 1073.016860][T18198] ? look_up_lock_class+0x6b/0x150 [ 1073.022072][T18198] ? register_lock_class+0x41/0x4c0 [ 1073.027270][T18198] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 1073.032809][T18198] ? look_up_lock_class+0x59/0x150 [ 1073.037924][T18198] ? __lock_acquire+0xb97/0x1ce0 [ 1073.042863][T18198] ? __lock_acquire+0xb97/0x1ce0 [ 1073.047791][T18198] __i2c_transfer+0x6b3/0x2190 [ 1073.052544][T18198] ? lockdep_hardirqs_on+0x7c/0x110 [ 1073.057727][T18198] ? __pfx___i2c_transfer+0x10/0x10 [ 1073.062939][T18198] ? rt_mutex_slowtrylock+0xc9/0x100 [ 1073.068231][T18198] i2c_transfer+0x1da/0x380 [ 1073.072734][T18198] i2cdev_ioctl_rdwr+0x373/0x710 [ 1073.077672][T18198] i2cdev_ioctl+0x5ff/0x820 [ 1073.082187][T18198] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1073.087213][T18198] ? selinux_file_ioctl+0x180/0x270 [ 1073.092405][T18198] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1073.097430][T18198] __x64_sys_ioctl+0x18e/0x210 [ 1073.102207][T18198] do_syscall_64+0xcd/0x4e0 [ 1073.106705][T18198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1073.112637][T18198] RIP: 0033:0x7fbf7b98eec9 [ 1073.117049][T18198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1073.136830][T18198] RSP: 002b:00007fbf7c7dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1073.145237][T18198] RAX: ffffffffffffffda RBX: 00007fbf7bbe5fa0 RCX: 00007fbf7b98eec9 [ 1073.153207][T18198] RDX: 0000200000000440 RSI: 0000000000000707 RDI: 000000000000000c [ 1073.161161][T18198] RBP: 00007fbf7ba11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1073.169114][T18198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1073.177071][T18198] R13: 00007fbf7bbe6038 R14: 00007fbf7bbe5fa0 R15: 00007ffc36c2d528 [ 1073.185071][T18198] [ 1073.188074][T18198] Modules linked in: [ 1073.192353][T18198] ---[ end trace 0000000000000000 ]--- [ 1073.205927][T18198] RIP: 0010:__mutex_lock+0x14d/0x1060 [ 1073.211483][T18198] Code: 08 84 d2 0f 85 2e 0b 00 00 44 8b 15 7d 25 39 0f 45 85 d2 75 29 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 60 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 14 0b 00 00 48 3b 5b 60 0f 85 e8 01 00 00 bf 01 [ 1073.231667][T18198] RSP: 0018:ffffc90004ec77f0 EFLAGS: 00010202 [ 1073.232098][ T44] usb 5-1: selecting invalid altsetting 2 [ 1073.233378][T13256] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1073.238240][ T44] set interface failed [ 1073.253380][T13256] dvb-usb: bulk message failed: -22 (6/0) [ 1073.301376][T18198] [ 1073.303864][T13256] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1073.311362][T18198] RAX: dffffc0000000000 RBX: 0000000000000068 RCX: 1ffffffff3512a10 [ 1073.319805][T18198] RDX: 0000000000000019 RSI: ffffffff8d98b1a1 RDI: 00000000000000c8 [ 1073.329888][T18198] RBP: ffffc90004ec7940 R08: ffffffff87b7c2d5 R09: 0000000000000000 [ 1073.339030][T13256] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input19 [ 1073.350360][T18198] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 1073.359177][T13256] dvb-usb: schedule remote query interval to 150 msecs. [ 1073.359812][T18198] R13: 0000000000000000 R14: 1ffff920009d8f0a R15: ffffffff87b7c2d5 [ 1073.366419][T13256] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1073.382487][T18198] FS: 00007fbf7c7dd6c0(0000) GS:ffff888124f81000(0000) knlGS:0000000000000000 [ 1073.391500][T18198] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1073.398254][T18198] CR2: 000000110c456475 CR3: 000000005a3cb000 CR4: 00000000003526f0 [ 1073.406311][T18198] Kernel panic - not syncing: Fatal exception [ 1073.412595][T18198] Kernel Offset: disabled [ 1073.416892][T18198] Rebooting in 86400 seconds..