last executing test programs: 7m15.770399901s ago: executing program 0 (id=2350): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e5cf01406e0510401c20000000010902120001000000000904"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b000000080000000c100000ffffffff010000b52835b3e5284fa890c365f30dcaf48f", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}}, 0x40000) sendmmsg$inet(r1, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000001980)="d527cf11805d55533beee663b219fc6742ceda12c4ba069e5d711c602617720ced4aeef3c627ec8ad698db10e3f3dbd3712fbe8eb20ba74f94971ff02659784db4600a1b79ec37b13575abaf52a8afe4"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 7m13.04365786s ago: executing program 0 (id=2365): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x5d, 0x35, 0xb9, 0x40, 0x582, 0x8d, 0x7aac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x95, 0x9e, 0xc8}}]}}]}}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_connect$cdc_ncm(0x1, 0x74, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x8, 0x10, 0xd2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "a05e5b8a6d35"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x1, 0x8, 0x4d}, {0x6, 0x24, 0x1a, 0x200}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0x72, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0x5, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x4, 0xa3, 0x1}}}}}}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x51, 0x9a, 0x8, 0x0, 0xff, 0x9}, 0x106, &(0x7f0000000300)={0x5, 0xf, 0x106, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0x2, 0x2d, 0x4, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "a5d2263fbc7d7f9b771c36fc99cc7503"}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x1, 0xf000, 0x88, [0x30, 0xff, 0xf, 0xc000, 0xff00c0, 0xff00]}, @generic={0xbb, 0x10, 0x3, "9aac308cecf8a969536ecdc63faae7cad06f8ac73934fda1b84fe2b8edb8590aef8527ef29a930027e493774d853bc2f5f078ad28523ee408f664bb485e821968cfc85ce655dfd22a7c14f241fcb34a8c49987719de2624402b6f88f90be638b829eb324b7dbf86d08204ff56d5c9d89acaabd41fe0635b6477d51200c677d37ab4e7c772e58586e23ba3165ad93771598a1234f6566a602111c47df77025306929b51b0a17e635a70982d615b8832a9b13217f719827dd1"}, @ptm_cap={0x3}]}, 0x8, [{0xd, &(0x7f0000000900)=@string={0xd, 0x3, "5e0490f56a95ed6f0cdaba"}}, {0x5e, &(0x7f0000000200)=@string={0x5e, 0x3, "a1b944f6c3e1f034b27d03258dc440963f37cbabb70e42ec011549569e1fa38c32c4629a3a63754ef6beaa1d03cd5a90175f50d5bc83303edfbbaf8c56b5ff34c7bb0b2367f3ded748d93c2197a49e8dcd782edbfa69799c79f0ee06"}}, {0xed, &(0x7f0000000440)=@string={0xed, 0x3, "1db11bc8d8b5898e16b5945dba7df6f6a68161b997677891b6a383d5f4b9c7ea28713afa9fc0ad266b7ddf307477d75847741057b1733927b6ea17dca45c1f9ef22df9cba58ae67f71e11784c2f02cf7cbb2ad83a1c46ddf67ce354606ace10b5cecfbf9f0c6121a9e30b2bd2783204a23bb602ba57143e7f1b05f99b26ecb279920e93b318ed6c6d132319bcf51a7b3baf6f45a6c34132254b030873798573990438e853d86bb48fc6807c2aca578d8e42aed0a74a37b7ca4bdd879046bb890f6de188608f0a86d7b50ae29911ae8c1d89689d9f6e1f4ea6edae11a9d9ad094b2ecee9fd1c3ffb55c089b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x449}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x1002}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x28}}, {0x4, &(0x7f0000000600)=@lang_id={0xffffffffffffff3a, 0x3, 0xc8088cb008f78d5}}]}) syz_usb_connect$printer(0x3, 0x2d, &(0x7f00000006c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6, 0x40, 0xf, [{{0x9, 0x4, 0x0, 0xf, 0x1, 0x7, 0x1, 0x1, 0x81, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0xd, 0x40, 0xd1}}}}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x201, 0x5, 0x81, 0x81, 0x8, 0x98}, 0x45, &(0x7f0000000800)={0x5, 0xf, 0x45, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "edc8359e8defd8c0dfa649ed3880a7b7"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x1, 0xe, 0xeb82}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0x0, 0x4834}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "9b9c848d095c8ebd37c11c47b80caa95"}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0xd, 0x5, 0x8}]}, 0x2, [{0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x4001}}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2, 0x0, 0x3}, 0x18) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x8971, &(0x7f0000000040)={'dummy0\x00', @ifru_mtu=0x6}) syz_usb_control_io$hid(r1, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r4) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@gettclass={0x24, 0x2a, 0x100, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4, 0xffe0}, {0x4, 0x1}, {0x1, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r6, 0x4b3a, 0x2) 7m10.001996129s ago: executing program 0 (id=2376): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = fanotify_init(0x8, 0x80000) fanotify_mark(r6, 0x105, 0x4800003a, r5, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000340)={{0xfffffff7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x8}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000a40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x80001}, 0x6, 0x100, 0x2, 0x0, 0x0, 0x7, 'syz0\x00', 0x0}) mkdir(0x0, 0x13b) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Cap'], 0x86) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) 7m8.543390732s ago: executing program 0 (id=2380): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) io_setup(0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x3, &(0x7f0000000480)=[{0x48, 0x0, 0x60, 0xc68}, {0x1, 0x7, 0x1, 0x4}, {0x0, 0x8, 0x9, 0x580}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) syz_open_procfs$namespace(r2, &(0x7f0000000240)='ns/pid_for_children\x00') r3 = openat$cachefiles(0xffffff9c, &(0x7f0000000000), 0x8000, 0x0) sendmmsg$alg(r3, &(0x7f0000000b40)=[{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000002c0)="9c284e5d7d81334455c56361c4e4960b08184a76755ac09cd88a4d63bbc3ab275893f29f7fbb42f8d1634d565d75f621235cbb3e90bbebb5c1a19b771ea5f16fba5ed84efd78b6b626d4900707b4e19602aba873e36ec4ad3b3c25fe56733f77623757ad5577adb0c4d526a5db88a7e65b7af3c41d64401669444fbf258a6c72eea3045027dd9600e0623972f830e6533cdc7a86881b26f471579162e9b595cd19b4bc561702e8e805efca5b25555dfbb4f6c58fe0de1d02cbb80fcd843952edd3e3bc4bac9cd34cb307148ddccda3905752858c8c687d9d71c08b1df33b39537ca89e76", 0xe4}, {&(0x7f0000000600)="d7d4fc90bc6d5463482db7e97d5e8cec2145f86f90fcd13ff76e3ec44a3fdb1abd7e4bd0cec21340dce5542e73e8cb1f15728a552d5d036c49e0b611c3ba3e828b1e362d9f95647ac99c38b546fb9f3e3d9ae9aec34195efd4a83f17b69e7c71973164150fe31467cfed1faefc6cbdee81111bd189c12f96c9ed05505a76f1555a7d0e3c7203d299d44fca2436c0e60a4f0b154a", 0x94}, {&(0x7f0000000400)="1b712f7a6c67b34ff5101d7aa5f60514aa683a70a5eed42095832dd53d080d746357129ce5c8594060cb9919f5fd83", 0x2f}, {&(0x7f0000000700)="143cdb6620b6f37950ad170cbc983032d869bcef98e97222f9e5964a978e49f6e9351ce55a2ed4c31cbef07e8d8086275b0a12ea36bf39962087bdd9388dbd7173d10694b9f6378a52521056c322681f417be8a5", 0x54}, {&(0x7f0000000780)="b1e4f4bdcb3033abedaeb82bc948be433c0994a9ef40a5d348011b7616447b66d3c0d0a6360a881a032beb5c1d08f37b72caddc3983a14dcc0", 0x39}, {&(0x7f00000007c0)="a4b0a10d130d071b1e6f938db4268c2d1694039bed5104b8c50c80956c760df01eb912eb90161a28c5246788cb5e768557b79a86474db8ba41263d62ba6f5da60b684c50f435e4474cf1c4f94a34bd0f37846ededa13e76653427afac18d6e362bc562fac0b1a0f69aa167e165549723fe08a376741c715d4e4c068dc775e169846020e05deac1e71b7c840bb81b6976921cd686b734ae7f5bc074eb520eed8cb392ce5d6b7b897efab656d5ab2176b51bdca4d69e278495c0d23c8156c080f1a6bb3dec0457f7c1e444", 0xca}], 0x6, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000c000}], 0x2, 0x20000000) r4 = syz_genetlink_get_family_id$fou(0x0, r3) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x40, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4081) 7m8.093514951s ago: executing program 0 (id=2382): setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000000c0)={0x4, 0x2, 0x0, "7839aa019a502be2356f76ef7a597b3a2929aaa932145364f439ee19c6c457ff", 0x50424752}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b3c094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) fallocate(r2, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0xfffff000) 7m6.590222161s ago: executing program 0 (id=2390): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000000b0601020000000000000000030000000900020073797a300000000005000100070000002400"], 0x4c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@ipv6_getaddrlabel={0x24, 0x4a, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, r5, 0x0, 0x5, 0x2000001}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)={0x20, 0x1, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x10) 6m51.520507186s ago: executing program 32 (id=2390): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000000b0601020000000000000000030000000900020073797a300000000005000100070000002400"], 0x4c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@ipv6_getaddrlabel={0x24, 0x4a, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, r5, 0x0, 0x5, 0x2000001}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)={0x20, 0x1, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x10) 4m31.889893152s ago: executing program 3 (id=2856): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, r4, 0x0, 0x5, 0x2000001}}, {0x0, 0x13}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)={0x20, 0x1, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x10) 4m30.695784879s ago: executing program 3 (id=2858): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = dup3(r2, r1, 0x0) syz_create_resource$binfmt(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], &(0x7f0000001f80)=""/212, 0x1a, 0xd4, 0xa}, 0x28) syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f00000002c0)={{0xa, 0x4e24, 0x7, @mcast2, 0x80000000}, {0xa, 0x4e21, 0x3, @local, 0x40e}, 0x1, {[0xce8, 0x6, 0x6, 0x1, 0x10000, 0x3, 0xfffff258, 0xf85]}}, 0x5c) r8 = socket$inet_udplite(0x2, 0x2, 0x88) syz_init_net_socket$x25(0x9, 0x5, 0x0) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$kcm(0x11, 0x3, 0x0) getsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000040)={@broadcast, @multicast2}, &(0x7f0000000200)=0xc) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000440)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)}], 0x1}, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone3(&(0x7f0000000400)={0x3a22a8400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @bcast, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_tracing={0x1a, 0x18, &(0x7f00000009c0)=ANY=[@ANYRESHEX=r9, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000186b000002000000000000000800000018390000030000000000000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095000000000000", @ANYRESHEX], &(0x7f00000008c0)='syzkaller\x00', 0x3, 0x2f, &(0x7f0000000640)=""/47, 0x41000, 0x64, '\x00', r5, 0x19, r7, 0x8, &(0x7f0000000680)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x0, 0x5, 0x6, 0x2}, 0x10, 0x1307c, r0, 0x0, &(0x7f0000000880)=[r3], &(0x7f0000000340), 0x10, 0xffffffff}, 0x94) ioctl$sock_rose_SIOCADDRT(r9, 0x890b, &(0x7f0000000540)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) 4m29.958570217s ago: executing program 3 (id=2859): fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x103000, 0x8d) open$dir(&(0x7f0000000000)='./file1\x00', 0x80, 0x1c9) r0 = socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x80140, 0x0) ioctl$TIOCGISO7816(r2, 0x80285442, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)}}], 0x1, 0x34000, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x10, 0x3, 0x0) close(0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x198, 0x4c, 0x1a, 0x198, 0x73, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x168, 0x198, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xc}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev, [], [0x0, 0x0, 0xffffff00]}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x0, 0x7}}}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, 0x0, &(0x7f0000000340), &(0x7f0000000380), 0x0) pread64(0xffffffffffffffff, &(0x7f0000001440)=""/126, 0x7e, 0x40) 4m27.35344321s ago: executing program 3 (id=2865): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0xb1, 0x700) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) (fail_nth: 3) 4m26.369912079s ago: executing program 3 (id=2867): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xf, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000001140), 0x92e2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3010}) bind$llc(0xffffffffffffffff, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x80042, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r4, 0x0) r5 = dup(r3) write$UHID_INPUT(r5, &(0x7f0000001c00)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0xfffffe38) 4m24.538843727s ago: executing program 3 (id=2872): syz_usb_connect(0x3, 0x2d, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000061c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da09"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x80000, 0x0) ioctl$COMEDI_SUBDINFO(r3, 0x80486402, &(0x7f0000000040)) r4 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000006c0)=""/188, 0xbc}], 0x1}, 0x7}], 0x1, 0x10000, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001e40)=@newtfilter={0x3c, 0x2c, 0x20, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0xf}, {0xfff1, 0x2}, {0x7, 0xffe0}}, [@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6, 0x2, 0xff69}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000000), &(0x7f0000000280)) io_uring_enter(r5, 0x3517, 0xc2de, 0x9, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x8, &(0x7f0000000340)={[{@uuid_off}]}) openat$mice(0xffffffffffffff9c, &(0x7f0000000880), 0x41) 4m23.979271196s ago: executing program 33 (id=2872): syz_usb_connect(0x3, 0x2d, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000061c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da09"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x80000, 0x0) ioctl$COMEDI_SUBDINFO(r3, 0x80486402, &(0x7f0000000040)) r4 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000006c0)=""/188, 0xbc}], 0x1}, 0x7}], 0x1, 0x10000, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001e40)=@newtfilter={0x3c, 0x2c, 0x20, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0xf}, {0xfff1, 0x2}, {0x7, 0xffe0}}, [@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6, 0x2, 0xff69}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000000), &(0x7f0000000280)) io_uring_enter(r5, 0x3517, 0xc2de, 0x9, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x8, &(0x7f0000000340)={[{@uuid_off}]}) openat$mice(0xffffffffffffff9c, &(0x7f0000000880), 0x41) 4m16.74059932s ago: executing program 2 (id=2892): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0xfffffff7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x8}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000a40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x80001}, 0x6, 0x100, 0x2, 0x0, 0x0, 0x7, 'syz0\x00', 0x0}) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Cap'], 0x86) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) 4m15.424510554s ago: executing program 2 (id=2896): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0xfffffff7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x8}) 4m14.427935457s ago: executing program 2 (id=2898): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\a\x00\x00\x00'], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000", @ANYBLOB="0000000000000000b70300000003"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r3}, 0x18) r4 = inotify_init1(0x0) r5 = inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x10000a0) r6 = dup(r4) inotify_rm_watch(r6, r5) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x2b1e}, 0x4040010) 4m13.528943788s ago: executing program 2 (id=2900): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000280)=0x20000, 0x4) (async) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) (rerun: 32) syz_usb_control_io(r2, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$uac1(r2, 0x0, 0x0) (rerun: 32) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async, rerun: 64) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x4, r3}, 0x10) (async, rerun: 32) r4 = syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2) (rerun: 32) ioctl$VIDIOC_G_TUNER(r4, 0xc054561d, &(0x7f0000000300)={0x7f, "49c48f11a62712fbb952600624bd378603ee398a164351b01e13832c42da8608", 0x3, 0x100, 0x19cf, 0x400, 0x4, 0x4, 0x2}) (async) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f00000000c0)={0x7, 0x42474752, 0x4, 0x2, 0x2, @discrete={0x9, 0xa}}) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 64) lsm_set_self_attr(0x64, &(0x7f0000000480)=ANY=[], 0x24, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 4m11.653067661s ago: executing program 2 (id=2907): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000008c0)="760100000000000000cd2a7ff24b44fd2822797661426b18b0cc36000000000000000000000000000000000000000000001c00706620c69026bcd7000000000000000000", 0x44}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r3) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x10) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000280), &(0x7f0000000300)=[r4], &(0x7f0000000340)}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0xff, 0x1, 0x3, 0x1, 0x4}, 0x8) 4m11.165639398s ago: executing program 2 (id=2908): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r1 = socket$kcm(0x29, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r2, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_gettime(r2, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902240001000000000904000002437d67000905fc57d4"], 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r4, 0x80045700, &(0x7f0000000040)) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80}, [@ldst={0x0, 0x2, 0x6, 0x0, 0x9, 0x2, 0xffffffffffffffff}, @generic={0xab, 0x1, 0x3, 0x3, 0x1}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000300)='syzkaller\x00', 0x3ff, 0x65, &(0x7f0000000340)=""/101, 0x41000, 0x18, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000003c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x5, 0x6, 0x7}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000480)=[0x1, 0xffffffffffffffff], &(0x7f0000000500)=[{0x2, 0x4, 0x10, 0x7}, {0x1, 0x5, 0xb, 0x9}, {0x1, 0x2, 0x8, 0xb}, {0x5, 0x1, 0xf, 0x2}, {0x3, 0x3, 0xc}], 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000200)='hugepage_set_pmd\x00', r5, 0x0, 0x1}, 0x18) userfaultfd(0x80801) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x7, 0x6, 0x8c}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m56.144662269s ago: executing program 34 (id=2908): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r1 = socket$kcm(0x29, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r2, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_gettime(r2, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902240001000000000904000002437d67000905fc57d4"], 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r4, 0x80045700, &(0x7f0000000040)) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80}, [@ldst={0x0, 0x2, 0x6, 0x0, 0x9, 0x2, 0xffffffffffffffff}, @generic={0xab, 0x1, 0x3, 0x3, 0x1}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000300)='syzkaller\x00', 0x3ff, 0x65, &(0x7f0000000340)=""/101, 0x41000, 0x18, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000003c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x5, 0x6, 0x7}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000480)=[0x1, 0xffffffffffffffff], &(0x7f0000000500)=[{0x2, 0x4, 0x10, 0x7}, {0x1, 0x5, 0xb, 0x9}, {0x1, 0x2, 0x8, 0xb}, {0x5, 0x1, 0xf, 0x2}, {0x3, 0x3, 0xc}], 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000200)='hugepage_set_pmd\x00', r5, 0x0, 0x1}, 0x18) userfaultfd(0x80801) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x7, 0x6, 0x8c}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.399947784s ago: executing program 4 (id=3643): syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x4b84c2, 0x0) sendfile(r2, r1, &(0x7f00000002c0)=0xb, 0x8) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="180000003c000bab956cb26f8c7d94f90324fc602f000000", 0x18}], 0x1}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x63, @loopback, 0x7}, 0x1c) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6, @local}, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x4) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000240)=0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r6, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @multicast1}}, 0xa, 0x0, 0xdd3, 0x7ff, 0x38fa8b00d923ddd5}, 0x9c) syz_usb_connect(0x2, 0x9a2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000340), 0x7, 0x402c00) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000000040)=""/185) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x0) 7.050635296s ago: executing program 4 (id=3653): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) syz_io_uring_setup(0x497, 0x0, &(0x7f0000000140)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x890}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0xffff, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x8000003, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x7, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x4, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x8) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$cec(&(0x7f0000000400), 0x0, 0x80200) socket(0x1e, 0x4, 0x0) 6.207361642s ago: executing program 1 (id=3660): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x68}}, 0x0) 5.985404373s ago: executing program 1 (id=3661): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000000b0601020000000000000000030000000900020073797a300000000005000100070000002400"], 0x4c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@ipv6_getaddrlabel={0x24, 0x4a, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, r5, 0x0, 0x5, 0x2000001}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)={0x20, 0x1, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x10) 4.697511936s ago: executing program 5 (id=3663): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010003b7000008ac054e024000010203010902240001"], 0x0) syz_usb_connect$uac1(0x0, 0x9f, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0x4, 0x0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x800, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xb7, 0x2, 0x80, {0x7, 0x25, 0x1, 0x0, 0x2, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xf5, 0x4, 0xb1, 0x5, "2b6b80e59a"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x3, 0x2, 0x8, "", "de1bdc"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x10, 0x1, 0x7, 0x2, "9b77"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x5, 0x8, 0x1, "494996"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x7, 0x9, {0x7, 0x25, 0x1, 0x0, 0x8, 0x1}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x2, 0x0, 0xc0, 0x10, 0x3}, 0x141, &(0x7f0000000640)={0x5, 0xf, 0x141, 0x5, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "ab69d4e16b593abf4aaf8c824979e767"}, @ssp_cap={0x24, 0x10, 0xa, 0x6, 0x6, 0x7fffffb, 0x0, 0x4, [0x0, 0xc000, 0x30, 0x3f30, 0x0, 0x3f30]}, @generic={0xed, 0x10, 0xa, "65acc508fe6fea79b0431a743d6cd40e8c414c3eb5914b5fd1a8b9c2ed5e6defb218c5c9984a33e905ecf0d64d88a590a9ec5e94be1ae729c38f8680301da9680270fc305d9a58dc502e3c3599b828b64fff4f84da5b28f0df2ae66b1a0c409427565c544a6f07f0c39921735a6318bbb65f1537ce81f99c506a315634b8b3852f11a5a5260fe191dcc492e0d25f4388cdd896ffec6a97d711eab92662840afa5ac42808b5f22ef0de0c545a8fa9ccaa3f05b95969e4b3d582a7b57f21262193f45aeaffdf818a85e31b0eefa6cdd3bc27bbc73b765895c0803323b26f4f171d5bf56956ab9d5c84134b"}, @ssp_cap={0x14, 0x10, 0xa, 0x9, 0x2, 0x1ff, 0x0, 0x16, [0x0, 0x30]}]}, 0x9, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x42b}}, {0x3b, &(0x7f0000000200)=@string={0x3b, 0x3, "b276e6511508bb4e9556a246db37b802d0cfa0daefbe6d92c364dabda2deedc0619cd2c90883dbe1a73c777b61f8a34183b7bd77577a71ff50"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x421}}, {0x3a, &(0x7f0000000400)=@string={0x3a, 0x3, "3555d6de3e7ed26b00a83cf6165b2c60c4b829fe4db325663dfe8466cf0caab0e3b47b1110f64ec5d4639474ac052bbd335dd4dc9b069f2b"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1004}}, {0x86, &(0x7f00000004c0)=@string={0x86, 0x3, "21acdd58d1211860a070992a7ad55fa54eb38f6abeeabaa50cf3a058fc1e195c0f2e150c4bd6df3e935a912ddbdc20b0d1d5e30f48d4551549ea0d0b424bdd3c36d58c989efdcd8459b5d265eb4868c3294394e78ccf5c3bab259d59d39b224deecfcf828eed5f8bc861714169fac0a14c3d4f73be14f4084ea8a1e725f1686fd9e08c71"}}, {0x12, &(0x7f0000000580)=@string={0x12, 0x3, "7b389ce0033ad28a8330d314ecc175d0"}}, {0xad, &(0x7f00000007c0)=@string={0xad, 0x3, "27eeb41ea661ad4ca915c83fc2cf825cfa1a9935033add272701a2b16d306dbb71efae6c2465f784d5c715ae65ae3471ef18c43cab6d8484c572d4414a45314cb58f7686f243cf529b924380b7356e406934ab2fb95f5136d194f20e05e17cec6f926d94c3bdef2a3fee6ea2e39fe64305ba992eed7180287d6caa0f7889ee13f6d3ffb1cc4b201e00f2748eec3ca8674f7090c7e29b3c5c7c8565a33b230aa06e018230196cdd206a5502"}}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x80) ioctl$MEDIA_IOC_DEVICE_INFO(r3, 0xc1007c00, &(0x7f0000000300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f00000004c0), &(0x7f0000001c40)=r4}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x3c) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) userfaultfd(0x80801) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r8}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSETELEM={0x1a64, 0xc, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1a50, 0x3, 0x0, 0x1, [{0x5b0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1a0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x86, 0x1, "2c8e7d32a28412cdd8b355e0da4b3b591d3946abc1d06a213ba86bd40f066d707abec20cb26ca05da42186372019798c95b7c43d2d3dad1adef249bb3dc843a3e12434f0ba4852da61b0e6ad3f5bf4df53803df11b4bdbe8a634c049da1217aacb7d38f75d6fe3c4ff0645788a5d08be05acd43c1ae3f91700597129647483063cd8"}, @NFTA_DATA_VALUE={0xb7, 0x1, "d632881fa366c180399d205de260808716a870a0f1f0326acef95667744a9c89d0445c47b5b20fb0bb9a036cac26b17c13b2a70bc2c646d3765d99a49deb76e23dcd29e23795a945e7d690f5d760d085213c3957276bb8fd78c7d34535da842b2959e0f09026198cb380ad45954bf16bc195a79985e6c2fee8c30518ef2f9227418e3d6d22f34c93db002aa0809054e25067a0b46ba3adac9b8633074c0d0eb994f9bd60dd5eaf0f58a0b02b7c8b4d2cceaf45"}, @NFTA_DATA_VALUE={0x2c, 0x1, "76baff0fb7c1deeef3df0a310e183eca36555cde6e67f93c0ffc90c3079bb6afd5dd380bb581df22"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x6c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x30, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xf}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0xf1, 0x6, 0x1, 0x0, "82684146b70b9e97077a4b4593da9a71d0adb24a3406d1f2b4f8ce6fbf31a6c22cbba3db4203a2666820c624c7822505b67b7b42efa44645c8507912d7ed99a3bf0b3cb693281fc62f749a905c06ee72c0f9c5465cb444d69bafd24ae3876c6ed8a2c04ea210c34c00da2731279044cd4768f7e1f13c40ac91efd7dcfe61b8f0f5809e0876d6bc878d586beeb9ed3f439e46ea16876a8029b12eaa34b82ca02432774b0102f9fe98cf401affdedc97f2805edf4b898ddcc3dd53c47fa5c63af9f399f9d56d76376da7b1b8544b8ecab484424435dda7df668c37f9f93ee25a9f24ddf8ec215d54f760bc3f99fb"}, @NFTA_SET_ELEM_KEY={0x1c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffff4}, @NFTA_SET_ELEM_DATA={0x284, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x5e, 0x1, "d8fbb11a8399bfbb94b593a8045bd1598f5224406f8f4a585ccd0d69fb95ac52db1375c6837e2078e4cbd56560760540173bbe5178a61f04c0aae9b96e1f058e1038c876da7e3535b90de26f2f74f191f0e1c95252896dfc1a7d"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x8b, 0x1, "02c2e0e8f178d97228171ca7ce47dc3d4eb282caebc06d16cc1b5b7510d62ba5ae564c98bbc98ffc3518d06904ed2e2a5111e5d1d6f1a7769a04ab4f94bee731d70cc6e3d9d59758794fc8be80bbad426100ac4819fad92e76780ee204112c7eafd11fd5a53ad2326fa4484428d43de4c06c44889a518f855352489337137d639f2d9aa0ae5ebf"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x84, 0x1, "648ff9397511ba03c695231c33fd05f3bff6e8c9b84bf823da5659f3f265979b455a891cd250c31709ba2ad24ca4f4eab3a49ceb18cdd4f38330ba725091c49da3c122c0722bd92d7b1a55f8c6573268224fbc4b60b460d437f69b2adf7e92d08c3b05d9b8101e2ba88ad4df4239ca3635d82eb99f7f2913852de8cb9f0b99b8"}, @NFTA_DATA_VALUE={0xc1, 0x1, "2f8bf22f5bda9849152dd44b6a9175341b8512d42613357eb5225814074ad844b1bb910f83059cdb2ec6a5d0810c09e834d00a5fb21af0963655e7ba3fdf9bf8ccefdc70266dbf58d43cb308d69e0a02ec25088d7d56f3267dfd6ffdc86b1873c2674baa14d14b88c335ade8b7140c6a84fd8292006a9e58329c7d0a9a192371e348a00c071cec4ab432dd9732e659b6f7a941222621a8d90dfdd0ae6dd2a7452f39ffbc4aa822efbadb307acfc676aa4c75328d54ea8ee1598893b700"}]}]}, {0x1458, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x81}, @NFTA_SET_ELEM_EXPRESSIONS={0xd0, 0xb, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_LAST_MSECS={0xc}]}}}, {0x4, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x38, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}, {0x28, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xc3}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}, {0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_DATA={0x1008, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_DATA={0x130, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x89, 0x1, "7e182c5e9ce953e81eaf1988cdcb2c41b1918bb9e23a32ffa8e6214895c7f5457357c192cd88439d6b57de7b70eedfaf797f2623cfe5bb79f878d5cf61156267ded996810feea6091bc6982111c7888273ddc7d88e17ba6707e8bb802cd48ee85070000c78dd0fd5247ea04e5469141e42fb309d8461ea4b87d050a80d6e489574918b23df"}, @NFTA_DATA_VERDICT={0x1a, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x1b, 0x1, "640f8c8adf92e90c8b11b0ddc07d64138a8edd6bd81514"}, @NFTA_DATA_VALUE={0x60, 0x1, "2160b0e0cafbf2376576232f7178f39ab5994bbbd1ad390d5e86b4387d765b8bc172761291933bf432b22feb536ca0dac65dbf8086543ddd32685a3efe7207822370d135b0f10f4178f6af68d1f9d397070418e5bb36e236f188fbfc"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xe0, 0xb, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x1d}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x400}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0xcce5}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_HASH_TYPE={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}, {0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0x95}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}, @NFTA_SET_ELEM_KEY={0xd0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5b, 0x1, "e760f47d5459c997f3d7fd98a3a55f6ea8bc42373905c5bad00048fd5825307aab3e5ce03ff75b9f6544bd6f87034e338ad27109a9dd0747e33cb5b7a5c02d111fa66b68a2fcf0388c87c5a04fbce094fdd4ecd7f5ee8d"}, @NFTA_DATA_VALUE={0x6e, 0x1, "6cd2ff2d5d75621f7a77c2b5bb5743756d2abfe08ba99bb57f2227d1dd31471fd0104f5277250404da3bdb0bc03915c06ad2a632054c9b2a948108696bf8ab6104c96d2d9ed69dad0c2fd0e52a48c2076d25770d8a9b3a7c681e3718544f79fb6b8dce9c08f89671be8a"}]}, @NFTA_SET_ELEM_KEY_END={0x84, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x15, 0x1, "e9323cf652ff3e0232a14a20d018132d23"}, @NFTA_DATA_VALUE={0x5e, 0x1, "77683793c120223c0ac15fce5022fbe2c36003f7879803233b0c1451ecb1ebe1c59a4d44bc295064236b5dca01c02051c3c3e458a4dd8c59ae36e6addebfc9ebbdaad071b3cb6243b3686070943bb33b059b156dbe066c263098"}]}]}, {0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xb6}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1a8c}, 0x1, 0x0, 0x0, 0x400c0d0}, 0x0) 4.165172542s ago: executing program 1 (id=3664): syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x0, 0x8, 0x8006, 0x359}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000005c0)={0x4000000, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e20, 0x3, 'lc\x00', 0x2, 0x3, 0x4e}, {@private=0xa010102, 0x4e20, 0x2, 0xa, 0x80012d58, 0x12d5c}}, 0x44) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000580)={{0x0, @multicast2, 0x4e23, 0x7, 'sed\x00', 0x6, 0x3, 0x3c}, {@loopback, 0xce00, 0x10000, 0xa, 0x80812f58, 0x12d5c}}, 0x44) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r7, 0xc0cc5615, &(0x7f00000029c0)={0x2, @output={0x1000, 0x1, {0x8, 0x8}, 0x3, 0x7}}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r6, &(0x7f00000001c0)={0x2c, 0x8, r8, 0x1000000}, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r9, 0x101, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3.46817651s ago: executing program 1 (id=3665): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x2c0800, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) (fail_nth: 2) 3.176262882s ago: executing program 4 (id=3669): syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) fcntl$setown(r1, 0x8, 0xffffffffffffffff) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) syz_emit_ethernet(0x3e, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0x3, 0x8, 0x2, 0xc, 0xfffffffffffffffc, 0x3}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x400d, 0x4, 0x2, 0x466}, 0x0, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='devpts\x00', 0x2200892, 0x0) 3.01033464s ago: executing program 1 (id=3670): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(0xffffffffffffffff, 0x40044103, &(0x7f0000000080)=0x5) mremap(&(0x7f00005a9000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000292000/0x4000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x22020400) fallocate(0xffffffffffffffff, 0x28, 0x2, 0x5) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r5, 0x24, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000380)={{r3}, 0x0, 0x4, @unused=[0x2, 0x0, 0x3], @subvolid=0x9}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x300, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) syz_open_dev$sndctrl(&(0x7f0000000040), 0xddcd, 0xc4000) io_submit(0x0, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 3.009955069s ago: executing program 4 (id=3671): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x57e, 0x2019, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.log\x00', 0x4000, 0x30) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x0, 0x2, 0x2000, 0x2, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x85}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x2000c000) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000040)="81") recvmmsg(0xffffffffffffffff, &(0x7f0000001280)=[{{&(0x7f0000000800)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000880)=""/81, 0x51}, {&(0x7f0000000380)=""/38, 0x26}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000900)=""/26, 0x1a}, {&(0x7f0000000940)=""/174, 0xae}, {&(0x7f0000000a00)=""/142, 0x8e}, {&(0x7f0000000b00)=""/6, 0x6}], 0x7, &(0x7f0000000bc0)=""/93, 0x5d}, 0x9}, {{&(0x7f0000000c40)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000cc0)=""/31, 0x1f}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x2}, 0x7}, {{&(0x7f0000000e00)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000001100)=[{&(0x7f0000000e80)=""/71, 0x47}, {&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f0000000f00)=""/114, 0x72}, {&(0x7f0000000f80)=""/214, 0xd6}, {&(0x7f0000001080)=""/35, 0x23}], 0x5, &(0x7f0000001180)=""/252, 0xfc}, 0x1a33}], 0x3, 0x10001, &(0x7f0000004480)) 2.387737309s ago: executing program 7 (id=3672): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x68}}, 0x0) 2.207674091s ago: executing program 7 (id=3673): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0), 0x4) socket$igmp6(0xa, 0x3, 0x2) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newtaction={0x74, 0x30, 0x9, 0x70bd29, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x8000, 0x0, 0x2}, 0x2}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x6, 0x87}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYRES64=r0], 0x7) socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f00000004c0)=@ethtool_perm_addr={0x20, 0x9, "59a4d28df26eb11df1"}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000079003000000000009500000000000000db74589d4b38cc306ac390649f8edea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475be393b1f1e4aba75a0750472719cc516eec8b02df8ef39db6e67fa14b769e7f385ba72c64242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba7000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/189, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x53) 1.50080478s ago: executing program 7 (id=3675): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0x40, @empty, 0x8011}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) 1.418429724s ago: executing program 7 (id=3676): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) listen(r0, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000d80)=0x101, 0x4) sendto$inet6(r1, &(0x7f0000000000)='X', 0x1, 0x4000000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 989.704914ms ago: executing program 5 (id=3677): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 896.445725ms ago: executing program 5 (id=3678): r0 = open(&(0x7f0000000180)='./bus\x00', 0x4a37e, 0x4) r1 = open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) ftruncate(r1, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8088e3ad122bc192, 0x4002011, r0, 0x1000000) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) 802.412888ms ago: executing program 7 (id=3679): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4, 0x3}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0xe, @ipv4={'\x00', '\xff\xff', @remote}, 0x80000000}, 0x1c) 704.913728ms ago: executing program 7 (id=3681): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000280)=ANY=[@ANYBLOB="50000000080211000001ffffffffffff0802110000000000000000000000000064000100000602020202020201010b"], 0x48) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="10000000080211000001080211000000080211000000200004a000000c0001"], 0x3c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)={0x44, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x52}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x3}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x3}]}, 0x44}}, 0x0) 622.325747ms ago: executing program 6 (id=3682): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, r4, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) 557.396158ms ago: executing program 6 (id=3683): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x2, 0x26168c82f8659dd2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xf5bb, 0xb}}}}]}, 0x40}}, 0x0) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xf}}}}}}}, 0x0) 513.283497ms ago: executing program 5 (id=3684): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v'], 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x4a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaacaaa0086dd60"], 0x0) 322.326805ms ago: executing program 6 (id=3685): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000440)='ext4_fc_commit_stop\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r2, r1, 0x0, 0xdf, &(0x7f0000000680)='~`\xc3!\x00\x88jB\xb6\x0e\xccS\xe4w\xce\xc6\xa9\xb46\xe7\xaf\xef\xf7(\x84\x7f\x11K\xc0\xb8\xaac\x8c\xad\xb7\x9f\xd8\xee3\xd8H\x98p\xb4\xf1\x04\x00\xa2~\xb7\x15\x9a\xcaS#\xf7\x84~\x9f\xfee\x1d\xd3|\x11\x1c\xa8U\xb1\xe6S}\xc5\xcfc\xe0_\x00FI\xa2\x9d\xd2%L\xa3\xb6\xc4\xd6\xe3\nm\xe2\x90\xdc\x8e\xf7&\xd1\xc5s\xd7R\xd1M^\x15\xa5\x7f\xac\xf4\xc1\xf4\xd4k\n\x85\f~x)\"\xacN\xdd\x8fh\x18\xfaB+\xa0>$\xe8~\xa0B\xfdA\xf2\x91&\xa9\xb5<\x98\xdc\x13\x02\xa4\xd0\xac\x9ez\x16}\xf0\xbe\xf5\xf3\xa1}\xd7\xff\xc0\x8c\xb66\xb5O\xa9\xe1\xa9\xf84}\x1e\xbb6]16\xf9\xd7K\xd5\xe5\v\v\xa1X\x00\xfa\xf2*\xc1Z_\xc3\x1f\x88\x1b\xd2\x91\xee\xa7\x9b7(\x99#(\x11\xa0\x99\xd8\xb6\x84\xe4\xf7\xb8\xb4'}, 0x30) 321.692965ms ago: executing program 5 (id=3686): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r7, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 317.082399ms ago: executing program 6 (id=3687): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="300000002000010000000000000000000a0000000000000000000000140011"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) 291.497739ms ago: executing program 4 (id=3688): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0408e200c8001c"], 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c82028002400010007d3040007c4faff020c04000300"], 0x2d) 194.441456ms ago: executing program 4 (id=3689): syz_usb_connect$cdc_ecm(0x3, 0x53, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a1a4400001020301090241000101000000090400000302060000052406000005240000000d240f0101000080ff0f0000000624130198fe09058202000004000309040002"], 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x10000001d, 0x8041) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000000)={0x8ee, 0x1, [{0x0, 0x1}]}) 151.421746ms ago: executing program 6 (id=3690): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') link(&(0x7f0000001240)='./file0\x00', &(0x7f0000000bc0)='./control\x00') 98.129105ms ago: executing program 5 (id=3691): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1000001000104) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 42.282333ms ago: executing program 6 (id=3692): r0 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r4, &(0x7f0000000240)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x1, @null}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=3693): mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r1, 0x0) r2 = getpgid(r1) setpgid(0x0, r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) chroot(&(0x7f0000000080)='./file1\x00') ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, 0x0) kernel console output (not intermixed with test programs): [T18567] sock_alloc_send_pskb+0x7fb/0x990 [ 1194.512915][T18567] ? _copy_from_iter+0x15d/0x16f0 [ 1194.512939][T18567] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1194.512968][T18567] ? _kstrtoull+0x145/0x200 [ 1194.512989][T18567] ? __pfx__kstrtoull+0x10/0x10 [ 1194.513010][T18567] ? iov_iter_advance+0x7d/0x6c0 [ 1194.513030][T18567] tun_get_user+0x502/0x3b80 [ 1194.513059][T18567] ? __pfx_tun_get_user+0x10/0x10 [ 1194.513077][T18567] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1194.513100][T18567] ? find_held_lock+0x2b/0x80 [ 1194.513123][T18567] ? tun_get+0x191/0x370 [ 1194.513145][T18567] tun_chr_write_iter+0xdc/0x210 [ 1194.513165][T18567] vfs_write+0x6c4/0x1150 [ 1194.513189][T18567] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1194.513209][T18567] ? __pfx_vfs_write+0x10/0x10 [ 1194.513232][T18567] ? find_held_lock+0x2b/0x80 [ 1194.513268][T18567] ksys_write+0x12a/0x250 [ 1194.513291][T18567] ? __pfx_ksys_write+0x10/0x10 [ 1194.513318][T18567] do_syscall_64+0xcd/0x4c0 [ 1194.513331][T18567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.513342][T18567] RIP: 0033:0x7f1152d8e9a9 [ 1194.513352][T18567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1194.513363][T18567] RSP: 002b:00007f1153b6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1194.513373][T18567] RAX: ffffffffffffffda RBX: 00007f1152fb5fa0 RCX: 00007f1152d8e9a9 [ 1194.513380][T18567] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000003 [ 1194.513387][T18567] RBP: 00007f1153b6d090 R08: 0000000000000000 R09: 0000000000000000 [ 1194.513393][T18567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1194.513399][T18567] R13: 0000000000000000 R14: 00007f1152fb5fa0 R15: 00007ffd99c4e638 [ 1194.513413][T18567] [ 1195.082814][T18574] team0: No ports can be present during mode change [ 1195.991917][ T43] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1196.254954][T15654] usb 5-1: USB disconnect, device number 115 [ 1196.564945][T18576] 9pnet_fd: Insufficient options for proto=fd [ 1196.738209][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 1196.944874][ T43] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 1196.961498][ T43] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1196.972232][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.980871][ T43] usb 2-1: Product: syz [ 1196.999412][ T43] usb 2-1: Manufacturer: syz [ 1197.004552][ T43] usb 2-1: SerialNumber: syz [ 1197.014812][ T43] usb 2-1: config 0 descriptor?? [ 1197.020699][T18573] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1197.043213][ T43] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input77 [ 1197.244682][T18589] trusted_key: encrypted_key: insufficient parameters specified [ 1197.272165][T18589] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3251'. [ 1198.102614][T18594] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1198.124542][T18594] binder: Unknown parameter '00' [ 1199.464611][T18599] team0: Unable to change to the same mode the team is in [ 1200.761814][T18606] xt_l2tp: wrong L2TP version: 0 [ 1201.020092][ T5875] usb 2-1: USB disconnect, device number 84 [ 1201.020092][ C1] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1201.180248][T18610] xt_l2tp: wrong L2TP version: 0 [ 1201.404016][T18619] xt_l2tp: wrong L2TP version: 0 [ 1201.876129][ T9] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 1202.346275][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1202.377771][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1202.421906][ T9] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1202.438998][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.456927][ T9] usb 7-1: config 0 descriptor?? [ 1202.475276][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1202.770320][T18638] trusted_key: encrypted_key: insufficient parameters specified [ 1202.799599][T18638] netlink: 92 bytes leftover after parsing attributes in process `syz.7.3263'. [ 1203.585443][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 1203.593762][T18630] xt_l2tp: wrong L2TP version: 0 [ 1203.604997][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1203.615833][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1203.623541][ T9] usb 7-1: media controller created [ 1203.646672][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1203.660229][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 1203.667148][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1203.676979][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input78 [ 1203.690034][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 1203.697537][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1203.738022][T18633] netlink: 'syz.5.3262': attribute type 4 has an invalid length. [ 1203.780780][T18633] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1203.802056][T18642] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1203.810917][T18642] binder: Unknown parameter '00' [ 1203.875201][T18620] netlink: 'syz.6.3258': attribute type 13 has an invalid length. [ 1203.886535][ T5875] dvb-usb: bulk message failed: -22 (1/0) [ 1203.892331][ T5875] dvb-usb: error while querying for an remote control event. [ 1203.940999][T18620] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1204.125053][ T5875] dvb-usb: bulk message failed: -22 (1/0) [ 1204.132473][ T5875] dvb-usb: error while querying for an remote control event. [ 1204.325113][ T5875] dvb-usb: bulk message failed: -22 (1/0) [ 1204.330888][ T5875] dvb-usb: error while querying for an remote control event. [ 1204.494957][ T5875] dvb-usb: bulk message failed: -22 (1/0) [ 1204.502684][ T5875] dvb-usb: error while querying for an remote control event. [ 1205.050181][ T5875] dvb-usb: bulk message failed: -22 (1/0) [ 1206.281086][ T5875] dvb-usb: error while querying for an remote control event. [ 1206.374874][T18085] usb 7-1: USB disconnect, device number 9 [ 1206.407750][T18085] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1206.427389][T18663] snd_dummy snd_dummy.0: control 0:0:0:syz0:524289 is already present [ 1206.715224][T18671] 9pnet_fd: Insufficient options for proto=fd [ 1206.923713][T18085] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1207.136214][T18679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3273'. [ 1207.163483][T18085] usb 7-1: Using ep0 maxpacket: 32 [ 1207.171485][T18085] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 1207.182927][T18085] usb 7-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1207.195155][T18085] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.205923][T18085] usb 7-1: Product: syz [ 1207.210156][T18085] usb 7-1: Manufacturer: syz [ 1207.214870][T18085] usb 7-1: SerialNumber: syz [ 1207.220792][T18085] usb 7-1: config 0 descriptor?? [ 1207.227206][T18666] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1207.237155][T18085] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input79 [ 1207.787176][ T30] audit: type=1400 audit(1753850191.090:1602): avc: denied { ioctl } for pid=18681 comm="syz.1.3275" path="socket:[58506]" dev="sockfs" ino=58506 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1208.499233][T18693] netlink: 'syz.4.3277': attribute type 8 has an invalid length. [ 1209.508030][T18702] netlink: 'syz.1.3281': attribute type 3 has an invalid length. [ 1209.531722][T18704] 9pnet_fd: Insufficient options for proto=fd [ 1210.232267][T15654] usb 7-1: USB disconnect, device number 10 [ 1210.232305][ C1] usbtouchscreen 7-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1210.319257][T18717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3283'. [ 1210.382209][T18085] usb 5-1: new full-speed USB device number 116 using dummy_hcd [ 1210.401650][T18717] netlink: 6068 bytes leftover after parsing attributes in process `syz.1.3283'. [ 1210.719200][T18085] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1210.759630][T18723] xt_l2tp: wrong L2TP version: 0 [ 1210.783267][T18085] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1210.952599][T18085] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1210.982125][T18085] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.018409][T18085] usb 5-1: config 0 descriptor?? [ 1211.028829][T18085] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1211.036114][T18085] dvb-usb: bulk message failed: -22 (3/0) [ 1211.148589][T18085] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1211.170330][T18085] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1211.287969][T18710] netlink: 'syz.4.3280': attribute type 13 has an invalid length. [ 1211.673221][T18739] xt_l2tp: wrong L2TP version: 0 [ 1212.607226][T18710] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1213.308620][T18085] usb 5-1: media controller created [ 1213.720543][T15654] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1213.753077][T18085] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1213.772149][T18085] dvb-usb: bulk message failed: -22 (6/0) [ 1213.779159][T18085] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1213.798944][T18085] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input80 [ 1213.837386][T18085] dvb-usb: schedule remote query interval to 150 msecs. [ 1213.844524][T18085] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1213.861546][T18085] usb 5-1: USB disconnect, device number 116 [ 1213.945329][T18746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3289'. [ 1213.977244][T18746] netlink: 6068 bytes leftover after parsing attributes in process `syz.4.3289'. [ 1214.185463][T15654] usb 7-1: Using ep0 maxpacket: 16 [ 1214.188006][T18085] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1214.237229][T15654] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1214.252025][T15654] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1214.264427][T15654] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1214.276519][T15654] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1214.290249][T15654] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.298541][T15654] usb 7-1: Product: syz [ 1214.303104][T15654] usb 7-1: Manufacturer: syz [ 1214.324476][T15654] usb 7-1: SerialNumber: syz [ 1214.511969][T18749] netlink: 'syz.5.3290': attribute type 8 has an invalid length. [ 1214.784952][T18751] fuse: Unknown parameter '0x0000000000000003' [ 1214.908132][T15654] usb 7-1: 0:2 : does not exist [ 1214.914110][ T30] audit: type=1326 audit(1753850198.203:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18742 comm="syz.6.3288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5bd8e9a9 code=0x7ffc0000 [ 1214.987109][ T30] audit: type=1326 audit(1753850198.203:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18742 comm="syz.6.3288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5bd8e9a9 code=0x7ffc0000 [ 1215.010843][ T30] audit: type=1326 audit(1753850198.203:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18742 comm="syz.6.3288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbb5bd8e9a9 code=0x7ffc0000 [ 1215.037102][ T30] audit: type=1326 audit(1753850198.203:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18742 comm="syz.6.3288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5bd8e9a9 code=0x7ffc0000 [ 1215.195562][ T30] audit: type=1326 audit(1753850198.203:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18742 comm="syz.6.3288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5bd8e9a9 code=0x7ffc0000 [ 1215.222013][ T30] audit: type=1326 audit(1753850198.203:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18742 comm="syz.6.3288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbb5bd8e9a9 code=0x7ffc0000 [ 1215.785429][ T30] audit: type=1326 audit(1753850198.203:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18742 comm="syz.6.3288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5bd8e9a9 code=0x7ffc0000 [ 1215.863183][ T30] audit: type=1326 audit(1753850198.203:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18742 comm="syz.6.3288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5bd8e9a9 code=0x7ffc0000 [ 1215.900527][ T30] audit: type=1326 audit(1753850198.203:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18742 comm="syz.6.3288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fbb5bd8e9a9 code=0x7ffc0000 [ 1215.924343][ T30] audit: type=1326 audit(1753850198.203:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18742 comm="syz.6.3288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5bd8e9a9 code=0x7ffc0000 [ 1216.770046][T15654] usb 7-1: USB disconnect, device number 11 [ 1217.073028][T18783] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3300'. [ 1217.115229][T18783] netlink: 6068 bytes leftover after parsing attributes in process `syz.5.3300'. [ 1217.233711][T18785] xt_l2tp: wrong L2TP version: 0 [ 1217.323081][ T5875] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1217.919452][ T5875] usb 5-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 1217.930226][ T5875] usb 5-1: config 0 has an invalid descriptor of length 107, skipping remainder of the config [ 1218.060452][ T5875] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 65 [ 1218.070428][ T5875] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1218.134202][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.160515][T18793] fuse: Unknown parameter '0x0000000000000003' [ 1218.261286][ T5875] usb 5-1: config 0 descriptor?? [ 1218.310146][ T5875] usb 5-1: can't set config #0, error -71 [ 1218.348187][ T5875] usb 5-1: USB disconnect, device number 117 [ 1218.504440][T15042] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 1219.012151][T18806] FAULT_INJECTION: forcing a failure. [ 1219.012151][T18806] name failslab, interval 1, probability 0, space 0, times 0 [ 1219.057896][T18806] CPU: 1 UID: 0 PID: 18806 Comm: syz.5.3306 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 1219.057926][T18806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1219.057936][T18806] Call Trace: [ 1219.057943][T18806] [ 1219.057949][T18806] dump_stack_lvl+0x16c/0x1f0 [ 1219.057972][T18806] should_fail_ex+0x512/0x640 [ 1219.057998][T18806] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1219.058029][T18806] should_failslab+0xc2/0x120 [ 1219.058047][T18806] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1219.058074][T18806] ? alloc_empty_file+0x55/0x1e0 [ 1219.058098][T18806] alloc_empty_file+0x55/0x1e0 [ 1219.058119][T18806] path_openat+0xda/0x2cb0 [ 1219.058146][T18806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.058172][T18806] ? __pfx_path_openat+0x10/0x10 [ 1219.058201][T18806] ? __lock_acquire+0xb8a/0x1c90 [ 1219.058222][T18806] do_filp_open+0x20b/0x470 [ 1219.058249][T18806] ? __pfx_do_filp_open+0x10/0x10 [ 1219.058294][T18806] ? alloc_fd+0x471/0x7d0 [ 1219.058328][T18806] do_sys_openat2+0x11b/0x1d0 [ 1219.058349][T18806] ? __pfx_do_sys_openat2+0x10/0x10 [ 1219.058372][T18806] ? __fget_files+0x20e/0x3c0 [ 1219.058392][T18806] __x64_sys_openat+0x174/0x210 [ 1219.058414][T18806] ? __pfx___x64_sys_openat+0x10/0x10 [ 1219.058434][T18806] ? ksys_write+0x1ac/0x250 [ 1219.058468][T18806] do_syscall_64+0xcd/0x4c0 [ 1219.058488][T18806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.058504][T18806] RIP: 0033:0x7f1152d8e9a9 [ 1219.058519][T18806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1219.058536][T18806] RSP: 002b:00007f1153b4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1219.058554][T18806] RAX: ffffffffffffffda RBX: 00007f1152fb6080 RCX: 00007f1152d8e9a9 [ 1219.058566][T18806] RDX: 0000000000000000 RSI: 0000200000000a80 RDI: ffffffffffffff9c [ 1219.058577][T18806] RBP: 00007f1153b4c090 R08: 0000000000000000 R09: 0000000000000000 [ 1219.058587][T18806] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 1219.058598][T18806] R13: 0000000000000000 R14: 00007f1152fb6080 R15: 00007ffd99c4e638 [ 1219.058621][T18806] [ 1220.097067][T15042] usb 7-1: device descriptor read/all, error -71 [ 1220.329929][T18823] o2cb: This node has not been configured. [ 1220.336470][T18823] o2cb: Cluster check failed. Fix errors before retrying. [ 1220.344142][T18823] (syz.4.3308,18823,1):user_dlm_register:674 ERROR: status = -22 [ 1220.351984][T18823] (syz.4.3308,18823,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 1220.408540][T18818] team0: No ports can be present during mode change [ 1220.417484][ T30] kauditd_printk_skb: 162 callbacks suppressed [ 1220.417526][ T30] audit: type=1400 audit(1753850203.626:1775): avc: denied { add_name } for pid=18813 comm="syz.4.3308" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1220.522737][ T30] audit: type=1400 audit(1753850203.636:1776): avc: denied { create } for pid=18813 comm="syz.4.3308" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1220.631428][ T30] audit: type=1400 audit(1753850203.636:1777): avc: denied { associate } for pid=18813 comm="syz.4.3308" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1222.561554][T18838] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1222.572966][T18838] binder: Unknown parameter '00' [ 1222.871289][T18842] team0: Device gtp0 is of different type [ 1222.929608][T18840] netlink: 6068 bytes leftover after parsing attributes in process `syz.7.3315'. [ 1223.278038][T18858] veth0_vlan: entered allmulticast mode [ 1225.154441][ T30] audit: type=1326 audit(1753850208.038:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18861 comm="syz.4.3321" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f10e838e9a9 code=0x0 [ 1226.249611][T18878] xt_l2tp: wrong L2TP version: 0 [ 1226.256171][T18873] loop6: detected capacity change from 0 to 524287999 [ 1227.580788][T18888] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1227.666209][T18892] fuse: Unknown parameter '' [ 1227.713851][T18890] binder: Unknown parameter '00' [ 1231.154753][T18927] openvswitch: netlink: VXLAN extension message has 22 unknown bytes. [ 1232.163323][T18933] FAULT_INJECTION: forcing a failure. [ 1232.163323][T18933] name failslab, interval 1, probability 0, space 0, times 0 [ 1232.195779][T18933] CPU: 1 UID: 0 PID: 18933 Comm: syz.4.3342 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 1232.195806][T18933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1232.195817][T18933] Call Trace: [ 1232.195823][T18933] [ 1232.195829][T18933] dump_stack_lvl+0x16c/0x1f0 [ 1232.195852][T18933] should_fail_ex+0x512/0x640 [ 1232.195880][T18933] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1232.195907][T18933] should_failslab+0xc2/0x120 [ 1232.195925][T18933] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1232.195953][T18933] ? alloc_empty_file+0x55/0x1e0 [ 1232.195978][T18933] alloc_empty_file+0x55/0x1e0 [ 1232.195999][T18933] path_openat+0xda/0x2cb0 [ 1232.196025][T18933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1232.196052][T18933] ? __pfx_path_openat+0x10/0x10 [ 1232.196086][T18933] do_filp_open+0x20b/0x470 [ 1232.196113][T18933] ? __pfx_do_filp_open+0x10/0x10 [ 1232.196158][T18933] ? _raw_spin_unlock+0x28/0x50 [ 1232.196183][T18933] ? alloc_fd+0x471/0x7d0 [ 1232.196218][T18933] do_sys_openat2+0x11b/0x1d0 [ 1232.196239][T18933] ? __pfx_do_sys_openat2+0x10/0x10 [ 1232.196262][T18933] ? __fget_files+0x20e/0x3c0 [ 1232.196282][T18933] __x64_sys_open+0x153/0x1e0 [ 1232.196303][T18933] ? __pfx___x64_sys_open+0x10/0x10 [ 1232.196329][T18933] ? rcu_is_watching+0x12/0xc0 [ 1232.196354][T18933] do_syscall_64+0xcd/0x4c0 [ 1232.196373][T18933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1232.196389][T18933] RIP: 0033:0x7f10e838e9a9 [ 1232.196403][T18933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1232.196419][T18933] RSP: 002b:00007f10e926e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1232.196436][T18933] RAX: ffffffffffffffda RBX: 00007f10e85b6080 RCX: 00007f10e838e9a9 [ 1232.196447][T18933] RDX: 0000000000000000 RSI: 0000000000002040 RDI: 00002000000002c0 [ 1232.196458][T18933] RBP: 00007f10e926e090 R08: 0000000000000000 R09: 0000000000000000 [ 1232.196468][T18933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1232.196478][T18933] R13: 0000000000000000 R14: 00007f10e85b6080 R15: 00007ffe96d27aa8 [ 1232.196500][T18933] [ 1232.429225][T18938] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1232.439792][T18938] binder: Unknown parameter '00' [ 1232.586906][T18939] loop6: detected capacity change from 0 to 524287999 [ 1232.809363][T18949] binder: 18948:18949 ioctl c0306201 200000000080 returned -14 [ 1232.846031][T18950] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3348'. [ 1232.847528][T18949] FAULT_INJECTION: forcing a failure. [ 1232.847528][T18949] name failslab, interval 1, probability 0, space 0, times 0 [ 1232.882307][T18949] CPU: 0 UID: 0 PID: 18949 Comm: syz.4.3347 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 1232.882338][T18949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1232.882352][T18949] Call Trace: [ 1232.882358][T18949] [ 1232.882365][T18949] dump_stack_lvl+0x16c/0x1f0 [ 1232.882388][T18949] should_fail_ex+0x512/0x640 [ 1232.882413][T18949] ? fs_reclaim_acquire+0xae/0x150 [ 1232.882437][T18949] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1232.882455][T18949] should_failslab+0xc2/0x120 [ 1232.882472][T18949] __kmalloc_noprof+0xd2/0x510 [ 1232.882505][T18949] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1232.882525][T18949] ? tomoyo_profile+0x47/0x60 [ 1232.882547][T18949] tomoyo_path_number_perm+0x245/0x580 [ 1232.882570][T18949] ? tomoyo_path_number_perm+0x237/0x580 [ 1232.882595][T18949] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1232.882622][T18949] ? find_held_lock+0x2b/0x80 [ 1232.882664][T18949] ? find_held_lock+0x2b/0x80 [ 1232.882685][T18949] ? hook_file_ioctl_common+0x145/0x410 [ 1232.882707][T18949] ? __fget_files+0x20e/0x3c0 [ 1232.882725][T18949] security_file_ioctl+0x9b/0x240 [ 1232.882743][T18949] __x64_sys_ioctl+0xb7/0x210 [ 1232.882767][T18949] do_syscall_64+0xcd/0x4c0 [ 1232.882785][T18949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1232.882802][T18949] RIP: 0033:0x7f10e838e9a9 [ 1232.882816][T18949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1232.882832][T18949] RSP: 002b:00007f10e928f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1232.882848][T18949] RAX: ffffffffffffffda RBX: 00007f10e85b5fa0 RCX: 00007f10e838e9a9 [ 1232.882859][T18949] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000005 [ 1232.882868][T18949] RBP: 00007f10e928f090 R08: 0000000000000000 R09: 0000000000000000 [ 1232.882878][T18949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1232.882888][T18949] R13: 0000000000000000 R14: 00007f10e85b5fa0 R15: 00007ffe96d27aa8 [ 1232.882910][T18949] [ 1232.886231][T18949] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1233.777434][T18957] nvme_fabrics: missing parameter 'transport=%s' [ 1233.801054][T18957] nvme_fabrics: missing parameter 'nqn=%s' [ 1234.013471][T18964] loop6: detected capacity change from 0 to 524287999 [ 1234.129980][T18085] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1234.190099][T15042] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1234.290101][T18085] usb 7-1: Using ep0 maxpacket: 16 [ 1234.315456][T18085] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1234.368284][T18085] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.409308][T18085] usb 7-1: Product: syz [ 1234.427689][T18085] usb 7-1: Manufacturer: syz [ 1234.442952][T18085] usb 7-1: SerialNumber: syz [ 1234.466711][T18085] usb 7-1: config 0 descriptor?? [ 1234.478268][T18085] ssu100 7-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1236.450603][T18085] ssu100 7-1:0.0: probe with driver ssu100 failed with error -110 [ 1236.668756][ T30] audit: type=1800 audit(1753850219.974:1779): pid=18976 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.3358" name="bus" dev="overlay" ino=1108 res=0 errno=0 [ 1236.921269][T18984] netlink: 'syz.4.3357': attribute type 4 has an invalid length. [ 1236.980289][T18984] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1237.302430][T18991] netlink: 'syz.1.3359': attribute type 4 has an invalid length. [ 1237.316487][T18991] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1237.892802][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.031685][T19004] xt_l2tp: wrong L2TP version: 0 [ 1238.272100][T18990] infiniband syz0: set down [ 1238.276817][T18990] infiniband syz0: added bond_slave_1 [ 1238.282753][T18990] syz0: rxe_create_cq: returned err = -12 [ 1238.290837][T18990] infiniband syz0: Couldn't create ib_mad CQ [ 1238.296976][T18990] infiniband syz0: Couldn't open port 1 [ 1238.321886][T18990] RDS/IB: syz0: added [ 1238.326108][T18990] smc: adding ib device syz0 with port count 1 [ 1238.332998][T18990] smc: ib device syz0 port 1 has pnetid [ 1238.550120][ T24] usb 7-1: USB disconnect, device number 14 [ 1238.927430][T19009] loop6: detected capacity change from 0 to 524287999 [ 1239.234898][T19015] FAULT_INJECTION: forcing a failure. [ 1239.234898][T19015] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1239.249168][T19015] CPU: 0 UID: 0 PID: 19015 Comm: syz.6.3367 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 1239.249200][T19015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1239.249211][T19015] Call Trace: [ 1239.249217][T19015] [ 1239.249224][T19015] dump_stack_lvl+0x16c/0x1f0 [ 1239.249248][T19015] should_fail_ex+0x512/0x640 [ 1239.249280][T19015] should_fail_alloc_page+0xe7/0x130 [ 1239.249302][T19015] prepare_alloc_pages+0x3c2/0x610 [ 1239.249328][T19015] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1239.249358][T19015] ? do_raw_spin_lock+0x12c/0x2b0 [ 1239.249385][T19015] ? mark_held_locks+0x49/0x80 [ 1239.249413][T19015] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1239.249440][T19015] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1239.249468][T19015] ? stack_depot_save_flags+0x3e0/0xa40 [ 1239.249502][T19015] ? fuse_perform_write+0x2ef/0x1900 [ 1239.249528][T19015] ? kasan_save_stack+0x42/0x60 [ 1239.249553][T19015] ? kasan_save_track+0x14/0x30 [ 1239.249581][T19015] ? __lock_acquire+0x622/0x1c90 [ 1239.249597][T19015] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1239.249620][T19015] ? policy_nodemask+0xea/0x4e0 [ 1239.249641][T19015] alloc_pages_mpol+0x1fb/0x550 [ 1239.249660][T19015] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1239.249681][T19015] ? filemap_get_entry+0x1a7/0x3b0 [ 1239.249702][T19015] folio_alloc_noprof+0x20/0x2d0 [ 1239.249724][T19015] filemap_alloc_folio_noprof+0x3a1/0x470 [ 1239.249749][T19015] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 1239.249781][T19015] __filemap_get_folio+0x5e1/0xc30 [ 1239.249805][T19015] fuse_perform_write+0x4e9/0x1900 [ 1239.249848][T19015] ? __pfx_fuse_perform_write+0x10/0x10 [ 1239.249896][T19015] ? __pfx_generic_write_checks+0x10/0x10 [ 1239.249930][T19015] fuse_file_write_iter+0x481/0x950 [ 1239.249960][T19015] do_iter_readv_writev+0x654/0x950 [ 1239.249987][T19015] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1239.250024][T19015] vfs_writev+0x35f/0xde0 [ 1239.250055][T19015] ? __pfx_vfs_writev+0x10/0x10 [ 1239.250100][T19015] ? __fget_files+0x20e/0x3c0 [ 1239.250114][T19015] ? __fget_files+0x190/0x3c0 [ 1239.250141][T19015] ? do_writev+0x28c/0x340 [ 1239.250163][T19015] do_writev+0x28c/0x340 [ 1239.250192][T19015] ? __pfx_do_writev+0x10/0x10 [ 1239.250224][T19015] do_syscall_64+0xcd/0x4c0 [ 1239.250244][T19015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.250263][T19015] RIP: 0033:0x7fbb5bd8e9a9 [ 1239.250278][T19015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1239.250296][T19015] RSP: 002b:00007fbb5ccbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1239.250315][T19015] RAX: ffffffffffffffda RBX: 00007fbb5bfb5fa0 RCX: 00007fbb5bd8e9a9 [ 1239.250327][T19015] RDX: 0000000000000001 RSI: 0000200000001700 RDI: 0000000000000005 [ 1239.250338][T19015] RBP: 00007fbb5ccbf090 R08: 0000000000000000 R09: 0000000000000000 [ 1239.250349][T19015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1239.250359][T19015] R13: 0000000000000000 R14: 00007fbb5bfb5fa0 R15: 00007ffd2696fec8 [ 1239.250384][T19015] [ 1239.929238][T19020] netlink: 'syz.1.3368': attribute type 25 has an invalid length. [ 1239.970058][ T7158] Bluetooth: hci4: command 0x0406 tx timeout [ 1240.275409][T19028] xt_l2tp: wrong L2TP version: 0 [ 1241.251953][T19037] netlink: 'syz.1.3372': attribute type 13 has an invalid length. [ 1241.306532][T19037] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1242.632581][ T30] audit: type=1800 audit(1753850225.107:1780): pid=19043 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.3374" name="bus" dev="overlay" ino=544 res=0 errno=0 [ 1242.695149][ T30] audit: type=1400 audit(1753850225.937:1781): avc: denied { write } for pid=19042 comm="syz.6.3373" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1243.545306][ T5875] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1243.715208][ T5875] usb 5-1: Using ep0 maxpacket: 32 [ 1244.419027][ T30] audit: type=1800 audit(1753850227.008:1782): pid=19065 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.3380" name="bus" dev="overlay" ino=610 res=0 errno=0 [ 1244.564975][ T5875] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 1244.657164][ T5875] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1244.680618][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.752365][ T5875] usb 5-1: Product: syz [ 1244.764755][ T5875] usb 5-1: Manufacturer: syz [ 1244.769382][ T5875] usb 5-1: SerialNumber: syz [ 1244.798272][ T5875] usb 5-1: config 0 descriptor?? [ 1244.803829][T19051] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1244.824756][ T5875] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input81 [ 1244.989596][ T30] audit: type=1800 audit(1753850228.308:1783): pid=19072 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.3382" name="bus" dev="overlay" ino=624 res=0 errno=0 [ 1246.394794][T19086] xt_l2tp: wrong L2TP version: 0 [ 1246.973901][ T30] audit: type=1400 audit(1753850230.259:1784): avc: denied { write } for pid=19089 comm="syz.7.3387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1247.194289][ T5875] usb 5-1: USB disconnect, device number 119 [ 1247.200294][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1247.845153][T19107] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 1247.903588][T19109] loop4: detected capacity change from 0 to 7 [ 1247.940970][T19107] bridge_slave_0: left allmulticast mode [ 1247.943403][T19109] Dev loop4: unable to read RDB block 7 [ 1247.953269][T19107] bridge_slave_0: left promiscuous mode [ 1247.970231][T19107] bridge0: port 1(bridge_slave_0) entered disabled state [ 1247.985939][T19109] loop4: AHDI p1 p2 [ 1247.989871][T19109] loop4: partition table partially beyond EOD, truncated [ 1247.998805][T19109] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 1248.075141][T19110] netlink: 'syz.1.3389': attribute type 72 has an invalid length. [ 1248.133590][T19115] netlink: 2264 bytes leftover after parsing attributes in process `syz.7.3390'. [ 1248.202378][T19107] bridge_slave_1: left allmulticast mode [ 1248.347482][T19107] bridge_slave_1: left promiscuous mode [ 1248.354044][T19110] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3389'. [ 1248.367624][T19107] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.399227][T19107] bond0: (slave bond_slave_0): Releasing backup interface [ 1248.440881][T19107] bond0: (slave bond_slave_1): Releasing backup interface [ 1248.465931][T19107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1248.473925][T19107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1248.485645][T19107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1248.494448][T19107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1248.512189][T19114] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3390'. [ 1248.741363][T19119] xt_l2tp: wrong L2TP version: 0 [ 1249.599152][T19134] IPv6: Can't replace route, no match found [ 1250.046733][T19142] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1250.058035][T19142] binder: Unknown parameter '00' [ 1250.062126][T19144] netlink: zone id is out of range [ 1250.069112][T19144] netlink: zone id is out of range [ 1250.088028][T19144] netlink: zone id is out of range [ 1250.099987][T19144] netlink: set zone limit has 4 unknown bytes [ 1250.179460][ T30] audit: type=1400 audit(1753850233.501:1785): avc: denied { unmount } for pid=17511 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1250.262169][ T5875] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1250.523797][ T5875] usb 7-1: Using ep0 maxpacket: 32 [ 1250.564075][ T5875] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 1250.591975][ T24] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1250.610275][ T5875] usb 7-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1250.639574][ T5875] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.665550][ T5875] usb 7-1: Product: syz [ 1250.669883][ T5875] usb 7-1: Manufacturer: syz [ 1250.680394][ T5875] usb 7-1: SerialNumber: syz [ 1250.698468][ T5875] usb 7-1: config 0 descriptor?? [ 1250.705247][T19139] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1250.716497][ T5875] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input82 [ 1250.742678][T19157] netlink: 'syz.5.3397': attribute type 13 has an invalid length. [ 1250.771724][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 1250.778357][ T24] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 1250.787531][ T24] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1250.806848][ T24] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1250.817070][ T24] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1250.828831][ T24] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 1251.057313][ T24] usb 2-1: Product: syz [ 1251.508135][ T24] usb 2-1: config 0 descriptor?? [ 1251.518668][T19157] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1251.536876][T19164] siw: device registration error -23 [ 1251.692008][ T30] audit: type=1326 audit(1753850234.912:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19163 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e838e9a9 code=0x7ffc0000 [ 1251.836480][ T30] audit: type=1326 audit(1753850234.912:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19163 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f10e838e9a9 code=0x7ffc0000 [ 1251.889495][ T30] audit: type=1326 audit(1753850234.912:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19163 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e838e9a9 code=0x7ffc0000 [ 1251.914347][ T30] audit: type=1326 audit(1753850234.912:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19163 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f10e838e9a9 code=0x7ffc0000 [ 1251.951082][ T30] audit: type=1326 audit(1753850234.912:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19163 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e838e9a9 code=0x7ffc0000 [ 1251.982654][ T30] audit: type=1326 audit(1753850234.912:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19163 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10e838e9a9 code=0x7ffc0000 [ 1252.006206][ T30] audit: type=1326 audit(1753850234.912:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19163 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e838e9a9 code=0x7ffc0000 [ 1252.034100][ T30] audit: type=1326 audit(1753850234.912:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19163 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f10e838d310 code=0x7ffc0000 [ 1252.067893][ T30] audit: type=1326 audit(1753850234.912:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19163 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e838e9a9 code=0x7ffc0000 [ 1252.282905][T19149] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1252.282964][T17932] Bluetooth: hci4: command 0x0406 tx timeout [ 1252.296363][T19149] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 1253.130143][T15654] usb 7-1: USB disconnect, device number 15 [ 1253.136233][ C0] usbtouchscreen 7-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1253.212506][T19182] fuse: Bad value for 'fd' [ 1254.867928][T15042] usb 2-1: USB disconnect, device number 85 [ 1255.153218][T19204] overlayfs: missing 'lowerdir' [ 1255.628766][T19208] siw: device registration error -23 [ 1256.177014][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1256.177030][ T30] audit: type=1326 audit(1753850239.494:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19207 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da6d8e9a9 code=0x7ffc0000 [ 1256.239391][ T30] audit: type=1326 audit(1753850239.494:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19207 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f8da6d8e9a9 code=0x7ffc0000 [ 1256.268758][ T30] audit: type=1326 audit(1753850239.494:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19207 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da6d8e9a9 code=0x7ffc0000 [ 1256.301462][ T30] audit: type=1326 audit(1753850239.494:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19207 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da6d8e9a9 code=0x7ffc0000 [ 1256.521652][T19222] snd_dummy snd_dummy.0: control 0:0:0:syz0:524289 is already present [ 1256.594223][ T30] audit: type=1326 audit(1753850239.904:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19207 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f8da6d8e9a9 code=0x7ffc0000 [ 1257.013041][ T30] audit: type=1326 audit(1753850239.904:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19207 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da6d8e9a9 code=0x7ffc0000 [ 1257.052165][ T30] audit: type=1326 audit(1753850239.904:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19207 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da6d8e9a9 code=0x7ffc0000 [ 1258.363399][ T30] audit: type=1326 audit(1753850239.904:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19207 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f8da6d8e9a9 code=0x7ffc0000 [ 1258.498337][ T30] audit: type=1326 audit(1753850239.904:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19207 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da6d8e9a9 code=0x7ffc0000 [ 1258.847188][ T30] audit: type=1326 audit(1753850239.904:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19207 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da6d8e9a9 code=0x7ffc0000 [ 1259.187608][ T24] usb 5-1: new full-speed USB device number 120 using dummy_hcd [ 1259.397895][T19246] xt_l2tp: wrong L2TP version: 0 [ 1259.759390][ T24] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 1259.832498][ T24] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1259.859770][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.873148][ T24] usb 5-1: Product: syz [ 1259.962139][ T24] usb 5-1: Manufacturer: syz [ 1259.967714][ T24] usb 5-1: SerialNumber: syz [ 1259.975672][ T24] usb 5-1: config 0 descriptor?? [ 1259.980850][T19241] xt_l2tp: wrong L2TP version: 0 [ 1259.990724][ T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1260.184870][ T24] usb 5-1: setting power ON [ 1260.197294][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 1260.211479][ T24] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1260.224826][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19) [ 1260.234375][ T24] dvb_usb_cxusb 5-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 1260.246133][ T24] usb 5-1: USB disconnect, device number 120 [ 1261.056565][T15654] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1261.256591][T15654] usb 7-1: Using ep0 maxpacket: 16 [ 1261.274767][T15654] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1261.306242][T15654] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.339910][T19270] snd_dummy snd_dummy.0: control 0:0:0:syz0:524289 is already present [ 1261.395722][T15654] usb 7-1: Product: syz [ 1261.444822][T15654] usb 7-1: Manufacturer: syz [ 1261.504505][T15654] usb 7-1: SerialNumber: syz [ 1261.718847][T15654] usb 7-1: config 0 descriptor?? [ 1261.730417][T15654] ssu100 7-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1261.888649][ T30] audit: type=1326 audit(1753850245.217:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19271 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe342d8e9a9 code=0x7ffc0000 [ 1261.987110][T19279] snd_dummy snd_dummy.0: control 0:0:0:syz0:524289 is already present [ 1262.044869][ T30] audit: type=1326 audit(1753850245.247:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19271 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe342d8e9a9 code=0x7ffc0000 [ 1262.086922][T15654] ssu100 7-1:0.0: probe with driver ssu100 failed with error -110 [ 1262.120293][ T30] audit: type=1326 audit(1753850245.247:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19271 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe342d8e9a9 code=0x7ffc0000 [ 1262.181673][ T30] audit: type=1326 audit(1753850245.247:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19271 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe342d8e9a9 code=0x7ffc0000 [ 1262.206922][ T30] audit: type=1326 audit(1753850245.247:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19271 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7fe342d8e9a9 code=0x7ffc0000 [ 1262.230011][ T30] audit: type=1326 audit(1753850245.247:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19271 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe342d8e9a9 code=0x7ffc0000 [ 1262.263278][ T30] audit: type=1326 audit(1753850245.247:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19271 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe342d8e9a9 code=0x7ffc0000 [ 1262.290358][ T30] audit: type=1326 audit(1753850245.247:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19271 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe342d8e9a9 code=0x7ffc0000 [ 1262.315640][ T30] audit: type=1326 audit(1753850245.247:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19271 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe342d8d310 code=0x7ffc0000 [ 1262.340452][ T30] audit: type=1326 audit(1753850245.247:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19271 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe342d8e9a9 code=0x7ffc0000 [ 1262.368147][T19283] kvm: MONITOR instruction emulated as NOP! [ 1262.383324][T19283] binder: BINDER_SET_CONTEXT_MGR already set [ 1262.389663][T19283] binder: 19281:19283 ioctl 4018620d 200000000040 returned -16 [ 1262.400076][T19283] binder: 19281:19283 ioctl c0306201 200000000240 returned -11 [ 1262.405960][T15654] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1262.566374][T15654] usb 5-1: Using ep0 maxpacket: 32 [ 1262.573094][T15654] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1262.582547][T15654] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.592739][T15654] usb 5-1: config 0 descriptor?? [ 1262.600476][T15654] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1263.288123][T19299] FAULT_INJECTION: forcing a failure. [ 1263.288123][T19299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1263.301357][T19299] CPU: 0 UID: 0 PID: 19299 Comm: syz.7.3437 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 1263.301383][T19299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1263.301394][T19299] Call Trace: [ 1263.301400][T19299] [ 1263.301407][T19299] dump_stack_lvl+0x16c/0x1f0 [ 1263.301433][T19299] should_fail_ex+0x512/0x640 [ 1263.301464][T19299] _copy_from_user+0x2e/0xd0 [ 1263.301484][T19299] copy_msghdr_from_user+0x98/0x160 [ 1263.301502][T19299] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1263.301534][T19299] ? __lock_acquire+0xb8a/0x1c90 [ 1263.301559][T19299] ___sys_sendmsg+0xfe/0x1d0 [ 1263.301577][T19299] ? __pfx____sys_sendmsg+0x10/0x10 [ 1263.301592][T19299] ? __lock_acquire+0x622/0x1c90 [ 1263.301640][T19299] __sys_sendmsg+0x16d/0x220 [ 1263.301657][T19299] ? __pfx___sys_sendmsg+0x10/0x10 [ 1263.301693][T19299] do_syscall_64+0xcd/0x4c0 [ 1263.301712][T19299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.301730][T19299] RIP: 0033:0x7f8da6d8e9a9 [ 1263.301745][T19299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1263.301762][T19299] RSP: 002b:00007f8da4bb4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1263.301781][T19299] RAX: ffffffffffffffda RBX: 00007f8da6fb6160 RCX: 00007f8da6d8e9a9 [ 1263.301794][T19299] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 000000000000000a [ 1263.301805][T19299] RBP: 00007f8da4bb4090 R08: 0000000000000000 R09: 0000000000000000 [ 1263.301815][T19299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1263.301826][T19299] R13: 0000000000000000 R14: 00007f8da6fb6160 R15: 00007fff6ab705e8 [ 1263.301851][T19299] [ 1263.714585][T19301] netlink: 'syz.5.3438': attribute type 4 has an invalid length. [ 1263.917112][T19301] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1263.952505][ T5875] usb 7-1: USB disconnect, device number 16 [ 1264.025251][ T43] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 1264.175099][ T43] usb 2-1: device descriptor read/64, error -71 [ 1264.324933][ T5875] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1264.362205][T15654] gspca_vc032x: reg_w err -71 [ 1264.369474][T15654] gspca_vc032x: I2c Bus Busy Wait 00 [ 1264.376375][T15654] gspca_vc032x: I2c Bus Busy Wait 00 [ 1264.381853][T15654] gspca_vc032x: I2c Bus Busy Wait 00 [ 1264.387547][T15654] gspca_vc032x: I2c Bus Busy Wait 00 [ 1264.392989][T15654] gspca_vc032x: I2c Bus Busy Wait 00 [ 1264.398834][T15654] gspca_vc032x: I2c Bus Busy Wait 00 [ 1264.404340][T15654] gspca_vc032x: I2c Bus Busy Wait 00 [ 1264.410464][T15654] gspca_vc032x: I2c Bus Busy Wait 00 [ 1264.414855][ T43] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 1264.416207][T15654] gspca_vc032x: I2c Bus Busy Wait 00 [ 1264.429323][T15654] gspca_vc032x: I2c Bus Busy Wait 00 [ 1264.434608][T15654] gspca_vc032x: I2c Bus Busy Wait 00 [ 1264.440217][T15654] gspca_vc032x: I2c Bus Busy Wait 00 [ 1264.446103][T15654] gspca_vc032x: I2c Bus Busy Wait 00 [ 1264.451553][T15654] gspca_vc032x: I2c Bus Busy Wait 00 [ 1264.457295][T15654] gspca_vc032x: I2c Bus Busy Wait 00 [ 1264.463084][T15654] gspca_vc032x: I2c Bus Busy Wait 00 [ 1264.468741][T15654] gspca_vc032x: I2c Bus Busy Wait 00 [ 1264.474183][T15654] gspca_vc032x: I2c Bus Busy Wait 00 [ 1264.479643][ T5875] usb 7-1: Using ep0 maxpacket: 32 [ 1264.489272][ T5875] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 1264.500684][T15654] gspca_vc032x: Unknown sensor... [ 1264.508011][T15654] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 1264.519209][ T5875] usb 7-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1264.530554][T15654] usb 5-1: USB disconnect, device number 121 [ 1264.536603][ T5875] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.549894][ T5875] usb 7-1: Product: syz [ 1264.554126][ T5875] usb 7-1: Manufacturer: syz [ 1264.559175][ T5875] usb 7-1: SerialNumber: syz [ 1264.565919][ T5875] usb 7-1: config 0 descriptor?? [ 1264.571853][T19313] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1264.586704][ T5875] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input83 [ 1264.627844][ T43] usb 2-1: device descriptor read/64, error -71 [ 1264.739116][ T43] usb usb2-port1: attempt power cycle [ 1265.087375][ T43] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 1265.196847][ T43] usb 2-1: device descriptor read/8, error -71 [ 1265.499492][ T43] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 1265.828037][ T43] usb 2-1: device descriptor read/8, error -71 [ 1265.923032][T19332] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1265.936760][T19332] binder: Unknown parameter '00' [ 1265.944275][ T43] usb usb2-port1: unable to enumerate USB device [ 1267.523610][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 1267.523629][ T30] audit: type=1800 audit(1753850249.949:1885): pid=19346 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.3451" name="bus" dev="overlay" ino=652 res=0 errno=0 [ 1267.725325][T15654] usb 7-1: USB disconnect, device number 17 [ 1267.731257][ C0] usbtouchscreen 7-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1268.133576][ T5875] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1268.186080][T19359] overlayfs: missing 'lowerdir' [ 1268.452190][ T5875] usb 2-1: Using ep0 maxpacket: 32 [ 1268.983677][ T5875] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 1269.046576][ T5875] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1269.091114][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.099710][ T5875] usb 2-1: Product: syz [ 1269.104196][ T5875] usb 2-1: Manufacturer: syz [ 1269.129512][ T5875] usb 2-1: SerialNumber: syz [ 1269.147724][ T5875] usb 2-1: config 0 descriptor?? [ 1269.155915][T19352] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1269.171251][ T5875] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input84 [ 1269.175773][ T30] audit: type=1400 audit(1753850252.500:1886): avc: denied { read } for pid=19362 comm="syz.6.3457" path="socket:[61863]" dev="sockfs" ino=61863 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1270.049170][T19370] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1270.063505][T19370] binder: Unknown parameter '00' [ 1270.369900][T19377] input: syz1 as /devices/virtual/input/input85 [ 1270.548011][T19379] snd_dummy snd_dummy.0: control 0:0:0:syz0:524289 is already present [ 1271.290052][ T5904] usb 2-1: USB disconnect, device number 90 [ 1271.296012][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1271.392612][T19386] FAULT_INJECTION: forcing a failure. [ 1271.392612][T19386] name failslab, interval 1, probability 0, space 0, times 0 [ 1271.392722][T19386] CPU: 0 UID: 0 PID: 19386 Comm: syz.5.3462 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 1271.392746][T19386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1271.392755][T19386] Call Trace: [ 1271.392761][T19386] [ 1271.392768][T19386] dump_stack_lvl+0x16c/0x1f0 [ 1271.392784][T19386] should_fail_ex+0x512/0x640 [ 1271.392805][T19386] ? bit_cursor+0x885/0x17e0 [ 1271.392815][T19386] should_failslab+0xc2/0x120 [ 1271.392828][T19386] __kmalloc_noprof+0xd2/0x510 [ 1271.392844][T19386] ? lockdep_hardirqs_on+0x7c/0x110 [ 1271.392865][T19386] bit_cursor+0x885/0x17e0 [ 1271.392880][T19386] ? __pfx_bit_cursor+0x10/0x10 [ 1271.392896][T19386] ? fb_get_color_depth+0x120/0x250 [ 1271.392906][T19386] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1271.392921][T19386] ? get_color+0x1ce/0x440 [ 1271.392937][T19386] ? __pfx_bit_cursor+0x10/0x10 [ 1271.392947][T19386] fbcon_cursor+0x409/0x5f0 [ 1271.392960][T19386] hide_cursor+0x87/0x220 [ 1271.392978][T19386] do_con_write+0x23f7/0x8280 [ 1271.392990][T19386] ? __pfx___might_resched+0x10/0x10 [ 1271.393006][T19386] ? rcu_is_watching+0x12/0xc0 [ 1271.393022][T19386] ? trace_contention_end+0xdd/0x130 [ 1271.393034][T19386] ? __mutex_lock+0x1ca/0xb90 [ 1271.393047][T19386] ? n_tty_write+0x549/0x1160 [ 1271.393063][T19386] ? __pfx_do_con_write+0x10/0x10 [ 1271.393087][T19386] con_write+0x23/0xb0 [ 1271.393098][T19386] n_tty_write+0x412/0x1160 [ 1271.393113][T19386] ? _copy_from_iter+0x15d/0x16f0 [ 1271.393128][T19386] ? __pfx_n_tty_write+0x10/0x10 [ 1271.393141][T19386] ? rcu_is_watching+0x12/0xc0 [ 1271.393155][T19386] ? __pfx_woken_wake_function+0x10/0x10 [ 1271.393170][T19386] ? kfree+0x24f/0x4d0 [ 1271.393182][T19386] ? file_tty_write.constprop.0+0x6ef/0x9b0 [ 1271.393195][T19386] ? __pfx_n_tty_write+0x10/0x10 [ 1271.393209][T19386] file_tty_write.constprop.0+0x501/0x9b0 [ 1271.393225][T19386] vfs_write+0x6c4/0x1150 [ 1271.393242][T19386] ? __pfx_tty_write+0x10/0x10 [ 1271.393253][T19386] ? __pfx_vfs_write+0x10/0x10 [ 1271.393268][T19386] ? find_held_lock+0x2b/0x80 [ 1271.393291][T19386] ksys_write+0x12a/0x250 [ 1271.393307][T19386] ? __pfx_ksys_write+0x10/0x10 [ 1271.393327][T19386] do_syscall_64+0xcd/0x4c0 [ 1271.393338][T19386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.393350][T19386] RIP: 0033:0x7f1152d8e9a9 [ 1271.393360][T19386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1271.393371][T19386] RSP: 002b:00007f1153b4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1271.393383][T19386] RAX: ffffffffffffffda RBX: 00007f1152fb6080 RCX: 00007f1152d8e9a9 [ 1271.393390][T19386] RDX: 0000000000001006 RSI: 0000200000002080 RDI: 0000000000000006 [ 1271.393396][T19386] RBP: 00007f1153b4c090 R08: 0000000000000000 R09: 0000000000000000 [ 1271.393403][T19386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1271.393409][T19386] R13: 0000000000000000 R14: 00007f1152fb6080 R15: 00007ffd99c4e638 [ 1271.393423][T19386] [ 1272.388988][T19396] overlayfs: missing 'workdir' [ 1272.430832][ T43] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1272.580746][ T43] usb 7-1: Using ep0 maxpacket: 32 [ 1272.582096][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1272.582115][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1272.582128][ T43] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1272.582150][ T43] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1272.582163][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.162686][ T43] usb 7-1: config 0 descriptor?? [ 1273.399468][ T30] audit: type=1800 audit(1753850256.722:1887): pid=19402 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.3466" name="bus" dev="overlay" ino=685 res=0 errno=0 [ 1273.879198][T19404] FAULT_INJECTION: forcing a failure. [ 1273.879198][T19404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1273.879228][T19404] CPU: 0 UID: 0 PID: 19404 Comm: syz.1.3468 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 1273.879248][T19404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1273.879258][T19404] Call Trace: [ 1273.879264][T19404] [ 1273.879270][T19404] dump_stack_lvl+0x16c/0x1f0 [ 1273.879290][T19404] should_fail_ex+0x512/0x640 [ 1273.879319][T19404] _copy_from_user+0x2e/0xd0 [ 1273.879336][T19404] copy_msghdr_from_user+0x98/0x160 [ 1273.879352][T19404] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1273.879390][T19404] ___sys_sendmsg+0xfe/0x1d0 [ 1273.879407][T19404] ? __pfx____sys_sendmsg+0x10/0x10 [ 1273.879420][T19404] ? __lock_acquire+0x622/0x1c90 [ 1273.879465][T19404] __sys_sendmsg+0x16d/0x220 [ 1273.879481][T19404] ? __pfx___sys_sendmsg+0x10/0x10 [ 1273.879511][T19404] do_syscall_64+0xcd/0x4c0 [ 1273.879530][T19404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1273.879546][T19404] RIP: 0033:0x7fe342d8e9a9 [ 1273.879558][T19404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1273.879574][T19404] RSP: 002b:00007fe340bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1273.879590][T19404] RAX: ffffffffffffffda RBX: 00007fe342fb6080 RCX: 00007fe342d8e9a9 [ 1273.879601][T19404] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1273.879610][T19404] RBP: 00007fe340bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1273.879620][T19404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1273.879630][T19404] R13: 0000000000000000 R14: 00007fe342fb6080 R15: 00007fff9182b548 [ 1273.879652][T19404] [ 1273.903791][ T43] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.0033/input/input86 [ 1273.963931][ T43] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.0033/input/input87 [ 1273.983234][ T43] kye 0003:0458:5011.0033: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.6-1/input0 [ 1274.071006][T19406] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1274.071452][T19406] binder: Unknown parameter '00' [ 1274.528354][T19419] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3471'. [ 1274.530549][T19419] team0: No ports can be present during mode change [ 1274.543994][T19415] loop6: detected capacity change from 0 to 524287999 [ 1275.119618][T15654] usb 7-1: reset high-speed USB device number 18 using dummy_hcd [ 1275.485686][T19431] FAULT_INJECTION: forcing a failure. [ 1275.485686][T19431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1275.499839][T19431] CPU: 1 UID: 0 PID: 19431 Comm: syz.5.3476 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 1275.499865][T19431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1275.499876][T19431] Call Trace: [ 1275.499881][T19431] [ 1275.499889][T19431] dump_stack_lvl+0x16c/0x1f0 [ 1275.499911][T19431] should_fail_ex+0x512/0x640 [ 1275.499942][T19431] _copy_from_user+0x2e/0xd0 [ 1275.499961][T19431] vmci_host_unlocked_ioctl+0x394/0x2040 [ 1275.499987][T19431] ? do_vfs_ioctl+0x523/0x1a60 [ 1275.500012][T19431] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 1275.500048][T19431] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 1275.500067][T19431] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 1275.500086][T19431] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1275.500112][T19431] ? hook_file_ioctl_common+0x145/0x410 [ 1275.500140][T19431] ? selinux_file_ioctl+0x180/0x270 [ 1275.500157][T19431] ? selinux_file_ioctl+0xb4/0x270 [ 1275.500175][T19431] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 1275.500203][T19431] __x64_sys_ioctl+0x18e/0x210 [ 1275.500228][T19431] do_syscall_64+0xcd/0x4c0 [ 1275.500246][T19431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.500265][T19431] RIP: 0033:0x7f1152d8e9a9 [ 1275.500280][T19431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1275.500297][T19431] RSP: 002b:00007f1153b6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1275.500315][T19431] RAX: ffffffffffffffda RBX: 00007f1152fb5fa0 RCX: 00007f1152d8e9a9 [ 1275.500326][T19431] RDX: 0000200000000980 RSI: 00000000000007cb RDI: 0000000000000003 [ 1275.500337][T19431] RBP: 00007f1153b6d090 R08: 0000000000000000 R09: 0000000000000000 [ 1275.500348][T19431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1275.500359][T19431] R13: 0000000000000000 R14: 00007f1152fb5fa0 R15: 00007ffd99c4e638 [ 1275.500383][T19431] [ 1276.095855][ T5904] usb 7-1: USB disconnect, device number 18 [ 1276.729693][ T30] audit: type=1800 audit(1753850260.064:1888): pid=19441 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.3480" name="bus" dev="overlay" ino=773 res=0 errno=0 [ 1277.576657][ T30] audit: type=1800 audit(1753850260.534:1889): pid=19443 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.3479" name="bus" dev="overlay" ino=1235 res=0 errno=0 [ 1279.027621][T18085] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1279.177476][T18085] usb 2-1: Using ep0 maxpacket: 32 [ 1279.179007][T18085] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 1279.180724][T18085] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1279.180746][T18085] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.180764][T18085] usb 2-1: Product: syz [ 1279.180783][T18085] usb 2-1: Manufacturer: syz [ 1279.180798][T18085] usb 2-1: SerialNumber: syz [ 1279.182917][T18085] usb 2-1: config 0 descriptor?? [ 1279.183465][T19454] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1279.188636][T18085] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input88 [ 1279.257857][T19460] overlayfs: missing 'lowerdir' [ 1280.308582][T19467] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1821 sclass=netlink_xfrm_socket pid=19467 comm=syz.5.3487 [ 1280.366005][T19470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3489'. [ 1280.367710][T19470] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3489'. [ 1281.164440][T19482] netlink: 'syz.5.3490': attribute type 13 has an invalid length. [ 1281.235204][T19482] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1281.452429][T19487] FAULT_INJECTION: forcing a failure. [ 1281.452429][T19487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1281.465860][T19487] CPU: 0 UID: 0 PID: 19487 Comm: syz.6.3492 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 1281.465886][T19487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1281.465897][T19487] Call Trace: [ 1281.465903][T19487] [ 1281.465910][T19487] dump_stack_lvl+0x16c/0x1f0 [ 1281.465932][T19487] should_fail_ex+0x512/0x640 [ 1281.465963][T19487] _copy_to_iter+0x463/0x16f0 [ 1281.465986][T19487] ? lockdep_hardirqs_on+0x7c/0x110 [ 1281.466011][T19487] ? __pfx__copy_to_iter+0x10/0x10 [ 1281.466027][T19487] ? rcu_preempt_deferred_qs_irqrestore+0x4f5/0xbc0 [ 1281.466057][T19487] seq_read_iter+0xcf8/0x12c0 [ 1281.466094][T19487] seq_read+0x39e/0x4e0 [ 1281.466118][T19487] ? __pfx_seq_read+0x10/0x10 [ 1281.466150][T19487] ? avc_policy_seqno+0x9/0x20 [ 1281.466166][T19487] ? __pfx_seq_read+0x10/0x10 [ 1281.466182][T19487] proc_reg_read+0x23d/0x330 [ 1281.466195][T19487] ? __pfx_proc_reg_read+0x10/0x10 [ 1281.466207][T19487] vfs_read+0x1e1/0xc60 [ 1281.466241][T19487] ? __pfx_vfs_read+0x10/0x10 [ 1281.466264][T19487] ? find_held_lock+0x2b/0x80 [ 1281.466285][T19487] ? __fget_files+0x204/0x3c0 [ 1281.466304][T19487] ? __fget_files+0x20e/0x3c0 [ 1281.466317][T19487] ? __fget_files+0x190/0x3c0 [ 1281.466334][T19487] __x64_sys_pread64+0x1eb/0x250 [ 1281.466351][T19487] ? __pfx___x64_sys_pread64+0x10/0x10 [ 1281.466372][T19487] do_syscall_64+0xcd/0x4c0 [ 1281.466384][T19487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1281.466401][T19487] RIP: 0033:0x7fbb5bd8e9a9 [ 1281.466416][T19487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1281.466434][T19487] RSP: 002b:00007fbb5cc9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1281.466452][T19487] RAX: ffffffffffffffda RBX: 00007fbb5bfb6080 RCX: 00007fbb5bd8e9a9 [ 1281.466463][T19487] RDX: 0000000000018fd3 RSI: 0000200000019180 RDI: 0000000000000006 [ 1281.466474][T19487] RBP: 00007fbb5cc9e090 R08: 0000000000000000 R09: 0000000000000000 [ 1281.466484][T19487] R10: 0000000000000c2a R11: 0000000000000246 R12: 0000000000000001 [ 1281.466493][T19487] R13: 0000000000000000 R14: 00007fbb5bfb6080 R15: 00007ffd2696fec8 [ 1281.466509][T19487] [ 1281.681310][ C0] vkms_vblank_simulate: vblank timer overrun [ 1282.192958][T15654] usb 2-1: USB disconnect, device number 91 [ 1282.192959][ C1] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1282.229075][T19489] FAULT_INJECTION: forcing a failure. [ 1282.229075][T19489] name failslab, interval 1, probability 0, space 0, times 0 [ 1282.247624][T19489] CPU: 1 UID: 0 PID: 19489 Comm: syz.6.3493 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 1282.247648][T19489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1282.247658][T19489] Call Trace: [ 1282.247665][T19489] [ 1282.247672][T19489] dump_stack_lvl+0x16c/0x1f0 [ 1282.247693][T19489] should_fail_ex+0x512/0x640 [ 1282.247718][T19489] ? fs_reclaim_acquire+0xae/0x150 [ 1282.247741][T19489] should_failslab+0xc2/0x120 [ 1282.247758][T19489] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1282.247784][T19489] ? security_inode_alloc+0x3b/0x2b0 [ 1282.247813][T19489] security_inode_alloc+0x3b/0x2b0 [ 1282.247839][T19489] inode_init_always_gfp+0xce4/0x1030 [ 1282.247870][T19489] alloc_inode+0x86/0x240 [ 1282.247891][T19489] sock_alloc+0x40/0x280 [ 1282.247909][T19489] do_accept+0xf7/0x530 [ 1282.247924][T19489] ? rcu_read_unlock+0x17/0x60 [ 1282.247935][T19489] ? __pfx_do_accept+0x10/0x10 [ 1282.247963][T19489] io_accept+0x415/0x950 [ 1282.247983][T19489] ? __pfx_io_accept+0x10/0x10 [ 1282.248003][T19489] __io_issue_sqe+0xe8/0x7c0 [ 1282.248017][T19489] io_issue_sqe+0x86/0xe50 [ 1282.248033][T19489] io_submit_sqes+0x92d/0x2580 [ 1282.248055][T19489] __do_sys_io_uring_enter+0xd6a/0x1630 [ 1282.248073][T19489] ? __fget_files+0x20e/0x3c0 [ 1282.248082][T19489] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 1282.248100][T19489] ? fput+0x70/0xf0 [ 1282.248111][T19489] ? ksys_write+0x1ac/0x250 [ 1282.248127][T19489] ? __pfx_ksys_write+0x10/0x10 [ 1282.248147][T19489] do_syscall_64+0xcd/0x4c0 [ 1282.248159][T19489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1282.248171][T19489] RIP: 0033:0x7fbb5bd8e9a9 [ 1282.248181][T19489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1282.248192][T19489] RSP: 002b:00007fbb5ccbf038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1282.248202][T19489] RAX: ffffffffffffffda RBX: 00007fbb5bfb5fa0 RCX: 00007fbb5bd8e9a9 [ 1282.248210][T19489] RDX: 0000000000000000 RSI: 00000000000047bc RDI: 0000000000000004 [ 1282.248216][T19489] RBP: 00007fbb5ccbf090 R08: 0000000000000000 R09: 0000000000000000 [ 1282.248223][T19489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1282.248229][T19489] R13: 0000000000000000 R14: 00007fbb5bfb5fa0 R15: 00007ffd2696fec8 [ 1282.248243][T19489] [ 1282.865713][T15654] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1283.032795][T15654] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1283.046012][T15654] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1283.064245][T15654] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1283.086228][T15654] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1283.173451][T15654] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1283.266904][T15654] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.289418][T15654] usb 2-1: Product: syz [ 1283.298773][T15654] usb 2-1: Manufacturer: syz [ 1283.307649][T15654] usb 2-1: SerialNumber: syz [ 1283.533494][T19504] siw: device registration error -23 [ 1283.581086][ T30] audit: type=1326 audit(1753850266.918:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19503 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5bd8e9a9 code=0x7ffc0000 [ 1283.708009][ T30] audit: type=1326 audit(1753850266.948:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19503 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbb5bd8e9a9 code=0x7ffc0000 [ 1283.730903][ C0] vkms_vblank_simulate: vblank timer overrun [ 1283.738956][ T30] audit: type=1326 audit(1753850266.948:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19503 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5bd8e9a9 code=0x7ffc0000 [ 1283.896378][T19505] xt_l2tp: wrong L2TP version: 0 [ 1283.916099][T19510] FAULT_INJECTION: forcing a failure. [ 1283.916099][T19510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1283.929489][ T30] audit: type=1326 audit(1753850266.948:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19503 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5bd8e9a9 code=0x7ffc0000 [ 1283.931826][T19510] CPU: 1 UID: 0 PID: 19510 Comm: syz.7.3499 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 1283.931849][T19510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1283.931859][T19510] Call Trace: [ 1283.931864][T19510] [ 1283.931871][T19510] dump_stack_lvl+0x16c/0x1f0 [ 1283.931892][T19510] should_fail_ex+0x512/0x640 [ 1283.931921][T19510] _copy_from_user+0x2e/0xd0 [ 1283.931938][T19510] iommufd_vfio_ioctl+0x285/0xe90 [ 1283.931962][T19510] ? __pfx_iommufd_vfio_ioctl+0x10/0x10 [ 1283.931979][T19510] ? tomoyo_path_number_perm+0x18d/0x580 [ 1283.932010][T19510] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1283.932030][T19510] ? do_vfs_ioctl+0x523/0x1a60 [ 1283.932052][T19510] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1283.932077][T19510] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 1283.932097][T19510] iommufd_fops_ioctl+0x412/0x4e0 [ 1283.932122][T19510] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1283.932148][T19510] ? hook_file_ioctl_common+0x145/0x410 [ 1283.932173][T19510] ? selinux_file_ioctl+0x180/0x270 [ 1283.932187][T19510] ? selinux_file_ioctl+0xb4/0x270 [ 1283.932203][T19510] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1283.932228][T19510] __x64_sys_ioctl+0x18e/0x210 [ 1283.932250][T19510] do_syscall_64+0xcd/0x4c0 [ 1283.932267][T19510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.932283][T19510] RIP: 0033:0x7f8da6d8e9a9 [ 1283.932296][T19510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1283.932311][T19510] RSP: 002b:00007f8da4bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1283.932327][T19510] RAX: ffffffffffffffda RBX: 00007f8da6fb5fa0 RCX: 00007f8da6d8e9a9 [ 1283.932337][T19510] RDX: 0000000000000000 RSI: 0000000000003b72 RDI: 0000000000000003 [ 1283.932346][T19510] RBP: 00007f8da4bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1283.932356][T19510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1283.932365][T19510] R13: 0000000000000000 R14: 00007f8da6fb5fa0 R15: 00007fff6ab705e8 [ 1283.932386][T19510] [ 1284.210894][T19512] trusted_key: encrypted_key: insufficient parameters specified [ 1284.250423][T19512] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3500'. [ 1284.773552][ T30] audit: type=1326 audit(1753850266.948:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19503 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7fbb5bd8e9a9 code=0x7ffc0000 [ 1284.805119][ T30] audit: type=1326 audit(1753850266.948:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19503 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5bd8e9a9 code=0x7ffc0000 [ 1284.828746][ T30] audit: type=1326 audit(1753850266.948:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19503 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5bd8e9a9 code=0x7ffc0000 [ 1284.852159][ T30] audit: type=1326 audit(1753850266.948:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19503 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb5bd8e9a9 code=0x7ffc0000 [ 1284.889010][T19519] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3501'. [ 1284.905188][T19519] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3501'. [ 1284.914467][T19519] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3501'. [ 1284.925348][ T30] audit: type=1326 audit(1753850266.948:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19503 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5bd8e9a9 code=0x7ffc0000 [ 1284.977872][T19522] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3502'. [ 1285.011166][ T30] audit: type=1326 audit(1753850266.948:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19503 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbb5bd8d310 code=0x7ffc0000 [ 1285.169663][T19527] overlayfs: missing 'workdir' [ 1286.047394][T18234] Bluetooth: hci2: Frame reassembly failed (-84) [ 1286.099892][T19533] overlayfs: missing 'workdir' [ 1286.208556][T15654] cdc_ncm 2-1:1.0: bind() failure [ 1287.239361][T15654] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1287.239929][T15654] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1287.240806][T15654] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 1287.244238][T15654] usb 2-1: USB disconnect, device number 92 [ 1288.103110][T17932] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1288.214606][T19550] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3512'. [ 1288.298717][T19552] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1288.699606][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1288.699634][ T30] audit: type=1400 audit(1753850272.040:1909): avc: denied { write } for pid=19555 comm="syz.1.3514" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1289.033171][T19564] tipc: Started in network mode [ 1289.038144][T19564] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 1289.045959][T19564] tipc: Enabled bearer , priority 10 [ 1290.216134][T19560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3515'. [ 1290.233166][T19560] team0: Unable to change to the same mode the team is in [ 1290.926827][ T43] tipc: Node number set to 10005162 [ 1291.301866][ T43] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1291.462814][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 1291.610366][ T43] usb 2-1: device descriptor read/all, error -71 [ 1292.571715][T19588] xt_l2tp: wrong L2TP version: 0 [ 1293.924719][T19593] overlayfs: missing 'workdir' [ 1294.897170][ T30] audit: type=1400 audit(1753850278.213:1910): avc: denied { append } for pid=19594 comm="syz.5.3523" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1295.369399][T15654] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1295.683798][T15654] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1295.881281][T15654] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1295.905406][T15654] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1295.922001][ T30] audit: type=1800 audit(1753850279.244:1911): pid=19597 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.3523" name="/" dev="9p" ino=2 res=0 errno=0 [ 1295.922025][T15654] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 1295.957522][T15654] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.032597][T15654] usb 2-1: config 0 descriptor?? [ 1296.783520][T15654] hid-udraw 0003:20D6:CB17.0034: item fetching failed at offset 5/7 [ 1296.836138][T15654] hid-udraw 0003:20D6:CB17.0034: parse failed [ 1296.842463][T15654] hid-udraw 0003:20D6:CB17.0034: probe with driver hid-udraw failed with error -22 [ 1297.031207][T19599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1297.040728][T19599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1297.179109][T19622] netlink: 'syz.6.3529': attribute type 13 has an invalid length. [ 1297.311430][ T24] usb 2-1: USB disconnect, device number 95 [ 1297.388564][T19622] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1297.438154][T19632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3533'. [ 1298.914946][T19636] FAULT_INJECTION: forcing a failure. [ 1298.914946][T19636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1298.932269][T19636] CPU: 0 UID: 0 PID: 19636 Comm: syz.1.3534 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 1298.932287][T19636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1298.932293][T19636] Call Trace: [ 1298.932298][T19636] [ 1298.932302][T19636] dump_stack_lvl+0x16c/0x1f0 [ 1298.932319][T19636] should_fail_ex+0x512/0x640 [ 1298.932338][T19636] _copy_from_user+0x2e/0xd0 [ 1298.932350][T19636] restore_altstack+0x93/0x170 [ 1298.932368][T19636] ? __pfx_restore_altstack+0x10/0x10 [ 1298.932385][T19636] ? _raw_spin_unlock_irq+0x23/0x50 [ 1298.932401][T19636] ? lockdep_hardirqs_on+0x7c/0x110 [ 1298.932418][T19636] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1298.932433][T19636] ? set_current_blocked+0xdd/0x120 [ 1298.932446][T19636] __do_sys_rt_sigreturn+0x13c/0x230 [ 1298.932460][T19636] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 1298.932477][T19636] do_syscall_64+0xcd/0x4c0 [ 1298.932488][T19636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.932500][T19636] RIP: 0033:0x7fe342d2ab89 [ 1298.932510][T19636] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 1298.932521][T19636] RSP: 002b:00007fe343b1e340 EFLAGS: 00000206 ORIG_RAX: 000000000000000f [ 1298.932533][T19636] RAX: ffffffffffffffda RBX: 00007fe342fb5fa0 RCX: 00007fe342d2ab89 [ 1298.932540][T19636] RDX: 00007fe343b1e340 RSI: 00007fe343b1e470 RDI: 0000000000000021 [ 1298.932547][T19636] RBP: 00007fe343b1f090 R08: 0000000000000000 R09: 0000000000000000 [ 1298.932553][T19636] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 1298.932560][T19636] R13: 0000000000000000 R14: 00007fe342fb5fa0 R15: 00007fff9182b548 [ 1298.932573][T19636] [ 1299.107089][ C0] vkms_vblank_simulate: vblank timer overrun [ 1299.261257][T19633] team0: Unable to change to the same mode the team is in [ 1299.315088][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.350562][T19645] FAULT_INJECTION: forcing a failure. [ 1299.350562][T19645] name failslab, interval 1, probability 0, space 0, times 0 [ 1299.378764][T19645] CPU: 1 UID: 0 PID: 19645 Comm: syz.1.3536 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 1299.378796][T19645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1299.378806][T19645] Call Trace: [ 1299.378812][T19645] [ 1299.378819][T19645] dump_stack_lvl+0x16c/0x1f0 [ 1299.378843][T19645] should_fail_ex+0x512/0x640 [ 1299.378865][T19645] ? __kmalloc_noprof+0xbf/0x510 [ 1299.378882][T19645] ? lsm_blob_alloc+0x68/0x90 [ 1299.378896][T19645] should_failslab+0xc2/0x120 [ 1299.378907][T19645] __kmalloc_noprof+0xd2/0x510 [ 1299.378927][T19645] lsm_blob_alloc+0x68/0x90 [ 1299.378941][T19645] security_sk_alloc+0x30/0x270 [ 1299.378958][T19645] sk_prot_alloc+0xfb/0x2a0 [ 1299.378973][T19645] sk_alloc+0x36/0xc20 [ 1299.378990][T19645] inet_create+0x3a1/0x1040 [ 1299.379008][T19645] ? inet_create+0x93/0x1040 [ 1299.379025][T19645] __sock_create+0x335/0x8d0 [ 1299.379042][T19645] mptcp_subflow_create_socket+0xf5/0xed0 [ 1299.379056][T19645] ? avc_has_perm_noaudit+0x117/0x3b0 [ 1299.379071][T19645] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 1299.379089][T19645] __mptcp_nmpc_sk+0x182/0x7d0 [ 1299.379105][T19645] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 1299.379119][T19645] ? __lock_acquire+0xb8a/0x1c90 [ 1299.379134][T19645] mptcp_connect+0x7d/0xaf0 [ 1299.379150][T19645] __inet_stream_connect+0x914/0xf60 [ 1299.379169][T19645] ? __pfx___inet_stream_connect+0x10/0x10 [ 1299.379185][T19645] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1299.379199][T19645] ? __pfx_inet_stream_connect+0x10/0x10 [ 1299.379215][T19645] ? __local_bh_enable_ip+0xa4/0x120 [ 1299.379232][T19645] ? __pfx_inet_stream_connect+0x10/0x10 [ 1299.379247][T19645] inet_stream_connect+0x57/0xa0 [ 1299.379264][T19645] __sys_connect_file+0x141/0x1a0 [ 1299.379281][T19645] __sys_connect+0x13b/0x160 [ 1299.379296][T19645] ? __pfx___sys_connect+0x10/0x10 [ 1299.379316][T19645] ? __pfx_ksys_write+0x10/0x10 [ 1299.379336][T19645] __x64_sys_connect+0x72/0xb0 [ 1299.379351][T19645] ? lockdep_hardirqs_on+0x7c/0x110 [ 1299.379368][T19645] do_syscall_64+0xcd/0x4c0 [ 1299.379379][T19645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1299.379395][T19645] RIP: 0033:0x7fe342d8e9a9 [ 1299.379404][T19645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1299.379415][T19645] RSP: 002b:00007fe343b1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1299.379427][T19645] RAX: ffffffffffffffda RBX: 00007fe342fb5fa0 RCX: 00007fe342d8e9a9 [ 1299.379434][T19645] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000005 [ 1299.379440][T19645] RBP: 00007fe343b1f090 R08: 0000000000000000 R09: 0000000000000000 [ 1299.379447][T19645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1299.379453][T19645] R13: 0000000000000000 R14: 00007fe342fb5fa0 R15: 00007fff9182b548 [ 1299.379467][T19645] [ 1300.235792][T19658] FAULT_INJECTION: forcing a failure. [ 1300.235792][T19658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1300.253826][T19658] CPU: 1 UID: 0 PID: 19658 Comm: syz.7.3540 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 1300.253844][T19658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1300.253851][T19658] Call Trace: [ 1300.253855][T19658] [ 1300.253859][T19658] dump_stack_lvl+0x16c/0x1f0 [ 1300.253874][T19658] should_fail_ex+0x512/0x640 [ 1300.253894][T19658] _copy_to_user+0x32/0xd0 [ 1300.253906][T19658] simple_read_from_buffer+0xcb/0x170 [ 1300.253925][T19658] proc_fail_nth_read+0x197/0x270 [ 1300.253941][T19658] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1300.253958][T19658] ? rw_verify_area+0xcf/0x680 [ 1300.253972][T19658] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1300.253988][T19658] vfs_read+0x1e1/0xc60 [ 1300.254005][T19658] ? __pfx___mutex_lock+0x10/0x10 [ 1300.254017][T19658] ? __pfx_vfs_read+0x10/0x10 [ 1300.254036][T19658] ? __fget_files+0x20e/0x3c0 [ 1300.254049][T19658] ksys_read+0x12a/0x250 [ 1300.254064][T19658] ? __pfx_ksys_read+0x10/0x10 [ 1300.254084][T19658] do_syscall_64+0xcd/0x4c0 [ 1300.254096][T19658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1300.254107][T19658] RIP: 0033:0x7f8da6d8d3bc [ 1300.254117][T19658] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1300.254128][T19658] RSP: 002b:00007f8da4bf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1300.254140][T19658] RAX: ffffffffffffffda RBX: 00007f8da6fb5fa0 RCX: 00007f8da6d8d3bc [ 1300.254147][T19658] RDX: 000000000000000f RSI: 00007f8da4bf60a0 RDI: 0000000000000006 [ 1300.254153][T19658] RBP: 00007f8da4bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1300.254159][T19658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1300.254166][T19658] R13: 0000000000000000 R14: 00007f8da6fb5fa0 R15: 00007fff6ab705e8 [ 1300.254179][T19658] [ 1301.691530][ T43] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1301.977058][ T9] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 1301.992300][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1301.992332][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1301.992364][ T43] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1301.992382][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.993581][ T43] usb 5-1: config 0 descriptor?? [ 1302.248635][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1302.248664][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1302.248702][ T9] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1302.248721][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.252385][ T9] usb 7-1: config 0 descriptor?? [ 1302.255191][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1302.255226][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 1302.265598][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1302.266388][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1302.266427][ T9] usb 7-1: media controller created [ 1302.267735][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1302.272649][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 1302.272709][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1302.275692][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input89 [ 1302.279501][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 1302.279515][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1302.835408][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1302.835437][ T9] dvb-usb: error while querying for an remote control event. [ 1302.964885][ T43] cp2112 0003:10C4:EA90.0035: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1303.463287][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1303.463315][ T9] dvb-usb: error while querying for an remote control event. [ 1303.479257][ T43] cp2112 0003:10C4:EA90.0035: error requesting version [ 1303.480151][ T43] cp2112 0003:10C4:EA90.0035: probe with driver cp2112 failed with error -32 [ 1303.615245][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1303.615275][ T9] dvb-usb: error while querying for an remote control event. [ 1303.740719][T19701] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3552'. [ 1303.748714][T19701] team0: No ports can be present during mode change [ 1303.778445][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1303.779537][ T9] dvb-usb: error while querying for an remote control event. [ 1303.935170][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1303.935203][ T9] dvb-usb: error while querying for an remote control event. [ 1304.095134][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1304.095202][ T9] dvb-usb: error while querying for an remote control event. [ 1304.255405][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1304.255437][ T9] dvb-usb: error while querying for an remote control event. [ 1304.437558][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1304.437625][ T9] dvb-usb: error while querying for an remote control event. [ 1304.606905][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1304.606936][ T9] dvb-usb: error while querying for an remote control event. [ 1304.777914][ T5937] usb 7-1: USB disconnect, device number 19 [ 1305.639334][ T5937] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1305.807240][T15654] usb 5-1: USB disconnect, device number 122 [ 1306.871546][T19705] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3553'. [ 1306.951516][T19709] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3553'. [ 1308.083748][T19731] netlink: 'syz.1.3558': attribute type 13 has an invalid length. [ 1308.223263][T19731] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1309.332016][T19742] kvm: pic: non byte write [ 1309.333011][T19744] kvm: vcpu 0: requested 64 ns lapic timer period limited to 200000 ns [ 1311.121610][T19752] siw: device registration error -23 [ 1311.159627][ T30] audit: type=1326 audit(1753850294.501:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19751 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5bd8e9a9 code=0x7ffc0000 [ 1311.159683][ T30] audit: type=1326 audit(1753850294.501:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19751 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbb5bd8e9a9 code=0x7ffc0000 [ 1311.159721][ T30] audit: type=1326 audit(1753850294.501:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19751 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5bd8e9a9 code=0x7ffc0000 [ 1311.159757][ T30] audit: type=1326 audit(1753850294.501:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19751 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7fbb5bd8e9a9 code=0x7ffc0000 [ 1311.159793][ T30] audit: type=1326 audit(1753850294.501:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19751 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5bd8e9a9 code=0x7ffc0000 [ 1311.159828][ T30] audit: type=1326 audit(1753850294.501:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19751 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb5bd8e9a9 code=0x7ffc0000 [ 1311.159865][ T30] audit: type=1326 audit(1753850294.501:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19751 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5bd8e9a9 code=0x7ffc0000 [ 1311.159904][ T30] audit: type=1326 audit(1753850294.501:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19751 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5bd8e9a9 code=0x7ffc0000 [ 1311.333558][ T30] audit: type=1326 audit(1753850294.501:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19751 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbb5bd8d60a code=0x7ffc0000 [ 1311.333716][ T30] audit: type=1326 audit(1753850294.681:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19751 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbb5bdc1265 code=0x7ffc0000 [ 1311.629006][T19759] netlink: 'syz.5.3564': attribute type 8 has an invalid length. [ 1312.424432][T19769] FAULT_INJECTION: forcing a failure. [ 1312.424432][T19769] name failslab, interval 1, probability 0, space 0, times 0 [ 1312.424456][T19769] CPU: 1 UID: 0 PID: 19769 Comm: syz.7.3568 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 1312.424470][T19769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1312.424477][T19769] Call Trace: [ 1312.424481][T19769] [ 1312.424485][T19769] dump_stack_lvl+0x16c/0x1f0 [ 1312.424500][T19769] should_fail_ex+0x512/0x640 [ 1312.424517][T19769] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1312.424537][T19769] should_failslab+0xc2/0x120 [ 1312.424548][T19769] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1312.424565][T19769] ? __alloc_skb+0x2b2/0x380 [ 1312.424584][T19769] __alloc_skb+0x2b2/0x380 [ 1312.424600][T19769] ? __pfx___alloc_skb+0x10/0x10 [ 1312.424618][T19769] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1312.424634][T19769] netlink_alloc_large_skb+0x69/0x130 [ 1312.424648][T19769] netlink_sendmsg+0x6a1/0xdd0 [ 1312.424663][T19769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1312.424686][T19769] ____sys_sendmsg+0xa95/0xc70 [ 1312.424701][T19769] ? copy_msghdr_from_user+0x10a/0x160 [ 1312.424711][T19769] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1312.424731][T19769] ___sys_sendmsg+0x134/0x1d0 [ 1312.424742][T19769] ? __pfx____sys_sendmsg+0x10/0x10 [ 1312.424751][T19769] ? __lock_acquire+0x622/0x1c90 [ 1312.424777][T19769] __sys_sendmsg+0x16d/0x220 [ 1312.424787][T19769] ? __pfx___sys_sendmsg+0x10/0x10 [ 1312.424806][T19769] do_syscall_64+0xcd/0x4c0 [ 1312.424818][T19769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1312.424830][T19769] RIP: 0033:0x7f8da6d8e9a9 [ 1312.424839][T19769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1312.424850][T19769] RSP: 002b:00007f8da4bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1312.424861][T19769] RAX: ffffffffffffffda RBX: 00007f8da6fb5fa0 RCX: 00007f8da6d8e9a9 [ 1312.424868][T19769] RDX: 0000000020040810 RSI: 0000200000000080 RDI: 0000000000000003 [ 1312.424875][T19769] RBP: 00007f8da4bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1312.424881][T19769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1312.424887][T19769] R13: 0000000000000000 R14: 00007f8da6fb5fa0 R15: 00007fff6ab705e8 [ 1312.424900][T19769] [ 1312.564735][T19771] (unnamed net_device) (uninitialized): down delay (7) is not a multiple of miimon (3), value rounded to 6 ms [ 1312.603668][ T9] usb 7-1: new low-speed USB device number 20 using dummy_hcd [ 1312.654132][T19771] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1312.933231][T19775] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 1313.210418][ T9] usb 7-1: config 0 has an invalid interface number: 4 but max is 0 [ 1313.210449][ T9] usb 7-1: config 0 has no interface number 0 [ 1313.210605][ T9] usb 7-1: too many endpoints for config 0 interface 4 altsetting 0: 255, using maximum allowed: 30 [ 1313.218502][ T9] usb 7-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1313.218626][ T9] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1313.218661][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.262324][ T9] usb 7-1: config 0 descriptor?? [ 1313.611622][ T9] usb 7-1: string descriptor 0 read error: -71 [ 1313.680267][ T9] asix 7-1:0.4 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1313.680458][ T9] asix 7-1:0.4: probe with driver asix failed with error -71 [ 1313.682344][ T9] usb 7-1: USB disconnect, device number 20 [ 1314.111975][T19792] xt_l2tp: wrong L2TP version: 0 [ 1314.644866][T19797] FAULT_INJECTION: forcing a failure. [ 1314.644866][T19797] name failslab, interval 1, probability 0, space 0, times 0 [ 1314.660531][T19797] CPU: 1 UID: 0 PID: 19797 Comm: syz.5.3577 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 1314.660557][T19797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1314.660568][T19797] Call Trace: [ 1314.660574][T19797] [ 1314.660590][T19797] dump_stack_lvl+0x16c/0x1f0 [ 1314.660613][T19797] should_fail_ex+0x512/0x640 [ 1314.660645][T19797] should_failslab+0xc2/0x120 [ 1314.660664][T19797] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1314.660692][T19797] ? skb_clone+0x190/0x3f0 [ 1314.660713][T19797] skb_clone+0x190/0x3f0 [ 1314.660732][T19797] netlink_deliver_tap+0xabd/0xd30 [ 1314.660758][T19797] netlink_unicast+0x62f/0x850 [ 1314.660782][T19797] ? __pfx_netlink_unicast+0x10/0x10 [ 1314.660810][T19797] netlink_sendmsg+0x8d1/0xdd0 [ 1314.660835][T19797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1314.660866][T19797] ____sys_sendmsg+0xa95/0xc70 [ 1314.660889][T19797] ? copy_msghdr_from_user+0x10a/0x160 [ 1314.660905][T19797] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1314.660939][T19797] ___sys_sendmsg+0x134/0x1d0 [ 1314.660957][T19797] ? __pfx____sys_sendmsg+0x10/0x10 [ 1314.660972][T19797] ? __lock_acquire+0x622/0x1c90 [ 1314.661021][T19797] __sys_sendmsg+0x16d/0x220 [ 1314.661039][T19797] ? __pfx___sys_sendmsg+0x10/0x10 [ 1314.661074][T19797] do_syscall_64+0xcd/0x4c0 [ 1314.661094][T19797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1314.661112][T19797] RIP: 0033:0x7f1152d8e9a9 [ 1314.661127][T19797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1314.661144][T19797] RSP: 002b:00007f1153b6d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1314.661161][T19797] RAX: ffffffffffffffda RBX: 00007f1152fb5fa0 RCX: 00007f1152d8e9a9 [ 1314.661173][T19797] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000006 [ 1314.661184][T19797] RBP: 00007f1153b6d090 R08: 0000000000000000 R09: 0000000000000000 [ 1314.661194][T19797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1314.661205][T19797] R13: 0000000000000000 R14: 00007f1152fb5fa0 R15: 00007ffd99c4e638 [ 1314.661230][T19797] [ 1315.223710][T19813] netlink: 'syz.5.3578': attribute type 8 has an invalid length. [ 1316.816300][ T43] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1317.243344][ T43] usb 7-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 1317.346534][ T43] usb 7-1: config 0 has an invalid descriptor of length 107, skipping remainder of the config [ 1317.419320][ T43] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 65 [ 1317.419695][ T43] usb 7-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1317.509467][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.527415][ T43] usb 7-1: config 0 descriptor?? [ 1317.765100][T19808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1317.783429][T19808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1318.410118][T19836] netlink: 'syz.4.3588': attribute type 1 has an invalid length. [ 1318.445237][T19836] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1318.464629][ T3479] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1318.465311][T19836] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1318.512338][T19836] veth3: entered promiscuous mode [ 1318.521368][T19836] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 1318.542837][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1318.542851][ T30] audit: type=1400 audit(1753850301.895:1931): avc: denied { watch watch_reads } for pid=19835 comm="syz.4.3588" path="/dev/snd/pcmC0D0p" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 1318.589803][ T3479] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1318.676859][T19841] FAULT_INJECTION: forcing a failure. [ 1318.676859][T19841] name failslab, interval 1, probability 0, space 0, times 0 [ 1318.689841][T19841] CPU: 0 UID: 0 PID: 19841 Comm: syz.4.3589 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 1318.689866][T19841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1318.689876][T19841] Call Trace: [ 1318.689883][T19841] [ 1318.689890][T19841] dump_stack_lvl+0x16c/0x1f0 [ 1318.689911][T19841] should_fail_ex+0x512/0x640 [ 1318.689942][T19841] should_failslab+0xc2/0x120 [ 1318.689961][T19841] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1318.689989][T19841] ? skb_clone+0x190/0x3f0 [ 1318.690010][T19841] skb_clone+0x190/0x3f0 [ 1318.690028][T19841] netlink_deliver_tap+0xabd/0xd30 [ 1318.690054][T19841] netlink_unicast+0x62f/0x850 [ 1318.690078][T19841] ? __pfx_netlink_unicast+0x10/0x10 [ 1318.690106][T19841] netlink_sendmsg+0x8d1/0xdd0 [ 1318.690129][T19841] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1318.690156][T19841] ____sys_sendmsg+0xa95/0xc70 [ 1318.690178][T19841] ? copy_msghdr_from_user+0x10a/0x160 [ 1318.690194][T19841] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1318.690228][T19841] ___sys_sendmsg+0x134/0x1d0 [ 1318.690246][T19841] ? __pfx____sys_sendmsg+0x10/0x10 [ 1318.690260][T19841] ? __lock_acquire+0x622/0x1c90 [ 1318.690300][T19841] ? try_to_wake_up+0xa20/0x1680 [ 1318.690330][T19841] __sys_sendmsg+0x16d/0x220 [ 1318.690347][T19841] ? __pfx___sys_sendmsg+0x10/0x10 [ 1318.690362][T19841] ? sched_clock_cpu+0x6c/0x530 [ 1318.690396][T19841] ? __pfx___rdmsr_safe_on_cpu+0x10/0x10 [ 1318.690430][T19841] do_syscall_64+0xcd/0x4c0 [ 1318.690449][T19841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1318.690467][T19841] RIP: 0033:0x7f10e838e9a9 [ 1318.690481][T19841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1318.690498][T19841] RSP: 002b:00007f10e926e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1318.690515][T19841] RAX: ffffffffffffffda RBX: 00007f10e85b6080 RCX: 00007f10e838e9a9 [ 1318.690527][T19841] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1318.690537][T19841] RBP: 00007f10e926e090 R08: 0000000000000000 R09: 0000000000000000 [ 1318.690547][T19841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1318.690558][T19841] R13: 0000000000000000 R14: 00007f10e85b6080 R15: 00007ffe96d27aa8 [ 1318.690583][T19841] [ 1319.212057][ T9] usb 7-1: USB disconnect, device number 21 [ 1319.230793][T19844] FAULT_INJECTION: forcing a failure. [ 1319.230793][T19844] name failslab, interval 1, probability 0, space 0, times 0 [ 1319.251937][T19844] CPU: 1 UID: 0 PID: 19844 Comm: syz.1.3590 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 1319.251967][T19844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1319.251978][T19844] Call Trace: [ 1319.251985][T19844] [ 1319.251992][T19844] dump_stack_lvl+0x16c/0x1f0 [ 1319.252015][T19844] should_fail_ex+0x512/0x640 [ 1319.252042][T19844] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1319.252072][T19844] should_failslab+0xc2/0x120 [ 1319.252090][T19844] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1319.252117][T19844] ? getname_flags.part.0+0x4c/0x550 [ 1319.252143][T19844] getname_flags.part.0+0x4c/0x550 [ 1319.252168][T19844] getname_flags+0x93/0xf0 [ 1319.252193][T19844] user_path_at+0x24/0x60 [ 1319.252221][T19844] __x64_sys_mount+0x1fc/0x310 [ 1319.252242][T19844] ? __pfx___x64_sys_mount+0x10/0x10 [ 1319.252268][T19844] do_syscall_64+0xcd/0x4c0 [ 1319.252295][T19844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1319.252313][T19844] RIP: 0033:0x7fe342d8e9a9 [ 1319.252329][T19844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1319.252348][T19844] RSP: 002b:00007fe343b1f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1319.252366][T19844] RAX: ffffffffffffffda RBX: 00007fe342fb5fa0 RCX: 00007fe342d8e9a9 [ 1319.252378][T19844] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 1319.252390][T19844] RBP: 00007fe343b1f090 R08: 0000200000000500 R09: 0000000000000000 [ 1319.252401][T19844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1319.252413][T19844] R13: 0000000000000000 R14: 00007fe342fb5fa0 R15: 00007fff9182b548 [ 1319.252437][T19844] [ 1319.424943][ C1] vkms_vblank_simulate: vblank timer overrun [ 1319.534232][T19855] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1319.544661][T19855] binder: Unknown parameter '00' [ 1319.878489][T19864] binder: 19858:19864 ioctl c0306201 200000000000 returned -14 [ 1320.243627][T19862] netlink: 'syz.4.3595': attribute type 4 has an invalid length. [ 1320.252626][T19862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1321.027099][T19876] ptrace attach of "./syz-executor exec"[17511] was attempted by "./syz-executor exec"[19876] [ 1321.525267][T19889] program syz.5.3604 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1321.550295][T19889] program syz.5.3604 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1321.561410][T19889] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1321.571467][T15654] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1321.687975][ T9] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1321.836552][T15654] usb 7-1: Using ep0 maxpacket: 32 [ 1321.857908][ T9] usb 5-1: device descriptor read/64, error -71 [ 1321.865432][T15654] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 1322.038737][T15654] usb 7-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1322.048829][T15654] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.057147][T15654] usb 7-1: Product: syz [ 1322.061825][T15654] usb 7-1: Manufacturer: syz [ 1322.068835][T15654] usb 7-1: SerialNumber: syz [ 1322.088175][T15654] usb 7-1: config 0 descriptor?? [ 1322.110604][T19879] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1322.170823][ T9] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1322.206736][T15654] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input92 [ 1322.345951][ T9] usb 5-1: device descriptor read/64, error -71 [ 1322.399591][T19894] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1322.409048][T19894] binder: Unknown parameter '00' [ 1322.456364][ T9] usb usb5-port1: attempt power cycle [ 1323.505358][ T9] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1323.680351][T19903] netlink: 'syz.5.3609': attribute type 4 has an invalid length. [ 1323.690044][T19903] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1323.728632][ T9] usb 5-1: device descriptor read/8, error -71 [ 1324.265132][ T9] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1324.324687][ T9] usb 5-1: device descriptor read/8, error -71 [ 1324.455470][ T9] usb usb5-port1: unable to enumerate USB device [ 1325.481837][ T9] usb 7-1: USB disconnect, device number 22 [ 1325.487816][ C0] usbtouchscreen 7-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1325.955256][T19929] xt_l2tp: wrong L2TP version: 0 [ 1327.496549][T19947] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 1327.673444][ T43] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1327.762221][T19956] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3625'. [ 1327.873241][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 1327.881932][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1327.895397][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1327.911620][ T43] usb 5-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 1327.930990][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.969841][ T43] usb 5-1: config 0 descriptor?? [ 1328.441234][ T43] nintendo 0003:057E:2019.0036: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.4-1/input0 [ 1328.532951][ T43] nintendo 0003:057E:2019.0036: Failed to get joycon info; ret=-38 [ 1328.552006][ T43] nintendo 0003:057E:2019.0036: Failed to retrieve controller info; ret=-38 [ 1328.598188][ T43] nintendo 0003:057E:2019.0036: Failed to initialize controller; ret=-38 [ 1328.645936][ T43] nintendo 0003:057E:2019.0036: probe - fail = -38 [ 1328.660787][ T30] audit: type=1400 audit(1753850312.010:1932): avc: denied { listen } for pid=19961 comm="syz.7.3628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1328.680784][ T43] nintendo 0003:057E:2019.0036: probe with driver nintendo failed with error -38 [ 1328.716125][ T30] audit: type=1400 audit(1753850312.010:1933): avc: denied { accept } for pid=19961 comm="syz.7.3628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1329.256943][ T5875] usb 5-1: USB disconnect, device number 127 [ 1330.492352][T19991] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3635'. [ 1330.596587][T19994] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1331.011949][ T43] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1331.143739][ T43] usb 7-1: device descriptor read/64, error -71 [ 1331.329339][T19998] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1331.347475][T19998] binder: Unknown parameter '00' [ 1331.357388][T20000] FAULT_INJECTION: forcing a failure. [ 1331.357388][T20000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1331.402137][ T5875] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1331.402251][T20000] CPU: 1 UID: 0 PID: 20000 Comm: syz.4.3640 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 1331.402274][T20000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1331.402283][T20000] Call Trace: [ 1331.402289][T20000] [ 1331.402296][T20000] dump_stack_lvl+0x16c/0x1f0 [ 1331.402316][T20000] should_fail_ex+0x512/0x640 [ 1331.402344][T20000] _copy_to_user+0x32/0xd0 [ 1331.402362][T20000] simple_read_from_buffer+0xcb/0x170 [ 1331.402387][T20000] proc_fail_nth_read+0x197/0x270 [ 1331.402412][T20000] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1331.402435][T20000] ? rw_verify_area+0xcf/0x680 [ 1331.402455][T20000] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1331.402477][T20000] vfs_read+0x1e1/0xc60 [ 1331.402503][T20000] ? __pfx___mutex_lock+0x10/0x10 [ 1331.402519][T20000] ? __pfx_vfs_read+0x10/0x10 [ 1331.402547][T20000] ? __fget_files+0x20e/0x3c0 [ 1331.402568][T20000] ksys_read+0x12a/0x250 [ 1331.402589][T20000] ? __pfx_ksys_read+0x10/0x10 [ 1331.402618][T20000] do_syscall_64+0xcd/0x4c0 [ 1331.402635][T20000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1331.402652][T20000] RIP: 0033:0x7f10e838d3bc [ 1331.402665][T20000] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1331.402680][T20000] RSP: 002b:00007f10e928f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1331.402695][T20000] RAX: ffffffffffffffda RBX: 00007f10e85b5fa0 RCX: 00007f10e838d3bc [ 1331.402706][T20000] RDX: 000000000000000f RSI: 00007f10e928f0a0 RDI: 0000000000000004 [ 1331.402716][T20000] RBP: 00007f10e928f090 R08: 0000000000000000 R09: 0000000000000000 [ 1331.402725][T20000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1331.402735][T20000] R13: 0000000000000000 R14: 00007f10e85b5fa0 R15: 00007ffe96d27aa8 [ 1331.402756][T20000] [ 1331.422074][ T43] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1331.607320][ T5875] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1331.653316][ T5875] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1332.190884][ T43] usb 7-1: device descriptor read/64, error -71 [ 1332.476424][T20013] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3644'. [ 1332.519504][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.545491][ T5875] usb 2-1: config 0 descriptor?? [ 1332.576323][ T5875] pwc: Askey VC010 type 2 USB webcam detected. [ 1332.585843][ T43] usb usb7-port1: attempt power cycle [ 1333.002644][ T43] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1333.025183][ T43] usb 7-1: device descriptor read/8, error -71 [ 1333.263868][ T43] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1333.919142][ T43] usb 7-1: device descriptor read/8, error -71 [ 1334.093417][ T43] usb usb7-port1: unable to enumerate USB device [ 1334.140861][ T5875] pwc: send_video_command error -71 [ 1334.154762][ T5875] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1334.182298][ T5875] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 1334.205320][ T5875] usb 2-1: USB disconnect, device number 96 [ 1334.451147][T20041] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1334.948633][T20045] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1334.957657][T20045] binder: Unknown parameter '00' [ 1335.051801][T20048] loop6: detected capacity change from 0 to 524287999 [ 1335.092020][ T5875] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1335.162248][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1335.266409][ T5875] usb 2-1: device descriptor read/64, error -71 [ 1335.339448][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1335.389439][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1335.420146][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1335.592568][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1335.739948][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1335.818477][ T9] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1335.828558][ T9] usb 5-1: Manufacturer: syz [ 1335.843517][ T9] usb 5-1: config 0 descriptor?? [ 1336.095460][T20063] FAULT_INJECTION: forcing a failure. [ 1336.095460][T20063] name failslab, interval 1, probability 0, space 0, times 0 [ 1336.133636][T20063] CPU: 0 UID: 0 PID: 20063 Comm: syz.7.3662 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 1336.133665][T20063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1336.133677][T20063] Call Trace: [ 1336.133683][T20063] [ 1336.133691][T20063] dump_stack_lvl+0x16c/0x1f0 [ 1336.133716][T20063] should_fail_ex+0x512/0x640 [ 1336.133748][T20063] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1336.133777][T20063] should_failslab+0xc2/0x120 [ 1336.133796][T20063] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1336.133818][T20063] ? find_held_lock+0x2b/0x80 [ 1336.133841][T20063] ? alloc_pipe_info+0x10e/0x590 [ 1336.133864][T20063] alloc_pipe_info+0x10e/0x590 [ 1336.133885][T20063] splice_direct_to_actor+0x77d/0xa30 [ 1336.133915][T20063] ? __pfx_direct_splice_actor+0x10/0x10 [ 1336.133944][T20063] ? find_held_lock+0x2b/0x80 [ 1336.133966][T20063] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1336.133990][T20063] ? get_pid_task+0xfc/0x250 [ 1336.134014][T20063] do_splice_direct+0x174/0x240 [ 1336.134041][T20063] ? __pfx_do_splice_direct+0x10/0x10 [ 1336.134068][T20063] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1336.134095][T20063] ? bpf_lsm_file_permission+0x9/0x10 [ 1336.134115][T20063] ? security_file_permission+0x71/0x210 [ 1336.134135][T20063] ? rw_verify_area+0xcf/0x680 [ 1336.134160][T20063] do_sendfile+0xb06/0xe50 [ 1336.134189][T20063] ? __pfx_do_sendfile+0x10/0x10 [ 1336.134215][T20063] ? __fget_files+0x20e/0x3c0 [ 1336.134238][T20063] __x64_sys_sendfile64+0x1d8/0x220 [ 1336.134256][T20063] ? ksys_write+0x1ac/0x250 [ 1336.134281][T20063] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1336.134308][T20063] do_syscall_64+0xcd/0x4c0 [ 1336.134328][T20063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1336.134346][T20063] RIP: 0033:0x7f8da6d8e9a9 [ 1336.134360][T20063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1336.134381][T20063] RSP: 002b:00007f8da4bd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1336.134400][T20063] RAX: ffffffffffffffda RBX: 00007f8da6fb6080 RCX: 00007f8da6d8e9a9 [ 1336.134412][T20063] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 1336.134423][T20063] RBP: 00007f8da4bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1336.134435][T20063] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000001 [ 1336.134446][T20063] R13: 0000000000000000 R14: 00007f8da6fb6080 R15: 00007fff6ab705e8 [ 1336.134471][T20063] [ 1336.390867][T20068] overlayfs: failed to resolve './file0': -2 [ 1336.753764][ T9] appleir 0003:05AC:8243.0037: unknown main item tag 0x0 [ 1336.835642][ T9] appleir 0003:05AC:8243.0037: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1337.954978][T20076] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20003 [ 1337.978183][ T30] audit: type=1400 audit(1753850325.338:1934): avc: denied { ioctl } for pid=20074 comm="syz.1.3664" path="socket:[64224]" dev="sockfs" ino=64224 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1337.992339][ T9] IPVS: starting estimator thread 0... [ 1338.002901][ C1] vkms_vblank_simulate: vblank timer overrun [ 1338.114027][ T5875] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 1338.353921][T20078] IPVS: using max 37 ests per chain, 88800 per kthread [ 1339.116783][T20103] xt_l2tp: wrong L2TP version: 0 [ 1339.561948][ T5875] usb 5-1: device descriptor read/64, error -71 [ 1339.751480][T20112] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 1339.872004][ T5875] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 1339.880619][ T5875] usb 5-1: device reset changed ep0 maxpacket size! [ 1339.891616][ T5882] usb 5-1: USB disconnect, device number 2 [ 1340.031991][ T5882] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1340.192134][ T5882] usb 5-1: Using ep0 maxpacket: 16 [ 1340.200412][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1340.226373][ T5882] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1340.264632][ T5882] usb 5-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 1340.275112][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1340.286600][ T5882] usb 5-1: config 0 descriptor?? [ 1340.559509][T20119] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1340.915829][ T5882] nintendo 0003:057E:2019.0038: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.4-1/input0 [ 1341.017099][ T5882] nintendo 0003:057E:2019.0038: Failed to get joycon info; ret=-38 [ 1341.050803][ T5882] nintendo 0003:057E:2019.0038: Failed to retrieve controller info; ret=-38 [ 1341.064605][ T5882] nintendo 0003:057E:2019.0038: Failed to initialize controller; ret=-38 [ 1341.078175][ T5882] nintendo 0003:057E:2019.0038: probe - fail = -38 [ 1341.096633][ T5882] nintendo 0003:057E:2019.0038: probe with driver nintendo failed with error -38 [ 1341.118791][ T5882] usb 5-1: USB disconnect, device number 3 [ 1341.355344][T20132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1341.384020][ T5882] wlan1: No basic rates, using min rate instead [ 1341.406891][ T5882] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 1341.417793][ T5882] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1341.437439][T18234] wlan1: authenticated [ 1341.441844][ T5882] wlan1: associating to AP 08:02:11:00:00:00 with corrupt probe response [ 1341.454422][T20132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1341.455537][T20137] bridge0: port 1(syz_tun) entered blocking state [ 1341.466292][T20132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1341.479435][ T3539] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0xa004 status=0 aid=12) [ 1341.488734][T20137] bridge0: port 1(syz_tun) entered disabled state [ 1341.511980][ T3539] wlan1: No basic rates, using min rate instead [ 1341.517003][T20137] syz_tun: entered allmulticast mode [ 1341.524385][ T3539] wlan1: associated [ 1341.525981][T20137] syz_tun: entered promiscuous mode [ 1341.537238][T20137] bridge0: port 1(syz_tun) entered blocking state [ 1341.544046][T20137] bridge0: port 1(syz_tun) entered forwarding state [ 1341.659126][T20144] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode [ 1341.699734][T20144] syz_tun: left allmulticast mode [ 1341.710415][T20144] syz_tun: left promiscuous mode [ 1341.720418][T20144] bridge0: port 1(syz_tun) entered disabled state [ 1341.743206][T20151] netlink: 'syz.5.3686': attribute type 10 has an invalid length. [ 1341.755921][T20151] mac80211_hwsim hwsim16 wlan1: left allmulticast mode [ 1341.781467][T20151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1341.797664][T20151] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1341.833082][T20154] 9pnet_virtio: no channels available for device syz [ 1341.888603][ T30] audit: type=1400 audit(1753850329.248:1935): avc: denied { connect } for pid=20157 comm="syz.6.3692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1341.974073][ T5875] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1341.993959][T20156] [ 1341.996323][T20156] ====================================================== [ 1342.003343][T20156] WARNING: possible circular locking dependency detected [ 1342.010367][T20156] 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 Not tainted [ 1342.017481][T20156] ------------------------------------------------------ [ 1342.024503][T20156] syz.5.3691/20156 is trying to acquire lock: [ 1342.030562][T20156] ffffffff8e72b5a8 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0xb4c/0x1470 [ 1342.040128][T20156] [ 1342.040128][T20156] but task is already holding lock: [ 1342.047474][T20156] ffff8880266658b0 (&q->q_usage_counter(io)#54){++++}-{0:0}, at: blk_mq_update_nr_hw_queues+0x275/0xcb0 [ 1342.058605][T20156] [ 1342.058605][T20156] which lock already depends on the new lock. [ 1342.058605][T20156] [ 1342.068984][T20156] [ 1342.068984][T20156] the existing dependency chain (in reverse order) is: [ 1342.077978][T20156] [ 1342.077978][T20156] -> #2 (&q->q_usage_counter(io)#54){++++}-{0:0}: [ 1342.086567][T20156] blk_alloc_queue+0x619/0x760 [ 1342.091843][T20156] blk_mq_alloc_queue+0x175/0x290 [ 1342.097382][T20156] __blk_mq_alloc_disk+0x29/0x120 [ 1342.102917][T20156] nbd_dev_add+0x4a0/0xbc0 [ 1342.107835][T20156] nbd_init+0x181/0x320 [ 1342.112495][T20156] do_one_initcall+0x120/0x6e0 [ 1342.117762][T20156] kernel_init_freeable+0x5c2/0x900 [ 1342.123461][T20156] kernel_init+0x1c/0x2b0 [ 1342.128299][T20156] ret_from_fork+0x5d4/0x6f0 [ 1342.133403][T20156] ret_from_fork_asm+0x1a/0x30 [ 1342.138671][T20156] [ 1342.138671][T20156] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1342.145866][T20156] fs_reclaim_acquire+0x102/0x150 [ 1342.151398][T20156] prepare_alloc_pages+0x162/0x610 [ 1342.157014][T20156] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1342.163425][T20156] __alloc_pages_noprof+0xb/0x1b0 [ 1342.168959][T20156] pcpu_populate_chunk+0x110/0xb00 [ 1342.174580][T20156] pcpu_alloc_noprof+0x86a/0x1470 [ 1342.180115][T20156] xt_percpu_counter_alloc+0x13e/0x1b0 [ 1342.186086][T20156] find_check_entry.constprop.0+0xbc/0x9b0 [ 1342.192404][T20156] translate_table+0xc98/0x1720 [ 1342.197768][T20156] ipt_register_table+0x102/0x430 [ 1342.203307][T20156] iptable_raw_table_init+0x63/0x90 [ 1342.209015][T20156] xt_find_table_lock+0x2e1/0x520 [ 1342.214551][T20156] xt_request_find_table_lock+0x28/0xf0 [ 1342.220604][T20156] get_info+0x19c/0x7c0 [ 1342.225266][T20156] do_ipt_get_ctl+0x169/0xaa0 [ 1342.230451][T20156] nf_getsockopt+0x79/0xe0 [ 1342.235375][T20156] ip_getsockopt+0x18c/0x1e0 [ 1342.240478][T20156] tcp_getsockopt+0xa1/0x100 [ 1342.245572][T20156] do_sock_getsockopt+0x34d/0x440 [ 1342.251104][T20156] __sys_getsockopt+0x12f/0x260 [ 1342.256467][T20156] __x64_sys_getsockopt+0xbd/0x160 [ 1342.262088][T20156] do_syscall_64+0xcd/0x4c0 [ 1342.267093][T20156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1342.273491][T20156] [ 1342.273491][T20156] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 1342.281205][T20156] __lock_acquire+0x126f/0x1c90 [ 1342.286558][T20156] lock_acquire+0x179/0x350 [ 1342.291563][T20156] __mutex_lock+0x199/0xb90 [ 1342.296568][T20156] pcpu_alloc_noprof+0xb4c/0x1470 [ 1342.302105][T20156] sbitmap_init_node+0x2fd/0x770 [ 1342.307548][T20156] sbitmap_queue_init_node+0x41/0x560 [ 1342.313426][T20156] blk_mq_init_tags+0x12d/0x2b0 [ 1342.318780][T20156] blk_mq_alloc_map_and_rqs+0x237/0xf60 [ 1342.324836][T20156] __blk_mq_alloc_map_and_rqs+0x128/0x1f0 [ 1342.331068][T20156] blk_mq_update_nr_hw_queues+0x4ab/0xcb0 [ 1342.337300][T20156] nbd_start_device+0x172/0xcd0 [ 1342.342655][T20156] nbd_ioctl+0x219/0xda0 [ 1342.347399][T20156] blkdev_ioctl+0x277/0x6d0 [ 1342.352407][T20156] __x64_sys_ioctl+0x18e/0x210 [ 1342.357678][T20156] do_syscall_64+0xcd/0x4c0 [ 1342.362684][T20156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1342.369081][T20156] [ 1342.369081][T20156] other info that might help us debug this: [ 1342.369081][T20156] [ 1342.379287][T20156] Chain exists of: [ 1342.379287][T20156] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#54 [ 1342.379287][T20156] [ 1342.392918][T20156] Possible unsafe locking scenario: [ 1342.392918][T20156] [ 1342.400348][T20156] CPU0 CPU1 [ 1342.405694][T20156] ---- ---- [ 1342.411036][T20156] lock(&q->q_usage_counter(io)#54); [ 1342.416401][T20156] lock(fs_reclaim); [ 1342.422885][T20156] lock(&q->q_usage_counter(io)#54); [ 1342.430764][T20156] lock(pcpu_alloc_mutex); [ 1342.435259][T20156] [ 1342.435259][T20156] *** DEADLOCK *** [ 1342.435259][T20156] [ 1342.443381][T20156] 5 locks held by syz.5.3691/20156: [ 1342.448554][T20156] #0: ffff8880268f6230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x150/0xda0 [ 1342.457845][T20156] #1: ffff8880268f6188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x32/0xcb0 [ 1342.469142][T20156] #2: ffff8880268f60d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x45/0xcb0 [ 1342.480005][T20156] #3: ffff8880266658b0 (&q->q_usage_counter(io)#54){++++}-{0:0}, at: blk_mq_update_nr_hw_queues+0x275/0xcb0 [ 1342.491571][T20156] #4: ffff8880266658e8 (&q->q_usage_counter(queue)#6){+.+.}-{0:0}, at: blk_mq_update_nr_hw_queues+0x275/0xcb0 [ 1342.503308][T20156] [ 1342.503308][T20156] stack backtrace: [ 1342.509184][T20156] CPU: 0 UID: 0 PID: 20156 Comm: syz.5.3691 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 1342.509203][T20156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1342.509213][T20156] Call Trace: [ 1342.509218][T20156] [ 1342.509224][T20156] dump_stack_lvl+0x116/0x1f0 [ 1342.509240][T20156] print_circular_bug+0x275/0x350 [ 1342.509263][T20156] check_noncircular+0x14c/0x170 [ 1342.509287][T20156] __lock_acquire+0x126f/0x1c90 [ 1342.509303][T20156] lock_acquire+0x179/0x350 [ 1342.509316][T20156] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 1342.509337][T20156] ? __pfx___might_resched+0x10/0x10 [ 1342.509357][T20156] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1342.509381][T20156] __mutex_lock+0x199/0xb90 [ 1342.509394][T20156] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 1342.509415][T20156] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 1342.509435][T20156] ? __pfx___mutex_lock+0x10/0x10 [ 1342.509448][T20156] ? kasan_save_track+0x14/0x30 [ 1342.509470][T20156] ? __kasan_kmalloc+0xaa/0xb0 [ 1342.509489][T20156] ? blk_mq_init_tags+0x87/0x2b0 [ 1342.509503][T20156] ? blk_mq_update_nr_hw_queues+0x4ab/0xcb0 [ 1342.509524][T20156] ? nbd_start_device+0x172/0xcd0 [ 1342.509541][T20156] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 1342.509560][T20156] pcpu_alloc_noprof+0xb4c/0x1470 [ 1342.509584][T20156] sbitmap_init_node+0x2fd/0x770 [ 1342.509603][T20156] sbitmap_queue_init_node+0x41/0x560 [ 1342.509621][T20156] blk_mq_init_tags+0x12d/0x2b0 [ 1342.509636][T20156] blk_mq_alloc_map_and_rqs+0x237/0xf60 [ 1342.509658][T20156] ? lockdep_hardirqs_on+0x7c/0x110 [ 1342.509684][T20156] __blk_mq_alloc_map_and_rqs+0x128/0x1f0 [ 1342.509706][T20156] blk_mq_update_nr_hw_queues+0x4ab/0xcb0 [ 1342.509728][T20156] ? __pfx___mutex_lock+0x10/0x10 [ 1342.509744][T20156] nbd_start_device+0x172/0xcd0 [ 1342.509758][T20156] ? bpf_lsm_capable+0x9/0x10 [ 1342.509779][T20156] nbd_ioctl+0x219/0xda0 [ 1342.509792][T20156] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 1342.509807][T20156] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 1342.509822][T20156] ? __pfx_nbd_ioctl+0x10/0x10 [ 1342.509835][T20156] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1342.509852][T20156] ? __pfx_nbd_ioctl+0x10/0x10 [ 1342.509866][T20156] blkdev_ioctl+0x277/0x6d0 [ 1342.509883][T20156] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1342.509900][T20156] ? selinux_file_ioctl+0x180/0x270 [ 1342.509913][T20156] ? selinux_file_ioctl+0xb4/0x270 [ 1342.509926][T20156] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1342.509944][T20156] __x64_sys_ioctl+0x18e/0x210 [ 1342.509963][T20156] do_syscall_64+0xcd/0x4c0 [ 1342.509978][T20156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1342.509992][T20156] RIP: 0033:0x7f1152d8e9a9 [ 1342.510005][T20156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1342.510020][T20156] RSP: 002b:00007f1153b6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1342.510033][T20156] RAX: ffffffffffffffda RBX: 00007f1152fb5fa0 RCX: 00007f1152d8e9a9 [ 1342.510043][T20156] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 1342.510052][T20156] RBP: 00007f1152e10d69 R08: 0000000000000000 R09: 0000000000000000 [ 1342.510065][T20156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1342.510074][T20156] R13: 0000000000000000 R14: 00007f1152fb5fa0 R15: 00007ffd99c4e638 [ 1342.510087][T20156] [ 1342.931969][ T5875] usb 5-1: Using ep0 maxpacket: 8 [ 1342.938169][ T5875] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1342.947952][ T5875] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1342.957922][ T5875] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1342.958968][T20156] block nbd5: shutting down sockets [ 1342.970823][ T5875] usb 5-1: config 1 interface 0 has no altsetting 1 [ 1342.984216][ T5875] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1342.993353][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.001332][ T5875] usb 5-1: Product: syz [ 1343.005544][ T5875] usb 5-1: Manufacturer: syz [ 1343.010129][ T5875] usb 5-1: SerialNumber: syz [ 1343.016338][ T5875] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 1343.226764][ T24] usb 5-1: USB disconnect, device number 4