last executing test programs: 18m11.711073658s ago: executing program 32 (id=189): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000040)={0x0, 0x6, 0x4000, 0x8b, 0x2, 0xfffffffc}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) socket$inet6(0xa, 0x2, 0x0) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x20000000}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB='utf8=0,shortname=lower,rodir,utf8=0,uni_xlate=1,utf8=0,iocharset=koi8-ru,shortname=lower,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,showexec,shortname=winnt,shortname=win95,rodir,nonumtail=0,errors=continue,nnonuage=936,nonumtail=0,shortname=winnt,shortname=win95,obj_user=errors=remount-ro,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$eJzs3U1vG1UXAODTvM1H85I6C4QECHFVNrCxkvAHGqFWQkQChRoVFkhTMgEr0zjyWEGuEHTHlt9RsWSHhPgDWcCeHbtsWHZRdVDsuPloCIvUHgrPI0X3xPce+4zHM7qb0dm//d3drc2yuZn1Yup6iqmImHoYsTiIhi4djlODeCaOux9vNW7/9tqHH3/y3ura2o31lG6u3np7JaV09fWfvvzq+2s/9/7/0Q9Xf5yNvcVP9/9Y+X3vpb2X9x/f+qJdpnaZtju9lKU7nU4vu1PkaaNdbjVT+qDIszJP7e0y756Y3yw6Ozv9lG1vLMzvdPOyTNl2P23l/dTrpF63n7LPs/Z2ajabaWE++DutB+vr2eownjtn3fVJFcQYdLur2cE1PPvUTOtBLQUBALW66P5/5pnu/6fD/n+Sju//+bc62P/PHF6/J9n/AwAAAAAAAAAAAADA8+BhVTWqqmqMxmr0kPDh/zWXx5g9df5P/dVdH+N17MG9uYji293Wbms4DudXN6MdReSxFI14dHBbGBnGN99du7GUBhZj4e43g/xrv0S0/ncyfzkasXh2/vIwPz3Jj4NxOuaP569EI148O3/lzPyZePONY/nNaMSvn0UnitgY3N6O8r9eTumd99dO5c8O1gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw39BMI6/GsO/9biviSuwe9u9vHi1YPNkff5j/pL/+UjTi0dn9+ZfO7M9/OV65XO+xAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBI2b+3lRVF3p1UMOr5P3hlZhT8ddal4fL7p6auxARrLop86lm94eOqqsZV6txkT+VFgumI885gdfgrufhnvRAR56yZjYj6v41/YlDXHQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADqc9T0u+5KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqFPZv7eVFUXeHWNQ9zECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8T/4MAAD//yeQEY0=") modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2000, 0x1}, 0x10) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 18m2.244404347s ago: executing program 33 (id=217): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r0, 0x4068aea3, &(0x7f0000000140)={0xdf, 0x0, 0x15000}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x4c850) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40801}, 0x8000) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_BULK(r4, 0x5523, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d80672e65a6a0a72e19c2b60bd6276fd8bb6366e9d1ed9a60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d10d1f600"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 17m59.852283467s ago: executing program 34 (id=228): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x8800) socket$nl_generic(0x10, 0x3, 0x10) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) signalfd4(r0, 0x0, 0x0, 0x80000) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) write$uinput_user_dev(r2, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) pselect6(0x59, &(0x7f00000001c0)={0x5, 0x2, 0x2, 0x7fffffff, 0x43, 0x5, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0xb, 0x100000001, 0x6, 0x6, 0x7fffffff}, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000240)=@sco={0x1f, @none}, &(0x7f0000000340)=0x80) 17m53.782745261s ago: executing program 35 (id=244): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x42, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0}, 0x28) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="44010000100033062cbd700000000000fc020000000000000000000000000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000000000000000000000000000000000010000000000000000000000000000000000000000000000000900000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000700000000000000000000000000000000000000020000000000000002000400000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001500590735000c000000"], 0x144}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) timerfd_create(0x9, 0x80000) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 17m50.575935291s ago: executing program 36 (id=261): epoll_create1(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x143042, 0x88) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x2000000000000018, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000008000005c00000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000feb56ad50c1dc8eda8c1f000"/28], 0x48) close(r2) r3 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r3, 0x0, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001040)=0x5) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) splice(r1, 0x0, r2, 0x0, 0x7151, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17m44.022356377s ago: executing program 37 (id=284): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x40040, 0x57) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3}, 0x50) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) fcntl$setown(r2, 0x8, r0) socket$inet6_udp(0xa, 0x2, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000080)={0xfffa, [0xcc2, 0x6e]}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) r6 = syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYBLOB="69692bb4065b0f00000000ffe25b6bf0fb09d1eb7f31020000001b62972e117c74ff91681cc81656444c067f1dc91c6f8d"], 0x1, 0x2b8, &(0x7f0000000380)="$eJzs3cFKG10UB/BjjMbPTYSvq+JioJtuGtQHKIRioTRQsGShK0NVKEaECEK7qO76Ll31HfoGPkZfoFIEi05sEjMVa5OMJr8fyByc+ZNzs8idwL2TzcW93a39g531/7/H3FwSxYjjr2cREYWYjtSzb+lxJiKmYja6HQcA8NCsrTWq/f8t5NEKQ9JqVRsX926lvjP1L7k0BAAAAAAAAAAAwD/bXCz1rf+P04iFrvX/U+1jwfp/ABgL2ev/GSetVrUxn7mrw/p/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID+n5+fl8xv+8u4PABg88z8ATJ67zv/Pf26URtspADAopz1z/VT4/g8A4+/t+sbraq22upYkcxF7nw/rh/X0mJ6v7sT7aMZ2LEU5zuLi/qAtrV++qq0uJZcWYnPvqJ0/OqxP9+aXoxwL2fnlNJ/05mdivju/EuV4lJ1fyczPxtMnEYWrgVaiHCfvYj+asRUX2U7+03KSvHhTu5YvXV4HAAAAAAAAAAAAAAAAAAAAo1BJfsvcv1+p/Ol8mv+L5wNc219fjMfFfMcOAAAAAAAAAAAAAAAAAAAA98XBh4+7jWZzu5VZ/Gjv5b/pmmEUJxExqtcaZPHfrd7VuxXFiMh9gPexKN364qvnTeTf8wMocvxQAgAAAAAAAAAAAAAAAACACdXZ9Jt3JwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQn87v/w+vyHuMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwGT4FQAA///DjOdg") fspick(r6, 0x0, 0x1) 17m43.590666818s ago: executing program 38 (id=285): r0 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x600800, &(0x7f00000005c0)={[{@block_validity}, {@data_err_ignore}, {@user_xattr}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nouser_xattr}, {@usrquota}, {@grpquota}, {@norecovery}]}, 0x3, 0x569, &(0x7f0000000940)="$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") fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) stat(&(0x7f0000000380)='./file0/../file0\x00', &(0x7f0000000400)) 17m5.655553646s ago: executing program 39 (id=379): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x400, 0x4000}}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, &(0x7f0000000880)=0x6, r7, 0x0, 0x7fffffffffffffff, 0x4) write$eventfd(r1, &(0x7f00000000c0)=0x29ff80, 0x8) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) rt_sigsuspend(&(0x7f0000000080)={[0x9]}, 0x8) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) statx(r1, &(0x7f0000000240)='./file0\x00', 0x6000, 0x800, &(0x7f0000000600)) openat$kvm(0xffffff9c, 0x0, 0x20980, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000028000/0x1000)=nil, 0x1000, &(0x7f00000001c0)='/dev/kvm\x00') sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="74010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbfc000000000000000000000000000000200100000000000000000000000000014e210000000000000a00000000000000", @ANYRES32=0x0, @ANYRES8, @ANYBLOB="ff01000000000000000000000000ffffff7fffff0000000000000000000000000000ffff000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="ff6f37d89cdd2f7afa5cbf7d3c7e73f30c02c14e10e6bc3e4c68a2369a09322691e127ee63fa001ea8fc4cba505313e2f182a793a4b8032a4345740fa0fb0597ca826683717087425e3258a6045b6accf0ffada85f661fb8c953f1e92c34ca12e348", @ANYRESOCT=r1], 0x174}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, 0x0, 0xb) ioctl$KDGKBSENT(r9, 0x4b48, &(0x7f00000008c0)={0x4, "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"}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x0) splice(r8, 0x0, r2, 0x0, 0x1000, 0x0) splice(r1, 0x0, r9, 0x0, 0x7d, 0x8) 16m35.023651449s ago: executing program 40 (id=408): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./bus\x00', 0x800000, &(0x7f0000005e00)=ANY=[@ANYBLOB="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"/452], 0x1, 0x5516, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f0000000100)=0x1e) timer_create(0x7, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x404ffa1, 0x100000001}) 15m12.211190913s ago: executing program 41 (id=586): socket$nl_route(0x10, 0x3, 0x0) setitimer(0x0, &(0x7f0000000040)={{0x6, 0x9}, {0x1ff, 0x32e3}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv4_getnexthop={0x20, 0x6a, 0x7fc12344b4233679, 0x70bd68, 0x25dfdbfd, {}, [@NHA_MASTER={0x8, 0xa, 0xfffffffe}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000c4) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) alarm(0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x6020400) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000680)={r4, r6, 0x25, 0x0, @val=@netfilter={0x3, 0x0, 0x7510}}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r7, 0xffffffffffffffff, 0x4}, 0x5) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x9c, 0x10, 0xffffffffffffffff, 0x70bd23, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xe17, 0x400c0}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0xb}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0xc1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0xa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0xb}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x900, 0xfffffff4}}]}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x9c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@deltaction={0x64, 0x18, 0x1, 0x70bd2c, 0x24dfdc00, {0xa}, [@TCA_ACT_TAB={0x50, 0x1, [{0x10, 0x8d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x21, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) unshare(0x64000600) 12m50.711196003s ago: executing program 42 (id=939): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="010000000400000008000000"], 0x50) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000000)=ANY=[@ANYBLOB="ef0f0000000000000500"/24]) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) socket$nl_audit(0x10, 0x3, 0x9) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280), 0x1, 0x51a, &(0x7f0000000f00)="$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") madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x839352b8218490eb) setresgid(r2, r2, r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r5, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 8m29.268953847s ago: executing program 43 (id=1525): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) prctl$PR_SET_DUMPABLE(0x4, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x8, 0x1, @dev={0xfe, 0x80, '\x00', 0x10}, 0x7}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000040)=ANY=[], 0x6) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000008, &(0x7f0000000000), 0x2, 0x541, &(0x7f0000000600)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x50) read$FUSE(0xffffffffffffffff, &(0x7f0000005900)={0x2020}, 0x2020) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000000c0)=ANY=[], 0x8) write$binfmt_misc(r0, &(0x7f0000000040), 0xfe46) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) 7m56.985532761s ago: executing program 4 (id=1602): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x42082) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0xc0f85403, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x15a041, &(0x7f0000000480)=ANY=[@ANYBLOB="009dff", @ANYRES64=r1, @ANYBLOB=',rootmode=00000000000000000', @ANYRESDEC=0x0, @ANYBLOB=',grmup', @ANYRES16=r0]) read$FUSE(r0, &(0x7f000000a400)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f00000000c0)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0xfff}}, {@bh}, {@sb={'sb', 0x3d, 0xc4}}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@test_dummy_encryption}, {@dioread_lock}, {@noblock_validity}, {}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000300), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) write$FUSE_INIT(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x180) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x72) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./bus\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 7m55.443589591s ago: executing program 4 (id=1606): mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=f', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) prctl$PR_SET_DUMPABLE(0x4, 0x0) getpid() r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x8, 0x1, @dev={0xfe, 0x80, '\x00', 0x10}, 0x7}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000040)=ANY=[], 0x6) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000008, &(0x7f0000000000), 0x2, 0x541, &(0x7f0000000600)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x50) read$FUSE(0xffffffffffffffff, &(0x7f0000005900)={0x2020}, 0x2020) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000000c0)=ANY=[], 0x8) write$binfmt_misc(r0, &(0x7f0000000040), 0xfe46) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) 7m53.365288996s ago: executing program 4 (id=1610): mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB]) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) prctl$PR_SET_DUMPABLE(0x4, 0x0) getpid() r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x8, 0x1, @dev={0xfe, 0x80, '\x00', 0x10}, 0x7}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000040)=ANY=[], 0x6) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000008, &(0x7f0000000000), 0x2, 0x541, &(0x7f0000000600)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x50) read$FUSE(0xffffffffffffffff, &(0x7f0000005900)={0x2020}, 0x2020) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000000c0)=ANY=[], 0x8) write$binfmt_misc(r0, &(0x7f0000000040), 0xfe46) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) 7m52.05437767s ago: executing program 4 (id=1612): socket$nl_route(0x10, 0x3, 0x0) setitimer(0x0, &(0x7f0000000040)={{0x6, 0x9}, {0x1ff, 0x32e3}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv4_getnexthop={0x20, 0x6a, 0x7fc12344b4233679, 0x70bd68, 0x25dfdbfd, {}, [@NHA_MASTER={0x8, 0xa, 0xfffffffe}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000c4) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) alarm(0x38) unshare(0x6020400) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000680)={r4, r6, 0x25, 0x0, @val=@netfilter={0x3, 0x0, 0x7510}}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r7, 0xffffffffffffffff, 0x4}, 0x5) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x9c, 0x10, 0xffffffffffffffff, 0x70bd23, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xe17, 0x400c0}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0xb}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0xc1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0xa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0xb}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x900, 0xfffffff4}}]}]}}}, @IFLA_LINK={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@deltaction={0x64, 0x18, 0x1, 0x70bd2c, 0x24dfdc00, {0xa}, [@TCA_ACT_TAB={0x50, 0x1, [{0x10, 0x8d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x21, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) write$binfmt_format(r9, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) unshare(0x64000600) 7m50.697703536s ago: executing program 4 (id=1613): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x8, 0xb}, 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x100}}) connect$pptp(r3, &(0x7f00000001c0)={0x18, 0x2, {0x0, @empty}}, 0x1e) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@type_tag={0x10, 0x0, 0x0, 0x12, 0x1}, @fwd={0xe}]}, {0x0, [0x61, 0x5f, 0x0, 0x51, 0x30]}}, &(0x7f0000000300)=""/249, 0x37, 0xf9, 0x0, 0x5}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x7, &(0x7f0000000180)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xab}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x6}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 7m47.634747066s ago: executing program 4 (id=1617): socket$nl_route(0x10, 0x3, 0x0) setitimer(0x0, &(0x7f0000000040)={{0x6, 0x9}, {0x1ff, 0x32e3}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) alarm(0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000680)={r3, r5, 0x25, 0x0, @val=@netfilter={0x3, 0x0, 0x7510}}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r6, 0xffffffffffffffff, 0x4}, 0x5) 7m32.434335023s ago: executing program 7 (id=1637): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="010000000400000008000000"], 0x50) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000000)=ANY=[@ANYBLOB="ef0f0000000000000500"/21]) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) socket$nl_audit(0x10, 0x3, 0x9) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280), 0x1, 0x51a, &(0x7f0000000f00)="$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") madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x839352b8218490eb) setresgid(r2, r2, r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 7m32.416887683s ago: executing program 44 (id=1617): socket$nl_route(0x10, 0x3, 0x0) setitimer(0x0, &(0x7f0000000040)={{0x6, 0x9}, {0x1ff, 0x32e3}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) alarm(0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000680)={r3, r5, 0x25, 0x0, @val=@netfilter={0x3, 0x0, 0x7510}}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r6, 0xffffffffffffffff, 0x4}, 0x5) 7m29.703910584s ago: executing program 7 (id=1643): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000000)=ANY=[@ANYBLOB="ef0f0000000000000500"/24]) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) socket$nl_audit(0x10, 0x3, 0x9) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280), 0x1, 0x51a, &(0x7f0000000f00)="$eJzs3c9vI1cdAPCvnThxfnSTlh4AQbu0hQWt1km8bVT1AOWIUCVEjyBtQ+KNothxFDulCXtIz1yRqMSJHvkDOPfEgRsXBDcuywGJHxFog8TBaMaTrDdrb6xNYqfx5yON5r2ZWX+/L868t36O/QIYWTcj4iAiJiLig4iYy47nsi3ebW/JdY8OH6weHT5YzUWr9f4/c+n55Fh0/JvETPaYxYj44acRP8k9Hbext7+5Uq1WdrL6QrO2vdDY27+zUVtZr6xXtsrl5aXlxbfvvlW+sLa+WpvISl99+IeDb/0sSWs2O9LZjovUbnrhJE5iPCK+fxnBhmAsa8/EsBPhueQj4qWIeC29/+diLH02AYDrrNWai9ZcZx0AuO7y6RxYLl/K5gJmI58vldpzeC/HdL5abzRv36/vbq2158rmo5C/v1GtLGZzhfNRyCX1pbT8uF4+Vb8bES9GxC8mp9J6abVeXRvmf3wAYITNnBr//zPZHv8BgGuuOOwEAICB6zH+Hww6DwBgcLz+B4DRY/wHgNFTTL/DYWrYaQAAA+T1PwCMHuM/AIyUH7z3XrK1jrLvv177cG93s/7hnbVKY7NU210trdZ3tkvr9fp6+p09tbMer1qvby+9GbsfzX97u9FcaOzt36vVd7ea99Lv9b5XKaRX+WQBAAzTi69+9udcMiK/M5Vu0bGWQ2GomQGXLT/sBIChGetRBq4/q33B6DrHa3zTA3BNdFmi9wnF6PIBoVar1bq8lIBLdutL5v9hVHXM//srYBgx5vxhdJn/h9HVauX6XfM/+r0QALjazPEDPd7/fynb/yZ7c+DHa6ev+OQyswIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICr7Xj931K2Fvhs5POlUsQLETEfhdz9jWplMSJuRMSfJguTSX1pyDkDAOeV/1suW//r1twbs0+cemXmpDgRET/91fu//Gil2dz5Y8RE7l+Tx8ebn2THy4PPHgA42/E4ne47Xsg/OnywerwNMp+/fzciiu34R4cTcXQSfzzG030xChEx/e9cVm/LdcxdnMfBxxHxxW7tz8VsOgfSXvn0dPwk9gsDjZ9/In4+PdfeJz+LL1xALjBqPkv6n3e73X/5uJnuu9//xbSHOr+s/0seavUo7QMfxz/u/8Z69H83+43x5u++1y5NPX3u44gvj0ccxz7q6H+O4+d6xH+jz/h/+corr/U61/p1xK3oHr8z1kKztr3Q2Nu/s1FbWa+sV7bK5eWl5cW3775VXkjnqBd6jwb/eOf2jV7nkvZP94hfPKP9X++z/Z/+74Mffe0Z8b/5erf4+Xj5GfGTMfEbfcZfmf5tsde5JP5aj/af9fzf7jP+w7/uP7VsOAAwPI29/c2VarWy86zCjaOIs675XBaiv4t/n/2wrkTOI11InoUrkEbXwnc6jszEJcaa6HEz/vz19q/pZETnL3ar9VyxevUYFzHrBlwFJzd9RPx32MkAAAAAAAAAAAAAAABdDeLTUcNuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANfX/wMAAP//jMfJaQ==") madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x839352b8218490eb) setresgid(r2, r2, r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r6, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 7m27.782171914s ago: executing program 7 (id=1649): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="010000000400000008000000"], 0x50) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000000)=ANY=[@ANYBLOB]) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) socket$nl_audit(0x10, 0x3, 0x9) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280), 0x1, 0x51a, &(0x7f0000000f00)="$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") madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x839352b8218490eb) setresgid(r2, r2, r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r6, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 7m26.981813835s ago: executing program 7 (id=1651): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="010000000400000008000000"], 0x50) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000000)=ANY=[]) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) socket$nl_audit(0x10, 0x3, 0x9) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280), 0x1, 0x51a, &(0x7f0000000f00)="$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") madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x839352b8218490eb) setresgid(r2, r2, r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r6, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 7m23.044705638s ago: executing program 7 (id=1659): ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0x1, 0x200101, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0xfff, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x45c, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0xb, 0x9, 0xb6, 0x24, 0xcb, 0x180, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x800008, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x100000, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x10, 0xa, 0x6b13, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x2, 0x4, 0x2, 0xffffff87, 0xe, 0xd, 0x5, 0x8, 0x10, 0x7, 0x3, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x2, 0x2, 0x1ff, 0xfffffffd, 0xeb6, 0x0, 0xab5, 0x10000, 0x1, 0x9, 0x0, 0xff, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0xb4, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x12, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x1, 0x18000, 0x14, 0x1000, 0x6, 0x2002, 0x80, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x2, 0x7, 0xc4c, 0x400045e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x8000942, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0x7, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x4, 0x5, 0xfffffffe, 0x6, 0x4, 0x6, 0x6, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x2, 0x8, 0x8000, 0x10004, 0x9, 0x8, 0x8, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x19, 0x4, 0x1, 0xb, 0x1, 0x8, 0x400, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0xe, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x10007fff, 0x0, 0x7, 0x6, 0x709, 0x2, 0x40000049, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xfffefffd, 0xf, 0x8d0f, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4, 0x6, 0x7fffffff, 0x2, 0x1, 0x80000000, 0xb, 0x4, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x7, 0x0, 0x80000000, 0xd, 0x2, 0x8001, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x6, 0x0, 0x9, 0xc, 0x5, 0xff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x4, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x9, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x20000, 0x2, 0x10001, 0x1, 0x5, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10004, 0x1000, 0x5, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x5, 0x8000000, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0xe, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x23, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6708, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x2, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0x4000ff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0x10, 0x3, 0xe, 0x8, 0x1000, 0x4, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x1, 0x3, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0xc, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3ff, 0x1df, 0x2006, 0x6, 0xfffffffa, 0x81, 0x9, 0x9, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x8, 0x8, 0x1ff, 0x7fff, 0xff, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xfffffffc, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x7, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9b3, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x20, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0xa, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x4, 0x7f, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x0, 0x2, 0xffff351b, 0x7, 0xa00000, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x8, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x3fc, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x9, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x1, 0xfffffff7, 0x7, 0x3c, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x20c47, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0xfffffdab, 0x2, 0x80000001, 0x54, 0x80400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x1, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0x5, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x401, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0xb6f, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x5, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0xa, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x1, 0xc, 0x8, 0x6, 0x7, 0xa, 0xf, 0x0, 0x71, 0xfff, 0x7, 0x8]}) getdents64(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x20, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1111}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x860b01) fsopen(&(0x7f0000000080)='omfs\x00', 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000001c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0xc050) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)=0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x2) 7m12.346471498s ago: executing program 7 (id=1686): syz_open_dev$loop(&(0x7f0000000100), 0x10, 0x1ac902) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0xc0f85403, &(0x7f0000001e80)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x15a041, &(0x7f0000000480)=ANY=[@ANYBLOB="009dff", @ANYRES64=r1, @ANYBLOB=',rootmode=00000000000000000', @ANYRESDEC=0x0, @ANYBLOB, @ANYRES16=r0]) read$FUSE(r0, &(0x7f000000a400)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f00000000c0)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0xfff}}, {@bh}, {@sb={'sb', 0x3d, 0xc4}}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@test_dummy_encryption}, {@dioread_lock}, {@noblock_validity}, {}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000300), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) write$FUSE_INIT(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x180) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x72) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./bus\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 6m56.438302094s ago: executing program 45 (id=1686): syz_open_dev$loop(&(0x7f0000000100), 0x10, 0x1ac902) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0xc0f85403, &(0x7f0000001e80)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x15a041, &(0x7f0000000480)=ANY=[@ANYBLOB="009dff", @ANYRES64=r1, @ANYBLOB=',rootmode=00000000000000000', @ANYRESDEC=0x0, @ANYBLOB, @ANYRES16=r0]) read$FUSE(r0, &(0x7f000000a400)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f00000000c0)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0xfff}}, {@bh}, {@sb={'sb', 0x3d, 0xc4}}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@test_dummy_encryption}, {@dioread_lock}, {@noblock_validity}, {}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000300), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) write$FUSE_INIT(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x180) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x72) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./bus\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 4m9.614208345s ago: executing program 8 (id=1997): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000080)=0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000004c0)={&(0x7f0000000140)="840971b4a1acbb4f3deb6a5bdbbbe016b507b405a0ad75afc317c1da30bd646255905024", &(0x7f0000000300)=""/241, &(0x7f0000000400), &(0x7f0000000440)="2498a9658401bcd69664d0d2fbf0fd61719c28b3bff548b421e8cc42140d4e5fca876503dc41286b5db9705ebdd20e2acfb0b2", 0x4, r2}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)=r1}, 0x20) sched_setscheduler(0x0, 0x2, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa) sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000e55b00000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a000000000000000000000000000000000000000000080000000000000000000800120002000200000000000000"], 0xa0}}, 0x0) 4m8.466318055s ago: executing program 8 (id=2001): ioprio_set$pid(0x2, 0x0, 0x0) fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0xfffffffd}, 0x1c) write$UHID_INPUT(r0, &(0x7f0000002080)={0xfc, {"a2336848149e516d4b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f383563030890e0879b0a71c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b3e31070d0773090acd3b78130daa61d8e804003e005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9903f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928d28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f2730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b81305c038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849cd9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484539ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1f93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb8843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b2804563407308c58c89d9e99c81769177e6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463373b4b87c9050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e080000007ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e3933ed07c2b8081c128ad2706f48261ff07000000000000613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59500000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, 0x0, 0x0) connect$inet(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) 4m6.104068577s ago: executing program 8 (id=2006): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40081271, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, &(0x7f0000000100)=0x7, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x20600, 0x0) epoll_create(0x2) read$FUSE(r3, &(0x7f0000002540)={0x2020}, 0xfffffecf) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) 4m1.476753718s ago: executing program 8 (id=2018): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40081271, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, &(0x7f0000000100)=0x7, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x20600, 0x0) epoll_create(0x2) read$FUSE(r3, &(0x7f0000002540)={0x2020}, 0xfffffecf) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) 3m59.817906951s ago: executing program 8 (id=2021): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000040)={0x0, 0x6, 0x4000, 0x8b, 0x2, 0xfffffffc}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) socket$inet6(0xa, 0x2, 0x0) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x20000000}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB='utf8=0,shortname=lower,rodir,utf8=0,uni_xlate=1,utf8=0,iocharset=koi8-ru,shortname=lower,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,showexec,shortname=winnt,shortname=win95,rodir,nonumtail=0,errors=continue,nnonuage=936,nonumtail=0,shortname=winnt,shortname=win95,obj_user=errors=remount-ro,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$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") modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2000, 0x1}, 0x10) 3m58.977143763s ago: executing program 8 (id=2024): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB='utf8=0,shortname=lower,rodir,utf8=0,uni_xlate=1,utf8=0,iocharset=koi8-ru,shortname=lower,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,showexec,shortname=winnt,shortname=win95,rodir,nonumtail=0,errors=continue,nnonuage=936,nonumtail=0,shortname=winnt,shortname=win95,obj_user=errors=remount-ro,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$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") 3m43.383338731s ago: executing program 46 (id=2024): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB='utf8=0,shortname=lower,rodir,utf8=0,uni_xlate=1,utf8=0,iocharset=koi8-ru,shortname=lower,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,showexec,shortname=winnt,shortname=win95,rodir,nonumtail=0,errors=continue,nnonuage=936,nonumtail=0,shortname=winnt,shortname=win95,obj_user=errors=remount-ro,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$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") 1m35.758248277s ago: executing program 5 (id=2562): bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x12, 0x4, &(0x7f00000005c0)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m35.725634058s ago: executing program 5 (id=2566): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230006) close(0xffffffffffffffff) 1m35.533284433s ago: executing program 5 (id=2584): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, 0x0, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x18, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1m35.479645014s ago: executing program 5 (id=2586): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x110) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 1m35.425227425s ago: executing program 5 (id=2593): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x5, 0x41}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001e80)={{r0}, &(0x7f0000001e00), &(0x7f0000001e40)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000) 1m35.287981599s ago: executing program 5 (id=2604): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r4, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) r5 = add_key(0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(0x0, 0x0, 0x0, 0x0, r5) socket(0x10, 0x3, 0x9) 1m35.283578919s ago: executing program 47 (id=2604): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r4, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) r5 = add_key(0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(0x0, 0x0, 0x0, 0x0, r5) socket(0x10, 0x3, 0x9) 38.917070423s ago: executing program 2 (id=3914): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 38.863933344s ago: executing program 2 (id=3915): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) socket$inet(0x2, 0x3, 0x9) socket$nl_generic(0x11, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40801}, 0x4040850) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @multicast2}, 0x2, 0x0, 0x3}}, 0x26) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0xffff, 0x2, 0x0, {0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400}}}, 0x32) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) socket$pppl2tp(0x18, 0x1, 0x1) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000000200)=0x1) 38.863607264s ago: executing program 2 (id=3916): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = fsopen(&(0x7f0000000240)='tracefs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000040)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D\xde\x1e-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\x98\xf2\x1e\xe4\'U\xb3\xf8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\r\x00\x00\x00\x86N\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xff\x01\x00\x00\x00\x00\x00\x00\x96t\\\x0f\x12C\xf0\xe5C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\x8e\xa8\x10\x94JmDv\xcc^\xf1\xc4g\xd6,\x1e\xa0\xcc\xbf\xfd\x97\v\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1\tf>>\xb5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x97\xc0\xf6\x0e\x00\x00\x00\x00\x00\x00\x00\xf9\xdcaA\x95\x9fUjHo\x93\xa0jh:\xe3\xa9\xd0:&\f\xb2VK=c&!92\xb8@A\x9eb\xab\xbd\xf8#,\x8e\x86T_\xc4\x88\x9b\x11vC\x14\x99j\x01R \xeb\xaaa\xaab\xe4B\x88jST\xfbt \x85\x13\xc73', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x100000000000000) 38.028027906s ago: executing program 2 (id=3926): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) pipe(&(0x7f0000004600)={0xffffffffffffffff}) fremovexattr(r1, &(0x7f0000007d00)=@known='security.apparmor\x00') write(r0, &(0x7f0000000300)='1', 0x1) 37.961682507s ago: executing program 2 (id=3927): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1f6) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) 37.948702398s ago: executing program 2 (id=3928): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 22.819930654s ago: executing program 48 (id=3928): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 3.112385949s ago: executing program 3 (id=4400): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r0 = timerfd_create(0x1, 0x80000) timerfd_gettime(r0, 0x0) 3.07304187s ago: executing program 3 (id=4403): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffeb, 0xffe0}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x480c0}, 0x20000000) 3.019101221s ago: executing program 1 (id=4405): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, 0x0, &(0x7f00000041c0)) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, r3, 0x801, 0x1}, 0x50) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 2.890467095s ago: executing program 3 (id=4408): r0 = socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x2002) ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000400)={&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, 0x0}) 2.720432339s ago: executing program 1 (id=4411): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000680)='dummy_udc.0\n', 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000f000000", @ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.063199326s ago: executing program 0 (id=4415): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1.9341234s ago: executing program 0 (id=4418): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) accept4$bt_l2cap(r0, 0x0, 0x0, 0x800) 1.836781572s ago: executing program 1 (id=4420): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000011646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xba03d6b623375271, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x10}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x75) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{r0}, &(0x7f0000000c80), &(0x7f0000000cc0)=r1}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000) 1.804479983s ago: executing program 1 (id=4421): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000020603000000378150380000070000000c0007800800114000000000050085000200000005000400000000000900020073797a310000000016000300686173683a6e65742c306f72742c6e6574000000"], 0x54}, 0x13, 0x0, 0x0, 0x810}, 0x20004000) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000100)='usbip-vud', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='pcspkr\x00', 0x6) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r3, &(0x7f0000000900)='0x1d6b\x00', 0x6) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') 1.766133264s ago: executing program 1 (id=4422): socket$inet_icmp(0x2, 0x2, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') socket(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r2, &(0x7f0000002600)=""/4113, 0x1011) 1.731301265s ago: executing program 0 (id=4423): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)=ANY=[], 0xff70) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 1.563317439s ago: executing program 0 (id=4424): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001540)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x18}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x24008004) 1.490339512s ago: executing program 0 (id=4426): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r0, 0x4b72, &(0x7f00000000c0)={0x1, 0xfffffffe, 0xffffffff, 0xc1c, 0x10, "0060930000efa4890200000000400000008000"}) 1.461807622s ago: executing program 0 (id=4429): socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020450c0b7600000000000109022400fdff0f00e5080400020103000000092100000001"], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000172000/0x3000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000839000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000246000/0x4000)=nil, &(0x7f0000373000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000b71000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000039000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 1.279901827s ago: executing program 9 (id=4433): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="b40200001fffffff6111490000000000850000001c00400095000000000000000cee0d4361cfbb95ab39f6eecfb119baa5afb3b85dac84bfba3473f9387cc80ac0f213fcb1a1d8fc15094d7c356f707ec9ded01de67b4b3aeeb9073bbb00"], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) 1.1760508s ago: executing program 9 (id=4434): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000056, &(0x7f0000000a00), 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) io_setup(0x20fe, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) 1.105366331s ago: executing program 9 (id=4435): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="5400000000010104000000000000000002000000240001801400018008000100e0000001"], 0x54}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) 981.802065ms ago: executing program 9 (id=4436): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x58, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 908.327007ms ago: executing program 9 (id=4437): openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x20400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', 0x80040, 0x54) fsetxattr$system_posix_acl(r3, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000004c0)={{}, {}, [{0x2, 0x3}], {}, [], {0x10, 0x3}, {0x20, 0x1}}, 0x2c, 0x0) getxattr(&(0x7f0000002a80)='./file0\x00', &(0x7f0000002ac0)=@known='system.posix_acl_access\x00', &(0x7f0000002b00)=""/213, 0xd5) 773.62896ms ago: executing program 3 (id=4438): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) setpriority(0x2, 0x0, 0x80) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000adf000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x66, 0xc, 0x6e}) 773.00382ms ago: executing program 1 (id=4439): sched_setaffinity(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000003240), 0x4000000000000e4, 0x0) 708.024412ms ago: executing program 3 (id=4440): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 648.200083ms ago: executing program 3 (id=4441): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000480), 0x208080, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 508.057687ms ago: executing program 6 (id=4442): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) 455.280378ms ago: executing program 6 (id=4443): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000020603000000378150380000070000000c0007800800114000000000050085000200000005000400000000000900020073797a310000000016000300686173683a6e65742c306f72742c6e6574000000"], 0x54}, 0x13, 0x0, 0x0, 0x810}, 0x20004000) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000100)='usbip-vud', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='pcspkr\x00', 0x6) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r3, &(0x7f0000000900)='0x1d6b\x00', 0x6) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') 454.909968ms ago: executing program 6 (id=4444): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000020603000000378150380000070000000c000780080011400000000005008500020000000500"], 0x54}, 0x13, 0x0, 0x0, 0x810}, 0x20004000) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000100)='usbip-vudc\x00', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='pcspkr\x00', 0x6) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r3, &(0x7f0000000900)='0x1d6b\x00', 0x6) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x14a) 439.421009ms ago: executing program 6 (id=4445): unshare(0x28000600) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@stripe}, {@minixdf}, {@orlov}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x521ca1, 0x0, 0x80, 0x0, &(0x7f0000000080)) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./file0\x00', 0x40, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 391.97715ms ago: executing program 6 (id=4446): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="5400000000010104000000000000000002000000240001801400018008000100e0000001"], 0x54}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) 344.342071ms ago: executing program 6 (id=4447): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0) 0s ago: executing program 9 (id=4448): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x500, 0x4000000}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001140)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000002300)="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", 0x2000, &(0x7f000000b540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000045c0)={0x20, 0x0, 0x8000, {0x0, 0x13}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 1071.188296][ T7894] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1071.258682][ T3228] usb 3-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 1071.498374][ T7894] usb 2-1: Using ep0 maxpacket: 16 [ 1071.598630][ T3228] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=a4.d6 [ 1071.648978][ T7894] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1071.696782][ T3228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.724126][ T7894] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1071.886362][ T3228] usb 3-1: Product: syz [ 1071.895112][ T7894] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1071.908470][ T3228] usb 3-1: Manufacturer: syz [ 1071.913080][ T3228] usb 3-1: SerialNumber: syz [ 1071.942892][ T7894] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1071.967701][ T7894] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1071.995744][ T7894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.017116][ T7894] usb 2-1: config 0 descriptor?? [ 1072.067907][T10905] device syz_tun entered promiscuous mode [ 1072.250933][ T3228] usb 3-1: USB disconnect, device number 5 [ 1072.337866][ T6905] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 1073.309354][ T7894] hid-generic 0003:04D8:00DF.0002: hidraw0: USB HID v0.00 Device [HID 04d8:00df] on usb-dummy_hcd.1-1/input0 [ 1073.503626][ T24] audit: type=1400 audit(1786100330.840:291): avc: denied { search } for pid=10961 comm="syz.2.2941" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1073.535778][ T7894] usb 2-1: USB disconnect, device number 6 [ 1073.549184][ T24] audit: type=1400 audit(1786100330.890:292): avc: denied { write } for pid=10961 comm="syz.2.2941" name="filter" dev="tracefs" ino=3771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1073.638342][ T6905] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1073.649567][ T24] audit: type=1400 audit(1786100330.960:293): avc: denied { setopt } for pid=10969 comm="syz.2.2945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1073.677290][ T6905] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1073.688145][ T6905] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1073.697585][ T6905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.739353][ T6905] hub 4-1:4.0: USB hub found [ 1073.958464][ T6905] hub 4-1:4.0: 2 ports detected [ 1073.963730][ T6905] usb 4-1: selecting invalid altsetting 1 [ 1073.969722][ T6905] hub 4-1:4.0: Using single TT (err -22) [ 1074.008349][ T3228] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 1074.078234][ T7005] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1074.168335][ T6905] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 1074.175296][ T20] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1074.183797][ T6905] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 1074.228773][ T6905] usb 4-1: USB disconnect, device number 3 [ 1074.268266][ T3228] usb 3-1: Invalid ep0 maxpacket: 32 [ 1074.432867][ T3228] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 1074.448238][ T7005] usb 1-1: Using ep0 maxpacket: 16 [ 1074.468309][ T20] usb 7-1: Using ep0 maxpacket: 16 [ 1074.568255][ T7005] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1074.579221][ T7005] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1074.589025][ T7005] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1074.598080][ T7005] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.598283][ T20] usb 7-1: config 0 has no interfaces? [ 1074.612290][ T7005] usb 1-1: config 0 descriptor?? [ 1074.688304][ T20] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1074.697433][ T3228] usb 3-1: Invalid ep0 maxpacket: 32 [ 1074.702922][ T3228] usb usb3-port1: attempt power cycle [ 1074.708467][ T20] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1074.716609][ T20] usb 7-1: Manufacturer: syz [ 1074.722235][ T20] usb 7-1: config 0 descriptor?? [ 1074.804826][ T24] audit: type=1400 audit(1786100332.140:294): avc: denied { append } for pid=11017 comm="syz.3.2965" name="loop-control" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1074.834315][ T24] audit: type=1400 audit(1786100332.140:295): avc: denied { ioctl } for pid=11017 comm="syz.3.2965" path="/dev/loop-control" dev="devtmpfs" ino=114 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1075.080036][ T24] audit: type=1400 audit(1786100332.420:296): avc: denied { connect } for pid=11044 comm="syz.3.2976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1075.100893][ T7005] apple 0003:05AC:024B.0003: fixing up MacBook JIS keyboard report descriptor [ 1075.118340][ T3228] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 1075.120971][ T7005] apple 0003:05AC:024B.0003: unknown global tag 0xe [ 1075.156030][ T24] audit: type=1400 audit(1786100332.460:297): avc: denied { bind } for pid=11044 comm="syz.3.2976" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1075.177335][ T7005] apple 0003:05AC:024B.0003: item 0 1 1 14 parsing failed [ 1075.197071][ T7005] apple 0003:05AC:024B.0003: parse failed [ 1075.222858][ T7005] apple: probe of 0003:05AC:024B.0003 failed with error -22 [ 1075.230410][T11055] input: syz1 as /devices/virtual/input/input4 [ 1075.238562][ T3228] usb 3-1: Invalid ep0 maxpacket: 32 [ 1075.304147][ T7005] usb 1-1: USB disconnect, device number 3 [ 1075.388233][ T3228] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 1075.488315][ T3228] usb 3-1: Invalid ep0 maxpacket: 32 [ 1075.493749][ T3228] usb usb3-port1: unable to enumerate USB device [ 1075.511707][T11066] binder: BINDER_SET_CONTEXT_MGR already set [ 1075.517959][T11066] binder: 11065:11066 ioctl 4018620d 200000004a80 returned -16 [ 1076.108267][ T24] kauditd_printk_skb: 8 callbacks suppressed [ 1076.108281][ T24] audit: type=1400 audit(1786100333.440:306): avc: denied { read } for pid=11086 comm="syz.0.2997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1076.159009][ T24] audit: type=1400 audit(1786100333.500:307): avc: denied { setopt } for pid=11086 comm="syz.0.2997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1076.285950][T11095] netlink: 'syz.1.3000': attribute type 11 has an invalid length. [ 1076.452397][ T24] audit: type=1400 audit(1786100333.790:308): avc: denied { mounton } for pid=11110 comm="syz.1.3007" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1076.892463][ T7895] usb 7-1: USB disconnect, device number 3 [ 1077.088255][ T6905] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1077.387287][T11164] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.399708][T11164] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.407370][T11164] device bridge_slave_0 entered promiscuous mode [ 1077.417149][T11164] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.424430][T11164] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.432178][T11164] device bridge_slave_1 entered promiscuous mode [ 1077.489887][ T24] audit: type=1400 audit(1786100334.830:309): avc: denied { setopt } for pid=11173 comm="syz.3.3033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1077.515734][T11164] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.522858][T11164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1077.530534][T11164] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.537577][T11164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1077.545157][ T7895] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1077.567807][ T8535] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.575442][ T8535] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.583529][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1077.591433][ T6905] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1077.592023][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1077.602171][ T6905] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1077.621959][ T6905] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1077.631154][ T6905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.642372][ T6905] usb 3-1: config 0 descriptor?? [ 1077.653643][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1077.663641][ T8535] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.665996][ T24] audit: type=1400 audit(1786100335.000:310): avc: denied { bind } for pid=11180 comm="syz.1.3036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1077.670809][ T8535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1077.671201][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1077.706172][ T6905] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1077.714685][ T8535] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.721780][ T8535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1077.736788][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1077.755671][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1077.769776][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1077.786298][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1077.794831][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1077.802776][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1077.813278][T11164] device veth0_vlan entered promiscuous mode [ 1077.826440][T11164] device veth1_macvtap entered promiscuous mode [ 1077.834124][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1077.838252][ T7895] usb 7-1: Using ep0 maxpacket: 32 [ 1077.852958][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1077.891841][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1077.906121][ T24] audit: type=1400 audit(1786100335.240:311): avc: denied { mount } for pid=11164 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1077.956985][T11200] device syzkaller0 entered promiscuous mode [ 1077.958949][ T20] usb 3-1: USB disconnect, device number 10 [ 1077.988456][ T7895] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1078.009923][ T24] audit: type=1400 audit(1786100335.350:312): avc: denied { getopt } for pid=11204 comm="syz.1.3046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1078.014299][ T7895] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1078.162357][ T24] audit: type=1400 audit(1786100335.500:313): avc: denied { remount } for pid=11229 comm="syz.0.3058" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1078.186616][T11232] device syzkaller0 entered promiscuous mode [ 1078.203536][ T7895] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1078.219702][ T7895] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1078.228096][ T7895] usb 7-1: Product: syz [ 1078.232826][ T7895] usb 7-1: Manufacturer: syz [ 1078.279010][ T7895] hub 7-1:4.0: USB hub found [ 1078.360517][ T24] audit: type=1400 audit(1786100335.700:314): avc: denied { write } for pid=11251 comm="syz.0.3069" name="ptype" dev="proc" ino=4026532572 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1078.437052][ T867] device bridge_slave_1 left promiscuous mode [ 1078.444625][ T867] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.452789][ T867] device bridge_slave_0 left promiscuous mode [ 1078.459136][ T867] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.467723][ T867] device veth1_macvtap left promiscuous mode [ 1078.474164][ T867] device veth0_vlan left promiscuous mode [ 1078.488556][ T7895] hub 7-1:4.0: 2 ports detected [ 1078.568249][ T20] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1078.583105][ T24] audit: type=1400 audit(1786100335.920:315): avc: denied { write } for pid=11261 comm="syz.0.3073" path="socket:[60394]" dev="sockfs" ino=60394 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1078.888391][ T7895] hub 7-1:4.0: hub_hub_status failed (err = -71) [ 1078.894926][ T7895] hub 7-1:4.0: config failed, can't get hub status (err -71) [ 1078.929276][ T7895] usb 7-1: USB disconnect, device number 4 [ 1078.948382][ T20] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1078.958569][ T3969] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1078.966305][ T20] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1078.979313][ T20] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1078.988534][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.997009][ T20] usb 3-1: config 0 descriptor?? [ 1079.039012][ T20] aiptek 3-1:0.0: interface has no int in endpoints, but must have minimum 1 [ 1079.047972][ T20] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1079.151852][ T1296] Bluetooth: hci0: Frame reassembly failed (-84) [ 1079.160353][ T1296] Bluetooth: hci0: Frame reassembly failed (-84) [ 1079.388328][ T3969] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.405204][ T3969] usb 1-1: config 0 has no interfaces? [ 1079.454846][T11315] sd 0:0:1:0: PR command failed: 134217730 [ 1079.461273][T11315] sd 0:0:1:0: Sense Key : 0x5 [current] [ 1079.467501][T11315] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 1079.528336][ T3969] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1079.545455][ T3969] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1079.583604][ T3969] usb 1-1: Product: syz [ 1079.598243][ T3969] usb 1-1: SerialNumber: syz [ 1079.651059][ T3969] usb 1-1: config 0 descriptor?? [ 1079.891540][ T3151] usb 1-1: USB disconnect, device number 4 [ 1080.304953][ T7894] usb 3-1: USB disconnect, device number 11 [ 1081.158365][ T7893] Bluetooth: hci0: command 0x1003 tx timeout [ 1081.180771][ T40] Bluetooth: hci0: sending frame failed (-49) [ 1081.188531][ T3151] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1081.483878][ T24] kauditd_printk_skb: 19 callbacks suppressed [ 1081.483891][ T24] audit: type=1400 audit(1786100338.820:335): avc: denied { read write } for pid=11368 comm="syz.2.3112" name="uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1081.515486][ T7893] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1081.529526][ T7893] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1081.529650][T11373] netlink: 'syz.0.3114': attribute type 1 has an invalid length. [ 1081.549982][T11375] binder: 11374:11375 ioctl c0306201 200000000040 returned -22 [ 1081.568389][ T24] audit: type=1400 audit(1786100338.860:336): avc: denied { open } for pid=11368 comm="syz.2.3112" path="/dev/uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1081.678318][ T3151] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1081.694631][ T3151] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1081.888323][ T3151] usb 7-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 1081.897707][ T3151] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.912764][ T3151] usb 7-1: Product: syz [ 1081.918734][ T3151] usb 7-1: Manufacturer: syz [ 1081.923643][ T3151] usb 7-1: SerialNumber: syz [ 1082.250270][ T3151] usb 7-1: USB disconnect, device number 5 [ 1082.276370][ T24] audit: type=1400 audit(1786100339.610:337): avc: denied { setopt } for pid=11433 comm="syz.0.3143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1082.498532][T10812] udevd[10812]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1082.725153][ T24] audit: type=1400 audit(1786100340.060:338): avc: denied { shutdown } for pid=11453 comm="syz.2.3151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1083.208231][ T3151] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1083.228236][ T3969] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1083.238495][ T7893] Bluetooth: hci0: command 0x1001 tx timeout [ 1083.244535][ T40] Bluetooth: hci0: sending frame failed (-49) [ 1083.468232][ T3151] usb 3-1: Using ep0 maxpacket: 32 [ 1083.478350][ T3969] usb 4-1: Using ep0 maxpacket: 8 [ 1083.598287][ T3969] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 1083.606488][ T3969] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.616848][ T3969] usb 4-1: config 0 has no interface number 0 [ 1083.628283][ T3151] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1083.636507][ T3151] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1083.647722][ T3151] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1083.658888][ T3151] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1083.672157][ T3151] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1083.740575][T11502] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3174'. [ 1083.768345][ T7894] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1083.778500][ T3969] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1083.787974][ T3969] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.796497][ T3969] usb 4-1: Product: syz [ 1083.800994][ T3969] usb 4-1: Manufacturer: syz [ 1083.805801][ T3969] usb 4-1: SerialNumber: syz [ 1083.815027][ T3969] usb 4-1: config 0 descriptor?? [ 1083.928399][ T3151] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1083.937819][ T3151] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1083.946328][ T3151] usb 3-1: Product: syz [ 1083.950682][ T3151] usb 3-1: Manufacturer: syz [ 1083.955299][ T3151] usb 3-1: SerialNumber: syz [ 1083.966646][ T3151] usb 3-1: config 0 descriptor?? [ 1084.220711][ T8018] usb 3-1: USB disconnect, device number 12 [ 1084.418449][ T3969] uvcvideo: Found UVC 0.04 device syz (046d:08c3) [ 1084.425277][ T3969] uvcvideo: No valid video chain found. [ 1084.498245][ T7894] usb 1-1: Using ep0 maxpacket: 8 [ 1084.618353][ T7894] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 1084.626837][ T7894] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 1084.642384][ T7894] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1084.652963][ T7894] usb 1-1: config 250 has no interface number 0 [ 1084.659440][ T7894] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1084.671282][ T7894] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1084.682136][ T7894] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 11 [ 1084.692758][ T7894] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1084.706498][ T7894] usb 1-1: config 250 interface 228 has no altsetting 0 [ 1084.713830][ T3969] usb 4-1: USB disconnect, device number 4 [ 1084.812796][T11538] overlayfs: unrecognized mount option "uuid=on" or missing value [ 1084.831692][ T7894] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1084.851024][ T7894] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1084.860678][ T7894] usb 1-1: Product: syz [ 1084.864931][ T7894] usb 1-1: SerialNumber: syz [ 1084.884252][ T24] audit: type=1400 audit(1786100342.220:339): avc: denied { bind } for pid=11545 comm="syz.6.3195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1084.918819][ T7894] hub 1-1:250.228: bad descriptor, ignoring hub [ 1084.927045][ T7894] hub: probe of 1-1:250.228 failed with error -5 [ 1084.977965][T11548] 9pnet: p9_fd_create_tcp (11548): problem binding to privport [ 1085.234404][ T7894] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 5 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1085.318263][ T7894] Bluetooth: hci0: command 0x1009 tx timeout [ 1085.467452][ T24] audit: type=1400 audit(1786100342.800:340): avc: denied { read write } for pid=11495 comm="syz.0.3171" name="lp0" dev="devtmpfs" ino=3493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1085.611770][ T24] audit: type=1400 audit(1786100342.860:341): avc: denied { open } for pid=11495 comm="syz.0.3171" path="/dev/usb/lp0" dev="devtmpfs" ino=3493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1085.668224][ C1] usblp0: nonzero read bulk status received: -71 [ 1085.819964][T11563] device syzkaller0 entered promiscuous mode [ 1086.115648][T11578] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.138319][T11578] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.145953][T11578] device bridge_slave_0 entered promiscuous mode [ 1086.156879][T11578] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.164082][T11578] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.171474][ T20] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1086.180230][T11578] device bridge_slave_1 entered promiscuous mode [ 1086.242965][T11578] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.250096][T11578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1086.257404][T11578] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.264585][T11578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1086.308658][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1086.316402][ T1296] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.330256][ T1296] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.351963][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1086.360238][ T1296] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.367303][ T1296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1086.375275][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1086.383782][ T1296] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.390843][ T1296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1086.398163][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1086.406180][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1086.418222][ T20] usb 3-1: Using ep0 maxpacket: 32 [ 1086.427803][T11589] device syzkaller0 entered promiscuous mode [ 1086.447252][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1086.462080][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1086.471596][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1086.484567][ T24] audit: type=1400 audit(1786100343.820:342): avc: denied { create } for pid=11591 comm="syz.6.3212" name="h" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 1086.498652][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1086.513360][T11578] device veth0_vlan entered promiscuous mode [ 1086.536481][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1086.544821][ T20] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1086.554910][T11578] device veth1_macvtap entered promiscuous mode [ 1086.561550][ T20] usb 3-1: config 0 has no interface number 0 [ 1086.567675][ T20] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1086.580192][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1086.599920][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1086.661303][ T24] audit: type=1400 audit(1786100344.000:343): avc: denied { bind } for pid=11603 comm="syz.6.3217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1086.721805][T11612] device syzkaller0 entered promiscuous mode [ 1086.758356][ T20] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1086.767540][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.776492][ T20] usb 3-1: Product: syz [ 1086.780721][ T20] usb 3-1: Manufacturer: syz [ 1086.790226][ T20] usb 3-1: SerialNumber: syz [ 1086.796352][ T20] usb 3-1: config 0 descriptor?? [ 1086.848831][ T20] smsc75xx v1.0.0 [ 1086.869155][ T867] device bridge_slave_1 left promiscuous mode [ 1086.875327][ T867] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.882707][ T867] device bridge_slave_0 left promiscuous mode [ 1086.889014][ T867] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.896593][ T867] device veth1_macvtap left promiscuous mode [ 1086.902643][ T867] device veth0_vlan left promiscuous mode [ 1086.998395][ T8018] usb 1-1: USB disconnect, device number 5 [ 1087.006657][ T8018] usblp0: removed [ 1087.096676][T11640] device syzkaller0 entered promiscuous mode [ 1087.118488][ T6854] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1087.378229][ T6854] usb 7-1: Using ep0 maxpacket: 16 [ 1087.508337][ T6854] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1087.508400][ T3969] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1087.519401][ T6854] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1087.536919][ T6854] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1087.549887][ T6854] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1087.559026][ T6854] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.567773][ T6854] usb 7-1: config 0 descriptor?? [ 1087.879339][ T3969] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1087.888542][ T3969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.897273][ T3969] usb 4-1: config 0 descriptor?? [ 1088.079216][ T6854] hid-generic 0003:0955:7214.0005: unknown main item tag 0x0 [ 1088.086687][ T6854] hid-generic 0003:0955:7214.0005: unknown main item tag 0x0 [ 1088.094150][ T6854] hid-generic 0003:0955:7214.0005: item fetching failed at offset 3/5 [ 1088.102502][ T6854] hid-generic: probe of 0003:0955:7214.0005 failed with error -22 [ 1088.168302][ T20] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1088.179247][ T20] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1088.208358][ T20] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1088.219442][ T20] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1088.229178][ T20] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1088.239505][ T3969] usb 4-1: Cannot read MAC address [ 1088.244675][ T3969] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 1088.252863][ T20] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1088.263487][ T3969] usb 4-1: USB disconnect, device number 5 [ 1088.270224][ T20] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 1088.280437][ T20] usb 3-1: USB disconnect, device number 13 [ 1088.283590][ T6854] usb 7-1: USB disconnect, device number 6 [ 1088.774236][T11681] device ip6gretap1 entered promiscuous mode [ 1088.788849][T11683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3256'. [ 1089.084916][T11727] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1089.093351][T11727] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 1089.102643][T11727] IPv6: ADDRCONF(NETDEV_CHANGE): ifb0: link becomes ready [ 1089.110949][T11727] IPv6: ADDRCONF(NETDEV_CHANGE): ifb1: link becomes ready [ 1089.119280][T11727] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 1089.247608][T11734] device syz_tun left promiscuous mode [ 1089.316234][ T867] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1089.331406][ T867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1089.512710][ T867] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1089.521929][ T867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1089.536321][ T867] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1089.557274][ T867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1089.580234][ T867] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1089.592535][ T867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1089.600855][ T24] audit: type=1400 audit(1786100346.930:344): avc: denied { setopt } for pid=11746 comm="syz.6.3286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1089.624787][ T24] audit: type=1400 audit(1786100346.960:345): avc: denied { write } for pid=11746 comm="syz.6.3286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1089.957440][T11777] netlink: 1988 bytes leftover after parsing attributes in process `syz.6.3300'. [ 1090.045132][ T24] audit: type=1400 audit(1786100347.380:346): avc: denied { unmount } for pid=11164 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1091.949513][T11853] overlayfs: missing 'lowerdir' [ 1092.109468][ T7893] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1092.378248][ T7893] usb 2-1: Using ep0 maxpacket: 32 [ 1092.658290][ T7893] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1092.661424][T11908] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3351'. [ 1092.678053][ T7893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.681812][T11908] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3351'. [ 1092.689744][ T7893] usb 2-1: Product: syz [ 1092.699833][ T7893] usb 2-1: Manufacturer: syz [ 1092.704599][ T7893] usb 2-1: SerialNumber: syz [ 1092.724754][ T7893] usb 2-1: config 0 descriptor?? [ 1092.788168][ T24] audit: type=1400 audit(1786100350.125:347): avc: denied { relabelfrom } for pid=11920 comm="syz.0.3357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1092.814762][ T24] audit: type=1400 audit(1786100350.135:348): avc: denied { relabelto } for pid=11920 comm="syz.0.3357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1093.433435][T11981] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1093.469783][T11981] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 1093.497542][T11981] IPv6: ADDRCONF(NETDEV_CHANGE): ifb0: link becomes ready [ 1093.517359][T11981] IPv6: ADDRCONF(NETDEV_CHANGE): ifb1: link becomes ready [ 1093.535016][T11981] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 1093.562795][T11984] pimreg: tun_chr_ioctl cmd 1074025677 [ 1093.570588][T11984] pimreg: linktype set to 776 [ 1093.854936][ T24] audit: type=1400 audit(1786100351.195:349): avc: denied { create } for pid=12025 comm="syz.0.3409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1093.907130][T12031] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.261937][T12063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=120 sclass=netlink_route_socket pid=12063 comm=syz.6.3425 [ 1094.288661][T12065] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3426'. [ 1094.345522][T12071] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3429'. [ 1094.354731][T12071] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3429'. [ 1094.378278][ T24] audit: type=1400 audit(1786100351.725:350): avc: denied { write } for pid=12072 comm="syz.6.3430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1094.489490][ T24] audit: type=1400 audit(1786100351.835:351): avc: denied { read write } for pid=12084 comm="syz.6.3436" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1094.514541][ T24] audit: type=1400 audit(1786100351.835:352): avc: denied { open } for pid=12084 comm="syz.6.3436" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1094.743680][ T8018] usb 2-1: USB disconnect, device number 7 [ 1094.839222][ T6854] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 1094.955388][T12106] x_tables: unsorted entry at hook 2 [ 1095.058241][ T7005] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1095.071754][ T24] audit: type=1400 audit(1786100352.415:353): avc: denied { ioctl } for pid=12115 comm="syz.1.3450" path="socket:[64349]" dev="sockfs" ino=64349 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1095.125526][T12123] overlayfs: unrecognized mount option "uuid=off" or missing value [ 1095.468295][ T6854] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1095.477444][ T6854] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.485606][ T6854] usb 7-1: Product: syz [ 1095.489934][ T6854] usb 7-1: Manufacturer: syz [ 1095.494550][ T6854] usb 7-1: SerialNumber: syz [ 1095.499800][ T6854] usb 7-1: config 0 descriptor?? [ 1095.518325][ T7005] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1095.528255][ T7005] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1095.537987][ T7005] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1095.548698][ T7005] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1095.728472][ T7005] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1095.737654][ T7005] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.745674][ T7005] usb 1-1: Product: syz [ 1095.749963][ T7005] usb 1-1: Manufacturer: syz [ 1095.754722][ T7005] usb 1-1: SerialNumber: syz [ 1095.759948][ T7005] usb 1-1: config 0 descriptor?? [ 1095.799134][ T7005] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 1096.095882][ T7005] ums-isd200: probe of 1-1:0.0 failed with error -22 [ 1096.243140][ T7893] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1096.252952][ T3969] usb 1-1: USB disconnect, device number 6 [ 1096.498262][ T7893] usb 4-1: Using ep0 maxpacket: 8 [ 1096.618291][ T7893] usb 4-1: config 0 interface 0 altsetting 251 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1096.631324][ T7893] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1096.637919][ T7893] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0a1a, bcdDevice= 0.00 [ 1096.647075][ T7893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.655814][ T7893] usb 4-1: config 0 descriptor?? [ 1096.827772][ T6854] usb 7-1: USB disconnect, device number 7 [ 1096.905628][ T24] audit: type=1400 audit(1786100354.245:354): avc: denied { read } for pid=12183 comm="syz.6.3477" path="socket:[64893]" dev="sockfs" ino=64893 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1097.108229][T12197] configfs-gadget gadget: uvc: uvc_function_bind() [ 1097.115035][T12197] configfs-gadget gadget: uvc: Unable to allocate streaming EP [ 1097.122797][T12197] udc dummy_udc.0: failed to start g1: -22 [ 1097.147672][ T7893] hid-generic 0003:1B1C:0A1A.0006: ignoring exceeding usage max [ 1097.311961][ T7893] hid-generic 0003:1B1C:0A1A.0006: unknown main item tag 0x2 [ 1097.387035][ T7893] hid-generic 0003:1B1C:0A1A.0006: unknown main item tag 0xd [ 1097.387086][ T7893] hid-generic 0003:1B1C:0A1A.0006: item fetching failed at offset 24/40 [ 1097.387294][ T7893] hid-generic: probe of 0003:1B1C:0A1A.0006 failed with error -22 [ 1097.400768][ T7893] usb 4-1: USB disconnect, device number 6 [ 1098.058326][ T7893] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 1098.357505][ T24] audit: type=1400 audit(1786100355.695:355): avc: denied { map } for pid=12248 comm="syz.0.3504" path="/dev/usbmon0" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1098.588297][ T7893] usb 3-1: not running at top speed; connect to a high speed hub [ 1098.659998][T12275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3508'. [ 1098.669783][T12275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3508'. [ 1098.698273][ T24] audit: type=1400 audit(1786100355.955:356): avc: denied { listen } for pid=12271 comm="syz.1.3514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1098.784068][T12280] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 1098.788278][ T7893] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.828790][ T7893] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 1098.838071][ T7893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.881619][ T7893] uvcvideo: Found UVC 1.00 device (0000:0000) [ 1099.108388][ T7893] uvcvideo: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1099.138277][ T7893] uvcvideo: Failed to query (129) UVC probe control : -71 (exp. 26). [ 1099.146598][ T7893] uvcvideo: Failed to initialize the device (-5). [ 1099.155165][ T7893] usb 3-1: USB disconnect, device number 14 [ 1099.209292][T12295] device-mapper: ioctl: invalid device name [ 1099.338321][ T7895] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1099.768210][ T7895] usb 2-1: Using ep0 maxpacket: 32 [ 1099.789896][ T24] audit: type=1400 audit(1786100357.135:357): avc: denied { getopt } for pid=12325 comm="syz.0.3537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1099.888318][ T7895] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1099.898104][ T7895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.914347][ T7895] usb 2-1: config 0 descriptor?? [ 1099.971933][T12346] FAULT_INJECTION: forcing a failure. [ 1099.971933][T12346] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1099.985242][T12346] CPU: 0 PID: 12346 Comm: syz.0.3543 Not tainted syzkaller #0 [ 1099.992721][T12346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1100.002891][T12346] Call Trace: [ 1100.006277][T12346] __dump_stack+0x21/0x24 [ 1100.010622][T12346] dump_stack_lvl+0x1a7/0x208 [ 1100.015292][T12346] ? show_regs_print_info+0x18/0x18 [ 1100.020518][T12346] ? vfs_write+0xae4/0xd70 [ 1100.024920][T12346] dump_stack+0x15/0x1c [ 1100.029101][T12346] should_fail+0x3ab/0x500 [ 1100.033504][T12346] should_fail_usercopy+0x1a/0x20 [ 1100.038597][T12346] _copy_from_user+0x20/0xd0 [ 1100.043203][T12346] __se_sys_bpf+0x1bb/0x740 [ 1100.047690][T12346] ? __x64_sys_bpf+0x90/0x90 [ 1100.052304][T12346] ? __kasan_check_read+0x11/0x20 [ 1100.057323][T12346] __x64_sys_bpf+0x7b/0x90 [ 1100.061745][T12346] do_syscall_64+0x31/0x40 [ 1100.066199][T12346] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1100.072083][T12346] RIP: 0033:0x7f54effe00d9 [ 1100.076494][T12346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1100.096190][T12346] RSP: 002b:00007f54eea39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1100.104601][T12346] RAX: ffffffffffffffda RBX: 00007f54f0267fa0 RCX: 00007f54effe00d9 [ 1100.112569][T12346] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 1100.120635][T12346] RBP: 00007f54f0077024 R08: 0000000000000000 R09: 0000000000000000 [ 1100.128602][T12346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1100.136567][T12346] R13: 00007f54f0268038 R14: 00007f54f0267fa0 R15: 00007ffdf0a50f08 [ 1100.181678][ T24] audit: type=1400 audit(1786100357.525:358): avc: denied { read } for pid=12350 comm="syz.0.3547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1100.206282][ T24] audit: type=1400 audit(1786100357.525:359): avc: denied { accept } for pid=12352 comm="syz.0.3550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1100.448242][ T7005] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1101.530664][ T7005] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1101.540115][ T7005] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.548262][ T7005] usb 7-1: Product: syz [ 1101.552421][ T7005] usb 7-1: Manufacturer: syz [ 1101.557009][ T7005] usb 7-1: SerialNumber: syz [ 1101.562465][ T7005] usb 7-1: config 0 descriptor?? [ 1101.649038][ T24] audit: type=1400 audit(1786100358.995:360): avc: denied { create } for pid=12411 comm="syz.0.3575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1102.111790][ T7895] usb 2-1: USB disconnect, device number 8 [ 1102.379763][T12460] xt_hashlimit: size too large, truncated to 1048576 [ 1102.936233][ T6854] usb 7-1: USB disconnect, device number 8 [ 1102.968448][T12485] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3606'. [ 1103.123712][T12509] tipc: Started in network mode [ 1103.128727][T12509] tipc: Own node identity aa32d0b13321, cluster identity 4711 [ 1103.136372][T12509] tipc: Enabled bearer , priority 0 [ 1103.146975][T12509] device syzkaller0 entered promiscuous mode [ 1103.159385][T12509] tipc: Resetting bearer [ 1103.165769][T12508] tipc: Resetting bearer [ 1103.173225][T12508] tipc: Disabling bearer [ 1103.717561][ T24] audit: type=1400 audit(1786100361.055:361): avc: denied { read write } for pid=12524 comm="syz.2.3624" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1103.741187][ T24] audit: type=1400 audit(1786100361.055:362): avc: denied { open } for pid=12524 comm="syz.2.3624" path="/335/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1103.803739][T12533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3627'. [ 1103.813558][T12533] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3627'. [ 1104.655147][T12576] process 'syz.0.3642' launched './file2' with NULL argv: empty string added [ 1104.815939][ T24] audit: type=1400 audit(1786100362.005:363): avc: denied { execute_no_trans } for pid=12565 comm="syz.0.3642" path="/163/file2" dev="tmpfs" ino=875 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1105.710491][T12594] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1105.718939][T12594] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 1105.733010][T12594] IPv6: ADDRCONF(NETDEV_CHANGE): ifb0: link becomes ready [ 1105.745924][T12594] IPv6: ADDRCONF(NETDEV_CHANGE): ifb1: link becomes ready [ 1105.760701][T12594] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 1106.298622][ T7005] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1106.668625][ T7005] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1106.697032][ T7005] usb 4-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 1106.748307][ T7005] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.800408][T12642] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3671'. [ 1108.151621][T12662] overlayfs: missing 'lowerdir' [ 1108.168404][ T24] audit: type=1400 audit(1786100365.495:364): avc: denied { mounton } for pid=12648 comm="syz.6.3675" path="/495/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1108.290621][ T7005] wacom 0003:056A:033B.0007: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 1108.318079][ T7005] wacom 0003:056A:033B.0007: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.3-1/input0 [ 1108.330405][ T7005] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:056A:033B.0007/input/input7 [ 1108.413707][ T24] audit: type=1400 audit(1786100365.755:365): avc: denied { bind } for pid=12684 comm="syz.6.3688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1108.495565][ T20] usb 4-1: USB disconnect, device number 7 [ 1108.608263][ T7005] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1108.708247][ T7893] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1108.885880][T12691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3691'. [ 1108.968278][ T7005] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1108.978465][ T7005] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1108.988352][ T7005] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1108.998034][ T7005] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1109.010869][ T7005] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1109.019959][ T7005] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.052077][T12697] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1109.059731][T12697] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 1109.067324][T12697] IPv6: ADDRCONF(NETDEV_CHANGE): ifb0: link becomes ready [ 1109.074810][T12697] IPv6: ADDRCONF(NETDEV_CHANGE): ifb1: link becomes ready [ 1109.082332][T12697] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 1109.098337][ T7893] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1109.109678][ T7893] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1109.118926][ T7893] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.180850][ T20] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1109.188969][ T7893] usb 7-1: config 0 descriptor?? [ 1109.272229][T12711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3700'. [ 1109.281754][T12711] device bridge_slave_1 left promiscuous mode [ 1109.292896][T12711] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.303460][T12711] device bridge_slave_0 left promiscuous mode [ 1109.310532][T12711] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.428258][ T20] usb 2-1: Using ep0 maxpacket: 32 [ 1109.548382][ T7893] usbhid 7-1:0.0: can't add hid device: -71 [ 1109.554359][ T20] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 1109.565091][ T7893] usbhid: probe of 7-1:0.0 failed with error -71 [ 1109.572291][ T7893] usb 7-1: USB disconnect, device number 9 [ 1109.578250][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1109.589995][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1109.758324][ T20] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1109.767471][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.775535][ T20] usb 2-1: Product: syz [ 1109.779847][ T20] usb 2-1: Manufacturer: syz [ 1109.784490][ T20] usb 2-1: SerialNumber: syz [ 1109.790045][ T20] usb 2-1: config 0 descriptor?? [ 1109.998245][ T7893] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1110.256642][T12724] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1110.264718][T12724] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 1110.272611][T12724] IPv6: ADDRCONF(NETDEV_CHANGE): ifb0: link becomes ready [ 1110.281099][T12724] IPv6: ADDRCONF(NETDEV_CHANGE): ifb1: link becomes ready [ 1110.295147][T12724] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 1110.398310][ T7893] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1110.408509][ T7893] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 1110.418452][ T7893] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1110.588312][ T7893] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 1110.597535][ T7893] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.605547][ T7893] usb 7-1: Product: syz [ 1110.609775][ T7893] usb 7-1: Manufacturer: syz [ 1110.614360][ T7893] usb 7-1: SerialNumber: syz [ 1111.065081][ T8018] usb 7-1: USB disconnect, device number 10 [ 1111.107837][T12740] udc-core: couldn't find an available UDC or it's busy [ 1111.115004][T12740] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1111.181485][ T6854] usb 3-1: USB disconnect, device number 15 [ 1111.218682][T12748] input: syz1 as /devices/virtual/input/input10 [ 1111.352686][T12762] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1111.361788][T12762] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 1111.372156][T12762] IPv6: ADDRCONF(NETDEV_CHANGE): ifb0: link becomes ready [ 1111.379539][T12762] IPv6: ADDRCONF(NETDEV_CHANGE): ifb1: link becomes ready [ 1111.386778][T12762] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 1111.678957][T12772] udc-core: couldn't find an available UDC or it's busy [ 1111.686305][T12772] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1112.249666][T12846] tun0: tun_chr_ioctl cmd 2148553947 [ 1112.450376][ T24] audit: type=1400 audit(1786100369.795:366): avc: denied { create } for pid=12879 comm="syz.2.3773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 1112.546499][T12891] netlink: 'syz.6.3778': attribute type 3 has an invalid length. [ 1112.710650][ T8018] usb 2-1: USB disconnect, device number 9 [ 1112.898245][ T7893] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1113.078218][ T3158] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1113.158207][ T7893] usb 4-1: Using ep0 maxpacket: 8 [ 1113.588236][ T7893] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1113.648274][ T7893] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1113.655877][ T7893] usb 4-1: can't read configurations, error -71 [ 1113.688251][ T3158] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1113.703754][ T3158] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1113.713757][ T3158] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1113.723801][ T3158] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1113.736761][ T3158] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1113.746103][ T3158] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.108281][ T3969] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1114.208295][ T20] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1114.358349][ T3969] usb 7-1: Using ep0 maxpacket: 8 [ 1114.448248][ T20] usb 2-1: Using ep0 maxpacket: 32 [ 1114.478659][ T3969] usb 7-1: config 0 has no interfaces? [ 1114.485862][ T3969] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1114.532184][ T3969] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.608421][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1114.619651][ T3969] usb 7-1: config 0 descriptor?? [ 1114.624800][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1114.634985][ T20] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1114.644453][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.654182][ T20] usb 2-1: config 0 descriptor?? [ 1114.698797][ T20] hub 2-1:0.0: USB hub found [ 1114.918562][ T20] hub 2-1:0.0: 1 port detected [ 1114.946698][ T3156] usb 7-1: USB disconnect, device number 11 [ 1115.819786][ T20] usb 3-1: USB disconnect, device number 16 [ 1115.933704][ T3969] hub 2-1:0.0: activate --> -90 [ 1116.248222][ T20] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1116.259177][ T7893] usb 2-1: USB disconnect, device number 10 [ 1116.278346][ T3969] usb 2-1-port1: config error [ 1116.488229][ T20] usb 3-1: Using ep0 maxpacket: 16 [ 1116.688264][ T20] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1116.768278][ T20] usb 3-1: config 9 has an invalid interface number: 46 but max is 0 [ 1116.798446][ T20] usb 3-1: config 9 has no interface number 0 [ 1116.816618][ T20] usb 3-1: config 9 interface 46 has no altsetting 0 [ 1116.978338][ T20] usb 3-1: New USB device found, idVendor=1164, idProduct=1edc, bcdDevice=b2.e6 [ 1117.001952][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.022126][ T20] usb 3-1: Product: syz [ 1117.026356][ T20] usb 3-1: Manufacturer: syz [ 1117.039875][ T24] audit: type=1400 audit(1786100374.385:367): avc: denied { append } for pid=13078 comm="syz.1.3862" name="uinput" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1117.063852][T13080] input: syz0 as /devices/virtual/input/input11 [ 1117.068339][ T20] usb 3-1: SerialNumber: syz [ 1117.121632][T13083] overlayfs: missing 'lowerdir' [ 1117.461944][T13119] tipc: Started in network mode [ 1117.466991][T13119] tipc: Own node identity 1, cluster identity 4711 [ 1117.474085][T13119] tipc: 32-bit node address hash set to 1 [ 1117.548289][ T7893] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1117.838229][ T7893] usb 7-1: Using ep0 maxpacket: 32 [ 1117.958280][ T7893] usb 7-1: config 4 has an invalid interface number: 53 but max is 0 [ 1117.966718][ T7893] usb 7-1: config 4 has no interface number 0 [ 1117.974036][ T7893] usb 7-1: config 4 interface 53 altsetting 96 endpoint 0xB has an invalid bInterval 253, changing to 11 [ 1117.985667][ T7893] usb 7-1: config 4 interface 53 has no altsetting 0 [ 1118.148320][ T7893] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice=a5.7e [ 1118.157365][ T7893] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.165581][ T20] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 1118.173219][ T7893] usb 7-1: Product: syz [ 1118.177441][ T7893] usb 7-1: Manufacturer: syz [ 1118.182098][ T7893] usb 7-1: SerialNumber: syz [ 1118.509417][ T7893] usb 7-1: USB disconnect, device number 12 [ 1118.528289][ T20] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE8, skipping [ 1118.539145][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1118.708449][ T20] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1118.717650][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.725684][ T20] usb 2-1: Product: syz [ 1118.729878][ T20] usb 2-1: Manufacturer: syz [ 1118.734462][ T20] usb 2-1: SerialNumber: syz [ 1118.739693][ T20] usb 2-1: config 0 descriptor?? [ 1118.758461][T13176] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 1118.862521][ T20] usb 3-1: USB disconnect, device number 17 [ 1118.982610][ T8018] usb 2-1: USB disconnect, device number 11 [ 1119.248285][ T7893] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1119.338298][ T3156] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1119.578210][ T3156] usb 7-1: Using ep0 maxpacket: 16 [ 1119.633964][ T7893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1119.648765][ T7893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1119.659026][ T7893] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1119.672026][ T7893] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1119.681095][ T7893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.690267][ T7893] usb 4-1: config 0 descriptor?? [ 1119.698464][ T3156] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1119.709640][ T3156] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1119.719871][ T3156] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1119.732708][ T3156] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1119.741800][ T3156] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.750398][ T3156] usb 7-1: config 0 descriptor?? [ 1119.908262][ T8018] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1120.129743][ T24] audit: type=1400 audit(1786100377.475:368): avc: denied { setattr } for pid=13248 comm="syz.2.3926" name="" dev="pipefs" ino=69077 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1120.132628][T13249] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1120.169533][ T7893] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 1120.189075][ T7893] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1120.209333][ T3156] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 1120.221428][ T3156] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 1120.229187][ T3156] microsoft 0003:045E:07DA.0009: ignoring exceeding usage max [ 1120.239784][ T3156] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 1120.247100][ T3156] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 1120.262172][ T3156] microsoft 0003:045E:07DA.0009: unsupported Resolution Multiplier 0 [ 1120.272308][ T3156] microsoft 0003:045E:07DA.0009: implement() called with n (56) > 32! (kworker/0:16) [ 1120.308285][ T8018] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1120.318631][ T8018] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1120.418501][ T3156] microsoft 0003:045E:07DA.0009: unsupported Resolution Multiplier 0 [ 1120.427141][ T3156] microsoft 0003:045E:07DA.0009: No inputs registered, leaving [ 1120.435886][ T3156] microsoft 0003:045E:07DA.0009: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 1120.448572][ T3156] microsoft 0003:045E:07DA.0009: no inputs found [ 1120.455065][ T3156] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway [ 1120.488285][ T8018] usb 2-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 1120.497494][ T8018] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.506744][ T8018] usb 2-1: Product: syz [ 1120.511222][ T8018] usb 2-1: Manufacturer: syz [ 1120.515907][ T8018] usb 2-1: SerialNumber: syz [ 1120.648158][ T8018] usb 7-1: USB disconnect, device number 13 [ 1121.448232][ T6905] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1121.848273][ T6905] usb 7-1: config 254 has an invalid interface number: 94 but max is 0 [ 1121.856765][ T6905] usb 7-1: config 254 has no interface number 0 [ 1121.863324][ T6905] usb 7-1: config 254 interface 94 altsetting 16 endpoint 0xC has invalid wMaxPacketSize 0 [ 1121.873642][ T6905] usb 7-1: config 254 interface 94 altsetting 16 bulk endpoint 0xC has invalid maxpacket 0 [ 1121.884016][ T6905] usb 7-1: config 254 interface 94 has no altsetting 0 [ 1122.058341][ T6905] usb 7-1: New USB device found, idVendor=0424, idProduct=7800, bcdDevice=f1.7e [ 1122.067429][ T6905] usb 7-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 1122.088711][ T6905] usb 7-1: Product: syz [ 1122.093058][ T6905] usb 7-1: Manufacturer: syz [ 1122.103203][ T6905] usb 7-1: SerialNumber: syz [ 1122.454535][ T6905] usb 7-1: USB disconnect, device number 14 [ 1122.598528][ T3156] usb 4-1: reset high-speed USB device number 10 using dummy_hcd [ 1122.652841][ T7893] usb 2-1: USB disconnect, device number 12 [ 1122.928347][ T3156] usb 4-1: device firmware changed [ 1122.934350][ T8018] usb 4-1: USB disconnect, device number 10 [ 1123.001968][T13283] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3941'. [ 1123.138301][ T7893] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1123.448259][ T8018] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1123.548263][ T7893] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1123.628378][ T7893] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 185, changing to 7 [ 1123.838327][ T8018] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1123.866366][ T8018] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1123.887969][ T8018] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1123.897390][ T8018] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1123.927889][T13301] overlayfs: failed to resolve './file2': -2 [ 1124.009900][ T7893] usb 2-1: string descriptor 0 read error: -22 [ 1124.017546][ T7893] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 1124.029596][T13303] binder: BINDER_SET_CONTEXT_MGR already set [ 1124.035932][ T7893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.044256][T13303] binder: 13302:13303 ioctl 4018620d 200000004a80 returned -16 [ 1124.078424][ T8018] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1124.087513][ T8018] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1124.097584][ T8018] usb 4-1: Product: syz [ 1124.102047][ T8018] usb 4-1: Manufacturer: syz [ 1124.118310][T13273] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1124.138824][ T8018] cdc_wdm 4-1:1.0: skipping garbage [ 1124.144336][ T8018] cdc_wdm 4-1:1.0: skipping garbage [ 1124.152509][ T8018] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 1124.341987][ T7894] usb 4-1: USB disconnect, device number 11 [ 1124.898275][ T7894] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1124.988590][T13321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3956'. [ 1125.138330][ T7894] usb 7-1: Using ep0 maxpacket: 32 [ 1125.218881][ T7893] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 1125.247132][ T7893] usb 2-1: USB disconnect, device number 13 [ 1125.338263][ T7894] usb 7-1: config 129 has an invalid interface number: 14 but max is 0 [ 1125.346753][ T7894] usb 7-1: config 129 has no interface number 0 [ 1125.353555][ T7894] usb 7-1: config 129 interface 14 has no altsetting 0 [ 1125.518310][ T7894] usb 7-1: New USB device found, idVendor=045e, idProduct=07c6, bcdDevice=85.65 [ 1125.527499][ T7894] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.535783][ T7894] usb 7-1: Product: syz [ 1125.540507][ T7894] usb 7-1: Manufacturer: syz [ 1125.545175][ T7894] usb 7-1: SerialNumber: syz [ 1125.921435][ T7894] usb 7-1: USB disconnect, device number 15 [ 1126.068257][ T3969] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1126.438778][ T3969] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1126.578289][ T3969] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 1126.597618][ T3969] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1126.607696][ T3969] usb 4-1: Product: syz [ 1126.617792][ T3969] usb 4-1: Manufacturer: syz [ 1126.850172][T13355] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3968'. [ 1127.157730][ T7894] usb 4-1: USB disconnect, device number 12 [ 1128.428251][ T7893] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1128.568218][ T8018] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1128.788258][ T7893] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1128.798858][ T7893] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1128.809276][ T7893] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1128.819119][ T7893] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1128.838241][ T8018] usb 7-1: Using ep0 maxpacket: 16 [ 1128.978262][ T8018] usb 7-1: config 0 has an invalid interface number: 34 but max is 0 [ 1128.986859][ T8018] usb 7-1: config 0 has no interface number 0 [ 1128.988254][ T7893] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 1129.003566][ T8018] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1129.026593][ T8018] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1129.028202][ T7893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.055012][ T7893] usb 2-1: Product: syz [ 1129.059282][ T7893] usb 2-1: Manufacturer: syz [ 1129.065073][ T7893] usb 2-1: SerialNumber: syz [ 1129.193181][ T24] audit: type=1400 audit(1786100386.535:369): avc: denied { read } for pid=13436 comm="syz.3.3996" name="idVendor" dev="configfs" ino=70823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1129.218978][ T8018] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1129.228149][ T8018] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.236607][ T8018] usb 7-1: Product: syz [ 1129.241369][ T8018] usb 7-1: Manufacturer: syz [ 1129.246062][ T8018] usb 7-1: SerialNumber: syz [ 1129.259547][ T8018] usb 7-1: config 0 descriptor?? [ 1129.278318][T13415] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1129.285679][T13415] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1129.316467][ T7005] usb 2-1: USB disconnect, device number 14 [ 1129.500732][T13415] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1129.517950][T13415] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1129.758307][ T8018] asix 7-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1129.837588][ T24] audit: type=1400 audit(1786100387.175:370): avc: denied { transfer } for pid=13481 comm="syz.1.3998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1130.857475][ T24] audit: type=1400 audit(1786100388.195:371): avc: denied { write } for pid=13497 comm="syz.1.4004" name="instances" dev="tracefs" ino=12708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1130.890392][ T24] audit: type=1400 audit(1786100388.225:372): avc: denied { add_name } for pid=13497 comm="syz.1.4004" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1130.922801][ T24] audit: type=1400 audit(1786100388.225:373): avc: denied { create } for pid=13497 comm="syz.1.4004" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 1130.948474][ T24] audit: type=1400 audit(1786100388.255:374): avc: denied { remove_name } for pid=13497 comm="syz.1.4004" name="foo" dev="tracefs" ino=70834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1131.020288][ T24] audit: type=1400 audit(1786100388.255:375): avc: denied { rmdir } for pid=13497 comm="syz.1.4004" name="foo" dev="tracefs" ino=70834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1131.072257][T13510] configfs-gadget gadget: uvc: uvc_function_bind() [ 1131.088269][T13510] configfs-gadget gadget: uvc: Unable to allocate streaming EP [ 1131.104947][T13510] udc dummy_udc.0: failed to start g1: -22 [ 1131.738267][ T8018] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1131.753594][ T8018] asix: probe of 7-1:0.34 failed with error -71 [ 1131.768558][ T8018] usb 7-1: USB disconnect, device number 16 [ 1132.104525][T13535] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1132.121923][T13535] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 1132.150049][T13535] IPv6: ADDRCONF(NETDEV_CHANGE): ifb0: link becomes ready [ 1132.159304][T13535] IPv6: ADDRCONF(NETDEV_CHANGE): ifb1: link becomes ready [ 1132.178509][T13535] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 1132.287915][T13544] user requested TSC rate below hardware speed [ 1132.538645][ T7893] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1132.598247][ T3969] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1132.848258][ T3969] usb 4-1: Using ep0 maxpacket: 8 [ 1132.858325][ T20] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1132.938287][ T7893] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1132.948715][ T7893] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1132.958927][ T7893] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1132.968966][ T7893] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1132.982516][ T7893] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1132.991800][ T3969] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1133.002328][ T7893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.010666][ T3969] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1133.024018][ T3969] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1133.035530][ T3969] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1133.047173][ T3969] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1133.056681][ T3969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.098229][ T20] usb 7-1: Using ep0 maxpacket: 8 [ 1133.118786][ T3969] hub 4-1:1.0: bad descriptor, ignoring hub [ 1133.125429][ T3969] hub: probe of 4-1:1.0 failed with error -5 [ 1133.138415][ T3969] cdc_wdm 4-1:1.0: skipping garbage [ 1133.143886][ T3969] cdc_wdm 4-1:1.0: skipping garbage [ 1133.151089][ T3969] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1133.209153][T13569] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1133.262430][ T20] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1133.459200][ T3151] usb 4-1: USB disconnect, device number 13 [ 1133.518308][ T20] usb 7-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 1133.533133][ T20] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.548207][ T20] usb 7-1: Product: syz [ 1133.557973][ T20] usb 7-1: Manufacturer: syz [ 1133.568230][ T20] usb 7-1: SerialNumber: syz [ 1133.958265][ T20] usb 7-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 1133.972606][ T20] usb 7-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 1134.028269][ T20] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1134.070016][ T20] usb 7-1: USB disconnect, device number 17 [ 1134.198246][ T3969] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1134.337292][ T9300] udevd[9300]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1134.450690][ T3969] usb 4-1: Using ep0 maxpacket: 16 [ 1134.598783][ T3969] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 1134.687401][ T3969] usb 4-1: config 0 has no interface number 0 [ 1134.749283][ T3969] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1134.802082][ T3969] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1134.988533][ T3969] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1134.998218][ T3969] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.006481][ T3969] usb 4-1: Product: syz [ 1135.011958][ T3969] usb 4-1: Manufacturer: syz [ 1135.016805][ T3969] usb 4-1: SerialNumber: syz [ 1135.028833][ T3969] usb 4-1: config 0 descriptor?? [ 1135.048503][T13583] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1135.056055][T13583] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1135.252285][ T20] usb 2-1: USB disconnect, device number 15 [ 1135.313641][T13583] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1135.321432][T13583] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1135.618350][ T3969] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1136.099747][T13625] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.107080][T13625] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.116859][T13625] device bridge_slave_0 entered promiscuous mode [ 1136.126715][T13625] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.134878][T13625] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.144559][T13625] device bridge_slave_1 entered promiscuous mode [ 1136.189881][T13625] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.197067][T13625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1136.204363][T13625] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.211504][T13625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1136.218833][ T7005] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1136.231455][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1136.239253][ T8535] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.246501][ T8535] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.255879][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1136.264324][ T8535] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.271389][ T8535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1136.289243][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1136.297754][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1136.306034][ T8535] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.313098][ T8535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1136.320487][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1136.328622][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1136.340964][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1136.348948][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1136.356384][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1136.358224][ T20] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1136.372689][T13625] device veth0_vlan entered promiscuous mode [ 1136.383688][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1136.392929][T13625] device veth1_macvtap entered promiscuous mode [ 1136.402311][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1136.412353][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1136.578254][ T7005] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1136.586227][ T7005] usb 7-1: no configurations [ 1136.591364][ T7005] usb 7-1: can't read configurations, error -22 [ 1136.628262][ T20] usb 2-1: Using ep0 maxpacket: 8 [ 1136.749360][ T3156] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1136.858643][ T20] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1136.876525][ T20] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1136.887235][ T20] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1136.899349][ T20] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1136.911478][ T20] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1136.920960][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.968950][ T20] hub 2-1:1.0: bad descriptor, ignoring hub [ 1136.974972][ T20] hub: probe of 2-1:1.0 failed with error -5 [ 1136.981507][ T20] cdc_wdm 2-1:1.0: skipping garbage [ 1136.986782][ T20] cdc_wdm 2-1:1.0: skipping garbage [ 1136.993079][ T20] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1137.278364][ T3156] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 118, changing to 10 [ 1137.289936][ T3156] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1137.298363][ T20] usb 2-1: USB disconnect, device number 16 [ 1137.301508][ T3156] usb 10-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 1137.316592][ T3156] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.331833][ T3156] usb 10-1: config 0 descriptor?? [ 1137.348318][T13640] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 1137.378336][ T3969] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 1137.388569][ T3969] asix: probe of 4-1:0.34 failed with error -71 [ 1137.396233][ T3969] usb 4-1: USB disconnect, device number 14 [ 1137.830470][ T3156] hid (null): report_id 33144 is invalid [ 1137.842734][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1137.893417][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1137.900758][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1137.907980][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1137.917283][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1137.924924][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1137.932188][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1137.962052][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1137.971016][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1137.978391][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1137.987109][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1137.994378][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.321352][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.328680][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.335748][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.344064][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.351202][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.358568][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.366793][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.373924][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.373939][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.373953][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.374076][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.374091][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.374109][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.416575][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.423801][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.423816][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.423829][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.423844][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.423859][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.423873][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.423887][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.423901][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.423913][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.423926][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.423940][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.423953][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.423970][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.423983][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.423996][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424009][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424029][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424048][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424067][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424086][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424100][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424114][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424128][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424143][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424156][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424170][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424184][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424198][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424212][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424226][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424240][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424254][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424267][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424281][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424295][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424309][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424323][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424337][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424351][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424365][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424379][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424393][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424407][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424421][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424435][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424453][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424465][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424478][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424491][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424504][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424517][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424537][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424550][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424562][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424575][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424587][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424600][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424613][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424628][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424641][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424655][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424668][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424682][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424696][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424710][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424724][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424738][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424753][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424777][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424791][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424805][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424819][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424833][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424846][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424860][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424874][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424887][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424901][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424916][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424930][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424944][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424958][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.424973][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425008][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425026][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425046][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425059][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425078][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425098][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425110][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425124][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425138][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425153][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425167][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425181][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425195][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425210][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425224][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425238][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425252][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425265][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425279][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425293][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425307][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425321][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425335][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425349][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425363][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425377][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425391][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425405][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425419][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425432][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425446][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425459][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425472][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425492][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425511][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425523][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425543][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425562][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425581][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425595][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425610][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425624][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425639][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425653][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425667][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425681][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425696][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425711][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425725][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425739][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425754][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425776][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425790][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425804][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425818][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425832][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425846][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425860][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425874][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425887][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425901][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425915][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425929][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425942][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425956][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425969][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.425988][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426001][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426020][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426039][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426058][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426070][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426089][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426110][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426125][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426139][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426154][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426168][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426182][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426197][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426211][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426226][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426240][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426254][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426268][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426281][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426295][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426309][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426324][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426338][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426352][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426366][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426380][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426394][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426408][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426422][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426436][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426449][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426467][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426480][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426493][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426505][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426518][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426531][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426543][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426556][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426569][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426581][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426594][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426607][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426620][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426634][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426648][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426662][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426676][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426690][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426704][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426718][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426733][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426747][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426769][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426784][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426797][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426811][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426825][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426838][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426852][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426866][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426880][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426893][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426907][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426921][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426935][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426948][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426962][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426976][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.426990][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427009][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427029][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427048][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427067][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427086][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427099][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427119][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427134][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427148][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427163][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427178][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427193][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427206][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427221][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427235][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427250][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427263][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427277][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427291][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427305][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427318][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427332][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427347][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427361][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427375][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427389][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427403][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427417][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427431][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427445][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427464][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427480][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427494][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427509][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427523][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427538][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427551][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427564][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427584][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427603][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427616][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427635][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427655][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427668][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427682][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427696][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427710][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427724][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427738][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427751][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427774][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427789][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427803][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427817][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427831][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427845][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427858][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427872][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427886][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427900][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427914][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427928][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427941][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427955][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427969][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427982][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.427996][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428009][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428025][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428044][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428063][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428082][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428101][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428120][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428144][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428228][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428242][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428256][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428271][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428284][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428299][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428312][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428326][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428340][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428354][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428368][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428382][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428396][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428409][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428423][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428438][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428452][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428466][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428480][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428494][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428508][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428523][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428537][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428550][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428564][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428578][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428592][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428605][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428619][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428633][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428647][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428661][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428675][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428689][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428702][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428716][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428730][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428744][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428758][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428780][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428797][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428811][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428825][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428841][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428856][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428872][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428886][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428902][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428917][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428932][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428947][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428960][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428974][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.428988][ T3156] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 1138.429007][ T3156] uclogic 0003:5543:0004.000A: report_id 33144 is invalid [ 1138.429019][ T3156] uclogic 0003:5543:0004.000A: item 0 2 1 8 parsing failed [ 1138.429216][ T3156] uclogic 0003:5543:0004.000A: parse failed [ 1138.429285][ T3156] uclogic: probe of 0003:5543:0004.000A failed with error -22 [ 1138.431399][ T3156] usb 10-1: USB disconnect, device number 2 [ 1138.702225][ T7005] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1139.078262][ T7005] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1139.198321][ T7005] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 1141.079391][ T7005] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1141.087473][ T7005] usb 4-1: Product: syz [ 1141.091936][ T7005] usb 4-1: Manufacturer: syz [ 1141.118365][ T7005] usb 4-1: can't set config #1, error -71 [ 1141.138303][ T7005] usb 4-1: USB disconnect, device number 15 [ 1142.012510][T13786] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1142.026368][T13788] overlayfs: failed to resolve './file0': -2 [ 1142.028886][T13786] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 1142.040387][T13786] IPv6: ADDRCONF(NETDEV_CHANGE): ifb0: link becomes ready [ 1142.055560][T13786] IPv6: ADDRCONF(NETDEV_CHANGE): ifb1: link becomes ready [ 1142.071636][T13786] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 1142.158738][T13796] loop_set_status: loop0 () has still dirty pages (nrpages=1) [ 1142.301060][T13810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4120'. [ 1142.478366][ T24] audit: type=1400 audit(1786100399.805:376): avc: denied { create } for pid=13811 comm="syz.1.4124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1142.554449][ T24] audit: type=1400 audit(1786100399.895:377): avc: denied { mount } for pid=13817 comm="syz.1.4126" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1142.592555][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1142.600305][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 1142.607662][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): ifb0: link becomes ready [ 1142.615235][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): ifb1: link becomes ready [ 1142.622659][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 1142.716403][T13823] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4125'. [ 1142.984304][ T24] audit: type=1400 audit(1786100400.325:378): avc: denied { sys_admin } for pid=13826 comm="syz.1.4129" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1143.098201][ T3156] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1143.134019][ T24] audit: type=1400 audit(1786100400.475:379): avc: denied { ioctl } for pid=13805 comm="syz.9.4122" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1143.226061][ T24] audit: type=1400 audit(1786100400.565:380): avc: denied { mounton } for pid=13829 comm="syz.1.4130" path="/265/file0" dev="tmpfs" ino=1394 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1143.770119][ T24] audit: type=1400 audit(1786100401.115:381): avc: denied { read write } for pid=13845 comm="syz.6.4136" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1143.795644][ T24] audit: type=1400 audit(1786100401.145:382): avc: denied { open } for pid=13845 comm="syz.6.4136" path="/dev/raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1144.058249][ T7005] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1144.144596][ T24] audit: type=1400 audit(1786100401.485:383): avc: denied { read } for pid=13855 comm="syz.3.4141" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=84498 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1144.170041][ T24] audit: type=1400 audit(1786100401.515:384): avc: denied { map } for pid=13855 comm="syz.3.4141" path="socket:[84499]" dev="sockfs" ino=84499 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1144.269001][T13864] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1144.428334][ T7005] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1144.438206][ T7005] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1144.448027][ T7005] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1144.457245][ T7005] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.703747][ T7005] usb 7-1: USB disconnect, device number 20 [ 1144.888260][ T3156] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1144.896121][ T3156] usb 10-1: no configurations [ 1144.901134][ T3156] usb 10-1: can't read configurations, error -22 [ 1145.367330][T13876] bridge0: port 3(syz_tun) entered blocking state [ 1145.374103][T13876] bridge0: port 3(syz_tun) entered disabled state [ 1145.381776][T13876] device syz_tun entered promiscuous mode [ 1145.391282][T13876] bridge0: port 3(syz_tun) entered blocking state [ 1145.397989][T13876] bridge0: port 3(syz_tun) entered forwarding state [ 1145.663264][T13900] device bridge_slave_0 left promiscuous mode [ 1145.695134][T13900] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.705384][T13900] device bridge_slave_1 left promiscuous mode [ 1145.711885][T13900] bridge0: port 2(bridge_slave_1) entered disabled state [ 1145.813038][ T24] audit: type=1400 audit(1786100403.155:385): avc: denied { watch watch_reads } for pid=13922 comm="syz.9.4169" path="/26" dev="tmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1146.619483][T14011] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=85297 [ 1146.631908][T14012] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4208'. [ 1146.921490][T14025] tap0: tun_chr_ioctl cmd 1074025681 [ 1148.385979][T14082] sch_tbf: burst 37 is lower than device syzkaller0 mtu (1514) ! [ 1149.084358][T14107] binder: 14106:14107 ioctl c0306201 200000000180 returned -14 [ 1149.746424][T14115] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.811110][T14115] bridge0: port 1(bridge_slave_0) entered disabled state [ 1149.818936][T14115] device bridge_slave_0 entered promiscuous mode [ 1149.828373][T14115] bridge0: port 2(bridge_slave_1) entered blocking state [ 1149.835527][T14115] bridge0: port 2(bridge_slave_1) entered disabled state [ 1149.843062][T14115] device bridge_slave_1 entered promiscuous mode [ 1150.024187][T14115] bridge0: port 2(bridge_slave_1) entered blocking state [ 1150.031415][T14115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1150.038931][T14115] bridge0: port 1(bridge_slave_0) entered blocking state [ 1150.046232][T14115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1150.063940][T14152] device syzkaller0 entered promiscuous mode [ 1150.072228][ T24] kauditd_printk_skb: 7 callbacks suppressed [ 1150.072239][ T24] audit: type=1400 audit(1786100407.415:393): avc: denied { write } for pid=14150 comm="syz.1.4270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1150.099611][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1150.107587][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1150.116898][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1150.126967][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1150.136356][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1150.158955][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1150.171662][T14115] device veth0_vlan entered promiscuous mode [ 1150.180168][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1150.189916][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1150.204212][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1150.217699][T14115] device veth1_macvtap entered promiscuous mode [ 1150.225555][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1150.318202][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1150.338303][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1150.366748][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1150.375615][ T8535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1150.489037][T14185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4281'. [ 1150.500427][T14185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4281'. [ 1150.696528][T14208] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4292'. [ 1150.974562][T14231] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 1151.375368][T14274] overlayfs: missing 'lowerdir' [ 1151.808197][ T8018] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1152.059902][T14304] overlayfs: missing 'lowerdir' [ 1152.188547][ T8018] usb 4-1: config index 0 descriptor too short (expected 8251, got 59) [ 1152.208498][ T8018] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1152.245509][ T8018] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1152.398550][ T8018] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1152.433080][ T8018] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1152.484095][ T8018] usb 4-1: SerialNumber: syz [ 1152.530269][ T8018] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 1152.762456][ T24] audit: type=1400 audit(1786100410.105:394): avc: denied { ioctl } for pid=14326 comm="syz.6.4346" path="/16/trace/trace" dev="tracefs" ino=12652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1152.813002][T14334] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1152.835209][ T3151] usb 4-1: USB disconnect, device number 16 [ 1153.869252][ T24] audit: type=1400 audit(1786100411.215:395): avc: denied { setattr } for pid=14387 comm="syz.9.4374" name="file0" dev="tmpfs" ino=410 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1153.916251][ T24] audit: type=1400 audit(1786100411.215:396): avc: denied { write } for pid=14387 comm="syz.9.4374" name="file0" dev="tmpfs" ino=410 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1154.007675][ T24] audit: type=1400 audit(1786100411.215:397): avc: denied { open } for pid=14387 comm="syz.9.4374" path="/72/file0" dev="tmpfs" ino=410 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1154.615101][T14427] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1154.668840][T14427] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 1154.738306][T14427] IPv6: ADDRCONF(NETDEV_CHANGE): ifb0: link becomes ready [ 1154.783550][T14427] IPv6: ADDRCONF(NETDEV_CHANGE): ifb1: link becomes ready [ 1154.799877][T14427] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 1155.703493][T14481] configfs-gadget gadget: uvc: uvc_function_bind() [ 1155.710228][T14481] configfs-gadget gadget: uvc: Unable to allocate streaming EP [ 1155.718086][T14481] udc dummy_udc.0: failed to start g1: -22 [ 1156.061507][ T24] audit: type=1400 audit(1786100413.405:398): avc: denied { setopt } for pid=14487 comm="syz.0.4414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1156.676841][T14521] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1156.694614][T14521] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 1156.707146][ T24] audit: type=1400 audit(1786100414.045:399): avc: denied { create } for pid=14524 comm="syz.0.4429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1156.710282][T14521] IPv6: ADDRCONF(NETDEV_CHANGE): ifb0: link becomes ready [ 1156.739345][T14521] IPv6: ADDRCONF(NETDEV_CHANGE): ifb1: link becomes ready [ 1156.746669][T14521] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 1156.948509][T14536] udc-core: couldn't find an available UDC or it's busy [ 1157.074139][T14540] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4435'. [ 1157.102742][T14540] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4435'. [ 1157.121109][T14540] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4435'. [ 1157.140399][T14540] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4435'. [ 1157.396820][T14547] tipc: Started in network mode [ 1157.401930][T14547] tipc: Own node identity 4, cluster identity 4711 [ 1157.409192][T14547] tipc: 32-bit node address hash set to 4 [ 1157.649545][ T24] audit: type=1400 audit(1786100414.995:400): avc: denied { create } for pid=14556 comm="syz.6.4442" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1157.671702][ T24] audit: type=1400 audit(1786100415.015:401): avc: denied { unlink } for pid=14115 comm="syz-executor" name="file0" dev="tmpfs" ino=233 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1157.765105][T14565] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4446'. [ 1157.774439][T14565] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4446'. [ 1157.783527][T14565] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4446'. [ 1157.792638][T14565] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4446'. [ 1158.133007][T14571] ------------[ cut here ]------------ [ 1158.138661][T14571] WARNING: CPU: 0 PID: 14571 at kernel/trace/ring_buffer.c:4348 rb_get_reader_page+0xa78/0xbf0 [ 1158.149050][T14571] Modules linked in: [ 1158.153066][T14571] CPU: 0 PID: 14571 Comm: syz.9.4448 Not tainted syzkaller #0 [ 1158.160619][T14571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1158.170690][T14571] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 1158.176490][T14571] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 cd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 bc 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 1158.196181][T14571] RSP: 0018:ffffc90001017800 EFLAGS: 00010002 [ 1158.202237][T14571] RAX: 1ffff11020030401 RBX: ffff888100052600 RCX: ffffffff8166f0a4 [ 1158.210391][T14571] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 1158.218359][T14571] RBP: ffffc90001017978 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 1158.226385][T14571] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000246c005d [ 1158.234345][T14571] R13: 1ffff11020057ca3 R14: 1ffff11020057ca6 R15: dffffc0000000000 [ 1158.242331][T14571] FS: 00007f89f29906c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1158.251374][T14571] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1158.257947][T14571] CR2: 0000001b30123ffc CR3: 0000000119508000 CR4: 00000000003506b0 [ 1158.265911][T14571] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1158.273896][T14571] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1158.281861][T14571] Call Trace: [ 1158.285306][T14571] ? ring_buffer_read_page+0x1210/0x1210 [ 1158.290960][T14571] ? __kasan_check_write+0x14/0x20 [ 1158.296166][T14571] ? _raw_spin_lock+0x94/0xf0 [ 1158.300843][T14571] rb_buffer_peek+0x60/0x7a0 [ 1158.305428][T14571] ring_buffer_peek+0x183/0x360 [ 1158.310277][T14571] ? ring_buffer_iter_empty+0x370/0x370 [ 1158.315927][T14571] ? find_next_bit+0x80/0x100 [ 1158.320599][T14571] __find_next_entry+0x34d/0x6b0 [ 1158.325531][T14571] ? rb_advance_reader+0x39c/0x6b0 [ 1158.330671][T14571] ? trace_find_next_entry+0x370/0x370 [ 1158.336124][T14571] ? ring_buffer_iter_dropped+0x60/0x60 [ 1158.341712][T14571] ? print_trace_line+0x385/0x690 [ 1158.346732][T14571] tracing_read_pipe+0x3b8/0xab0 [ 1158.351767][T14571] ? s_show+0x320/0x320 [ 1158.355928][T14571] vfs_read+0x209/0xa50 [ 1158.360087][T14571] ? kernel_read+0x70/0x70 [ 1158.364500][T14571] ? __kasan_check_write+0x14/0x20 [ 1158.369618][T14571] ? mutex_lock+0x92/0xf0 [ 1158.374036][T14571] ? mutex_trylock+0xb0/0xb0 [ 1158.378647][T14571] ? __fget_files+0x2e1/0x340 [ 1158.383320][T14571] ? __fdget_pos+0x2d2/0x380 [ 1158.387909][T14571] ? ksys_read+0x70/0x260 [ 1158.392234][T14571] ksys_read+0x14a/0x260 [ 1158.396482][T14571] ? vfs_write+0xd70/0xd70 [ 1158.401068][T14571] ? __kasan_check_read+0x11/0x20 [ 1158.406091][T14571] __x64_sys_read+0x7b/0x90 [ 1158.410593][T14571] do_syscall_64+0x31/0x40 [ 1158.415033][T14571] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1158.421019][T14571] RIP: 0033:0x7f89f3ef790e [ 1158.425438][T14571] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1158.445127][T14571] RSP: 002b:00007f89f298ff68 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1158.453540][T14571] RAX: ffffffffffffffda RBX: 00007f89f29906c0 RCX: 00007f89f3ef790e [ 1158.461681][T14571] RDX: 0000000000002000 RSI: 0000200000002300 RDI: 0000000000000004 [ 1158.469735][T14571] RBP: 00007f89f3fce024 R08: 0000000000000000 R09: 0000000000000000 [ 1158.477725][T14571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1158.485701][T14571] R13: 000020000000b540 R14: 00007f89f41befa0 R15: 00007ffe4c2e0638 [ 1158.493782][T14571] ---[ end trace d63b714b8672366a ]--- [ 1158.499253][T14571] ================================================================== [ 1158.507388][T14571] BUG: KASAN: use-after-free in rb_buffer_peek+0x71a/0x7a0 [ 1158.514664][T14571] Read of size 4 at addr ffff88812499f06d by task syz.9.4448/14571 [ 1158.522542][T14571] [ 1158.524871][T14571] CPU: 0 PID: 14571 Comm: syz.9.4448 Tainted: G W syzkaller #0 [ 1158.533705][T14571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1158.543756][T14571] Call Trace: [ 1158.547048][T14571] __dump_stack+0x21/0x24 [ 1158.551462][T14571] dump_stack_lvl+0x1a7/0x208 [ 1158.556186][T14571] ? show_regs_print_info+0x18/0x18 [ 1158.561380][T14571] ? thaw_kernel_threads+0x220/0x220 [ 1158.566659][T14571] print_address_description+0x7f/0x2c0 [ 1158.572200][T14571] ? rb_buffer_peek+0x71a/0x7a0 [ 1158.577041][T14571] kasan_report+0x100/0x140 [ 1158.581655][T14571] ? rb_buffer_peek+0x71a/0x7a0 [ 1158.586500][T14571] __asan_report_load4_noabort+0x14/0x20 [ 1158.592123][T14571] rb_buffer_peek+0x71a/0x7a0 [ 1158.596792][T14571] ring_buffer_peek+0x183/0x360 [ 1158.601636][T14571] ? ring_buffer_iter_empty+0x370/0x370 [ 1158.607183][T14571] ? find_next_bit+0x80/0x100 [ 1158.611857][T14571] __find_next_entry+0x34d/0x6b0 [ 1158.616801][T14571] ? rb_advance_reader+0x39c/0x6b0 [ 1158.622012][T14571] ? trace_find_next_entry+0x370/0x370 [ 1158.627461][T14571] ? ring_buffer_iter_dropped+0x60/0x60 [ 1158.633008][T14571] ? print_trace_line+0x385/0x690 [ 1158.638028][T14571] tracing_read_pipe+0x3b8/0xab0 [ 1158.642961][T14571] ? s_show+0x320/0x320 [ 1158.647111][T14571] vfs_read+0x209/0xa50 [ 1158.651262][T14571] ? kernel_read+0x70/0x70 [ 1158.655795][T14571] ? __kasan_check_write+0x14/0x20 [ 1158.660899][T14571] ? mutex_lock+0x92/0xf0 [ 1158.665220][T14571] ? mutex_trylock+0xb0/0xb0 [ 1158.669850][T14571] ? __fget_files+0x2e1/0x340 [ 1158.674702][T14571] ? __fdget_pos+0x2d2/0x380 [ 1158.679289][T14571] ? ksys_read+0x70/0x260 [ 1158.683611][T14571] ksys_read+0x14a/0x260 [ 1158.687851][T14571] ? vfs_write+0xd70/0xd70 [ 1158.692267][T14571] ? __kasan_check_read+0x11/0x20 [ 1158.697383][T14571] __x64_sys_read+0x7b/0x90 [ 1158.701972][T14571] do_syscall_64+0x31/0x40 [ 1158.706470][T14571] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1158.712372][T14571] RIP: 0033:0x7f89f3ef790e [ 1158.716793][T14571] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1158.736575][T14571] RSP: 002b:00007f89f298ff68 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1158.744985][T14571] RAX: ffffffffffffffda RBX: 00007f89f29906c0 RCX: 00007f89f3ef790e [ 1158.753173][T14571] RDX: 0000000000002000 RSI: 0000200000002300 RDI: 0000000000000004 [ 1158.761226][T14571] RBP: 00007f89f3fce024 R08: 0000000000000000 R09: 0000000000000000 [ 1158.769213][T14571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1158.777265][T14571] R13: 000020000000b540 R14: 00007f89f41befa0 R15: 00007ffe4c2e0638 [ 1158.785253][T14571] [ 1158.787585][T14571] The buggy address belongs to the page: [ 1158.793213][T14571] page:ffffea00049267c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12499f [ 1158.803437][T14571] flags: 0x4000000000000000() [ 1158.808111][T14571] raw: 4000000000000000 0000000000000000 ffffea0004926788 0000000000000000 [ 1158.816692][T14571] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 1158.825263][T14571] page dumped because: kasan: bad access detected [ 1158.831664][T14571] page_owner tracks the page as freed [ 1158.837103][T14571] page last allocated via order 5, migratetype Unmovable, gfp_mask 0x152cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6530, ts 650307518080, free_ts 1151108561359 [ 1158.854294][T14571] prep_new_page+0x176/0x190 [ 1158.858881][T14571] get_page_from_freelist+0x225f/0x23f0 [ 1158.864418][T14571] __alloc_pages_nodemask+0x29a/0x640 [ 1158.869844][T14571] kmalloc_order+0x4c/0x160 [ 1158.874342][T14571] kmalloc_order_trace+0x16/0x80 [ 1158.879273][T14571] __kmalloc+0x1e6/0x330 [ 1158.883541][T14571] kvmalloc_node+0x88/0x130 [ 1158.888078][T14571] wg_index_hashtable_alloc+0x1e/0x50 [ 1158.893478][T14571] wg_newlink+0x158/0x7a0 [ 1158.897931][T14571] rtnl_newlink+0x1307/0x1830 [ 1158.902602][T14571] rtnetlink_rcv_msg+0x9e9/0xca0 [ 1158.907669][T14571] netlink_rcv_skb+0x1e9/0x430 [ 1158.912428][T14571] rtnetlink_rcv+0x1c/0x20 [ 1158.916882][T14571] netlink_unicast+0x86c/0xa30 [ 1158.921638][T14571] netlink_sendmsg+0x949/0xb70 [ 1158.926440][T14571] __sys_sendto+0x467/0x620 [ 1158.930934][T14571] page last free stack trace: [ 1158.935638][T14571] __free_pages_ok+0x80b/0x830 [ 1158.940401][T14571] __free_pages+0xd8/0x390 [ 1158.944809][T14571] kfree+0x1e4/0x270 [ 1158.948784][T14571] kvfree+0x35/0x40 [ 1158.952584][T14571] wg_destruct+0x299/0x300 [ 1158.957012][T14571] netdev_run_todo+0xb5e/0xda0 [ 1158.961770][T14571] rtnl_unlock+0xe/0x10 [ 1158.966005][T14571] default_device_exit_batch+0x363/0x3c0 [ 1158.971644][T14571] cleanup_net+0x5fe/0xb80 [ 1158.976110][T14571] process_one_work+0x6fd/0xbc0 [ 1158.980955][T14571] worker_thread+0xa8e/0x13c0 [ 1158.985652][T14571] kthread+0x324/0x3b0 [ 1158.989740][T14571] ret_from_fork+0x1f/0x30 [ 1158.994145][T14571] [ 1158.996468][T14571] Memory state around the buggy address: [ 1159.002090][T14571] ffff88812499ef00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1159.010176][T14571] ffff88812499ef80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1159.018232][T14571] >ffff88812499f000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1159.026283][T14571] ^ [ 1159.033814][T14571] ffff88812499f080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1159.041874][T14571] ffff88812499f100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1159.050117][T14571] ================================================================== [ 1159.058165][T14571] Disabling lock debugging due to kernel taint [ 1159.064761][T14571] ------------[ cut here ]------------ [ 1159.070263][T14571] WARNING: CPU: 1 PID: 14571 at kernel/trace/ring_buffer.c:4348 rb_get_reader_page+0xa78/0xbf0 [ 1159.074899][ T24] audit: type=1400 audit(1786100416.405:402): avc: denied { read } for pid=76 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1159.080586][T14571] Modules linked in: [ 1159.080606][T14571] CPU: 1 PID: 14571 Comm: syz.9.4448 Tainted: G B W syzkaller #0 [ 1159.080612][T14571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1159.080630][T14571] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 1159.080641][T14571] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 cd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 bc 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 1159.080647][T14571] RSP: 0018:ffffc90001017940 EFLAGS: 00010002 [ 1159.104069][ T24] audit: type=1400 audit(1786100416.405:403): avc: denied { search } for pid=76 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1159.106271][T14571] RAX: 1ffff11020030401 RBX: ffff888100052600 RCX: ffffffff8166f0a4 [ 1159.115421][ T24] audit: type=1400 audit(1786100416.405:404): avc: denied { write } for pid=76 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1159.125250][T14571] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 1159.125259][T14571] RBP: ffffc90001017ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 1159.125267][T14571] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000246c005d [ 1159.125275][T14571] R13: 1ffff11020057ca3 R14: 1ffff11020057ca6 R15: dffffc0000000000 [ 1159.125284][T14571] FS: 00007f89f29906c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1159.125293][T14571] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1159.125300][T14571] CR2: 00007f89f3f847c0 CR3: 0000000119508000 CR4: 00000000003506a0 [ 1159.125311][T14571] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1159.125318][T14571] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1159.125321][T14571] Call Trace: [ 1159.125438][T14571] ? trace_seq_printf+0x201/0x330 [ 1159.131900][ T24] audit: type=1400 audit(1786100416.405:405): avc: denied { add_name } for pid=76 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1159.150909][T14571] ? ring_buffer_read_page+0x1210/0x1210 [ 1159.150924][T14571] ? __kasan_check_write+0x14/0x20 [ 1159.150935][T14571] ? _raw_spin_lock+0x94/0xf0 [ 1159.150951][T14571] rb_buffer_peek+0x60/0x7a0 [ 1159.157205][ T24] audit: type=1400 audit(1786100416.405:406): avc: denied { create } for pid=76 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1159.178349][T14571] ring_buffer_consume+0x1b2/0x350 [ 1159.178362][T14571] ? ring_buffer_iter_dropped+0x60/0x60 [ 1159.178374][T14571] ? print_trace_line+0x385/0x690 [ 1159.178390][T14571] tracing_read_pipe+0x599/0xab0 [ 1159.187230][ T24] audit: type=1400 audit(1786100416.405:407): avc: denied { append open } for pid=76 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1159.207641][T14571] ? s_show+0x320/0x320 [ 1159.207652][T14571] vfs_read+0x209/0xa50 [ 1159.207665][T14571] ? kernel_read+0x70/0x70 [ 1159.207677][T14571] ? __kasan_check_write+0x14/0x20 [ 1159.207696][T14571] ? mutex_lock+0x92/0xf0 [ 1159.414999][T14571] ? mutex_trylock+0xb0/0xb0 [ 1159.419585][T14571] ? __fget_files+0x2e1/0x340 [ 1159.424540][T14571] ? __fdget_pos+0x2d2/0x380 [ 1159.429122][T14571] ? ksys_read+0x70/0x260 [ 1159.433471][T14571] ksys_read+0x14a/0x260 [ 1159.437746][T14571] ? vfs_write+0xd70/0xd70 [ 1159.442174][T14571] ? __kasan_check_read+0x11/0x20 [ 1159.447199][T14571] __x64_sys_read+0x7b/0x90 [ 1159.451698][T14571] do_syscall_64+0x31/0x40 [ 1159.456459][T14571] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1159.462692][T14571] RIP: 0033:0x7f89f3ef790e [ 1159.467126][T14571] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1159.486723][T14571] RSP: 002b:00007f89f298ff68 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1159.495134][T14571] RAX: ffffffffffffffda RBX: 00007f89f29906c0 RCX: 00007f89f3ef790e [ 1159.503098][T14571] RDX: 0000000000002000 RSI: 0000200000002300 RDI: 0000000000000004 [ 1159.511066][T14571] RBP: 00007f89f3fce024 R08: 0000000000000000 R09: 0000000000000000 [ 1159.519116][T14571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1159.527078][T14571] R13: 000020000000b540 R14: 00007f89f41befa0 R15: 00007ffe4c2e0638 [ 1159.535052][T14571] ---[ end trace d63b714b8672366b ]--- [ 1159.540537][T14571] ------------[ cut here ]------------ [ 1159.545994][T14571] WARNING: CPU: 1 PID: 14571 at kernel/trace/ring_buffer.c:4348 rb_get_reader_page+0xa78/0xbf0 [ 1159.556305][T14571] Modules linked in: [ 1159.560344][T14571] CPU: 1 PID: 14571 Comm: syz.9.4448 Tainted: G B W syzkaller #0 [ 1159.569176][T14571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1159.579230][T14571] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 1159.585035][T14571] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 cd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 bc 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 1159.604727][T14571] RSP: 0018:ffffc90001017960 EFLAGS: 00010006 [ 1159.610794][T14571] RAX: 1ffff11020030401 RBX: ffff888100052600 RCX: ffffffff8166f0a4 [ 1159.618759][T14571] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 1159.626723][T14571] RBP: ffffc90001017ac8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 1159.634690][T14571] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000246c005d [ 1159.642655][T14571] R13: 1ffff11020057ca3 R14: 1ffff11020057ca6 R15: dffffc0000000000 [ 1159.650707][T14571] FS: 00007f89f29906c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1159.659719][T14571] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1159.666385][T14571] CR2: 00007f89f3f847c0 CR3: 0000000119508000 CR4: 00000000003506a0 [ 1159.674355][T14571] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1159.682335][T14571] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1159.690508][T14571] Call Trace: [ 1159.693805][T14571] ? ring_buffer_read_page+0x1210/0x1210 [ 1159.699434][T14571] ? __kasan_check_write+0x14/0x20 [ 1159.704803][T14571] ? _raw_spin_lock+0x94/0xf0 [ 1159.709480][T14571] rb_advance_reader+0x2b/0x6b0 [ 1159.714327][T14571] ring_buffer_consume+0x1e6/0x350 [ 1159.719460][T14571] ? ring_buffer_iter_dropped+0x60/0x60 [ 1159.725003][T14571] ? print_trace_line+0x385/0x690 [ 1159.730045][T14571] tracing_read_pipe+0x599/0xab0 [ 1159.735237][T14571] ? s_show+0x320/0x320 [ 1159.739390][T14571] vfs_read+0x209/0xa50 [ 1159.743628][T14571] ? kernel_read+0x70/0x70 [ 1159.748048][T14571] ? __kasan_check_write+0x14/0x20 [ 1159.753266][T14571] ? mutex_lock+0x92/0xf0 [ 1159.757675][T14571] ? mutex_trylock+0xb0/0xb0 [ 1159.762261][T14571] ? __fget_files+0x2e1/0x340 [ 1159.766933][T14571] ? __fdget_pos+0x2d2/0x380 [ 1159.771601][T14571] ? ksys_read+0x70/0x260 [ 1159.775922][T14571] ksys_read+0x14a/0x260 [ 1159.780246][T14571] ? vfs_write+0xd70/0xd70 [ 1159.784667][T14571] ? __kasan_check_read+0x11/0x20 [ 1159.789683][T14571] __x64_sys_read+0x7b/0x90 [ 1159.794209][T14571] do_syscall_64+0x31/0x40 [ 1159.798619][T14571] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1159.804506][T14571] RIP: 0033:0x7f89f3ef790e [ 1159.808929][T14571] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1159.828801][T14571] RSP: 002b:00007f89f298ff68 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1159.837222][T14571] RAX: ffffffffffffffda RBX: 00007f89f29906c0 RCX: 00007f89f3ef790e [ 1159.845192][T14571] RDX: 0000000000002000 RSI: 0000200000002300 RDI: 0000000000000004 [ 1159.853177][T14571] RBP: 00007f89f3fce024 R08: 0000000000000000 R09: 0000000000000000 [ 1159.861145][T14571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1159.869110][T14571] R13: 000020000000b540 R14: 00007f89f41befa0 R15: 00007ffe4c2e0638 [ 1159.877258][T14571] ---[ end trace d63b714b8672366c ]--- [ 1159.889138][T14571] ------------[ cut here ]------------ [ 1159.894673][T14571] WARNING: CPU: 0 PID: 14571 at kernel/trace/ring_buffer.c:4348 rb_get_reader_page+0xa78/0xbf0 [ 1159.905086][T14571] Modules linked in: [ 1159.909011][T14571] CPU: 0 PID: 14571 Comm: syz.9.4448 Tainted: G B W syzkaller #0 [ 1159.918131][T14571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1159.928320][T14571] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 1159.934154][T14571] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 cd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 bc 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 1159.953965][T14571] RSP: 0018:ffffc90001017800 EFLAGS: 00010002 [ 1159.960044][T14571] RAX: 1ffff11020030401 RBX: ffff888100052600 RCX: ffffffff8166f0a4 [ 1159.968102][T14571] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 1159.976066][T14571] RBP: ffffc90001017978 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 1159.984149][T14571] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000246c0061 [ 1159.992123][T14571] R13: 1ffff11020057ca3 R14: 1ffff11020057ca6 R15: dffffc0000000000 [ 1160.000088][T14571] FS: 00007f89f29906c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1160.008997][T14571] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1160.015563][T14571] CR2: 0000001b2ec20ff8 CR3: 0000000119508000 CR4: 00000000003506b0 [ 1160.023523][T14571] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1160.031479][T14571] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1160.039519][T14571] Call Trace: [ 1160.042813][T14571] ? ring_buffer_read_page+0x1210/0x1210 [ 1160.048444][T14571] ? __switch_to_asm+0x3a/0x60 [ 1160.053547][T14571] ? __kasan_check_write+0x14/0x20 [ 1160.058645][T14571] ? _raw_spin_lock+0x94/0xf0 [ 1160.063827][T14571] rb_buffer_peek+0x60/0x7a0 [ 1160.068408][T14571] ring_buffer_peek+0x183/0x360 [ 1160.073243][T14571] ? ring_buffer_iter_empty+0x370/0x370 [ 1160.078772][T14571] ? preempt_schedule+0xbc/0xd0 [ 1160.083624][T14571] ? find_next_bit+0x80/0x100 [ 1160.088290][T14571] __find_next_entry+0x34d/0x6b0 [ 1160.093212][T14571] ? preempt_schedule_thunk+0x16/0x18 [ 1160.098668][T14571] ? trace_find_next_entry+0x370/0x370 [ 1160.104108][T14571] ? ring_buffer_iter_dropped+0x60/0x60 [ 1160.109635][T14571] ? print_trace_line+0x385/0x690 [ 1160.114640][T14571] tracing_read_pipe+0x3b8/0xab0 [ 1160.119561][T14571] ? s_show+0x320/0x320 [ 1160.123719][T14571] vfs_read+0x209/0xa50 [ 1160.127856][T14571] ? kernel_read+0x70/0x70 [ 1160.132254][T14571] ? __kasan_check_write+0x14/0x20 [ 1160.137345][T14571] ? mutex_lock+0x92/0xf0 [ 1160.141654][T14571] ? mutex_trylock+0xb0/0xb0 [ 1160.146223][T14571] ? __fget_files+0x2e1/0x340 [ 1160.150882][T14571] ? __fdget_pos+0x2d2/0x380 [ 1160.155453][T14571] ? ksys_read+0x70/0x260 [ 1160.159761][T14571] ksys_read+0x14a/0x260 [ 1160.163989][T14571] ? vfs_write+0xd70/0xd70 [ 1160.168391][T14571] ? __kasan_check_read+0x11/0x20 [ 1160.173399][T14571] __x64_sys_read+0x7b/0x90 [ 1160.177881][T14571] do_syscall_64+0x31/0x40 [ 1160.182278][T14571] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1160.188158][T14571] RIP: 0033:0x7f89f3ef790e [ 1160.192567][T14571] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1160.212251][T14571] RSP: 002b:00007f89f298ff68 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1160.220751][T14571] RAX: ffffffffffffffda RBX: 00007f89f29906c0 RCX: 00007f89f3ef790e [ 1160.228708][T14571] RDX: 0000000000002000 RSI: 0000200000002300 RDI: 0000000000000004 [ 1160.236667][T14571] RBP: 00007f89f3fce024 R08: 0000000000000000 R09: 0000000000000000 [ 1160.244738][T14571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1160.252693][T14571] R13: 000020000000b540 R14: 00007f89f41befa0 R15: 00007ffe4c2e0638 [ 1160.260737][T14571] ---[ end trace d63b714b8672366d ]--- [ 1160.267769][T14571] ------------[ cut here ]------------ [ 1160.273274][T14571] WARNING: CPU: 0 PID: 14571 at kernel/trace/ring_buffer.c:4348 rb_get_reader_page+0xa78/0xbf0 [ 1160.283577][T14571] Modules linked in: [ 1160.287484][T14571] CPU: 0 PID: 14571 Comm: syz.9.4448 Tainted: G B W syzkaller #0 [ 1160.296450][T14571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1160.306504][T14571] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 1160.312312][T14571] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 cd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 bc 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 1160.331919][T14571] RSP: 0018:ffffc90001017940 EFLAGS: 00010006 [ 1160.337977][T14571] RAX: 1ffff11020030401 RBX: ffff888100052600 RCX: ffffffff8166f0a4 [ 1160.346282][T14571] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 1160.354258][T14571] RBP: ffffc90001017ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 1160.362224][T14571] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000246c0061 [ 1160.370189][T14571] R13: 1ffff11020057ca3 R14: 1ffff11020057ca6 R15: dffffc0000000000 [ 1160.378153][T14571] FS: 00007f89f29906c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1160.387089][T14571] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1160.393668][T14571] CR2: 0000001b2ec20ff8 CR3: 0000000119508000 CR4: 00000000003506b0 [ 1160.401625][T14571] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1160.409683][T14571] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1160.417648][T14571] Call Trace: [ 1160.420950][T14571] ? trace_seq_printf+0x201/0x330 [ 1160.425966][T14571] ? ring_buffer_read_page+0x1210/0x1210 [ 1160.431587][T14571] ? __kasan_check_write+0x14/0x20 [ 1160.436686][T14571] ? _raw_spin_lock+0x94/0xf0 [ 1160.441354][T14571] rb_buffer_peek+0x60/0x7a0 [ 1160.445930][T14571] ring_buffer_consume+0x1b2/0x350 [ 1160.451025][T14571] ? ring_buffer_iter_dropped+0x60/0x60 [ 1160.456576][T14571] ? print_trace_line+0x385/0x690 [ 1160.461587][T14571] tracing_read_pipe+0x599/0xab0 [ 1160.466537][T14571] ? s_show+0x320/0x320 [ 1160.470676][T14571] vfs_read+0x209/0xa50 [ 1160.474819][T14571] ? kernel_read+0x70/0x70 [ 1160.479225][T14571] ? __kasan_check_write+0x14/0x20 [ 1160.484331][T14571] ? mutex_lock+0x92/0xf0 [ 1160.488647][T14571] ? mutex_trylock+0xb0/0xb0 [ 1160.493237][T14571] ? __fget_files+0x2e1/0x340 [ 1160.497913][T14571] ? __fdget_pos+0x2d2/0x380 [ 1160.502486][T14571] ? ksys_read+0x70/0x260 [ 1160.506800][T14571] ksys_read+0x14a/0x260 [ 1160.511025][T14571] ? vfs_write+0xd70/0xd70 [ 1160.515427][T14571] ? __kasan_check_read+0x11/0x20 [ 1160.520436][T14571] __x64_sys_read+0x7b/0x90 [ 1160.524931][T14571] do_syscall_64+0x31/0x40 [ 1160.529333][T14571] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1160.535303][T14571] RIP: 0033:0x7f89f3ef790e [ 1160.539701][T14571] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1160.559294][T14571] RSP: 002b:00007f89f298ff68 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1160.567796][T14571] RAX: ffffffffffffffda RBX: 00007f89f29906c0 RCX: 00007f89f3ef790e [ 1160.575768][T14571] RDX: 0000000000002000 RSI: 0000200000002300 RDI: 0000000000000004 [ 1160.583723][T14571] RBP: 00007f89f3fce024 R08: 0000000000000000 R09: 0000000000000000 [ 1160.591781][T14571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1160.599757][T14571] R13: 000020000000b540 R14: 00007f89f41befa0 R15: 00007ffe4c2e0638 [ 1160.607716][T14571] ---[ end trace d63b714b8672366e ]--- [ 1160.613183][T14571] ------------[ cut here ]------------ [ 1160.618638][T14571] WARNING: CPU: 0 PID: 14571 at kernel/trace/ring_buffer.c:4348 rb_get_reader_page+0xa78/0xbf0 [ 1160.628938][T14571] Modules linked in: [ 1160.632824][T14571] CPU: 0 PID: 14571 Comm: syz.9.4448 Tainted: G B W syzkaller #0 [ 1160.641667][T14571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1160.651819][T14571] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 1160.657611][T14571] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 cd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 bc 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 1160.677285][T14571] RSP: 0018:ffffc90001017960 EFLAGS: 00010006 [ 1160.683510][T14571] RAX: 1ffff11020030401 RBX: ffff888100052600 RCX: ffffffff8166f0a4 [ 1160.691469][T14571] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 1160.699496][T14571] RBP: ffffc90001017ac8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 1160.707512][T14571] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000246c0061 [ 1160.715562][T14571] R13: 1ffff11020057ca3 R14: 1ffff11020057ca6 R15: dffffc0000000000 [ 1160.723546][T14571] FS: 00007f89f29906c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1160.732478][T14571] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1160.739089][T14571] CR2: 0000001b2ec20ff8 CR3: 0000000119508000 CR4: 00000000003506b0 [ 1160.747073][T14571] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1160.755030][T14571] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1160.763082][T14571] Call Trace: [ 1160.766363][T14571] ? ring_buffer_read_page+0x1210/0x1210 [ 1160.771979][T14571] ? __kasan_check_write+0x14/0x20 [ 1160.777163][T14571] ? _raw_spin_lock+0x94/0xf0 [ 1160.781938][T14571] rb_advance_reader+0x2b/0x6b0 [ 1160.786776][T14571] ring_buffer_consume+0x1e6/0x350 [ 1160.791888][T14571] ? ring_buffer_iter_dropped+0x60/0x60 [ 1160.797416][T14571] ? print_trace_line+0x385/0x690 [ 1160.802423][T14571] tracing_read_pipe+0x599/0xab0 [ 1160.807344][T14571] ? s_show+0x320/0x320 [ 1160.811481][T14571] vfs_read+0x209/0xa50 [ 1160.815626][T14571] ? kernel_read+0x70/0x70 [ 1160.820046][T14571] ? __kasan_check_write+0x14/0x20 [ 1160.825142][T14571] ? mutex_lock+0x92/0xf0 [ 1160.829456][T14571] ? mutex_trylock+0xb0/0xb0 [ 1160.834060][T14571] ? __fget_files+0x2e1/0x340 [ 1160.838736][T14571] ? __fdget_pos+0x2d2/0x380 [ 1160.843571][T14571] ? ksys_read+0x70/0x260 [ 1160.847881][T14571] ksys_read+0x14a/0x260 [ 1160.852110][T14571] ? vfs_write+0xd70/0xd70 [ 1160.856519][T14571] ? __kasan_check_read+0x11/0x20 [ 1160.861529][T14571] __x64_sys_read+0x7b/0x90 [ 1160.866038][T14571] do_syscall_64+0x31/0x40 [ 1160.870442][T14571] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1160.876327][T14571] RIP: 0033:0x7f89f3ef790e [ 1160.880729][T14571] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1160.900336][T14571] RSP: 002b:00007f89f298ff68 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1160.908733][T14571] RAX: ffffffffffffffda RBX: 00007f89f29906c0 RCX: 00007f89f3ef790e [ 1160.916688][T14571] RDX: 0000000000002000 RSI: 0000200000002300 RDI: 0000000000000004 [ 1160.924655][T14571] RBP: 00007f89f3fce024 R08: 0000000000000000 R09: 0000000000000000 [ 1160.932630][T14571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1160.940589][T14571] R13: 000020000000b540 R14: 00007f89f41befa0 R15: 00007ffe4c2e0638 [ 1160.948572][T14571] ---[ end trace d63b714b8672366f ]--- [ 1160.954784][T14571] ------------[ cut here ]------------ [ 1160.960278][T14571] WARNING: CPU: 0 PID: 14571 at kernel/trace/ring_buffer.c:4348 rb_get_reader_page+0xa78/0xbf0 [ 1160.970589][T14571] Modules linked in: [ 1160.974484][T14571] CPU: 0 PID: 14571 Comm: syz.9.4448 Tainted: G B W syzkaller #0 [ 1160.983317][T14571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1160.993461][T14571] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 1160.999261][T14571] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 cd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 bc 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 1161.018946][T14571] RSP: 0018:ffffc90001017800 EFLAGS: 00010002 [ 1161.025090][T14571] RAX: 1ffff11020030401 RBX: ffff888100052600 RCX: ffffffff8166f0a4 [ 1161.033058][T14571] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 1161.041026][T14571] RBP: ffffc90001017978 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 1161.049010][T14571] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000246c0065 [ 1161.057065][T14571] R13: 1ffff11020057ca3 R14: 1ffff11020057ca6 R15: dffffc0000000000 [ 1161.065206][T14571] FS: 00007f89f29906c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1161.074127][T14571] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1161.080699][T14571] CR2: 0000001b2ec20ff8 CR3: 0000000119508000 CR4: 00000000003506b0 [ 1161.088666][T14571] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1161.096629][T14571] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1161.104590][T14571] Call Trace: [ 1161.107891][T14571] ? ring_buffer_read_page+0x1210/0x1210 [ 1161.113517][T14571] ? __switch_to_asm+0x3a/0x60 [ 1161.118284][T14571] ? __kasan_check_write+0x14/0x20 [ 1161.123395][T14571] ? _raw_spin_lock+0x94/0xf0 [ 1161.128072][T14571] rb_buffer_peek+0x60/0x7a0 [ 1161.132659][T14571] ring_buffer_peek+0x183/0x360 [ 1161.137504][T14571] ? ring_buffer_iter_empty+0x370/0x370 [ 1161.143132][T14571] ? preempt_schedule+0xbc/0xd0 [ 1161.147976][T14571] ? find_next_bit+0x80/0x100 [ 1161.153343][T14571] __find_next_entry+0x34d/0x6b0 [ 1161.158279][T14571] ? preempt_schedule_thunk+0x16/0x18 [ 1161.163646][T14571] ? trace_find_next_entry+0x370/0x370 [ 1161.169098][T14571] ? ring_buffer_iter_dropped+0x60/0x60 [ 1161.174636][T14571] ? print_trace_line+0x385/0x690 [ 1161.179654][T14571] tracing_read_pipe+0x3b8/0xab0 [ 1161.184585][T14571] ? s_show+0x320/0x320 [ 1161.188734][T14571] vfs_read+0x209/0xa50 [ 1161.193232][T14571] ? kernel_read+0x70/0x70 [ 1161.197644][T14571] ? __kasan_check_write+0x14/0x20 [ 1161.202918][T14571] ? mutex_lock+0x92/0xf0 [ 1161.207243][T14571] ? mutex_trylock+0xb0/0xb0 [ 1161.211824][T14571] ? __fget_files+0x2e1/0x340 [ 1161.216497][T14571] ? __fdget_pos+0x2d2/0x380 [ 1161.221086][T14571] ? ksys_read+0x70/0x260 [ 1161.225409][T14571] ksys_read+0x14a/0x260 [ 1161.229729][T14571] ? vfs_write+0xd70/0xd70 [ 1161.234149][T14571] ? __kasan_check_read+0x11/0x20 [ 1161.239166][T14571] __x64_sys_read+0x7b/0x90 [ 1161.243661][T14571] do_syscall_64+0x31/0x40 [ 1161.248168][T14571] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1161.254052][T14571] RIP: 0033:0x7f89f3ef790e [ 1161.258466][T14571] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1161.278065][T14571] RSP: 002b:00007f89f298ff68 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1161.286477][T14571] RAX: ffffffffffffffda RBX: 00007f89f29906c0 RCX: 00007f89f3ef790e [ 1161.294644][T14571] RDX: 0000000000002000 RSI: 0000200000002300 RDI: 0000000000000004 [ 1161.302614][T14571] RBP: 00007f89f3fce024 R08: 0000000000000000 R09: 0000000000000000 [ 1161.310580][T14571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1161.318979][T14571] R13: 000020000000b540 R14: 00007f89f41befa0 R15: 00007ffe4c2e0638 [ 1161.326956][T14571] ---[ end trace d63b714b86723670 ]--- [ 1161.337458][T14571] ------------[ cut here ]------------ [ 1161.343078][T14571] WARNING: CPU: 0 PID: 14571 at kernel/trace/ring_buffer.c:4348 rb_get_reader_page+0xa78/0xbf0 [ 1161.353410][T14571] Modules linked in: [ 1161.357333][T14571] CPU: 0 PID: 14571 Comm: syz.9.4448 Tainted: G B W syzkaller #0 [ 1161.366172][T14571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1161.376229][T14571] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 1161.382025][T14571] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 cd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 bc 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 1161.401708][T14571] RSP: 0018:ffffc90001017940 EFLAGS: 00010002 [ 1161.407757][T14571] RAX: 1ffff11020030401 RBX: ffff888100052600 RCX: ffffffff8166f0a4 [ 1161.415797][T14571] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 1161.423891][T14571] RBP: ffffc90001017ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 1161.431857][T14571] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000246c0065 [ 1161.439829][T14571] R13: 1ffff11020057ca3 R14: 1ffff11020057ca6 R15: dffffc0000000000 [ 1161.447811][T14571] FS: 00007f89f29906c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1161.456809][T14571] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1161.463464][T14571] CR2: 0000001b2ec20ff8 CR3: 0000000119508000 CR4: 00000000003506b0 [ 1161.471425][T14571] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1161.479382][T14571] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1161.487437][T14571] Call Trace: [ 1161.490716][T14571] ? trace_seq_printf+0x201/0x330 [ 1161.495728][T14571] ? ring_buffer_read_page+0x1210/0x1210 [ 1161.501381][T14571] ? __kasan_check_write+0x14/0x20 [ 1161.506583][T14571] ? _raw_spin_lock+0x94/0xf0 [ 1161.511332][T14571] rb_buffer_peek+0x60/0x7a0 [ 1161.515927][T14571] ring_buffer_consume+0x1b2/0x350 [ 1161.521142][T14571] ? ring_buffer_iter_dropped+0x60/0x60 [ 1161.526689][T14571] ? print_trace_line+0x385/0x690 [ 1161.531697][T14571] tracing_read_pipe+0x599/0xab0 [ 1161.536621][T14571] ? s_show+0x320/0x320 [ 1161.540777][T14571] vfs_read+0x209/0xa50 [ 1161.544927][T14571] ? kernel_read+0x70/0x70 [ 1161.549437][T14571] ? __kasan_check_write+0x14/0x20 [ 1161.554531][T14571] ? mutex_lock+0x92/0xf0 [ 1161.558844][T14571] ? mutex_trylock+0xb0/0xb0 [ 1161.563442][T14571] ? __fget_files+0x2e1/0x340 [ 1161.568104][T14571] ? __fdget_pos+0x2d2/0x380 [ 1161.572677][T14571] ? ksys_read+0x70/0x260 [ 1161.576987][T14571] ksys_read+0x14a/0x260 [ 1161.581304][T14571] ? vfs_write+0xd70/0xd70 [ 1161.585703][T14571] ? __kasan_check_read+0x11/0x20 [ 1161.590728][T14571] __x64_sys_read+0x7b/0x90 [ 1161.595214][T14571] do_syscall_64+0x31/0x40 [ 1161.599613][T14571] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1161.605490][T14571] RIP: 0033:0x7f89f3ef790e [ 1161.609906][T14571] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1161.629504][T14571] RSP: 002b:00007f89f298ff68 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1161.638140][T14571] RAX: ffffffffffffffda RBX: 00007f89f29906c0 RCX: 00007f89f3ef790e [ 1161.646107][T14571] RDX: 0000000000002000 RSI: 0000200000002300 RDI: 0000000000000004 [ 1161.654187][T14571] RBP: 00007f89f3fce024 R08: 0000000000000000 R09: 0000000000000000 [ 1161.662236][T14571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1161.670192][T14571] R13: 000020000000b540 R14: 00007f89f41befa0 R15: 00007ffe4c2e0638 [ 1161.678231][T14571] ---[ end trace d63b714b86723671 ]--- [ 1161.683716][T14571] ------------[ cut here ]------------ [ 1161.689291][T14571] WARNING: CPU: 0 PID: 14571 at kernel/trace/ring_buffer.c:4348 rb_get_reader_page+0xa78/0xbf0 [ 1161.699600][T14571] Modules linked in: [ 1161.703497][T14571] CPU: 0 PID: 14571 Comm: syz.9.4448 Tainted: G B W syzkaller #0 [ 1161.712452][T14571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1161.722684][T14571] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 1161.728480][T14571] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 cd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 bc 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 1161.748083][T14571] RSP: 0018:ffffc90001017960 EFLAGS: 00010006 [ 1161.754136][T14571] RAX: 1ffff11020030401 RBX: ffff888100052600 RCX: ffffffff8166f0a4 [ 1161.762100][T14571] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 1161.770074][T14571] RBP: ffffc90001017ac8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 1161.778032][T14571] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000246c0065 [ 1161.785996][T14571] R13: 1ffff11020057ca3 R14: 1ffff11020057ca6 R15: dffffc0000000000 [ 1161.793963][T14571] FS: 00007f89f29906c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1161.802874][T14571] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1161.809445][T14571] CR2: 0000001b2ec20ff8 CR3: 0000000119508000 CR4: 00000000003506b0 [ 1161.817402][T14571] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1161.825362][T14571] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1161.833323][T14571] Call Trace: [ 1161.836637][T14571] ? ring_buffer_read_page+0x1210/0x1210 [ 1161.842256][T14571] ? __kasan_check_write+0x14/0x20 [ 1161.847354][T14571] ? _raw_spin_lock+0x94/0xf0 [ 1161.852011][T14571] rb_advance_reader+0x2b/0x6b0 [ 1161.856839][T14571] ring_buffer_consume+0x1e6/0x350 [ 1161.861954][T14571] ? ring_buffer_iter_dropped+0x60/0x60 [ 1161.867481][T14571] ? print_trace_line+0x385/0x690 [ 1161.872485][T14571] tracing_read_pipe+0x599/0xab0 [ 1161.877403][T14571] ? s_show+0x320/0x320 [ 1161.881557][T14571] vfs_read+0x209/0xa50 [ 1161.885693][T14571] ? kernel_read+0x70/0x70 [ 1161.890095][T14571] ? __kasan_check_write+0x14/0x20 [ 1161.895182][T14571] ? mutex_lock+0x92/0xf0 [ 1161.899663][T14571] ? mutex_trylock+0xb0/0xb0 [ 1161.904254][T14571] ? __fget_files+0x2e1/0x340 [ 1161.908918][T14571] ? __fdget_pos+0x2d2/0x380 [ 1161.913490][T14571] ? ksys_read+0x70/0x260 [ 1161.917832][T14571] ksys_read+0x14a/0x260 [ 1161.922057][T14571] ? vfs_write+0xd70/0xd70 [ 1161.926458][T14571] ? __kasan_check_read+0x11/0x20 [ 1161.931467][T14571] __x64_sys_read+0x7b/0x90 [ 1161.935951][T14571] do_syscall_64+0x31/0x40 [ 1161.940369][T14571] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1161.946242][T14571] RIP: 0033:0x7f89f3ef790e [ 1161.950668][T14571] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1161.970271][T14571] RSP: 002b:00007f89f298ff68 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1161.978767][T14571] RAX: ffffffffffffffda RBX: 00007f89f29906c0 RCX: 00007f89f3ef790e [ 1161.986746][T14571] RDX: 0000000000002000 RSI: 0000200000002300 RDI: 0000000000000004 [ 1161.994708][T14571] RBP: 00007f89f3fce024 R08: 0000000000000000 R09: 0000000000000000 [ 1162.002671][T14571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1162.010628][T14571] R13: 000020000000b540 R14: 00007f89f41befa0 R15: 00007ffe4c2e0638 [ 1162.018767][T14571] ---[ end trace d63b714b86723672 ]--- [ 1162.024688][T14571] ------------[ cut here ]------------ [ 1162.030184][T14571] WARNING: CPU: 0 PID: 14571 at kernel/trace/ring_buffer.c:4348 rb_get_reader_page+0xa78/0xbf0 [ 1162.040670][T14571] Modules linked in: [ 1162.044569][T14571] CPU: 0 PID: 14571 Comm: syz.9.4448 Tainted: G B W syzkaller #0 [ 1162.053403][T14571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1162.063459][T14571] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 1162.069257][T14571] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 cd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 bc 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 1162.088861][T14571] RSP: 0018:ffffc90001017800 EFLAGS: 00010006 [ 1162.095153][T14571] RAX: 1ffff11020030401 RBX: ffff888100052600 RCX: ffffffff8166f0a4 [ 1162.103118][T14571] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 1162.111256][T14571] RBP: ffffc90001017978 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 1162.119222][T14571] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000246c0069 [ 1162.127187][T14571] R13: 1ffff11020057ca3 R14: 1ffff11020057ca6 R15: dffffc0000000000 [ 1162.135163][T14571] FS: 00007f89f29906c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1162.144182][T14571] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1162.150761][T14571] CR2: 0000001b2ec20ff8 CR3: 0000000119508000 CR4: 00000000003506b0 [ 1162.158731][T14571] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1162.166790][T14571] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1162.174752][T14571] Call Trace: [ 1162.178039][T14571] ? ring_buffer_read_page+0x1210/0x1210 [ 1162.183760][T14571] ? __switch_to_asm+0x3a/0x60 [ 1162.188523][T14571] ? __kasan_check_write+0x14/0x20 [ 1162.193628][T14571] ? _raw_spin_lock+0x94/0xf0 [ 1162.198300][T14571] rb_buffer_peek+0x60/0x7a0 [ 1162.202888][T14571] ring_buffer_peek+0x183/0x360 [ 1162.207733][T14571] ? ring_buffer_iter_empty+0x370/0x370 [ 1162.213270][T14571] ? preempt_schedule+0xbc/0xd0 [ 1162.218116][T14571] ? find_next_bit+0x80/0x100 [ 1162.222806][T14571] __find_next_entry+0x34d/0x6b0 [ 1162.227752][T14571] ? preempt_schedule_thunk+0x16/0x18 [ 1162.233117][T14571] ? trace_find_next_entry+0x370/0x370 [ 1162.238591][T14571] ? ring_buffer_iter_dropped+0x60/0x60 [ 1162.244129][T14571] ? print_trace_line+0x385/0x690 [ 1162.249159][T14571] tracing_read_pipe+0x3b8/0xab0 [ 1162.254115][T14571] ? s_show+0x320/0x320 [ 1162.258279][T14571] vfs_read+0x209/0xa50 [ 1162.262437][T14571] ? kernel_read+0x70/0x70 [ 1162.266852][T14571] ? __kasan_check_write+0x14/0x20 [ 1162.271964][T14571] ? mutex_lock+0x92/0xf0 [ 1162.276287][T14571] ? mutex_trylock+0xb0/0xb0 [ 1162.280872][T14571] ? __fget_files+0x2e1/0x340 [ 1162.285570][T14571] ? __fdget_pos+0x2d2/0x380 [ 1162.290151][T14571] ? ksys_read+0x70/0x260 [ 1162.294471][T14571] ksys_read+0x14a/0x260 [ 1162.298710][T14571] ? vfs_write+0xd70/0xd70 [ 1162.303191][T14571] ? __kasan_check_read+0x11/0x20 [ 1162.308212][T14571] __x64_sys_read+0x7b/0x90 [ 1162.312710][T14571] do_syscall_64+0x31/0x40 [ 1162.317118][T14571] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1162.323671][T14571] RIP: 0033:0x7f89f3ef790e [ 1162.328091][T14571] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1162.348039][T14571] RSP: 002b:00007f89f298ff68 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1162.356445][T14571] RAX: ffffffffffffffda RBX: 00007f89f29906c0 RCX: 00007f89f3ef790e [ 1162.364498][T14571] RDX: 0000000000002000 RSI: 0000200000002300 RDI: 0000000000000004 [ 1162.372474][T14571] RBP: 00007f89f3fce024 R08: 0000000000000000 R09: 0000000000000000 [ 1162.380713][T14571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1162.388680][T14571] R13: 000020000000b540 R14: 00007f89f41befa0 R15: 00007ffe4c2e0638 [ 1162.396645][T14571] ---[ end trace d63b714b86723673 ]--- [ 1162.402821][T14571] ------------[ cut here ]------------ [ 1162.408329][T14571] WARNING: CPU: 1 PID: 14571 at kernel/trace/ring_buffer.c:4348 rb_get_reader_page+0xa78/0xbf0 [ 1162.418822][T14571] Modules linked in: [ 1162.422720][T14571] CPU: 1 PID: 14571 Comm: syz.9.4448 Tainted: G B W syzkaller #0 [ 1162.431554][T14571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1162.441610][T14571] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 1162.447597][T14571] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 cd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 bc 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 1162.467282][T14571] RSP: 0018:ffffc90001017940 EFLAGS: 00010002 [ 1162.473345][T14571] RAX: 1ffff11020030401 RBX: ffff888100052600 RCX: ffffffff8166f0a4 [ 1162.481410][T14571] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 1162.489385][T14571] RBP: ffffc90001017ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 1162.497447][T14571] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000246c0069 [ 1162.505412][T14571] R13: 1ffff11020057ca3 R14: 1ffff11020057ca6 R15: dffffc0000000000 [ 1162.513379][T14571] FS: 00007f89f29906c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1162.522301][T14571] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1162.528969][T14571] CR2: 00007f54f02312f8 CR3: 0000000119508000 CR4: 00000000003506a0 [ 1162.536938][T14571] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1162.544906][T14571] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1162.552953][T14571] Call Trace: [ 1162.556243][T14571] ? trace_seq_printf+0x201/0x330 [ 1162.561347][T14571] ? ring_buffer_read_page+0x1210/0x1210 [ 1162.566971][T14571] ? __kasan_check_write+0x14/0x20 [ 1162.572079][T14571] ? _raw_spin_lock+0x94/0xf0 [ 1162.576756][T14571] rb_buffer_peek+0x60/0x7a0 [ 1162.581438][T14571] ring_buffer_consume+0x1b2/0x350 [ 1162.586551][T14571] ? ring_buffer_iter_dropped+0x60/0x60 [ 1162.592088][T14571] ? print_trace_line+0x385/0x690 [ 1162.597166][T14571] tracing_read_pipe+0x599/0xab0 [ 1162.602105][T14571] ? s_show+0x320/0x320 [ 1162.606277][T14571] vfs_read+0x209/0xa50 [ 1162.610543][T14571] ? kernel_read+0x70/0x70 [ 1162.614954][T14571] ? __kasan_check_write+0x14/0x20 [ 1162.620059][T14571] ? mutex_lock+0x92/0xf0 [ 1162.624380][T14571] ? mutex_trylock+0xb0/0xb0 [ 1162.629182][T14571] ? __fget_files+0x2e1/0x340 [ 1162.633853][T14571] ? __fdget_pos+0x2d2/0x380 [ 1162.638447][T14571] ? ksys_read+0x70/0x260 [ 1162.642857][T14571] ksys_read+0x14a/0x260 [ 1162.647096][T14571] ? vfs_write+0xd70/0xd70 [ 1162.651515][T14571] ? __kasan_check_read+0x11/0x20 [ 1162.656557][T14571] __x64_sys_read+0x7b/0x90 [ 1162.661054][T14571] do_syscall_64+0x31/0x40 [ 1162.665555][T14571] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1162.671526][T14571] RIP: 0033:0x7f89f3ef790e [ 1162.675955][T14571] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1162.695568][T14571] RSP: 002b:00007f89f298ff68 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1162.703977][T14571] RAX: ffffffffffffffda RBX: 00007f89f29906c0 RCX: 00007f89f3ef790e [ 1162.711943][T14571] RDX: 0000000000002000 RSI: 0000200000002300 RDI: 0000000000000004 [ 1162.719908][T14571] RBP: 00007f89f3fce024 R08: 0000000000000000 R09: 0000000000000000 [ 1162.727894][T14571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1162.735873][T14571] R13: 000020000000b540 R14: 00007f89f41befa0 R15: 00007ffe4c2e0638 [ 1162.743842][T14571] ---[ end trace d63b714b86723674 ]--- [ 1162.749328][T14571] ------------[ cut here ]------------ [ 1162.754788][T14571] WARNING: CPU: 1 PID: 14571 at kernel/trace/ring_buffer.c:4348 rb_get_reader_page+0xa78/0xbf0 [ 1162.765097][T14571] Modules linked in: [ 1162.768990][T14571] CPU: 1 PID: 14571 Comm: syz.9.4448 Tainted: G B W syzkaller #0 [ 1162.777833][T14571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1162.787884][T14571] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 1162.793681][T14571] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 cd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 bc 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 1162.813365][T14571] RSP: 0018:ffffc90001017960 EFLAGS: 00010006 [ 1162.819565][T14571] RAX: 1ffff11020030401 RBX: ffff888100052600 RCX: ffffffff8166f0a4 [ 1162.827532][T14571] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 1162.835585][T14571] RBP: ffffc90001017ac8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 1162.843555][T14571] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000246c0069 [ 1162.851736][T14571] R13: 1ffff11020057ca3 R14: 1ffff11020057ca6 R15: dffffc0000000000 [ 1162.859705][T14571] FS: 00007f89f29906c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1162.868721][T14571] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1162.875306][T14571] CR2: 00007f54f02312f8 CR3: 0000000119508000 CR4: 00000000003506a0 [ 1162.883363][T14571] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1162.891341][T14571] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1162.899317][T14571] Call Trace: [ 1162.902695][T14571] ? ring_buffer_read_page+0x1210/0x1210 [ 1162.908336][T14571] ? __kasan_check_write+0x14/0x20 [ 1162.913449][T14571] ? _raw_spin_lock+0x94/0xf0 [ 1162.918164][T14571] rb_advance_reader+0x2b/0x6b0 [ 1162.923101][T14571] ring_buffer_consume+0x1e6/0x350 [ 1162.928214][T14571] ? ring_buffer_iter_dropped+0x60/0x60 [ 1162.933761][T14571] ? print_trace_line+0x385/0x690 [ 1162.938789][T14571] tracing_read_pipe+0x599/0xab0 [ 1162.943815][T14571] ? s_show+0x320/0x320 [ 1162.948222][T14571] vfs_read+0x209/0xa50 [ 1162.952721][T14571] ? kernel_read+0x70/0x70 [ 1162.957134][T14571] ? __kasan_check_write+0x14/0x20 [ 1162.962260][T14571] ? mutex_lock+0x92/0xf0 [ 1162.966586][T14571] ? mutex_trylock+0xb0/0xb0 [ 1162.971175][T14571] ? __fget_files+0x2e1/0x340 [ 1162.975931][T14571] ? __fdget_pos+0x2d2/0x380 [ 1162.980516][T14571] ? ksys_read+0x70/0x260 [ 1162.984932][T14571] ksys_read+0x14a/0x260 [ 1162.989253][T14571] ? vfs_write+0xd70/0xd70 [ 1162.993843][T14571] ? __kasan_check_read+0x11/0x20 [ 1162.998864][T14571] __x64_sys_read+0x7b/0x90 [ 1163.003358][T14571] do_syscall_64+0x31/0x40 [ 1163.007859][T14571] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1163.013739][T14571] RIP: 0033:0x7f89f3ef790e [ 1163.018150][T14571] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1163.037750][T14571] RSP: 002b:00007f89f298ff68 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1163.046158][T14571] RAX: ffffffffffffffda RBX: 00007f89f29906c0 RCX: 00007f89f3ef790e [ 1163.054121][T14571] RDX: 0000000000002000 RSI: 0000200000002300 RDI: 0000000000000004 [ 1163.062087][T14571] RBP: 00007f89f3fce024 R08: 0000000000000000 R09: 0000000000000000 [ 1163.070051][T14571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1163.078016][T14571] R13: 000020000000b540 R14: 00007f89f41befa0 R15: 00007ffe4c2e0638 [ 1163.085984][T14571] ---[ end trace d63b714b86723675 ]--- [ 1163.094979][T14571] ------------[ cut here ]------------ [ 1163.100477][T14571] WARNING: CPU: 1 PID: 14571 at kernel/trace/ring_buffer.c:4348 rb_get_reader_page+0xa78/0xbf0 [ 1163.110797][T14571] Modules linked in: [ 1163.114704][T14571] CPU: 1 PID: 14571 Comm: syz.9.4448 Tainted: G B W syzkaller #0 [ 1163.123534][T14571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1163.133589][T14571] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 1163.139385][T14571] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 cd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 bc 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 1163.158991][T14571] RSP: 0018:ffffc90001017800 EFLAGS: 00010002 [ 1163.165051][T14571] RAX: 1ffff11020030401 RBX: ffff888100052600 RCX: ffffffff8166f0a4 [ 1163.173276][T14571] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 1163.181247][T14571] RBP: ffffc90001017978 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 1163.189491][T14571] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000246c006d [ 1163.197542][T14571] R13: 1ffff11020057ca3 R14: 1ffff11020057ca6 R15: dffffc0000000000 [ 1163.205508][T14571] FS: 00007f89f29906c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1163.214434][T14571] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1163.221008][T14571] CR2: 00007f54f02312f8 CR3: 0000000119508000 CR4: 00000000003506a0 [ 1163.228993][T14571] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1163.236960][T14571] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1163.244920][T14571] Call Trace: [ 1163.248210][T14571] ? ring_buffer_read_page+0x1210/0x1210 [ 1163.253835][T14571] ? __switch_to_asm+0x3a/0x60 [ 1163.258592][T14571] ? __kasan_check_write+0x14/0x20 [ 1163.263697][T14571] ? _raw_spin_lock+0x94/0xf0 [ 1163.268364][T14571] rb_buffer_peek+0x60/0x7a0 [ 1163.272946][T14571] ring_buffer_peek+0x183/0x360 [ 1163.277790][T14571] ? ring_buffer_iter_empty+0x370/0x370 [ 1163.283329][T14571] ? preempt_schedule+0xbc/0xd0 [ 1163.288173][T14571] ? find_next_bit+0x80/0x100 [ 1163.292860][T14571] __find_next_entry+0x34d/0x6b0 [ 1163.297789][T14571] ? preempt_schedule_thunk+0x16/0x18 [ 1163.303246][T14571] ? trace_find_next_entry+0x370/0x370 [ 1163.308786][T14571] ? ring_buffer_iter_dropped+0x60/0x60 [ 1163.314327][T14571] ? print_trace_line+0x385/0x690 [ 1163.319351][T14571] tracing_read_pipe+0x3b8/0xab0 [ 1163.324282][T14571] ? s_show+0x320/0x320 [ 1163.328441][T14571] vfs_read+0x209/0xa50 [ 1163.332591][T14571] ? kernel_read+0x70/0x70 [ 1163.337171][T14571] ? __kasan_check_write+0x14/0x20 [ 1163.342400][T14571] ? mutex_lock+0x92/0xf0 [ 1163.346734][T14571] ? mutex_trylock+0xb0/0xb0 [ 1163.351439][T14571] ? __fget_files+0x2e1/0x340 [ 1163.356118][T14571] ? __fdget_pos+0x2d2/0x380 [ 1163.360709][T14571] ? ksys_read+0x70/0x260 [ 1163.365118][T14571] ksys_read+0x14a/0x260 [ 1163.369443][T14571] ? vfs_write+0xd70/0xd70 [ 1163.373947][T14571] ? __kasan_check_read+0x11/0x20 [ 1163.379069][T14571] __x64_sys_read+0x7b/0x90 [ 1163.383571][T14571] do_syscall_64+0x31/0x40 [ 1163.387978][T14571] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1163.393866][T14571] RIP: 0033:0x7f89f3ef790e [ 1163.398297][T14571] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1163.418012][T14571] RSP: 002b:00007f89f298ff68 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1163.426692][T14571] RAX: ffffffffffffffda RBX: 00007f89f29906c0 RCX: 00007f89f3ef790e [ 1163.435269][T14571] RDX: 0000000000002000 RSI: 0000200000002300 RDI: 0000000000000004 [ 1163.443620][T14571] RBP: 00007f89f3fce024 R08: 0000000000000000 R09: 0000000000000000 [ 1163.451761][T14571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1163.459728][T14571] R13: 000020000000b540 R14: 00007f89f41befa0 R15: 00007ffe4c2e0638 [ 1163.468180][T14571] ---[ end trace d63b714b86723676 ]--- [ 1163.484580][T14571] ------------[ cut here ]------------ [ 1163.490553][T14571] WARNING: CPU: 1 PID: 14571 at kernel/trace/ring_buffer.c:4348 rb_get_reader_page+0xa78/0xbf0 [ 1163.501088][T14571] Modules linked in: [ 1163.505091][T14571] CPU: 1 PID: 14571 Comm: syz.9.4448 Tainted: G B W syzkaller #0 [ 1163.514130][T14571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1163.524312][T14571] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 1163.530227][T14571] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 cd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 bc 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 1163.549836][T14571] RSP: 0018:ffffc90001017940 EFLAGS: 00010002 [ 1163.555899][T14571] RAX: 1ffff11020030401 RBX: ffff888100052600 RCX: ffffffff8166f0a4 [ 1163.563883][T14571] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 1163.571871][T14571] RBP: ffffc90001017ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 1163.579840][T14571] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000246c006d [ 1163.588089][T14571] R13: 1ffff11020057ca3 R14: 1ffff11020057ca6 R15: dffffc0000000000 [ 1163.596072][T14571] FS: 00007f89f29906c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1163.604992][T14571] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1163.611563][T14571] CR2: 00007f4dbe1ef000 CR3: 0000000119508000 CR4: 00000000003506a0 [ 1163.619537][T14571] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1163.627493][T14571] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1163.635452][T14571] Call Trace: [ 1163.638760][T14571] ? trace_seq_printf+0x201/0x330 [ 1163.643952][T14571] ? ring_buffer_read_page+0x1210/0x1210 [ 1163.649577][T14571] ? __kasan_check_write+0x14/0x20 [ 1163.654673][T14571] ? _raw_spin_lock+0x94/0xf0 [ 1163.659336][T14571] rb_buffer_peek+0x60/0x7a0 [ 1163.663940][T14571] ring_buffer_consume+0x1b2/0x350 [ 1163.669039][T14571] ? ring_buffer_iter_dropped+0x60/0x60 [ 1163.674575][T14571] ? print_trace_line+0x385/0x690 [ 1163.679582][T14571] tracing_read_pipe+0x599/0xab0 [ 1163.684504][T14571] ? s_show+0x320/0x320 [ 1163.688833][T14571] vfs_read+0x209/0xa50 [ 1163.692982][T14571] ? kernel_read+0x70/0x70 [ 1163.697410][T14571] ? __kasan_check_write+0x14/0x20 [ 1163.702529][T14571] ? mutex_lock+0x92/0xf0 [ 1163.706969][T14571] ? mutex_trylock+0xb0/0xb0 [ 1163.711578][T14571] ? __fget_files+0x2e1/0x340 [ 1163.716466][T14571] ? __fdget_pos+0x2d2/0x380 [ 1163.721123][T14571] ? ksys_read+0x70/0x260 [ 1163.725600][T14571] ksys_read+0x14a/0x260 [ 1163.730120][T14571] ? vfs_write+0xd70/0xd70 [ 1163.734636][T14571] ? __kasan_check_read+0x11/0x20 [ 1163.739750][T14571] __x64_sys_read+0x7b/0x90 [ 1163.744395][T14571] do_syscall_64+0x31/0x40 [ 1163.748915][T14571] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1163.754820][T14571] RIP: 0033:0x7f89f3ef790e [ 1163.759222][T14571] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1163.779266][T14571] RSP: 002b:00007f89f298ff68 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1163.787686][T14571] RAX: ffffffffffffffda RBX: 00007f89f29906c0 RCX: 00007f89f3ef790e [ 1163.795646][T14571] RDX: 0000000000002000 RSI: 0000200000002300 RDI: 0000000000000004 [ 1163.803607][T14571] RBP: 00007f89f3fce024 R08: 0000000000000000 R09: 0000000000000000 [ 1163.811920][T14571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1163.819889][T14571] R13: 000020000000b540 R14: 00007f89f41befa0 R15: 00007ffe4c2e0638 [ 1163.828000][T14571] ---[ end trace d63b714b86723677 ]--- [ 1163.833481][T14571] ------------[ cut here ]------------ [ 1163.838948][T14571] WARNING: CPU: 1 PID: 14571 at kernel/trace/ring_buffer.c:4348 rb_get_reader_page+0xa78/0xbf0 [ 1163.849423][T14571] Modules linked in: [ 1163.853318][T14571] CPU: 1 PID: 14571 Comm: syz.9.4448 Tainted: G B W syzkaller #0 [ 1163.862620][T14571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1163.872681][T14571] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 1163.878568][T14571] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 cd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 bc 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 1163.898423][T14571] RSP: 0018:ffffc90001017960 EFLAGS: 00010006 [ 1163.904564][T14571] RAX: 1ffff11020030401 RBX: ffff888100052600 RCX: ffffffff8166f0a4 [ 1163.912603][T14571] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 1163.920576][T14571] RBP: ffffc90001017ac8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 1163.928535][T14571] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000246c006d [ 1163.936491][T14571] R13: 1ffff11020057ca3 R14: 1ffff11020057ca6 R15: dffffc0000000000 [ 1163.944535][T14571] FS: 00007f89f29906c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1163.953445][T14571] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1163.960391][T14571] CR2: 00007f4dbe1ef000 CR3: 0000000119508000 CR4: 00000000003506a0 [ 1163.968368][T14571] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1163.976326][T14571] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1163.984378][T14571] Call Trace: [ 1163.987676][T14571] ? ring_buffer_read_page+0x1210/0x1210 [ 1163.993509][T14571] ? __kasan_check_write+0x14/0x20 [ 1163.998745][T14571] ? _raw_spin_lock+0x94/0xf0 [ 1164.003424][T14571] rb_advance_reader+0x2b/0x6b0 [ 1164.008273][T14571] ring_buffer_consume+0x1e6/0x350 [ 1164.013382][T14571] ? ring_buffer_iter_dropped+0x60/0x60 [ 1164.019010][T14571] ? print_trace_line+0x385/0x690 [ 1164.024033][T14571] tracing_read_pipe+0x599/0xab0 [ 1164.028969][T14571] ? s_show+0x320/0x320 [ 1164.033135][T14571] vfs_read+0x209/0xa50 [ 1164.037286][T14571] ? kernel_read+0x70/0x70 [ 1164.041785][T14571] ? __kasan_check_write+0x14/0x20 [ 1164.046912][T14571] ? mutex_lock+0x92/0xf0 [ 1164.051238][T14571] ? mutex_trylock+0xb0/0xb0 [ 1164.055838][T14571] ? __fget_files+0x2e1/0x340 [ 1164.060506][T14571] ? __fdget_pos+0x2d2/0x380 [ 1164.065086][T14571] ? ksys_read+0x70/0x260 [ 1164.069506][T14571] ksys_read+0x14a/0x260 [ 1164.073827][T14571] ? vfs_write+0xd70/0xd70 [ 1164.078237][T14571] ? __kasan_check_read+0x11/0x20 [ 1164.083254][T14571] __x64_sys_read+0x7b/0x90 [ 1164.087836][T14571] do_syscall_64+0x31/0x40 [ 1164.092247][T14571] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1164.098152][T14571] RIP: 0033:0x7f89f3ef790e [ 1164.102564][T14571] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1164.122165][T14571] RSP: 002b:00007f89f298ff68 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1164.130578][T14571] RAX: ffffffffffffffda RBX: 00007f89f29906c0 RCX: 00007f89f3ef790e [ 1164.138548][T14571] RDX: 0000000000002000 RSI: 0000200000002300 RDI: 0000000000000004 [ 1164.146541][T14571] RBP: 00007f89f3fce024 R08: 0000000000000000 R09: 0000000000000000 [ 1164.154514][T14571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1164.162480][T14571] R13: 000020000000b540 R14: 00007f89f41befa0 R15: 00007ffe4c2e0638 [ 1164.170458][T14571] ---[ end trace d63b714b86723678 ]--- [ 1164.177120][T14571] ------------[ cut here ]------------ [ 1164.182644][T14571] WARNING: CPU: 0 PID: 14571 at kernel/trace/ring_buffer.c:4348 rb_get_reader_page+0xa78/0xbf0 [ 1164.192947][T14571] Modules linked in: [ 1164.196832][T14571] CPU: 0 PID: 14571 Comm: syz.9.4448 Tainted: G B W syzkaller #0 [ 1164.205657][T14571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1164.215704][T14571] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 1164.221513][T14571] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 cd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 bc 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 1164.241336][T14571] RSP: 0018:ffffc90001017800 EFLAGS: 00010012 [ 1164.247418][T14571] RAX: 1ffff11020030401 RBX: ffff888100052600 RCX: ffffffff8166f0a4 [ 1164.255508][T14571] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 1164.263579][T14571] RBP: ffffc90001017978 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 1164.271541][T14571] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000246c0071 [ 1164.279506][T14571] R13: 1ffff11020057ca3 R14: 1ffff11020057ca6 R15: dffffc0000000000 [ 1164.287478][T14571] FS: 00007f89f29906c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1164.296390][T14571] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1164.302957][T14571] CR2: 00005555723d44e8 CR3: 0000000119508000 CR4: 00000000003506b0 [ 1164.310931][T14571] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1164.318985][T14571] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1164.326941][T14571] Call Trace: [ 1164.330222][T14571] ? ring_buffer_read_page+0x1210/0x1210 [ 1164.335837][T14571] ? __switch_to_asm+0x3a/0x60 [ 1164.340592][T14571] ? __kasan_check_write+0x14/0x20 [ 1164.345695][T14571] ? _raw_spin_lock+0x94/0xf0 [ 1164.350368][T14571] rb_buffer_peek+0x60/0x7a0 [ 1164.354956][T14571] ring_buffer_peek+0x183/0x360 [ 1164.359789][T14571] ? ring_buffer_iter_empty+0x370/0x370 [ 1164.365328][T14571] ? preempt_schedule+0xbc/0xd0 [ 1164.370161][T14571] ? find_next_bit+0x80/0x100 [ 1164.374824][T14571] __find_next_entry+0x34d/0x6b0 [ 1164.379764][T14571] ? preempt_schedule_thunk+0x16/0x18 [ 1164.385119][T14571] ? trace_find_next_entry+0x370/0x370 [ 1164.390559][T14571] ? ring_buffer_iter_dropped+0x60/0x60 [ 1164.396085][T14571] ? print_trace_line+0x385/0x690 [ 1164.401091][T14571] tracing_read_pipe+0x3b8/0xab0 [ 1164.406030][T14571] ? s_show+0x320/0x320 [ 1164.410181][T14571] vfs_read+0x209/0xa50 [ 1164.414334][T14571] ? kernel_read+0x70/0x70 [ 1164.418753][T14571] ? __kasan_check_write+0x14/0x20 [ 1164.423845][T14571] ? mutex_lock+0x92/0xf0 [ 1164.428164][T14571] ? mutex_trylock+0xb0/0xb0 [ 1164.432742][T14571] ? __fget_files+0x2e1/0x340 [ 1164.437406][T14571] ? __fdget_pos+0x2d2/0x380 [ 1164.441998][T14571] ? ksys_read+0x70/0x260 [ 1164.446327][T14571] ksys_read+0x14a/0x260 [ 1164.450560][T14571] ? vfs_write+0xd70/0xd70 [ 1164.454963][T14571] ? __kasan_check_read+0x11/0x20 [ 1164.459972][T14571] __x64_sys_read+0x7b/0x90 [ 1164.464458][T14571] do_syscall_64+0x31/0x40 [ 1164.468859][T14571] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1164.474733][T14571] RIP: 0033:0x7f89f3ef790e [ 1164.479135][T14571] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1164.498836][T14571] RSP: 002b:00007f89f298ff68 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1164.507333][T14571] RAX: ffffffffffffffda RBX: 00007f89f29906c0 RCX: 00007f89f3ef790e [ 1164.515288][T14571] RDX: 0000000000002000 RSI: 0000200000002300 RDI: 0000000000000004 [ 1164.523259][T14571] RBP: 00007f89f3fce024 R08: 0000000000000000 R09: 0000000000000000 [ 1164.531229][T14571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1164.539201][T14571] R13: 000020000000b540 R14: 00007f89f41befa0 R15: 00007ffe4c2e0638 [ 1164.547217][T14571] ---[ end trace d63b714b86723679 ]--- [ 1164.554919][T14571] ------------[ cut here ]------------ [ 1164.560442][T14571] WARNING: CPU: 0 PID: 14571 at kernel/trace/ring_buffer.c:4348 rb_get_reader_page+0xa78/0xbf0 [ 1164.570747][T14571] Modules linked in: [ 1164.574646][T14571] CPU: 0 PID: 14571 Comm: syz.9.4448 Tainted: G B W syzkaller #0 [ 1164.583470][T14571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1164.593519][T14571] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 1164.599326][T14571] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 cd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 bc 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 1164.619004][T14571] RSP: 0018:ffffc90001017940 EFLAGS: 00010006 [ 1164.625055][T14571] RAX: 1ffff11020030401 RBX: ffff888100052600 RCX: ffffffff8166f0a4 [ 1164.633010][T14571] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 1164.640978][T14571] RBP: ffffc90001017ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 1164.649055][T14571] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000246c0071 [ 1164.657010][T14571] R13: 1ffff11020057ca3 R14: 1ffff11020057ca6 R15: dffffc0000000000 [ 1164.665055][T14571] FS: 00007f89f29906c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1164.673982][T14571] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1164.680567][T14571] CR2: 00005555723d44e8 CR3: 0000000119508000 CR4: 00000000003506b0 [ 1164.688528][T14571] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1164.696485][T14571] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1164.704538][T14571] Call Trace: [ 1164.707841][T14571] ? trace_seq_printf+0x201/0x330 [ 1164.712851][T14571] ? ring_buffer_read_page+0x1210/0x1210 [ 1164.718571][T14571] ? __kasan_check_write+0x14/0x20 [ 1164.723667][T14571] ? _raw_spin_lock+0x94/0xf0 [ 1164.728357][T14571] rb_buffer_peek+0x60/0x7a0 [ 1164.732932][T14571] ring_buffer_consume+0x1b2/0x350 [ 1164.738043][T14571] ? ring_buffer_iter_dropped+0x60/0x60 [ 1164.743845][T14571] ? print_trace_line+0x385/0x690 [ 1164.749028][T14571] tracing_read_pipe+0x599/0xab0 [ 1164.754557][T14571] ? s_show+0x320/0x320 [ 1164.758716][T14571] vfs_read+0x209/0xa50 [ 1164.762856][T14571] ? kernel_read+0x70/0x70 [ 1164.767284][T14571] ? __kasan_check_write+0x14/0x20 [ 1164.772378][T14571] ? mutex_lock+0x92/0xf0 [ 1164.776708][T14571] ? mutex_trylock+0xb0/0xb0 [ 1164.781299][T14571] ? __fget_files+0x2e1/0x340 [ 1164.785990][T14571] ? __fdget_pos+0x2d2/0x380 [ 1164.790583][T14571] ? ksys_read+0x70/0x260 [ 1164.794925][T14571] ksys_read+0x14a/0x260 [ 1164.799152][T14571] ? vfs_write+0xd70/0xd70 [ 1164.803553][T14571] ? __kasan_check_read+0x11/0x20 [ 1164.808569][T14571] __x64_sys_read+0x7b/0x90 [ 1164.813061][T14571] do_syscall_64+0x31/0x40 [ 1164.817461][T14571] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1164.823425][T14571] RIP: 0033:0x7f89f3ef790e [ 1164.827827][T14571] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1164.847423][T14571] RSP: 002b:00007f89f298ff68 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1164.855827][T14571] RAX: ffffffffffffffda RBX: 00007f89f29906c0 RCX: 00007f89f3ef790e [ 1164.864082][T14571] RDX: 0000000000002000 RSI: 0000200000002300 RDI: 0000000000000004 [ 1164.872146][T14571] RBP: 00007f89f3fce024 R08: 0000000000000000 R09: 0000000000000000 [ 1164.880103][T14571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1164.888172][T14571] R13: 000020000000b540 R14: 00007f89f41befa0 R15: 00007ffe4c2e0638 [ 1164.896139][T14571] ---[ end trace d63b714b8672367a ]--- [ 1164.901627][T14571] ------------[ cut here ]------------ [ 1164.907075][T14571] WARNING: CPU: 0 PID: 14571 at kernel/trace/ring_buffer.c:4348 rb_get_reader_page+0xa78/0xbf0 [ 1164.917380][T14571] Modules linked in: [ 1164.921272][T14571] CPU: 0 PID: 14571 Comm: syz.9.4448 Tainted: G B W syzkaller #0 [ 1164.930138][T14571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1164.940183][T14571] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 1164.945969][T14571] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 cd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 bc 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 1164.965752][T14571] RSP: 0018:ffffc90001017960 EFLAGS: 00010006 [ 1164.972256][T14571] RAX: 1ffff11020030401 RBX: ffff888100052600 RCX: ffffffff8166f0a4 [ 1164.980661][T14571] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 1164.988722][T14571] RBP: ffffc90001017ac8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 1164.997643][T14571] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000246c0071 [ 1165.005712][T14571] R13: 1ffff11020057ca3 R14: 1ffff11020057ca6 R15: dffffc0000000000 [ 1165.013688][T14571] FS: 00007f89f29906c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1165.022620][T14571] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1165.029187][T14571] CR2: 00005555723d44e8 CR3: 0000000119508000 CR4: 00000000003506b0 [ 1165.037181][T14571] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1165.045242][T14571] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1165.053205][T14571] Call Trace: [ 1165.056496][T14571] ? ring_buffer_read_page+0x1210/0x1210 [ 1165.062116][T14571] ? __kasan_check_write+0x14/0x20 [ 1165.067220][T14571] ? _raw_spin_lock+0x94/0xf0 [ 1165.071971][T14571] rb_advance_reader+0x2b/0x6b0 [ 1165.076827][T14571] ring_buffer_consume+0x1e6/0x350 [ 1165.081950][T14571] ? ring_buffer_iter_dropped+0x60/0x60 [ 1165.087491][T14571] ? print_trace_line+0x385/0x690 [ 1165.092864][T14571] tracing_read_pipe+0x599/0xab0 [ 1165.097906][T14571] ? s_show+0x320/0x320 [ 1165.102166][T14571] vfs_read+0x209/0xa50 [ 1165.106315][T14571] ? kernel_read+0x70/0x70 [ 1165.110730][T14571] ? __kasan_check_write+0x14/0x20 [ 1165.116108][T14571] ? mutex_lock+0x92/0xf0 [ 1165.120444][T14571] ? mutex_trylock+0xb0/0xb0 [ 1165.125112][T14571] ? __fget_files+0x2e1/0x340 [ 1165.129793][T14571] ? __fdget_pos+0x2d2/0x380 [ 1165.134388][T14571] ? ksys_read+0x70/0x260 [ 1165.138712][T14571] ksys_read+0x14a/0x260 [ 1165.142965][T14571] ? vfs_write+0xd70/0xd70 [ 1165.147374][T14571] ? __kasan_check_read+0x11/0x20 [ 1165.152488][T14571] __x64_sys_read+0x7b/0x90 [ 1165.157010][T14571] do_syscall_64+0x31/0x40 [ 1165.161413][T14571] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1165.167388][T14571] RIP: 0033:0x7f89f3ef790e [ 1165.171795][T14571] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1165.191397][T14571] RSP: 002b:00007f89f298ff68 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1165.199821][T14571] RAX: ffffffffffffffda RBX: 00007f89f29906c0 RCX: 00007f89f3ef790e [ 1165.207894][T14571] RDX: 0000000000002000 RSI: 0000200000002300 RDI: 0000000000000004 [ 1165.215859][T14571] RBP: 00007f89f3fce024 R08: 0000000000000000 R09: 0000000000000000 [ 1165.223920][T14571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1165.231878][T14571] R13: 000020000000b540 R14: 00007f89f41befa0 R15: 00007ffe4c2e0638 [ 1165.239842][T14571] ---[ end trace d63b714b8672367b ]--- [ 1165.246628][T14571] ------------[ cut here ]------------ [ 1165.252147][T14571] WARNING: CPU: 0 PID: 14571 at kernel/trace/ring_buffer.c:4348 rb_get_reader_page+0xa78/0xbf0 [ 1165.262533][T14571] Modules linked in: [ 1165.266420][T14571] CPU: 0 PID: 14571 Comm: syz.9.4448 Tainted: G B W syzkaller #0 [ 1165.275246][T14571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1165.285313][T14571] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 1165.291127][T14571] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 cd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 bc 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 1165.310838][T14571] RSP: 0018:ffffc90001017800 EFLAGS: 00010002 [ 1165.316905][T14571] RAX: 1ffff11020030401 RBX: ffff888100052600 RCX: ffffffff8166f0a4 [ 1165.324869][T14571] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 1165.332953][T14571] RBP: ffffc90001017978 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 1165.340911][T14571] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000246c0075 [ 1165.348872][T14571] R13: 1ffff11020057ca3 R14: 1ffff11020057ca6 R15: dffffc0000000000 [ 1165.356830][T14571] FS: 00007f89f29906c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1165.365744][T14571] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1165.372311][T14571] CR2: 00005555723d44e8 CR3: 0000000119508000 CR4: 00000000003506b0 [ 1165.380271][T14571] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1165.388229][T14571] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1165.396198][T14571] Call Trace: [ 1165.399498][T14571] ? ring_buffer_read_page+0x1210/0x1210 [ 1165.405117][T14571] ? __switch_to_asm+0x3a/0x60 [ 1165.409878][T14571] ? __kasan_check_write+0x14/0x20 [ 1165.414993][T14571] ? _raw_spin_lock+0x94/0xf0 [ 1165.419656][T14571] rb_buffer_peek+0x60/0x7a0 [ 1165.424233][T14571] ring_buffer_peek+0x183/0x360 [ 1165.429074][T14571] ? ring_buffer_iter_empty+0x370/0x370 [ 1165.434623][T14571] ? preempt_schedule+0xbc/0xd0 [ 1165.439461][T14571] ? find_next_bit+0x80/0x100 [ 1165.444121][T14571] __find_next_entry+0x34d/0x6b0 [ 1165.449042][T14571] ? preempt_schedule_thunk+0x16/0x18 [ 1165.454398][T14571] ? trace_find_next_entry+0x370/0x370 [ 1165.459855][T14571] ? ring_buffer_iter_dropped+0x60/0x60 [ 1165.465389][T14571] ? print_trace_line+0x385/0x690 [ 1165.470417][T14571] tracing_read_pipe+0x3b8/0xab0 [ 1165.475340][T14571] ? s_show+0x320/0x320 [ 1165.479499][T14571] vfs_read+0x209/0xa50 [ 1165.483740][T14571] ? kernel_read+0x70/0x70 [ 1165.488144][T14571] ? __kasan_check_write+0x14/0x20 [ 1165.493255][T14571] ? mutex_lock+0x92/0xf0 [ 1165.497568][T14571] ? mutex_trylock+0xb0/0xb0 [ 1165.502160][T14571] ? __fget_files+0x2e1/0x340 [ 1165.506841][T14571] ? __fdget_pos+0x2d2/0x380 [ 1165.511439][T14571] ? ksys_read+0x70/0x260 [ 1165.515785][T14571] ksys_read+0x14a/0x260 [ 1165.520038][T14571] ? vfs_write+0xd70/0xd70 [ 1165.524467][T14571] ? __kasan_check_read+0x11/0x20 [ 1165.529504][T14571] __x64_sys_read+0x7b/0x90 [ 1165.534209][T14571] do_syscall_64+0x31/0x40 [ 1165.538741][T14571] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1165.544644][T14571] RIP: 0033:0x7f89f3ef790e [ 1165.549049][T14571] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1165.568654][T14571] RSP: 002b:00007f89f298ff68 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1165.577061][T14571] RAX: ffffffffffffffda RBX: 00007f89f29906c0 RCX: 00007f89f3ef790e [ 1165.585019][T14571] RDX: 0000000000002000 RSI: 0000200000002300 RDI: 0000000000000004 [ 1165.592974][T14571] RBP: 00007f89f3fce024 R08: 0000000000000000 R09: 0000000000000000 [ 1165.600932][T14571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1165.608888][T14571] R13: 000020000000b540 R14: 00007f89f41befa0 R15: 00007ffe4c2e0638 [ 1165.616848][T14571] ---[ end trace d63b714b8672367c ]--- [ 1165.624438][T14571] ------------[ cut here ]------------ [ 1165.629931][T14571] WARNING: CPU: 0 PID: 14571 at kernel/trace/ring_buffer.c:4348 rb_get_reader_page+0xa78/0xbf0 [ 1165.640329][T14571] Modules linked in: [ 1165.644217][T14571] CPU: 0 PID: 14571 Comm: syz.9.4448 Tainted: G B W syzkaller #0 [ 1165.653042][T14571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1165.663098][T14571] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 1165.668974][T14571] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 cd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 bc 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 1165.688564][T14571] RSP: 0018:ffffc90001017940 EFLAGS: 00010006 [ 1165.694633][T14571] RAX: 1ffff11020030401 RBX: ffff888100052600 RCX: ffffffff8166f0a4 [ 1165.702679][T14571] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 1165.710849][T14571] RBP: ffffc90001017ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 1165.718826][T14571] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000246c0075 [ 1165.726874][T14571] R13: 1ffff11020057ca3 R14: 1ffff11020057ca6 R15: dffffc0000000000 [ 1165.734855][T14571] FS: 00007f89f29906c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1165.743864][T14571] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1165.750456][T14571] CR2: 00005555723d44e8 CR3: 0000000119508000 CR4: 00000000003506b0 [ 1165.758515][T14571] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1165.766669][T14571] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1165.774725][T14571] Call Trace: [ 1165.778020][T14571] ? trace_seq_printf+0x201/0x330 [ 1165.783050][T14571] ? ring_buffer_read_page+0x1210/0x1210 [ 1165.788668][T14571] ? __kasan_check_write+0x14/0x20 [ 1165.793767][T14571] ? _raw_spin_lock+0x94/0xf0 [ 1165.798451][T14571] rb_buffer_peek+0x60/0x7a0 [ 1165.803037][T14571] ring_buffer_consume+0x1b2/0x350 [ 1165.808141][T14571] ? ring_buffer_iter_dropped+0x60/0x60 [ 1165.813678][T14571] ? print_trace_line+0x385/0x690 [ 1165.818718][T14571] tracing_read_pipe+0x599/0xab0 [ 1165.824355][T14571] ? s_show+0x320/0x320 [ 1165.828533][T14571] vfs_read+0x209/0xa50 [ 1165.832869][T14571] ? kernel_read+0x70/0x70 [ 1165.837284][T14571] ? __kasan_check_write+0x14/0x20 [ 1165.842379][T14571] ? mutex_lock+0x92/0xf0 [ 1165.846694][T14571] ? mutex_trylock+0xb0/0xb0 [ 1165.851356][T14571] ? __fget_files+0x2e1/0x340 [ 1165.856030][T14571] ? __fdget_pos+0x2d2/0x380 [ 1165.860727][T14571] ? ksys_read+0x70/0x260 [ 1165.865044][T14571] ksys_read+0x14a/0x260 [ 1165.869364][T14571] ? vfs_write+0xd70/0xd70 [ 1165.873771][T14571] ? __kasan_check_read+0x11/0x20 [ 1165.878779][T14571] __x64_sys_read+0x7b/0x90 [ 1165.883268][T14571] do_syscall_64+0x31/0x40 [ 1165.887672][T14571] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1165.893552][T14571] RIP: 0033:0x7f89f3ef790e [ 1165.897954][T14571] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1165.917739][T14571] RSP: 002b:00007f89f298ff68 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1165.926353][T14571] RAX: ffffffffffffffda RBX: 00007f89f29906c0 RCX: 00007f89f3ef790e [ 1165.934416][T14571] RDX: 0000000000002000 RSI: 0000200000002300 RDI: 0000000000000004 [ 1165.942473][T14571] RBP: 00007f89f3fce024 R08: 0000000000000000 R09: 0000000000000000 [ 1165.950518][T14571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1165.958495][T14571] R13: 000020000000b540 R14: 00007f89f41befa0 R15: 00007ffe4c2e0638 [ 1165.966461][T14571] ---[ end trace d63b714b8672367d ]--- [ 1165.971941][T14571] ------------[ cut here ]------------ [ 1165.977396][T14571] WARNING: CPU: 0 PID: 14571 at kernel/trace/ring_buffer.c:4348 rb_get_reader_page+0xa78/0xbf0 [ 1165.987790][T14571] Modules linked in: [ 1165.991707][T14571] CPU: 0 PID: 14571 Comm: syz.9.4448 Tainted: G B W syzkaller #0 [ 1166.000530][T14571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1166.010611][T14571] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 1166.016419][T14571] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 cd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 bc 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 1166.036191][T14571] RSP: 0018:ffffc90001017960 EFLAGS: 00010002 [ 1166.042450][T14571] RAX: 1ffff11020030401 RBX: ffff888100052600 RCX: ffffffff8166f0a4 [ 1166.050407][T14571] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 1166.058556][T14571] RBP: ffffc90001017ac8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 1166.066516][T14571] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000246c0075 [ 1166.074493][T14571] R13: 1ffff11020057ca3 R14: 1ffff11020057ca6 R15: dffffc0000000000 [ 1166.082555][T14571] FS: 00007f89f29906c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1166.091473][T14571] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1166.098041][T14571] CR2: 00005555723d44e8 CR3: 0000000119508000 CR4: 00000000003506b0 [ 1166.106013][T14571] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1166.114068][T14571] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1166.122129][T14571] Call Trace: [ 1166.125409][T14571] ? ring_buffer_read_page+0x1210/0x1210 [ 1166.131134][T14571] ? __kasan_check_write+0x14/0x20 [ 1166.136242][T14571] ? _raw_spin_lock+0x94/0xf0 [ 1166.141108][T14571] rb_advance_reader+0x2b/0x6b0 [ 1166.145943][T14571] ring_buffer_consume+0x1e6/0x350 [ 1166.151038][T14571] ? ring_buffer_iter_dropped+0x60/0x60 [ 1166.156655][T14571] ? print_trace_line+0x385/0x690 [ 1166.161677][T14571] tracing_read_pipe+0x599/0xab0 [ 1166.166604][T14571] ? s_show+0x320/0x320 [ 1166.170748][T14571] vfs_read+0x209/0xa50 [ 1166.174887][T14571] ? kernel_read+0x70/0x70 [ 1166.179293][T14571] ? __kasan_check_write+0x14/0x20 [ 1166.184397][T14571] ? mutex_lock+0x92/0xf0 [ 1166.188905][T14571] ? mutex_trylock+0xb0/0xb0 [ 1166.193487][T14571] ? __fget_files+0x2e1/0x340 [ 1166.198236][T14571] ? __fdget_pos+0x2d2/0x380 [ 1166.202810][T14571] ? ksys_read+0x70/0x260 [ 1166.207226][T14571] ksys_read+0x14a/0x260 [ 1166.211469][T14571] ? vfs_write+0xd70/0xd70 [ 1166.215869][T14571] ? __kasan_check_read+0x11/0x20 [ 1166.220877][T14571] __x64_sys_read+0x7b/0x90 [ 1166.225392][T14571] do_syscall_64+0x31/0x40 [ 1166.229900][T14571] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1166.235817][T14571] RIP: 0033:0x7f89f3ef790e [ 1166.240232][T14571] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1166.259931][T14571] RSP: 002b:00007f89f298ff68 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1166.268333][T14571] RAX: ffffffffffffffda RBX: 00007f89f29906c0 RCX: 00007f89f3ef790e [ 1166.276291][T14571] RDX: 0000000000002000 RSI: 0000200000002300 RDI: 0000000000000004 [ 1166.284257][T14571] RBP: 00007f89f3fce024 R08: 0000000000000000 R09: 0000000000000000 [ 1166.292318][T14571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1166.300275][T14571] R13: 000020000000b540 R14: 00007f89f41befa0 R15: 00007ffe4c2e0638 [ 1166.308238][T14571] ---[ end trace d63b714b8672367e ]--- [ 1166.314394][T14571] ------------[ cut here ]------------ [ 1166.319891][T14571] WARNING: CPU: 0 PID: 14571 at kernel/trace/ring_buffer.c:4348 rb_get_reader_page+0xa78/0xbf0 [ 1166.330202][T14571] Modules linked in: [ 1166.334099][T14571] CPU: 0 PID: 14571 Comm: syz.9.4448 Tainted: G B W syzkaller #0 [ 1166.342958][T14571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1166.353102][T14571] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 1166.358904][T14571] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 cd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 bc 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 1166.378770][T14571] RSP: 0018:ffffc90001017800 EFLAGS: 00010002 [ 1166.384916][T14571] RAX: 1ffff11020030401 RBX: ffff888100052600 RCX: ffffffff8166f0a4 [ 1166.392907][T14571] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 1166.400874][T14571] RBP: ffffc90001017978 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 1166.408849][T14571] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000246c0079 [ 1166.416889][T14571] R13: 1ffff11020057ca3 R14: 1ffff11020057ca6 R15: dffffc0000000000 [ 1166.424960][T14571] FS: 00007f89f29906c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1166.433984][T14571] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1166.440562][T14571] CR2: 00005555723d44e8 CR3: 0000000119508000 CR4: 00000000003506b0 [ 1166.448622][T14571] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1166.456591][T14571] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1166.464817][T14571] Call Trace: [ 1166.468135][T14571] ? ring_buffer_read_page+0x1210/0x1210 [ 1166.473939][T14571] ? __switch_to_asm+0x3a/0x60 [ 1166.478703][T14571] ? __kasan_check_write+0x14/0x20 [ 1166.483814][T14571] ? _raw_spin_lock+0x94/0xf0 [ 1166.488488][T14571] rb_buffer_peek+0x60/0x7a0 [ 1166.493077][T14571] ring_buffer_peek+0x183/0x360 [ 1166.497920][T14571] ? ring_buffer_iter_empty+0x370/0x370 [ 1166.503459][T14571] ? preempt_schedule+0xbc/0xd0 [ 1166.508308][T14571] ? find_next_bit+0x80/0x100 [ 1166.512987][T14571] __find_next_entry+0x34d/0x6b0 [ 1166.517921][T14571] ? preempt_schedule_thunk+0x16/0x18 [ 1166.523376][T14571] ? trace_find_next_entry+0x370/0x370 [ 1166.528829][T14571] ? ring_buffer_iter_dropped+0x60/0x60 [ 1166.534377][T14571] ? print_trace_line+0x385/0x690 [ 1166.539398][T14571] tracing_read_pipe+0x3b8/0xab0 [ 1166.544336][T14571] ? s_show+0x320/0x320 [ 1166.548569][T14571] vfs_read+0x209/0xa50 [ 1166.552718][T14571] ? kernel_read+0x70/0x70 [ 1166.557131][T14571] ? __kasan_check_write+0x14/0x20 [ 1166.562235][T14571] ? mutex_lock+0x92/0xf0 [ 1166.566556][T14571] ? mutex_trylock+0xb0/0xb0 [ 1166.571318][T14571] ? __fget_files+0x2e1/0x340 [ 1166.575989][T14571] ? __fdget_pos+0x2d2/0x380 [ 1166.580585][T14571] ? ksys_read+0x70/0x260 [ 1166.584926][T14571] ksys_read+0x14a/0x260 [ 1166.589179][T14571] ? vfs_write+0xd70/0xd70 [ 1166.593587][T14571] ? __kasan_check_read+0x11/0x20 [ 1166.598714][T14571] __x64_sys_read+0x7b/0x90 [ 1166.603349][T14571] do_syscall_64+0x31/0x40 [ 1166.607954][T14571] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1166.613841][T14571] RIP: 0033:0x7f89f3ef790e [ 1166.618253][T14571] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1166.637850][T14571] RSP: 002b:00007f89f298ff68 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1166.646359][T14571] RAX: ffffffffffffffda RBX: 00007f89f29906c0 RCX: 00007f89f3ef790e [ 1166.654324][T14571] RDX: 0000000000002000 RSI: 0000200000002300 RDI: 0000000000000004 [ 1166.662291][T14571] RBP: 00007f89f3fce024 R08: 0000000000000000 R09: 0000000000000000 [ 1166.670260][T14571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1166.678229][T14571] R13: 000020000000b540 R14: 00007f89f41befa0 R15: 00007ffe4c2e0638 [ 1166.686210][T14571] ---[ end trace d63b714b8672367f ]--- [ 1166.703143][T14571] ------------[ cut here ]------------ [ 1166.708671][T14571] WARNING: CPU: 1 PID: 14571 at kernel/trace/ring_buffer.c:4348 rb_get_reader_page+0xa78/0xbf0 [ 1166.718987][T14571] Modules linked in: [ 1166.722911][T14571] CPU: 1 PID: 14571 Comm: syz.9.4448 Tainted: G B W syzkaller #0 [ 1166.731919][T14571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1166.742141][T14571] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 1166.747933][T14571] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 cd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 bc 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 1166.767536][T14571] RSP: 0018:ffffc90001017940 EFLAGS: 00010006 [ 1166.773706][T14571] RAX: 1ffff11020030401 RBX: ffff888100052600 RCX: ffffffff8166f0a4 [ 1166.781782][T14571] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 1166.789758][T14571] RBP: ffffc90001017ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 1166.797916][T14571] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000246c0079 [ 1166.805975][T14571] R13: 1ffff11020057ca3 R14: 1ffff11020057ca6 R15: dffffc0000000000 [ 1166.814110][T14571] FS: 00007f89f29906c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1166.823021][T14571] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1166.829607][T14571] CR2: 00007fb850c91d30 CR3: 0000000119508000 CR4: 00000000003506a0 [ 1166.837592][T14571] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1166.845638][T14571] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1166.853595][T14571] Call Trace: [ 1166.856982][T14571] ? trace_seq_printf+0x201/0x330 [ 1166.861995][T14571] ? ring_buffer_read_page+0x1210/0x1210 [ 1166.867628][T14571] ? __kasan_check_write+0x14/0x20 [ 1166.872741][T14571] ? _raw_spin_lock+0x94/0xf0 [ 1166.877405][T14571] rb_buffer_peek+0x60/0x7a0 [ 1166.881980][T14571] ring_buffer_consume+0x1b2/0x350 [ 1166.887282][T14571] ? ring_buffer_iter_dropped+0x60/0x60 [ 1166.892814][T14571] ? print_trace_line+0x385/0x690 [ 1166.897840][T14571] tracing_read_pipe+0x599/0xab0 [ 1166.902862][T14571] ? s_show+0x320/0x320 [ 1166.907006][T14571] vfs_read+0x209/0xa50 [ 1166.911147][T14571] ? kernel_read+0x70/0x70 [ 1166.915548][T14571] ? __kasan_check_write+0x14/0x20 [ 1166.920826][T14571] ? mutex_lock+0x92/0xf0 [ 1166.925150][T14571] ? mutex_trylock+0xb0/0xb0 [ 1166.929742][T14571] ? __fget_files+0x2e1/0x340 [ 1166.934493][T14571] ? __fdget_pos+0x2d2/0x380 [ 1166.939172][T14571] ? ksys_read+0x70/0x260 [ 1166.943748][T14571] ksys_read+0x14a/0x260 [ 1166.947982][T14571] ? vfs_write+0xd70/0xd70 [ 1166.952778][T14571] ? __kasan_check_read+0x11/0x20 [ 1166.957894][T14571] __x64_sys_read+0x7b/0x90 [ 1166.962579][T14571] do_syscall_64+0x31/0x40 [ 1166.967027][T14571] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1166.972906][T14571] RIP: 0033:0x7f89f3ef790e [ 1166.977328][T14571] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1166.996933][T14571] RSP: 002b:00007f89f298ff68 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1167.005345][T14571] RAX: ffffffffffffffda RBX: 00007f89f29906c0 RCX: 00007f89f3ef790e [ 1167.013390][T14571] RDX: 0000000000002000 RSI: 0000200000002300 RDI: 0000000000000004 [ 1167.021357][T14571] RBP: 00007f89f3fce024 R08: 0000000000000000 R09: 0000000000000000 [ 1167.029320][T14571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1167.037634][T14571] R13: 000020000000b540 R14: 00007f89f41befa0 R15: 00007ffe4c2e0638 [ 1167.045695][T14571] ---[ end trace d63b714b86723680 ]--- [ 1167.051171][T14571] ------------[ cut here ]------------ [ 1167.056624][T14571] WARNING: CPU: 1 PID: 14571 at kernel/trace/ring_buffer.c:4348 rb_get_reader_page+0xa78/0xbf0 [ 1167.066922][T14571] Modules linked in: [ 1167.070808][T14571] CPU: 1 PID: 14571 Comm: syz.9.4448 Tainted: G B W syzkaller #0 [ 1167.079638][T14571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1167.089779][T14571] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 1167.095567][T14571] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 cd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 bc 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 1167.115177][T14571] RSP: 0018:ffffc90001017960 EFLAGS: 00010006 [ 1167.121316][T14571] RAX: 1ffff11020030401 RBX: ffff888100052600 RCX: ffffffff8166f0a4 [ 1167.129298][T14571] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 1167.137257][T14571] RBP: ffffc90001017ac8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 1167.145216][T14571] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000246c0079 [ 1167.153175][T14571] R13: 1ffff11020057ca3 R14: 1ffff11020057ca6 R15: dffffc0000000000 [ 1167.161229][T14571] FS: 00007f89f29906c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1167.170321][T14571] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1167.176888][T14571] CR2: 00007fb850c91d30 CR3: 0000000119508000 CR4: 00000000003506a0 [ 1167.184851][T14571] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1167.192904][T14571] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1167.201041][T14571] Call Trace: [ 1167.204321][T14571] ? ring_buffer_read_page+0x1210/0x1210 [ 1167.209938][T14571] ? __kasan_check_write+0x14/0x20 [ 1167.215036][T14571] ? _raw_spin_lock+0x94/0xf0 [ 1167.219700][T14571] rb_advance_reader+0x2b/0x6b0 [ 1167.224547][T14571] ring_buffer_consume+0x1e6/0x350 [ 1167.229741][T14571] ? ring_buffer_iter_dropped+0x60/0x60 [ 1167.235368][T14571] ? print_trace_line+0x385/0x690 [ 1167.240386][T14571] tracing_read_pipe+0x599/0xab0 [ 1167.245366][T14571] ? s_show+0x320/0x320 [ 1167.249694][T14571] vfs_read+0x209/0xa50 [ 1167.253849][T14571] ? kernel_read+0x70/0x70 [ 1167.258284][T14571] ? __kasan_check_write+0x14/0x20 [ 1167.263381][T14571] ? mutex_lock+0x92/0xf0 [ 1167.267709][T14571] ? mutex_trylock+0xb0/0xb0 [ 1167.272309][T14571] ? __fget_files+0x2e1/0x340 [ 1167.276985][T14571] ? __fdget_pos+0x2d2/0x380 [ 1167.281586][T14571] ? ksys_read+0x70/0x260 [ 1167.286072][T14571] ksys_read+0x14a/0x260 [ 1167.290400][T14571] ? vfs_write+0xd70/0xd70 [ 1167.294816][T14571] ? __kasan_check_read+0x11/0x20 [ 1167.299838][T14571] __x64_sys_read+0x7b/0x90 [ 1167.304332][T14571] do_syscall_64+0x31/0x40 [ 1167.308733][T14571] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1167.314611][T14571] RIP: 0033:0x7f89f3ef790e [ 1167.319009][T14571] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1167.338595][T14571] RSP: 002b:00007f89f298ff68 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1167.346989][T14571] RAX: ffffffffffffffda RBX: 00007f89f29906c0 RCX: 00007f89f3ef790e [ 1167.354942][T14571] RDX: 0000000000002000 RSI: 0000200000002300 RDI: 0000000000000004 [ 1167.363002][T14571] RBP: 00007f89f3fce024 R08: 0000000000000000 R09: 0000000000000000 [ 1167.370957][T14571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1167.378932][T14571] R13: 000020000000b540 R14: 00007f89f41befa0 R15: 00007ffe4c2e0638 [ 1167.386902][T14571] ---[ end trace d63b714b86723681 ]--- [ 1167.392441][ C1] atkbd_interrupt: 1 callbacks suppressed [ 1167.392515][ C1] atkbd serio0: Spurious ACK on isa0060/serio0. Some program might be trying to access hardware directly. [ 1167.410059][T14571] ------------[ cut here ]------------ [ 1167.415564][T14571] WARNING: CPU: 0 PID: 14571 at kernel/trace/ring_buffer.c:4348 rb_get_reader_page+0xa78/0xbf0 [ 1167.425882][T14571] Modules linked in: [ 1167.429788][T14571] CPU: 0 PID: 14571 Comm: syz.9.4448 Tainted: G B W syzkaller #0 [ 1167.438720][T14571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1167.448802][T14571] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 1167.455045][T14571] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 cd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 bc 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 1167.474646][T14571] RSP: 0018:ffffc90001017800 EFLAGS: 00010002 [ 1167.480711][T14571] RAX: 1ffff11020030401 RBX: ffff888100052600 RCX: ffffffff8166f0a4 [ 1167.488682][T14571] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 1167.496653][T14571] RBP: ffffc90001017978 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 1167.504620][T14571] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000246c007d [ 1167.512590][T14571] R13: 1ffff11020057ca3 R14: 1ffff11020057ca6 R15: dffffc0000000000 [ 1167.520561][T14571] FS: 00007f89f29906c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1167.529842][T14571] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1167.536422][T14571] CR2: 000055654df02338 CR3: 0000000119508000 CR4: 00000000003506b0 [ 1167.544392][T14571] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1167.552456][T14571] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1167.560419][T14571] Call Trace: [ 1167.563733][T14571] ? ring_buffer_read_page+0x1210/0x1210 [ 1167.569362][T14571] ? __switch_to_asm+0x3a/0x60 [ 1167.574119][T14571] ? __kasan_check_write+0x14/0x20 [ 1167.579232][T14571] ? _raw_spin_lock+0x94/0xf0 [ 1167.583911][T14571] rb_buffer_peek+0x60/0x7a0 [ 1167.588502][T14571] ring_buffer_peek+0x183/0x360 [ 1167.593345][T14571] ? ring_buffer_iter_empty+0x370/0x370 [ 1167.598891][T14571] ? preempt_schedule+0xbc/0xd0 [ 1167.603740][T14571] ? find_next_bit+0x80/0x100 [ 1167.608415][T14571] __find_next_entry+0x34d/0x6b0 [ 1167.613348][T14571] ? preempt_schedule_thunk+0x16/0x18 [ 1167.618805][T14571] ? trace_find_next_entry+0x370/0x370 [ 1167.624278][T14571] ? ring_buffer_iter_dropped+0x60/0x60 [ 1167.629816][T14571] ? print_trace_line+0x385/0x690 [ 1167.634834][T14571] tracing_read_pipe+0x3b8/0xab0 [ 1167.639766][T14571] ? s_show+0x320/0x320 [ 1167.643920][T14571] vfs_read+0x209/0xa50 [ 1167.648065][T14571] ? kernel_read+0x70/0x70 [ 1167.652581][T14571] ? __kasan_check_write+0x14/0x20 [ 1167.657703][T14571] ? mutex_lock+0x92/0xf0 [ 1167.662026][T14571] ? mutex_trylock+0xb0/0xb0 [ 1167.666726][T14571] ? __fget_files+0x2e1/0x340 [ 1167.671396][T14571] ? __fdget_pos+0x2d2/0x380 [ 1167.675975][T14571] ? ksys_read+0x70/0x260 [ 1167.680302][T14571] ksys_read+0x14a/0x260 [ 1167.684627][T14571] ? vfs_write+0xd70/0xd70 [ 1167.689042][T14571] ? __kasan_check_read+0x11/0x20 [ 1167.694059][T14571] __x64_sys_read+0x7b/0x90 [ 1167.698567][T14571] do_syscall_64+0x31/0x40 [ 1167.702976][T14571] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1167.708859][T14571] RIP: 0033:0x7f89f3ef790e [ 1167.713286][T14571] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1167.732969][T14571] RSP: 002b:00007f89f298ff68 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1167.741378][T14571] RAX: ffffffffffffffda RBX: 00007f89f29906c0 RCX: 00007f89f3ef790e [ 1167.749345][T14571] RDX: 0000000000002000 RSI: 0000200000002300 RDI: 0000000000000004 [ 1167.757313][T14571] RBP: 00007f89f3fce024 R08: 0000000000000000 R09: 0000000000000000 [ 1167.765289][T14571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1167.773432][T14571] R13: 000020000000b540 R14: 00007f89f41befa0 R15: 00007ffe4c2e0638 [ 1167.781399][T14571] ---[ end trace d63b714b86723682 ]--- [ 1167.791048][T14571] ------------[ cut here ]------------ [ 1167.793487][ T24] audit: type=1400 audit(1786100425.135:409): avc: denied { read } for pid=14574 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1167.796564][T14571] WARNING: CPU: 0 PID: 14571 at kernel/trace/ring_buffer.c:4348 rb_get_reader_page+0xa78/0xbf0 [ 1167.828817][T14571] Modules linked in: [ 1167.832722][T14571] CPU: 0 PID: 14571 Comm: syz.9.4448 Tainted: G B W syzkaller #0 [ 1167.841556][T14571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1167.851701][T14571] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 1167.857602][T14571] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 cd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 bc 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 1167.877291][T14571] RSP: 0018:ffffc90001017940 EFLAGS: 00010002 [ 1167.883366][T14571] RAX: 1ffff11020030401 RBX: ffff888100052600 RCX: ffffffff8166f0a4 [ 1167.891419][T14571] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 1167.899587][T14571] RBP: ffffc90001017ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 1167.907549][T14571] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000246c007d [ 1167.915522][T14571] R13: 1ffff11020057ca3 R14: 1ffff11020057ca6 R15: dffffc0000000000 [ 1167.923492][T14571] FS: 00007f89f29906c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1167.932503][T14571] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1167.939237][T14571] CR2: 000055654df02338 CR3: 0000000119508000 CR4: 00000000003506b0 [ 1167.947217][T14571] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1167.955278][T14571] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1167.963341][T14571] Call Trace: [ 1167.966639][T14571] ? trace_seq_printf+0x201/0x330 [ 1167.971745][T14571] ? ring_buffer_read_page+0x1210/0x1210 [ 1167.977373][T14571] ? __kasan_check_write+0x14/0x20 [ 1167.982570][T14571] ? _raw_spin_lock+0x94/0xf0 [ 1167.987239][T14571] rb_buffer_peek+0x60/0x7a0 [ 1167.991822][T14571] ring_buffer_consume+0x1b2/0x350 [ 1167.997024][T14571] ? ring_buffer_iter_dropped+0x60/0x60 [ 1168.002564][T14571] ? print_trace_line+0x385/0x690 [ 1168.007580][T14571] tracing_read_pipe+0x599/0xab0 [ 1168.012530][T14571] ? s_show+0x320/0x320 [ 1168.016695][T14571] vfs_read+0x209/0xa50 [ 1168.020864][T14571] ? kernel_read+0x70/0x70 [ 1168.025451][T14571] ? __kasan_check_write+0x14/0x20 [ 1168.030641][T14571] ? mutex_lock+0x92/0xf0 [ 1168.034962][T14571] ? mutex_trylock+0xb0/0xb0 [ 1168.039547][T14571] ? __fget_files+0x2e1/0x340 [ 1168.044217][T14571] ? __fdget_pos+0x2d2/0x380 [ 1168.048802][T14571] ? ksys_read+0x70/0x260 [ 1168.053125][T14571] ksys_read+0x14a/0x260 [ 1168.057361][T14571] ? vfs_write+0xd70/0xd70 [ 1168.061771][T14571] ? __kasan_check_read+0x11/0x20 [ 1168.066789][T14571] __x64_sys_read+0x7b/0x90 [ 1168.071291][T14571] do_syscall_64+0x31/0x40 [ 1168.075853][T14571] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1168.081760][T14571] RIP: 0033:0x7f89f3ef790e [ 1168.086182][T14571] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1168.105789][T14571] RSP: 002b:00007f89f298ff68 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1168.114284][T14571] RAX: ffffffffffffffda RBX: 00007f89f29906c0 RCX: 00007f89f3ef790e [ 1168.122252][T14571] RDX: 0000000000002000 RSI: 0000200000002300 RDI: 0000000000000004 [ 1168.130328][T14571] RBP: 00007f89f3fce024 R08: 0000000000000000 R09: 0000000000000000 [ 1168.138294][T14571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1168.146266][T14571] R13: 000020000000b540 R14: 00007f89f41befa0 R15: 00007ffe4c2e0638 [ 1168.154263][T14571] ---[ end trace d63b714b86723683 ]--- [ 1168.159881][T14571] ------------[ cut here ]------------ [ 1168.165350][T14571] WARNING: CPU: 0 PID: 14571 at kernel/trace/ring_buffer.c:4348 rb_get_reader_page+0xa78/0xbf0 [ 1168.175659][T14571] Modules linked in: [ 1168.179556][T14571] CPU: 0 PID: 14571 Comm: syz.9.4448 Tainted: G B W syzkaller #0 [ 1168.188399][T14571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1168.198454][T14571] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 1168.204342][T14571] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 cd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 bc 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 1168.223943][T14571] RSP: 0018:ffffc90001017960 EFLAGS: 00010006 [ 1168.230093][T14571] RAX: 1ffff11020030401 RBX: ffff888100052600 RCX: ffffffff8166f0a4 [ 1168.238059][T14571] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 1168.246052][T14571] RBP: ffffc90001017ac8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 1168.254108][T14571] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 00000000246c007d [ 1168.262077][T14571] R13: 1ffff11020057ca3 R14: 1ffff11020057ca6 R15: dffffc0000000000 [ 1168.270060][T14571] FS: 00007f89f29906c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1168.279003][T14571] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1168.285590][T14571] CR2: 000055654df02338 CR3: 0000000119508000 CR4: 00000000003506b0 [ 1168.293822][T14571] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1168.301878][T14571] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1168.309848][T14571] Call Trace: [ 1168.313167][T14571] ? ring_buffer_read_page+0x1210/0x1210 [ 1168.318795][T14571] ? __kasan_check_write+0x14/0x20 [ 1168.323899][T14571] ? _raw_spin_lock+0x94/0xf0 [ 1168.328572][T14571] rb_advance_reader+0x2b/0x6b0 [ 1168.333590][T14571] ring_buffer_consume+0x1e6/0x350 [ 1168.338728][T14571] ? ring_buffer_iter_dropped+0x60/0x60 [ 1168.344267][T14571] ? print_trace_line+0x385/0x690 [ 1168.349297][T14571] tracing_read_pipe+0x599/0xab0 [ 1168.354224][T14571] ? s_show+0x320/0x320 [ 1168.358462][T14571] vfs_read+0x209/0xa50 [ 1168.362609][T14571] ? kernel_read+0x70/0x70 [ 1168.367020][T14571] ? __kasan_check_write+0x14/0x20 [ 1168.372121][T14571] ? mutex_lock+0x92/0xf0 [ 1168.376597][T14571] ? mutex_trylock+0xb0/0xb0 [ 1168.381239][T14571] ? __fget_files+0x2e1/0x340 [ 1168.385919][T14571] ? __fdget_pos+0x2d2/0x380 [ 1168.390512][T14571] ? ksys_read+0x70/0x260 [ 1168.394836][T14571] ksys_read+0x14a/0x260 [ 1168.399192][T14571] ? vfs_write+0xd70/0xd70 [ 1168.403622][T14571] ? __kasan_check_read+0x11/0x20 [ 1168.408638][T14571] __x64_sys_read+0x7b/0x90 [ 1168.413310][T14571] do_syscall_64+0x31/0x40 [ 1168.417814][T14571] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1168.423707][T14571] RIP: 0033:0x7f89f3ef790e [ 1168.428121][T14571] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1168.448331][T14571] RSP: 002b:00007f89f298ff68 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1168.456746][T14571] RAX: ffffffffffffffda RBX: 00007f89f29906c0 RCX: 00007f89f3ef790e [ 1168.464801][T14571] RDX: 0000000000002000 RSI: 0000200000002300 RDI: 0000000000000004 [ 1168.472880][T14571] RBP: 00007f89f3fce024 R08: 0000000000000000 R09: 0000000000000000 [ 1168.481208][T14571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1168.489171][T14571] R13: 000020000000b540 R14: 00007f89f41befa0 R15: 00007ffe4c2e0638 [ 1168.497140][T14571] ---[ end trace d63b714b86723684 ]--- [ 1168.504577][T14571] ------------[ cut here ]------------ [ 1168.510090][T14571] WARNING: CPU: 0 PID: 14571 at kernel/trace/ring_buffer.c:4348 rb_get_reader_page+0xa78/0xbf0 [ 1168.520435][T14571] Modules linked in: