last executing test programs: 15.238613772s ago: executing program 2 (id=1106): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x10, 0x1, 0x8022a}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="30000000184e8749c3aff2382bde8f9820000100000000000000080002000000000008"], 0x30}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x7, &(0x7f0000000100)={0x0, 0x989680}, 0x1, 0x4, 0x1}) creat(0x0, 0xecf86c37d53048fc) clock_gettime(0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x84}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) fsmount(0xffffffffffffffff, 0x0, 0x82) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="f38d9ca38fff48f3", 0x8}], 0x1}], 0x1, 0x40800) io_uring_enter(r0, 0x627, 0xc1040000, 0x43, 0x0, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3) setsockopt$ax25_int(r6, 0x101, 0xa, &(0x7f0000000180)=0x6, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000001000000e27f00fb000000001200000037281c018d0cf299632f1838be9932493a068b200344c9a327f988e4ddc30688ebb2c0bda3a9bdba952d96b16ef06e5958c18526171b305c603f12ee803584621550569071c3765b24163e53", @ANYRES32, @ANYBLOB="000000001100"/20, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r6], 0x50) 10.492483166s ago: executing program 4 (id=1116): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) getpid() r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) 9.331908063s ago: executing program 0 (id=1118): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffffd) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) socket$nl_netfilter(0x10, 0x3, 0xc) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0xfffffffffffffff5]}, 0x8, 0x80000) socket(0x10, 0x3, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r4, 0x8001}}, 0x48) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 9.136364028s ago: executing program 4 (id=1119): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d00000085"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x44f81}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r11}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x80c0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000006b80)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x2, 0x4002004c4, 0xffe, 0x2, 0x0, 0xfffffffffffffffd, 0x900f, 0x0, 0xd57b, 0x0, 0x7], 0x80a0000, 0x2113c0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x480d0) 8.878405977s ago: executing program 0 (id=1121): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='netdevsim0\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) 8.239200882s ago: executing program 3 (id=1122): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000100)={0x0, 0x0, 0x0}) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r5) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000600)={r8, 0x0, 0x0, 0x0, 0x3, [], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000200)={r3, r4, r8, 0x0, 0x0, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000001c0)) r9 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r9}) syz_emit_ethernet(0x82, &(0x7f0000000280)={@multicast, @local, @val={@val={0x88a8, 0x2, 0x1, 0x4}, {0x8100, 0x5, 0x1, 0x3}}, {@ipv6={0x86dd, @gre_packet={0x8, 0x6, "17fd59", 0x44, 0x2f, 0xff, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, {[], {{}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x2, {{0xa, 0x1, 0xc8, 0x2, 0x1, 0x0, 0x1, 0x5f}, 0x1, {0xfffffff8}}}, {0x8, 0x22eb, 0x3, {{0x7, 0x2, 0x1, 0x0, 0x0, 0x1, 0x6, 0x5}, 0x2, {0x4, 0x5, 0x0, 0x18, 0x0, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}}, 0x0) 8.211930317s ago: executing program 0 (id=1123): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) creat(0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0x45, 0x1488, 0xffffffffffffffff, 0x5}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x3, 0x0, 0x4, 0x0, 0x2, [{0x6, 0x0, 0x8}, {0x2, 0x4, 0x5}, {0x1, 0x4, 0x8}]}]}}, &(0x7f0000000a40)=""/276, 0x4a, 0x114, 0x1, 0x7a72}, 0x28) recvmmsg(r0, &(0x7f00000021c0), 0x5b, 0x40, 0x0) (fail_nth: 10) 7.481446509s ago: executing program 3 (id=1125): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYRESOCT=0x0, @ANYRES8, @ANYRESOCT=0x0], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000840)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000980)={0x90, &(0x7f00000003c0)=ANY=[@ANYBLOB="00ed8f170008"], 0x0, 0x0, &(0x7f0000000580)={0xc0, 0x5, 0x1, "980100702c41"}, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x5, 0x480082) r1 = syz_usb_connect(0x2, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)=ANY=[@ANYRES64=r1], &(0x7f0000000200)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf, 0x0, 0x0, 0x8, "94deb4f1", "7bdc00"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5a, 0x80, 0x20, 0x1, 0x18, 0x8000, 0x9}}}, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000000c0)={0x14, 0x0, 0x0}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x8924, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000100)={0x1, 0x0, [{0x10000, 0xc4, &(0x7f0000001840)=""/196}]}) setsockopt$packet_int(r3, 0x107, 0x13, &(0x7f0000000000)=0x1000009, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x4000004, 0x0) read$msr(r5, &(0x7f000001aa40)=""/102400, 0x19000) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x24, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x18}, @loopback}, 0xc) setsockopt$inet_mreqn(r6, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @multicast2}, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x40400, 0x0) mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x21, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}}, 0x20000010) 7.424343648s ago: executing program 4 (id=1126): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e20, 0x40010, @empty}, 0x1c) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket(0x10, 0x803, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000100)={0x4}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(0xffffffffffffffff, 0x3b8c, &(0x7f0000000c80)={0x30, 0x0, 0x1, 0x0, 0x10000, 0xffffffffffff9dce, 0xe8, 0x0}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ptrace(0x10, r4) r5 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_pidfd_open(r4, 0x0) keyctl$setperm(0x5, r5, 0x52b242d) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) ptrace$pokeuser(0x6, r4, 0x358, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 7.082860692s ago: executing program 0 (id=1127): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x104) fdatasync(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@getchain={0x6c, 0x66, 0x100, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x8, 0xf35ee23a19dc6d8a}, {0x4, 0xf}, {0x2, 0x2}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x81}, {0x8, 0xb, 0x100}, {0x8, 0xb, 0xfffffff8}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x5f4e7224}, {0x8, 0xb, 0x7ff}]}, 0x6c}}, 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$video4linux(&(0x7f00000004c0), 0x80000800000000e3, 0x203) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x2400}, {0x1, 0xfff1}, {0xd, 0xe}}}, 0x24}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x83}}}}}}}]}}, 0x0) syz_usb_control_io(r7, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000001240)={0x0, 0x3, 0x18, @string={0x18, 0x3, "234b4f0843208325c168e26da17e78d5fd143645130b"}}, 0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 6.455369949s ago: executing program 2 (id=1129): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4, 0x0, 0x500}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 5.370182329s ago: executing program 2 (id=1131): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffffd) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) socket$nl_netfilter(0x10, 0x3, 0xc) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0xfffffffffffffff5]}, 0x8, 0x80000) socket(0x10, 0x3, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r4, 0x8001}}, 0x48) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 5.310278121s ago: executing program 1 (id=1132): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$ax25(0x3, 0x2, 0x7) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) 5.256717214s ago: executing program 2 (id=1133): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000200)=@assoc_value, &(0x7f00000001c0)=0xffffffffffffffba) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ptrace$poke(0x4, 0x0, 0x0, 0x7) setrlimit(0x4, &(0x7f0000000040)={0x6, 0x5}) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0xb, 0x0) mount(&(0x7f0000000040)=@sr0, 0x0, &(0x7f0000000000)='aufs\x00', 0x1000080, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x4, 0xfffffffe, 0x717e387b, 0x40, "1ae34e06a6ffffff7f0000000040794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x94, "3eccd8000000000000000010000000040100"}) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioprio_set$pid(0x1, r2, 0x4000) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x29}}, 0x50) 4.579771786s ago: executing program 1 (id=1134): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) (async) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000080)={r6, 0x2, 0x1, "fa"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000040)={r6, 0x2}, 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000040)={r6, 0x2}, 0x8) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x5) dup(r3) (async) r7 = dup(r3) ioctl$SIOCSIFHWADDR(r7, 0x5412, &(0x7f0000002640)={'team_slave_0\x00', @random="76f64c34b99d"}) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5002000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r2, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x8850) (async) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5002000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r2, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x8850) r8 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/kexec_crash_size', 0x169a82, 0x0) sendfile(r9, r9, 0x0, 0xb) (async) sendfile(r9, r9, 0x0, 0xb) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r2, 0x8, 0x70bd27, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_MS_ADDR6={0x14, 0xc, @local}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}]}, 0x60}}, 0x8004) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x21}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x21}}, 0x0) 4.188343832s ago: executing program 1 (id=1135): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611930000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000080)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb3}}, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r2, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r2, &(0x7f0000000a80), 0x0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000040)=0x9) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)=0x7) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x800448d2, &(0x7f0000000040)) 3.966484742s ago: executing program 3 (id=1136): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x100009, 0xffffffffc2c4adcc, 0x0, 0x4, 0x0, 0x2000004, 0x0, 0x0, 0x4}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x5, 0x2, 0x3, 0x200000001, 0x10005, 0x80000001, {0x6, 0x9, 0x0, 0xff, 0x3, 0x0, 0x7fffffff, 0x57, 0x6554b836, 0xc000, 0xc9, 0x0, r3, 0x6c, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0x8, ':-(\\\xc9\x80\x00\x00\x00\xc3\x00\x00\xf39}\xd8mM\x92\x8d$\xd3\xa4a\xb6\x02E\x89\x85V\xc6\x00\x00\x00\x00\x00\x00+\x13;\x00\x00\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r4, &(0x7f0000000100)=""/134, 0x86) r5 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r5, &(0x7f0000048040)=""/102392, 0x18ff8) r6 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x81, 0x0, 0xfff, 0x8001, 0x8}, 0x14) r7 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000000080)) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r8, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3.402702288s ago: executing program 4 (id=1137): read$FUSE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x20000400) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x9, 0xfffffffffffffff5, 0xe3, 0x861f}) r3 = io_uring_setup(0x4fea, &(0x7f0000000180)={0x0, 0x816f, 0x1, 0x2, 0x3e1}) r4 = syz_io_uring_setup(0x10f, &(0x7f0000000300)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0x0, 0x0, r3}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) fcntl$getown(r0, 0x9) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x5c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, 0x3000}) io_uring_enter(r4, 0x47f5, 0x2000001, 0x0, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$dri(&(0x7f0000002e80), 0x0, 0x129040) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000000709007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000008500000050000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='rss_stat\x00', r8, 0x0, 0x2000000000000000}, 0x18) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newsa={0x14c, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9, 0x2}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffffe}, @mark={0xc, 0x15, {0x350759, 0x101}}]}, 0x14c}}, 0x0) 3.104395594s ago: executing program 1 (id=1138): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x19, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000400)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r4, &(0x7f0000000540)}, 0x20) 2.989914404s ago: executing program 2 (id=1139): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048084}, 0x4006) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x580}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x80002, 0x2, 0x3, 0x9, 0xb, 0x0, 0x0, 0x40, 0x4}}, 0x50) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x800000000000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) 2.062687232s ago: executing program 1 (id=1140): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83", 0x9e}, {0x0}, {&(0x7f00000005c0)}], 0x3}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x400, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000540)="a22caaffe37d4620d1a9427c00787b63b26c5b83ef8ce8f8fe823d77c642dd73361c1f115fdce55de92bede6e812191b9780a257fa4fb3bba896dc1a01fcc30adb201f2ee3a5c8676d6b812ec2342bd0723b7db488a027513df1870c31ffba527c5dfb132cb48cbc2e0ffcfbc12ef2db3c", 0x71}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be3176d26e449b7ad2d1c9471c13851aba1592ac", 0x9e}, {&(0x7f00000006c0)="138b9f129daf1d79da8ee1c8c74f2040f7892fe98bc2db9799488aa4bd58432fb72dee377296c6", 0x27}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995461e91d2", 0x24}], 0x5}}], 0x2, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257", 0xf15}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000500)={0x601, 0x1, &(0x7f0000000180)=[0x0], &(0x7f0000000480)=[0x2], &(0x7f0000000440)=[r7], &(0x7f0000000040), 0x0, 0x8}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e80)=ANY=[@ANYBLOB="1401162051eb1812bdcd46d291020c3f6d01010000"], 0x14}}, 0x40000) 1.920090695s ago: executing program 3 (id=1141): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41024}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x60, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005440)=[{{&(0x7f0000000000)=@x25, 0x80, &(0x7f0000000a80)=[{&(0x7f00000002c0)=""/91, 0x5b}, {&(0x7f0000000340)=""/93, 0x5d}, {&(0x7f00000004c0)=""/157, 0x9d}, {&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/231, 0xe7}, {&(0x7f0000000780)=""/230, 0xe6}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000980)=""/234, 0xea}], 0x8, &(0x7f0000000b00)=""/78, 0x4e}}, {{&(0x7f0000000b80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000000c00)=""/170, 0xaa}, {&(0x7f0000000cc0)=""/125, 0x7d}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/163, 0xa3}, {&(0x7f0000004c00)=""/43, 0x2b}], 0x5, &(0x7f0000001e80)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000002e80)=@qipcrtr, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002f00)=""/117, 0x75}, {&(0x7f0000005600)=""/68, 0x44}, {&(0x7f0000002f80)=""/158, 0x9e}, {&(0x7f0000003a40)=""/4096, 0x1000}, {&(0x7f0000003040)=""/104, 0x68}, {&(0x7f00000030c0)=""/132, 0x84}, {&(0x7f0000003180)=""/51, 0x33}], 0x7, &(0x7f0000003240)=""/12, 0xc}, 0x7f}, {{0x0, 0x0, &(0x7f0000003840)=[{&(0x7f0000003280)=""/205, 0xcd}, {&(0x7f0000003380)=""/176, 0xb0}, {&(0x7f0000003440)=""/174, 0xae}, {&(0x7f0000003500)=""/234, 0xea}, {&(0x7f0000003600)=""/65, 0x41}, {&(0x7f0000003680)=""/110, 0x6e}, {&(0x7f0000003700)=""/153, 0x99}, {&(0x7f00000037c0)=""/70, 0x46}], 0x8}, 0x8}, {{&(0x7f00000038c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, &(0x7f0000003940), 0x0, &(0x7f0000004b40)=""/149, 0x95}, 0x6}, {{&(0x7f0000003980)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000004c00)}, 0x6}, {{&(0x7f0000004c40)=@ethernet={0x0, @local}, 0x80, &(0x7f0000005340)=[{&(0x7f0000004cc0)=""/244, 0xf4}, {&(0x7f0000004dc0)=""/166, 0xa6}, {&(0x7f0000004e80)=""/82, 0x52}, {&(0x7f0000004f00)=""/134, 0x86}, {&(0x7f0000004fc0)=""/220, 0xdc}, {&(0x7f00000050c0)=""/57, 0x39}, {&(0x7f0000005100)=""/54, 0x36}, {&(0x7f0000005140)=""/146, 0x92}, {&(0x7f0000005200)=""/139, 0x8b}, {&(0x7f00000052c0)=""/68, 0x44}], 0xa, &(0x7f0000005400)=""/36, 0x24}, 0x8001}], 0x7, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000002, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a880000c68ad37600060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420000461afb9fdd672bad09dfb78c7699c74e891a0c7fffffffffffffff5000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a3200000000140000001100010000000000000000000100000a"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x84000, 0x82) open_by_handle_at(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="10000000020000000b"], 0xfe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 1.882529654s ago: executing program 4 (id=1142): r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_usb_disconnect(0xffffffffffffffff) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/uts\x00') r2 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40440) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180000008000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000c44185000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x10) fremovexattr(0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000040)={0xd0000010}) r4 = accept$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, &(0x7f00000001c0)=0x1c) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x1f, 0x6, 0x748, 0x460, 0x0, 0x460, 0x0, 0x0, 0x678, 0x678, 0x678, 0x678, 0x678, 0x6, &(0x7f0000000300), {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x208, 0x250, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@rt={{0x138}, {0x1ff, [0x7], 0x10000, 0x20, 0x0, [@rand_addr=' \x01\x00', @mcast2, @mcast1, @loopback, @local, @remote, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @private1], 0x3}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4=@rand_addr=0x64010101, 0x9, 0x6, 0xfffa}}}, {{@ipv6={@empty, @local, [0xffffff00, 0x0, 0xffffffff], [0xff000000, 0xffffffff, 0xff, 0xff], 'veth0_vlan\x00', 'bridge_slave_1\x00', {}, {}, 0x6, 0x4, 0x0, 0x34}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@dev={0xfe, 0x80, '\x00', 0x16}, 0x3a, 0x15, 0x8001}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x42}, @mcast1, [0xffffffff, 0xffffff00, 0xff], [0xff, 0x0, 0x0, 0xffffffff], 'bridge_slave_1\x00', 'ipvlan0\x00', {}, {}, 0x33, 0x6, 0x0, 0x1}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7a8) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f0000000200)={0x1, @capture={0x1000, 0x1, {0xc}, 0xfffffffe, 0x7e}}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 1.437719185s ago: executing program 0 (id=1143): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffffd) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) socket$nl_netfilter(0x10, 0x3, 0xc) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0xfffffffffffffff5]}, 0x8, 0x80000) socket(0x10, 0x3, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r4, 0x8001}}, 0x48) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.364906023s ago: executing program 2 (id=1144): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x400c004) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) socket(0x22, 0x3, 0x744) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0xfffffffffffffffc, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x1f}}}, 0xa0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) 1.348232613s ago: executing program 0 (id=1145): setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)={0x97, [0x4]}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f0000000180)={0x0, 0x6, 0x6, 0x79, '\x00', 0x80000000}) socket$inet(0x2, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) read$msr(0xffffffffffffffff, &(0x7f0000000040)=""/63, 0x3f) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) preadv(r1, &(0x7f0000001300)=[{&(0x7f0000000380)=""/200, 0xc8}], 0x1, 0x1000, 0x3f2f0fde) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f00000002c0)={0x0, 0x4, 0xfffffffe}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000340), 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 968.487773ms ago: executing program 3 (id=1146): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x13}], 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000600)={0x100000, 0x6, 0x3, 0x1, 0x40}) 951.861188ms ago: executing program 1 (id=1147): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='hybla', 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) write$sequencer(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="8105000000000000ee75f6ee4092027ce8a69e666de00c53b0f5f3f5fbc2d3b2b0ae4b0a"], 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x6}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000280)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001400b59527bd7020ffdbdf", @ANYRES32=r5, @ANYBLOB="1400020000084a6d378e5f09000000"], 0x34}, 0x1, 0x0, 0x0, 0x2004c041}, 0x400c0c0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x3ac, 0x0, 0x81, 0xfffffffb}) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x9, 0x20082) ioctl$IOC_PR_PREEMPT_ABORT(r6, 0x401870cc, 0x0) splice(r2, 0x0, r4, 0x0, 0x8001, 0xd) 778.493661ms ago: executing program 4 (id=1148): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x13, 0x17, &(0x7f0000000500)=ANY=[@ANYRES8=r3, @ANYRES32, @ANYRES8, @ANYRES8, @ANYBLOB="0000000000000000b70500000800000085000000a500000027578000040000009500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000008ec22fbb972b23f25000000000200"/27], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40081271, &(0x7f0000000980)=0x4000) mount(&(0x7f0000000680)=@nullb, &(0x7f00000006c0)='./file1\x00', &(0x7f0000000100)='ntfs3\x00', 0x800, 0x0) r6 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48) setpgid(0x0, r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000200000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', r7}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r8, 0x58, &(0x7f0000001500)}, 0x10) r9 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x901) mount(0x0, 0x0, 0x0, 0x2000, 0x0) bind$can_j1939(r9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000280)={0x1, @pix_mp={0xfffffffe, 0x0, 0x34343459, 0x0, 0x5, [{}, {0x9}, {0x7}, {}, {0x7fff, 0x10}, {0x0, 0x4}, {0x2000000}, {0x80000005}], 0x2}}) 0s ago: executing program 3 (id=1149): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0xc2, "866a4ce14d131bc8688c17e57175f191e388ac2c1de1b9b697042666b641c3046456e93a4f9adf12cd0ec7f6dd681068bd01ef948d4f981045015ae4f84cd0c1334bb020a5c6392e4faad937591b2a52007fb95053d6488560b2b0df987e1dc312903c664768d9014902d488f508f790c3e41e96ff0c98a3d0392403674fb998000914219c6ed215afbcd6dbb64273c25f03a9461654f58820a907279617bdda3d515ba3b4b1d1511000b8b2989d8a7cc356a51e256c8dc83c092b7af1670fdea482"}, &(0x7f0000000100)=0xca) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x13) r1 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x89, 0x4, 0x82, @local, @mcast1, 0x1, 0x1, 0x0, 0x8000}}) sendmmsg$inet(r1, &(0x7f0000000940)=[{{&(0x7f0000000140)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="0346f35714e24e14b1ada9f2e8f143b1120acf1d34aab1aef82797ea20443a5e1d7bf12f96af2a7c05d0e8b0109dfe2e98dc21fdc94aec5d1145fe5ab333e252caa88197e330cac6f6bb84b8ec7dd65ab8c0b566de2626e5007362bd9b922949501802b2d16c3b4c9c4d640a7a35cf7d4677b06a801505491d1b4a9dcc95ecb99aee0c58827a53e9095d2148407863f30dac80e2ca62a62708d61ad87c96221fdc8b65ca725ce00972a06d21aa7e304bbcf49b70ef5723", 0xb7}, {&(0x7f0000000240)="4a5dde30ce6ad006aa9b97bc81a1002376962e95c24419", 0x17}], 0x2, &(0x7f0000000380)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xbcf7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x68}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000400)="65f7748ebda3fd0d9c58362890e16dbab6a2719af312c1d4c6e652974005a326fa63299160623e9c671baef12527df9e02a1db891d1e4d8860b816cd97921b41f2380993f22d41232ad6d2e2a2f2fca2fa5ef270ae6cb5a283e86fee56076f415c1d153ee4b9f63477a0e760dad77a1a6bac4d9916227d86cfabcfbdcc83b68a67e7479befa9a776b0c99caa0f8f1066e8edcabc2bd422c909da25c098021db84c11003cbb0a82cca0e4e695a327789bacb408e61e14f8f74055803e1bf7e62bf877f0a9ba0cb4e43d90844be38465f7fe91054f38ea66b59c30d16ee593013fb6db84783139055fe033206272c913791c", 0xf1}, {&(0x7f0000000500)="b7d91ac3bf5e96ad392e1f7ddda60800ca4704120457843a931955acbce5bceeb3feb14925d41b2539e1997000a9fa867c4227728170d83b8984b6b530ca815d3c111036c4ff05cf355f85fd19f4d17238489a53594968276b96c1b31d1435d2dddf8b5268293185168445c74b7bf6d6a07832ab5d07a15c6b2d6227011184f3640a9ef7a7d95e82f20321cb336e5f1f05516e19d433b64af39c01fc011751c8b0f5f2c492fb676940fc48aa54f4454d377ebd2b262a236538fc", 0xba}, {&(0x7f00000005c0)="cdf4cb9f62328aa3bbbc622cc5465427117f7a43ff1d6b98ad772abd4c43a32093e7e000dee635fb87ee627bb1ee35fda92c9d0bba8b66d913c6ff03a8d71aaf30b37064fecd51a2a59d22d7a5260fea02ae249112ab9d2e4ebdb7b8aee423ac275c6b6e98", 0x65}, {&(0x7f0000000640)="2e900178f3ff29d7cecc4bb1b4ea", 0xe}, {&(0x7f0000000680)="b9f674e0fbeb78b5848e6db6b6cdcba7d877d4113940fb46fed6164c9aee7212e759c92bc075f3e1fc1941b751b7c49f0b2f70cc8726ab92a2f376dbec27ab9f51c267833efb69bc15eae8614df891b09fe2610f535c8b2aa3e556a2a7061356cb83a9d1a1236c0ef77d3d53dacfd1ea014edc0eddf4340aaa44f6f2181c9b64de0a", 0x82}, {&(0x7f0000000740)="43094664f4b9ec21411496197a6da73e52487b0bd8859596aa2b8b1b963aa6e0b20175aa959dc085ed16686a43ae73d6aa8a682fd789a75597ff9832fef28b17d623c86557722d849541fed35f012160242cb06c6f7be7cb6e35893b41494f41d2c3f2e9cd398a0aebf3af8dd8af9ed9dd9a9cd01777237c6e2f92797385deeafebadd1e0535176a86409cf19f8a761fb2c7fc2db6c872169600eb094a40", 0x9e}, {&(0x7f0000000800)="da2001b6af310f594c08c02187e8a89d1bfbe2c66145c9560e48da9e48c679440c678156f2272511fbc6c58ba401f43fa56342922c0fd4ce686aec286718c484260c88dff667d96b06182500e32fcebb173d8030c6", 0x55}], 0x7, &(0x7f0000000900)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4b1d}}], 0x30}}], 0x2, 0x24008001) clock_gettime(0x0, &(0x7f00000009c0)={0x0, 0x0}) clock_nanosleep(0x6, 0x1, &(0x7f0000000a00)={r3, r4+10000000}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000a40)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r5 = openat(0xffffffffffffffff, &(0x7f0000000e40)='./file0\x00', 0x311000, 0x140) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000e80)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r5, 0x3ba0, &(0x7f0000000ec0)={0x48, 0x6, r6}) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000f40)=0x0) sched_rr_get_interval(r7, &(0x7f0000000f80)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f00000032c0)={{0x1, 0x1, 0x18, r5, {0xee01, 0xee00}}, './file0\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f0000003300)='./file0\x00', &(0x7f0000003340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) lstat(&(0x7f0000003440)='./file0\x00', &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getegid() getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000003640)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @local}}, 0x0, @in=@multicast1}}, &(0x7f0000003740)=0xe8) r13 = getegid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003780)={0x0, 0x0}, &(0x7f00000037c0)=0xc) read$FUSE(r5, &(0x7f0000003800)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lstat(&(0x7f0000005840)='./file0\x00', &(0x7f0000005880)={0x0, 0x0, 0x0, 0x0, 0x0}) r17 = getuid() read$FUSE(r5, &(0x7f0000005900)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000007c00)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f0000007d40)={0x1, 0xffffffff, {0xffffffffffffffff}, {0xee00}, 0x1, 0x4}) getgroups(0x8, &(0x7f0000007d80)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xee01, 0xee00, 0xffffffffffffffff, 0x0]) syz_fuse_handle_req(r5, &(0x7f0000000fc0)="55c57866515f92e4d8849f4a539248ef5113d8b2320adc37ef94b5bd3a6c9fec6cf429f2b048e3dda07541e2c03aa059c0ca25e29f2b90554b7eee72ee2ca3a4c19d1457c2e7188e6bd3246a82386cc46d8dab5d536310a9f020988f5277cd9c6ea7d4e90667bae5292fe8995493fb2b5a6a06b2c5128a2aa0954f0eb7de3c7fde2119ded104c1dbac44221c8f6cbda5a5e36b2126d2e598074c71715daf997d3fb22f5dcf89f6716e40d9ded1b39a499440fcf800a168589efa4489260ee743a5de8ed80aec52430c0b03ae89bffb9dcc62a05906784af55710281ce7813c4a37b10c3dec574457bf426c679d16a786bd7f4fe9e97a8104f94278df572f3238bb6842567e1cd346c2ed35e26f18a949a6f19690dd74db01146bfe13cf317d46a92e31dde84a7562788c865448b08b51b36922e0bb225f7add8b7e8c22a8c5f633e1cbdb92d03aeaa2543e0ff9d7d541c0bd80dbb908b16e9db4aec3b349b1b1d0d50e014f7a8822a4b7e62433536c0d41d1e96616153b894d941c11006c587f5266f3e6a92decf531b9bb4ff1e7adf7971ba24aa4a9abf6f4e6568e012c2fb8ae10c0f445a81767ded4376500feb4833c3fd035cabb2176ba25335e86a082daad62af6cdb242fa7dc28085123827ffa6506723fbf16c7ab64d9be618e3a2fd35ea992802681e53288be119b1622b7a8159fc6a9131cb0ee1724a678c495626d77ddfa5bbb97ecf12dec2ee0e6e8d39b1cfdd56e23d51276df2dc88006625aa3ba296e67853bcc53f73260f338434566ee8fa85b9da9c8b9fc80287c9baa415a342ed6b59651e718b67c9a5f7d899f3a4fbc265ea4eda07992ac14b7df65e32a063823d13a4ced89f33dfe0155fc3803c5a987410c2cb278b75a752090d340d8026bc49aaff9f2dcff8f76dc4ba1c6194a774992113a8237731f2ba97b958c6f95ab736432bc3716c91851d9c66ef19c45596d135755510888776389ddce9a222a1029d69c84a04aa5a3be87f282ccdd45b415757f654fd03d2b36c03060015e1b7ee5444481f273ef87f54dce4bdfd5b7cacab9520c1aec7ffa306f4bafa0f75b45fc9533098d1f2ff103772c5edff7ae74d6fbfd24ef8aeb727554eece2b797aabd6e05b75181e82e2dc523f010026055a8274e0d0312463204f4874758e7c17facd94b2e20188fb68e7c5924330feda8317bf2f1756e15a2f5cf28fb0c25aa29112a57b77336366c88f83cf88ae891b9cc80146154d01f4f150ce32d343e131f7876f8b818e2a043daebdd01c25f342244b7fbd0e73d0677e1c99851198f9fa1553db634c24258bb12f248151d64c2c15872c6ce32bd4cb78dc04227820c171545bbd8ee078f6bf6e9b97dd49dbdcf314773fecd80deedfc2b5bff44b011e44389abea26b5a8089f87b27a7de579879bdc88aedef77e6594515f77afd038de577be10616a73f9c1b65f306dff32dd372c7bc751547f4844624f8917ae398c595ee1b1202cccccb2f4c499d76ec8907fedeb95f722207df741446a8c6fd55ed098daa9f6c503bae375bb656b2c1ea41cdea4e0b063d118ada1e1ac5bf5b0a7dbd4ded3571b0984cd880f43da624bdf587800357a8dee12902f4995e6292b68b28a034e3c1269453455e5891177393171d9522419543a8aab2cb9496711765a2219d9e2d1a4262a4d02dd9922254ce7b62173f7c803c5b6d2a0690e8a647bdd8550e7c178596d1e12c97931005a7be56bf99667e940592f50358e2b6b1d22dd47b8ae2639dfb40d7e559f0160ba644b968dcaacf825a3ce9fb5a2f7bc344eed44ed22fb47250641ffaa1edb656b9a49e7538b1665b372fc7025403dfe08215ced6002174bf19e25ec02ea410ce38c7e416fd360176ffd09f8e9b4f5f9d8cce30f65312f16e9950f04ed8f13b56b458c299b512db511b282b413e506140b237aea1974d7ea3e83000ab0180d0b3aec5f1cb2d0dcf846a6f5f642ddfd1106dcc68b2e595bab93ab71f56c818897e65030c335ffe41f6e37cd65839e59ffa0f4512c3e6e05071adc36f393f24c8d970f50dd3ad909fa27858159aaf46c4ae580ef79c9c6ef6ffb662c7e6123399638ee967a4d512dd7c65b62106297ab05433cacdcf26921e9786b5e6dfef25e479111640293386b35adb01c8b9aef2412f8b35e61e9692ef91d4b2f7fceda234893807b03cb198fde72fad1b9dbaf4054852d0c9e42111af7dea9326a0cbd1d86dae41571659feef059e07de7a1c1de8c0d02d0b7dc2d75cc72f0860174115cd3517146a1d8ef1f1f8dd0ef5519e50911b9f92b04e8abb398290a73391444520647e85aa665e0c52b6a86c763593a2fbc44c746bdfd63f008c41359e9bbdcb46bd9975bb377c4507ecb11a3b23ad70df86c4521c99ddff6a923281b4321e909861d44112fd01f1f69d83389d7d53f4d413d3feb25bc0d302503ab520968edcecf95c4d96779ff417c5d0ef75cc7f70a62c2a1a1217e9c8e40410b90b8f5eca9233f74ae862f1783762403168a26485a70beeb337ddc75090f5cd7fd1e6834114a5ee06a80d5e13231bfd31dcfe9dd6487c37005cbea8d92e84c910c9a320daf9bcf6b980634aafa5a500df968f937283ba9b72bcd1f8cd8cea5665ed386a22298f159985e8188269b6f408f3ca36bcd90213eb633c3d3364425cfd09a74f54a75ac02e07e90ff11660b257a997951435b27a4d6bba87d2cb7ca9072ca4e9b461348c309b5905e7b6005cd0b429eb0d58d38bda6c1e5a7da3a14db1591414d8c793ef96fbc1acb95075ba6dc2f2828fd14aa972e2aa3a8095decd93d3aefe24a882e9d5b9df6980577cbf8a295e766ffd5ab5c4f08c1d5aad427ce0364dd508ef1b3f364d62062bbfc780e7114564feb491890a0edf5341e9d525af7a97d73d5f17f0fc86e56e56f3194dd31a713d47ef7cb4d593346c4502e98ec527ef322739d765aeb531d18655844afa16f32de13f3d87c478b6f569473c6ae7af75a577fb94d0dbabf058bc1867ec1f1f8c2abb51a4c50bb82c7b08244e69fc05e16c7b461119c42824c53b2a83ff788ac49b44ad0a3b8a0238faaf6ef0f3d90865696d81d3f3c153c5a976d86974877148c2c285415197ae5e3062aed508ccf7f53fb8427ff7e5f7eb004c6680b03302f764b5f457369fd5768ce63be11cfdff1737b2e44fd053d940b69d474e4b33c97741f9f8e50745a5901e7a1ca8a25e25d719cd2d86c070fc7cc125375e5cb813d3beb49fb36d4bc02b6160bdf25935192fd5fd5098e29c0710c149df6d1dc32cce9cbb513316b35857b870a73dde7e79a95e1a414bba4b5d3328740ae3c8f481a76fd85353e177b69efac59a664d467965bdc015267860377a2f2ccb876dc39a13fb5c83ea5808b96340e9a1d5d7be05a2dd4f613fbb6d09063f9e14117036fa93b7b4f78d217682d0fdf3cfe3a4b91babaf9501a3b3cbed4cd8a0547fd09a689be7fd281d56b0935c8336512ecf61cfeb7aec41aaeae77fc6d0aa19a2de0c872eb218ca666b5b12352e649ec37dc9da425c0c00b4854e88d5779356ee48b685843b7d656e9d4c0e61137209e04577e8b33bb33e852592aebb77d47a7979668800d472a0a9612c8f46ea74d6750fb5cc28bc86487f4a591d7ce4b1d678502c27abbfa747fa0bd54631a16728acf0e1722af3354e3b08d092b1e81fed66b7f7dce0094b74f700bad76a8dd5b687d3ff4256b04ef3929a3ee9ccbaba9d1b5d5e8bde547251ae20873f8acc0901f136d86b61514a6474d6defe27ba4402ffb8e23f32eabcbc16154ea1654b4277a2e6a8262ccaf18c5d2bd6a8645753880aedbbbc499cdec289683c72e2a61fdcbf6780000e13e381f8f902a0fc08ab9e3d4deefdeaa6cc9116a69303eacf04e8839ed3fdf399f839d42a838fe76048f89e3c089e6596f9064c3e87777384e6944ac7512bfef1bd51592fe101b7d7ebdb8e77c6c0ab75c0f4801cc3e0df1e26a97336616bc7c926f2988f59178f93410596b812ad20dea0dd8f1f1fdf9a5320a2e3764f336f5e93f7184de515fcdee8a573d0ca68b424fc2a4580ae60b12bf4b89fb4eddef6bd26d23577fd27989fc524133fe7c2f10b5ff250de5a5a4b2d78ace640668e51dba50b443a27a800d4ab661fc453a6f82ca27d8b383f36a6985181d17e229b9d5d3c0876617281d9e956263097685f86051e557dc4e265a329f1b9c55157117a09a2054ae9afa6921f71a74a8301a40b6a97cdea01b265f1e5aa8175fb5381cb3a080c4c83afa94388e32668ca8977a5a881855b5abd547ddb203c9d5757b43dfa989cba082bd45023d95674d52fed13ec29dab819c33d94ee391aaae037a23b87c76bdf779c9ac17937c9878fcd901de0838d5df3918e35f4321483508265093cef5552cd97f5573daa0eebaa0bd36edcb3f284645c46296ee8d8eafbb97d947753714fe82f69d885a66e31f64cfeb3695dc03361f744021d664a33c8fc107f7753cf3cb9fbc74f0cf3e0fd0278123e0913af071970694967fd486701367e9a3d6aed865bdae11ec685c849d94b1294d8c223092138dd1fafafde0a3fe9cf0fd4f8a0efacbeaf206db70d0723ed3565ec6b4035c2293a62ab1162de22fe72f555cf1ca4c8ffda1045e8aa3a683a867c87f61e219b2514f48600860d00e0b632a734eeb1320311bbd1532b1a490391411ccd2204f68b0e8a700088cdf4e53df0f77e12c3bacabf36308c766899ee2258f828de02727b8759c661cb686b7dc13a161a67b7e17378ee8efcd0408beef7fc02333b93ea450b7a3dc1f4d63cc5fad52c2e1d227566042e154a6740a1bc64e3556be39e13d90e87ff3f19a4a35204b7da6bf64f8c8986e75312fcf256762cff1054e2de5c99861a6fafe7674c45d760d2003bfcfc2f7d48221d71193179faa39657b06e24bc8c1d138f157d27a831cfbbab07ab0658d17cd4d3b31de1f2dada5fc7598f4a0709cc990aad5d7da23f011af7af8a6d7a3a0f0e11312731d9e69fa7d35a44d3ffa67271c7ca185cf3c7e3a8806c7f942cfefe4abc412d756076cb510ca2b393a7a64bad9b187c615a7d9af322081ba49d2d1dfc175b0bcf98f09898b558148610cca4e0b20271bc2ba96c50f47551a21bbf104cecca85f1d32369cb9b75b26535f1440ebb8a2798302cf2949efd43bfbe953f539436da0629d9d6fef6d626f5a2faf2573ff5578853e7fcbab14b5b3abe9a87cfc8b6a962336fe54b57b9f9e11acf8b2967964d84bb7f59ee75b7a07651e0b3c46e9b81631fb4b414d48490493258ec210af86cd2af1e61f707a7988d9e9501b381c10bba166bab2d8bee69a24a6aeed32f078c1a0272523e2f04037b014606c08a07afc58fe04814ca0ec90ac6b3920c4678426db07423fa8559a62fc51e7cf83a0193637f88a0b5db999db8713cae9e28b6710734704bc3f1ec5f6242c813f2ba923c69a6c05a064357da44eeffc83f6ef57dfa329e4667a56a11046031028d9aec6aac429831527f161086b7004510c2f9db76a805caaeaa5ca7c586f1c2a739c5d32b398149bfb6a3f3cece39153fdc522bcf342ad14501ca90e1b4e93b7ecd988f45aaace01588c3cdc6b21860e98b211217337d860fa30f9b7d59f94e77f9b8123c8ca7719d1a0991f581dc2e85c944c8575df4d0e221f6f9f65d506e26984baa19379263dddaa5cb618c169440dd26646dcece360723db7af32931be01c0215df236f192a7110d60ad012ba5a6a7e153f5acf0b24840b6faf8781ee5af7d6fb9bc58540a8bbae38e62abe221fc0db7294b953f445bbd769ff689ee117251469873e20ed0131d8136566c1f611e90081feea8a7eb51b5cdb5447eee0dd960863747e0d23619b1fa4e00bad2b2da57b3496e742640b1cefeba3d85a55af151f06f3bfd7356c7515de04f6bc2af6dbfb6373d98d4746bb7d25880ebdc353c8ae821c4bfdcb396ad2640a1ae59d9ed813f44aaef070dd48aea65d985c2555da40112e53aad3921756574d16eae080a02114052697f4c109a5db9508ab12fb2bc934af23134e3c7c858ecacf14fa79e2bffd3fe01244d251925d07a0c13d66cf77698a7dda4199db11dbc85b2b45b25981db6097180d0086eb173b28db4f01432395463aa510586dcd1002d41543fe0a7ea4258caba4b023353711d07bda5a3cd19714fb7306cc03a2718ea5178b13079dd50aae6343cff27210c37ac72efeb264fcdafcee0cca5507ec88bf800fa5451b2e3e7bc14dccb63681a132f27dafcdbeb16b8e714dc2c5b5cb72b6a244383a7d2f793ac493758b3a0c033077fc55a0ffc1fde0df2dab7c382173780b41b942208e25463063468f0be3aa0e2b0e764d9ebeb974320698cfaab612ce9dae328477f87cafb054bd37e1d2afbd3314541cfd53c89e3b32f02b48e2c7799aff10c14e8628f1d0289f592594a91962cce7536ab357eaae149d5e8d6fc82926cfd518e098dcc1553a3bcad5c9b068ef12c44ddba5a32b0f32dea0200a6f59eac3ab9690a80a2687b33378dd6d75d7dbf8ad83c41f379fb3e8825b7fec50d23abfe72da3177301ded4790aba51a421c1f7a8151d7cf879c78eb4e0c87ce0d63421987dc7a356a9081390d6c4b67409aedb077b40b6f4c3bc69087aef1dac5f54123e8b40536bbf83b6099a2eb4331097b9694ca4046d9a28c6c44e9e9f72c52689e65521fdab885e944808578d686258e9d7c2a5950d336991ff6634ecee583a58b3f18134a5fbd93d2287ba4d8e6c234cc3518a6bb754e41cc9d216e6c96ce729f04f80712d55e682ee6d50d0f1853cedc8be436bd125bd099271be30af8fb601a4fb47b562485a8c5d4b05eb08254e7ca9162a0fec8694e752922122df9b496fb2e662e1cb3a1fd03b847cb5131b6be6ef75ca3fcb1d74c42fb807a83d89d254da6c8004ff4ae4863a15b8878c110fa08e5f962d944e4278af8be583adcf67735129f07d141186c714a0f804a4bc253664bc120edefbba61805ee6c68b894cace6851f66439f686d8c3db200ee2739af4e0f22544edfc650baac0cbd5a4b9cabc10721aeb2d1def8b8365e621a39f3253c4b52fcfa9a9429ea50f5df4de971fd2ff2f1e411ce80354836e7d51ee0d5e92671a3edc317499c02d8522d0430b15c87408004a67be75aa803de191641693dc9ef117e510d8392fe278ec449fcc6f62fe84d69b1018904999d54693eda9d2c4e43b90129944ef25b070217baa5d38000210ea7be9cda511e3365d1df13af9d8cb0392b7f066d0ffc8366432fad1a7ba73dfbf3319c46141e544cb1c19f55baa74420d8eead5f81e5c88581b0b3e0e5b96ff872efea887d42845496ec9ce22cc12dce94a92343656835ab685d8f80d0ccf5641d3465afedd95ecc5c9e6681fa30aba55706f687ebc80c2902d228e721dcf12795552db33f5a75feb1df1b4344c1de841a287a5f93d881b33f384e5b8ca304efa8a602ad24ffae0769e8fbc4787970a9e5a7cd3888b03753933573f2147466c50eac47ce5336318d863d9cea1ba82c45ee9ece41aca847a351df3dcb5092ebedbc06b0a1cc9a55b4f626a1e69eb8d57d5a9c1b93896acd8a43c17833501ed0785ffc03d2717a16549084ddf297d28b8dc5fba3b9a42435192f3dc73d9fed0d22678065885b7d4d5457c96b9ae23aeba9cd19efa6d885dc85fb4177a1fab6effa8220493abccdeab38da6ff2f8afbe47fe4f983d1da1063a73431350c9512230e9acec9f47feae4eabf83c97670459735303ba92adea6e10609e671bb5c66b0afa4a2ea7dc1008094b614e2c97681731fbbe498a563ca3ff8ab81468e946db25c982baf427433d18558fb5d85c048b612cda460632e83e67592f235a8abfe99d6ec84103ac4c5623841bb6f23412397bb13ee729888ff42eee7d2da47ab22c9dbf7bf7dc6fae306a9bd8bd263089be5e8e7569ad98c1c8f3502e0979f1591aab98f281c51dcc052a3a824976259c2c2be3c77469fd549cd4459c1353a7ad8538f3341e3fe61a7034e3071a704078ffe8b737404f786830b119d549062cacb87545acea3f43f76da45c4d6dea4f03d70f023176f3c95c3cf016d337a8030ac098c3e81d4d5f00e76348747e0d399464c4e8ea03cd8f0035128196d9e451dae418a67cc81bd4833f293c7a93c2c63a086899e52016c628a85024569f4c783e579e50ea66d15e7e81fd6e548637250c13b4605bb6f14aaa9df39e3e77c2e51b5add44733534e3d8c4f4214f8742fd856a3f0dde30cfb02d1ef650a6aa290ff324b2d1140a1b2f2fdfdf3cd02151e0889a6e403721f109f7b9645e20ce75e070c8a8e8eea04bfd93a23f91dfda41018853b8f615c61a5021413e6d81c16abd7bf87d16a834599d506d65482f5ab51e2a61d412e02838fa6a94b552d6e3cf797f37cba912416d092dc3702373f3a2f1b9f49e1f176622c5e0d001d073d092fc2c1b5cfed27e9e0b6ac1860864b261152bb3acf88e13a78fa2528a5724f8580c0a668b3cff42997563e58a9f18507807f09570ea457725a4324b9eed43f4a36e2529b09a9e78cbd394c3d13a944997fc268655edf927747264b8f53071a54f98474cfd615ceafefff8e949ebcad5dec74e9ebdd0ff05d32f41f93592886b3d19689064893c760cefc8366a579ed34181272520711a9e6047c32f6a8741491a98bbae53e10b2b493437001ee414092a7a7bd1f5832ef4d3242bfafb5ec53a6500eb15c28147197256b644c55a2473f58cf6e7b9bbfdd1bcd9918f5bd265c3c5674ac811501abc87d72ad5309e100d245927ddb64112bfda2ed221139e2cfdf50c1c558d80a0ec73fecb1b0a9429f9f62f1857ff14733c6be2984f07122bb85a0e9a54a6e116be09c1ffe74591619538d0fbe31dc27d4ecb01a614ff6fd82e8d24b075db2dc474bb2d01d6a7dc4b2e33b735243be2019232281094eab4723c5c92cccf4a3dfb36868569c80179be8eeed3fd1c25e7751a7a0f250b6ad0b5bf27b9bb57352aa91aea566e7b25a0264b216721c12a49b9433c2588286ab0f6eb4b7fe8c5860ad7ebfceec9b08dbf0d886e16ac701ebfa7fc75e3c23a9e4d6be6ee35d5491668b863e8bbf9202c4ae61837ea6b1a2390c216d9af75aca57c044d83f8b1a9b8cdc608f0ecb960cc3c03b7a45df1a90858720bb68f808f33516c85fd9511d0b6a4e16ead7dd111b2f3787dff8d6fc55b9346bb3ca53009888c6594b77227956ea758ccd9cc500d87267cd0d674706e7787094fb86456b54a2c75310eb808c79c2013ea47e8d5264873538b1037195e84f283f74aabfd13b72bacde2a6fc292231e609f9dacf9a69d4f66e351784669b7c851a2b638e7f42f3662068ae94a8849252a0e9fdde4bf9a83313db7284f2c317a91debf1ca1fd586994d9b94690d26bc8b28526d0f96962ff0a8ed771f63ea37f225c6e51a7cef10f645d10b553a9d16b9aa6fc6edd1c2669134abe2cc4832a157e8b932aa52eb2b4a61321908acfa35016cf06a1d5d004344f45deab1dd21ad35c2650c40c13f81d751e405ffc559a0373bb4ffd8f9f73576a870069770763e5a9c492d968dc70882ddd8eeaa33256a2bcc911e2ea0563acf05b11ae59d1515c7905a66b5bbbdfecea3248113c91be82439116d33997435a39998a3685cf18aeefee192a19e8c4757158872c9ca6df35ef07f615b6f7b7d115930d42b7b1b6965adc8225ec00b8c907c0f1fbdcfd4ace865b64b6103d8580cbaae786dc685ac663e51045f2e41f62a1ce52779e2a4a05ef4d0bc0f349d99397d880fe7adcc46d5af4ad3765d41dd53b5721a431407caea5b8d1c829a938af8e43311dc18991468614a6116a47fcec184af4697409add33058e20195cadee90fc78a4361b5195ca342f49eca4090fb1f9ac5b760a3dce2bf49151a8499d30595e334fcd01b05420fe9af12282decdf3e48ccd5b28d601c4982708bf99517569065c7ea04c6c318c99668979f9f7167ea7443c35812af176579e26fdc17e7d3949e8049ca44ea309dfa10a7627cf8bfe0273eac173c640a0d8d5bea4bdcec4cf370d5f6f1e84a25f11bad261f3f841d75cd0524d816690f6334a8e22363372599de45625a4484441e3ebfcb6b5a59fac1da52e05e68886ea0bbdde57c4b6762fdb1f57bc6232cddfd39e8f8d4ba757671b23853809deb24fcf891a6de031384c88cdf780de918ce416be1c9cc48df9ab6193c7ba61abebb5515f28ac0f4cb2e29df634395a5844fb1ff75840efe3473c2b91e1b15cd8dcbd1ca23edf82d3f9b89f70ccbf614230f4f1daabcd975993762b6a898a6b176afe8fc488c2e5e870019fc758168eca2eea7ecbd25babc49bd79b1f652b9a826e9d7c0384e7793c3c0bdc92f619562e5fb4db64dfe73d4356cf1e4ee8c9f54486debede79046e5c45336f090a5a37b120dce9056c4b6bc550a1a725b7929488af6ef130e973b82ec7478877b6f063972d205099ff49e03402167e1ef820418d6c7e52501f952beb483945c10e8af6717785cb9e5e7de30b0d8cb84ee8222a5590bd5e34faff09c9b8b197ef4f015373445f18f2e7da796cc1b55ba78ac6558b79f19b61201f741d9ab359da008d3f0d112a0756be57ee0677cec8c56f17ddfab739cbdb078ddd881dc4c53a788e7da2ad8c07f0189c216026af2bb9b3e0c62b2d8b820e5c4561225278a93c47a1237f7fcc48f1db2c41b3aaf4b1e55e99b16bfd34799ee52e089955984f3f55807c2f4ca3cdc6ef28f088ee35b737080157255a54452c0c28856d9cb5036d1cea7a49648479af01fce23b5029bf3d6432313976b904f2c5069ce12e57fe26c604ffc61549d47aa9e26bcfac6f8bc4ac381a540d85bf7797c1c85e6e4bff82ba9c6ee4974b1f5dc74664b6ea4bac2f8282513611505b8a421b4ba7db449917be06a6ccb5a2783195eef74aa01582e93dd067e46977aaa6151d0decc65e99b1cd2f0e99cc5cdd9718d5c513c9b85987dfe716c5f81de8e6ad830d653553ee1f82d249abda8ad75a69523434f039e74a73826d2ff27d15225ef8cd5aacaf7c223a92715210434a9eaa21d35acdb30b71f6a94d0f35d12b719eea79f49548ebe61eb9f1f5661d2bd1dfd4124fd5802930f1b25859ec69450ca572fbea408da683f7694387194b2ff1faa48218e3c81f8cf88701e548f3490271e7e4523deff01853f2fd6024f584d74d70cb37b9ca76635160866d64914c5861221fa7da890282de03667a09e8e99e5fd4041f2e8c99e84bb0e0f4c3552a996135a3a9e95954b68aba347213fb55c7d5aee19c49826a50a9538f563ba6d262a44e1cbf91288d38d9a0689505ba10a9f0f5520f03447d92d10fbd7a181fadfd2c44c10e4d0e796812d5588e4ac4bb4664908f1af1eda1d641ac28d96939bed25a721bede58729364bc7f6b18f0a6ffcfcd7658f0f085707e88f1eeb44aba56abe1e3e6d0e278e0cff36b65e393d27eac88cf1f0c35d0d5bfdfcb3a92e32f8325fbc5d2f149abba2bf6e5406e5f45a5ea8c7d322996b475a64bd9571139b5a8b375bc7d4918d05672e1b0681b190e5242eb39a8f47efd44fb1", 0x2000, &(0x7f0000007f00)={&(0x7f0000002fc0)={0x50, 0x0, 0x6, {0x7, 0x2b, 0xde5, 0x10000000, 0x800, 0x1, 0x3, 0x7, 0x0, 0x0, 0x100, 0x3}}, &(0x7f0000003040)={0x18, 0x0, 0x0, {0xffffffffffffffff}}, &(0x7f0000003080)={0x18, 0xfffffffffffffff5, 0x10000, {0x2}}, &(0x7f00000030c0)={0x18, 0x0, 0x1, {0x3}}, &(0x7f0000003100)={0x18, 0xfffffffffffffffe, 0x7, {0x101}}, &(0x7f0000003140)={0x28, 0x0, 0x7f, {{0xfffffffffffffffd, 0x9, 0x0, r7}}}, &(0x7f0000003180)={0x60, 0x0, 0x4, {{0x6, 0x400, 0xa28, 0x1, 0x7, 0x75, 0x1, 0x9}}}, &(0x7f0000003200)={0x18, 0x0, 0xd6, {0x7}}, &(0x7f0000003240)={0x14, 0x0, 0x1, {']:{\x00'}}, &(0x7f0000003280)={0x20, 0x0, 0x0, {0x0, 0xf}}, &(0x7f00000033c0)={0x78, 0xffffffffffffffda, 0x391, {0x10000, 0x5, 0x0, {0x1, 0x81, 0x7, 0x4, 0x401, 0x8, 0xe, 0x9, 0xb, 0x4000, 0x9, r8, r9, 0x5b06e83b, 0x7}}}, &(0x7f0000003500)={0x90, 0x0, 0x3a40687e, {0x1, 0x2, 0x6549, 0x7, 0x3, 0xc, {0x6, 0x2, 0x3, 0x3, 0x7, 0x9, 0xe, 0x8001, 0x9, 0x6000, 0x15b, r10, r11, 0x6, 0x6}}}, &(0x7f00000035c0)={0x48, 0xffffffffffffffda, 0x6, [{0x4, 0x8, 0x1, 0x7, '@'}, {0x5, 0x2912, 0x0, 0xffffff73}]}, &(0x7f0000007940)={0x290, 0x0, 0x2, [{{0x4, 0x0, 0x1, 0x1, 0x40, 0x2, {0x0, 0x7, 0x0, 0x3, 0x1ff, 0xdcd2, 0x9, 0x0, 0x6, 0x8000, 0x6, r12, r13, 0x6, 0xffffffff}}, {0x6, 0x4, 0x8, 0x6, 'ip6gre0\x00'}}, {{0x3, 0x2, 0x3, 0x1, 0x5, 0x401, {0x5, 0x7, 0xf743, 0x7, 0x4, 0x8000, 0xfffffff0, 0x0, 0x3, 0x2000, 0x10, r14, r15, 0x7, 0xffffc4b1}}, {0x3, 0x3ff, 0x8, 0x0, 'ip6gre0\x00'}}, {{0x3, 0x3, 0x7, 0xffffffffffffff01, 0x1, 0x40, {0x2, 0x9c23, 0x3, 0x6, 0x7, 0xe, 0x6, 0x5, 0x3, 0x0, 0xc0, r16, 0xee01, 0x6, 0xc8}}, {0x0, 0x800, 0x2, 0x1, '^-'}}, {{0x6, 0x1, 0xdd3, 0x8, 0x99, 0x8, {0x5, 0x7, 0x10, 0x8, 0x1, 0xe, 0x4, 0xff, 0xff, 0xa000, 0x401, r17, r18, 0x4a, 0x7fff}}, {0x289, 0xd, 0x2, 0x27aa, ':['}}]}, &(0x7f0000007c40)={0xa0, 0xfffffffffffffff5, 0x2, {{0x1, 0x3, 0x81, 0x61, 0xffff, 0x6d, {0x3, 0x80000000, 0x3ee2, 0x1, 0x0, 0x6, 0x7ff, 0x1, 0x4, 0x2000, 0x36, r19, 0xee01, 0x1, 0x7}}, {0x0, 0x1a}}}, &(0x7f0000007d00)={0x20, 0xfffffffffffffff5, 0x6, {0x6, 0x4, 0x7fffffff, 0x8000}}, &(0x7f0000007dc0)={0x130, 0x0, 0x7, {0x6, 0x6, 0x0, '\x00', {0x1, 0x5, 0x7, 0x7, r20, r21, 0x1000, '\x00', 0x3, 0x7, 0x400, 0x7, {0x100000000, 0x8}, {0xfe, 0x7}, {0xe621, 0x7}, {0x401}, 0x9, 0x5, 0x8, 0x101}}}}) openat(0xffffffffffffffff, &(0x7f0000007fc0)='./file0\x00', 0x82801, 0x118) kernel console output (not intermixed with test programs): [ T8510] FAULT_INJECTION: forcing a failure. [ 283.943467][ T8510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.149808][ T5950] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 284.200171][ T8510] CPU: 0 UID: 0 PID: 8510 Comm: syz.1.680 Not tainted syzkaller #0 PREEMPT(full) [ 284.200200][ T8510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 284.200210][ T8510] Call Trace: [ 284.200217][ T8510] [ 284.200225][ T8510] dump_stack_lvl+0x16c/0x1f0 [ 284.200261][ T8510] should_fail_ex+0x512/0x640 [ 284.200289][ T8510] _copy_from_user+0x2e/0xd0 [ 284.200314][ T8510] wext_handle_ioctl+0xc2/0x2a0 [ 284.200335][ T8510] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 284.200360][ T8510] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 284.200389][ T8510] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 284.200416][ T8510] sock_ioctl+0x3a1/0x6b0 [ 284.200438][ T8510] ? __pfx_sock_ioctl+0x10/0x10 [ 284.200455][ T8510] ? hook_file_ioctl_common+0x145/0x410 [ 284.200489][ T8510] ? selinux_file_ioctl+0x180/0x270 [ 284.200510][ T8510] ? selinux_file_ioctl+0xb4/0x270 [ 284.200533][ T8510] ? __pfx_sock_ioctl+0x10/0x10 [ 284.200554][ T8510] __x64_sys_ioctl+0x18e/0x210 [ 284.200580][ T8510] do_syscall_64+0xcd/0xfa0 [ 284.200602][ T8510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.200623][ T8510] RIP: 0033:0x7fe23a98f6c9 [ 284.200640][ T8510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.200658][ T8510] RSP: 002b:00007fe23b75c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 284.200678][ T8510] RAX: ffffffffffffffda RBX: 00007fe23abe5fa0 RCX: 00007fe23a98f6c9 [ 284.200689][ T8510] RDX: 0000200000000000 RSI: 0000000000008b19 RDI: 0000000000000003 [ 284.200700][ T8510] RBP: 00007fe23b75c090 R08: 0000000000000000 R09: 0000000000000000 [ 284.200711][ T8510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.200721][ T8510] R13: 00007fe23abe6038 R14: 00007fe23abe5fa0 R15: 00007ffc7783ebd8 [ 284.200750][ T8510] [ 284.381931][ C0] vkms_vblank_simulate: vblank timer overrun [ 284.501254][ T5950] usb 3-1: Using ep0 maxpacket: 8 [ 284.509893][ T5950] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x73, changing to 0x3 [ 284.522925][ T5950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 99, changing to 10 [ 284.533933][ T5950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 24941, setting to 1024 [ 285.021026][ T5950] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 285.036392][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.057135][ T5950] usb 3-1: config 0 descriptor?? [ 285.069128][ T5950] usb 3-1: can't set config #0, error -71 [ 285.096227][ T5950] usb 3-1: USB disconnect, device number 15 [ 285.245710][ T8532] overlayfs: missing 'workdir' [ 285.969727][ T8536] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 285.991147][ T8536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.685'. [ 286.207472][ T8543] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 286.506688][ T8548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.688'. [ 286.679525][ T8555] netlink: 28 bytes leftover after parsing attributes in process `syz.4.690'. [ 286.875798][ T8556] netlink: 32 bytes leftover after parsing attributes in process `syz.4.690'. [ 287.371008][ T43] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 288.201467][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 288.302167][ T43] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 288.352607][ T30] audit: type=1400 audit(1762687649.283:390): avc: denied { connect } for pid=8565 comm="syz.1.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 288.400801][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.409172][ T43] usb 5-1: Product: syz [ 288.444974][ T43] usb 5-1: Manufacturer: syz [ 288.449612][ T43] usb 5-1: SerialNumber: syz [ 288.704213][ T43] usb 5-1: config 0 descriptor?? [ 288.760171][ T8585] binder: 8579:8585 ioctl c0306201 200000000040 returned -22 [ 289.158321][ T43] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 289.572939][ T8593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.700'. [ 290.462336][ T43] gspca_stk1135: reg_w 0x5 err -110 [ 290.623182][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 290.629547][ T43] gspca_stk1135: Sensor write failed [ 290.770364][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 290.779283][ T8586] block device autoloading is deprecated and will be removed. [ 290.804686][ T43] gspca_stk1135: Sensor write failed [ 290.973893][ T8611] netlink: 28 bytes leftover after parsing attributes in process `syz.0.704'. [ 291.228398][ T8614] netlink: 32 bytes leftover after parsing attributes in process `syz.0.704'. [ 291.236595][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 291.251231][ T43] gspca_stk1135: Sensor read failed [ 291.278145][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 291.284995][ T5882] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 291.392965][ T43] gspca_stk1135: Sensor read failed [ 291.401098][ T43] gspca_stk1135: Detected sensor type unknown (0x0) [ 291.409884][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 291.457633][ T43] gspca_stk1135: Sensor read failed [ 291.492005][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 291.508053][ T43] gspca_stk1135: Sensor read failed [ 291.531517][ T5882] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.550784][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 291.610796][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 291.658890][ T43] gspca_stk1135: Sensor write failed [ 291.668342][ T5882] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 291.704048][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 291.728643][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.736769][ T43] gspca_stk1135: Sensor write failed [ 291.754798][ T43] stk1135 5-1:0.0: probe with driver stk1135 failed with error -110 [ 291.760770][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 291.768214][ T5882] usb 3-1: Product: syz [ 291.773891][ T10] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 291.788480][ T5882] usb 3-1: Manufacturer: syz [ 291.797097][ T5882] usb 3-1: SerialNumber: syz [ 291.800816][ T10] usb 1-1: config 0 has no interface number 0 [ 291.811495][ T5882] usb 3-1: config 0 descriptor?? [ 291.838108][ T10] usb 1-1: config 0 interface 85 has no altsetting 0 [ 291.847750][ T5882] streamzap 3-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 291.855167][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 291.870353][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.889943][ T10] usb 1-1: Product: syz [ 291.899508][ T10] usb 1-1: Manufacturer: syz [ 291.915443][ T10] usb 1-1: SerialNumber: syz [ 291.932145][ T10] usb 1-1: config 0 descriptor?? [ 291.957115][ T10] appletouch 1-1:0.85: Could not find int-in endpoint [ 291.978541][ T10] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 291.997488][ T8624] overlayfs: missing 'workdir' [ 292.008837][ T10] usbhid 1-1:0.85: couldn't find an input interrupt endpoint [ 292.057506][ T5882] usb 3-1: USB disconnect, device number 16 [ 292.151413][ T43] usb 5-1: USB disconnect, device number 19 [ 293.311311][ T8635] binder: BINDER_SET_CONTEXT_MGR already set [ 293.317360][ T8635] binder: 8631:8635 ioctl 4018620d 200000000480 returned -16 [ 293.328840][ T8635] binder: 8631:8635 ioctl c0306201 200000000040 returned -22 [ 294.312115][ T8640] No source specified [ 294.332290][ T8640] netlink: 16 bytes leftover after parsing attributes in process `syz.2.711'. [ 294.687186][ T10] usb 1-1: USB disconnect, device number 18 [ 296.590833][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 296.862661][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.883690][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.015714][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 297.029414][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 297.122077][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.182174][ T10] usb 4-1: config 0 descriptor?? [ 297.348788][ T8684] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 297.881974][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 297.888109][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 297.899209][ T10] usb 4-1: USB disconnect, device number 11 [ 297.979105][ T30] audit: type=1400 audit(1762687658.633:391): avc: denied { getopt } for pid=8688 comm="syz.4.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 298.751453][ T8701] IPv6: NLM_F_CREATE should be specified when creating new route [ 299.885625][ T8709] overlayfs: missing 'workdir' [ 300.032273][ T8714] netlink: 'syz.1.728': attribute type 4 has an invalid length. [ 300.100751][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 300.262198][ T10] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 300.278560][ T10] usb 5-1: config 1 has no interface number 0 [ 300.304233][ T10] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 300.347720][ T10] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 300.457716][ T10] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 64 [ 300.468080][ T10] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 300.485415][ T10] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 300.496947][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.505291][ T10] usb 5-1: Product: syz [ 300.510757][ T10] usb 5-1: Manufacturer: syz [ 300.518582][ T10] usb 5-1: SerialNumber: syz [ 301.037845][ T8708] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 301.051283][ T8708] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 301.266781][ T8708] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 301.298534][ T8723] netlink: 'syz.3.732': attribute type 1 has an invalid length. [ 301.298806][ T8708] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 301.528809][ T8730] binder: 8725:8730 ioctl c0306201 200000000040 returned -14 [ 301.988833][ T10] usb 5-1: No status endpoint found [ 302.038663][ T8729] binder: BINDER_SET_CONTEXT_MGR already set [ 302.047436][ T8729] binder: 8728:8729 ioctl 4018620d 200000000240 returned -16 [ 302.066884][ T8729] binder: BINDER_SET_CONTEXT_MGR already set [ 302.073171][ T8729] binder: 8728:8729 ioctl 4018620d 200000004a80 returned -16 [ 302.111629][ T8729] binder: 8728:8729 ioctl c0306201 2000000001c0 returned -14 [ 302.297625][ T30] audit: type=1400 audit(1762687663.263:392): avc: denied { mounton } for pid=8735 comm="syz.3.736" path="/proc/554/task" dev="proc" ino=22724 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 302.321631][ T8736] xt_hashlimit: size too large, truncated to 1048576 [ 302.365518][ T8708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.379988][ T8708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.391489][ T8708] tmpfs: Cannot change global quota limit on remount [ 302.460385][ T8740] hub 2-0:1.0: USB hub found [ 302.480992][ T8740] hub 2-0:1.0: 1 port detected [ 302.550947][ T43] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 302.708724][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.726394][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.740246][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 302.768130][ T43] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 302.783877][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.813616][ T43] usb 1-1: config 0 descriptor?? [ 303.105765][ T8754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.740'. [ 303.116513][ T30] audit: type=1400 audit(1762687664.073:393): avc: denied { bind } for pid=8750 comm="syz.2.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 303.143896][ T8754] netlink: 40 bytes leftover after parsing attributes in process `syz.2.740'. [ 303.350203][ T30] audit: type=1400 audit(1762687664.073:394): avc: denied { setopt } for pid=8750 comm="syz.2.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 303.453289][ T43] usbhid 1-1:0.0: can't add hid device: -71 [ 303.459773][ T43] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 303.470367][ T43] usb 1-1: USB disconnect, device number 19 [ 303.595368][ T5882] usb 5-1: USB disconnect, device number 20 [ 303.610967][ T1207] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 303.864666][ T1207] usb 2-1: config 255 has too many interfaces: 249, using maximum allowed: 32 [ 304.001006][ T1207] usb 2-1: config 255 has an invalid descriptor of length 132, skipping remainder of the config [ 304.017122][ T1207] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 249 [ 304.383076][ T8780] binder: 8774:8780 ioctl c0306201 200000000040 returned -14 [ 304.562790][ T1207] usb 2-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 304.598224][ T1207] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.608910][ T1207] usb 2-1: Product: syz [ 304.613510][ T1207] usb 2-1: Manufacturer: syz [ 304.631084][ T1207] usb 2-1: SerialNumber: syz [ 305.450059][ T8787] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 305.551908][ T8790] netlink: 72 bytes leftover after parsing attributes in process `syz.3.750'. [ 305.580854][ T8790] netlink: 44 bytes leftover after parsing attributes in process `syz.3.750'. [ 307.016587][ T5867] usb 2-1: USB disconnect, device number 6 [ 308.362292][ T8807] netlink: 'syz.4.755': attribute type 1 has an invalid length. [ 308.440941][ T8809] FAULT_INJECTION: forcing a failure. [ 308.440941][ T8809] name failslab, interval 1, probability 0, space 0, times 0 [ 308.490086][ T8809] CPU: 0 UID: 0 PID: 8809 Comm: syz.3.754 Not tainted syzkaller #0 PREEMPT(full) [ 308.490113][ T8809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 308.490138][ T8809] Call Trace: [ 308.490144][ T8809] [ 308.490151][ T8809] dump_stack_lvl+0x16c/0x1f0 [ 308.490185][ T8809] should_fail_ex+0x512/0x640 [ 308.490206][ T8809] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 308.490237][ T8809] should_failslab+0xc2/0x120 [ 308.490259][ T8809] kmem_cache_alloc_noprof+0x75/0x6e0 [ 308.490287][ T8809] ? vm_area_alloc+0x1f/0x160 [ 308.490318][ T8809] ? vm_area_alloc+0x1f/0x160 [ 308.490341][ T8809] vm_area_alloc+0x1f/0x160 [ 308.490364][ T8809] __mmap_region+0xf85/0x27a0 [ 308.490395][ T8809] ? __pfx___mmap_region+0x10/0x10 [ 308.490508][ T8809] mmap_region+0x32b/0x3f0 [ 308.490541][ T8809] do_mmap+0xa3e/0x1210 [ 308.490569][ T8809] ? __pfx_do_mmap+0x10/0x10 [ 308.490592][ T8809] ? __pfx_down_write_killable+0x10/0x10 [ 308.490621][ T8809] vm_mmap_pgoff+0x29e/0x470 [ 308.490649][ T8809] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 308.490679][ T8809] ? __fget_files+0x20e/0x3c0 [ 308.490701][ T8809] ksys_mmap_pgoff+0x32c/0x5c0 [ 308.490721][ T8809] ? __pfx_ksys_write+0x10/0x10 [ 308.490744][ T8809] __x64_sys_mmap+0x125/0x190 [ 308.490768][ T8809] do_syscall_64+0xcd/0xfa0 [ 308.490789][ T8809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.490809][ T8809] RIP: 0033:0x7f490758f6c9 [ 308.490836][ T8809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.490856][ T8809] RSP: 002b:00007f490837d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 308.490875][ T8809] RAX: ffffffffffffffda RBX: 00007f49077e5fa0 RCX: 00007f490758f6c9 [ 308.490889][ T8809] RDX: 00000000027ffff7 RSI: 0000000000600000 RDI: 0000200000000000 [ 308.490902][ T8809] RBP: 00007f490837d090 R08: 0000000000000003 R09: 0000000000000000 [ 308.490914][ T8809] R10: 0000000004012011 R11: 0000000000000246 R12: 0000000000000002 [ 308.490926][ T8809] R13: 00007f49077e6038 R14: 00007f49077e5fa0 R15: 00007fffbbe31de8 [ 308.490956][ T8809] [ 308.831189][ T5867] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 309.265944][ T8821] overlayfs: missing 'workdir' [ 309.362201][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.465166][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.556962][ T5867] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 310.103019][ T5867] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 310.133598][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.142923][ T8828] netlink: 14 bytes leftover after parsing attributes in process `syz.0.761'. [ 310.145233][ T5867] usb 2-1: config 0 descriptor?? [ 310.684467][ T5867] usbhid 2-1:0.0: can't add hid device: -71 [ 310.690488][ T5867] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 310.778131][ T8831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.762'. [ 310.798581][ T5867] usb 2-1: USB disconnect, device number 7 [ 311.611028][ T8828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.649557][ T8828] bond_slave_0: left promiscuous mode [ 311.659867][ T8828] bond_slave_0: left allmulticast mode [ 311.917509][ T8828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.877124][ T8828] bond_slave_1: left promiscuous mode [ 312.901848][ T8828] bond_slave_1: left allmulticast mode [ 312.953834][ T8828] bond0 (unregistering): (slave bridge1): Releasing backup interface [ 312.989499][ T8828] bridge1: left promiscuous mode [ 312.998686][ T8828] bridge1: left allmulticast mode [ 313.084120][ T8828] bond0 (unregistering): Released all slaves [ 313.198873][ T8855] could not allocate digest TFM handle cryptd(blake2b-160) [ 313.536396][ T8864] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 313.579846][ T8868] overlayfs: missing 'workdir' [ 313.660839][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 313.831324][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 313.838194][ T9] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 313.846361][ T9] usb 4-1: config 0 has no interface number 0 [ 313.854469][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 313.863652][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.871877][ T9] usb 4-1: Product: syz [ 313.876216][ T9] usb 4-1: Manufacturer: syz [ 313.951070][ T5950] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 314.370770][ T9] usb 4-1: SerialNumber: syz [ 314.391769][ T9] usb 4-1: config 0 descriptor?? [ 314.406878][ T9] smsc95xx v2.0.0 [ 314.488496][ T8882] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 314.496730][ T8882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.775'. [ 314.533095][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.544887][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.558819][ T5950] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 314.613459][ T5950] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 314.624122][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.635365][ T5950] usb 1-1: config 0 descriptor?? [ 314.795331][ T30] audit: type=1400 audit(1762687675.763:395): avc: denied { write } for pid=8890 comm="syz.1.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 314.816251][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 314.840083][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 314.840161][ T30] audit: type=1400 audit(1762687675.803:396): avc: denied { setopt } for pid=8890 comm="syz.1.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 314.910832][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 315.056407][ T5950] usbhid 1-1:0.0: can't add hid device: -71 [ 315.060522][ T8896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.781'. [ 315.062583][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 315.076784][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 315.241076][ T5950] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 315.252514][ T10] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 315.260630][ T10] usb 5-1: config 0 has no interface number 0 [ 315.269337][ T9] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61 [ 315.420719][ T5950] usb 1-1: USB disconnect, device number 20 [ 315.433671][ T10] usb 5-1: config 0 interface 85 has no altsetting 0 [ 315.448106][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 315.460415][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.465593][ T43] usb 4-1: USB disconnect, device number 12 [ 315.500173][ T10] usb 5-1: Product: syz [ 315.514637][ T10] usb 5-1: Manufacturer: syz [ 315.524922][ T10] usb 5-1: SerialNumber: syz [ 315.549416][ T10] usb 5-1: config 0 descriptor?? [ 315.591819][ T10] appletouch 5-1:0.85: Could not find int-in endpoint [ 315.646130][ T10] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 315.737902][ T8910] FAULT_INJECTION: forcing a failure. [ 315.737902][ T8910] name failslab, interval 1, probability 0, space 0, times 0 [ 315.751730][ T8910] CPU: 0 UID: 0 PID: 8910 Comm: syz.1.784 Not tainted syzkaller #0 PREEMPT(full) [ 315.751759][ T8910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 315.751770][ T8910] Call Trace: [ 315.751777][ T8910] [ 315.751784][ T8910] dump_stack_lvl+0x16c/0x1f0 [ 315.751819][ T8910] should_fail_ex+0x512/0x640 [ 315.751842][ T8910] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 315.751876][ T8910] should_failslab+0xc2/0x120 [ 315.751899][ T8910] kmem_cache_alloc_node_noprof+0x78/0x770 [ 315.751928][ T8910] ? __alloc_skb+0x2b2/0x380 [ 315.751957][ T8910] ? __alloc_skb+0x2b2/0x380 [ 315.751978][ T8910] ? __pfx_netlink_insert+0x10/0x10 [ 315.752003][ T8910] __alloc_skb+0x2b2/0x380 [ 315.752027][ T8910] ? __pfx___alloc_skb+0x10/0x10 [ 315.752051][ T8910] ? netlink_autobind.isra.0+0x158/0x370 [ 315.752085][ T8910] netlink_alloc_large_skb+0x69/0x140 [ 315.752114][ T8910] netlink_sendmsg+0x698/0xdd0 [ 315.752147][ T8910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.752178][ T8910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.752211][ T8910] ____sys_sendmsg+0xa98/0xc70 [ 315.752232][ T8910] ? copy_msghdr_from_user+0x10a/0x160 [ 315.752257][ T8910] ? __pfx_____sys_sendmsg+0x10/0x10 [ 315.752280][ T8910] ? trace_sched_exit_tp+0xd1/0x120 [ 315.752317][ T8910] ___sys_sendmsg+0x134/0x1d0 [ 315.752344][ T8910] ? __pfx____sys_sendmsg+0x10/0x10 [ 315.752407][ T8910] __sys_sendmsg+0x16d/0x220 [ 315.752433][ T8910] ? __pfx___sys_sendmsg+0x10/0x10 [ 315.752478][ T8910] do_syscall_64+0xcd/0xfa0 [ 315.752499][ T8910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.752519][ T8910] RIP: 0033:0x7fe23a98f6c9 [ 315.752536][ T8910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.752555][ T8910] RSP: 002b:00007fe238bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.752574][ T8910] RAX: ffffffffffffffda RBX: 00007fe23abe6090 RCX: 00007fe23a98f6c9 [ 315.752588][ T8910] RDX: 0000000024008004 RSI: 0000200000000400 RDI: 0000000000000005 [ 315.752600][ T8910] RBP: 00007fe238bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 315.752612][ T8910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.752624][ T8910] R13: 00007fe23abe6128 R14: 00007fe23abe6090 R15: 00007ffc7783ebd8 [ 315.752654][ T8910] [ 315.759976][ T30] audit: type=1326 audit(1762687676.633:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8908 comm="syz.1.784" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe23a98f6c9 code=0x0 [ 316.031181][ C0] vkms_vblank_simulate: vblank timer overrun [ 316.079669][ T10] usbhid 5-1:0.85: couldn't find an input interrupt endpoint [ 316.427527][ T30] audit: type=1400 audit(1762687677.383:398): avc: denied { ioctl } for pid=8906 comm="syz.0.783" path="socket:[23707]" dev="sockfs" ino=23707 ioctlcmd=0x5878 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 316.452339][ C0] vkms_vblank_simulate: vblank timer overrun [ 316.599781][ T8919] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 316.764021][ T8922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.785'. [ 316.774419][ T8922] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.782239][ T8922] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.107589][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.117572][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.506932][ T30] audit: type=1400 audit(1762687677.703:399): avc: denied { wake_alarm } for pid=8916 comm="syz.1.785" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 317.527925][ C0] vkms_vblank_simulate: vblank timer overrun [ 318.397058][ T9] usb 5-1: USB disconnect, device number 21 [ 318.809179][ T8946] syzkaller0: entered promiscuous mode [ 318.814889][ T8946] syzkaller0: entered allmulticast mode [ 319.064505][ T8949] bond1: entered promiscuous mode [ 319.103104][ T8949] bond1: entered allmulticast mode [ 319.117268][ T8949] 8021q: adding VLAN 0 to HW filter on device bond1 [ 319.140822][ T24] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 319.206158][ T8947] bridge2: entered promiscuous mode [ 319.211689][ T8947] bridge2: entered allmulticast mode [ 319.230069][ T8947] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 319.304857][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 319.315768][ T24] usb 4-1: config 6 has an invalid interface number: 200 but max is 0 [ 319.326421][ T24] usb 4-1: config 6 has no interface number 0 [ 319.336850][ T24] usb 4-1: config 6 interface 200 altsetting 8 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 319.350759][ T24] usb 4-1: config 6 interface 200 has no altsetting 0 [ 319.386344][ T24] usb 4-1: string descriptor 0 read error: -22 [ 319.390836][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 319.404415][ T24] usb 4-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 319.416019][ T24] usb 4-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 319.457782][ T24] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 319.486625][ T8954] netlink: 'syz.0.794': attribute type 21 has an invalid length. [ 319.503095][ T8954] netlink: 'syz.0.794': attribute type 6 has an invalid length. [ 319.511536][ T8954] netlink: 132 bytes leftover after parsing attributes in process `syz.0.794'. [ 319.553975][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.566124][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.576547][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 319.589831][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 319.599048][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.618159][ T9] usb 5-1: config 0 descriptor?? [ 319.657895][ T30] audit: type=1400 audit(1762687680.623:400): avc: denied { append } for pid=8945 comm="syz.3.791" name="sg0" dev="devtmpfs" ino=791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 319.662090][ T24] dvb-usb: bulk message failed: -71 (3/0) [ 319.681451][ C0] vkms_vblank_simulate: vblank timer overrun [ 319.788193][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 319.809701][ T24] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 319.844590][ T24] usb 4-1: media controller created [ 319.865826][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 319.899004][ T24] dvb-usb: bulk message failed: -71 (6/0) [ 319.907128][ T24] dvb-usb: bulk message failed: -71 (6/0) [ 319.913088][ T24] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 319.933518][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input16 [ 320.020146][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 320.028109][ T24] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 320.037948][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 320.042734][ T24] usb 4-1: USB disconnect, device number 13 [ 320.045303][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 320.923395][ T24] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 320.931249][ T9] usb 5-1: USB disconnect, device number 22 [ 321.041538][ T8962] netlink: 40 bytes leftover after parsing attributes in process `syz.4.797'. [ 321.060276][ T8962] netlink: 12 bytes leftover after parsing attributes in process `syz.4.797'. [ 321.247408][ T8973] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 321.255112][ T30] audit: type=1400 audit(1762687682.213:401): avc: denied { ioctl } for pid=8961 comm="syz.4.797" path="socket:[23775]" dev="sockfs" ino=23775 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 321.790786][ T10] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 321.807207][ T30] audit: type=1400 audit(1762687682.773:402): avc: denied { getopt } for pid=8987 comm="syz.2.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 322.512273][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 322.523348][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.540840][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 322.571016][ T10] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 322.600829][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.622613][ T10] usb 4-1: config 0 descriptor?? [ 322.773812][ T8995] overlayfs: missing 'lowerdir' [ 323.104413][ T5821] Bluetooth: unknown link type 34 [ 323.109635][ T5821] Bluetooth: hci0: connection err: -111 [ 323.123278][ T8999] xt_hashlimit: max too large, truncated to 1048576 [ 323.213957][ T10] hid-multitouch 0003:0457:07DA.000F: unknown main item tag 0x0 [ 323.396088][ T10] hid-multitouch 0003:0457:07DA.000F: unknown main item tag 0x0 [ 323.420755][ T10] hid-multitouch 0003:0457:07DA.000F: unknown main item tag 0x0 [ 323.441151][ T10] hid-multitouch 0003:0457:07DA.000F: unknown main item tag 0x0 [ 323.916642][ T10] hid-multitouch 0003:0457:07DA.000F: unknown main item tag 0x0 [ 323.917089][ T10] hid-multitouch 0003:0457:07DA.000F: unknown main item tag 0x0 [ 323.917336][ T10] hid-multitouch 0003:0457:07DA.000F: unknown main item tag 0x0 [ 323.917580][ T10] hid-multitouch 0003:0457:07DA.000F: unknown main item tag 0x0 [ 323.917943][ T10] hid-multitouch 0003:0457:07DA.000F: unknown main item tag 0x0 [ 323.918233][ T10] hid-multitouch 0003:0457:07DA.000F: unknown main item tag 0x0 [ 323.953795][ T24] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 324.158504][ T9005] tty tty20: ldisc open failed (-12), clearing slot 19 [ 324.437703][ T10] hid-multitouch 0003:0457:07DA.000F: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.3-1/input0 [ 324.516797][ T10] usb 4-1: USB disconnect, device number 14 [ 324.619969][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.635322][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.649321][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 324.662763][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 324.671877][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.682647][ T24] usb 5-1: config 0 descriptor?? [ 324.712790][ T9010] fido_id[9010]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 325.092270][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 325.659168][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 325.665225][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 325.675363][ T24] usb 5-1: USB disconnect, device number 23 [ 325.688109][ T9] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 325.730188][ T9] usb 3-1: config 1 has no interface number 0 [ 325.816925][ T9017] SELinux: failed to load policy [ 325.822396][ T9] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 325.857767][ T9] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 325.886448][ T9] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 64 [ 325.905813][ T9] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 325.960446][ T9] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 325.980429][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.020952][ T9] usb 3-1: Product: syz [ 326.025143][ T9] usb 3-1: Manufacturer: syz [ 326.029736][ T9] usb 3-1: SerialNumber: syz [ 326.070250][ T9014] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 326.077925][ T9014] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 326.172937][ T30] audit: type=1400 audit(1762687687.143:403): avc: denied { map } for pid=9032 comm="syz.0.820" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 326.414635][ T30] audit: type=1400 audit(1762687687.143:404): avc: denied { execute } for pid=9032 comm="syz.0.820" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 326.414971][ T9014] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 326.502862][ T9014] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 326.562448][ T9] usb 3-1: No status endpoint found [ 327.363806][ T9051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.384327][ T9051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.409866][ T9051] tmpfs: Cannot change global quota limit on remount [ 327.540215][ T9055] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 327.663254][ T9057] overlayfs: missing 'workdir' [ 327.983516][ T30] audit: type=1400 audit(1762687688.953:405): avc: denied { write } for pid=9060 comm="syz.3.825" name="mouse0" dev="devtmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 328.006589][ C0] vkms_vblank_simulate: vblank timer overrun [ 328.016053][ T9061] 9pnet_fd: Insufficient options for proto=fd [ 328.474550][ T9070] vxfs: WRONG superblock magic 00000000 at 1 [ 328.482268][ T9070] vxfs: WRONG superblock magic 00000000 at 8 [ 328.488322][ T9070] vxfs: can't find superblock. [ 328.599009][ T24] libceph: connect (1)[c::]:6789 error -101 [ 328.627174][ T30] audit: type=1400 audit(1762687689.473:406): avc: denied { map } for pid=9060 comm="syz.3.825" path="/dev/input/mouse0" dev="devtmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 328.760369][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 328.818763][ T24] usb 3-1: USB disconnect, device number 17 [ 328.829703][ T9068] ceph: No mds server is up or the cluster is laggy [ 328.904152][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 329.019585][ T9077] netlink: 'syz.1.829': attribute type 1 has an invalid length. [ 329.144636][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.200179][ T9081] bond2: entered promiscuous mode [ 329.205866][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.298864][ T9081] bond2: entered allmulticast mode [ 329.511932][ T9081] 8021q: adding VLAN 0 to HW filter on device bond2 [ 329.653229][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 329.813341][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 329.822466][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.844516][ T9] usb 5-1: config 0 descriptor?? [ 329.851903][ T9077] bridge3: entered promiscuous mode [ 329.860527][ T9077] bridge3: entered allmulticast mode [ 329.881720][ T9077] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 330.706996][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 330.715325][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 330.744804][ T9] usb 5-1: USB disconnect, device number 24 [ 331.150188][ T9098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.833'. [ 331.155067][ T9106] overlayfs: missing 'workdir' [ 331.281570][ T9110] CIFS mount error: No usable UNC path provided in device string! [ 331.281570][ T9110] [ 331.291642][ T9110] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 332.261806][ T9118] binder: BINDER_SET_CONTEXT_MGR already set [ 332.267881][ T9118] binder: 9107:9118 ioctl 4018620d 200000000480 returned -16 [ 332.279632][ T9118] binder: 9107:9118 ioctl c0306201 0 returned -14 [ 332.864438][ T30] audit: type=1400 audit(1762687693.833:407): avc: denied { accept } for pid=9113 comm="syz.1.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 333.207153][ T30] audit: type=1400 audit(1762687694.173:408): avc: denied { ioctl } for pid=9116 comm="syz.4.839" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 335.517123][ T30] audit: type=1400 audit(1762687696.483:409): avc: denied { setopt } for pid=9144 comm="syz.2.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 335.751152][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 335.887041][ T30] audit: type=1400 audit(1762687696.483:410): avc: denied { connect } for pid=9144 comm="syz.2.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 335.982214][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.995754][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.005999][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 336.019221][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 336.028671][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.120189][ T24] usb 2-1: config 0 descriptor?? [ 336.126537][ T9151] fuse: Unknown parameter 'group_i00000000000000000000' [ 336.218271][ T9155] overlayfs: missing 'workdir' [ 336.250845][ T1207] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 336.268054][ T9156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.848'. [ 336.490958][ T1207] usb 3-1: Using ep0 maxpacket: 16 [ 336.601488][ T1207] usb 3-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 336.794935][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 336.830801][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 336.838648][ T1207] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.859830][ T9159] bridge5: port 1(veth3) entered blocking state [ 336.869212][ T1207] usb 3-1: Product: syz [ 336.879721][ T9159] bridge5: port 1(veth3) entered disabled state [ 336.901019][ T24] usb 2-1: USB disconnect, device number 8 [ 336.908959][ T1207] usb 3-1: Manufacturer: syz [ 336.920289][ T9159] veth3: entered allmulticast mode [ 336.925897][ T1207] usb 3-1: SerialNumber: syz [ 336.935578][ T9159] veth3: entered promiscuous mode [ 337.181838][ T9162] bridge5: port 2(veth5) entered blocking state [ 337.190826][ T9162] bridge5: port 2(veth5) entered disabled state [ 337.197244][ T9162] veth5: entered allmulticast mode [ 337.218971][ T9162] veth5: entered promiscuous mode [ 337.300761][ T43] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 337.358870][ T30] audit: type=1400 audit(1762687698.323:411): avc: denied { bind } for pid=9176 comm="syz.1.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 337.407635][ T1207] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 337.481509][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 337.498975][ T43] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 337.528504][ T1207] snd-usb-audio 3-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 337.557395][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 337.577324][ T1207] usb 3-1: USB disconnect, device number 18 [ 337.590077][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 337.601487][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 337.616393][ T6653] udevd[6653]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 337.642246][ T43] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 337.652414][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.663684][ T43] usb 4-1: Product: syz [ 337.669901][ T43] usb 4-1: Manufacturer: syz [ 337.676356][ T43] usb 4-1: SerialNumber: syz [ 337.685529][ T30] audit: type=1400 audit(1762687698.653:412): avc: denied { connect } for pid=9182 comm="syz.1.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 337.708128][ T43] usb 4-1: config 0 descriptor?? [ 338.335307][ T30] audit: type=1400 audit(1762687698.673:413): avc: denied { read } for pid=9182 comm="syz.1.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 338.354480][ T30] audit: type=1400 audit(1762687698.723:414): avc: denied { map } for pid=9182 comm="syz.1.857" path="socket:[24125]" dev="sockfs" ino=24125 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 338.686554][ T9166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.708221][ T9166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.721526][ T9191] fuse: Unknown parameter 'group_i00000000000000000000' [ 340.395059][ T9] usb 4-1: USB disconnect, device number 15 [ 340.710943][ T979] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 340.860771][ T979] usb 3-1: Using ep0 maxpacket: 8 [ 340.874517][ T979] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 340.902845][ T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.916895][ T979] usb 3-1: Product: syz [ 340.921356][ T979] usb 3-1: Manufacturer: syz [ 340.947443][ T9214] No source specified [ 340.962860][ T979] usb 3-1: SerialNumber: syz [ 340.974685][ T979] usb 3-1: config 0 descriptor?? [ 340.998450][ T9214] netlink: 16 bytes leftover after parsing attributes in process `syz.1.864'. [ 341.058504][ T9216] FAULT_INJECTION: forcing a failure. [ 341.058504][ T9216] name failslab, interval 1, probability 0, space 0, times 0 [ 341.136395][ T9216] CPU: 0 UID: 0 PID: 9216 Comm: syz.4.867 Not tainted syzkaller #0 PREEMPT(full) [ 341.136424][ T9216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 341.136435][ T9216] Call Trace: [ 341.136442][ T9216] [ 341.136449][ T9216] dump_stack_lvl+0x16c/0x1f0 [ 341.136485][ T9216] should_fail_ex+0x512/0x640 [ 341.136511][ T9216] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 341.136544][ T9216] should_failslab+0xc2/0x120 [ 341.136567][ T9216] kmem_cache_alloc_node_noprof+0x78/0x770 [ 341.136595][ T9216] ? __alloc_skb+0x2b2/0x380 [ 341.136624][ T9216] ? __alloc_skb+0x2b2/0x380 [ 341.136646][ T9216] __alloc_skb+0x2b2/0x380 [ 341.136669][ T9216] ? __pfx___alloc_skb+0x10/0x10 [ 341.136692][ T9216] ? __pfx___mutex_trylock_common+0x10/0x10 [ 341.136724][ T9216] ? __pfx___might_resched+0x10/0x10 [ 341.136757][ T9216] netlink_dump+0x19b/0xd30 [ 341.136784][ T9216] ? __netlink_lookup+0x654/0x900 [ 341.136811][ T9216] ? __pfx_netlink_dump+0x10/0x10 [ 341.136858][ T9216] __netlink_dump_start+0x6d6/0x990 [ 341.136888][ T9216] ? __pfx_fib_nl_dumprule+0x10/0x10 [ 341.136914][ T9216] rtnetlink_rcv_msg+0xb3e/0xe90 [ 341.136941][ T9216] ? __pfx_fib_nl_dumprule+0x10/0x10 [ 341.136969][ T9216] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 341.136996][ T9216] ? __pfx_fib_nl_dumprule+0x10/0x10 [ 341.137029][ T9216] ? ref_tracker_free+0x37c/0x830 [ 341.137057][ T9216] netlink_rcv_skb+0x158/0x420 [ 341.137084][ T9216] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 341.137113][ T9216] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 341.137151][ T9216] ? netlink_deliver_tap+0x1ae/0xd30 [ 341.137185][ T9216] netlink_unicast+0x5aa/0x870 [ 341.137217][ T9216] ? __pfx_netlink_unicast+0x10/0x10 [ 341.137256][ T9216] netlink_sendmsg+0x8c8/0xdd0 [ 341.137289][ T9216] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.137328][ T9216] sock_write_iter+0x566/0x610 [ 341.137355][ T9216] ? __pfx_sock_write_iter+0x10/0x10 [ 341.137385][ T9216] ? bpf_lsm_file_permission+0x9/0x10 [ 341.137405][ T9216] ? security_file_permission+0x71/0x210 [ 341.137431][ T9216] ? rw_verify_area+0xcf/0x6c0 [ 341.137462][ T9216] vfs_write+0x7d3/0x11d0 [ 341.137482][ T9216] ? __pfx_sock_write_iter+0x10/0x10 [ 341.137505][ T9216] ? __pfx_vfs_write+0x10/0x10 [ 341.137521][ T9216] ? find_held_lock+0x2b/0x80 [ 341.137565][ T9216] ksys_write+0x1f8/0x250 [ 341.137584][ T9216] ? __pfx_ksys_write+0x10/0x10 [ 341.137611][ T9216] do_syscall_64+0xcd/0xfa0 [ 341.137632][ T9216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.137653][ T9216] RIP: 0033:0x7f81dab8f6c9 [ 341.137669][ T9216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.137688][ T9216] RSP: 002b:00007f81d8df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 341.137707][ T9216] RAX: ffffffffffffffda RBX: 00007f81dade5fa0 RCX: 00007f81dab8f6c9 [ 341.137721][ T9216] RDX: 0000000000000026 RSI: 00002000000026c0 RDI: 0000000000000003 [ 341.137734][ T9216] RBP: 00007f81d8df6090 R08: 0000000000000000 R09: 0000000000000000 [ 341.137746][ T9216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.137758][ T9216] R13: 00007f81dade6038 R14: 00007f81dade5fa0 R15: 00007ffef10d2998 [ 341.137788][ T9216] [ 341.562347][ T979] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 341.702176][ T9221] binder: BINDER_SET_CONTEXT_MGR already set [ 341.708273][ T9221] binder: 9217:9221 ioctl 4018620d 200000000480 returned -16 [ 341.721554][ T9221] binder: 9217:9221 ioctl c0306201 200000000040 returned -14 [ 342.421633][ T5882] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 342.422886][ T9237] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 342.571822][ T5882] usb 4-1: Using ep0 maxpacket: 32 [ 342.581038][ T979] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 342.591747][ T5882] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 342.599805][ T5882] usb 4-1: config 0 has no interface number 0 [ 342.633823][ T5882] usb 4-1: config 0 interface 85 has no altsetting 0 [ 342.653873][ T5882] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 342.667733][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.676129][ T5882] usb 4-1: Product: syz [ 342.680574][ T5882] usb 4-1: Manufacturer: syz [ 342.692328][ T5882] usb 4-1: SerialNumber: syz [ 342.702206][ T979] usb 3-1: USB disconnect, device number 19 [ 342.722859][ T5882] usb 4-1: config 0 descriptor?? [ 342.753995][ T5882] appletouch 4-1:0.85: Could not find int-in endpoint [ 342.768851][ T5882] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 342.911025][ T43] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 343.156962][ T5882] usbhid 4-1:0.85: couldn't find an input interrupt endpoint [ 343.304931][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 343.365545][ T43] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 343.377385][ T43] usb 5-1: config 1 has no interface number 1 [ 343.384532][ T43] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 343.396847][ T43] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 343.410370][ T43] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 343.482538][ T43] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 343.498318][ T9] usb 4-1: USB disconnect, device number 16 [ 343.508542][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.548345][ T43] usb 5-1: Product: syz [ 343.557104][ T43] usb 5-1: Manufacturer: syz [ 343.587100][ T43] usb 5-1: SerialNumber: syz [ 344.409096][ T43] usb 5-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 344.432825][ T43] usb 5-1: found format II with max.bitrate = 64, frame size=5 [ 344.449002][ T43] usb 5-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 344.542346][ T43] usb 5-1: found format II with max.bitrate = 64, frame size=5 [ 344.557046][ T43] usb 5-1: 2:1: cannot set freq 1372320 to ep 0x82 [ 344.699234][ T43] usb 5-1: USB disconnect, device number 25 [ 344.800011][ T6805] udevd[6805]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 345.010513][ T9258] could not allocate digest TFM handle cryptd(blake2b-160) [ 345.385121][ T9276] fuse: Unknown parameter 'group_id00000000000000000000' [ 345.386396][ T9278] netlink: 'syz.4.884': attribute type 1 has an invalid length. [ 345.585641][ T9278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.781123][ T9282] bond0: (slave veth5): Enslaving as an active interface with a down link [ 346.184191][ T9278] bond0: (slave dummy0): making interface the new active one [ 346.394683][ T9278] dummy0: entered promiscuous mode [ 346.411155][ T9278] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 346.982017][ T9289] bond0 (unregistering): (slave veth5): Releasing active interface [ 346.996177][ T30] audit: type=1400 audit(1762687707.963:415): avc: denied { write } for pid=9290 comm="syz.2.887" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 347.021439][ T9295] netlink: 24 bytes leftover after parsing attributes in process `syz.0.888'. [ 347.097041][ T9289] bond0 (unregistering): (slave dummy0): Releasing active interface [ 347.117500][ T9289] bond0 (unregistering): Released all slaves [ 347.254182][ T9298] warning: `syz.2.887' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 347.746326][ T7726] Bluetooth: hci5: Frame reassembly failed (-84) [ 348.537347][ T30] audit: type=1326 audit(1762687709.503:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.0.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda28d8f6c9 code=0x7ffc0000 [ 348.689389][ T30] audit: type=1326 audit(1762687709.503:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.0.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fda28d8f6c9 code=0x7ffc0000 [ 348.772746][ T30] audit: type=1326 audit(1762687709.503:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.0.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda28d8f6c9 code=0x7ffc0000 [ 348.820379][ T30] audit: type=1326 audit(1762687709.503:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.0.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7fda28d8f6c9 code=0x7ffc0000 [ 348.870834][ T30] audit: type=1326 audit(1762687709.503:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.0.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda28d8f6c9 code=0x7ffc0000 [ 348.894589][ T30] audit: type=1326 audit(1762687709.503:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.0.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fda28d8f6c9 code=0x7ffc0000 [ 348.918034][ T30] audit: type=1326 audit(1762687709.503:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.0.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda28d8f6c9 code=0x7ffc0000 [ 348.945924][ T30] audit: type=1326 audit(1762687709.503:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.0.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fda28d8f6c9 code=0x7ffc0000 [ 348.973382][ T30] audit: type=1326 audit(1762687709.503:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.0.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda28d8f6c9 code=0x7ffc0000 [ 349.030787][ T5882] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 349.044683][ T43] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 349.201050][ T43] usb 2-1: device descriptor read/64, error -71 [ 349.223085][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 349.240547][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.250963][ T5882] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 349.260140][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.301950][ T5882] usb 1-1: config 0 descriptor?? [ 349.460820][ T43] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 349.600859][ T43] usb 2-1: device descriptor read/64, error -71 [ 349.711040][ T43] usb usb2-port1: attempt power cycle [ 349.726916][ T5821] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 349.734423][ T52] Bluetooth: hci5: command 0x1003 tx timeout [ 350.335662][ T9327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.344421][ T9327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.759076][ T5882] isku 0003:1E7D:319C.0010: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 350.777313][ T43] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 350.849507][ T43] usb 2-1: device descriptor read/8, error -71 [ 350.904594][ T9348] FAULT_INJECTION: forcing a failure. [ 350.904594][ T9348] name failslab, interval 1, probability 0, space 0, times 0 [ 350.927394][ T9348] CPU: 1 UID: 0 PID: 9348 Comm: syz.3.903 Not tainted syzkaller #0 PREEMPT(full) [ 350.927421][ T9348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 350.927433][ T9348] Call Trace: [ 350.927440][ T9348] [ 350.927448][ T9348] dump_stack_lvl+0x16c/0x1f0 [ 350.927486][ T9348] should_fail_ex+0x512/0x640 [ 350.927509][ T9348] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 350.927543][ T9348] should_failslab+0xc2/0x120 [ 350.927566][ T9348] kmem_cache_alloc_node_noprof+0x78/0x770 [ 350.927594][ T9348] ? __alloc_skb+0x2b2/0x380 [ 350.927620][ T9348] ? __alloc_skb+0x2b2/0x380 [ 350.927640][ T9348] __alloc_skb+0x2b2/0x380 [ 350.927662][ T9348] ? __pfx___alloc_skb+0x10/0x10 [ 350.927684][ T9348] ? rcu_is_watching+0x12/0xc0 [ 350.927716][ T9348] ? __kmalloc_large_node_noprof+0x40/0x70 [ 350.927738][ T9348] ? kmem_cache_alloc_noprof+0x2a1/0x6e0 [ 350.927764][ T9348] ? lockdep_init_map_type+0x5c/0x280 [ 350.927788][ T9348] audit_log_start+0x34e/0x950 [ 350.927812][ T9348] ? __pfx_audit_log_start+0x10/0x10 [ 350.927830][ T9348] ? rcu_is_watching+0x12/0xc0 [ 350.927852][ T9348] ? _raw_spin_unlock_irq+0x23/0x50 [ 350.927879][ T9348] ? lockdep_hardirqs_on+0x7c/0x110 [ 350.927908][ T9348] ? _raw_spin_unlock_irq+0x2e/0x50 [ 350.927933][ T9348] ? signal_setup_done+0x31b/0x570 [ 350.927956][ T9348] ? __pfx_signal_setup_done+0x10/0x10 [ 350.927985][ T9348] audit_seccomp+0x60/0x290 [ 350.928007][ T9348] __seccomp_filter+0xa74/0x11c0 [ 350.928039][ T9348] ? __pfx___seccomp_filter+0x10/0x10 [ 350.928077][ T9348] ? ksys_write+0x1ac/0x250 [ 350.928098][ T9348] __secure_computing+0x287/0x3b0 [ 350.928119][ T9348] syscall_trace_enter+0x89/0x240 [ 350.928141][ T9348] do_int80_emulation+0x28e/0x3e0 [ 350.928161][ T9348] asm_int80_emulation+0x1a/0x20 [ 350.928179][ T9348] RIP: 0033:0x200000000006 [ 350.928200][ T9348] Code: Unable to access opcode bytes at 0x1fffffffffdc. [ 350.928209][ T9348] RSP: 002b:00007f490837c338 EFLAGS: 00000206 ORIG_RAX: 0000000000000022 [ 350.928229][ T9348] RAX: ffffffffffffffda RBX: 00007f49077e5fa0 RCX: 00007f490758f6c9 [ 350.928242][ T9348] RDX: 00007f490837c340 RSI: 00007f490837c470 RDI: 000000000000000d [ 350.928254][ T9348] RBP: 00007f490837d090 R08: 0000000000000000 R09: 0000000000000000 [ 350.928266][ T9348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 350.928276][ T9348] R13: 00007f49077e6038 R14: 00007f49077e5fa0 R15: 00007fffbbe31de8 [ 350.928304][ T9348] [ 351.223644][ T9355] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 351.231545][ T9355] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 351.239895][ T9355] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 351.247634][ T9355] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 351.310786][ T43] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 351.385568][ T43] usb 2-1: device descriptor read/8, error -71 [ 351.401916][ T979] usb 1-1: USB disconnect, device number 21 [ 351.417995][ T9356] pim6reg: entered allmulticast mode [ 351.504231][ T43] usb usb2-port1: unable to enumerate USB device [ 351.566231][ T9365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.906'. [ 353.454593][ T30] kauditd_printk_skb: 84 callbacks suppressed [ 353.455454][ T30] audit: type=1800 audit(1762687714.413:507): pid=9389 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.910" name=6E73BF12E10BC845E0807291376B6A9C4CCE5A99F85125232DD3D213E8DCE1FDDEEFF2A7D2AB97C26527FC108503 dev="overlay" ino=25320 res=0 errno=0 [ 353.490683][ C0] vkms_vblank_simulate: vblank timer overrun [ 353.542686][ T30] audit: type=1800 audit(1762687714.503:508): pid=9389 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.910" name=6E73BF12E10BC845E0807291376B6A9C4CCE5A99F85125232DD3D213E8DCE1FDDEEFF2A7D2AB97C26527FC108503 dev="overlay" ino=25320 res=0 errno=0 [ 354.302020][ T30] audit: type=1400 audit(1762687715.263:509): avc: denied { connect } for pid=9392 comm="syz.1.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 354.409934][ T30] audit: type=1400 audit(1762687715.263:510): avc: denied { read } for pid=9392 comm="syz.1.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 354.527417][ T30] audit: type=1400 audit(1762687715.323:511): avc: denied { write } for pid=9392 comm="syz.1.913" path="socket:[25331]" dev="sockfs" ino=25331 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 355.170597][ T9414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.917'. [ 355.232432][ T9416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.918'. [ 356.399039][ T9429] netlink: 'syz.2.923': attribute type 1 has an invalid length. [ 356.820762][ T9] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 357.008839][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 357.151632][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 357.257437][ T9419] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29968 sclass=netlink_route_socket pid=9419 comm=syz.3.920 [ 357.301529][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 12336, setting to 64 [ 357.345256][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 357.394017][ T9] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 357.418328][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.472181][ T9442] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 357.517073][ T9] usb 1-1: Product: syz [ 357.522397][ T9] usb 1-1: Manufacturer: syz [ 357.528244][ T9] usb 1-1: SerialNumber: syz [ 357.552382][ T9] usb 1-1: config 0 descriptor?? [ 357.578552][ T9] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input18 [ 357.709766][ T9446] FAULT_INJECTION: forcing a failure. [ 357.709766][ T9446] name failslab, interval 1, probability 0, space 0, times 0 [ 357.722541][ T9446] CPU: 1 UID: 0 PID: 9446 Comm: syz.1.927 Not tainted syzkaller #0 PREEMPT(full) [ 357.722570][ T9446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 357.722582][ T9446] Call Trace: [ 357.722590][ T9446] [ 357.722599][ T9446] dump_stack_lvl+0x16c/0x1f0 [ 357.722634][ T9446] should_fail_ex+0x512/0x640 [ 357.722657][ T9446] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 357.722690][ T9446] should_failslab+0xc2/0x120 [ 357.722714][ T9446] kmem_cache_alloc_noprof+0x75/0x6e0 [ 357.722755][ T9446] ? __might_fault+0xe3/0x190 [ 357.722783][ T9446] ? getname_flags.part.0+0x4c/0x550 [ 357.722816][ T9446] ? getname_flags.part.0+0x4c/0x550 [ 357.722841][ T9446] getname_flags.part.0+0x4c/0x550 [ 357.722871][ T9446] getname_flags+0x93/0xf0 [ 357.722890][ T9446] user_path_at+0x24/0x60 [ 357.722911][ T9446] __x64_sys_mount+0x1fb/0x310 [ 357.722935][ T9446] ? __pfx___x64_sys_mount+0x10/0x10 [ 357.722961][ T9446] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 357.722993][ T9446] do_syscall_64+0xcd/0xfa0 [ 357.723014][ T9446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.723036][ T9446] RIP: 0033:0x7fe23a98f6c9 [ 357.723053][ T9446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.723073][ T9446] RSP: 002b:00007fe238bf6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 357.723092][ T9446] RAX: ffffffffffffffda RBX: 00007fe23abe6090 RCX: 00007fe23a98f6c9 [ 357.723106][ T9446] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080 [ 357.723119][ T9446] RBP: 00007fe238bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 357.723131][ T9446] R10: 000000000000ff0f R11: 0000000000000246 R12: 0000000000000001 [ 357.723144][ T9446] R13: 00007fe23abe6128 R14: 00007fe23abe6090 R15: 00007ffc7783ebd8 [ 357.723173][ T9446] [ 358.480752][ T9426] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.554380][ T5945] usb 1-1: USB disconnect, device number 22 [ 359.076346][ T9454] random: crng reseeded on system resumption [ 359.090818][ T30] audit: type=1400 audit(1762687720.043:512): avc: denied { write } for pid=9452 comm="syz.3.929" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 359.126358][ T30] audit: type=1400 audit(1762687720.043:513): avc: denied { open } for pid=9452 comm="syz.3.929" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 359.280264][ T9463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.930'. [ 359.344406][ T30] audit: type=1400 audit(1762687720.293:514): avc: denied { append } for pid=9459 comm="syz.4.931" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 359.534786][ T30] audit: type=1400 audit(1762687720.303:515): avc: denied { read } for pid=9459 comm="syz.4.931" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 359.560817][ T30] audit: type=1400 audit(1762687720.303:516): avc: denied { open } for pid=9459 comm="syz.4.931" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 360.385325][ T5950] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 360.590755][ T5950] usb 5-1: Using ep0 maxpacket: 16 [ 360.859029][ T5950] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.869539][ T5950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 360.880610][ T5950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 360.898188][ T9479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.935'. [ 360.909612][ T5950] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 360.922727][ T5950] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 360.961963][ T5950] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 360.978732][ T5950] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 360.991151][ T5950] usb 5-1: Manufacturer: syz [ 360.998200][ T5950] usb 5-1: config 0 descriptor?? [ 361.215144][ T9490] No source specified [ 361.227858][ T9490] netlink: 16 bytes leftover after parsing attributes in process `syz.1.936'. [ 361.237578][ T9485] FAULT_INJECTION: forcing a failure. [ 361.237578][ T9485] name failslab, interval 1, probability 0, space 0, times 0 [ 361.250738][ T9485] CPU: 0 UID: 0 PID: 9485 Comm: syz.0.934 Not tainted syzkaller #0 PREEMPT(full) [ 361.250765][ T9485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 361.250776][ T9485] Call Trace: [ 361.250783][ T9485] [ 361.250791][ T9485] dump_stack_lvl+0x16c/0x1f0 [ 361.250827][ T9485] should_fail_ex+0x512/0x640 [ 361.250852][ T9485] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 361.250880][ T9485] should_failslab+0xc2/0x120 [ 361.250904][ T9485] kmem_cache_alloc_noprof+0x75/0x6e0 [ 361.250932][ T9485] ? skb_clone+0x190/0x3f0 [ 361.250971][ T9485] ? skb_clone+0x190/0x3f0 [ 361.250995][ T9485] skb_clone+0x190/0x3f0 [ 361.251021][ T9485] netlink_deliver_tap+0xabd/0xd30 [ 361.251054][ T9485] netlink_unicast+0x64c/0x870 [ 361.251086][ T9485] ? __pfx_netlink_unicast+0x10/0x10 [ 361.251125][ T9485] netlink_sendmsg+0x8c8/0xdd0 [ 361.251158][ T9485] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.251196][ T9485] ____sys_sendmsg+0xa98/0xc70 [ 361.251218][ T9485] ? copy_msghdr_from_user+0x10a/0x160 [ 361.251242][ T9485] ? __pfx_____sys_sendmsg+0x10/0x10 [ 361.251276][ T9485] ___sys_sendmsg+0x134/0x1d0 [ 361.251304][ T9485] ? __pfx____sys_sendmsg+0x10/0x10 [ 361.251327][ T9485] ? __lock_acquire+0x622/0x1c90 [ 361.251393][ T9485] __sys_sendmsg+0x16d/0x220 [ 361.251419][ T9485] ? __pfx___sys_sendmsg+0x10/0x10 [ 361.251463][ T9485] do_syscall_64+0xcd/0xfa0 [ 361.251484][ T9485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.251505][ T9485] RIP: 0033:0x7fda28d8f6c9 [ 361.251521][ T9485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.251540][ T9485] RSP: 002b:00007fda29c82038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.251559][ T9485] RAX: ffffffffffffffda RBX: 00007fda28fe6090 RCX: 00007fda28d8f6c9 [ 361.251573][ T9485] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000005 [ 361.251585][ T9485] RBP: 00007fda29c82090 R08: 0000000000000000 R09: 0000000000000000 [ 361.251597][ T9485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.251609][ T9485] R13: 00007fda28fe6128 R14: 00007fda28fe6090 R15: 00007fffc210c728 [ 361.251638][ T9485] [ 361.473812][ C0] vkms_vblank_simulate: vblank timer overrun [ 362.461408][ T5950] rc_core: IR keymap rc-hauppauge not found [ 362.467317][ T5950] Registered IR keymap rc-empty [ 362.508180][ T9501] netlink: 28 bytes leftover after parsing attributes in process `syz.0.940'. [ 362.522452][ T9501] netlink: 32 bytes leftover after parsing attributes in process `syz.0.940'. [ 362.536838][ T5950] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 362.590901][ T5950] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 362.648163][ T30] audit: type=1400 audit(1762687723.613:517): avc: denied { read } for pid=9459 comm="syz.4.931" laddr=172.20.20.170 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 362.670096][ C0] vkms_vblank_simulate: vblank timer overrun [ 362.690289][ T5950] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 362.756425][ T5950] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input19 [ 362.778759][ T5950] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 362.808838][ T9508] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 362.816645][ T5950] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 362.842684][ T5950] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 362.874775][ T5950] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 362.910941][ T5950] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 362.940843][ T5950] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 362.970913][ T5950] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 363.014773][ T5950] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 363.040838][ T5950] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 363.061431][ T5950] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 363.083111][ T5950] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 363.092976][ T5950] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 363.643790][ T9520] overlayfs: missing 'lowerdir' [ 363.660951][ T5882] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 363.922458][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.944148][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.961200][ T5882] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 363.975786][ T5882] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 363.986308][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.999119][ T5882] usb 2-1: config 0 descriptor?? [ 364.251112][ T5945] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 364.374678][ T9] usb 5-1: USB disconnect, device number 26 [ 364.430835][ T5945] usb 4-1: Using ep0 maxpacket: 32 [ 364.437510][ T5882] hid_parser_main: 17 callbacks suppressed [ 364.437532][ T5882] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 364.467578][ T5882] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 364.470227][ T9531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.948'. [ 364.475523][ T5882] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 364.512586][ T5945] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 364.522269][ T5945] usb 4-1: config 0 has no interface number 0 [ 364.540896][ T5882] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 364.558790][ T5882] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 364.566525][ T5945] usb 4-1: config 0 interface 85 has no altsetting 0 [ 364.573550][ T5882] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 364.591657][ T5945] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 364.604633][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.620810][ T5882] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 364.628397][ T5945] usb 4-1: Product: syz [ 364.634030][ T5882] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 364.648501][ T5945] usb 4-1: Manufacturer: syz [ 364.653442][ T5882] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 364.660973][ T5945] usb 4-1: SerialNumber: syz [ 364.670598][ T5945] usb 4-1: config 0 descriptor?? [ 364.684291][ T5882] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 364.722282][ T5945] appletouch 4-1:0.85: Could not find int-in endpoint [ 364.729092][ T5945] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 364.938737][ T5882] usb 2-1: USB disconnect, device number 13 [ 364.944081][ T30] audit: type=1400 audit(1762687725.903:518): avc: denied { audit_read } for pid=9538 comm="syz.4.951" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 364.945424][ T5945] usbhid 4-1:0.85: couldn't find an input interrupt endpoint [ 365.052696][ T30] audit: type=1326 audit(1762687726.013:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9538 comm="syz.4.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dab8f6c9 code=0x7ffc0000 [ 365.075937][ C0] vkms_vblank_simulate: vblank timer overrun [ 365.091708][ T30] audit: type=1326 audit(1762687726.023:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9538 comm="syz.4.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dab8f6c9 code=0x7ffc0000 [ 365.137140][ T30] audit: type=1326 audit(1762687726.023:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9538 comm="syz.4.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f81dab8f6c9 code=0x7ffc0000 [ 365.306539][ T9535] fido_id[9535]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 365.500032][ T30] audit: type=1326 audit(1762687726.023:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9538 comm="syz.4.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dab8f6c9 code=0x7ffc0000 [ 365.523307][ C0] vkms_vblank_simulate: vblank timer overrun [ 365.555270][ T30] audit: type=1326 audit(1762687726.023:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9538 comm="syz.4.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f81dab8f6c9 code=0x7ffc0000 [ 365.667066][ T9542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.952'. [ 365.709534][ T30] audit: type=1326 audit(1762687726.023:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9538 comm="syz.4.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dab8f6c9 code=0x7ffc0000 [ 365.744194][ T30] audit: type=1326 audit(1762687726.023:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9538 comm="syz.4.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f81dab8f6c9 code=0x7ffc0000 [ 365.842137][ T30] audit: type=1326 audit(1762687726.023:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9538 comm="syz.4.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 365.930921][ T30] audit: type=1326 audit(1762687726.023:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9538 comm="syz.4.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dab8f6c9 code=0x7ffc0000 [ 365.939481][ T5945] usb 4-1: USB disconnect, device number 17 [ 366.040178][ T9559] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 366.156781][ T9560] overlayfs: missing 'lowerdir' [ 367.785956][ T9586] netlink: 28 bytes leftover after parsing attributes in process `syz.4.962'. [ 367.851908][ T9591] netlink: 32 bytes leftover after parsing attributes in process `syz.4.962'. [ 368.461877][ T979] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 368.949474][ T9601] overlayfs: missing 'lowerdir' [ 369.062065][ T979] usb 4-1: device descriptor read/64, error -71 [ 369.300798][ T979] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 369.430811][ T979] usb 4-1: device descriptor read/64, error -71 [ 369.596703][ T979] usb usb4-port1: attempt power cycle [ 369.811467][ T5882] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 369.940985][ T979] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 369.974226][ T5882] usb 5-1: device descriptor read/64, error -71 [ 369.997163][ T979] usb 4-1: device descriptor read/8, error -71 [ 370.004488][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 370.004502][ T30] audit: type=1400 audit(1762687730.973:548): avc: denied { accept } for pid=9623 comm="syz.1.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 370.157317][ T9628] FAULT_INJECTION: forcing a failure. [ 370.157317][ T9628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.170671][ T9628] CPU: 0 UID: 0 PID: 9628 Comm: syz.2.975 Not tainted syzkaller #0 PREEMPT(full) [ 370.170696][ T9628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 370.170707][ T9628] Call Trace: [ 370.170713][ T9628] [ 370.170720][ T9628] dump_stack_lvl+0x16c/0x1f0 [ 370.170756][ T9628] should_fail_ex+0x512/0x640 [ 370.170783][ T9628] strncpy_from_user+0x3b/0x2e0 [ 370.170807][ T9628] path_removexattrat+0xc6/0x5e0 [ 370.170828][ T9628] ? __pfx_path_removexattrat+0x10/0x10 [ 370.170847][ T9628] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 370.170892][ T9628] ? find_held_lock+0x2b/0x80 [ 370.170914][ T9628] ? syscall_trace_enter+0x1cb/0x240 [ 370.170941][ T9628] __x64_sys_lremovexattr+0x5e/0x80 [ 370.170963][ T9628] do_syscall_64+0xcd/0xfa0 [ 370.170983][ T9628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.171002][ T9628] RIP: 0033:0x7f4de658f6c9 [ 370.171015][ T9628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.171033][ T9628] RSP: 002b:00007f4de74b2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c6 [ 370.171052][ T9628] RAX: ffffffffffffffda RBX: 00007f4de67e5fa0 RCX: 00007f4de658f6c9 [ 370.171064][ T9628] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000200000000100 [ 370.171077][ T9628] RBP: 00007f4de74b2090 R08: 0000000000000000 R09: 0000000000000000 [ 370.171088][ T9628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.171098][ T9628] R13: 00007f4de67e6038 R14: 00007f4de67e5fa0 R15: 00007ffc46a0be08 [ 370.171122][ T9628] [ 370.231019][ T5882] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 370.290786][ T979] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 370.361561][ T979] usb 4-1: device descriptor read/8, error -71 [ 370.398461][ T9632] fuse: Invalid rootmode [ 370.440665][ T9634] fuse: Unknown parameter 'fd00000000000000000005' [ 370.461983][ T5882] usb 5-1: device descriptor read/64, error -71 [ 370.470951][ T979] usb usb4-port1: unable to enumerate USB device [ 370.570962][ T5882] usb usb5-port1: attempt power cycle [ 370.723476][ T9641] netlink: 'syz.3.980': attribute type 1 has an invalid length. [ 370.930797][ T5882] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 371.027183][ T9650] FAULT_INJECTION: forcing a failure. [ 371.027183][ T9650] name failslab, interval 1, probability 0, space 0, times 0 [ 371.040043][ T9650] CPU: 0 UID: 0 PID: 9650 Comm: syz.0.984 Not tainted syzkaller #0 PREEMPT(full) [ 371.040069][ T9650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 371.040081][ T9650] Call Trace: [ 371.040088][ T9650] [ 371.040096][ T9650] dump_stack_lvl+0x16c/0x1f0 [ 371.040130][ T9650] should_fail_ex+0x512/0x640 [ 371.040152][ T9650] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 371.040187][ T9650] should_failslab+0xc2/0x120 [ 371.040210][ T9650] kmem_cache_alloc_node_noprof+0x78/0x770 [ 371.040238][ T9650] ? __lock_acquire+0x622/0x1c90 [ 371.040266][ T9650] ? __alloc_skb+0x2b2/0x380 [ 371.040297][ T9650] ? __alloc_skb+0x2b2/0x380 [ 371.040317][ T9650] __alloc_skb+0x2b2/0x380 [ 371.040341][ T9650] ? __pfx___alloc_skb+0x10/0x10 [ 371.040375][ T9650] netlink_ack+0x15d/0xb80 [ 371.040409][ T9650] ? avc_has_perm_noaudit+0x149/0x3b0 [ 371.040444][ T9650] netlink_rcv_skb+0x332/0x420 [ 371.040472][ T9650] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 371.040497][ T9650] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 371.040538][ T9650] ? ns_capable+0xd7/0x110 [ 371.040565][ T9650] nfnetlink_rcv+0x1b3/0x430 [ 371.040587][ T9650] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 371.040609][ T9650] ? netlink_deliver_tap+0x1ae/0xd30 [ 371.040641][ T9650] netlink_unicast+0x5aa/0x870 [ 371.040675][ T9650] ? __pfx_netlink_unicast+0x10/0x10 [ 371.040710][ T9650] netlink_sendmsg+0x8c8/0xdd0 [ 371.040741][ T9650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.040781][ T9650] ____sys_sendmsg+0xa98/0xc70 [ 371.040802][ T9650] ? copy_msghdr_from_user+0x10a/0x160 [ 371.040828][ T9650] ? __pfx_____sys_sendmsg+0x10/0x10 [ 371.040861][ T9650] ___sys_sendmsg+0x134/0x1d0 [ 371.040889][ T9650] ? __pfx____sys_sendmsg+0x10/0x10 [ 371.040912][ T9650] ? __lock_acquire+0x622/0x1c90 [ 371.040978][ T9650] __sys_sendmsg+0x16d/0x220 [ 371.041005][ T9650] ? __pfx___sys_sendmsg+0x10/0x10 [ 371.041050][ T9650] do_syscall_64+0xcd/0xfa0 [ 371.041071][ T9650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.041093][ T9650] RIP: 0033:0x7fda28d8f6c9 [ 371.041109][ T9650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.041129][ T9650] RSP: 002b:00007fda29ca3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.041148][ T9650] RAX: ffffffffffffffda RBX: 00007fda28fe5fa0 RCX: 00007fda28d8f6c9 [ 371.041162][ T9650] RDX: 0000000000004084 RSI: 0000200000000040 RDI: 0000000000000003 [ 371.041174][ T9650] RBP: 00007fda29ca3090 R08: 0000000000000000 R09: 0000000000000000 [ 371.041186][ T9650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 371.041199][ T9650] R13: 00007fda28fe6038 R14: 00007fda28fe5fa0 R15: 00007fffc210c728 [ 371.041228][ T9650] [ 371.155159][ T5882] usb 5-1: device descriptor read/8, error -71 [ 371.223118][ T9652] tipc: Enabling of bearer rejected, failed to enable media [ 371.643369][ T30] audit: type=1326 audit(1762687732.443:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9656 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23a98f6c9 code=0x7ffc0000 [ 371.667661][ T30] audit: type=1326 audit(1762687732.443:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9656 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23a98f6c9 code=0x7ffc0000 [ 372.236741][ T30] audit: type=1326 audit(1762687732.443:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9656 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe23a98f6c9 code=0x7ffc0000 [ 372.304339][ T30] audit: type=1326 audit(1762687732.443:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9656 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23a98f6c9 code=0x7ffc0000 [ 372.353519][ T30] audit: type=1326 audit(1762687732.443:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9656 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23a98f6c9 code=0x7ffc0000 [ 372.441070][ T5882] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 372.461533][ T5882] usb 5-1: device descriptor read/8, error -71 [ 372.488931][ T30] audit: type=1326 audit(1762687732.443:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9656 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe23a98f6c9 code=0x7ffc0000 [ 372.566547][ T30] audit: type=1326 audit(1762687732.443:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9656 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23a98f6c9 code=0x7ffc0000 [ 372.589802][ C0] vkms_vblank_simulate: vblank timer overrun [ 372.591096][ T5882] usb usb5-port1: unable to enumerate USB device [ 372.637461][ T30] audit: type=1326 audit(1762687732.443:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9656 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23a98f6c9 code=0x7ffc0000 [ 372.762325][ T30] audit: type=1326 audit(1762687732.443:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9656 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe23a98f6c9 code=0x7ffc0000 [ 373.990632][ T9680] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 374.146025][ T9683] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20001 [ 374.399801][ T9680] netlink: 'syz.3.992': attribute type 1 has an invalid length. [ 374.850915][ T979] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 375.001037][ T979] usb 5-1: Using ep0 maxpacket: 32 [ 375.018421][ T979] usb 5-1: config 0 has an invalid interface number: 151 but max is 0 [ 375.035536][ T979] usb 5-1: config 0 has no interface number 0 [ 375.086519][ T979] usb 5-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 375.131762][ T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.210854][ T979] usb 5-1: Product: syz [ 375.215072][ T979] usb 5-1: Manufacturer: syz [ 375.228405][ T979] usb 5-1: SerialNumber: syz [ 375.281471][ T979] usb 5-1: config 0 descriptor?? [ 375.722892][ T9715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.793318][ T9715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.903557][ T979] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 376.047818][ T979] usb 5-1: USB disconnect, device number 31 [ 376.146637][ T5820] udevd[5820]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 376.513936][ T9724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1004'. [ 376.542671][ T9724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1004'. [ 376.810881][ T979] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 376.848753][ T9730] ptm ptm13: ldisc open failed (-12), clearing slot 13 [ 377.045342][ T979] usb 1-1: unable to get BOS descriptor or descriptor too short [ 377.063340][ T979] usb 1-1: config 13 has an invalid interface descriptor of length 8, skipping [ 377.093591][ T979] usb 1-1: config 13 descriptor has 1 excess byte, ignoring [ 377.121028][ T979] usb 1-1: config 13 has 0 interfaces, different from the descriptor's value: 1 [ 377.142253][ T979] usb 1-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=d2.04 [ 377.154930][ T979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.170779][ T979] usb 1-1: Product: syz [ 377.241136][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 377.249385][ T979] usb 1-1: Manufacturer: syz [ 377.263712][ T979] usb 1-1: SerialNumber: syz [ 377.423514][ T9] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 377.441797][ T9] usb 4-1: config 1 has no interface number 0 [ 377.471524][ T9] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 377.531232][ T9] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 377.543462][ T979] usb 1-1: USB disconnect, device number 23 [ 377.567453][ T9] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 64 [ 377.577498][ T9] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 377.600010][ T9] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 377.612467][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.633997][ T9] usb 4-1: Product: syz [ 377.639104][ T9] usb 4-1: Manufacturer: syz [ 377.645171][ T9] usb 4-1: SerialNumber: syz [ 377.665988][ T9741] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 377.759657][ T9741] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 378.373751][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.380085][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.906196][ T9754] FAULT_INJECTION: forcing a failure. [ 378.906196][ T9754] name failslab, interval 1, probability 0, space 0, times 0 [ 378.919111][ T9754] CPU: 0 UID: 0 PID: 9754 Comm: syz.4.1009 Not tainted syzkaller #0 PREEMPT(full) [ 378.919127][ T9754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 378.919134][ T9754] Call Trace: [ 378.919139][ T9754] [ 378.919144][ T9754] dump_stack_lvl+0x16c/0x1f0 [ 378.919165][ T9754] should_fail_ex+0x512/0x640 [ 378.919179][ T9754] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 378.919198][ T9754] should_failslab+0xc2/0x120 [ 378.919211][ T9754] kmem_cache_alloc_node_noprof+0x78/0x770 [ 378.919229][ T9754] ? __alloc_skb+0x2b2/0x380 [ 378.919247][ T9754] ? __alloc_skb+0x2b2/0x380 [ 378.919258][ T9754] __alloc_skb+0x2b2/0x380 [ 378.919271][ T9754] ? __pfx___alloc_skb+0x10/0x10 [ 378.919284][ T9754] ? __nla_parse+0x40/0x60 [ 378.919303][ T9754] netlink_dump+0x19b/0xd30 [ 378.919317][ T9754] ? __pfx_strset_parse_request+0x10/0x10 [ 378.919335][ T9754] ? __pfx_netlink_dump+0x10/0x10 [ 378.919349][ T9754] ? __pfx_strset_parse_request+0x10/0x10 [ 378.919370][ T9754] ? __pfx_ethnl_default_start+0x10/0x10 [ 378.919384][ T9754] ? genl_start+0x67f/0x980 [ 378.919396][ T9754] __netlink_dump_start+0x6d6/0x990 [ 378.919413][ T9754] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 378.919425][ T9754] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 378.919440][ T9754] ? __pfx_genl_get_cmd+0x10/0x10 [ 378.919454][ T9754] ? __pfx_genl_start+0x10/0x10 [ 378.919463][ T9754] ? __pfx_genl_dumpit+0x10/0x10 [ 378.919471][ T9754] ? __pfx_genl_done+0x10/0x10 [ 378.919483][ T9754] ? __radix_tree_lookup+0x21f/0x2c0 [ 378.919501][ T9754] genl_rcv_msg+0x46e/0x800 [ 378.919514][ T9754] ? __pfx_genl_rcv_msg+0x10/0x10 [ 378.919524][ T9754] ? __pfx_ethnl_default_start+0x10/0x10 [ 378.919536][ T9754] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 378.919549][ T9754] ? __pfx_ethnl_default_done+0x10/0x10 [ 378.919568][ T9754] netlink_rcv_skb+0x158/0x420 [ 378.919583][ T9754] ? __pfx_genl_rcv_msg+0x10/0x10 [ 378.919594][ T9754] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 378.919616][ T9754] ? netlink_deliver_tap+0x1ae/0xd30 [ 378.919633][ T9754] genl_rcv+0x28/0x40 [ 378.919647][ T9754] netlink_unicast+0x5aa/0x870 [ 378.919665][ T9754] ? __pfx_netlink_unicast+0x10/0x10 [ 378.919686][ T9754] netlink_sendmsg+0x8c8/0xdd0 [ 378.919704][ T9754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.919725][ T9754] ____sys_sendmsg+0xa98/0xc70 [ 378.919736][ T9754] ? copy_msghdr_from_user+0x10a/0x160 [ 378.919750][ T9754] ? __pfx_____sys_sendmsg+0x10/0x10 [ 378.919768][ T9754] ___sys_sendmsg+0x134/0x1d0 [ 378.919783][ T9754] ? __pfx____sys_sendmsg+0x10/0x10 [ 378.919795][ T9754] ? __lock_acquire+0x622/0x1c90 [ 378.919832][ T9754] __sys_sendmsg+0x16d/0x220 [ 378.919847][ T9754] ? __pfx___sys_sendmsg+0x10/0x10 [ 378.919871][ T9754] do_syscall_64+0xcd/0xfa0 [ 378.919886][ T9754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.919898][ T9754] RIP: 0033:0x7f81dab8f6c9 [ 378.919907][ T9754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.919917][ T9754] RSP: 002b:00007f81d8dd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 378.919929][ T9754] RAX: ffffffffffffffda RBX: 00007f81dade6090 RCX: 00007f81dab8f6c9 [ 378.919936][ T9754] RDX: 0000000000000010 RSI: 0000200000000500 RDI: 0000000000000005 [ 378.919942][ T9754] RBP: 00007f81d8dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 378.919948][ T9754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 378.919954][ T9754] R13: 00007f81dade6128 R14: 00007f81dade6090 R15: 00007ffef10d2998 [ 378.919971][ T9754] [ 379.699631][ T9741] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 379.711591][ T9741] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 379.728421][ T9] usb 4-1: No status endpoint found [ 380.083036][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 380.083054][ T30] audit: type=1400 audit(1762687741.043:591): avc: denied { append } for pid=9764 comm="syz.1.1015" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 380.226856][ T5882] kernel read not supported for file /dsp (pid: 5882 comm: kworker/1:3) [ 380.447853][ T9741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.536402][ T9741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.617019][ T9770] No source specified [ 380.629336][ T9770] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1016'. [ 380.650411][ T9772] netlink: 'syz.1.1017': attribute type 1 has an invalid length. [ 381.210892][ T9] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 381.218701][ T9782] xt_hashlimit: invalid rate [ 381.398279][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.409702][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 381.421477][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 381.451754][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 381.467321][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 381.485994][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 381.503672][ T9] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 381.516421][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.524750][ T9] usb 5-1: Product: syz [ 381.533751][ T9] usb 5-1: Manufacturer: syz [ 381.546629][ T9] usb 5-1: SerialNumber: syz [ 381.574540][ T10] usb 4-1: USB disconnect, device number 22 [ 381.594809][ T9] usb 5-1: config 0 descriptor?? [ 381.602926][ T9775] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 381.612238][ T9] ati_remote 5-1:0.0: ati_remote_probe: Unexpected endpoint_out [ 382.132805][ T5882] usb 5-1: USB disconnect, device number 32 [ 382.335737][ T6653] udevd[6653]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 383.322939][ T9822] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1029'. [ 383.340080][ T9821] sg_write: data in/out 768/168 bytes for SCSI command 0x96-- guessing data in; [ 383.340080][ T9821] program syz.4.1028 not setting count and/or reply_len properly [ 383.371292][ T30] audit: type=1400 audit(1762687744.333:592): avc: denied { read } for pid=9815 comm="syz.4.1028" path="socket:[27388]" dev="sockfs" ino=27388 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 383.622091][ T9827] FAULT_INJECTION: forcing a failure. [ 383.622091][ T9827] name failslab, interval 1, probability 0, space 0, times 0 [ 383.652184][ T9827] CPU: 0 UID: 0 PID: 9827 Comm: syz.1.1030 Not tainted syzkaller #0 PREEMPT(full) [ 383.652214][ T9827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 383.652234][ T9827] Call Trace: [ 383.652240][ T9827] [ 383.652248][ T9827] dump_stack_lvl+0x16c/0x1f0 [ 383.652283][ T9827] should_fail_ex+0x512/0x640 [ 383.652305][ T9827] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 383.652332][ T9827] should_failslab+0xc2/0x120 [ 383.652355][ T9827] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 383.652378][ T9827] ? vfs_parse_fs_qstr+0x112/0x1c0 [ 383.652406][ T9827] ? kmemdup_nul+0x49/0xf0 [ 383.652433][ T9827] kmemdup_nul+0x49/0xf0 [ 383.652462][ T9827] vfs_parse_fs_qstr+0x112/0x1c0 [ 383.652484][ T9827] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 383.652517][ T9827] ? shmem_next_opt+0xbc/0x120 [ 383.652540][ T9827] ? __pfx_shmem_next_opt+0x10/0x10 [ 383.652561][ T9827] vfs_parse_monolithic_sep+0x18d/0x210 [ 383.652588][ T9827] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 383.652610][ T9827] ? shmem_init_fs_context+0x254/0x2f0 [ 383.652634][ T9827] ? __pfx_shmem_init_fs_context+0x10/0x10 [ 383.652658][ T9827] ? alloc_fs_context+0x59b/0x9c0 [ 383.652686][ T9827] path_mount+0xd20/0x23a0 [ 383.652714][ T9827] ? __pfx_path_mount+0x10/0x10 [ 383.652738][ T9827] ? kmem_cache_free+0x2d4/0x6c0 [ 383.652766][ T9827] ? putname+0x154/0x1a0 [ 383.652794][ T9827] ? putname+0x154/0x1a0 [ 383.652814][ T9827] ? putname+0x154/0x1a0 [ 383.652840][ T9827] ? __x64_sys_mount+0x293/0x310 [ 383.652860][ T9827] __x64_sys_mount+0x293/0x310 [ 383.652884][ T9827] ? __pfx___x64_sys_mount+0x10/0x10 [ 383.652916][ T9827] do_syscall_64+0xcd/0xfa0 [ 383.652937][ T9827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.652958][ T9827] RIP: 0033:0x7fe23a98f6c9 [ 383.652974][ T9827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.652993][ T9827] RSP: 002b:00007fe23b75c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 383.653012][ T9827] RAX: ffffffffffffffda RBX: 00007fe23abe5fa0 RCX: 00007fe23a98f6c9 [ 383.653025][ T9827] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000000 [ 383.653037][ T9827] RBP: 00007fe23b75c090 R08: 0000200000000980 R09: 0000000000000000 [ 383.653049][ T9827] R10: 0000000000084022 R11: 0000000000000246 R12: 0000000000000002 [ 383.653060][ T9827] R13: 00007fe23abe6038 R14: 00007fe23abe5fa0 R15: 00007ffc7783ebd8 [ 383.653089][ T9827] [ 384.650921][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 384.888039][ T9835] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1031'. [ 384.937136][ T9835] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1031'. [ 385.293550][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 385.336032][ T9] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 385.441005][ T9] usb 4-1: config 0 has no interface number 0 [ 385.448898][ T9] usb 4-1: config 0 interface 85 has no altsetting 0 [ 385.464604][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 385.474311][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.485103][ T9] usb 4-1: Product: syz [ 385.489761][ T9] usb 4-1: Manufacturer: syz [ 385.495864][ T9] usb 4-1: SerialNumber: syz [ 385.506139][ T9] usb 4-1: config 0 descriptor?? [ 385.722684][ T9] appletouch 4-1:0.85: Could not find int-in endpoint [ 385.729878][ T9] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 385.739167][ T9] usbhid 4-1:0.85: couldn't find an input interrupt endpoint [ 386.588194][ T5882] usb 4-1: USB disconnect, device number 23 [ 386.596885][ T30] audit: type=1400 audit(1762687747.553:593): avc: denied { create } for pid=9859 comm="syz.0.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 387.587230][ T9879] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1047'. [ 387.621906][ T9884] netlink: 'syz.4.1048': attribute type 10 has an invalid length. [ 387.683146][ T30] audit: type=1400 audit(1762687748.643:594): avc: denied { setopt } for pid=9883 comm="syz.4.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 387.772707][ T30] audit: type=1400 audit(1762687748.683:595): avc: denied { listen } for pid=9885 comm="syz.3.1049" lport=52768 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 389.331782][ T9903] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1052'. [ 389.525745][ T30] audit: type=1400 audit(1762687750.493:596): avc: denied { create } for pid=9909 comm="syz.2.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 389.606162][ T30] audit: type=1400 audit(1762687750.493:597): avc: denied { module_request } for pid=9909 comm="syz.2.1056" kmod="net-pf-5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 389.644955][ T9917] fuse: Unknown parameter 'user_id00000000000000000000' [ 389.670824][ T5950] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 389.798190][ T9921] No source specified [ 389.807209][ T9921] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1058'. [ 389.823728][ T5950] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 389.836139][ T5950] usb 2-1: config 1 has no interface number 0 [ 389.844999][ T5950] usb 2-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 389.866206][ T5950] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0xB has an invalid bInterval 65, changing to 10 [ 389.880618][ T5950] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 389.967629][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.010797][ T5950] usb 2-1: Product: syz [ 390.015155][ T5950] usb 2-1: Manufacturer: syz [ 390.019942][ T5950] usb 2-1: SerialNumber: syz [ 390.046220][ T9906] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 390.061694][ T5950] usb 2-1: Expected 3 endpoints, found: 2 [ 390.477712][ T30] audit: type=1400 audit(1762687751.403:598): avc: denied { write } for pid=9898 comm="syz.1.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 390.544195][ T5882] usb 2-1: USB disconnect, device number 14 [ 390.662160][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 390.820771][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 390.832796][ T9] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 390.841517][ T9] usb 5-1: config 0 has no interface number 0 [ 390.847721][ T9] usb 5-1: config 0 interface 85 has no altsetting 0 [ 390.856656][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 390.876602][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.887018][ T9] usb 5-1: Product: syz [ 390.891307][ T9] usb 5-1: Manufacturer: syz [ 390.896340][ T9] usb 5-1: SerialNumber: syz [ 390.904556][ T9] usb 5-1: config 0 descriptor?? [ 390.914813][ T9] appletouch 5-1:0.85: Could not find int-in endpoint [ 390.921945][ T9] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 390.931157][ T9] usbhid 5-1:0.85: couldn't find an input interrupt endpoint [ 391.883329][ T9] usb 5-1: USB disconnect, device number 33 [ 392.411030][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 392.477758][ T9951] fuse: Unknown parameter 'user_id00000000000000000000' [ 392.702118][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 392.873095][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 392.889378][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 392.920009][ T9953] netlink: 'syz.3.1069': attribute type 1 has an invalid length. [ 393.348830][ T9] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 393.381912][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.391792][ T9] usb 2-1: Product: syz [ 393.454051][ T9] usb 2-1: Manufacturer: syz [ 393.458691][ T9] usb 2-1: SerialNumber: syz [ 393.523447][ T9] usb 2-1: config 0 descriptor?? [ 393.539131][ T9949] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 393.694466][ T9949] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 393.711095][ T9] usb 2-1: ucan: probing device on interface #0 [ 393.830549][ T9971] ip6gre1: entered promiscuous mode [ 394.307853][ T9970] FAULT_INJECTION: forcing a failure. [ 394.307853][ T9970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.321005][ T9970] CPU: 0 UID: 0 PID: 9970 Comm: syz.3.1074 Not tainted syzkaller #0 PREEMPT(full) [ 394.321022][ T9970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 394.321029][ T9970] Call Trace: [ 394.321034][ T9970] [ 394.321040][ T9970] dump_stack_lvl+0x16c/0x1f0 [ 394.321063][ T9970] should_fail_ex+0x512/0x640 [ 394.321079][ T9970] _copy_to_user+0x32/0xd0 [ 394.321093][ T9970] generic_map_lookup_batch+0x5c8/0xb50 [ 394.321118][ T9970] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 394.321144][ T9970] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 394.321159][ T9970] bpf_map_do_batch+0x26c/0x680 [ 394.321173][ T9970] __sys_bpf+0x15a9/0x4980 [ 394.321191][ T9970] ? __pfx___sys_bpf+0x10/0x10 [ 394.321206][ T9970] ? find_held_lock+0x2b/0x80 [ 394.321224][ T9970] ? find_held_lock+0x2b/0x80 [ 394.321240][ T9970] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 394.321260][ T9970] ? fput+0x9b/0xd0 [ 394.321274][ T9970] ? ksys_write+0x1ac/0x250 [ 394.321283][ T9970] ? __pfx_ksys_write+0x10/0x10 [ 394.321296][ T9970] __x64_sys_bpf+0x78/0xc0 [ 394.321311][ T9970] ? lockdep_hardirqs_on+0x7c/0x110 [ 394.321328][ T9970] do_syscall_64+0xcd/0xfa0 [ 394.321339][ T9970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.321351][ T9970] RIP: 0033:0x7f490758f6c9 [ 394.321361][ T9970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.321372][ T9970] RSP: 002b:00007f490837d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 394.321383][ T9970] RAX: ffffffffffffffda RBX: 00007f49077e5fa0 RCX: 00007f490758f6c9 [ 394.321390][ T9970] RDX: 0000000000000038 RSI: 00002000000004c0 RDI: 0000000000000018 [ 394.321397][ T9970] RBP: 00007f490837d090 R08: 0000000000000000 R09: 0000000000000000 [ 394.321403][ T9970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.321410][ T9970] R13: 00007f49077e6038 R14: 00007f49077e5fa0 R15: 00007fffbbe31de8 [ 394.321426][ T9970] [ 395.424496][ T9989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1078'. [ 395.447945][ T9] usb 2-1: ucan: failed to retrieve device info [ 395.455450][ T9] usb 2-1: ucan: probe failed; try to update the device firmware [ 395.476596][ T9991] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1079'. [ 395.567312][ T9995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19992 sclass=netlink_route_socket pid=9995 comm=syz.0.1081 [ 395.800860][ T5945] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 395.856467][ T30] audit: type=1400 audit(1762687756.823:599): avc: denied { append } for pid=10000 comm="syz.2.1083" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 395.859082][T10001] loop6: detected capacity change from 0 to 2640 [ 395.892655][ T6653] Buffer I/O error on dev loop6, logical block 0, async page read [ 395.922653][ T6653] Buffer I/O error on dev loop6, logical block 0, async page read [ 395.948939][ T6653] Buffer I/O error on dev loop6, logical block 0, async page read [ 395.976029][ T6653] Buffer I/O error on dev loop6, logical block 0, async page read [ 395.984286][ T6653] Buffer I/O error on dev loop6, logical block 0, async page read [ 395.992210][ T5945] usb 4-1: Using ep0 maxpacket: 32 [ 396.003957][ T6653] Buffer I/O error on dev loop6, logical block 0, async page read [ 396.014315][ T6653] Buffer I/O error on dev loop6, logical block 0, async page read [ 396.023700][ T6653] Buffer I/O error on dev loop6, logical block 0, async page read [ 396.035033][ T6653] ldm_validate_partition_table(): Disk read failed. [ 396.035723][ T5945] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 396.042332][ T6653] Buffer I/O error on dev loop6, logical block 0, async page read [ 396.058728][ T6653] Buffer I/O error on dev loop6, logical block 0, async page read [ 396.173541][ T5945] usb 4-1: config 0 has no interface number 0 [ 396.179858][ T5945] usb 4-1: config 0 interface 85 has no altsetting 0 [ 396.197462][ T5945] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 396.210308][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.211170][ T6653] Dev loop6: unable to read RDB block 0 [ 396.218743][ T5945] usb 4-1: Product: syz [ 396.349410][ T6653] loop6: unable to read partition table [ 396.688675][ T43] usb 2-1: USB disconnect, device number 15 [ 396.699634][ T30] audit: type=1400 audit(1762687757.233:600): avc: denied { bind } for pid=10000 comm="syz.2.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 396.736967][T10001] ldm_validate_partition_table(): Disk read failed. [ 396.747597][ T30] audit: type=1400 audit(1762687757.253:601): avc: denied { write } for pid=10000 comm="syz.2.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 396.760784][ T5945] usb 4-1: Manufacturer: syz [ 396.784336][ T5945] usb 4-1: SerialNumber: syz [ 396.794921][T10001] Dev loop6: unable to read RDB block 0 [ 396.831005][ T5945] usb 4-1: config 0 descriptor?? [ 396.870379][T10001] loop6: unable to read partition table [ 396.889322][T10001] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 397.242541][ T5945] appletouch 4-1:0.85: Could not find int-in endpoint [ 397.243270][ T5185] ldm_validate_partition_table(): Disk read failed. [ 397.256601][ T5945] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 397.803272][ T5185] Dev loop6: unable to read RDB block 0 [ 397.809299][ T5185] loop6: unable to read partition table [ 398.104225][ T5945] usbhid 4-1:0.85: couldn't find an input interrupt endpoint [ 398.697559][ T10] usb 4-1: USB disconnect, device number 24 [ 399.711157][ T30] audit: type=1400 audit(1762687760.683:602): avc: denied { execute } for pid=10048 comm="syz.0.1095" name="cgroup" dev="tmpfs" ino=1213 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 399.929007][ T30] audit: type=1400 audit(1762687760.893:603): avc: denied { ioctl } for pid=10048 comm="syz.0.1095" path="/dev/ptyq4" dev="devtmpfs" ino=123 ioctlcmd=0x4b2f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 401.508122][T10064] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1098'. [ 402.884350][T10079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1101'. [ 403.015571][T10089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19992 sclass=netlink_route_socket pid=10089 comm=syz.2.1106 [ 403.828576][T10097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1109'. [ 405.050943][T10100] SELinux: failed to load policy [ 405.454078][T10105] fuse: Bad value for 'fd' [ 405.542235][T10110] FAULT_INJECTION: forcing a failure. [ 405.542235][T10110] name failslab, interval 1, probability 0, space 0, times 0 [ 405.555312][T10110] CPU: 1 UID: 0 PID: 10110 Comm: syz.4.1111 Not tainted syzkaller #0 PREEMPT(full) [ 405.555340][T10110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 405.555351][T10110] Call Trace: [ 405.555357][T10110] [ 405.555365][T10110] dump_stack_lvl+0x16c/0x1f0 [ 405.555399][T10110] should_fail_ex+0x512/0x640 [ 405.555418][T10110] ? fs_reclaim_acquire+0xae/0x150 [ 405.555439][T10110] should_failslab+0xc2/0x120 [ 405.555460][T10110] __kmalloc_noprof+0xdd/0x880 [ 405.555485][T10110] ? kfree+0x252/0x6d0 [ 405.555508][T10110] ? trace_kmalloc+0x2b/0xd0 [ 405.555527][T10110] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 405.555556][T10110] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 405.555578][T10110] tomoyo_realpath_from_path+0xc2/0x6e0 [ 405.555611][T10110] ? tomoyo_fill_path_info+0x233/0x420 [ 405.555642][T10110] tomoyo_mount_acl+0x1ae/0x850 [ 405.555662][T10110] ? bpf_ksym_find+0x127/0x1c0 [ 405.555696][T10110] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 405.555725][T10110] ? is_bpf_text_address+0x94/0x1a0 [ 405.555751][T10110] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 405.555771][T10110] ? unwind_get_return_address+0x59/0xa0 [ 405.555826][T10110] ? tomoyo_domain+0xbb/0x150 [ 405.555850][T10110] ? tomoyo_profile+0x47/0x60 [ 405.555877][T10110] tomoyo_mount_permission+0x16d/0x420 [ 405.555898][T10110] ? tomoyo_mount_permission+0x14f/0x420 [ 405.555920][T10110] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 405.555959][T10110] security_sb_mount+0x9b/0x260 [ 405.555981][T10110] path_mount+0x158/0x23a0 [ 405.556009][T10110] ? __pfx_path_mount+0x10/0x10 [ 405.556033][T10110] ? kmem_cache_free+0x2d4/0x6c0 [ 405.556060][T10110] ? putname+0x154/0x1a0 [ 405.556089][T10110] ? putname+0x154/0x1a0 [ 405.556109][T10110] ? putname+0x154/0x1a0 [ 405.556135][T10110] ? __x64_sys_mount+0x293/0x310 [ 405.556155][T10110] __x64_sys_mount+0x293/0x310 [ 405.556179][T10110] ? __pfx___x64_sys_mount+0x10/0x10 [ 405.556211][T10110] do_syscall_64+0xcd/0xfa0 [ 405.556232][T10110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.556253][T10110] RIP: 0033:0x7f81dab8f6c9 [ 405.556270][T10110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.556290][T10110] RSP: 002b:00007f81d8df6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 405.556309][T10110] RAX: ffffffffffffffda RBX: 00007f81dade5fa0 RCX: 00007f81dab8f6c9 [ 405.556323][T10110] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 405.556335][T10110] RBP: 00007f81d8df6090 R08: 0000200000000080 R09: 0000000000000000 [ 405.556348][T10110] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000001 [ 405.556360][T10110] R13: 00007f81dade6038 R14: 00007f81dade5fa0 R15: 00007ffef10d2998 [ 405.556390][T10110] [ 405.558098][T10110] ERROR: Out of memory at tomoyo_realpath_from_path. [ 408.148417][T10120] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1114'. [ 408.359151][ T30] audit: type=1400 audit(1762687769.323:604): avc: denied { connect } for pid=10125 comm="syz.0.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 408.662717][ T30] audit: type=1400 audit(1762687769.323:605): avc: denied { bind } for pid=10125 comm="syz.0.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 408.693715][ T30] audit: type=1400 audit(1762687769.323:606): avc: denied { getopt } for pid=10125 comm="syz.0.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 409.505564][T10144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1119'. [ 410.418588][T10162] FAULT_INJECTION: forcing a failure. [ 410.418588][T10162] name failslab, interval 1, probability 0, space 0, times 0 [ 410.431391][T10162] CPU: 1 UID: 0 PID: 10162 Comm: syz.0.1123 Not tainted syzkaller #0 PREEMPT(full) [ 410.431419][T10162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 410.431431][T10162] Call Trace: [ 410.431438][T10162] [ 410.431446][T10162] dump_stack_lvl+0x16c/0x1f0 [ 410.431481][T10162] should_fail_ex+0x512/0x640 [ 410.431505][T10162] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 410.431547][T10162] should_failslab+0xc2/0x120 [ 410.431570][T10162] kmem_cache_alloc_node_noprof+0x78/0x770 [ 410.431598][T10162] ? do_syscall_64+0xcd/0xfa0 [ 410.431616][T10162] ? __alloc_skb+0x2b2/0x380 [ 410.431647][T10162] ? __alloc_skb+0x2b2/0x380 [ 410.431669][T10162] __alloc_skb+0x2b2/0x380 [ 410.431693][T10162] ? __pfx___alloc_skb+0x10/0x10 [ 410.431729][T10162] netlink_dump+0x19b/0xd30 [ 410.431760][T10162] ? __pfx_netlink_dump+0x10/0x10 [ 410.431785][T10162] ? rcu_is_watching+0x12/0xc0 [ 410.431810][T10162] ? kasan_quarantine_put+0x10a/0x240 [ 410.431845][T10162] ? kfree_skbmem+0x1a4/0x1f0 [ 410.431863][T10162] ? kfree_skbmem+0x1a4/0x1f0 [ 410.431886][T10162] netlink_recvmsg+0x7dc/0xa90 [ 410.431915][T10162] ? __pfx_netlink_recvmsg+0x10/0x10 [ 410.431946][T10162] ? iovec_from_user+0xbb/0x140 [ 410.431979][T10162] ____sys_recvmsg+0x5f9/0x6b0 [ 410.432016][T10162] ? __pfx_____sys_recvmsg+0x10/0x10 [ 410.432056][T10162] ? kfree+0x252/0x6d0 [ 410.432081][T10162] ? __lock_acquire+0x622/0x1c90 [ 410.432116][T10162] ___sys_recvmsg+0x114/0x1a0 [ 410.432143][T10162] ? __pfx____sys_recvmsg+0x10/0x10 [ 410.432187][T10162] ? __pfx___might_resched+0x10/0x10 [ 410.432219][T10162] do_recvmmsg+0x2fe/0x750 [ 410.432250][T10162] ? __pfx_do_recvmmsg+0x10/0x10 [ 410.432282][T10162] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 410.432313][T10162] ? __fget_files+0x20e/0x3c0 [ 410.432341][T10162] __x64_sys_recvmmsg+0x22a/0x280 [ 410.432370][T10162] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 410.432407][T10162] do_syscall_64+0xcd/0xfa0 [ 410.432428][T10162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.432449][T10162] RIP: 0033:0x7fda28d8f6c9 [ 410.432465][T10162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.432484][T10162] RSP: 002b:00007fda29c61038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 410.432503][T10162] RAX: ffffffffffffffda RBX: 00007fda28fe6180 RCX: 00007fda28d8f6c9 [ 410.432521][T10162] RDX: 000000000000005b RSI: 00002000000021c0 RDI: 0000000000000003 [ 410.432534][T10162] RBP: 00007fda29c61090 R08: 0000000000000000 R09: 0000000000000000 [ 410.432546][T10162] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000002 [ 410.432558][T10162] R13: 00007fda28fe6218 R14: 00007fda28fe6180 R15: 00007fffc210c728 [ 410.432590][T10162] [ 411.491365][ T24] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 411.613757][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 411.787965][ T24] usb 4-1: device descriptor read/64, error -71 [ 411.845726][ T30] audit: type=1400 audit(1762687772.763:607): avc: denied { read } for pid=10167 comm="syz.4.1126" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 411.869746][ C0] vkms_vblank_simulate: vblank timer overrun [ 411.920859][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 411.927925][ T9] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 411.936461][ T9] usb 1-1: config 0 has no interface number 0 [ 411.942848][ T9] usb 1-1: config 0 interface 12 has no altsetting 0 [ 411.956774][ T9] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 411.966576][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.053888][T10184] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1130'. [ 412.075754][ T9] usb 1-1: Product: syz [ 412.085860][ T9] usb 1-1: Manufacturer: syz [ 412.576254][ T24] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 412.610783][ T9] usb 1-1: SerialNumber: syz [ 412.629197][ T9] usb 1-1: config 0 descriptor?? [ 412.720825][ T24] usb 4-1: device descriptor read/64, error -71 [ 412.833120][ T24] usb usb4-port1: attempt power cycle [ 413.290936][ T24] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 413.343211][ T24] usb 4-1: device descriptor read/8, error -71 [ 413.779307][T10201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.873972][T10202] mkiss: ax0: crc mode is auto. [ 413.890854][ T24] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 413.911703][ T24] usb 4-1: device descriptor read/8, error -71 [ 413.942273][T10201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.084479][ T24] usb usb4-port1: unable to enumerate USB device [ 414.482345][ T30] audit: type=1400 audit(1762687775.443:608): avc: denied { mounton } for pid=10207 comm="syz.3.1136" path="/syzcgroup/cpu/syz3/cgroup.procs" dev="cgroup" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 414.482870][ T979] libceph: connect (1)[c::]:6789 error -101 [ 414.506964][ C0] vkms_vblank_simulate: vblank timer overrun [ 414.521033][ T979] libceph: mon0 (1)[c::]:6789 connect error [ 414.800845][ T10] libceph: connect (1)[c::]:6789 error -101 [ 414.819383][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 415.171721][ T9] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -32 [ 415.250921][ T9] f81534 1-1:0.12: f81534_find_config_idx: read failed: -32 [ 415.258324][ T9] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 415.341440][ T979] libceph: connect (1)[c::]:6789 error -101 [ 415.347604][ T979] libceph: mon0 (1)[c::]:6789 connect error [ 415.910812][ T9] f81534 1-1:0.12: probe with driver f81534 failed with error -32 [ 415.994359][T10208] ceph: No mds server is up or the cluster is laggy [ 416.591581][ T9] usb 1-1: USB disconnect, device number 24 [ 417.419043][ T30] audit: type=1800 audit(1762687778.373:609): pid=10251 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1144" name="bus" dev="overlay" ino=1209 res=0 errno=0 [ 418.297217][T10263] ------------[ cut here ]------------ [ 418.303106][T10263] kernel BUG at fs/buffer.c:1582! [ 418.308174][T10263] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 418.314588][T10263] CPU: 1 UID: 0 PID: 10263 Comm: syz.4.1148 Not tainted syzkaller #0 PREEMPT(full) [ 418.323948][T10263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 418.333996][T10263] RIP: 0010:folio_set_bh+0x18a/0x1e0 [ 418.339283][T10263] Code: df 48 89 fa 4c 01 e3 48 c1 ea 03 80 3c 02 00 75 43 48 89 5d 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc e8 87 21 71 ff 90 <0f> 0b e8 4f b1 d9 ff e9 a5 fe ff ff 4c 89 ef e8 52 b0 d9 ff e9 cf [ 418.358886][T10263] RSP: 0018:ffffc9000b76f8c8 EFLAGS: 00010283 [ 418.364947][T10263] RAX: 0000000000003a31 RBX: ffffea0000d64a00 RCX: ffffc9000fb02000 [ 418.372908][T10263] RDX: 0000000000080000 RSI: ffffffff824bd749 RDI: 0000000000000006 [ 418.380867][T10263] RBP: ffff8880581a9570 R08: 0000000000000006 R09: 0000000000004000 [ 418.388820][T10263] R10: 0000000000004000 R11: 0000000000000001 R12: 0000000000004000 [ 418.396775][T10263] R13: 0000000000000002 R14: 0000000000004000 R15: 0000000000000000 [ 418.404731][T10263] FS: 00007f81d8db46c0(0000) GS:ffff888124b08000(0000) knlGS:0000000000000000 [ 418.413644][T10263] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 418.420220][T10263] CR2: 000000110c315b22 CR3: 000000007bc9b000 CR4: 00000000003526f0 [ 418.428173][T10263] Call Trace: [ 418.431432][T10263] [ 418.434346][T10263] folio_alloc_buffers+0x295/0x6c0 [ 418.439453][T10263] __getblk_slow+0x1f4/0x560 [ 418.444033][T10263] bdev_getblk+0xd4/0xe0 [ 418.448261][T10263] __bread_gfp+0x86/0x3c0 [ 418.452577][T10263] ntfs_bread+0xd9/0x210 [ 418.456808][T10263] ntfs_fill_super+0x64f/0x4280 [ 418.461656][T10263] ? __pfx_vsnprintf+0x10/0x10 [ 418.466451][T10263] ? __pfx_ntfs_fill_super+0x10/0x10 [ 418.471730][T10263] ? lockdep_hardirqs_on+0x7c/0x110 [ 418.476927][T10263] ? __pfx_ntfs_fill_super+0x10/0x10 [ 418.482206][T10263] get_tree_bdev_flags+0x38c/0x620 [ 418.487311][T10263] ? __pfx_ntfs_fill_super+0x10/0x10 [ 418.492595][T10263] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 418.498208][T10263] ? __pfx_ntfs_fs_get_tree+0x10/0x10 [ 418.503568][T10263] ? vfs_get_tree+0x45/0x340 [ 418.508143][T10263] vfs_get_tree+0x8e/0x340 [ 418.512553][T10263] path_mount+0x7b9/0x23a0 [ 418.516953][T10263] ? __pfx_path_mount+0x10/0x10 [ 418.521786][T10263] ? putname+0x154/0x1a0 [ 418.526013][T10263] ? putname+0x154/0x1a0 [ 418.530235][T10263] ? putname+0x154/0x1a0 [ 418.534457][T10263] ? __x64_sys_mount+0x293/0x310 [ 418.539375][T10263] __x64_sys_mount+0x293/0x310 [ 418.544124][T10263] ? __pfx___x64_sys_mount+0x10/0x10 [ 418.549392][T10263] do_syscall_64+0xcd/0xfa0 [ 418.553879][T10263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.559753][T10263] RIP: 0033:0x7f81dab8f6c9 [ 418.564148][T10263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.583736][T10263] RSP: 002b:00007f81d8db4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 418.592129][T10263] RAX: ffffffffffffffda RBX: 00007f81dade6180 RCX: 00007f81dab8f6c9 [ 418.600079][T10263] RDX: 0000200000000100 RSI: 00002000000006c0 RDI: 0000200000000680 [ 418.608027][T10263] RBP: 00007f81dac11f91 R08: 0000000000000000 R09: 0000000000000000 [ 418.616005][T10263] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000 [ 418.624012][T10263] R13: 00007f81dade6218 R14: 00007f81dade6180 R15: 00007ffef10d2998 [ 418.631981][T10263] [ 418.634981][T10263] Modules linked in: [ 418.638974][ C1] vkms_vblank_simulate: vblank timer overrun [ 418.645308][T10263] ---[ end trace 0000000000000000 ]--- [ 418.650730][ T30] audit: type=1400 audit(1762687779.263:610): avc: denied { ioctl } for pid=10257 comm="syz.4.1148" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 418.680917][T10263] RIP: 0010:folio_set_bh+0x18a/0x1e0 [ 418.686305][T10263] Code: df 48 89 fa 4c 01 e3 48 c1 ea 03 80 3c 02 00 75 43 48 89 5d 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc e8 87 21 71 ff 90 <0f> 0b e8 4f b1 d9 ff e9 a5 fe ff ff 4c 89 ef e8 52 b0 d9 ff e9 cf [ 418.762434][T10263] RSP: 0018:ffffc9000b76f8c8 EFLAGS: 00010283 [ 418.768975][T10263] RAX: 0000000000003a31 RBX: ffffea0000d64a00 RCX: ffffc9000fb02000 [ 418.777404][T10263] RDX: 0000000000080000 RSI: ffffffff824bd749 RDI: 0000000000000006 [ 418.788365][T10263] RBP: ffff8880581a9570 R08: 0000000000000006 R09: 0000000000004000 [ 418.796526][T10263] R10: 0000000000004000 R11: 0000000000000001 R12: 0000000000004000 [ 418.804650][T10263] R13: 0000000000000002 R14: 0000000000004000 R15: 0000000000000000 [ 418.812774][T10263] FS: 00007f81d8db46c0(0000) GS:ffff888124a08000(0000) knlGS:0000000000000000 [ 418.822162][T10263] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 418.828898][T10263] CR2: 0000200000404030 CR3: 000000007bc9b000 CR4: 00000000003526f0 [ 418.856600][T10263] Kernel panic - not syncing: Fatal exception [ 418.862904][T10263] Kernel Offset: disabled [ 418.867208][T10263] Rebooting in 86400 seconds..