last executing test programs: 6m52.211955222s ago: executing program 1 (id=909): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bff000/0x400000)=nil) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r3, 0x708, 0x116e) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f00000001c0)={0x1, 0xe2, 0x2, &(0x7f0000000000)={0x10, "0000005d00f305dfbd0d0000008000"}}) 6m51.603800864s ago: executing program 1 (id=911): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r1, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r1, 0x0, {0x0, 0xf0}, 0x2}, 0x18, &(0x7f0000000180)={&(0x7f0000000280)="08030005c7373d5b04", 0x9}}, 0xee) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd29, 0x100000, {0x0, 0x0, 0x74, r1, {0x6, 0x8}, {0x5, 0xffff}, {0xb, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x6f4, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0xee01, 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x4904) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000000040)={@loopback}, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r6, 0x100000000) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd70100400000005000000080009000200000008000c00a80a000008000b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r7, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x0, 0x13, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x0, 0x22, 0x1}]}, 0x14}, 0x1, 0x0, 0x0, 0x44084}, 0x4000000) sendmsg$nl_generic(r5, &(0x7f0000007800)={0x0, 0x0, &(0x7f00000077c0)={&(0x7f0000000680)={0x14, 0x36, 0x51eb40323bf4c37b, 0x70bd2d, 0x25dfdbfd, {0x3}}, 0x14}}, 0x4000) socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r9 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400010000000009040000010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) 6m47.144083514s ago: executing program 1 (id=923): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f00000002c0)='./file0\x00') r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0xfffffffffffffff5, r5, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x100}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000063720000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0xfffffffffffffff5, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m44.563277354s ago: executing program 1 (id=926): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d9, @local, 0x3}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000400)="fc", 0x1}], 0x1, 0x0, 0xf5}}], 0x1, 0x0) 6m43.884736372s ago: executing program 1 (id=929): r0 = syz_open_dev$vim2m(&(0x7f00000091c0), 0x4, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000009200), 0x80, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000009280)=[{{&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000500)="22ef429ade4f2d1d0d507a4b1a386f2915bd2d2ffa67901a1a80154b2fec54338bb89f8932eeb006f45d826ecc5d9ed8654ee2b77756179bf8c2096da36badee2d461349bd1703660bc8ffb8858de536f2db0ea8c4b9e99877501203bbbd921f24605041aa76857ccb9cf9f6013edf0bfad3ca75ffa09c0c2380b4d60bf2919192cc22704eaa55146cc2e161e249d3cb37c791af06d184410b44b2c1d760ccb96332ae5748b8c38a4b02d43b10faff5ee30679b54838738fa7837ff0196552eee0fef42fe8e2d9930962322fa8ecccc1cd826762ca68cc3a7920202f2cecdd9790d773702aea86c03f7b", 0xea}, {&(0x7f0000000100)}, {&(0x7f0000000140)="87a94adfe774ac5aa0192bf9e458be078cdf61fab0978af6ea028b21548518286445b17b46433271c7c701e76429d9acac8de17766ab3b0aa5021d6b4e449df4c670ed30556fb24b537085e98bc7def05ddacf307c6a8f2d78071ec374946dd37768d62bc8fe7590ee02ad6ebc2b194792860d95", 0x74}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000001c80)="2f62e9eb1d96801e06221a7c32eea66d8ed4950988ba4d24130b37691de0e0e7408fb6cbed1cbb06c2b5f34522cd7d65953624ae4b12da8a1767ebaf59072706995b8edd3d4097a28b414b96c474b5fb190a169dc2a3a116d3e4fee1fd2861bedecea135a475691bfa8af0a4e232c8c6756ccf1270efd2bb99f98bbb6008cfbd66e7a60a4bdca673d872da", 0x8b}, {&(0x7f0000001d40)="5e3e93259d569eb0fb5138a3ed95fa38824cd7935dab96ea42e57622a45019a12de927734cc7c4d76cd8e23cc1224ed90289fb10aa0981513481f9a988d1f8d26263c05c226291d286137c9d1cf5b66adec14f02e38642bc33232398ac9203f039181fa84e3f6310c0e1d748c31fe410ba2a8da466bc6d2ebbeeb4fbfcf4afb785fdbacd3ba257b0c07c81da22fc8d3019f73d39b58a9eb91e1c52a126b1dd6abf802a8788ff9203f43e6090267a631fde99be01d1c6f1bb179bdbe69fb0", 0xbe}, {&(0x7f0000000240)="ead3cdaa40c7bb11ac238a3681bc702b5634b893829c8d838b76d288db934b39b51ee71f10d4ca0e733c466dbea6bfba579d17743d2340a938c73adf61d9bc", 0x3f}, {&(0x7f0000001e00)="247a73cfede538360551c4916b25935b7a7e14b1b95964c0a5d2177f5facecf2ae7161ec88821af96ec52820810c5d08bfed9e1b7b99c960e41285a6581827f982519f8f00e81ab29b326f4a51a85b33a4d5453c3e28a03a858ea3356fa0268ee649057a4207d6903fea35e73e366c94930abbb019342fed3cf8dfa250a9ca5d6bb0354b606a03a8a84333728d60cc3609", 0xf0}], 0x8, &(0x7f0000001f40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60, 0x4008001}}, {{&(0x7f0000001fc0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002040)=[{&(0x7f00000007c0)="5cccaf207a", 0x5}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000007cff0a9c0a80de3c1eb41442f244981c0000000000fce3b68c180002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x110}}, {{&(0x7f0000008a80)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000008e40)=[{&(0x7f0000008b00)="99e01cb07a27c3f97438895199eb10d8d7091288f4dde8e79aeb3bc9e6b0941085a0161fec42e060a4977959abc72f309de1cc0d3b3ca8a9fef1a45ff27263b4f1235df62561fa200bc5c0bf7cf2570dc14ebdbc8c0b91263fe165fe17ee5c591aad0d5acfab8018ff08934c032177dbf5c57a40054094b4de73022c616e63766a3892e45a9a278a556f03ce47eec8c7ef3bc9962b79103708822d33a0cf7c8156484412028390c658b912028aa2c40f5b7fdf4ff3fab996324c8837330dc01bb1da31b412fa97601c0a5ee1f3637aba", 0xd0}, {&(0x7f0000008c00)="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", 0xff}, {&(0x7f0000008d00)="0bbe3f327fa3fbc36214dd8c5ea057d76e742e9b6ad38f5bc789753a358507ac3965b10c50245ae3df3ce219a6b21bd05088bbdde3f4a6aa200de4a37e3356dc76a9413d3f", 0x45}, {&(0x7f0000008d80)="a3a066a4e96d07329e0b6eb62d29ca4097cf3a2df3325837f4288fa3c3da4b408b019afbab7213083e7d5a7f5c53cc286c56dea6e6b8300612193b285916f186d486a9a46fc6207ecc00517cba8e4df3d3220dc82f2bc46a99d59dc06dcc6f312803a22cef0251c990e0f2b03d6a1b62d30976db7dad6b2bdd05b9450f841a713a", 0x81}, {0x0}], 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESOCT=r0, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="cf1673e632e8de58000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x68, 0x4c000}}, {{&(0x7f0000009040)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000009180)=[{&(0x7f00000090c0)}, {&(0x7f0000009100)="7f3d4eeea3bb4869914686708e7ea13a9790abbad662060f6dff5a755fa0eb3de4cadac1e0f640cfacce17a6c4f1f5fb9f80a552df28010328a604837af7f8af8b4d67c6bb087313d88668fa7ba66b9892c6d24426f715af7c6bb2d9d606f2c1ed9bc66dafd5d3bbdc50ea22bac5627ff06e42a0d498f09a1934829974f83575", 0x80}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="000000006c3d3dd05c33f32a0d54741ac62cc9fd466c2c50", @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x28, 0x84}}], 0x4, 0x40) getgroups(0x6, &(0x7f0000000740)=[0x0, 0xffffffffffffffff, 0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff]) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000780)={{}, {0x1, 0x1}, [{0x2, 0x5}, {0x2, 0x1}, {}, {0x2, 0x2}, {0x2, 0x4}, {0x2, 0x6}], {0x4, 0x6}, [{0x8, 0x6}, {0x8, 0x2}, {0x8, 0x2}, {0x8, 0x7}, {0x8, 0x4}, {0x8, 0x6}, {0x8, 0x0, r2}], {}, {0x20, 0x3}}, 0x8c, 0x1) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000840)=ANY=[@ANYBLOB="fd0000000400000000ee27badf1afca2fce3e6118f70b3ca3800000000c0cfac5fc5ff4b5895fee19969492c7d000000005c8731f78b1e5929f5f95028d8f8ad6ee25c"], &(0x7f0000000200)='GPL\x00'}, 0x90) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}], 0x1}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000280)={r7, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x8, 0x8000], [0x0, 0x3, 0x400000006]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000100)={r8}) r9 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r10 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) dup3(r10, r6, 0x80000) syz_usb_control_io(r9, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00.'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x15482, 0x35288}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}, @IFLA_MTU={0x8}]}, 0x48}}, 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, [0x0], [0xffffffff], [], [0xfffffffffffffffc]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000040)={r12}) 6m40.614245281s ago: executing program 1 (id=940): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r2, @ANYBLOB="05"], 0x10) r3 = socket(0x1, 0x3, 0x0) bind$unix(r3, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000c80)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x1, 0x0) capset(&(0x7f0000000080)={0x20080522}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x6}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x3) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x0, 0x5, 0xfeff, 0x0, 0x0, 0x7fffffff, 0x7, 0xfffffffffffffffd, 0xfeff}) 6m25.088097172s ago: executing program 32 (id=940): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r2, @ANYBLOB="05"], 0x10) r3 = socket(0x1, 0x3, 0x0) bind$unix(r3, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000c80)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x1, 0x0) capset(&(0x7f0000000080)={0x20080522}, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x6}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x3) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x0, 0x5, 0xfeff, 0x0, 0x0, 0x7fffffff, 0x7, 0xfffffffffffffffd, 0xfeff}) 23.537708264s ago: executing program 0 (id=2064): mkdir(&(0x7f0000000380)='./file1\x00', 0xa) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x2000000000) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000000c0)='#{&\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)={0x40, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x14, 0xc, 0x0, 0x1, [{0x4}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xfffffffd}]}]}]}, 0x40}}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x400000, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r6, {0x3}}, './file1\x00'}) 23.400907386s ago: executing program 0 (id=2065): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x140, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0xdb, 0x0, 0x2}) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, r1, 0x0, 0x4}, 0x6, 0xffffffffffff0000, 0xfffffffffffffc01, 0x8000000000000000, 0x0, r2}) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f00000007c0)={0x48, 0x2, r4}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r4, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) 22.751678928s ago: executing program 0 (id=2066): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "d4dfeb1ceb40eeefe68d6cf265b68e88a8bb314f3c0f82df67e25dad70d6b31e036f9f20b70c42a4dc5b21aa28f606af1557115f56805a217afe6b467cb413b3"}, 0x48, 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x7b}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x2c}]}}]}, 0x48}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000240), 0x4af, r7}, 0x38) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) fcntl$dupfd(r2, 0x0, r2) ioctl$TCFLSH(r2, 0x400455c8, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2900, 0x0) 19.441577991s ago: executing program 2 (id=2079): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000100)={0x5, &(0x7f0000000040)=[{0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @remote}, {}, {0x0, 0x0, 0x0, @random}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7010fbdbdf250f00000008000300", @ANYRES64=r3, @ANYBLOB="050035"], 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) 19.384792287s ago: executing program 0 (id=2081): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000200)={0x14, &(0x7f00000003c0)={0xc0, 0x22, 0x5c, {0x5c, 0x21, "06ff4b7ceb819f4f3bb0ffe7ce4dde2dc007317cc708c2a64122aebfd8d4638f6ba56df78a7eaf4c2ab4c870f9265e292994025066139b892a6886c8644a5a0fe70d4fd3a117cda3fd0027ae61f2bea3c07c68cbe1c91dc0b3b1"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2401}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000480)={0x20, 0x1d, 0x53, "f954e144c6b5f209f97326d0b0c4d7f3b5fb86448a0c5cb3fbc487f758c744fee5fcb2b93d044138744e66375bd1a86de7716c01169e6846e86a870886ec1270c38f84159645f8f42d0377fb190ca2caf0e2b3"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000500), &(0x7f0000000540)={0x40, 0x5, 0x4, "bb654e77"}}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000204f045db600000000000109022d000100006002090400100503000100092100", @ANYRES16], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = dup(r1) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x4001}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) io_setup(0x9, &(0x7f0000000b80)=0x0) io_submit(r7, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x2}]) io_cancel(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x8000000000000001, 0x0, 0x2}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="040b0b00c900adc02216"], 0xe) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) 18.101185521s ago: executing program 2 (id=2084): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r0, 0x0, 0x94) 17.047706834s ago: executing program 2 (id=2091): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d00000004"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(r0, 0xd, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/19, @ANYRES32, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) 16.077985002s ago: executing program 2 (id=2092): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x2000c014}, 0x4) mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) r1 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) chdir(&(0x7f0000000140)='./bus\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x200, &(0x7f0000000080)={0x0, 0x30}) linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000180)='./file0\x00', 0x1000) linkat(r0, &(0x7f0000000000)='./file1\x00', r0, &(0x7f00000001c0)='./bus\x00', 0x400) rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') 15.90055592s ago: executing program 2 (id=2094): prlimit64(0x0, 0x8, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x33) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchown(r2, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, 0x0, 0xfdc6) socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r3 = syz_io_uring_setup(0x6232, &(0x7f0000000480)={0x0, 0xfad6, 0x0, 0x3, 0x0, 0x0, r2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x1}) fsopen(&(0x7f0000000280)='ubifs\x00', 0x0) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x1b) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000040)={r8, 0x1}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000140)={r8, 0x400}, &(0x7f0000000200)=0x8) io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0) 15.690569134s ago: executing program 2 (id=2095): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'geneve0\x00', 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)=@report={0x78, 0x20, 0x200, 0x70bd2d, 0x25dfdbfd, {0x3c, {@in=@broadcast, @in6=@rand_addr=' \x01\x00', 0x4e20, 0x0, 0x4e24, 0x8, 0xa, 0x20, 0x20, 0x6c, r0, r1}}, [@user_kmaddress={0x2c, 0x13, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0xa}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8010}, 0x1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES16, @ANYBLOB="000826bd7000fbdbdf25120000004c00028034000380080002000700000008000100010000000800020000000000080001000700000008000100070000000800020002000000080002"], 0x14c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="1400"], 0x70}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) socket$igmp(0x2, 0x3, 0x2) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSARP(r10, 0x8955, &(0x7f0000000940)={{0x2, 0x4e1f, @remote}, {0x6, @local}, 0x0, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3b}}}) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x240}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r11}, 0x11) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r9) sendmsg$IEEE802154_LIST_IFACE(r9, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f00000009c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="bbdf26bd7000fedbdf251f0000192326bb8faaf26e52bfa440fb8c3800"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r4, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x40003) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000402505a8a44000010203010802240001010b600c0904000f02070101fd090501021d2de1050009058202ff03040205"], &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x88, 0x8, 0x7a, 0x20, 0x7f}, 0x8, &(0x7f0000000140)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x380a}}, {0x8a, &(0x7f00000001c0)=@string={0x8a, 0x3, "8441960ee5248aae6d1f7ea42fbdd3979e7c381e0abb311ad00bb941c6c6ee841acf81f76233171476bc15ca866c27f8f560d22626f5c06a18aef46b050d6a673b9c4a3c0e7faaa4d4cd756face4116d50afa87e3375bbdf0dd725d07de18da6a107131839fafd1e8fd5f1479f160a28ede99efd76607947ca7150d31e714fa0a61a97572a6709b3"}}, {0x1b, &(0x7f0000000280)=@string={0x1b, 0x3, "f94abeb1178b7778b56e1a55f18b8841f3e44df4b12dff7cc3"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x300a}}]}) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000080)=0x87) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000092ecc620ac05c2773aeb010203010902240001000020000904c44102fffd01"], 0x0) close(r2) 15.421307722s ago: executing program 33 (id=2095): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'geneve0\x00', 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)=@report={0x78, 0x20, 0x200, 0x70bd2d, 0x25dfdbfd, {0x3c, {@in=@broadcast, @in6=@rand_addr=' \x01\x00', 0x4e20, 0x0, 0x4e24, 0x8, 0xa, 0x20, 0x20, 0x6c, r0, r1}}, [@user_kmaddress={0x2c, 0x13, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0xa}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8010}, 0x1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES16, @ANYBLOB="000826bd7000fbdbdf25120000004c00028034000380080002000700000008000100010000000800020000000000080001000700000008000100070000000800020002000000080002"], 0x14c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="1400"], 0x70}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) socket$igmp(0x2, 0x3, 0x2) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSARP(r10, 0x8955, &(0x7f0000000940)={{0x2, 0x4e1f, @remote}, {0x6, @local}, 0x0, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3b}}}) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x240}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r11}, 0x11) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r9) sendmsg$IEEE802154_LIST_IFACE(r9, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f00000009c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="bbdf26bd7000fedbdf251f0000192326bb8faaf26e52bfa440fb8c3800"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r4, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x40003) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000402505a8a44000010203010802240001010b600c0904000f02070101fd090501021d2de1050009058202ff03040205"], &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x88, 0x8, 0x7a, 0x20, 0x7f}, 0x8, &(0x7f0000000140)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x380a}}, {0x8a, &(0x7f00000001c0)=@string={0x8a, 0x3, "8441960ee5248aae6d1f7ea42fbdd3979e7c381e0abb311ad00bb941c6c6ee841acf81f76233171476bc15ca866c27f8f560d22626f5c06a18aef46b050d6a673b9c4a3c0e7faaa4d4cd756face4116d50afa87e3375bbdf0dd725d07de18da6a107131839fafd1e8fd5f1479f160a28ede99efd76607947ca7150d31e714fa0a61a97572a6709b3"}}, {0x1b, &(0x7f0000000280)=@string={0x1b, 0x3, "f94abeb1178b7778b56e1a55f18b8841f3e44df4b12dff7cc3"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x300a}}]}) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000080)=0x87) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000092ecc620ac05c2773aeb010203010902240001000020000904c44102fffd01"], 0x0) close(r2) 15.028807474s ago: executing program 0 (id=2103): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 14.738682855s ago: executing program 0 (id=2107): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={0x0, 0x328000, 0x1000, 0x0, 0x7}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x101240, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019600)={0x7, 0xd, &(0x7f0000019880)=ANY=[@ANYBLOB="180000000400000000000000080000009500000000000000183000000500000000000000000000009500000000000000041005000500000018100000", @ANYRES32, @ANYBLOB="00000000f6ff00000290f8fffcffffff186900000e000000000000000100008095000000000000001e44b89bbdbc35e4ba436b8671b35bdea5f650a832119723e2a71470e6ec7a1d35cc9c908d6662e612"], &(0x7f0000019440)='GPL\x00', 0x7, 0x4f, &(0x7f0000019480)=""/79, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000019500)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000019540)={0x4, 0x10, 0xcaa7, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000019580)=[0xffffffffffffffff], &(0x7f00000195c0)=[{0x3, 0x5, 0x0, 0x1}, {0x3, 0x4, 0x8, 0x8}], 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000019940)={r1, 0x0, 0xa7, 0xf3, &(0x7f00000196c0)="7dbad1f4ee3037dee2240d7b0aac173845bc9a557529750a6be5731bf36f611ecfcf6ab9020b8bd3ab6261c958139a8cdf20662919ff91358d9d95089c6d9d67eb804cf383a76fa1dd7d60da5f00b47c2f2e789bc7b48fbda5e469d43e55c95ef9a0d1198981322cbbdd97765f941edebd45fc49fc1a5f7944038659feae6daa95607cba9b1bc911f45b00cbd71b38abf128deed0df327ee070a4c8f9317271672cee368249053", &(0x7f0000019780)=""/243, 0x5, 0x0, 0x0, 0x0, &(0x7f0000019880), 0x0}, 0x50) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000000c0)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000019b00)={&(0x7f00000199c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000019ac0)={&(0x7f0000019b40)=ANY=[@ANYBLOB="88000000020101010000000000000000050000058a0001800c00028005000100010000000c00028005000100110000000000028000000100110000000c00028005000100110000000c000280050001002e00000006000340000000001400018008000100e000000208000200ac1414bb08000c400000000308001a40ffff1c8de6da790ab65ce208a349bc0001062cc692e9933ddbdf9ac8c6bc4f96b50a1d5b3e99579896cc3aee2164d8530ae2de8169a38f741800b4650c47046640970fb2936adac576f6f213bb03"], 0x88}, 0x1, 0x0, 0x0, 0x22008001}, 0x40004) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x1, 0x8}, 0xc) fcntl$getownex(r4, 0x10, &(0x7f0000000240)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000040)={0x0, 0xfffe, 0xd, 0x3d7a, 0x3}) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000019340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000019300)={&(0x7f0000019b40)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x20000004}, 0x881) r6 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) socketpair(0x28, 0x20000000000001, 0x0, &(0x7f0000000100)) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000019380)={0x5, 0x1, 0x7ff, 0x4, 0x1, 0x6}) close_range(r6, r7, 0x0) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, r0}, 0x10) 11.140247887s ago: executing program 3 (id=2116): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x17, 0x51, 0x29, 0x20, 0x557, 0x2009, 0xc71e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x58, 0x7, 0x2, 0x8a, 0xb5, 0x38, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f00000000c0)={'IDLETIMER\x00'}, &(0x7f0000000100)=0x1e) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x2010, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2340, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001f40)={0x2020}, 0x2020) write$midi(0xffffffffffffffff, &(0x7f0000000280)="4bb7018c297b62779f8c2bf67c8fa022dbf2ae70f439eec89a206198308e4965b33c5f99ec2e5a1636479de1c4560a87a6cb0e8c47ff5fbdcf92b41b2d47d85128e23d0fb04bf9bc332e4a44d23f7999ef69f4fc1f6daf6a85f932163836bf21843a243849370125700763380242e50bbe0a5357946b1ca64ea2abbfba390d0449667712a62e6ae184dd46f39f249cc8665caa999fe1043c6d35823ec65794fe4b944546e06dcd5ad7f8c3bb5883512e1a3c1689ba3c041899810fa5893dd74423e929fa110b6ddb9c8a50d4fdb091be20cc0ae63744fa2485fcd89db2", 0xdd) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x94, 0x3, [0x7cc5, 0x7, 0x3]}, 0xe) msync(&(0x7f00005b2000/0x1000)=nil, 0x1000, 0x1) close(r7) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000200), &(0x7f0000000080)=0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000440)={0x6000, 0x8, 0x1, 0x7, 0x5, 0x7, 0x0, 0x4}, 0x20) r8 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r10}, 0x18) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000100)={r9, r11}) 10.500666363s ago: executing program 5 (id=2119): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r6 = syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0x1594, 0x10100, 0x2, 0xc4}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r5}) io_uring_enter(r6, 0x44fd, 0x3, 0x1, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r9}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x42800, 0x0) getdents64(r10, &(0x7f0000000f80)=""/4096, 0x1000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x4) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@known='user.incfs.size\x00', 0x0, 0x0) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000900), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYRES32=r0, @ANYRESDEC=0x0, @ANYRES32=r4, @ANYRESDEC=0x0]) read$FUSE(r11, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(r11, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.372615143s ago: executing program 3 (id=2121): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) setreuid(0xee00, 0x0) keyctl$session_to_parent(0x12) r3 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r3, &(0x7f0000000640)='/', 0x1, 0xe) copy_file_range(r3, 0x0, r3, &(0x7f0000000080)=0x1e0, 0xff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4e}, 0x48) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x2, 0x1c, 0x0, 0x0, 0x0, [@sadb_key={0x12, 0x8, 0x408, 0x0, "d7884a389e967b9e894705b077c135fd1c4a37d5988b14f336aefd5769361ced9d4ae3916383fc275e11f5bed4ec3469dd878bea99114e2f6bc329d7acd8a89b2b2917fdeb71d607edd3d677414d4e22f99e072d04ea919734bc15cbfbbf5004f18378a4cc482d747ef47e91ccbd3d62000000000000000000000000000000ac60"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @empty}}]}, 0xe0}, 0x1, 0x7}, 0x0) 9.322382614s ago: executing program 5 (id=2122): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000150000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f00000004c0), 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_enter(r4, 0xdb4, 0x0, 0x0, 0x0, 0x0) 8.413525372s ago: executing program 3 (id=2124): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$vcsn(&(0x7f0000000100), 0x200, 0x2000) add_key$fscrypt_provisioning(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000000000001931bc64c7590d370066570e47602"], 0x48, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f0000004100)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[], 0x40}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) socket(0x400000000010, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') 7.500462642s ago: executing program 5 (id=2126): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'geneve0\x00', 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)=@report={0x78, 0x20, 0x200, 0x70bd2d, 0x25dfdbfd, {0x3c, {@in=@broadcast, @in6=@rand_addr=' \x01\x00', 0x4e20, 0x0, 0x4e24, 0x8, 0xa, 0x20, 0x20, 0x6c, r0, r1}}, [@user_kmaddress={0x2c, 0x13, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0xa}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8010}, 0x1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES16, @ANYBLOB="000826bd7000fbdbdf25120000004c00028034000380080002000700000008000100010000000800020000000000080001000700000008000100070000000800020002000000080002"], 0x14c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="1400"], 0x70}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) socket$igmp(0x2, 0x3, 0x2) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSARP(r10, 0x8955, &(0x7f0000000940)={{0x2, 0x4e1f, @remote}, {0x6, @local}, 0x0, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3b}}}) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x240}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r11}, 0x11) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r9) sendmsg$IEEE802154_LIST_IFACE(r9, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f00000009c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="bbdf26bd7000fedbdf251f0000192326bb8faaf26e52bfa440fb8c3800"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r4, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x40003) r13 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000402505a8a44000010203010802240001010b600c0904000f02070101fd090501021d2de1050009058202ff03040205"], &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x88, 0x8, 0x7a, 0x20, 0x7f}, 0x8, &(0x7f0000000140)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x380a}}, {0x8a, &(0x7f00000001c0)=@string={0x8a, 0x3, "8441960ee5248aae6d1f7ea42fbdd3979e7c381e0abb311ad00bb941c6c6ee841acf81f76233171476bc15ca866c27f8f560d22626f5c06a18aef46b050d6a673b9c4a3c0e7faaa4d4cd756face4116d50afa87e3375bbdf0dd725d07de18da6a107131839fafd1e8fd5f1479f160a28ede99efd76607947ca7150d31e714fa0a61a97572a6709b3"}}, {0x1b, &(0x7f0000000280)=@string={0x1b, 0x3, "f94abeb1178b7778b56e1a55f18b8841f3e44df4b12dff7cc3"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x300a}}]}) syz_usb_control_io$printer(r13, &(0x7f0000000480)={0x14, &(0x7f0000000380)={0x20, 0xa5d006f4a54cffa9, 0x96, {0x96, 0x10, "bee9c5434ac053e0b616c7d4aa36325540846af75c1812e0fd3c9ed57fd6aabbbf35591d9d642a5016968b6a96deeef9d0884f26b0a0facff5267b959082b18e31ec5d50ff9460112f35f4477fb7282a3d38791e3e5086b402390f8239878bcf2a275b23f267a1586d85dcf77285da738c67379b746947eeace44039bd5b8189177f2c182b356f373dd1921e2a37cf7c1e600193"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc1a}}}, &(0x7f00000006c0)={0x34, &(0x7f00000004c0)=ANY=[@ANYBLOB="400f750000006c5b130a4e504e3188699912c113416149611bafa7870dac42861b35703e9d881248461e5c7b3b3e5576e8307fb6cba52898dfc52ff3bfd56d2b7c3f6419829c6c7a6c7a6f2e806896a3ba4c3e242270be5699c11122922e42b5212dddf909612fa1c7d05bfd00"/123], &(0x7f0000000540)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xff}, &(0x7f00000005c0)={0x20, 0x0, 0x67, {0x65, "1b1823ecc8873f433557136c5bde9559cb6de4cb858bfc8fc4f250211b69935a4ad634df2978a73699a13c0e815769441b43d99ebbc33391c68e5482066b7bb58d28924aaefa139c2d34b35cd1990f3491e00f33ad8c788ee9dd2715aa521f7f8ce28855bf"}}, &(0x7f0000000640)={0x20, 0x1, 0x1, 0x46}, &(0x7f0000000680)={0x20, 0x0, 0x1, 0x3}}) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000092ecc620ac05c2773aeb010203010902240001000020000904c44102fffd01"], 0x0) close(r2) 7.289860099s ago: executing program 3 (id=2128): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x7f, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9f, 0x101}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xffffffc0, 0x6, 0x800, 0x1000080, 0x709d}, 0x7, 0x1, 0x7, 0xfffffffe, 0xb38, 0xa, 0x3, 0xc, 0x1, 0x30, {0x99, 0x7, 0x6, 0x401, 0x6, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x8004745a, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x80, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) rseq(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x5, 0x10, 0xb, 0x5}, 0x2}, 0x20, 0x1, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=@ethtool_regs={0x12}}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(0xffffffffffffffff, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x30000000) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYRES32, @ANYRES16=r4, @ANYBLOB="a1e3d769b5edea012b512eafec6fea62fb9116a323b48cff9c3ef7451bff70d68581cc008725c72954f024fe5a37098ba9eb1228b770663e75facbff4617b835374c4a4494d7b6b8c55ba907bf58504a548173223385d9d0c1b775ae433d2f44945c63da8e60a9d4b7fa529305bb9ea72a2272dd057212ccbb8ba461276393fe14", @ANYRESHEX=r5, @ANYBLOB="218e5c93cc311a4b0605c7e47f9ed8ef7bbc8f025ae617e9395a728ab83eca42f94ddc79b1bcc1a3341afaa11b38e051b4604e1ca7b8fc965dfa12542373c522d51c2ff70d9e5c2953656c698e9cd51ad1d632614b2bcaf8d99f604ccd251a66b3c0c4e415756fac7c6130c419244df2dd6fb5b391d707ae7995e200925a8f3687b49b4289292704b4151c726ca138b08b4e5938030298cfc7e0de454d2edaaa2f845fd2d3c2e95cf09dcf19846f", @ANYRES64=r1], 0xa4}, 0x1, 0x0, 0x0, 0x20048099}, 0x2000c090) 6.966534484s ago: executing program 3 (id=2129): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRES8], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) open_by_handle_at(r0, &(0x7f0000000040)=@ceph_nfs_confh={0x10, 0x2, {0xca, 0xffffffffffffffff}}, 0x1c7041) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) close_range(r1, 0xffffffffffffffff, 0x0) 4.845167781s ago: executing program 4 (id=2135): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x41}}], 0x20, 0x4048800}, 0x94) 4.724875962s ago: executing program 6 (id=2136): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f00000000c0)) ioctl$TCSETS(r0, 0x8926, 0x0) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000080)={0xc, 0x94, 0x8}) ioctl$TIOCSCTTY(r0, 0x540e, 0x7ff) r1 = semget$private(0x0, 0x6, 0x0) semtimedop(r1, &(0x7f0000000040)=[{0x0, 0x7}], 0x1, 0x0) semop(r1, &(0x7f00000000c0)=[{}], 0x1) semop(r1, &(0x7f0000000280)=[{}], 0x1) semctl$IPC_RMID(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x0, 0x101, 0x0, 0x100, 0x10000000, {0x40, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, r4, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000440)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0xffffffff80000000, 0xfffc, 0x2, 0x6b, 0x2, 0x0, 0x0, 0x0, 0x933}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r5, 0x40480923, 0x200000000005) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000100)=""/5) 4.724375015s ago: executing program 4 (id=2137): socket$inet_tcp(0x2, 0x1, 0x0) r0 = open$dir(&(0x7f0000000500)='./file1\x00', 0x408880, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000000)={@desc={0x1, 0x0, @desc3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ustat(0xfffffffeffffffff, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r4}, 0x18) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x8) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20004841) sendmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 4.157410432s ago: executing program 5 (id=2138): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80281, 0x0) pipe(&(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000000)={[{0x3cd2ef60, 0xfffd, 0x1, 0xff, 0x8, 0x80, 0x8, 0xb, 0x90, 0x0, 0x7, 0x7, 0x3c5baf4e}, {0xa9, 0xd9, 0x0, 0x2, 0x7, 0x8, 0x5, 0x6, 0xb, 0x1, 0x3, 0x9, 0xf2}, {0x7fffffff, 0x4, 0xc, 0x2, 0x0, 0x2, 0x7, 0x0, 0x9, 0x4, 0x8, 0x4, 0x1}], 0x7}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000080)={0xd0003, 0x0, {[0x303, 0x6, 0x7, 0xffffffffefffff11, 0x3, 0x0, 0xa99, 0xb37f]}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x22004001, 0x0, 0x0) 4.112118961s ago: executing program 4 (id=2139): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) socket$l2tp6(0xa, 0x2, 0x73) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x639) socket$kcm(0x2b, 0x1, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6b1, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r5 = eventfd(0x80000b) r6 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000100)={0x980000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90b, 0x9, '\x00', @p_u16=0x0}}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r5}) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x1000, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80800, 0x20) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74, 0x5000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000700)) unshare(0x64000600) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) socket$alg(0x26, 0x5, 0x0) 4.080182529s ago: executing program 6 (id=2140): socket$kcm(0x29, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = dup(r2) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = socket$phonet(0x23, 0x2, 0x1) close_range(r7, 0xffffffffffffffff, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x202) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) r9 = socket$packet(0x11, 0x2, 0x300) syz_open_dev$loop(&(0x7f00000007c0), 0x10000, 0x100) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3d, 0x7ff, 0xf83, 0x3}, 0x1c) sendmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r10) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, 0x0) write$UHID_INPUT(r3, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010003b15ffffffffffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="41000000015001001800128008000100677470000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="2d82f7c4e23ad0cbf9a54c"], 0x40}}, 0x2400c080) 2.920419567s ago: executing program 3 (id=2141): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000200)={0x14, &(0x7f00000003c0)={0xc0, 0x22, 0x5c, {0x5c, 0x21, "06ff4b7ceb819f4f3bb0ffe7ce4dde2dc007317cc708c2a64122aebfd8d4638f6ba56df78a7eaf4c2ab4c870f9265e292994025066139b892a6886c8644a5a0fe70d4fd3a117cda3fd0027ae61f2bea3c07c68cbe1c91dc0b3b1"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2401}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000480)={0x20, 0x1d, 0x53, "f954e144c6b5f209f97326d0b0c4d7f3b5fb86448a0c5cb3fbc487f758c744fee5fcb2b93d044138744e66375bd1a86de7716c01169e6846e86a870886ec1270c38f84159645f8f42d0377fb190ca2caf0e2b3"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000500), &(0x7f0000000540)={0x40, 0x5, 0x4, "bb654e77"}}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000204f045db600000000000109022d000100006002090400100503000100092100", @ANYRES16], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = dup(r1) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x4001}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) io_setup(0x9, &(0x7f0000000b80)=0x0) io_submit(r7, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x2}]) io_cancel(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x8000000000000001, 0x0, 0x2}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="040b0b00c900adc02216"], 0xe) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) 2.626231275s ago: executing program 4 (id=2142): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000400)={0x50, 0x0, r1, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x5, 0x0, 0x6000, 0xd, r2, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r2, r3, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) syz_fuse_handle_req(r4, &(0x7f00000021c0)="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", 0x2160, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.583501437s ago: executing program 4 (id=2143): socket(0xf, 0x805, 0x400) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000900020073797a31000000000c00078008001220ffffffff050005000a00000005000f94010000000d00030068610b000000657400000000663ab27e77ffee782da79088914bce00"/89], 0x54}}, 0x40000) readahead(r0, 0x1ff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) socket(0x10, 0x3, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x74, r5, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket(0x10, 0x803, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x40e02, 0x0) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x7, 0x4, 0x32, @mcast1, @mcast2, 0x20, 0x7, 0x5, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x200000000000006d, &(0x7f0000000180)=ANY=[@ANYRES64=r6, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2.361326673s ago: executing program 5 (id=2144): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}], 0x1) pipe2$watch_queue(&(0x7f0000000140), 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x80047437, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0]) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f0016000800000000000000200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a6683f5aeb4edbb57a5025ccca9e00360db398262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3c93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x4000050) r6 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x40049366, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) 1.610810125s ago: executing program 4 (id=2145): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x6, 0xfffffffd}, 0xf) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000400000000008000f00fd000000", 0x24) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x7, 0x7, 0x1, 0x9, {{0x10, 0x4, 0x3, 0x37, 0x40, 0x68, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@end, @lsrr={0x83, 0xf, 0x90, [@multicast1, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x3, 0x8d}, @cipso={0x86, 0x18, 0x3, [{0x1, 0x5, "0fa7d8"}, {0x1, 0xd, "78663068439e91369984db"}]}]}}}}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004b41460860163209ea80010203010902120001000000080904"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000a40)={&(0x7f0000000080)=[{0x63, 0x6000, 0x0, 0x0}, {0x8, 0xa19, 0x0, 0x0}], 0x2}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}]}, @NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x88}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x20, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000048}, 0x800) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r6, &(0x7f0000000740)=[{&(0x7f0000000300)=""/49, 0x31}], 0x1, 0x6, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host, 0x2}) syz_usb_connect(0x2, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100008ca61d400a1a0101c3540000000109021200010000b0000904"], 0x0) 1.360854423s ago: executing program 6 (id=2146): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x88, 0x2}]}}}], 0x38}, 0x20002880) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12000) fsopen(&(0x7f0000000200)='afs\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) (fail_nth: 2) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x40424, 0x3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4000000) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) dup(r0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000300)={0x5, 0x2003, 0x1009, 0xf, 0x97, 0x0}) socket(0x2a, 0x2, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) 625.561183ms ago: executing program 5 (id=2147): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$swradio(&(0x7f0000000100), 0x1, 0x2) (async, rerun: 64) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (rerun: 64) mount$9p_fd(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c00d6fd481d757cb1b970681dd5895f1837880ead88ba9125e805b51cc01dbc7b990031a0c456495f7e2bbef10b779618d81188734c7fc293777769779bdce46e45115712fff9c528aa67f2e2ece908"]) close_range(r3, r4, 0x0) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) (async, rerun: 32) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f00000001c0)=[@in6={0xa, 0x4e22, 0x1, @local, 0xb671}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x2c) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 502.610053ms ago: executing program 6 (id=2148): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb3}, 0x50) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000240)=0x1, 0x4) sendmsg$802154_dgram(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4009040}, 0x800) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000000), 0x4) 306.041177ms ago: executing program 6 (id=2149): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2900, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x1) r2 = socket(0x2b, 0x4, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="10000000000000000000000006000000"], 0x7}}], 0x1, 0x4014) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x82, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800100, 0x3, 0x22, 0xe1d9, 0x1101, 0xff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$amidi(&(0x7f0000000140), 0x6, 0x480) fsetxattr(r4, &(0x7f0000000240)=@known='trusted.overlay.upper\x00', &(0x7f0000000280)='port0\x00', 0x6, 0x3) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000400)='/dev/comedi0\x00', 0x12002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000007000000010001004900000001000000", @ANYRES32, @ANYBLOB="022dbb6192ac987e001000000000200000000000", @ANYRESDEC=r0, @ANYRESOCT=r2, @ANYBLOB='\x00'/28], 0x50) ioctl$COMEDI_BUFCONFIG(r5, 0x8020640d, &(0x7f0000000040)={0x2, 0x3, 0x40, 0x2}) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) shutdown(r3, 0x1) listen(r3, 0xa8a4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r6 = socket$packet(0x11, 0x2, 0x300) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/softlockup_count', 0x40082, 0x1ee) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$bt_hci(r7, 0x84, 0x84, &(0x7f00000021c0)=""/4129, &(0x7f0000000080)=0x1021) getpeername$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYRES8=r8], &(0x7f0000000440)='syzkaller\x00', 0xedae, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r9}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r10 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r10, 0x11, 0x64, 0x0, 0x0) 0s ago: executing program 6 (id=2150): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70023000000090507", @ANYRES32=r0], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="0005010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6}, &(0x7f0000000840), &(0x7f0000000880)=r7}, 0x20) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4060000}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x32) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r7, r9, 0x25, 0x2, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @local, @val={@void, {0x8100, 0x1, 0x1, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x7, 0x28, 0xfffc, 0x0, 0x9, 0x6, 0x0, @remote, @broadcast}, {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x8002, 0x0, 0xfffc}}}}}}, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r13 = dup(r12) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000280)=r13, 0x4) getsockopt$inet_pktinfo(r13, 0x0, 0x8, &(0x7f0000000340)={0x0, @initdev, @initdev}, &(0x7f00000003c0)=0xc) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000009000085000000820000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r14, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'sit0\x00'}) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0xfc, 0x0}, 0x0, 0x0, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x1, 0x6}, 0x8, 0x1, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0xc0}}, 0x0) r15 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r15, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="020f08101000000000000000fedbdf25030005000000000002000020000000000000000000000000080012000000020000000000000000000600320000000000000000000000000000000000000000000000ffffe0000001fe8000000000000000000000000000180300060000200000000065005b3b022864949c053738b351cf123b43397b507bb0c04df7276865e92d5f348a6b68d2f5f7d66c485f364b2b431a6b40aabc446ad933f9e11c9e0ed6c023fd11fa8d7975942329b85587fa1f88db3c18c3b1429436bb96e6dce78b060a82aac5d2c9520d0edbd2bc6d94752c6ed64a32bf3b16a3f97224713fcc1ff75e1691448d7e0f78ea8a77acc5ff19928aed52005528b0891e56798d26606cca6ed8ac8d79734141cc1b51f931d6efcc00"/302], 0x80}}, 0x0) write$UHID_CREATE2(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 0000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 671.438745][T12426] R13: 00007fab9afe6038 R14: 00007fab9afe5fa0 R15: 00007ffe66a99458 [ 671.438760][T12426] [ 671.633203][ T30] audit: type=1400 audit(1764011872.074:1294): avc: denied { open } for pid=12425 comm="syz.0.1660" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 671.952127][T10162] usb 3-1: usb_control_msg returned -71 [ 671.967959][T10162] usbtmc 3-1:16.0: can't read capabilities [ 672.441631][ T30] audit: type=1400 audit(1764011872.754:1295): avc: denied { setopt } for pid=12414 comm="syz.5.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 672.540233][T12436] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 672.846120][T10162] usb 3-1: USB disconnect, device number 58 [ 672.857164][ T30] audit: type=1400 audit(1764011872.844:1296): avc: denied { connect } for pid=12414 comm="syz.5.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 672.976662][T12441] overlayfs: missing 'workdir' [ 673.151629][ T30] audit: type=1400 audit(1764011873.804:1297): avc: denied { write } for pid=12442 comm="syz.3.1665" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 674.416240][ T30] audit: type=1400 audit(1764011874.384:1298): avc: denied { create } for pid=12451 comm="syz.0.1667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 674.448860][T11244] usb 6-1: USB disconnect, device number 20 [ 674.497131][ T30] audit: type=1400 audit(1764011874.394:1299): avc: denied { setopt } for pid=12451 comm="syz.0.1667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 674.519652][ T30] audit: type=1400 audit(1764011874.394:1300): avc: denied { write } for pid=12451 comm="syz.0.1667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 674.789533][T12464] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 675.642171][ T30] audit: type=1400 audit(1764011876.304:1301): avc: denied { write } for pid=12471 comm="syz.5.1674" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 675.859682][ T30] audit: type=1400 audit(1764011876.304:1302): avc: denied { read } for pid=12471 comm="syz.5.1674" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 676.115834][ T30] audit: type=1400 audit(1764011876.304:1303): avc: denied { open } for pid=12471 comm="syz.5.1674" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 676.678547][ T30] audit: type=1400 audit(1764011876.394:1304): avc: denied { ioctl } for pid=12471 comm="syz.5.1674" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 679.215716][ T43] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 679.344519][ T5953] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 679.369850][T12516] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 679.672148][ T43] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 679.692487][ T43] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 679.714266][ T43] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 679.751600][ T5953] usb 4-1: Using ep0 maxpacket: 32 [ 679.771680][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 679.797779][ T5953] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 679.808985][ T43] usb 1-1: SerialNumber: syz [ 679.817922][ T5953] usb 4-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 679.839825][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.847959][ T5953] usb 4-1: Product: syz [ 679.852497][ T5953] usb 4-1: Manufacturer: syz [ 679.857127][ T5953] usb 4-1: SerialNumber: syz [ 679.870811][ T5953] usb 4-1: config 0 descriptor?? [ 679.889538][ T5953] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 680.137519][ T5953] gspca_sunplus: reg_r err -32 [ 680.144070][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 680.144083][ T30] audit: type=1400 audit(1764011880.824:1306): avc: denied { map } for pid=12521 comm="syz.5.1687" path="socket:[40615]" dev="sockfs" ino=40615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 680.184826][ T43] usb 1-1: 0:2 : does not exist [ 680.189787][ T43] usb 1-1: unit 5: unexpected type 0x0d [ 680.206012][ T30] audit: type=1400 audit(1764011880.824:1307): avc: denied { read accept } for pid=12521 comm="syz.5.1687" path="socket:[40615]" dev="sockfs" ino=40615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 680.279569][T12524] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 680.291121][T12524] netlink: 35 bytes leftover after parsing attributes in process `syz.5.1687'. [ 680.670379][ T43] usb 1-1: USB disconnect, device number 31 [ 680.735919][T12527] block nbd4: shutting down sockets [ 680.791266][T12252] udevd[12252]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 681.662759][ T5953] sunplus 4-1:0.0: probe with driver sunplus failed with error -32 [ 683.744250][ T5953] usb 4-1: USB disconnect, device number 61 [ 683.844800][T12551] ucma_write: process 1219 (syz.4.1695) changed security contexts after opening file descriptor, this is not allowed. [ 684.011350][T12556] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 684.119770][T12556] block device autoloading is deprecated and will be removed. [ 684.845912][ T30] audit: type=1400 audit(1764011885.524:1308): avc: denied { setopt } for pid=12567 comm="syz.4.1700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 685.005707][ T30] audit: type=1400 audit(1764011885.684:1309): avc: denied { mount } for pid=12569 comm="syz.5.1701" name="/" dev="configfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 685.199310][ T30] audit: type=1400 audit(1764011885.714:1310): avc: denied { mounton } for pid=12569 comm="syz.5.1701" path="/136/file0" dev="configfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 685.239652][T12574] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 685.302615][ T30] audit: type=1400 audit(1764011885.724:1311): avc: denied { read } for pid=12569 comm="syz.5.1701" name="/" dev="configfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 685.450001][ T30] audit: type=1400 audit(1764011885.724:1312): avc: denied { read } for pid=12569 comm="syz.5.1701" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 685.583542][ T30] audit: type=1400 audit(1764011885.724:1313): avc: denied { open } for pid=12569 comm="syz.5.1701" path="/136/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 685.690866][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.697866][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.711648][ T30] audit: type=1400 audit(1764011885.724:1314): avc: denied { read } for pid=12569 comm="syz.5.1701" name="/" dev="configfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 685.741656][ T30] audit: type=1400 audit(1764011885.724:1315): avc: denied { read } for pid=12569 comm="syz.5.1701" name="/" dev="configfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 685.764031][ T30] audit: type=1400 audit(1764011885.844:1316): avc: denied { unmount } for pid=9700 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 685.842320][T12584] netlink: 'syz.5.1704': attribute type 21 has an invalid length. [ 685.850225][T12584] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1704'. [ 685.859584][T12584] netlink: 'syz.5.1704': attribute type 6 has an invalid length. [ 685.867397][T12584] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1704'. [ 686.890688][ T30] audit: type=1400 audit(1764011887.564:1317): avc: denied { shutdown } for pid=12587 comm="syz.0.1707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 687.043959][T12592] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 687.179292][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 687.288753][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 687.724940][T12602] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 687.765982][ T69] Bluetooth: hci6: Frame reassembly failed (-84) [ 687.786572][ T69] Bluetooth: hci6: Frame reassembly failed (-84) [ 687.786867][ T69] Bluetooth: hci6: Frame reassembly failed (-84) [ 687.787032][ T69] Bluetooth: hci6: Frame reassembly failed (-84) [ 687.787202][ T69] Bluetooth: hci6: Frame reassembly failed (-84) [ 687.787365][ T69] Bluetooth: hci6: Frame reassembly failed (-84) [ 688.413226][ T30] audit: type=1400 audit(1764011889.054:1318): avc: denied { execute } for pid=12607 comm="syz.4.1713" path="/359/cpu.stat" dev="tmpfs" ino=2001 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 688.415753][T12609] delete_channel: no stack [ 688.721594][ T976] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 688.852590][ T976] usb 5-1: device descriptor read/64, error -71 [ 688.871263][T12613] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 689.071727][ T5820] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 689.102953][ T976] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 689.381598][ T976] usb 5-1: device descriptor read/64, error -71 [ 689.492261][ T976] usb usb5-port1: attempt power cycle [ 689.782517][ T5814] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 689.782526][ T5820] Bluetooth: hci6: command 0x1003 tx timeout [ 689.806214][ T9] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 689.831947][T10162] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 689.851607][ T976] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 689.884161][ T976] usb 5-1: device descriptor read/8, error -71 [ 689.914779][ T30] audit: type=1400 audit(1764011890.594:1319): avc: denied { ioctl } for pid=12623 comm="syz.0.1719" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 689.980491][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 690.261545][T10162] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 690.282223][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 690.311745][T10162] usb 3-1: config 1 has no interface number 0 [ 690.334262][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 690.351546][ T976] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 690.361825][T10162] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 690.381599][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 690.392041][T10162] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xCE, changing to 0x8E [ 690.404482][ T976] usb 5-1: device descriptor read/8, error -71 [ 690.410681][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 690.420112][T10162] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1023 [ 690.430431][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.447397][T10162] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 690.457368][ T9] usb 4-1: config 0 descriptor?? [ 690.462615][T10162] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.470681][T10162] usb 3-1: Product: syz [ 690.477211][T10162] usb 3-1: Manufacturer: syz [ 690.482065][T10162] usb 3-1: SerialNumber: syz [ 690.489960][T12620] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 690.501659][T12620] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 690.511778][ T976] usb usb5-port1: unable to enumerate USB device [ 690.665156][ T5953] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 690.676786][ T9] hdpvr 4-1:0.0: firmware version 0x0 dated [ 690.682942][ T9] hdpvr 4-1:0.0: untested firmware, the driver might not work. [ 690.714696][T12620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.724272][T12620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.734387][T12620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.744850][T12620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.801788][ T43] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 690.826364][T12631] netlink: 'syz.2.1717': attribute type 10 has an invalid length. [ 690.828290][ T5953] usb 6-1: Using ep0 maxpacket: 8 [ 690.844144][T12631] team0: Port device veth1_macvtap added [ 690.866517][ T5953] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 690.866659][ T5953] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 690.866724][ T5953] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 690.866814][ T5953] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 690.866895][ T5953] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 690.867083][ T5953] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 690.867179][ T5953] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.878270][T12631] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 690.879760][T12631] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 690.921630][ T5953] usb 6-1: config 0 descriptor?? [ 690.972573][T12627] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 690.982082][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 691.028033][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 691.028274][ T43] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 691.028373][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.049857][T12618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1716'. [ 691.133949][ T43] usb 1-1: config 0 descriptor?? [ 691.147586][T10162] usb 3-1: No status endpoint found [ 691.190579][ T5811] usb 3-1: USB disconnect, device number 59 [ 691.394435][ T9] hdpvr 4-1:0.0: Could not setup controls [ 691.395003][ T9] hdpvr 4-1:0.0: registering videodev failed [ 691.421852][ T9] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -71 [ 691.440947][ T9] usb 4-1: USB disconnect, device number 62 [ 691.457894][ T5814] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 691.463447][ T5953] usb 6-1: USB disconnect, device number 21 [ 691.696686][ T43] mcp2221 0003:04D8:00DD.000F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 692.068566][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 692.068700][ T30] audit: type=1400 audit(1764011892.744:1322): avc: denied { connect } for pid=12640 comm="syz.4.1723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 693.103833][ T30] audit: type=1400 audit(1764011892.984:1323): avc: denied { write } for pid=12648 comm="syz.5.1726" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 693.286305][ T30] audit: type=1400 audit(1764011892.984:1324): avc: denied { ioctl } for pid=12648 comm="syz.5.1726" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 693.448765][T12657] FAULT_INJECTION: forcing a failure. [ 693.448765][T12657] name failslab, interval 1, probability 0, space 0, times 0 [ 693.461594][T12657] CPU: 0 UID: 0 PID: 12657 Comm: syz.5.1727 Not tainted syzkaller #0 PREEMPT(full) [ 693.461621][T12657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 693.461633][T12657] Call Trace: [ 693.461639][T12657] [ 693.461647][T12657] dump_stack_lvl+0x16c/0x1f0 [ 693.461671][T12657] should_fail_ex+0x512/0x640 [ 693.461692][T12657] ? fs_reclaim_acquire+0xae/0x150 [ 693.461715][T12657] should_failslab+0xc2/0x120 [ 693.461735][T12657] __kmalloc_noprof+0xdd/0x880 [ 693.461761][T12657] ? tomoyo_encode2+0x100/0x3e0 [ 693.461788][T12657] ? tomoyo_encode2+0x100/0x3e0 [ 693.461806][T12657] tomoyo_encode2+0x100/0x3e0 [ 693.461821][T12657] tomoyo_unix_entry+0x341/0x650 [ 693.461840][T12657] ? __pfx_tomoyo_unix_entry+0x10/0x10 [ 693.461860][T12657] ? __lock_acquire+0x622/0x1c90 [ 693.461899][T12657] tomoyo_socket_sendmsg_permission+0x352/0x3c0 [ 693.461921][T12657] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 693.461934][T12657] ? __might_fault+0xe3/0x190 [ 693.461950][T12657] ? iovec_from_user+0xbb/0x140 [ 693.461966][T12657] ? __import_iovec+0x1dd/0x650 [ 693.461986][T12657] security_socket_sendmsg+0x211/0x240 [ 693.462008][T12657] ____sys_sendmsg+0x2f2/0xc70 [ 693.462030][T12657] ? copy_msghdr_from_user+0x10a/0x160 [ 693.462055][T12657] ? __pfx_____sys_sendmsg+0x10/0x10 [ 693.462071][T12657] ? __pfx__kstrtoull+0x10/0x10 [ 693.462091][T12657] ___sys_sendmsg+0x134/0x1d0 [ 693.462106][T12657] ? __pfx____sys_sendmsg+0x10/0x10 [ 693.462133][T12657] ? find_held_lock+0x2b/0x80 [ 693.462176][T12657] __sys_sendmmsg+0x200/0x420 [ 693.462204][T12657] ? __pfx___sys_sendmmsg+0x10/0x10 [ 693.462226][T12657] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 693.462244][T12657] ? fput+0x9b/0xd0 [ 693.462257][T12657] ? ksys_write+0x1ac/0x250 [ 693.462267][T12657] ? __pfx_ksys_write+0x10/0x10 [ 693.462290][T12657] __x64_sys_sendmmsg+0x9c/0x100 [ 693.462315][T12657] ? lockdep_hardirqs_on+0x7c/0x110 [ 693.462339][T12657] do_syscall_64+0xcd/0xfa0 [ 693.462356][T12657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.462368][T12657] RIP: 0033:0x7f5c9978f749 [ 693.462378][T12657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 693.462388][T12657] RSP: 002b:00007f5c9a623038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 693.462399][T12657] RAX: ffffffffffffffda RBX: 00007f5c999e6180 RCX: 00007f5c9978f749 [ 693.462406][T12657] RDX: 0000000000000001 RSI: 0000200000000c80 RDI: 0000000000000004 [ 693.462413][T12657] RBP: 00007f5c9a623090 R08: 0000000000000000 R09: 0000000000000000 [ 693.462424][T12657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 693.462435][T12657] R13: 00007f5c999e6218 R14: 00007f5c999e6180 R15: 00007fff001402e8 [ 693.462464][T12657] [ 694.099775][ T5953] usb 1-1: USB disconnect, device number 32 [ 694.348759][T12662] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1728'. [ 695.303339][T12665] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 696.688117][T12678] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1732'. [ 697.213555][T12682] FAULT_INJECTION: forcing a failure. [ 697.213555][T12682] name failslab, interval 1, probability 0, space 0, times 0 [ 697.227550][ T5820] Bluetooth: hci4: command 0x1003 tx timeout [ 697.231612][ T5814] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 697.242601][T12682] CPU: 1 UID: 0 PID: 12682 Comm: syz.5.1735 Not tainted syzkaller #0 PREEMPT(full) [ 697.242626][T12682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 697.242637][T12682] Call Trace: [ 697.242643][T12682] [ 697.242651][T12682] dump_stack_lvl+0x16c/0x1f0 [ 697.242673][T12682] should_fail_ex+0x512/0x640 [ 697.242696][T12682] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 697.242728][T12682] should_failslab+0xc2/0x120 [ 697.242750][T12682] kmem_cache_alloc_node_noprof+0x78/0x770 [ 697.242777][T12682] ? __alloc_skb+0x2b2/0x380 [ 697.242806][T12682] ? __alloc_skb+0x2b2/0x380 [ 697.242826][T12682] ? __pfx_netlink_insert+0x10/0x10 [ 697.242851][T12682] __alloc_skb+0x2b2/0x380 [ 697.242873][T12682] ? __pfx___alloc_skb+0x10/0x10 [ 697.242897][T12682] ? netlink_autobind.isra.0+0x158/0x370 [ 697.242931][T12682] netlink_alloc_large_skb+0x69/0x140 [ 697.242960][T12682] netlink_sendmsg+0x698/0xdd0 [ 697.242991][T12682] ? __pfx_netlink_sendmsg+0x10/0x10 [ 697.243029][T12682] ____sys_sendmsg+0xa98/0xc70 [ 697.243049][T12682] ? copy_msghdr_from_user+0x10a/0x160 [ 697.243074][T12682] ? __pfx_____sys_sendmsg+0x10/0x10 [ 697.243099][T12682] ___sys_sendmsg+0x134/0x1d0 [ 697.243124][T12682] ? __pfx____sys_sendmsg+0x10/0x10 [ 697.243146][T12682] ? __lock_acquire+0x622/0x1c90 [ 697.243200][T12682] __sys_sendmsg+0x16d/0x220 [ 697.243224][T12682] ? __pfx___sys_sendmsg+0x10/0x10 [ 697.243267][T12682] do_syscall_64+0xcd/0xfa0 [ 697.243288][T12682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.243308][T12682] RIP: 0033:0x7f5c9978f749 [ 697.243323][T12682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 697.243356][T12682] RSP: 002b:00007f5c9a665038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 697.243373][T12682] RAX: ffffffffffffffda RBX: 00007f5c999e5fa0 RCX: 00007f5c9978f749 [ 697.243386][T12682] RDX: 0000000020004804 RSI: 0000200000006040 RDI: 0000000000000006 [ 697.243398][T12682] RBP: 00007f5c9a665090 R08: 0000000000000000 R09: 0000000000000000 [ 697.243409][T12682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 697.243420][T12682] R13: 00007f5c999e6038 R14: 00007f5c999e5fa0 R15: 00007fff001402e8 [ 697.243447][T12682] [ 697.466755][ C1] vkms_vblank_simulate: vblank timer overrun [ 697.583062][ T30] audit: type=1400 audit(1764011898.224:1325): avc: denied { write } for pid=12683 comm="syz.4.1736" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 698.298696][ T9] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 698.567597][T12707] netlink: 'syz.0.1738': attribute type 21 has an invalid length. [ 698.575547][T12707] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1738'. [ 698.584693][T12707] netlink: 'syz.0.1738': attribute type 6 has an invalid length. [ 698.592440][T12707] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1738'. [ 698.660155][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 698.688740][ T9] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 698.699820][ T9] usb 5-1: config 0 has no interface number 0 [ 698.730709][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 698.751783][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.774667][ T9] usb 5-1: Product: syz [ 698.783716][ T9] usb 5-1: Manufacturer: syz [ 698.799782][ T9] usb 5-1: SerialNumber: syz [ 698.818710][ T9] usb 5-1: config 0 descriptor?? [ 700.233264][ T9] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 700.266604][ T9] uvcvideo 5-1:0.31: Entity type for entity Output 6 was not initialized! [ 700.287373][ T30] audit: type=1400 audit(1764011900.964:1326): avc: denied { mount } for pid=12717 comm="syz.5.1745" name="/" dev="ramfs" ino=42126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 700.321030][T12718] netlink: 'syz.5.1745': attribute type 10 has an invalid length. [ 700.329050][ T9] usb 5-1: USB disconnect, device number 59 [ 700.368511][T12718] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 700.531324][ T30] audit: type=1400 audit(1764011901.204:1327): avc: denied { unmount } for pid=9700 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 700.562225][T12724] netlink: 'syz.3.1746': attribute type 1 has an invalid length. [ 701.061577][T12729] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 701.106150][T10176] Bluetooth: hci4: Frame reassembly failed (-84) [ 701.202409][T10176] Bluetooth: hci4: Frame reassembly failed (-84) [ 701.565914][ T30] audit: type=1400 audit(1764011902.224:1328): avc: denied { bind } for pid=12732 comm="syz.4.1751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 701.602093][T12737] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 702.911567][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 703.009169][T10162] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 703.159643][ T5814] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 703.292714][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 703.347222][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 205, changing to 11 [ 703.400404][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25497, setting to 1024 [ 703.461818][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c082, bcdDevice= 0.00 [ 703.472880][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.495339][ T9] usb 1-1: config 0 descriptor?? [ 703.502665][T10162] usb 4-1: Using ep0 maxpacket: 8 [ 703.511613][T10162] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 703.558422][T10162] usb 4-1: config 0 has no interface number 0 [ 703.587278][T10162] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 703.613395][T10162] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.631837][T10162] usb 4-1: Product: syz [ 703.733391][T10162] usb 4-1: Manufacturer: syz [ 703.752203][T10162] usb 4-1: SerialNumber: syz [ 703.770373][T12763] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 703.935501][T10162] usb 4-1: config 0 descriptor?? [ 704.271694][T10162] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 704.300677][T10162] uvcvideo 4-1:0.31: Entity type for entity Output 6 was not initialized! [ 704.330237][T12769] netlink: 'syz.2.1759': attribute type 12 has an invalid length. [ 704.351791][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 704.368244][T10162] usb 4-1: USB disconnect, device number 63 [ 704.377409][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 704.424073][ T9] usb 1-1: USB disconnect, device number 33 [ 707.291757][ T5953] usb 6-1: new low-speed USB device number 22 using dummy_hcd [ 707.571770][ T5953] usb 6-1: unable to get BOS descriptor or descriptor too short [ 707.590051][ T5953] usb 6-1: config 9 has an invalid interface number: 236 but max is 0 [ 707.618962][ T5953] usb 6-1: config 9 has no interface number 0 [ 707.695311][ T5953] usb 6-1: config 9 interface 236 altsetting 0 endpoint 0x4 has invalid maxpacket 16, setting to 8 [ 707.736514][ T5953] usb 6-1: config 9 interface 236 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 707.797264][ T5953] usb 6-1: config 9 interface 236 altsetting 0 has an endpoint descriptor with address 0x51, changing to 0x1 [ 707.797297][ T5953] usb 6-1: config 9 interface 236 altsetting 0 endpoint 0x1 has invalid maxpacket 18441, setting to 8 [ 707.849188][ T5953] usb 6-1: config 9 interface 236 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 707.853205][ T5953] usb 6-1: string descriptor 0 read error: -22 [ 707.853287][ T5953] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice=55.e2 [ 707.853302][ T5953] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.867256][T12791] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 707.868908][ T5953] usb 6-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 708.152594][ T9] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 708.428043][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 708.428064][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 708.428079][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 708.428092][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 708.428122][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 708.428156][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.429565][ T9] usb 3-1: config 0 descriptor?? [ 708.940301][ T9] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 709.510072][T12814] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 709.534837][ T43] usb 6-1: USB disconnect, device number 22 [ 709.770660][ T43] usb 3-1: USB disconnect, device number 60 [ 710.366348][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 710.383146][T12824] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 711.484519][T12835] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 711.839586][ T30] audit: type=1400 audit(1764011912.514:1329): avc: denied { write } for pid=12836 comm="syz.5.1778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 711.844090][ T30] audit: type=1400 audit(1764011912.514:1330): avc: denied { read } for pid=12836 comm="syz.5.1778" dev="sockfs" ino=41700 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 711.871217][ T30] audit: type=1400 audit(1764011912.544:1331): avc: denied { bind } for pid=12836 comm="syz.5.1778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 712.111395][T12840] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 712.238388][ T3566] Bluetooth: hci6: Frame reassembly failed (-84) [ 712.424077][ T5814] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 713.931647][ T30] audit: type=1400 audit(1764011914.604:1332): avc: denied { listen } for pid=12844 comm="syz.2.1782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 713.934218][T12848] Cannot find add_set index 4 as target [ 714.192187][ T5820] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 714.633499][ T5953] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 714.802033][ T5953] usb 6-1: Using ep0 maxpacket: 16 [ 714.839462][ T5953] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 714.964872][ T5953] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 715.000241][ T5953] usb 6-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 715.013763][ T5953] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.027398][ T5953] usb 6-1: config 0 descriptor?? [ 715.111938][ T30] audit: type=1400 audit(1764011915.784:1333): avc: denied { read } for pid=12863 comm="syz.0.1788" path="socket:[42883]" dev="sockfs" ino=42883 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 716.615348][T12882] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 717.168284][T12891] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 717.253804][ T30] audit: type=1326 audit(1764011917.924:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12884 comm="syz.2.1791" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52dcb8f749 code=0x0 [ 717.551763][ T43] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 718.579205][ T43] usb 4-1: device descriptor read/64, error -71 [ 718.618600][ T9] usb 6-1: USB disconnect, device number 23 [ 718.841828][ T43] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 718.991729][ T43] usb 4-1: device descriptor read/64, error -71 [ 719.312114][ T43] usb usb4-port1: attempt power cycle [ 719.352268][T12909] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1799'. [ 719.961941][ T30] audit: type=1400 audit(1764011920.634:1335): avc: denied { firmware_load } for pid=12908 comm="syz.5.1799" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 720.211926][ T43] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 720.414322][ T43] usb 4-1: device descriptor read/8, error -71 [ 721.475447][T12931] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 722.158685][T12939] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 722.172521][ T30] audit: type=1400 audit(1764011922.854:1336): avc: denied { set_context_mgr } for pid=12942 comm="syz.4.1809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 722.177855][T12943] binder: BINDER_SET_CONTEXT_MGR already set [ 722.200824][T12943] binder: 12942:12943 ioctl 4018620d 2000000002c0 returned -16 [ 722.223537][ T30] audit: type=1400 audit(1764011922.854:1337): avc: denied { create } for pid=12942 comm="syz.4.1809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 722.243741][ T30] audit: type=1400 audit(1764011922.854:1338): avc: denied { map } for pid=12942 comm="syz.4.1809" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 722.541180][T12949] netlink: 'syz.0.1811': attribute type 27 has an invalid length. [ 724.898231][T12978] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 725.285716][T12982] Cannot find add_set index 4 as target [ 725.349509][ T30] audit: type=1400 audit(1764011926.024:1339): avc: denied { accept } for pid=12979 comm="syz.4.1820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 726.241631][ T36] Bluetooth: hci4: Frame reassembly failed (-84) [ 726.250573][T12999] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 726.263695][ T30] audit: type=1400 audit(1764011926.934:1340): avc: denied { mount } for pid=12994 comm="syz.0.1825" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 726.399879][T12989] syzkaller0: entered promiscuous mode [ 726.414924][T12989] syzkaller0: entered allmulticast mode [ 726.929229][T13011] FAULT_INJECTION: forcing a failure. [ 726.929229][T13011] name failslab, interval 1, probability 0, space 0, times 0 [ 726.948014][T13011] CPU: 0 UID: 0 PID: 13011 Comm: syz.4.1829 Not tainted syzkaller #0 PREEMPT(full) [ 726.948039][T13011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 726.948049][T13011] Call Trace: [ 726.948056][T13011] [ 726.948063][T13011] dump_stack_lvl+0x16c/0x1f0 [ 726.948084][T13011] should_fail_ex+0x512/0x640 [ 726.948103][T13011] ? fs_reclaim_acquire+0xae/0x150 [ 726.948125][T13011] should_failslab+0xc2/0x120 [ 726.948145][T13011] __kmalloc_noprof+0xdd/0x880 [ 726.948167][T13011] ? tomoyo_encode2+0x100/0x3e0 [ 726.948191][T13011] ? tomoyo_encode2+0x100/0x3e0 [ 726.948208][T13011] tomoyo_encode2+0x100/0x3e0 [ 726.948231][T13011] tomoyo_encode+0x29/0x50 [ 726.948248][T13011] tomoyo_realpath_from_path+0x18f/0x6e0 [ 726.948275][T13011] tomoyo_path_number_perm+0x245/0x580 [ 726.948290][T13011] ? tomoyo_path_number_perm+0x237/0x580 [ 726.948309][T13011] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 726.948326][T13011] ? find_held_lock+0x2b/0x80 [ 726.948371][T13011] ? find_held_lock+0x2b/0x80 [ 726.948389][T13011] ? hook_file_ioctl_common+0x145/0x410 [ 726.948417][T13011] ? __fget_files+0x20e/0x3c0 [ 726.948439][T13011] security_file_ioctl+0x9b/0x240 [ 726.948459][T13011] __x64_sys_ioctl+0xb7/0x210 [ 726.948484][T13011] do_syscall_64+0xcd/0xfa0 [ 726.948502][T13011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.948519][T13011] RIP: 0033:0x7fdf90f8f749 [ 726.948533][T13011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 726.948549][T13011] RSP: 002b:00007fdf91d6b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 726.948565][T13011] RAX: ffffffffffffffda RBX: 00007fdf911e6090 RCX: 00007fdf90f8f749 [ 726.948576][T13011] RDX: 0000200000000040 RSI: 00000000c0305710 RDI: 000000000000000d [ 726.948585][T13011] RBP: 00007fdf91d6b090 R08: 0000000000000000 R09: 0000000000000000 [ 726.948595][T13011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.948605][T13011] R13: 00007fdf911e6128 R14: 00007fdf911e6090 R15: 00007fff9ef061c8 [ 726.948631][T13011] [ 726.948652][T13011] ERROR: Out of memory at tomoyo_realpath_from_path. [ 727.446724][T13020] x_tables: duplicate underflow at hook 1 [ 727.507982][ T30] audit: type=1400 audit(1764011928.134:1341): avc: denied { write } for pid=13013 comm="syz.0.1831" path="socket:[43553]" dev="sockfs" ino=43553 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 727.698418][ T30] audit: type=1400 audit(1764011928.374:1342): avc: denied { block_suspend } for pid=13013 comm="syz.0.1831" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 727.848030][ T30] audit: type=1400 audit(1764011928.404:1343): avc: denied { write } for pid=13018 comm="syz.4.1832" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 728.261651][T11927] Bluetooth: hci4: command 0x1003 tx timeout [ 728.268200][ T5820] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 729.790973][T13030] Cannot find add_set index 4 as target [ 729.805753][T13026] Mount JFS Failure: -22 [ 729.810378][T13026] jfs_mount failed w/return code = -22 [ 732.486933][ T3566] Bluetooth: hci4: Frame reassembly failed (-84) [ 732.499668][T13054] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 732.785658][T13067] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 732.981842][ T30] audit: type=1400 audit(1764011933.544:1344): avc: denied { ioctl } for pid=13061 comm="syz.5.1843" path="socket:[43665]" dev="sockfs" ino=43665 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 734.512916][T11927] Bluetooth: hci4: command 0x1003 tx timeout [ 734.519463][ T5820] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 734.728642][T13080] netlink: 'syz.5.1846': attribute type 27 has an invalid length. [ 735.266703][T13087] Cannot find add_set index 4 as target [ 735.892686][ T5811] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 736.041784][ T5811] usb 6-1: Using ep0 maxpacket: 8 [ 736.066982][ T5811] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 736.251002][ T5811] usb 6-1: config 0 has no interface number 0 [ 736.259665][ T5811] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 736.275979][ T5811] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.284517][ T5811] usb 6-1: Product: syz [ 736.289272][ T5811] usb 6-1: Manufacturer: syz [ 736.294712][ T5811] usb 6-1: SerialNumber: syz [ 736.305930][ T5811] usb 6-1: config 0 descriptor?? [ 736.658311][ T5811] uvcvideo 6-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 736.684728][ T5811] uvcvideo 6-1:0.31: Entity type for entity Output 6 was not initialized! [ 736.686136][T13114] syzkaller0: entered promiscuous mode [ 736.703534][T13114] syzkaller0: entered allmulticast mode [ 736.758690][ T5811] usb 6-1: USB disconnect, device number 24 [ 737.649935][T13121] netlink: 'syz.2.1858': attribute type 27 has an invalid length. [ 737.744689][T13124] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 737.821867][ T976] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 738.002220][ T976] usb 4-1: Using ep0 maxpacket: 8 [ 738.010157][ T976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 738.042562][T13131] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 738.062729][ T976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 738.087996][ T976] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 738.265649][ T976] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 49 [ 738.267811][ T36] Bluetooth: hci4: Frame reassembly failed (-84) [ 738.278668][ T976] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 738.373701][T13134] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 738.470800][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.529849][ T976] usb 4-1: config 0 descriptor?? [ 738.541336][T13118] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 738.942938][T13118] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1857'. [ 739.407490][ T9] usb 4-1: USB disconnect, device number 68 [ 739.413582][T11927] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 739.472136][T13142] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1865'. [ 739.490463][T13142] netlink: 'syz.2.1865': attribute type 39 has an invalid length. [ 739.531659][ T976] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 739.681592][ T976] usb 5-1: Using ep0 maxpacket: 32 [ 739.693097][ T976] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 739.702594][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.723057][ T976] usb 5-1: config 0 descriptor?? [ 739.938503][ T976] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 739.948919][ T976] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 739.980234][ T976] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 739.989747][ T976] usb 5-1: media controller created [ 740.013102][ T976] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 740.114118][T13155] Bluetooth: hci0: unsupported parameter 178 [ 740.120213][T13155] Bluetooth: hci0: invalid len left 3, exp >= 215 [ 740.141547][ T43] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 740.351569][T11927] Bluetooth: hci4: command 0x1003 tx timeout [ 740.358591][ T976] DVB: Unable to find symbol dib7000p_attach() [ 740.361903][ T5820] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 740.621522][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 740.845462][ T43] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 741.015459][T13158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.038389][ T976] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 741.046199][ T43] usb 3-1: config 0 has no interface number 0 [ 741.056013][T13158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.100262][ T43] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 741.148067][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.152104][ T976] rc_core: IR keymap rc-dib0700-rc5 not found [ 741.165882][ T976] Registered IR keymap rc-empty [ 741.171086][ T976] dvb-usb: could not initialize remote control. [ 741.183244][ T976] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 741.200672][ T43] usb 3-1: Product: syz [ 741.222178][ T43] usb 3-1: Manufacturer: syz [ 741.230110][ T43] usb 3-1: SerialNumber: syz [ 741.255553][ T43] usb 3-1: config 0 descriptor?? [ 741.331771][T10162] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 741.471227][ T43] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 741.482311][T10162] usb 6-1: Using ep0 maxpacket: 16 [ 741.489781][ T43] uvcvideo 3-1:0.31: Entity type for entity Output 6 was not initialized! [ 741.492255][T10162] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 741.514413][T10162] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 741.515367][ T43] usb 3-1: USB disconnect, device number 61 [ 741.524161][T10162] usb 6-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 741.550742][T10162] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.567927][T10162] usb 6-1: config 0 descriptor?? [ 741.662703][T13167] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 743.148885][T13183] netlink: 'syz.3.1875': attribute type 21 has an invalid length. [ 743.156817][T13183] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1875'. [ 743.165925][T13183] netlink: 'syz.3.1875': attribute type 6 has an invalid length. [ 743.173761][T13183] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1875'. [ 743.474612][ T976] usb 5-1: USB disconnect, device number 60 [ 743.583322][ T976] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 743.972202][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 743.978993][T13194] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 744.001612][ T976] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 744.133607][T10162] usb 6-1: USB disconnect, device number 25 [ 744.160380][ T976] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 744.223815][ T30] audit: type=1400 audit(1764011944.864:1345): avc: denied { name_bind } for pid=13188 comm="syz.3.1878" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 744.295783][ T976] usb 5-1: config 0 has no interface number 0 [ 744.448424][ T976] usb 5-1: New USB device found, idVendor=203e, idProduct=8888, bcdDevice=a8.71 [ 744.539642][ T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.590742][T13200] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 744.638019][ T976] usb 5-1: Product: syz [ 744.661976][ T976] usb 5-1: Manufacturer: syz [ 744.689247][ T976] usb 5-1: SerialNumber: syz [ 744.722525][ T976] usb 5-1: config 0 descriptor?? [ 744.743627][ T976] usb-storage 5-1:0.133: USB Mass Storage device detected [ 744.998270][T13208] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 745.069299][ T30] audit: type=1400 audit(1764011945.744:1346): avc: denied { watch } for pid=13184 comm="syz.4.1876" path="/391" dev="tmpfs" ino=2191 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 745.127573][T13209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 745.140098][T13209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 745.151736][ T976] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 745.321672][ T976] usb 3-1: Using ep0 maxpacket: 32 [ 745.330228][ T976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.342490][ T976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 745.370076][ T976] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 745.379443][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.398902][ T976] usb 3-1: config 0 descriptor?? [ 745.417689][ T976] hub 3-1:0.0: USB hub found [ 745.534562][T10162] usb 5-1: USB disconnect, device number 61 [ 745.640182][ T976] hub 3-1:0.0: 1 port detected [ 746.021678][ T5814] Bluetooth: hci4: command 0x1003 tx timeout [ 746.021697][ T5820] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 746.230122][T10162] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 746.252198][ T976] hub 3-1:0.0: activate --> -90 [ 746.295856][T13221] netlink: 'syz.4.1888': attribute type 21 has an invalid length. [ 746.303872][T13221] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1888'. [ 746.313052][T13221] netlink: 'syz.4.1888': attribute type 6 has an invalid length. [ 746.320802][T13221] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1888'. [ 746.401547][T10162] usb 6-1: Using ep0 maxpacket: 8 [ 746.409570][T10162] usb 6-1: unable to get BOS descriptor or descriptor too short [ 746.418440][T10162] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 746.430611][T10162] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 746.439830][T10162] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.449346][T10162] usb 6-1: Product: syz [ 746.453825][T10162] usb 6-1: Manufacturer: syz [ 746.458979][T10162] usb 6-1: SerialNumber: syz [ 746.661628][T11927] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 746.661637][ T5820] Bluetooth: hci6: command 0x1003 tx timeout [ 746.696312][T10162] cdc_ncm 6-1:1.0: NCM or ECM functional descriptors missing [ 746.703985][T10162] cdc_ncm 6-1:1.0: bind() failure [ 746.743649][T10162] usb 6-1: USB disconnect, device number 26 [ 747.432680][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.439050][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.460615][T13229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.509974][T13229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.556180][ T976] usb 3-1-port1: cannot reset (err = -71) [ 747.556510][ T43] usb 3-1: USB disconnect, device number 62 [ 747.563818][ T976] usb 3-1-port1: Cannot enable. Maybe the USB cable is bad? [ 747.594928][ T976] usb 3-1-port1: attempt power cycle [ 748.876394][ T30] audit: type=1400 audit(1764011949.554:1347): avc: denied { name_connect } for pid=13257 comm="syz.5.1900" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 748.985110][T13264] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 749.223416][T13256] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 749.330406][ T69] Bluetooth: hci4: Frame reassembly failed (-84) [ 749.352885][ T37] Bluetooth: hci6: Frame reassembly failed (-84) [ 749.359566][T13268] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 749.804467][T13275] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1903'. [ 751.230929][T11927] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 751.382848][T11927] Bluetooth: hci6: command 0x1003 tx timeout [ 751.558734][ T5820] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 753.484591][T13290] Cannot find add_set index 4 as target [ 754.301746][ T9] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 754.638864][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 754.659118][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 754.678180][ T9] usb 4-1: config 2 has an invalid interface number: 184 but max is 0 [ 754.699603][ T9] usb 4-1: config 2 has an invalid descriptor of length 134, skipping remainder of the config [ 754.727977][ T9] usb 4-1: config 2 has no interface number 0 [ 754.742431][ T9] usb 4-1: config 2 interface 184 altsetting 200 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 754.771608][ T9] usb 4-1: config 2 interface 184 altsetting 200 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 754.781030][T13300] Cannot find add_set index 4 as target [ 754.821686][ T9] usb 4-1: config 2 interface 184 has no altsetting 0 [ 754.849972][ T9] usb 4-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 2.2c [ 754.878165][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.901740][ T9] usb 4-1: Product: syz [ 754.905938][ T9] usb 4-1: Manufacturer: syz [ 755.033578][ T9] usb 4-1: SerialNumber: syz [ 755.222975][T13313] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 755.286134][ T9] usb-storage 4-1:2.184: USB Mass Storage device detected [ 755.363759][ T9] usb-storage 4-1:2.184: Quirks match for vid 054c pid 002e: 1 [ 755.458982][ T9] usb 4-1: USB disconnect, device number 69 [ 755.565143][T13318] netlink: 'syz.0.1912': attribute type 39 has an invalid length. [ 755.606578][T13318] syz_tun (unregistering): left allmulticast mode [ 755.918314][T13320] netlink: 'syz.4.1916': attribute type 1 has an invalid length. [ 756.384175][T13329] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 756.415463][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 756.591028][T13335] netlink: 'syz.4.1920': attribute type 27 has an invalid length. [ 756.687669][ T30] audit: type=1400 audit(1764011957.364:1348): avc: denied { mounton } for pid=13338 comm="syz.0.1922" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 756.721589][ T30] audit: type=1400 audit(1764011957.394:1349): avc: denied { mount } for pid=13338 comm="syz.0.1922" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 756.791718][T11244] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 756.816716][T13339] random: crng reseeded on system resumption [ 756.816766][ T30] audit: type=1400 audit(1764011957.494:1350): avc: denied { write } for pid=13338 comm="syz.0.1922" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 756.856948][T13341] netlink: 'syz.2.1923': attribute type 33 has an invalid length. [ 756.867846][T13341] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1923'. [ 756.901174][T13342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1922'. [ 756.902908][ T30] audit: type=1400 audit(1764011957.494:1351): avc: denied { open } for pid=13338 comm="syz.0.1922" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 756.910848][T13341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1923'. [ 756.942859][ T30] audit: type=1400 audit(1764011957.534:1352): avc: denied { write } for pid=13340 comm="syz.2.1923" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 756.981652][T11244] usb 6-1: Using ep0 maxpacket: 16 [ 757.011667][T11244] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 757.092561][T11244] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 757.108003][T13346] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1923'. [ 757.147577][T11244] usb 6-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 757.292575][T11244] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.404125][T13352] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1925'. [ 757.914209][ T9] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 757.929090][T11244] usb 6-1: config 0 descriptor?? [ 758.099423][ T9] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 758.111928][ T9] usb 3-1: can't read configurations, error -22 [ 758.278101][ T9] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 758.421670][T11927] Bluetooth: hci4: command 0x1003 tx timeout [ 758.421688][ T5820] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 758.438791][ T9] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 758.454647][ T9] usb 3-1: can't read configurations, error -22 [ 758.472318][ T9] usb usb3-port1: attempt power cycle [ 759.391814][ T9] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 759.737122][ T9] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 759.757166][ T9] usb 3-1: can't read configurations, error -22 [ 760.028836][T13371] Cannot find add_set index 4 as target [ 760.161052][ T9] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 760.537443][ T9] usb 3-1: device descriptor read/8, error -71 [ 760.563146][T10162] usb 6-1: USB disconnect, device number 27 [ 760.661921][ T9] usb usb3-port1: unable to enumerate USB device [ 761.435803][T13384] comedi comedi3: pcmmio: I/O port conflict (0xc,32) [ 761.467995][ T30] audit: type=1400 audit(1764011962.144:1353): avc: denied { accept } for pid=13381 comm="syz.5.1933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 761.515374][ T30] audit: type=1400 audit(1764011962.174:1354): avc: denied { ioctl } for pid=13381 comm="syz.5.1933" path="socket:[46152]" dev="sockfs" ino=46152 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 761.660958][T13390] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1935'. [ 761.731674][ T9] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 761.914644][ T9] usb 3-1: too many configurations: 228, using maximum allowed: 8 [ 762.022216][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 762.127756][ T9] usb 3-1: can't read configurations, error -61 [ 762.414907][ T9] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 762.451785][T13381] delete_channel: no stack [ 762.509424][T13398] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 762.551675][ T69] Bluetooth: hci4: Frame reassembly failed (-84) [ 762.682136][T13403] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1936'. [ 763.051725][ T9] usb 3-1: too many configurations: 228, using maximum allowed: 8 [ 763.095732][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 763.543458][ T9] usb 3-1: can't read configurations, error -61 [ 763.571607][ T30] audit: type=1400 audit(1764011963.934:1355): avc: denied { create } for pid=13400 comm="syz.4.1937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 763.618473][ T9] usb usb3-port1: attempt power cycle [ 763.670869][T13404] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1939'. [ 763.706979][ T30] audit: type=1400 audit(1764011963.934:1356): avc: denied { write } for pid=13400 comm="syz.4.1937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 763.743816][T13404] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1939'. [ 764.043932][ T9] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 764.581549][T11927] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 764.622147][ T9] usb 3-1: device descriptor read/8, error -71 [ 764.858580][T13414] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 764.881498][ T30] audit: type=1400 audit(1764011965.554:1357): avc: denied { name_bind } for pid=13415 comm="syz.4.1942" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 764.948572][T13420] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 765.381628][ T9] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 765.436001][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 765.458239][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 765.470563][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 765.488858][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 765.508411][ T30] audit: type=1400 audit(1764011966.184:1358): avc: denied { getopt } for pid=13429 comm="syz.5.1946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 765.748779][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.098468][T13436] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 766.174706][ T9] usb 3-1: config 0 descriptor?? [ 767.507353][T13449] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1950'. [ 767.940499][T13452] Cannot find add_set index 4 as target [ 768.385218][T13458] netem: change failed [ 768.593650][ T30] audit: type=1400 audit(1764011969.274:1359): avc: denied { read } for pid=13462 comm="syz.5.1956" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 768.623167][T13463] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1956'. [ 768.656481][ T30] audit: type=1400 audit(1764011969.304:1360): avc: denied { open } for pid=13462 comm="syz.5.1956" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 768.775833][ T5811] usb 3-1: USB disconnect, device number 74 [ 768.931626][ T9] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 768.988634][T13470] FAULT_INJECTION: forcing a failure. [ 768.988634][T13470] name failslab, interval 1, probability 0, space 0, times 0 [ 769.001544][T13470] CPU: 0 UID: 0 PID: 13470 Comm: syz.3.1957 Not tainted syzkaller #0 PREEMPT(full) [ 769.001571][T13470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 769.001584][T13470] Call Trace: [ 769.001592][T13470] [ 769.001600][T13470] dump_stack_lvl+0x16c/0x1f0 [ 769.001624][T13470] should_fail_ex+0x512/0x640 [ 769.001647][T13470] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 769.001679][T13470] should_failslab+0xc2/0x120 [ 769.001703][T13470] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 769.001731][T13470] ? find_held_lock+0x2b/0x80 [ 769.001754][T13470] ? alloc_inode+0xc3/0x240 [ 769.001785][T13470] ? alloc_inode+0xc3/0x240 [ 769.001807][T13470] alloc_inode+0xc3/0x240 [ 769.001832][T13470] path_from_stashed+0x25b/0x750 [ 769.001853][T13470] ? do_raw_spin_unlock+0x172/0x230 [ 769.001880][T13470] ns_get_path+0x60/0x80 [ 769.001902][T13470] proc_ns_get_link+0x121/0x230 [ 769.001927][T13470] ? __pfx_proc_ns_get_link+0x10/0x10 [ 769.001959][T13470] ? __pfx_proc_ns_get_link+0x10/0x10 [ 769.001983][T13470] step_into+0x196c/0x21a0 [ 769.002018][T13470] ? __pfx_step_into+0x10/0x10 [ 769.002045][T13470] ? find_held_lock+0x2b/0x80 [ 769.002078][T13470] path_openat+0x6db/0x2cb0 [ 769.002130][T13470] ? __pfx_path_openat+0x10/0x10 [ 769.002158][T13470] ? __lock_acquire+0xb8a/0x1c90 [ 769.002180][T13470] do_filp_open+0x20b/0x470 [ 769.002202][T13470] ? __pfx_do_filp_open+0x10/0x10 [ 769.002221][T13470] ? rcu_is_watching+0x12/0xc0 [ 769.002266][T13470] ? alloc_fd+0x471/0x7d0 [ 769.002294][T13470] do_sys_openat2+0x11b/0x1d0 [ 769.002319][T13470] ? __pfx_do_sys_openat2+0x10/0x10 [ 769.002346][T13470] ? __pfx___schedule+0x10/0x10 [ 769.002381][T13470] __x64_sys_openat+0x174/0x210 [ 769.002405][T13470] ? __pfx___x64_sys_openat+0x10/0x10 [ 769.002435][T13470] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 769.002467][T13470] do_syscall_64+0xcd/0xfa0 [ 769.002489][T13470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.002509][T13470] RIP: 0033:0x7f9ff658df90 [ 769.002526][T13470] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 769.002545][T13470] RSP: 002b:00007f9ff7470f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 769.002564][T13470] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f9ff658df90 [ 769.002578][T13470] RDX: 0000000000000002 RSI: 00007f9ff7470fa0 RDI: 00000000ffffff9c [ 769.002591][T13470] RBP: 00007f9ff7470fa0 R08: 0000000000000000 R09: 0000000000000000 [ 769.002603][T13470] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 769.002615][T13470] R13: 00007f9ff67e6218 R14: 00007f9ff67e6180 R15: 00007ffcebae0208 [ 769.002645][T13470] [ 769.351535][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 769.392741][ T9] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 769.401974][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.423356][ T9] usb 5-1: config 0 descriptor?? [ 769.965105][ T9] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 769.977212][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 770.012051][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 770.022000][ T9] usb 5-1: media controller created [ 770.417320][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 770.489550][T13487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1962'. [ 770.570344][ T9] DVB: Unable to find symbol dib7000p_attach() [ 770.570356][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 770.651662][ T9] rc_core: IR keymap rc-dib0700-rc5 not found [ 770.651676][ T9] Registered IR keymap rc-empty [ 770.651814][ T9] dvb-usb: could not initialize remote control. [ 770.651819][ T9] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 770.822988][T13483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 770.823357][T13483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.096221][ T30] audit: type=1400 audit(1764011971.774:1361): avc: denied { open } for pid=13495 comm="syz.0.1964" path="/dev/ptyq4" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 771.180621][ T30] audit: type=1400 audit(1764011971.814:1362): avc: denied { wake_alarm } for pid=13495 comm="syz.0.1964" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 771.205975][T13494] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1963'. [ 771.265853][ T30] audit: type=1400 audit(1764011971.814:1363): avc: denied { ioctl } for pid=13495 comm="syz.0.1964" path="/dev/ptyq4" dev="devtmpfs" ino=123 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 771.554205][T13500] netlink: 'syz.0.1965': attribute type 27 has an invalid length. [ 771.752713][T13505] FAULT_INJECTION: forcing a failure. [ 771.752713][T13505] name failslab, interval 1, probability 0, space 0, times 0 [ 771.767192][T13505] CPU: 0 UID: 0 PID: 13505 Comm: syz.2.1967 Not tainted syzkaller #0 PREEMPT(full) [ 771.767222][T13505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 771.767233][T13505] Call Trace: [ 771.767240][T13505] [ 771.767249][T13505] dump_stack_lvl+0x16c/0x1f0 [ 771.767276][T13505] should_fail_ex+0x512/0x640 [ 771.767300][T13505] ? fs_reclaim_acquire+0xae/0x150 [ 771.767325][T13505] should_failslab+0xc2/0x120 [ 771.767348][T13505] __kmalloc_noprof+0xdd/0x880 [ 771.767375][T13505] ? tomoyo_encode2+0x100/0x3e0 [ 771.767403][T13505] ? tomoyo_encode2+0x100/0x3e0 [ 771.767424][T13505] tomoyo_encode2+0x100/0x3e0 [ 771.767450][T13505] tomoyo_encode+0x29/0x50 [ 771.767471][T13505] tomoyo_realpath_from_path+0x18f/0x6e0 [ 771.767497][T13505] ? tomoyo_profile+0x47/0x60 [ 771.767525][T13505] tomoyo_path_number_perm+0x245/0x580 [ 771.767543][T13505] ? tomoyo_path_number_perm+0x237/0x580 [ 771.767565][T13505] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 771.767587][T13505] ? find_held_lock+0x2b/0x80 [ 771.767638][T13505] ? find_held_lock+0x2b/0x80 [ 771.767660][T13505] ? hook_file_ioctl_common+0x145/0x410 [ 771.767693][T13505] ? __fget_files+0x20e/0x3c0 [ 771.767719][T13505] security_file_ioctl+0x9b/0x240 [ 771.767743][T13505] __x64_sys_ioctl+0xb7/0x210 [ 771.767773][T13505] do_syscall_64+0xcd/0xfa0 [ 771.767795][T13505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.767815][T13505] RIP: 0033:0x7f52dcb8f749 [ 771.767832][T13505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 771.767849][T13505] RSP: 002b:00007f52dda14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 771.767868][T13505] RAX: ffffffffffffffda RBX: 00007f52dcde5fa0 RCX: 00007f52dcb8f749 [ 771.767882][T13505] RDX: 00002000000003c0 RSI: 00000000000089f1 RDI: 0000000000000007 [ 771.767900][T13505] RBP: 00007f52dda14090 R08: 0000000000000000 R09: 0000000000000000 [ 771.767912][T13505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 771.767924][T13505] R13: 00007f52dcde6038 R14: 00007f52dcde5fa0 R15: 00007ffd4dee39d8 [ 771.767954][T13505] [ 771.768651][T13505] ERROR: Out of memory at tomoyo_realpath_from_path. [ 772.301397][T13515] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 772.636858][T13512] sctp: [Deprecated]: syz.3.1968 (pid 13512) Use of int in maxseg socket option. [ 772.636858][T13512] Use struct sctp_assoc_value instead [ 773.146069][T13521] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 773.168292][T13523] FAULT_INJECTION: forcing a failure. [ 773.168292][T13523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 773.199619][T13523] CPU: 0 UID: 0 PID: 13523 Comm: syz.0.1972 Not tainted syzkaller #0 PREEMPT(full) [ 773.199650][T13523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 773.199661][T13523] Call Trace: [ 773.199667][T13523] [ 773.199675][T13523] dump_stack_lvl+0x16c/0x1f0 [ 773.199698][T13523] should_fail_ex+0x512/0x640 [ 773.199724][T13523] _copy_to_user+0x32/0xd0 [ 773.199749][T13523] simple_read_from_buffer+0xcb/0x170 [ 773.199780][T13523] proc_fail_nth_read+0x197/0x240 [ 773.199802][T13523] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 773.199825][T13523] ? rw_verify_area+0xcf/0x6c0 [ 773.199851][T13523] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 773.199873][T13523] vfs_read+0x1e4/0xcf0 [ 773.199895][T13523] ? __pfx___mutex_lock+0x10/0x10 [ 773.199916][T13523] ? __pfx_vfs_read+0x10/0x10 [ 773.199942][T13523] ? __fget_files+0x20e/0x3c0 [ 773.199971][T13523] ksys_read+0x12a/0x250 [ 773.199988][T13523] ? __pfx_ksys_read+0x10/0x10 [ 773.200005][T13523] ? syscall_user_dispatch+0x78/0x140 [ 773.200036][T13523] do_syscall_64+0xcd/0xfa0 [ 773.200064][T13523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.200085][T13523] RIP: 0033:0x7fab9ad8e15c [ 773.200101][T13523] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 773.200120][T13523] RSP: 002b:00007fab9bbdd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 773.200140][T13523] RAX: ffffffffffffffda RBX: 00007fab9afe5fa0 RCX: 00007fab9ad8e15c [ 773.200154][T13523] RDX: 000000000000000f RSI: 00007fab9bbdd0a0 RDI: 0000000000000003 [ 773.200166][T13523] RBP: 00007fab9bbdd090 R08: 0000000000000000 R09: 0000000000000000 [ 773.200178][T13523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 773.200190][T13523] R13: 00007fab9afe6038 R14: 00007fab9afe5fa0 R15: 00007ffe66a99458 [ 773.200217][T13523] [ 773.212251][T13525] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1973'. [ 773.514262][T13530] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1975'. [ 773.723825][ T9] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 773.896128][T13538] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 774.126850][ T37] Bluetooth: hci4: Frame reassembly failed (-84) [ 774.135273][ T37] Bluetooth: hci4: Frame reassembly failed (-84) [ 774.135833][ T9] usb 4-1: config 1 has an invalid interface number: 140 but max is 0 [ 774.159878][ T9] usb 4-1: config 1 has no interface number 0 [ 774.177320][ T9] usb 4-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88 [ 774.231543][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.438928][ T9] usb 4-1: MBOX3: Invalid descriptor size=18. [ 774.647588][ T9] usb 4-1: USB disconnect, device number 70 [ 775.258407][ T30] audit: type=1400 audit(1764011975.934:1364): avc: denied { rename } for pid=13553 comm="syz.3.1983" name="file0" dev="tmpfs" ino=2143 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 775.411669][ T30] audit: type=1400 audit(1764011975.994:1365): avc: denied { mounton } for pid=13553 comm="syz.3.1983" path="/380/file7" dev="tmpfs" ino=2143 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 775.594145][T13561] FAULT_INJECTION: forcing a failure. [ 775.594145][T13561] name failslab, interval 1, probability 0, space 0, times 0 [ 775.655120][T13561] CPU: 0 UID: 0 PID: 13561 Comm: syz.3.1984 Not tainted syzkaller #0 PREEMPT(full) [ 775.655148][T13561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 775.655155][T13561] Call Trace: [ 775.655160][T13561] [ 775.655165][T13561] dump_stack_lvl+0x16c/0x1f0 [ 775.655181][T13561] should_fail_ex+0x512/0x640 [ 775.655196][T13561] ? fs_reclaim_acquire+0xae/0x150 [ 775.655210][T13561] should_failslab+0xc2/0x120 [ 775.655224][T13561] __kmalloc_noprof+0xdd/0x880 [ 775.655240][T13561] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 775.655257][T13561] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 775.655270][T13561] tomoyo_realpath_from_path+0xc2/0x6e0 [ 775.655284][T13561] ? tomoyo_profile+0x47/0x60 [ 775.655300][T13561] tomoyo_path_number_perm+0x245/0x580 [ 775.655311][T13561] ? tomoyo_path_number_perm+0x237/0x580 [ 775.655323][T13561] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 775.655335][T13561] ? find_held_lock+0x2b/0x80 [ 775.655363][T13561] ? find_held_lock+0x2b/0x80 [ 775.655376][T13561] ? hook_file_ioctl_common+0x145/0x410 [ 775.655395][T13561] ? __fget_files+0x20e/0x3c0 [ 775.655409][T13561] security_file_ioctl+0x9b/0x240 [ 775.655423][T13561] __x64_sys_ioctl+0xb7/0x210 [ 775.655440][T13561] do_syscall_64+0xcd/0xfa0 [ 775.655452][T13561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.655464][T13561] RIP: 0033:0x7f9ff658f749 [ 775.655474][T13561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 775.655485][T13561] RSP: 002b:00007f9ff74b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 775.655496][T13561] RAX: ffffffffffffffda RBX: 00007f9ff67e5fa0 RCX: 00007f9ff658f749 [ 775.655504][T13561] RDX: 00002000000000c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 775.655511][T13561] RBP: 00007f9ff74b3090 R08: 0000000000000000 R09: 0000000000000000 [ 775.655518][T13561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 775.655524][T13561] R13: 00007f9ff67e6038 R14: 00007f9ff67e5fa0 R15: 00007ffcebae0208 [ 775.655540][T13561] [ 775.655734][T13561] ERROR: Out of memory at tomoyo_realpath_from_path. [ 776.181715][ T5820] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 776.182126][T11927] Bluetooth: hci4: command 0x1003 tx timeout [ 776.377205][T10162] usb 5-1: USB disconnect, device number 62 [ 776.411695][ T5811] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 776.480875][T10162] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 776.611917][ T5811] usb 4-1: Using ep0 maxpacket: 32 [ 776.613242][ T30] audit: type=1400 audit(1764011977.254:1366): avc: denied { connect } for pid=13568 comm="syz.0.1988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 776.642497][ T5811] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 776.662850][ T5811] usb 4-1: config 0 has no interface number 0 [ 776.672142][ T30] audit: type=1400 audit(1764011977.254:1367): avc: denied { bind } for pid=13568 comm="syz.0.1988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 776.676787][ T5811] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 776.708117][ T5811] usb 4-1: config 0 interface 85 has no altsetting 0 [ 776.722451][ T30] audit: type=1400 audit(1764011977.254:1368): avc: denied { write } for pid=13568 comm="syz.0.1988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 776.771273][ T5811] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 776.789274][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.815427][ T5811] usb 4-1: Product: syz [ 776.824102][ T30] audit: type=1400 audit(1764011977.254:1369): avc: denied { read } for pid=13568 comm="syz.0.1988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 776.840153][ T5811] usb 4-1: Manufacturer: syz [ 776.848063][ T5811] usb 4-1: SerialNumber: syz [ 776.908209][ T5811] usb 4-1: config 0 descriptor?? [ 777.580815][ T5811] appletouch 4-1:0.85: Geyser mode initialized. [ 777.611269][ T5811] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input30 [ 777.722548][T13588] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 777.754804][T13588] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 777.780936][ T976] usb 4-1: USB disconnect, device number 71 [ 777.815313][ T976] appletouch 4-1:0.85: input: appletouch disconnected [ 777.834363][T13588] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 778.026302][T13600] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 778.047620][ T9945] Bluetooth: hci4: Frame reassembly failed (-84) [ 779.248151][T11244] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 779.445358][T11244] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 779.476299][T11244] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.541368][T11244] usb 3-1: Product: syz [ 779.550879][T11244] usb 3-1: Manufacturer: syz [ 779.574254][T11244] usb 3-1: SerialNumber: syz [ 779.792105][T11244] usb 3-1: config 0 descriptor?? [ 779.810769][T11244] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 779.864177][T11244] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 779.910939][T11244] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 779.938558][T11244] usb 3-1: media controller created [ 780.001323][T11244] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 780.101615][T11927] Bluetooth: hci4: command 0x1003 tx timeout [ 780.102384][ T5820] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 780.271045][T11244] DVB: Unable to find symbol mt352_attach() [ 780.346066][T13626] FAULT_INJECTION: forcing a failure. [ 780.346066][T13626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 780.359232][T13626] CPU: 0 UID: 0 PID: 13626 Comm: syz.5.2002 Not tainted syzkaller #0 PREEMPT(full) [ 780.359258][T13626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 780.359271][T13626] Call Trace: [ 780.359279][T13626] [ 780.359288][T13626] dump_stack_lvl+0x16c/0x1f0 [ 780.359313][T13626] should_fail_ex+0x512/0x640 [ 780.359341][T13626] _copy_from_user+0x2e/0xd0 [ 780.359366][T13626] copy_mount_options+0x76/0x190 [ 780.359395][T13626] __x64_sys_mount+0x1ab/0x310 [ 780.359419][T13626] ? __pfx___x64_sys_mount+0x10/0x10 [ 780.359450][T13626] do_syscall_64+0xcd/0xfa0 [ 780.359473][T13626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.359494][T13626] RIP: 0033:0x7f5c9978f749 [ 780.359511][T13626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 780.359530][T13626] RSP: 002b:00007f5c9a623038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 780.359549][T13626] RAX: ffffffffffffffda RBX: 00007f5c999e6180 RCX: 00007f5c9978f749 [ 780.359563][T13626] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000 [ 780.359576][T13626] RBP: 00007f5c9a623090 R08: 00002000000001c0 R09: 0000000000000000 [ 780.359589][T13626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 780.359601][T13626] R13: 00007f5c999e6218 R14: 00007f5c999e6180 R15: 00007fff001402e8 [ 780.359631][T13626] [ 780.511670][T13626] overlayfs: overlapping lowerdir path [ 780.763652][T11244] DVB: Unable to find symbol nxt6000_attach() [ 780.769754][T11244] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 780.814137][T11244] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input31 [ 780.921303][T11244] dvb-usb: schedule remote query interval to 1000 msecs. [ 781.492649][T11244] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 781.504398][T11244] dvb-usb: bulk message failed: -22 (7/0) [ 781.510279][T11244] dvb-usb: bulk message failed: -22 (7/0) [ 781.721803][T11244] usb 3-1: USB disconnect, device number 75 [ 781.822400][ T30] audit: type=1400 audit(1764011982.504:1370): avc: denied { read } for pid=13634 comm="syz.5.2005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 782.208321][T11244] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 782.519253][T13646] Cannot find add_set index 4 as target [ 783.885687][T13660] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 784.612038][ T30] audit: type=1326 audit(1764011985.274:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13670 comm="syz.2.2015" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52dcb8f749 code=0x0 [ 784.995615][T13677] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 785.014714][ T30] audit: type=1400 audit(1764011985.674:1372): avc: denied { watch_reads } for pid=13670 comm="syz.2.2015" path="/404" dev="tmpfs" ino=2226 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 785.277364][T13681] FAULT_INJECTION: forcing a failure. [ 785.277364][T13681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 785.336892][T13681] CPU: 0 UID: 0 PID: 13681 Comm: syz.0.2018 Not tainted syzkaller #0 PREEMPT(full) [ 785.336920][T13681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 785.336933][T13681] Call Trace: [ 785.336940][T13681] [ 785.336948][T13681] dump_stack_lvl+0x16c/0x1f0 [ 785.336972][T13681] should_fail_ex+0x512/0x640 [ 785.337000][T13681] _copy_from_user+0x2e/0xd0 [ 785.337026][T13681] core_sys_select+0x35b/0xc20 [ 785.337060][T13681] ? __pfx_core_sys_select+0x10/0x10 [ 785.337108][T13681] ? set_user_sigmask+0x21b/0x2b0 [ 785.337130][T13681] ? __pfx_set_user_sigmask+0x10/0x10 [ 785.337160][T13681] do_pselect.constprop.0+0x19f/0x1e0 [ 785.337182][T13681] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 785.337203][T13681] ? handle_mm_fault+0x2ab/0xd10 [ 785.337238][T13681] __x64_sys_pselect6+0x182/0x240 [ 785.337259][T13681] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 785.337289][T13681] do_syscall_64+0xcd/0xfa0 [ 785.337308][T13681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.337324][T13681] RIP: 0033:0x7fab9ad8f749 [ 785.337339][T13681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 785.337358][T13681] RSP: 002b:00007fab9bbdd038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 785.337377][T13681] RAX: ffffffffffffffda RBX: 00007fab9afe5fa0 RCX: 00007fab9ad8f749 [ 785.337390][T13681] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 785.337402][T13681] RBP: 00007fab9bbdd090 R08: 0000200000000280 R09: 0000000000000000 [ 785.337415][T13681] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 785.337428][T13681] R13: 00007fab9afe6038 R14: 00007fab9afe5fa0 R15: 00007ffe66a99458 [ 785.337457][T13681] [ 785.564494][T13691] FAULT_INJECTION: forcing a failure. [ 785.564494][T13691] name failslab, interval 1, probability 0, space 0, times 0 [ 785.566633][ T30] audit: type=1400 audit(1764011986.194:1373): avc: denied { bind } for pid=13682 comm="syz.3.2020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 785.577508][T13691] CPU: 0 UID: 0 PID: 13691 Comm: syz.3.2020 Not tainted syzkaller #0 PREEMPT(full) [ 785.577530][T13691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 785.577541][T13691] Call Trace: [ 785.577549][T13691] [ 785.577557][T13691] dump_stack_lvl+0x16c/0x1f0 [ 785.577579][T13691] should_fail_ex+0x512/0x640 [ 785.577601][T13691] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 785.577634][T13691] should_failslab+0xc2/0x120 [ 785.577657][T13691] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 785.577683][T13691] ? rcu_preempt_deferred_qs_irqrestore+0x500/0xbc0 [ 785.577705][T13691] ? proc_alloc_inode+0x25/0x200 [ 785.577734][T13691] ? __pfx_proc_alloc_inode+0x10/0x10 [ 785.577758][T13691] ? proc_alloc_inode+0x25/0x200 [ 785.577780][T13691] proc_alloc_inode+0x25/0x200 [ 785.577804][T13691] alloc_inode+0x64/0x240 [ 785.577829][T13691] new_inode+0x22/0x1c0 [ 785.577856][T13691] proc_pid_make_inode+0x22/0x160 [ 785.577882][T13691] proc_map_files_instantiate+0x72/0x1a0 [ 785.577909][T13691] proc_fill_cache+0x361/0x470 [ 785.577933][T13691] ? __pfx_proc_map_files_instantiate+0x10/0x10 [ 785.577960][T13691] ? __pfx_proc_fill_cache+0x10/0x10 [ 785.577995][T13691] ? irqentry_exit+0x3b/0x90 [ 785.578013][T13691] ? lockdep_hardirqs_on+0x7c/0x110 [ 785.578055][T13691] proc_map_files_readdir+0x8fe/0xb20 [ 785.578090][T13691] ? __pfx_proc_map_files_readdir+0x10/0x10 [ 785.578131][T13691] ? down_read_killable+0x220/0x4b0 [ 785.578155][T13691] ? yield_to+0x220/0x890 [ 785.578170][T13691] ? avc_policy_seqno+0x9/0x20 [ 785.578194][T13691] ? selinux_file_permission+0x126/0x660 [ 785.578223][T13691] iterate_dir+0x296/0xaf0 [ 785.578254][T13691] __x64_sys_getdents64+0x13c/0x2c0 [ 785.578283][T13691] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 785.578311][T13691] ? __pfx_filldir64+0x10/0x10 [ 785.578347][T13691] do_syscall_64+0xcd/0xfa0 [ 785.578369][T13691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.578388][T13691] RIP: 0033:0x7f9ff658f749 [ 785.578405][T13691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 785.578423][T13691] RSP: 002b:00007f9ff7492038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 785.578442][T13691] RAX: ffffffffffffffda RBX: 00007f9ff67e6090 RCX: 00007f9ff658f749 [ 785.578455][T13691] RDX: 0000000000001002 RSI: 0000200000002f40 RDI: 0000000000000006 [ 785.578467][T13691] RBP: 00007f9ff7492090 R08: 0000000000000000 R09: 0000000000000000 [ 785.578479][T13691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 785.578490][T13691] R13: 00007f9ff67e6128 R14: 00007f9ff67e6090 R15: 00007ffcebae0208 [ 785.578519][T13691] [ 786.203339][T13692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2019'. [ 786.333567][T13702] fuse: Bad value for 'fd' [ 786.801688][ T9] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 786.991601][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 786.999386][ T9] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 787.011066][ T9] usb 6-1: config 0 has no interface number 0 [ 787.190717][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 787.211139][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.224562][ T9] usb 6-1: Product: syz [ 787.234669][ T9] usb 6-1: Manufacturer: syz [ 787.239600][ T9] usb 6-1: SerialNumber: syz [ 787.668962][T13717] 9pnet_fd: Insufficient options for proto=fd [ 787.675761][T13719] 9pnet_fd: Insufficient options for proto=fd [ 787.685651][ T9] usb 6-1: config 0 descriptor?? [ 788.031190][T13727] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2031'. [ 788.169999][ T9] uvcvideo 6-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 788.193937][ T9] uvcvideo 6-1:0.31: Entity type for entity Output 6 was not initialized! [ 788.194102][T13727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2031'. [ 788.232964][ T9] usb 6-1: USB disconnect, device number 28 [ 788.283255][ T30] audit: type=1400 audit(1764011988.964:1374): avc: denied { connect } for pid=13726 comm="syz.3.2031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 788.409604][ T30] audit: type=1400 audit(1764011989.084:1375): avc: denied { ioctl } for pid=13726 comm="syz.3.2031" path="socket:[48291]" dev="sockfs" ino=48291 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 788.530086][T13736] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 788.998461][T13738] nfs: Unknown parameter '' [ 789.021063][ T30] audit: type=1400 audit(1764011989.694:1376): avc: denied { write } for pid=13726 comm="syz.3.2031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 789.474244][T13750] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 789.544811][ T9945] Bluetooth: hci4: Frame reassembly failed (-84) [ 789.551950][ T9945] Bluetooth: hci4: Frame reassembly failed (-84) [ 789.565139][ T9] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 789.765457][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 789.789835][T13733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 789.790560][ T9] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 789.824781][T13733] bond0: (slave rose0): Enslaving as an active interface with an up link [ 789.828872][ T9] usb 3-1: config 0 has no interface number 0 [ 789.856803][ T30] audit: type=1400 audit(1764011990.534:1377): avc: denied { search } for pid=13751 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 789.879012][ C0] vkms_vblank_simulate: vblank timer overrun [ 789.902107][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 789.924076][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.941628][ T9] usb 3-1: Product: syz [ 789.945849][ T9] usb 3-1: Manufacturer: syz [ 789.959374][ T9] usb 3-1: SerialNumber: syz [ 789.974125][ T30] audit: type=1400 audit(1764011990.534:1378): avc: denied { search } for pid=13751 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 789.996989][ C0] vkms_vblank_simulate: vblank timer overrun [ 790.012324][ T9] usb 3-1: config 0 descriptor?? [ 790.033596][ T9] hub 3-1:0.132: bad descriptor, ignoring hub [ 790.039718][ T9] hub 3-1:0.132: probe with driver hub failed with error -5 [ 790.074205][ T9] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input32 [ 790.092365][ T30] audit: type=1400 audit(1764011990.534:1379): avc: denied { search } for pid=13751 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 790.115575][ C0] vkms_vblank_simulate: vblank timer overrun [ 790.136700][ T30] audit: type=1400 audit(1764011990.534:1380): avc: denied { search } for pid=13751 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 790.286588][ T30] audit: type=1400 audit(1764011990.564:1381): avc: denied { read open } for pid=13759 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 790.312163][ C0] vkms_vblank_simulate: vblank timer overrun [ 790.321387][ T30] audit: type=1400 audit(1764011990.564:1382): avc: denied { getattr } for pid=13759 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 790.346779][ C0] vkms_vblank_simulate: vblank timer overrun [ 790.348794][T13740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2033'. [ 790.380587][ T30] audit: type=1400 audit(1764011990.564:1383): avc: denied { getattr } for pid=13759 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1875 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 790.703266][T13768] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2041'. [ 791.096260][T13785] fuse: Unknown parameter 'group_id00000000000000000000' [ 791.162793][T13788] netlink: 'syz.2.2045': attribute type 33 has an invalid length. [ 791.170688][T13788] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2045'. [ 791.262504][T13790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2045'. [ 791.316523][T13790] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2045'. [ 791.514064][ T5170] usb 3-1: reset high-speed USB device number 76 using dummy_hcd [ 791.516215][ T5170] usb 3-1: device reset changed ep0 maxpacket size! [ 791.518579][ T5811] usb 3-1: USB disconnect, device number 76 [ 791.541587][ T5820] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 791.832527][ T5811] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 791.898841][T13807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2048'. [ 792.976448][ T5811] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 792.976486][ T5811] usb 3-1: can't read configurations, error -22 [ 793.101568][ T5811] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 793.211607][ T43] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 793.253653][ T5811] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 793.262441][ T5811] usb 3-1: can't read configurations, error -22 [ 793.322805][ T5811] usb usb3-port1: attempt power cycle [ 793.371588][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 793.500630][ T43] usb 5-1: config 0 has an invalid interface number: 14 but max is 0 [ 793.535040][ T43] usb 5-1: config 0 has no interface number 0 [ 793.698410][ T43] usb 5-1: config 0 interface 14 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 1023 [ 793.746409][T13822] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 793.776370][ T43] usb 5-1: config 0 interface 14 altsetting 1 endpoint 0xB has invalid maxpacket 560, setting to 64 [ 793.787494][ T5811] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 793.800685][ T43] usb 5-1: config 0 interface 14 has no altsetting 0 [ 793.838978][ T5811] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 793.869960][ T5811] usb 3-1: can't read configurations, error -22 [ 793.887061][ T43] usb 5-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=5d.45 [ 793.897434][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.922951][ T43] usb 5-1: Product: syz [ 793.934598][ T43] usb 5-1: Manufacturer: syz [ 793.946591][ T43] usb 5-1: SerialNumber: syz [ 793.977339][ T43] usb 5-1: config 0 descriptor?? [ 794.010118][T13808] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 794.025498][ T43] ti_usb_3410_5052 5-1:0.14: TI USB 3410 1 port adapter converter detected [ 794.037688][ T43] ti_usb_3410_5052 5-1:0.14: missing endpoints [ 794.044107][ T5811] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 794.075137][ T5811] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 794.095674][ T5811] usb 3-1: can't read configurations, error -22 [ 794.111521][ T5953] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 794.120738][ T5811] usb usb3-port1: unable to enumerate USB device [ 794.227079][T13808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.257236][T13808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 794.265599][ T5953] usb 4-1: Using ep0 maxpacket: 8 [ 794.273080][ T5953] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 794.288761][ T5953] usb 4-1: config 0 has no interface number 0 [ 794.298768][ T5811] usb 5-1: USB disconnect, device number 63 [ 794.335669][ T5953] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 794.349281][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.371922][ T5953] usb 4-1: Product: syz [ 794.376226][ T5953] usb 4-1: Manufacturer: syz [ 794.380907][ T5953] usb 4-1: SerialNumber: syz [ 794.402133][ T5953] usb 4-1: config 0 descriptor?? [ 794.615246][ T5953] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 794.657779][ T5953] uvcvideo 4-1:0.31: Entity type for entity Output 6 was not initialized! [ 794.718283][ T5953] usb 4-1: USB disconnect, device number 72 [ 795.061628][T13850] random: crng reseeded on system resumption [ 795.081976][T13850] FAULT_INJECTION: forcing a failure. [ 795.081976][T13850] name failslab, interval 1, probability 0, space 0, times 0 [ 795.094898][T13850] CPU: 1 UID: 0 PID: 13850 Comm: syz.5.2056 Not tainted syzkaller #0 PREEMPT(full) [ 795.094926][T13850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 795.094939][T13850] Call Trace: [ 795.094948][T13850] [ 795.094958][T13850] dump_stack_lvl+0x16c/0x1f0 [ 795.094983][T13850] should_fail_ex+0x512/0x640 [ 795.095007][T13850] ? __kmalloc_cache_noprof+0x5f/0x780 [ 795.095044][T13850] should_failslab+0xc2/0x120 [ 795.095068][T13850] __kmalloc_cache_noprof+0x72/0x780 [ 795.095095][T13850] ? blocking_notifier_call_chain_robust+0xf6/0x160 [ 795.095126][T13850] ? create_basic_memory_bitmaps+0x9d/0x320 [ 795.095154][T13850] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 795.095188][T13850] ? create_basic_memory_bitmaps+0x9d/0x320 [ 795.095212][T13850] create_basic_memory_bitmaps+0x9d/0x320 [ 795.095244][T13850] snapshot_open+0x235/0x2b0 [ 795.095271][T13850] ? __pfx_snapshot_open+0x10/0x10 [ 795.095299][T13850] misc_open+0x26d/0x450 [ 795.095323][T13850] ? __pfx_misc_open+0x10/0x10 [ 795.095345][T13850] chrdev_open+0x234/0x6a0 [ 795.095368][T13850] ? __pfx_chrdev_open+0x10/0x10 [ 795.095392][T13850] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 795.095421][T13850] do_dentry_open+0x982/0x1530 [ 795.095441][T13850] ? __pfx_chrdev_open+0x10/0x10 [ 795.095469][T13850] vfs_open+0x82/0x3f0 [ 795.095497][T13850] path_openat+0x1de4/0x2cb0 [ 795.095528][T13850] ? __pfx_path_openat+0x10/0x10 [ 795.095551][T13850] ? __lock_acquire+0xb8a/0x1c90 [ 795.095574][T13850] do_filp_open+0x20b/0x470 [ 795.095596][T13850] ? __pfx_do_filp_open+0x10/0x10 [ 795.095640][T13850] ? alloc_fd+0x471/0x7d0 [ 795.095670][T13850] do_sys_openat2+0x11b/0x1d0 [ 795.095694][T13850] ? __pfx_do_sys_openat2+0x10/0x10 [ 795.095721][T13850] ? __pfx___might_resched+0x10/0x10 [ 795.095745][T13850] ? rcu_is_watching+0x12/0xc0 [ 795.095769][T13850] ? blkcg_maybe_throttle_current+0x650/0xf30 [ 795.095803][T13850] __x64_sys_openat+0x174/0x210 [ 795.095828][T13850] ? __pfx___x64_sys_openat+0x10/0x10 [ 795.095852][T13850] ? ksys_write+0x1ac/0x250 [ 795.095882][T13850] do_syscall_64+0xcd/0xfa0 [ 795.095905][T13850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.095925][T13850] RIP: 0033:0x7f5c9978f749 [ 795.095942][T13850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 795.095960][T13850] RSP: 002b:00007f5c9a623038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 795.095980][T13850] RAX: ffffffffffffffda RBX: 00007f5c999e6180 RCX: 00007f5c9978f749 [ 795.095994][T13850] RDX: 0000000000000001 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 795.096007][T13850] RBP: 00007f5c9a623090 R08: 0000000000000000 R09: 0000000000000000 [ 795.096025][T13850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 795.096037][T13850] R13: 00007f5c999e6218 R14: 00007f5c999e6180 R15: 00007fff001402e8 [ 795.096068][T13850] [ 795.579997][T13855] Cannot find add_set index 4 as target [ 796.490600][T13870] tipc: Enabling of bearer rejected, failed to enable media [ 796.856557][T13885] xt_TPROXY: Can be used only with -p tcp or -p udp [ 797.021946][T13889] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 797.772943][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 797.772960][ T30] audit: type=1400 audit(1764011998.454:1396): avc: denied { nlmsg_write } for pid=13896 comm="syz.3.2069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 798.087192][T13895] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 798.106201][T13895] block device autoloading is deprecated and will be removed. [ 798.505049][T13910] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2070'. [ 800.267913][T13929] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2075'. [ 800.325311][T11927] Bluetooth: hci4: command 0x1003 tx timeout [ 800.332189][ T5820] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 800.975598][T13943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2079'. [ 801.203822][ T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 802.108461][T13949] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2083'. [ 802.331589][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 802.342939][ T9] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 802.359497][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.442202][ T9] usb 1-1: config 0 descriptor?? [ 802.835595][ T9] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 802.848781][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 802.859622][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 802.875465][ T9] usb 1-1: media controller created [ 802.920378][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 803.087183][ T9] DVB: Unable to find symbol dib7000p_attach() [ 803.094991][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 803.113141][T13967] netlink: 'syz.5.2088': attribute type 27 has an invalid length. [ 803.201573][ T9] rc_core: IR keymap rc-dib0700-rc5 not found [ 803.208140][ T9] Registered IR keymap rc-empty [ 803.221115][ T9] dvb-usb: could not initialize remote control. [ 803.241120][ T9] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 803.499008][T13976] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2091'. [ 803.985029][T13938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.995228][T13938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 804.245965][T13978] tipc: Enabled bearer , priority 0 [ 804.297232][T13978] syzkaller0: entered promiscuous mode [ 804.320505][T13978] syzkaller0: entered allmulticast mode [ 804.346782][ T30] audit: type=1400 audit(1764012005.014:1397): avc: denied { link } for pid=5815 comm="syz-executor" name="#6c" dev="tmpfs" ino=2339 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 804.369361][ C0] vkms_vblank_simulate: vblank timer overrun [ 804.411352][T13978] tipc: Resetting bearer [ 804.623304][T13983] bridge0: entered allmulticast mode [ 805.186471][ T9] usb 1-1: USB disconnect, device number 35 [ 805.267463][ T9] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 805.322140][ T30] audit: type=1400 audit(1764012005.994:1398): avc: denied { setopt } for pid=14004 comm="syz.5.2104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 805.347220][T14003] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2103'. [ 805.362876][T11927] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 805.373854][T11927] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 805.382009][ T43] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 805.390501][T11927] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 805.397582][ T30] audit: type=1400 audit(1764012006.054:1399): avc: denied { mounton } for pid=14002 comm="syz.0.2103" path="/441/file1/file1" dev="autofs" ino=49533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 805.398556][T11927] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 805.420951][ C0] vkms_vblank_simulate: vblank timer overrun [ 805.436212][T11927] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 805.522530][ T30] audit: type=1400 audit(1764012006.144:1400): avc: denied { mounton } for pid=14006 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 805.773529][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 805.780396][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.791637][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 805.801541][ T43] usb 4-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 805.810664][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.822323][ T43] usb 4-1: config 0 descriptor?? [ 806.101133][ T43] usbhid 4-1:0.0: can't add hid device: -71 [ 806.111599][ T43] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 806.122291][ T43] usb 4-1: USB disconnect, device number 74 [ 806.446579][ T30] audit: type=1400 audit(1764012007.124:1401): avc: denied { read } for pid=14034 comm="syz.3.2109" dev="sockfs" ino=48936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 806.467959][ C0] vkms_vblank_simulate: vblank timer overrun [ 806.556313][T14006] chnl_net:caif_netlink_parms(): no params data found [ 806.841528][T10163] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 806.855166][T14050] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 807.541548][T11927] Bluetooth: hci3: command tx timeout [ 807.733893][T14006] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.741116][T14006] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.754681][T14006] bridge_slave_0: entered allmulticast mode [ 807.764211][T14006] bridge_slave_0: entered promiscuous mode [ 807.775181][T14006] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.793095][T14006] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.800313][T14006] bridge_slave_1: entered allmulticast mode [ 807.808150][T14006] bridge_slave_1: entered promiscuous mode [ 807.842101][T10163] usb 5-1: Using ep0 maxpacket: 32 [ 807.850442][T10163] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 807.862765][T10163] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 807.891655][T10163] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 807.906633][T14006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 807.919760][T10163] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.932401][T14006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 807.946689][T10163] usb 5-1: config 0 descriptor?? [ 808.029185][T14006] team0: Port device team_slave_0 added [ 808.045329][T14006] team0: Port device team_slave_1 added [ 808.141108][T14006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 808.158616][T14006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 808.214763][T14006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 808.232202][T10163] savu 0003:1E7D:2D5A.0011: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 808.249019][T14006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 808.256587][T14006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 808.290790][T14006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 808.390013][T14006] hsr_slave_0: entered promiscuous mode [ 808.402401][T14006] hsr_slave_1: entered promiscuous mode [ 808.418951][T14006] debugfs: 'hsr0' already exists in 'hsr' [ 808.431857][T14006] Cannot create hsr debugfs directory [ 808.506391][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.512971][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.562951][ T5953] usb 5-1: USB disconnect, device number 64 [ 808.675649][T14006] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 808.687232][T14006] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 808.698288][T14006] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 808.711411][T14006] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 808.798756][T14006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 808.820857][T14006] 8021q: adding VLAN 0 to HW filter on device team0 [ 808.836704][T10176] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.843844][T10176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 808.866138][ T9945] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.873315][ T9945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 808.885829][T14080] fuse: Unknown parameter '0x000000000000000000000000000000000007' [ 809.050803][T14006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 809.212217][T14092] netlink: 'syz.4.2117': attribute type 8 has an invalid length. [ 809.222937][ T30] audit: type=1400 audit(1764012009.894:1402): avc: denied { ioctl } for pid=14091 comm="syz.4.2117" path="socket:[50265]" dev="sockfs" ino=50265 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 809.378043][T14006] veth0_vlan: entered promiscuous mode [ 809.381729][ T976] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 809.414331][T14006] veth1_vlan: entered promiscuous mode [ 809.474756][T14006] veth0_macvtap: entered promiscuous mode [ 809.493159][T14006] veth1_macvtap: entered promiscuous mode [ 809.512793][T14006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 809.537676][T14006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 809.546742][ T976] usb 4-1: Using ep0 maxpacket: 32 [ 809.555373][ T976] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 809.555400][ T976] usb 4-1: config 2 has no interface number 0 [ 809.555424][ T976] usb 4-1: config 2 interface 88 has no altsetting 0 [ 809.562619][ T9945] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.568472][ T976] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 809.622827][ T3566] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.623649][ T3566] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.623687][ T3566] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.623767][T11927] Bluetooth: hci3: command tx timeout [ 809.633750][ T976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.633779][ T976] usb 4-1: Product: syz [ 809.633795][ T976] usb 4-1: Manufacturer: syz [ 809.633812][ T976] usb 4-1: SerialNumber: syz [ 809.688518][T14080] overlayfs: statfs failed on './file0' [ 809.756744][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.756767][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.814658][T10176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.814673][T10176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.831679][ T30] audit: type=1400 audit(1764012010.504:1403): avc: denied { mounton } for pid=14006 comm="syz-executor" path="/root/syzkaller.hwE6X0/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 809.831718][ T30] audit: type=1400 audit(1764012010.504:1404): avc: denied { mounton } for pid=14006 comm="syz-executor" path="/root/syzkaller.hwE6X0/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 809.831742][ T30] audit: type=1400 audit(1764012010.504:1405): avc: denied { mounton } for pid=14006 comm="syz-executor" path="/root/syzkaller.hwE6X0/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=51309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 809.847602][ T30] audit: type=1400 audit(1764012010.524:1406): avc: denied { mounton } for pid=14006 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 809.847640][ T30] audit: type=1400 audit(1764012010.524:1407): avc: denied { mounton } for pid=14006 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 810.076454][ T30] audit: type=1400 audit(1764012010.524:1408): avc: denied { map } for pid=14086 comm="syz.3.2116" path="socket:[50099]" dev="sockfs" ino=50099 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 810.076505][ T30] audit: type=1400 audit(1764012010.524:1409): avc: denied { accept } for pid=14086 comm="syz.3.2116" path="socket:[50099]" dev="sockfs" ino=50099 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 810.076548][ T30] audit: type=1400 audit(1764012010.634:1410): avc: denied { ioctl } for pid=14086 comm="syz.3.2116" path="socket:[50380]" dev="sockfs" ino=50380 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 810.127546][T14105] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 810.127655][T14105] overlayfs: overlapping lowerdir path [ 810.320261][ T976] asix 4-1:2.88: probe with driver asix failed with error -71 [ 810.342800][ T976] usb 4-1: USB disconnect, device number 75 [ 810.377787][T14104] fuse: Bad value for 'fd' [ 811.703674][T11927] Bluetooth: hci3: command tx timeout [ 812.674273][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 812.851610][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 812.858268][ T9] usb 7-1: config 0 has an invalid interface number: 35 but max is 0 [ 812.858416][T14133] netlink: 'syz.5.2126': attribute type 33 has an invalid length. [ 812.866952][ T9] usb 7-1: config 0 has no interface number 0 [ 812.875003][T14133] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2126'. [ 812.918379][T14133] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2126'. [ 812.924439][ T9] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 812.938450][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.951333][ T9] usb 7-1: Product: syz [ 812.955820][ T9] usb 7-1: Manufacturer: syz [ 812.960470][ T9] usb 7-1: SerialNumber: syz [ 812.966895][T14135] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2128'. [ 812.967978][ T9] usb 7-1: config 0 descriptor?? [ 812.983584][T14135] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2128'. [ 812.998679][T14136] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2126'. [ 813.051789][ T43] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 813.190639][ T9] radio-si470x 7-1:0.35: this is not a si470x device. [ 813.203692][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 813.210859][ T43] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 813.219465][ T43] usb 5-1: config 0 has no interface number 0 [ 813.228790][ T43] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 813.243652][ T43] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 813.254067][ T43] usb 5-1: config 0 interface 41 has no altsetting 0 [ 813.263516][ T43] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 813.272771][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.280766][ T43] usb 5-1: Product: syz [ 813.285551][ T43] usb 5-1: Manufacturer: syz [ 813.290724][ T43] usb 5-1: SerialNumber: syz [ 813.291554][T10162] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 813.304868][ T43] usb 5-1: config 0 descriptor?? [ 813.322802][T14131] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 813.330045][T14131] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 813.392355][ T9] radio-raremono 7-1:0.35: this is not Thanko's Raremono. [ 813.404735][ T9] usb 7-1: USB disconnect, device number 2 [ 813.473588][T10162] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 813.482268][T10162] usb 6-1: can't read configurations, error -22 [ 813.540849][T14131] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 813.548358][T14131] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 813.555681][ T10] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 813.621658][T10162] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 813.722966][ T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 813.741516][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 813.761533][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 813.770532][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.781946][T11927] Bluetooth: hci3: command tx timeout [ 813.813021][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 813.822537][T10162] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 813.830983][T10162] usb 6-1: can't read configurations, error -22 [ 813.841476][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 813.849478][ T10] usb 4-1: Product: syz [ 813.861799][T10162] usb usb6-port1: attempt power cycle [ 813.876109][ T10] usb 4-1: Manufacturer: syz [ 813.899237][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 813.911517][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 813.922210][ T10] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 813.928135][ T10] cdc_wdm 4-1:1.0: Unknown control protocol [ 813.960049][ T43] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 814.060015][T14144] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 814.154033][ T30] audit: type=1400 audit(1764012014.834:1411): avc: denied { read write } for pid=14140 comm="syz.3.2129" name="cdc-wdm0" dev="devtmpfs" ino=3727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 814.186353][ T30] audit: type=1400 audit(1764012014.854:1412): avc: denied { open } for pid=14140 comm="syz.3.2129" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 814.216949][T14146] fuse: Bad value for 'fd' [ 814.223249][T10162] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 814.240275][ T5953] usb 4-1: USB disconnect, device number 76 [ 814.253861][T10162] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 814.262721][T10162] usb 6-1: can't read configurations, error -22 [ 814.366431][T14150] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 814.404315][ T43] dm9601 5-1:0.41 (unnamed net_device) (uninitialized): Error reading chip ID [ 814.428727][T10162] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 814.436074][ T43] sr9700 5-1:0.41: probe with driver sr9700 failed with error -71 [ 814.486506][ T43] usb 5-1: USB disconnect, device number 65 [ 815.382262][T10162] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 815.401535][T10162] usb 6-1: can't read configurations, error -22 [ 815.418496][T10162] usb usb6-port1: unable to enumerate USB device [ 815.815183][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 815.815227][ T30] audit: type=1400 audit(1764012016.494:1414): avc: denied { setopt } for pid=14160 comm="syz.4.2137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 815.841979][ T30] audit: type=1400 audit(1764012016.514:1415): avc: denied { write } for pid=14160 comm="syz.4.2137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 816.953052][ T30] audit: type=1400 audit(1764012016.894:1416): avc: denied { write } for pid=14168 comm="syz.5.2138" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 817.434632][T14183] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 817.461085][T14183] team0: Device gtp0 is of different type [ 817.605492][T14191] fuse: Bad value for 'fd' [ 817.642720][T10162] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 817.881739][T10162] usb 4-1: Using ep0 maxpacket: 32 [ 817.901383][T10162] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 818.531991][T10162] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.654695][T10162] usb 4-1: config 0 descriptor?? [ 818.910919][T14206] netlink: 'syz.5.2144': attribute type 21 has an invalid length. [ 818.918964][T14206] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2144'. [ 818.959763][T14206] netlink: 'syz.5.2144': attribute type 6 has an invalid length. [ 818.976021][T14206] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2144'. [ 819.221994][T10162] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 819.252770][T10162] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 819.273108][T10162] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 819.280484][T10162] usb 4-1: media controller created [ 819.476284][ T9] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 819.706123][T10162] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 819.830752][T10162] DVB: Unable to find symbol dib7000p_attach() [ 819.852150][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 819.870616][T10162] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 819.889748][ T9] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 819.919776][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.939601][ T9] usb 5-1: Product: syz [ 819.954532][ T9] usb 5-1: Manufacturer: syz [ 819.959166][ T9] usb 5-1: SerialNumber: syz [ 819.990672][ T9] usb 5-1: config 0 descriptor?? [ 820.001518][T10162] rc_core: IR keymap rc-dib0700-rc5 not found [ 820.009124][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 820.022213][T10162] Registered IR keymap rc-empty [ 820.033718][T10162] dvb-usb: could not initialize remote control. [ 820.034590][T14231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 820.040150][ T9] usb 5-1: setting power ON [ 820.070242][T14231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 820.071600][T10162] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 820.096280][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 820.127309][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 820.152385][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 820.160918][ T9] usb 5-1: media controller created [ 820.210880][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 820.221148][T14208] ------------[ cut here ]------------ [ 820.227113][T14208] usb 4-1: BOGUS control dir, pipe 80004d80 doesn't match bRequestType c0 [ 820.272925][T14208] WARNING: CPU: 0 PID: 14208 at drivers/usb/core/urb.c:412 usb_submit_urb+0x157d/0x1990 [ 820.282892][T14208] Modules linked in: [ 820.287094][T14208] CPU: 0 UID: 0 PID: 14208 Comm: syz.4.2145 Not tainted syzkaller #0 PREEMPT(full) [ 820.296563][T14208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 820.306683][T14208] RIP: 0010:usb_submit_urb+0x157d/0x1990 [ 820.312803][T14208] Code: e8 a8 0c b5 fa 48 8b 7c 24 38 e8 3e 31 d3 fe 48 8b 54 24 30 45 89 e8 44 89 f9 48 89 c6 48 c7 c7 80 16 50 8c e8 e4 3f 73 fa 90 <0f> 0b 90 90 e9 ca ed ff ff e8 75 0c b5 fa 0f b6 2d cc c8 62 09 31 [ 820.332905][T14208] RSP: 0018:ffffc900050af970 EFLAGS: 00010282 [ 820.338998][T14208] RAX: 0000000000000000 RBX: ffff888054d6be00 RCX: ffffc9000df6f000 [ 820.347992][T14208] RDX: 0000000000080000 RSI: ffffffff817b1ce5 RDI: 0000000000000001 [ 820.356676][T14208] RBP: ffff888030961058 R08: 0000000000000001 R09: 0000000000000000 [ 820.365501][T14208] R10: 0000000000000001 R11: fffffffffffcdb48 R12: ffff888144694cc0 [ 820.373965][T14208] R13: 00000000000000c0 R14: 0000000000000001 R15: 0000000080004d80 [ 820.382016][T14208] FS: 00007fdf91d6b6c0(0000) GS:ffff888124a05000(0000) knlGS:0000000000000000 [ 820.390956][T14208] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 820.391999][T14219] 9pnet_fd: Insufficient options for proto=fd [ 820.397912][T14208] CR2: 00007f12a5f8a286 CR3: 0000000071f7f000 CR4: 00000000003526f0 [ 820.411725][T14208] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 820.419702][T14208] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 820.427737][T14208] Call Trace: [ 820.431017][T14208] [ 820.434000][T14208] ? __init_swait_queue_head+0xca/0x150 [ 820.439543][T14208] usb_start_wait_urb+0x104/0x4b0 [ 820.444627][T14208] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 820.450186][T14208] ? __asan_memset+0x23/0x50 [ 820.454864][T14208] usb_control_msg+0x326/0x4a0 [ 820.459753][T14208] ? __pfx_usb_control_msg+0x10/0x10 [ 820.465615][T14208] ? look_up_lock_class+0x59/0x150 [ 820.470728][T14208] ? register_lock_class+0x41/0x4c0 [ 820.475944][T14208] dib0700_ctrl_rd+0x1b2/0x350 [ 820.480696][T14208] dib0700_i2c_xfer+0xa9a/0xe40 [ 820.485598][T14208] __i2c_transfer+0x6b6/0x2190 [ 820.490366][T14208] ? lockdep_hardirqs_on+0x7c/0x110 [ 820.495586][T14208] ? __pfx___i2c_transfer+0x10/0x10 [ 820.500767][T14208] ? rt_mutex_slowtrylock+0xc9/0x100 [ 820.506121][T14208] i2c_transfer+0x1da/0x380 [ 820.507742][ T43] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 820.510635][T14208] i2cdev_ioctl_rdwr+0x373/0x710 [ 820.510669][T14208] i2cdev_ioctl+0x5ff/0x820 [ 820.527597][T14208] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 820.532653][T14208] ? selinux_file_ioctl+0x180/0x270 [ 820.537845][T14208] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 820.542919][T14208] __x64_sys_ioctl+0x18e/0x210 [ 820.547675][T14208] do_syscall_64+0xcd/0xfa0 [ 820.552199][T14208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.558076][T14208] RIP: 0033:0x7fdf90f8f749 [ 820.562634][T14208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 820.582534][T14208] RSP: 002b:00007fdf91d6b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 820.590943][T14208] RAX: ffffffffffffffda RBX: 00007fdf911e6090 RCX: 00007fdf90f8f749 [ 820.598948][T14208] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000008 [ 820.606956][T14208] RBP: 00007fdf91013f91 R08: 0000000000000000 R09: 0000000000000000 [ 820.614959][T14208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 820.622948][T14208] R13: 00007fdf911e6128 R14: 00007fdf911e6090 R15: 00007fff9ef061c8 [ 820.630937][T14208] [ 820.633970][T14208] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 820.641225][T14208] CPU: 0 UID: 0 PID: 14208 Comm: syz.4.2145 Not tainted syzkaller #0 PREEMPT(full) [ 820.650567][T14208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 820.660596][T14208] Call Trace: [ 820.663855][T14208] [ 820.666763][T14208] dump_stack_lvl+0x3d/0x1f0 [ 820.671331][T14208] vpanic+0x640/0x6f0 [ 820.675292][T14208] ? usb_submit_urb+0x157d/0x1990 [ 820.680291][T14208] panic+0xca/0xd0 [ 820.683991][T14208] ? __pfx_panic+0x10/0x10 [ 820.688390][T14208] check_panic_on_warn+0xab/0xb0 [ 820.693304][T14208] __warn+0xf6/0x3c0 [ 820.697179][T14208] ? preempt_schedule_notrace+0x62/0xe0 [ 820.702702][T14208] ? usb_submit_urb+0x157d/0x1990 [ 820.707700][T14208] report_bug+0x3c3/0x580 [ 820.712007][T14208] ? usb_submit_urb+0x157d/0x1990 [ 820.717005][T14208] handle_bug+0x184/0x210 [ 820.721309][T14208] exc_invalid_op+0x17/0x50 [ 820.725790][T14208] asm_exc_invalid_op+0x1a/0x20 [ 820.730619][T14208] RIP: 0010:usb_submit_urb+0x157d/0x1990 [ 820.736227][T14208] Code: e8 a8 0c b5 fa 48 8b 7c 24 38 e8 3e 31 d3 fe 48 8b 54 24 30 45 89 e8 44 89 f9 48 89 c6 48 c7 c7 80 16 50 8c e8 e4 3f 73 fa 90 <0f> 0b 90 90 e9 ca ed ff ff e8 75 0c b5 fa 0f b6 2d cc c8 62 09 31 [ 820.755815][T14208] RSP: 0018:ffffc900050af970 EFLAGS: 00010282 [ 820.761862][T14208] RAX: 0000000000000000 RBX: ffff888054d6be00 RCX: ffffc9000df6f000 [ 820.769811][T14208] RDX: 0000000000080000 RSI: ffffffff817b1ce5 RDI: 0000000000000001 [ 820.777759][T14208] RBP: ffff888030961058 R08: 0000000000000001 R09: 0000000000000000 [ 820.786058][T14208] R10: 0000000000000001 R11: fffffffffffcdb48 R12: ffff888144694cc0 [ 820.794024][T14208] R13: 00000000000000c0 R14: 0000000000000001 R15: 0000000080004d80 [ 820.801984][T14208] ? __warn_printk+0x1a5/0x350 [ 820.806745][T14208] ? __init_swait_queue_head+0xca/0x150 [ 820.812356][T14208] usb_start_wait_urb+0x104/0x4b0 [ 820.817362][T14208] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 820.822913][T14208] ? __asan_memset+0x23/0x50 [ 820.827489][T14208] usb_control_msg+0x326/0x4a0 [ 820.832237][T14208] ? __pfx_usb_control_msg+0x10/0x10 [ 820.837496][T14208] ? look_up_lock_class+0x59/0x150 [ 820.842581][T14208] ? register_lock_class+0x41/0x4c0 [ 820.847754][T14208] dib0700_ctrl_rd+0x1b2/0x350 [ 820.852512][T14208] dib0700_i2c_xfer+0xa9a/0xe40 [ 820.857346][T14208] __i2c_transfer+0x6b6/0x2190 [ 820.862096][T14208] ? lockdep_hardirqs_on+0x7c/0x110 [ 820.867285][T14208] ? __pfx___i2c_transfer+0x10/0x10 [ 820.872472][T14208] ? rt_mutex_slowtrylock+0xc9/0x100 [ 820.877758][T14208] i2c_transfer+0x1da/0x380 [ 820.882252][T14208] i2cdev_ioctl_rdwr+0x373/0x710 [ 820.887235][T14208] i2cdev_ioctl+0x5ff/0x820 [ 820.891718][T14208] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 820.896723][T14208] ? selinux_file_ioctl+0x180/0x270 [ 820.901909][T14208] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 820.906925][T14208] __x64_sys_ioctl+0x18e/0x210 [ 820.911686][T14208] do_syscall_64+0xcd/0xfa0 [ 820.916175][T14208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.922048][T14208] RIP: 0033:0x7fdf90f8f749 [ 820.926440][T14208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 820.946032][T14208] RSP: 002b:00007fdf91d6b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 820.954421][T14208] RAX: ffffffffffffffda RBX: 00007fdf911e6090 RCX: 00007fdf90f8f749 [ 820.962368][T14208] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000008 [ 820.970316][T14208] RBP: 00007fdf91013f91 R08: 0000000000000000 R09: 0000000000000000 [ 820.978264][T14208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 820.986207][T14208] R13: 00007fdf911e6128 R14: 00007fdf911e6090 R15: 00007fff9ef061c8 [ 820.994165][T14208] [ 820.997484][T14208] Kernel Offset: disabled [ 821.001785][T14208] Rebooting in 86400 seconds..