last executing test programs: 24m20.229162461s ago: executing program 3 (id=1765): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) getpid() socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r3, 0x0, 0x44010) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x84}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) 24m17.719592022s ago: executing program 3 (id=1769): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_XEN_HVM(r1, 0x4068aea3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 24m16.046601029s ago: executing program 3 (id=1773): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d1) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) chdir(&(0x7f0000000300)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) (fail_nth: 1) 24m15.563594995s ago: executing program 3 (id=1774): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d1) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) setreuid(0xee01, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa}, "341517c1b7df60c7"}}}}}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) 24m15.304747176s ago: executing program 3 (id=1775): syz_usb_connect(0x6, 0x90b, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0x25, 0x6, 0xec, 0x8, 0xbfd, 0x10, 0x6948, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8f9, 0x4, 0x1, 0x3, 0x50, 0x59, "", [{{0x9, 0x4, 0x2b, 0x40, 0x7, 0xcd, 0x21, 0x3a, 0x6, [], [{{0x9, 0x5, 0xc, 0x1, 0x8, 0x4, 0x3, 0x20, [@generic={0x4c, 0x6, "198788d7d4e56a38af1d03ab526a5c8def6bdb23f3530268fb17778664282c3153ad80c1be3caa41aedfc6c2a597faada7360f05467ac0b600068bb323219e402c5777d40e5499c53357"}, @generic={0xa2, 0x23, "b6ecb5dc51c0ab43373ffb538efd12e02b8ac42dc3fd47bdcf74cff96d39ea158ff4b558a95382da8c8fac04a08b89253db8623d579851a0bf1208cc74d9e04f35b5174e89081fd2da63e435fd975bc4c6ca8f71ec71de2ae007390c7449e5b7ab6137fae9ed6aa057528be702cc983491e1c734a62d09a67c7d33d84339a0d1a5cd4280762c96b25480225a4cbf4996ce284e7bfa25ca282c2a951c8e05d90d"}]}}, {{0x9, 0x5, 0xe, 0x16, 0x400, 0x8, 0xe5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x80, 0x7e92}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x9, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x3, 0xe2c}]}}, {{0x9, 0x5, 0xd, 0xc, 0x10, 0x1, 0x5}}, {{0x9, 0x5, 0x80, 0xc, 0x20, 0x7, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x78, 0x298}]}}, {{0x9, 0x5, 0x7, 0x4, 0x3ff, 0x2, 0x8, 0x6}}, {{0x9, 0x5, 0xa, 0x8, 0x200, 0x6, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0xad}]}}]}}, {{0x9, 0x4, 0xbf, 0x51, 0xa, 0x7a, 0xf, 0x11, 0x4, [], [{{0x9, 0x5, 0x3, 0x2, 0x8, 0xc, 0x93, 0x2}}, {{0x9, 0x5, 0xd, 0xc, 0x8, 0x8, 0x9, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x4}]}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x21, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfd, 0x9}, @generic={0x79, 0x24, "4dba2480d093d74ff2bfc823c0be157615f881c39b60dddc17e49233530cac8412a8d95335c0f86492c061da0ffb9eb945d6ed5c425e07282ea991379d8bef63e4308d299e009a116d6467b5ce1cb0cb2da9123adaa9a861e79c780b9addc1491c398b713d631ca43a6672a8834db7d7be1ec2d551cd6d"}]}}, {{0x9, 0x5, 0x87, 0x10, 0x40, 0x8, 0x2, 0x7, [@generic={0x8f, 0x23, "2906c6c597760eb8d04427827d289bd141ba11eae659337bdb396ab765247fb86832ceefa15bd8e1306424a709fc4224ced7f815ec1128edc958ed288633a0d705d458a14d5a6ff3688b152444b941bb7e3a02777cb534bcfb7e5ec112fe5d4ae6f1a1940363c1c66b051cba70e0cd19eb04651c5c2cd522f70c8bb7e518c0843aea3503931e0712ab107d97a9"}]}}, {{0x9, 0x5, 0x1, 0x1, 0x8, 0x66, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x6}, @generic={0x81, 0x5, "61ca0aafa25a434181dff41694725b6b3d1831ae41182eb077c7c49456e1750b4e8446bed5fcd696ca4a732d392ef1ee12ba72eb8a9a664045e730bbd6e1b4f22c91b26bed2de854af4843c0d2ed6e046c03b2bb4bce1a318fa0c939d10993b193cd9bd2e66065ce24d63e5fc84eedb2eb01e8820dc8803c42ebb205fc8a41"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x0, 0x6, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xcc, 0x4}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0xe5, 0x6, 0x5, [@generic={0x77, 0x4, "c3b2a878f28c5dfd7c4d8e26a89a5353abfa64dd613649da215b736944f8e794a1f4596a61c283440c196393003c4603430ea4a45c6169d7c508eeb28d4a3ddccb7ede86d73fa72194358e964d2e6407be6dc5902b367cc36ea2f23dac15810a6a443eb76955ac746866337422baad575dc65890ef"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x8, 0x0, 0x9}}, {{0x9, 0x5, 0xf, 0xb, 0x400, 0x8, 0x3, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x4}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0xf, 0xc3}}]}}, {{0x9, 0x4, 0x61, 0x0, 0x5, 0xed, 0xf2, 0x32, 0x57, [], [{{0x9, 0x5, 0x7, 0x0, 0x408, 0x3, 0x5, 0xa}}, {{0x9, 0x5, 0x4, 0xc, 0x20, 0xb, 0xd1, 0xb, [@generic={0x62, 0x23, "0c433a409b4739a6cbc50eaa57344aef19240625ac06f9572169db03b7cf46971822ece286ac280cd743977b318fe1a9d4b30cab42bf84fc24c8b078505f7d59a68495f54ba7ba63268626d155c99cc49837e805516eed6644dbce69cd9f2d69"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xff, 0x9}]}}, {{0x9, 0x5, 0x4, 0x4, 0x3ff, 0x5, 0xb, 0x4, [@generic={0xc8, 0x10, "e5f729cf9b4f15f9dc7e743145e4fc28ab5a0e180f440248f87087935571b11d0ee456d3c7ffc888be8938978f73dd84f9f316f53da73769f276584f6a9ee48cb8782fb825dff0a72edbb60ef9510635f5ed91f07b8af8ddbc3a60f50f3626b95f7eb4f38d9eea2caf09be6eb9cdc698a237c6b5c4c2c6d69d04f5a5ce0abf87cec2f0d4f91e70090f35968039f3456298154af13eb60acf5c2231081b5c2f064519ac6553da87a61fd6ec4212ab781499f54cce3a01942e57d637bd01c819cb83e1f5e8c82d"}, @generic={0xf8, 0x3, "a68bf88e1b03e74e4612a7840983163928f7e4d7834dd4d4af2555beb9c4d66ceaf750066e584ad440e330022445aa83304e4ebeb76e1b31cc00aac710eae7b67370fb83776f4723a7a9d9c1fd75edf970c7f08865333ddd80dd4d488a3610bbdc833abe2b77f7fabe5ecce4bff49277c60ed3398128c59b53dd5e2f8eedb62069aa26e74945fb1528bd889284c824c197911f38be752a7595b6794fa74f9963c5cecd4794aebe8b1b20c649da4c63b6ea37580a2b4eac50a02a5f4b5140d37a62abc7c574af93912b5dbff24cfa2eff839b7a06fdeeab3849090e9c7e345fa204fce513b1c95c0abe98cfae80adc0d8af13407fb465"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x7, 0xe6, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xa, 0x200}]}}, {{0x9, 0x5, 0xa, 0x2, 0x200, 0x7, 0xdc, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x9}]}}]}}, {{0x9, 0x4, 0xac, 0x1, 0xd, 0xff, 0x5e, 0xe6, 0x7, [], [{{0x9, 0x5, 0xe, 0x0, 0x3ff, 0xb5, 0x40, 0x4, [@generic={0xc4, 0xb, "67e66e87c070583e69a44ea14fb7e495100f053bfcc4caac21e943ec2e51cdb92dbd8e2700e3fdc14b81d4b3241a5bae8613d9aafee16abf403be42a6fff68f6e3b992a1b79abbdeb8061a23f67d998e84385a387501454c343579890bf77878a41505436e918d6b865b647b9a073e6847376da28d1d3a7b8770514a06347927963494242616174ec0c2d777039181de1fdfe7d05d610f023daa1968dce325f37692ae2014f7377ed40961c85071373519126fb8a1797b39f0f7b12204a33c93b529"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0xe}]}}, {{0x9, 0x5, 0x2, 0x4, 0x3ff, 0x3, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7f, 0x40}]}}, {{0x9, 0x5, 0x2, 0x3, 0x450, 0x5, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x98, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x706}]}}, {{0x9, 0x5, 0x5, 0x3, 0x20, 0x9, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x2}, @generic={0xad, 0x22, "f065bec95c7555e1c9c8c193df7566ea91b16b8a9debb225120a7c9fda1d58900e85d9242065ca8f5e3c80a04a9f4956d983d1ef757a1acd41f3b1e11e384f3a53e8043731d76a739a89d55a16b0be6c999c981fbae4aba0c0e2d59d7cddcc1115851beda53a3758945c8f0b2215742f45180c199c8e0561ef07167566d7efa20c9ae9c6e0b6961699c52618ee91d64c87a5c8bee4e128361f89ea31d8c340cd28cb77b988bcd40a1494b1"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x48, 0xf, 0xc, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x8001}]}}, {{0x9, 0x5, 0xd, 0x8, 0x20, 0x7, 0xd5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x71c}]}}, {{0x9, 0x5, 0x1, 0x5, 0x20, 0xe1, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0xffff}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x3}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x1, 0x6, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xd6, 0xb2e5}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xd, 0x5ae9}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x9, 0x4, 0x6}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0x9, 0x8, 0x7, [@generic={0x2d, 0x4, "5db74a472e22bd855d957bf0df858a96969420691e3bb9590f45a684b72e634b0630caf205e591c0765bb7"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x2, 0x7, 0x8c, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x4}]}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x81, 0x1c, 0x20}}, {{0x9, 0x5, 0x4, 0x1, 0x8, 0x5, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x5169}, @generic={0x26, 0x28, "1aa511973b7de335f78eb3a01d823e51c68806c8b25c0a54768c1546919fd0bb03a7cbb2"}]}}]}}]}}]}}, &(0x7f0000000e80)={0xa, &(0x7f0000000d00)={0xa, 0x6, 0x300, 0x6, 0x9, 0x8, 0x10, 0x8}, 0xb3, &(0x7f0000000d40)={0x5, 0xf, 0xb3, 0x5, [@ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x8, 0xff00, 0xcc9b, [0xa50690e34bf47e9, 0xff0000, 0x0, 0xc000, 0xc000]}, @generic={0x69, 0x10, 0x2, "40894e901ff1b56bc702f93d495baf3e1cb3bfec8a78ed0f94d0974d7e91ea39ac59c9ca8e61628e73b1bae27d8e7968c6f2a4e00b9db62fad77a12dbcf08a28672c7f161cc3f8f1558028f93340538b13d9c6d84b33aa13d6317b1c4c5c5d23c86a0806f080"}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0xc, 0x3, 0x1}, @ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x0, 0xf, 0x400, [0x60, 0xff0030]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x2a, 0x6, 0x3}]}, 0x2, [{0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x421}}]}) (async) syz_usb_connect(0x6, 0x90b, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0x25, 0x6, 0xec, 0x8, 0xbfd, 0x10, 0x6948, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8f9, 0x4, 0x1, 0x3, 0x50, 0x59, "", [{{0x9, 0x4, 0x2b, 0x40, 0x7, 0xcd, 0x21, 0x3a, 0x6, [], [{{0x9, 0x5, 0xc, 0x1, 0x8, 0x4, 0x3, 0x20, [@generic={0x4c, 0x6, "198788d7d4e56a38af1d03ab526a5c8def6bdb23f3530268fb17778664282c3153ad80c1be3caa41aedfc6c2a597faada7360f05467ac0b600068bb323219e402c5777d40e5499c53357"}, @generic={0xa2, 0x23, "b6ecb5dc51c0ab43373ffb538efd12e02b8ac42dc3fd47bdcf74cff96d39ea158ff4b558a95382da8c8fac04a08b89253db8623d579851a0bf1208cc74d9e04f35b5174e89081fd2da63e435fd975bc4c6ca8f71ec71de2ae007390c7449e5b7ab6137fae9ed6aa057528be702cc983491e1c734a62d09a67c7d33d84339a0d1a5cd4280762c96b25480225a4cbf4996ce284e7bfa25ca282c2a951c8e05d90d"}]}}, {{0x9, 0x5, 0xe, 0x16, 0x400, 0x8, 0xe5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x80, 0x7e92}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x9, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x3, 0xe2c}]}}, {{0x9, 0x5, 0xd, 0xc, 0x10, 0x1, 0x5}}, {{0x9, 0x5, 0x80, 0xc, 0x20, 0x7, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x78, 0x298}]}}, {{0x9, 0x5, 0x7, 0x4, 0x3ff, 0x2, 0x8, 0x6}}, {{0x9, 0x5, 0xa, 0x8, 0x200, 0x6, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0xad}]}}]}}, {{0x9, 0x4, 0xbf, 0x51, 0xa, 0x7a, 0xf, 0x11, 0x4, [], [{{0x9, 0x5, 0x3, 0x2, 0x8, 0xc, 0x93, 0x2}}, {{0x9, 0x5, 0xd, 0xc, 0x8, 0x8, 0x9, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x4}]}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0x21, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfd, 0x9}, @generic={0x79, 0x24, "4dba2480d093d74ff2bfc823c0be157615f881c39b60dddc17e49233530cac8412a8d95335c0f86492c061da0ffb9eb945d6ed5c425e07282ea991379d8bef63e4308d299e009a116d6467b5ce1cb0cb2da9123adaa9a861e79c780b9addc1491c398b713d631ca43a6672a8834db7d7be1ec2d551cd6d"}]}}, {{0x9, 0x5, 0x87, 0x10, 0x40, 0x8, 0x2, 0x7, [@generic={0x8f, 0x23, "2906c6c597760eb8d04427827d289bd141ba11eae659337bdb396ab765247fb86832ceefa15bd8e1306424a709fc4224ced7f815ec1128edc958ed288633a0d705d458a14d5a6ff3688b152444b941bb7e3a02777cb534bcfb7e5ec112fe5d4ae6f1a1940363c1c66b051cba70e0cd19eb04651c5c2cd522f70c8bb7e518c0843aea3503931e0712ab107d97a9"}]}}, {{0x9, 0x5, 0x1, 0x1, 0x8, 0x66, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x6}, @generic={0x81, 0x5, "61ca0aafa25a434181dff41694725b6b3d1831ae41182eb077c7c49456e1750b4e8446bed5fcd696ca4a732d392ef1ee12ba72eb8a9a664045e730bbd6e1b4f22c91b26bed2de854af4843c0d2ed6e046c03b2bb4bce1a318fa0c939d10993b193cd9bd2e66065ce24d63e5fc84eedb2eb01e8820dc8803c42ebb205fc8a41"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x0, 0x6, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xcc, 0x4}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0xe5, 0x6, 0x5, [@generic={0x77, 0x4, "c3b2a878f28c5dfd7c4d8e26a89a5353abfa64dd613649da215b736944f8e794a1f4596a61c283440c196393003c4603430ea4a45c6169d7c508eeb28d4a3ddccb7ede86d73fa72194358e964d2e6407be6dc5902b367cc36ea2f23dac15810a6a443eb76955ac746866337422baad575dc65890ef"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x8, 0x0, 0x9}}, {{0x9, 0x5, 0xf, 0xb, 0x400, 0x8, 0x3, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x4}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0xf, 0xc3}}]}}, {{0x9, 0x4, 0x61, 0x0, 0x5, 0xed, 0xf2, 0x32, 0x57, [], [{{0x9, 0x5, 0x7, 0x0, 0x408, 0x3, 0x5, 0xa}}, {{0x9, 0x5, 0x4, 0xc, 0x20, 0xb, 0xd1, 0xb, [@generic={0x62, 0x23, "0c433a409b4739a6cbc50eaa57344aef19240625ac06f9572169db03b7cf46971822ece286ac280cd743977b318fe1a9d4b30cab42bf84fc24c8b078505f7d59a68495f54ba7ba63268626d155c99cc49837e805516eed6644dbce69cd9f2d69"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xff, 0x9}]}}, {{0x9, 0x5, 0x4, 0x4, 0x3ff, 0x5, 0xb, 0x4, [@generic={0xc8, 0x10, "e5f729cf9b4f15f9dc7e743145e4fc28ab5a0e180f440248f87087935571b11d0ee456d3c7ffc888be8938978f73dd84f9f316f53da73769f276584f6a9ee48cb8782fb825dff0a72edbb60ef9510635f5ed91f07b8af8ddbc3a60f50f3626b95f7eb4f38d9eea2caf09be6eb9cdc698a237c6b5c4c2c6d69d04f5a5ce0abf87cec2f0d4f91e70090f35968039f3456298154af13eb60acf5c2231081b5c2f064519ac6553da87a61fd6ec4212ab781499f54cce3a01942e57d637bd01c819cb83e1f5e8c82d"}, @generic={0xf8, 0x3, "a68bf88e1b03e74e4612a7840983163928f7e4d7834dd4d4af2555beb9c4d66ceaf750066e584ad440e330022445aa83304e4ebeb76e1b31cc00aac710eae7b67370fb83776f4723a7a9d9c1fd75edf970c7f08865333ddd80dd4d488a3610bbdc833abe2b77f7fabe5ecce4bff49277c60ed3398128c59b53dd5e2f8eedb62069aa26e74945fb1528bd889284c824c197911f38be752a7595b6794fa74f9963c5cecd4794aebe8b1b20c649da4c63b6ea37580a2b4eac50a02a5f4b5140d37a62abc7c574af93912b5dbff24cfa2eff839b7a06fdeeab3849090e9c7e345fa204fce513b1c95c0abe98cfae80adc0d8af13407fb465"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x7, 0xe6, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xa, 0x200}]}}, {{0x9, 0x5, 0xa, 0x2, 0x200, 0x7, 0xdc, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x9}]}}]}}, {{0x9, 0x4, 0xac, 0x1, 0xd, 0xff, 0x5e, 0xe6, 0x7, [], [{{0x9, 0x5, 0xe, 0x0, 0x3ff, 0xb5, 0x40, 0x4, [@generic={0xc4, 0xb, "67e66e87c070583e69a44ea14fb7e495100f053bfcc4caac21e943ec2e51cdb92dbd8e2700e3fdc14b81d4b3241a5bae8613d9aafee16abf403be42a6fff68f6e3b992a1b79abbdeb8061a23f67d998e84385a387501454c343579890bf77878a41505436e918d6b865b647b9a073e6847376da28d1d3a7b8770514a06347927963494242616174ec0c2d777039181de1fdfe7d05d610f023daa1968dce325f37692ae2014f7377ed40961c85071373519126fb8a1797b39f0f7b12204a33c93b529"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0xe}]}}, {{0x9, 0x5, 0x2, 0x4, 0x3ff, 0x3, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7f, 0x40}]}}, {{0x9, 0x5, 0x2, 0x3, 0x450, 0x5, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x98, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x706}]}}, {{0x9, 0x5, 0x5, 0x3, 0x20, 0x9, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x2}, @generic={0xad, 0x22, "f065bec95c7555e1c9c8c193df7566ea91b16b8a9debb225120a7c9fda1d58900e85d9242065ca8f5e3c80a04a9f4956d983d1ef757a1acd41f3b1e11e384f3a53e8043731d76a739a89d55a16b0be6c999c981fbae4aba0c0e2d59d7cddcc1115851beda53a3758945c8f0b2215742f45180c199c8e0561ef07167566d7efa20c9ae9c6e0b6961699c52618ee91d64c87a5c8bee4e128361f89ea31d8c340cd28cb77b988bcd40a1494b1"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x48, 0xf, 0xc, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x8001}]}}, {{0x9, 0x5, 0xd, 0x8, 0x20, 0x7, 0xd5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x71c}]}}, {{0x9, 0x5, 0x1, 0x5, 0x20, 0xe1, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0xffff}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x3}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x1, 0x6, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xd6, 0xb2e5}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xd, 0x5ae9}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x9, 0x4, 0x6}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0x9, 0x8, 0x7, [@generic={0x2d, 0x4, "5db74a472e22bd855d957bf0df858a96969420691e3bb9590f45a684b72e634b0630caf205e591c0765bb7"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x2, 0x7, 0x8c, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x4}]}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x81, 0x1c, 0x20}}, {{0x9, 0x5, 0x4, 0x1, 0x8, 0x5, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x5169}, @generic={0x26, 0x28, "1aa511973b7de335f78eb3a01d823e51c68806c8b25c0a54768c1546919fd0bb03a7cbb2"}]}}]}}]}}]}}, &(0x7f0000000e80)={0xa, &(0x7f0000000d00)={0xa, 0x6, 0x300, 0x6, 0x9, 0x8, 0x10, 0x8}, 0xb3, &(0x7f0000000d40)={0x5, 0xf, 0xb3, 0x5, [@ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x8, 0xff00, 0xcc9b, [0xa50690e34bf47e9, 0xff0000, 0x0, 0xc000, 0xc000]}, @generic={0x69, 0x10, 0x2, "40894e901ff1b56bc702f93d495baf3e1cb3bfec8a78ed0f94d0974d7e91ea39ac59c9ca8e61628e73b1bae27d8e7968c6f2a4e00b9db62fad77a12dbcf08a28672c7f161cc3f8f1558028f93340538b13d9c6d84b33aa13d6317b1c4c5c5d23c86a0806f080"}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0xc, 0x3, 0x1}, @ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x0, 0xf, 0x400, [0x60, 0xff0030]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x2a, 0x6, 0x3}]}, 0x2, [{0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x421}}]}) syz_usb_connect$cdc_ecm(0x6, 0x50, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3e, 0x1, 0x1, 0x7, 0x0, 0x8, "", [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x2, {{0x8, 0x24, 0x6, 0x0, 0x0, 'i5k'}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x0, 0x100, 0x86}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x10, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x3, 0x3, 0x40}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x310, 0x3, 0x0, 0x10, 0x10, 0x1}, 0x7e, &(0x7f0000000240)={0x5, 0xf, 0x7e, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "b2a0f6d96fca51472db7112db3e5949d"}, @generic={0x65, 0x10, 0x2, "3e2ec2bce62be37d3071b33a3623881c0a69784f0df7929f9ad4f2be2d76fa500fe6a70a631fe575ef4d0f11d28c5b583f6d25447ae771ece2357e09ccd34e55515d664cfc77e94ad42e4ec1a686ac21c8756997d499132dd88fc0d6962d5548d4c3"}]}, 0x3, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2c01}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x17}}]}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r1, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) setsockopt$packet_int(r2, 0x107, 0xc, &(0x7f0000000000), 0x4) (async) setsockopt$packet_int(r2, 0x107, 0xc, &(0x7f0000000000), 0x4) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x40, 0x8, 0x2, "a995"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x40, 0x8, 0x2, "a995"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r1, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000240)={0x0, 0xa, 0xf, "758b461b8a7a447d1bc5bc54481e8f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10, 0x0) bind$tipc(r3, &(0x7f0000000080)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x2}}, 0x10) 24m12.302330264s ago: executing program 3 (id=1783): r0 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5ab40bf85edaca83"], 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="000301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r3 = dup(r2) read$FUSE(r3, &(0x7f00000044c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYRES16=r1, @ANYRES16=r4, @ANYBLOB="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", @ANYRES32], 0x12c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r5, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4085, 0xff5}], 0x1}}], 0x4000000000001a3, 0x140, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r7, 0x29, 0x3b, &(0x7f0000000700)=ANY=[], 0x8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1, r10, 0x1, 0x70bd28, 0x21dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) write$nci(r6, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r8], 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x4, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r12}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@version_u}]}}) 23m56.977179829s ago: executing program 32 (id=1783): r0 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5ab40bf85edaca83"], 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="000301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r3 = dup(r2) read$FUSE(r3, &(0x7f00000044c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYRES16=r1, @ANYRES16=r4, @ANYBLOB="ccce6bdc95c8478a056db1c952a153a11efef5427a6e5e2eeaba7e54ac5c7a2628b0502a7aeca3cfcb4aeb38663b97166e96a335fec1e6a3dff663c8f8c5204dc1b620ecb096969834ec1c7d9f3c1dd236a0f0406dff21219ea37f6f4259d76f6e697b42d4af7abcd64cf82bbf09e73dc7947f7ab8f1f27c0813f6d8e62037471b0c2b2b73b2e98faf94418289c851d8b0586beb250c7613a082a828776642576a1f96ab66520f07dd434ce1b9d1920f3d461a1dce6d49c6d69a422f3fd8c7f6168ced067d73376e59c28e7168360d947aaa52ece366f5f82f1b8983ee41f38966984d673c0caacb2eb15c19bb0a83603815659b06816d32869fd5", @ANYRES32], 0x12c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r5, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4085, 0xff5}], 0x1}}], 0x4000000000001a3, 0x140, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r7, 0x29, 0x3b, &(0x7f0000000700)=ANY=[], 0x8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1, r10, 0x1, 0x70bd28, 0x21dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) write$nci(r6, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r8], 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x4, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r12}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@version_u}]}}) 2m53.233127018s ago: executing program 5 (id=6337): r0 = socket(0x10, 0x3, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x8, 0x4, 0x0, @remote, @local, {[], {0x0, 0x0, 0x8}}}}}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x5fa, &(0x7f0000000140)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) faccessat(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c000900"], 0x4c}}, 0x40000) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000040)={0x14}) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 2m51.592353032s ago: executing program 5 (id=6344): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="5d5b18f9bf", 0x5, 0xfffffffffffffffb) keyctl$set_timeout(0xf, r4, 0x6) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x0, 0x0, 0x0, 0x1, 0xd3, &(0x7f0000001380)=""/211, 0x100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x10, 0x8c}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1b000000282000", @ANYRES32, @ANYBLOB, @ANYBLOB], 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)={r5}, &(0x7f0000000180)=0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2m49.900827344s ago: executing program 5 (id=6352): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000400), &(0x7f0000000440)=0xffffff4d) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x10, &(0x7f00000003c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1100}}, {@default_permissions}]}}) 2m49.816302148s ago: executing program 5 (id=6354): socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x53) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x0) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ac0)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) ioctl$COMEDI_CMD(0xffffffffffffffff, 0x80506409, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0xfe10) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r5, r4, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r5, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r3, 0x3b8d, &(0x7f0000000280)={0x20, r7, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x1}) ioctl$IOMMU_GET_HW_INFO(r3, 0x3b8a, &(0x7f0000000380)={0x24, 0x0, r5, 0x1c, &(0x7f00000003c0)=""/28}) ioctl$IOMMU_DESTROY$ioas(r3, 0x3b80, &(0x7f0000000440)={0x8, r4}) close(r3) 2m48.917151348s ago: executing program 5 (id=6361): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b1300000000000028001280140001397665746800000000180002a2d960b9d6e72eae0814000100f9ec773df8088c570f71ae3385687524a2788c", @ANYRES32=0x0, @ANYBLOB="00000400a800010008001f0005000000"], 0x50}, 0x1, 0x0, 0x0, 0x4004004}, 0x8080) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @any, 0x8}, 0xffffffffffffffd6) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120141014813442024040075ee690102030109021b0001000010000904b8070196d1ca00090582020002000110109483381d16f995ed301d54fbb44efc6387e1a514bba66e5d7b704718ce9d17f94eac485e9c14e9c1179535577961957f66aebfdbaf23783596805998316c066f892adef683de999afad52fba190c54bb1af8a3a339aea6ddfbd3e6f3cdaad84fd1ca689434c5bc85fc52128dd2b47d8b2cd3e6"], 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x58, 0x0, 0x1}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffc, 0x0, 0x0, 0x8, 0x31, 0x81, 0x0, 0x0, 0x0, 0x4, 0x80}, {0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0x61, 0xfd, 0xfd, 0x0, 0x0, 0x3, 0x3}, {0x8000, 0xa, 0x20, 0x8, 0x40, 0x0, 0x5f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8}], 0x1ffffff}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRESHEX], 0x4}}, 0x10) sendmmsg(r4, &(0x7f0000000180), 0x3ef, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES64=r1]) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000180)={0x0, &(0x7f0000000280)}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000006080)={0x24, 0x14, 0x211, 0x0, 0x25dfdbfc, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x10, 0xfa, "4ac2411e47060aefadfa617a"}]}, 0x24}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) getpid() syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) 2m46.559417947s ago: executing program 5 (id=6372): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000000)={0x72bb, 0x9}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0xf0, 0x2b8, 0xb0000010, 0xf0, 0x5c8f0200, 0x1e0, 0x3a8, 0x3a8, 0x1e0, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [0x0, 0xffffffff], [0x0, 0x0, 0xff0000ff], 'vlan1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xf0, 0x700}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffff00, 0xff, 0xffffffff, 0xff], 'netdevsim0\x00', 'dvmrp1\x00', {0xff}, {0xff}, 0x0, 0x79, 0x7, 0x2}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x4695, 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket(0x10, 0x3, 0x0) request_key(&(0x7f0000000040)='blacklist\x00', 0x0, 0x0, 0x0) write(r6, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) r7 = syz_open_dev$I2C(0x0, 0x0, 0x161801) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000040)={0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x100010000, &(0x7f0000000300)=0x1) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) socket(0x3, 0x391f09074f154086, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ff9000/0x3000)=nil) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000280)=0xab) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) recvmmsg(r6, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) 2m37.709156281s ago: executing program 2 (id=6406): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000025000103"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async) socket(0xa, 0x3, 0x3a) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (rerun: 64) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYRESOCT], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) (async) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)=0xfe) (async, rerun: 64) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x4004743c, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async, rerun: 32) userfaultfd(0x80001) (rerun: 32) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) (async, rerun: 32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) (rerun: 32) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r5, 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001340)) (async) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 2m37.595746794s ago: executing program 2 (id=6409): socket$kcm(0x10, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x3b3, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0xfffffffc, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x100847c0, 0x1000000, 0x1, 0x0, 0x0) 2m37.266263474s ago: executing program 2 (id=6410): r0 = dup(0xffffffffffffffff) r1 = syz_open_dev$vim2m(&(0x7f0000000440), 0x800, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20041, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x2710, 0x4, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, &(0x7f00000001c0)="0f01cb363e6464670fae880050000066b91406000066b85eacd44e66ba000000000f3066b90d03000066b8d715691966baa1495ef00f300f01370f01cf0f01c266b9be0200000f320f01c40f20c06635000004000f22c0", 0x57}], 0x1, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}}, 0x4) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x80400, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000280)={0x2, @pix={0x0, 0xa, 0x47504a50, 0x2, 0x0, 0x1a18e3f7, 0x5, 0x27, 0x0, 0x0, 0x2, 0x61d03986f8975690}}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0xe4400) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000900)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000880}, 0x4000080) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r7, 0x4068aea3, &(0x7f0000000380)={0xed, 0x0, 0x80000001}) socket$inet_mptcp(0x2, 0x1, 0x106) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x6, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x8000000, 0xfffffffffffffffe, 0x0, 0x0, 0x634b, 0x4, 0x76, 0xfffffffffffffffc}, 0x0, 0x0) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r8, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, 0x0) 2m35.403099771s ago: executing program 2 (id=6420): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount(&(0x7f0000000180)=@filename='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='ntfs3\x00', 0x2000820, &(0x7f0000000240)='wlan1\x00') mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc050}, 0x840) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r4) close(r4) r5 = open(&(0x7f0000000780)='./file0/../file0/../file0/../file0\x00', 0x200002, 0x4) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000003680)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x8e4, 0x163, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0xac, 0x10, 0x7f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xc71, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7, 0x3, 0x8, {0x7, 0x25, 0x1, 0x8, 0x46, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x1cf, 0x7, 0x8, 0x4, {0x7, 0x25, 0x1, 0x1c6f2c62cc2279af, 0x8, 0x6}}}}}}}}]}}, &(0x7f0000003940)={0x0, 0x0, 0x0, 0x0}) bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xffffffffffffffba) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001000a206d0d78721e35fe374314473ff0800000000", @ANYRES32=r7, @ANYBLOB="0000000001120000"], 0x20}}, 0x0) 2m33.619511692s ago: executing program 2 (id=6428): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400070200000200080001000300000005000200feffff7f0500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) (fail_nth: 8) 2m33.196007584s ago: executing program 2 (id=6432): sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x191c) 2m32.993967925s ago: executing program 33 (id=6432): sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x191c) 2m30.44432562s ago: executing program 34 (id=6372): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000000)={0x72bb, 0x9}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0xf0, 0x2b8, 0xb0000010, 0xf0, 0x5c8f0200, 0x1e0, 0x3a8, 0x3a8, 0x1e0, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [0x0, 0xffffffff], [0x0, 0x0, 0xff0000ff], 'vlan1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xf0, 0x700}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffff00, 0xff, 0xffffffff, 0xff], 'netdevsim0\x00', 'dvmrp1\x00', {0xff}, {0xff}, 0x0, 0x79, 0x7, 0x2}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x4695, 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket(0x10, 0x3, 0x0) request_key(&(0x7f0000000040)='blacklist\x00', 0x0, 0x0, 0x0) write(r6, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) r7 = syz_open_dev$I2C(0x0, 0x0, 0x161801) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000040)={0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x100010000, &(0x7f0000000300)=0x1) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) socket(0x3, 0x391f09074f154086, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ff9000/0x3000)=nil) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000280)=0xab) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) recvmmsg(r6, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) 14.06396382s ago: executing program 0 (id=6888): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') open_by_handle_at(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES64=r0], 0x0) 12.51369692s ago: executing program 0 (id=6890): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'bridge_slave_1\x00'}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4040041}, 0x4000000) unshare(0x28000600) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x6f67}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = fsopen(&(0x7f0000000000)='hfsplus\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) dup2(r0, r0) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) 11.563434531s ago: executing program 1 (id=6892): recvfrom(0xffffffffffffffff, &(0x7f00000000c0)=""/254, 0xfe, 0x2, &(0x7f0000000000)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1}, [@null, @null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r0 = socket$isdn(0x22, 0x2, 0x3) socket$isdn(0x22, 0x2, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, 0x4000000) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') open_by_handle_at(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r1], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1a4}}, 0x20004000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, &(0x7f0000001140)=[{0x2, 0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/209, 0xd1}, {&(0x7f0000000440)=""/131, 0x83}], &(0x7f0000000380)=[0x17, 0x10, 0x7, 0x0, 0x2, 0x8, 0x7, 0xffffffff7fffffff, 0x4, 0x3]}, {0x4, 0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000500)=""/135, 0x87}, {0x0}, {&(0x7f0000000640)=""/129, 0x81}], &(0x7f00000002c0)=[0x5, 0x9, 0x3, 0x80000000]}, {0x8, 0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000700)=""/153, 0x99}, {&(0x7f00000007c0)=""/253, 0xfd}, {&(0x7f00000008c0)=""/174, 0xae}, {&(0x7f0000000980)=""/103, 0x67}, {&(0x7f0000000a00)=""/135, 0x87}, {&(0x7f0000000ac0)=""/136, 0x88}, {&(0x7f0000000b80)=""/254, 0xfe}, {&(0x7f0000000c80)=""/25, 0x19}], &(0x7f0000000d40)=[0x8, 0x5, 0x0, 0x6cac, 0xe553, 0x8]}, {0x7, 0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000d80)=""/146, 0x92}, {&(0x7f0000000e40)=""/190, 0xbe}, {&(0x7f0000000f00)=""/23, 0x17}, {&(0x7f000001aa40)=""/4096, 0x1000}, {&(0x7f0000000f40)=""/21, 0x15}, {&(0x7f000001ba40)=""/4096, 0x1000}, {&(0x7f0000000f80)=""/217, 0xd9}], 0x0}], 0x4) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000340), 0x4) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101000, 0x0) gettid() r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f00000011c0)={r5, 0x9, 0xce2, "30be2b32730e7ee421086ca5b2744f1c4ca68e46290e81309d0c5ea5c89aa5fe355f38397716f2faccac63ce5a90c7b1c589675305f7ad0a9ff3e605f0018a60bd99fe05eeccae5dfa5397079eeb2d480238f8951b6d88664b567bd5550f7532d3fa121b7599112fb9f1883692024aab3c16eaf9f3aed400bdb4bd29dd833d990c2741f7d401d59a697c7515f2702817d2758c0f5bc81f2a2f48601260fabe8973052b440b210b7698de46fd2cf8a085cba30a558a0ed19bbe165a596bc5ac198fe2cbd609929355a494bfaaec46c0b941d62214f2fea0e4ff489295cd31ac6384344d5d89c37b43392062827d02cd6a4492b891d81b"}) timer_create(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000080), 0x10) 11.534154221s ago: executing program 7 (id=6893): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0x3, 0x80801) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={r2, 0x7fc, 0x2, r2}) ioctl$KVM_SET_IRQCHIP(r1, 0xae64, 0x0) 10.892968478s ago: executing program 7 (id=6894): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) syz_emit_ethernet(0x44, &(0x7f0000000440)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x36, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x37}}, "000000008045"}}}}}, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) memfd_create(0x0, 0x0) r4 = epoll_create1(0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r6 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000001800)=""/200, 0xc8}], 0x1}) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000580)=[{}], 0x1, 0x8, 0x0, 0x0) read$msr(r0, &(0x7f0000000140)=""/140, 0x8c) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10.526985862s ago: executing program 1 (id=6896): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000040) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 9.886733158s ago: executing program 0 (id=6898): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) iopl(0x3) iopl(0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001740)={'ip6_vti0\x00', &(0x7f00000016c0)={'syztnl1\x00', 0x0, 0x4, 0xd, 0x8, 0x641, 0xa, @dev={0xfe, 0x80, '\x00', 0x37}, @loopback, 0x7, 0x7, 0x4, 0x1ff}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001780)=@delchain={0x1164, 0x65, 0x400, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xffff, 0x9}, {0x5, 0xfff3}, {0xc, 0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x111c, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xe, 0xa}}, @TCA_FW_POLICE={0x103c, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x7, 0x2, 0x3, 0x8, 0x7, 0x2580000, 0x7, 0xfffffff7, 0x0, 0x1c, 0xa782, 0x2, 0x3, 0xccca, 0x7f, 0x8, 0x0, 0x7, 0x1, 0x4, 0x4, 0xfffffffd, 0x7fffffff, 0x9, 0x6, 0x5, 0x2, 0x2, 0x3ff, 0x5, 0x1, 0x9, 0x7f, 0xffffffff, 0x1, 0x6, 0xf3, 0x2, 0x8001, 0x6, 0x6, 0x7f, 0x6353, 0x2, 0x6a5, 0x7ff, 0xf97c, 0x10000, 0xf1, 0x8, 0x3, 0x3, 0x1, 0x5, 0x276f32d5, 0x84, 0x1, 0x5d2, 0x37c, 0x7, 0x1, 0x30000000, 0x1, 0x4, 0x4, 0x6, 0x1f767a74, 0x1, 0x101, 0x7, 0x5, 0x2, 0x3a5, 0xffffffff, 0xfff, 0xfffffff9, 0xfe8c, 0x10001, 0x5, 0x1, 0xa0, 0x40, 0x7fffffff, 0xfb, 0x1, 0x8, 0x3ff, 0xf0a9, 0x9, 0x4, 0x8, 0x5, 0xdb8, 0x1, 0x4, 0x40, 0xdf2, 0x4a1, 0x3, 0x7, 0x1, 0x7, 0x0, 0x4, 0x2, 0x800, 0x8, 0x7, 0xff, 0x8, 0x9, 0x4b8e, 0xf, 0x401, 0x223, 0x5, 0x3, 0xea2, 0x4, 0x22, 0x3, 0x2, 0x3, 0xc, 0x10, 0x7, 0x83, 0x6, 0x10001, 0x5, 0x10001, 0x9, 0x5, 0x5f, 0x6, 0xffffe74a, 0xe9, 0x9, 0x6, 0x1000, 0x9, 0x0, 0x919, 0x5, 0x2, 0x400, 0x7fffffff, 0x22a1, 0xa, 0x7, 0x2557, 0x8001, 0x7, 0xfffff104, 0x9, 0x2, 0x1, 0xfffffffd, 0x1, 0x3, 0x1, 0x5, 0x8, 0x2, 0x6, 0xe2e8, 0x80, 0x6, 0x2, 0xff, 0x7, 0x7f, 0x101, 0xaaa, 0x8, 0x7, 0x4, 0x3, 0x3, 0x8, 0x40, 0x200, 0x6, 0x0, 0x0, 0x5, 0x4, 0x8, 0x9, 0x6b, 0x0, 0x8, 0x4, 0x1, 0x2, 0xfffffff8, 0x9, 0x101, 0x3, 0x335, 0x80000000, 0x2, 0x7f, 0xc0000000, 0x8, 0xcad, 0xffffffff, 0x10, 0x3, 0x3, 0x1, 0x9, 0x3, 0x2, 0x8, 0xffff7fff, 0x4, 0x1, 0x7, 0xa, 0x5, 0x8, 0x1d, 0xf21, 0x40, 0x9, 0x1, 0x5, 0xffffc4c4, 0x6, 0x4, 0x2, 0x8, 0x0, 0x2, 0x7, 0x1, 0x7fff, 0x3ff, 0x6, 0x101, 0x8000, 0x80, 0xfa, 0x80000000, 0x6, 0x2466e6fa, 0x53172136, 0x3, 0xffffc55f, 0x7, 0x6, 0x72, 0x5b6d, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x38000000, 0x8000, 0x5, 0x1, 0x9, 0xfff, 0x54, 0x6, 0x1, 0x9, 0x4, 0x1, 0x4, 0x3, 0xb, 0x2, 0x1ff, 0x2, 0xd, 0x9, 0x3, 0x8, 0x6, 0x7, 0x7fff, 0xe, 0x160f9686, 0x7, 0x2, 0x7, 0x8, 0x8, 0x10000, 0x1000, 0x8, 0x37, 0x5, 0x280000, 0x1, 0x0, 0x2, 0xff, 0x4, 0x0, 0xd8, 0xb772, 0x3, 0x6, 0xfffffffe, 0x32a6, 0x80, 0x1, 0x101, 0x9, 0xd, 0x1, 0x401, 0x1, 0x9, 0x36b, 0x0, 0xfffffff0, 0x7, 0x8, 0x10001, 0x5, 0x2c895f, 0x6, 0xfffffffa, 0x8000, 0x7, 0x9, 0x6, 0x5, 0x2, 0x7, 0x7, 0x5, 0x3ff, 0x1ff, 0x80000001, 0x7, 0x1, 0x9, 0x6, 0x8, 0x1, 0x2, 0x40, 0xffff0000, 0x7fffffff, 0x80, 0x4c, 0x1000, 0x7, 0x1, 0x5f, 0x4, 0xe, 0x4, 0x1, 0x8, 0x6, 0x9, 0x6, 0x62, 0x1, 0x8, 0x41, 0xfa900000, 0xfffffffa, 0x9, 0x27, 0x0, 0xc37d7eb7, 0x0, 0x5, 0x7, 0x8000, 0x9, 0x4, 0x3ff, 0x80000000, 0x3, 0x0, 0x10001, 0x7, 0x8000, 0xf9b, 0x3, 0xeb63, 0xb87, 0x7, 0x1ff, 0x1, 0x7, 0xb, 0x5, 0x7, 0x0, 0xff8000, 0x670, 0xb, 0x5, 0x6, 0x80000000, 0x10, 0x9, 0x2, 0xd7e, 0x7fffffff, 0x4000, 0x9, 0x0, 0x8, 0x0, 0x800, 0x0, 0x822, 0xd42, 0x2, 0xb50c, 0x9, 0x1, 0xfffffffd, 0x200, 0x7fff, 0x6, 0x1, 0x9, 0x6, 0x100, 0x3, 0x6, 0x2, 0xfffff075, 0x6c3, 0x1, 0x5, 0x1ff, 0x5, 0x1, 0x7, 0x7, 0x2c, 0x0, 0x0, 0x5dd, 0x2, 0x3, 0x9, 0x7, 0x7, 0xcec4, 0x1, 0x101, 0x4, 0x7, 0x5, 0xfffffffe, 0xb0e3, 0x9, 0x1, 0x1, 0x4, 0x2, 0xffffffff, 0x9, 0xffffffff, 0x0, 0x40, 0xe, 0x7, 0x0, 0xffffffff, 0xfffffffb, 0x4, 0x1, 0x1000, 0x9, 0x2, 0x1, 0x9, 0xfffffffd, 0x4, 0x7, 0x6, 0x6, 0x400, 0xfffffc00, 0x9, 0x9c3, 0x9, 0x2, 0x1, 0x0, 0x58, 0x7, 0xe9b2, 0xffff18c0, 0x6, 0x10001, 0xfffffffd, 0x5, 0x0, 0x2, 0x3, 0x80000000, 0x4, 0x8, 0x6, 0x7, 0x7ff, 0x3, 0x14]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x701f}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x40, 0x80000001, 0x9, 0xfffffffa, 0x8, 0x0, 0x3ff, 0xfffffffd, 0x3, 0xaee, 0x7d, 0x8, 0xa, 0x19, 0x3, 0x8, 0x0, 0xa, 0x6, 0x80000001, 0x100000, 0x3, 0x9, 0x91a8, 0xffffffff, 0x1, 0x3, 0x59, 0x0, 0x2, 0x80000001, 0x40000000, 0x6, 0x9, 0x4, 0xfffffffb, 0x8, 0x9, 0x81, 0x7, 0x6, 0x68, 0xd, 0x9, 0x9, 0x0, 0x1, 0xffffffff, 0x3, 0x9, 0xe1, 0x1, 0x2, 0x6, 0x1, 0xfffffffa, 0x800, 0x3, 0xffffffff, 0x0, 0x0, 0x1, 0x5, 0x80000001, 0x800, 0x1, 0x8, 0x7, 0x3, 0x4, 0x3, 0x9, 0x1000, 0x3, 0x7, 0x0, 0x6, 0x7, 0x6, 0x3, 0x2, 0xa1, 0x40, 0x2, 0x8001, 0x1, 0x8, 0xaf4, 0x3, 0x9, 0x6, 0x8000, 0x4, 0x1, 0x5, 0xbf, 0x6, 0x5, 0xf, 0x7, 0x9, 0x2, 0x4, 0xfffffffc, 0xfffffffd, 0x2, 0xffffff4b, 0x1000, 0x0, 0x1, 0x1, 0x3507, 0x8001, 0x6, 0x7, 0x9b, 0x6, 0x9, 0x9, 0x8, 0xfc5, 0x1, 0x1, 0xfffffffb, 0x8e60, 0x8, 0x4, 0x8, 0x575b, 0xd52, 0x1, 0x63bace65, 0x5, 0x612, 0x6, 0x5, 0x0, 0x40, 0x1, 0x1ff, 0x834c, 0xffff6002, 0x10001, 0x10001, 0x6, 0xe, 0xa, 0x0, 0x2, 0x3, 0x5, 0x1, 0x0, 0x6, 0x7, 0xb, 0x9, 0x6, 0x0, 0x4, 0x7, 0xffffffff, 0x445, 0x7fffffff, 0x7fffffff, 0x8000, 0x53, 0x2, 0x7, 0x4, 0xffff, 0x7, 0x10000, 0x401, 0x0, 0x2, 0x8, 0x8, 0x2, 0xae, 0x80, 0xfffffffc, 0xfffffff1, 0x1, 0x3, 0xff, 0x9, 0xe, 0x3, 0x3, 0x9, 0x6, 0x2, 0x1, 0xff, 0xfff, 0x71a, 0x5, 0x0, 0x0, 0x0, 0x9, 0x14f83b6a, 0x8, 0x0, 0x2, 0xe, 0x5, 0x9, 0x43aeb182, 0x1, 0x1, 0x8, 0x4, 0x0, 0x1000, 0x8, 0x0, 0x2, 0x401, 0x7f54, 0x4, 0x9, 0x200, 0x3, 0x8, 0x2d4, 0x40, 0x7fffffff, 0xffff8001, 0x6ad6, 0x9, 0x0, 0x7, 0x5, 0x2, 0x9, 0x4, 0x10, 0x8, 0xfffffff8, 0xcca, 0x9, 0x9, 0xa, 0x4, 0x9, 0x9, 0x7, 0x9, 0xb, 0x4, 0x1000, 0x4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8e}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xfffff541, 0x4, 0x2, 0xd3b, 0x12, 0x4, 0x0, 0x9, 0x6, 0x4, 0xffffffff, 0x3, 0x1000, 0xae, 0x3, 0x4, 0x5, 0x81, 0x8, 0x4, 0x0, 0x81, 0xfffffffb, 0x1ff, 0x2, 0x0, 0x5, 0x10, 0x7, 0x200, 0x9, 0xd7, 0x5, 0x4, 0x3, 0x9, 0x3f, 0x8, 0x9, 0x1, 0x1, 0xfffffffa, 0x101, 0x9, 0x9, 0x4bed800, 0x1, 0x40, 0x4, 0x10, 0x3, 0x0, 0x0, 0x4, 0xfff, 0x0, 0xbcda, 0x1ff, 0x300000, 0x5, 0x5f, 0x5, 0x8, 0x9, 0xffff, 0x4, 0x15, 0x7, 0x8, 0x4480000, 0x2, 0x7, 0xffff8001, 0x3, 0xd8, 0x5, 0x2, 0xd6c, 0xffff4161, 0x9, 0x81, 0x2, 0x5, 0xfffffc01, 0xfffffff5, 0xbd, 0x0, 0x10000, 0x3, 0x9, 0x7, 0x5, 0x10001, 0x7, 0xffff, 0x7fffffff, 0x2, 0x3, 0x1, 0x1, 0x5, 0x5, 0x7, 0xe, 0xac, 0x4, 0x400, 0xffff0001, 0x4, 0x6, 0x2d, 0x4, 0x800, 0x3, 0x8, 0x71b0, 0x6, 0x8000, 0x2, 0x2, 0x1, 0x5, 0x5, 0x0, 0x4, 0x1, 0x8, 0xc0e, 0x251, 0xeaff, 0x3, 0x9, 0x4, 0x0, 0x9, 0x9, 0x2, 0x4, 0x0, 0x5, 0x0, 0x33, 0x3, 0x101, 0x9, 0x80000001, 0x5, 0x7f, 0x80, 0x62, 0x9, 0x865, 0x5, 0x10001, 0x41ef0, 0x1000, 0x7, 0x800, 0x9, 0x4, 0x3, 0x1, 0x4, 0x800, 0xe8, 0xa4, 0x3, 0x3, 0x19e3, 0x7, 0x3, 0x1000, 0x4, 0xbc29, 0x3, 0x800, 0xa, 0x9, 0x8, 0x3301, 0x5, 0xfffffffa, 0x1, 0x67f96330, 0x1, 0x1, 0xfff, 0x8, 0x5, 0x5, 0x6, 0x3, 0x3, 0x4, 0x5, 0x101, 0x81, 0x3, 0x3, 0x0, 0x7ff, 0x61c5, 0x2, 0x3, 0x6, 0x8, 0x6, 0x0, 0x6, 0xffffa234, 0x2, 0x8, 0x1, 0x101, 0x4, 0x7, 0x10000, 0x80000001, 0x9, 0x4b2, 0x401, 0x1, 0x8, 0x10001, 0xf, 0x7, 0x3, 0x4, 0x1ff, 0x3, 0x1, 0x5, 0x6, 0x7fffffff, 0x94d0, 0xdd9, 0x4, 0x0, 0x400, 0x2, 0x3, 0x7f, 0x2, 0x7, 0x1, 0x6, 0x6, 0x0, 0x0, 0x80000000, 0x3ff, 0x0, 0x8, 0x5]}]}, @TCA_FW_INDEV={0x14, 0x3, 'veth1_to_hsr\x00'}, @TCA_FW_POLICE={0xc0, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x5, 0x2b60e5f7, 0xffff, 0x0, {0x6, 0x0, 0x0, 0x400, 0x3, 0x1}, {0x7d, 0x1, 0x7, 0xfff3, 0x3, 0x40}, 0x3, 0x40000, 0x4}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x2, 0x5, 0x2f82, 0x467, {0xa9, 0x2, 0xa1c, 0x3, 0x1000, 0x3}, {0x50, 0x0, 0x40, 0x8, 0xf561, 0x5}, 0x200, 0x46, 0x5}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x80000000, 0x401, {0x0, 0x2, 0x4, 0x7ff, 0x6}, {0x81, 0x0, 0x8001, 0x3636, 0x1, 0x1}, 0x4494, 0x800}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0xd}}, @filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x6}]}}]}, 0x1164}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) iopl(0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1d, 0x81, 0x7, 0x35, 0x4, 0xffffffffffffffff, 0x81, '\x00', r2, 0xffffffffffffffff, 0x3}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000680)=@o_path={&(0x7f00000005c0)='./file0\x00', r4, 0x4000, r0}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x128, 0x268, 0x33a, 0x128, 0x268, 0x260, 0x460, 0x460, 0x260, 0x460, 0xc, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0xd8000000, {0x9402}, [@common=@inet=@hashlimit1={{0x58}, {'gretap0\x00', {0x60, 0x80000001, 0x3f, 0x1, 0x5, 0x1, 0xff, 0x38, 0x70}}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0xc, 0x10001, 0xfffffffe, 0x0, [{0x0, 0x1, 0x87, '\x00', 0x8}, {0x9, 0xc, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xff}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0xe, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd4, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26, '\x00', 0x7f}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0x12, 0xee, 0x7, '\x00', 0xff}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0x2}, {0x9, 0x1, 0x7, '\x00', 0xc2}, {0x2, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 9.739865862s ago: executing program 6 (id=6899): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) 9.61038167s ago: executing program 1 (id=6900): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') open_by_handle_at(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES64=r0], 0x0) 8.387511749s ago: executing program 0 (id=6901): r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r1 = dup(r0) write$binfmt_elf32(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46"], 0x64) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0x0, &(0x7f00000009c0)=0xd, 0x4) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) copy_file_range(r2, 0x0, r3, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0x4, @local}, @in6={0xa, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x12}, 0x9}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3d}}], 0x58) syz_clone(0x4000000, &(0x7f0000000200), 0x0, &(0x7f0000000240), &(0x7f0000000340), &(0x7f0000000380)="dfca68410a5acc56893a9f1d62fb1b756ca969") getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000100)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) epoll_create1(0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001"], 0x18}, 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 8.313774156s ago: executing program 6 (id=6902): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) r2 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0xfefe) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e2e000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 8.265107369s ago: executing program 7 (id=6903): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x1, 0x0) read(r0, 0x0, 0x0) 7.815080762s ago: executing program 1 (id=6904): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0x3, 0x80801) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={r2, 0x7fc, 0x2, r2}) ioctl$KVM_SET_IRQCHIP(r1, 0xae64, 0x0) 7.456998451s ago: executing program 6 (id=6906): recvfrom(0xffffffffffffffff, &(0x7f00000000c0)=""/254, 0xfe, 0x2, &(0x7f0000000000)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1}, [@null, @null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r0 = socket$isdn(0x22, 0x2, 0x3) socket$isdn(0x22, 0x2, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, 0x4000000) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') open_by_handle_at(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r1], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1a4}}, 0x20004000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, &(0x7f0000001140)=[{0x2, 0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/209, 0xd1}, {&(0x7f0000000440)=""/131, 0x83}], &(0x7f0000000380)=[0x17, 0x10, 0x7, 0x0, 0x2, 0x8, 0x7, 0xffffffff7fffffff, 0x4, 0x3]}, {0x4, 0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000500)=""/135, 0x87}, {0x0}, {&(0x7f0000000640)=""/129, 0x81}], &(0x7f00000002c0)=[0x5, 0x9, 0x3, 0x80000000]}, {0x8, 0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000700)=""/153, 0x99}, {&(0x7f00000007c0)=""/253, 0xfd}, {&(0x7f00000008c0)=""/174, 0xae}, {&(0x7f0000000980)=""/103, 0x67}, {&(0x7f0000000a00)=""/135, 0x87}, {&(0x7f0000000ac0)=""/136, 0x88}, {&(0x7f0000000b80)=""/254, 0xfe}, {&(0x7f0000000c80)=""/25, 0x19}], &(0x7f0000000d40)=[0x8, 0x5, 0x0, 0x6cac, 0xe553, 0x8]}, {0x7, 0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000d80)=""/146, 0x92}, {&(0x7f0000000e40)=""/190, 0xbe}, {&(0x7f0000000f00)=""/23, 0x17}, {&(0x7f000001aa40)=""/4096, 0x1000}, {&(0x7f0000000f40)=""/21, 0x15}, {&(0x7f000001ba40)=""/4096, 0x1000}, {&(0x7f0000000f80)=""/217, 0xd9}], 0x0}], 0x4) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000340), 0x4) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101000, 0x0) gettid() r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f00000011c0)={r5, 0x9, 0xce2, "30be2b32730e7ee421086ca5b2744f1c4ca68e46290e81309d0c5ea5c89aa5fe355f38397716f2faccac63ce5a90c7b1c589675305f7ad0a9ff3e605f0018a60bd99fe05eeccae5dfa5397079eeb2d480238f8951b6d88664b567bd5550f7532d3fa121b7599112fb9f1883692024aab3c16eaf9f3aed400bdb4bd29dd833d990c2741f7d401d59a697c7515f2702817d2758c0f5bc81f2a2f48601260fabe8973052b440b210b7698de46fd2cf8a085cba30a558a0ed19bbe165a596bc5ac198fe2cbd609929355a494bfaaec46c0b941d62214f2fea0e4ff489295cd31ac6384344d5d89c37b43392062827d02cd6a4492b891d81b"}) timer_create(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000080), 0x10) 7.041049168s ago: executing program 1 (id=6907): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000150001030ec00000fcdbdf250500"], 0x14}}, 0x0) 6.998606621s ago: executing program 6 (id=6908): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) io_pgetevents(0x0, 0x1, 0x1, &(0x7f00000000c0)=[{}], 0x0, 0x0) syz_usb_connect(0x0, 0x4fa, &(0x7f0000000540)=ANY=[@ANYBLOB="120100022502aa10120a105daae9010203010902e8040406000000090498fd061704400309050b"], 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x400000000000000) r5 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r5, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r5, r0, 0x80000) 5.966369447s ago: executing program 1 (id=6909): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000800), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r3, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r3, r4, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = gettid() getresuid(&(0x7f0000003fc0), &(0x7f0000004000), &(0x7f0000004040)=0x0) r7 = getpgid(0xffffffffffffffff) newfstatat(0xffffffffffffff9c, &(0x7f0000004080)='./file0\x00', &(0x7f00000040c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) r9 = getegid() r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r10, 0x8, &(0x7f0000000240)=0x2) r11 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000004440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001a40)="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", 0x2000, &(0x7f0000004600)={&(0x7f0000000340)={0x50, 0x0, 0x2, {0x7, 0x2d, 0x2, 0xb5e529a2567d88b8, 0x4, 0xee, 0x4, 0x0, 0x0, 0x0, 0x1, 0xffffffff}}, &(0x7f0000000280)={0x18, 0xffffffffffffffda, 0x9, {0x7}}, &(0x7f00000003c0)={0x18, 0x0, 0x9, {0x5}}, &(0x7f0000000400)={0x18, 0x0, 0x100000001, {0x5}}, &(0x7f0000000640)={0x18, 0x0, 0xffffffffffffff80, {0x8}}, &(0x7f0000000680)={0x28, 0x0, 0x38, {{0x8, 0x7, 0x2, r10}}}, &(0x7f0000000780)={0x60, 0x0, 0xab1, {{0x9, 0xa, 0x9, 0x2, 0x4, 0xffffff7f, 0xb, 0xa}}}, &(0x7f0000000800)={0x18, 0xfffffffffffffff5, 0x170, {0x4}}, &(0x7f00000006c0)=ANY=[@ANYBLOB="15000000f6cd5fd5701bd7f02d37a0ffffffe6875a0e6b6c1ce7124820119da5a08f9f6864d81df033cb5b2de8f82e0c56b666b767be7ddb0d04dbd791f74a64cae26c05c769b3213e6ec2d6a28cbd586c25ab130000000000000000"], &(0x7f0000000880)={0x20, 0x0, 0x1, {0x0, 0x2}}, &(0x7f0000003a40)={0x78, 0x0, 0x5, {0x3, 0x9, 0x0, {0x0, 0x6, 0x8, 0xffffffff00000001, 0x9, 0x5, 0x7, 0x5, 0x161, 0x1000, 0x7, 0x0, 0x0, 0x5}}}, &(0x7f0000003c00)={0x90, 0x0, 0x3, {0x5, 0x2, 0x5, 0x5, 0x4, 0xd, {0x2, 0x9, 0x8, 0x3ff, 0x2, 0x553c, 0x3, 0x8, 0x42, 0x6000, 0x3, 0xffffffffffffffff, 0x0, 0x81, 0x1}}}, &(0x7f0000003cc0)=ANY=[], &(0x7f00000008c0)={0x210, 0x0, 0x8, [{{0x2, 0x1, 0x100000000, 0x0, 0x8, 0x2, {0x5, 0x7, 0x4, 0x3cdf, 0x2, 0x0, 0x4004, 0x3, 0x59, 0x4000, 0xf242, 0x0, 0x0, 0x6b, 0x5}}, {0x6, 0x6, 0x1, 0xfffffffd, '\x00'}}, {{0x1, 0x3, 0xb76c, 0x2, 0x3, 0x5, {0x0, 0x1, 0x4, 0x50d204ae, 0x96, 0x2, 0x7, 0x7, 0x9, 0x6000, 0xb607, 0x0, 0x0, 0x11, 0x4d}}, {0x5, 0x2, 0x21, 0x8, '\xf7\x9f\vZ\xa3\xc1\xd8\xb5\x84\xb6\x98\x86k\x11\xd1\x1aD\xf6\xddA5\xc4\xef\xfdt~.\x9b`,\xd4,;'}}, {{0x2, 0x1, 0xf5c8, 0xbf6, 0x56, 0x6, {0x0, 0x10000007, 0x9, 0x1000000000000, 0x18000000000000, 0x80000000, 0x7, 0xa, 0x10001, 0x8000, 0xb, 0x0, 0x0, 0x49, 0x1}}, {0x3, 0x4, 0x6, 0x0, '}\'{\xa3%!'}}]}, &(0x7f0000004300)={0xa0, 0xffffffffffffffda, 0x3, {{0x2, 0x3, 0x8003, 0x3, 0x1, 0x2, {0x2, 0x100000000, 0x7, 0x1, 0x8000000000000001, 0x8, 0x0, 0xfff, 0x2, 0xc000, 0x1, 0x0, 0xffffffffffffffff, 0x8000, 0x8}}, {0x0, 0x3}}}, &(0x7f00000043c0)={0x20, 0x0, 0x10000, {0x1, 0x4, 0x5, 0xe}}, &(0x7f00000044c0)={0x130, 0xfffffffffffffff5, 0x7, {0x8, 0x8eae, 0x0, '\x00', {0x8, 0x5, 0xd, 0x4, r12, r13, 0xa000, '\x00', 0x84ce0000000000, 0x8, 0x1000, 0xfffffffffffffffa, {0x6800000000000, 0x1}, {0x5}, {0x80000000}, {0x200, 0x800200}, 0x2, 0x2, 0x3, 0xffff}}}}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004140)={0x0, 0x0}, &(0x7f0000004180)=0xc) r15 = getgid() r16 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r16, 0x40146f2c, &(0x7f0000000000)={0xfffc, 0x0, 0x3, 0x9, 0x4}) r17 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r17, &(0x7f0000000100)='connect aa:aa:aa:aa:aa:10 0', 0x1b) sendmmsg$unix(r1, &(0x7f0000005700)=[{{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001880)=[{&(0x7f0000000200)="cd143236b84d2a779621ce73f41097ebf8a39a536c5ee0e61abdd5715d406dd2d5ad730bb78c90a9e75997d8da42027e25f11d07b29812dadb2a742302c4802e2355c262475cba7381db0fff2950fd252fc77200e34c3680a13203c566bc8a278a63ae977b4d78b9fdd7324cb4442300ea7a1f66047872ffb16f99fecf1f865fc47e40d993890572861b6ad59f5e128d79eeb4a1a1340a4b672ee0cd9ee140d75fd3e9c69d0fc698c8e11a5933992ecec8f376bf91500bb4ed5814e4f43949e16dfda467786393cd193d713aa16f2f4063c56c34e51b65ad601395e65d1acec7978f646464f8f4f98f1fc969f8c6e430d6873ee2e753", 0xf6}, {&(0x7f0000000080)="e4018fed19a80ed03d082329c3a5029d", 0x10}, {&(0x7f0000000380)="1ea58c4735162cdae9cd16d08b843fb46bea08e6786441c69680e1f6c5eb737a100e553dba093a4ecf4373291e77550d9ac642ee35c502c395872980014c5c619f3cfe2fa39f348d99fce43f039905c3e1e3caa8b46dd529ddd0822ba05d7e8b916794aebbb74918e70998958491cf5cfb4ab81ec71509d6886c64cf80d2f6999ab75ec62ed3a4a558f6e95b8d9e7b359bce", 0x92}, {&(0x7f0000000480)="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", 0xff}, {&(0x7f0000000640)="83d066d63acf4d3e3a74dd72b29340998dae16199948d9652311d667b86a98ee2076ef6eb6ec6786fb7a43572d0f9fffa8e8b4137f07bf61dd18a08d4f219d21ca0e8f27034dcf6141f1984acb3889d65b38a5485ec38017103e06ec45f0bdd5a565da92b167a55d87df05b2a2bb719635452e459e4a5b6adf478e8c087536147c29a1218a74ca764f72cc598b51862d956ffaf777c0885fb48bd16b68e270b1bfbaf193feffa08679e4db5f48278c1656", 0xb1}, {&(0x7f0000000700)="7b885df0dfea213cf372977d924318a1d1f844290370e1edfea312a8b143981b488c565695355b4a8920507dcee7e6516d053b607f884f41a852f3904f3d802251657b595c0d0c520e16f2d3762315d8287695cda5cdaf3bc51a9c7a39f03535570dc6e6d9f2d2a3a08538e6f2839871a738c30e01f1c72d5c29f449ae51ddba38bb2c239f264f886324adcec993cfa352dcd6715adb33b9119ba0f514a197efdb44b925b854deae4a8b32aee7014ad2b7ee4633da", 0xb5}, {&(0x7f00000007c0)="d09270ffbbc7b498196ac43f6007ad4169dbc74b83b0fc54eaa5f4dadc9ecebcb36aaef499ee3e96dc07c181c5b8d0073efb335b4010b48106542f5836606dfdbc0aa2ba25a30a44a4762864be64ef086c7af8d951a3d095477c6fde9b3b1c0f3526076c7308bda86ab85a9e4d4e2bf56b0810befda71db7d5e5223b9bb968278d", 0x81}, {&(0x7f0000000580)="58915b61b23f133633f858128cf81335180df31d0cc73457255b4775af3dd9f278eed696c744df3f6ca4968e4aaa3758e9d437752f4b02be43f4d854bf", 0x3d}, {&(0x7f0000000880)="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", 0xc00}, {&(0x7f00000005c0)="0baf3b73318ffedbc085168761c05b54094358f5e2c55b5a4befb94c5b739b79f5ba175272ae5f979de23b59", 0x2c}], 0xa, &(0x7f0000001c40)=[@rights={{0x28, 0x1, 0x1, [r1, r0, r0, r1, r1, r1]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x88, 0x20000000}}, {{&(0x7f0000001d00)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001f40)=[{&(0x7f0000001d80)="48e65d1c9d7c6f91543ab77db217f69d856c5f98cf74df5564d4e0e1b51670cd9f252e07f22c1c788aeb05a9ca40f27691bdbc538b6be6c1c6cf2102290166d24de1d76de18a72ce8af7", 0x4a}, {&(0x7f0000001e00)="f376ec527c76abeae5cb66defe432116664406623c17f1ebb829af9d69ada63ef6b85e4362787e32d2547c559d55eab30165010c", 0x34}, {&(0x7f0000001e40)="0b356d2d31ec0f96d34376b5699c86cbe22e9467a0e56cbcb4900d", 0x1b}, {&(0x7f0000001e80)="970bf78e172245a0d6c485a43505253be79ebf5494964c7b0e285d2f81773b2f25688763110fa31134b4fd9d4d50d93296fe01900fa10b700e9dc3ba4fac619220435d2876daea02a82b160c08e25daeb78d81639423d7c481bbb8d8abca92ac1838f548be74c8cc6688c100af1d63c9cedba1911d0be7a91a11088964ef5447693f9ff38ebc3075cbfd9eff7277b5bb131c22b381cf0a598b130a6c58306aa3d03ee8c77b5a3697b8faa91649e654c194f80b9387d0972d", 0xb8}], 0x4, &(0x7f00000041c0)=[@rights={{0x2c, 0x1, 0x1, [r0, r1, r1, r1, r1, r1, r0]}}, @rights={{0x28, 0x1, 0x1, [r1, r0, r1, 0xffffffffffffffff, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, r14, r15}}}], 0xd8, 0x4008000}}, {{0x0, 0x0, &(0x7f0000005640)=[{&(0x7f0000004340)="2e23e8def422d97757c96bb05b31a244ff838bbe6e65cd5fbda45a0ef6cf45b2fa2521735864505a28690d59cada6200237081b76b1cb95e01fdb74f94cc43b67f8cbd8d6fb9b35daad93e5b1cb65fdc4b5c838ad330e4746dc194dee2f0ef583bda8cfdf188f07eaa6aa1d7b7d3d00a3a162dbca724082498693cc792af177938b73400fc33f1b2c7f876a3eeaf9685793c13223db637bb97b425ebf23f394079acbebec896b5d24ab72a371d0cb2c310f80e15091884ccf5780655a815e6bb630f7282a1937d270c24a0596ee130ef3e0322cecacfb0", 0xd7}, {&(0x7f0000004440)="d32f5e0133a7e04e9faf9c3d63addde311c34c026b5df6aef4c9bf6f03eea5547474b2eb52f9e1f8df5c06958410af9f679d979901139b", 0x37}, {&(0x7f0000004480)="c3c37c2f3ec95ef6e53a5f44fb2d6d336d2fc89e8c1b5693799cb298b8f07d91c314709474e565637414e36891c08f6577f0fe612abb6f27371cefcb33fbece949ca146d0580fac42d56b09015a0afc7fe19ce8a0afe389e205b6f2d3f1d58844845d31bba1257dd16ccb40f05df1481f9112cd8ad", 0x75}, {&(0x7f0000004500)="7fee617e1aabc955e95ba3dc642665e0875481cee763f4dcb848ca7023fb0e3b12a87735ae117939f45c914bf2aabfe592ac4af4c772e701fcf1844af58741937d534966ca04331394fdebe1f130ed8a7a2cb64fe77abc4cc2b66f22fad0f097d9b0f2e9b0e1323486", 0x69}, {&(0x7f0000004580)}, {&(0x7f0000005580)="7be3256114562e89f3da20f4c3022e5240198010c49f7164b88bfdd5414ea7106778d9e753c055e254fec93eebdb8e056f4f3546d3288cd6082caa3cb8fcbdd83869836c129c7025bf7914459e9b890e82dd95cf98ea876503be5f1799e79255e42bc69b4236b6671bb6d961a5c56b436dea165730a90b878ff2ea2d8aea40ac5e3863e7cd", 0x85}], 0x6, 0x0, 0x0, 0x20008000}}], 0x3, 0x4001) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) getsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 5.445277903s ago: executing program 7 (id=6910): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES64=r5], 0x14}, 0x1, 0x0, 0x0, 0x894}, 0x0) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000001fc0)={0x45, 0x6, 0x0, {0x0, 0x0, 0x1c, 0x0, '/sys/kernel/debug/sync/info\x00'}}, 0x45) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$XFS_IOC_PATH_TO_HANDLE(r6, 0xc0385869, &(0x7f0000000340)={r2, &(0x7f00000001c0)='\x00', 0x1200, &(0x7f0000000280)={@align=0x3, {0x7b, 0x3, 0x9, 0x5}}, 0x768d, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x3}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r7, 0xc01864c2, &(0x7f0000000380)={0x0, 0x1, r8}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x11, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 5.381110815s ago: executing program 0 (id=6911): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000001000ffff28bd7000fedbdf", @ANYRES32=0x0, @ANYBLOB="20ba01006f1000002800128009000100766c616e000000001800", @ANYRES32=r0, @ANYBLOB], 0x58}}, 0x8004002) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12, 0xffffffffffffffff, 0x260}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x24020400) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x17) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) write$P9_RSTATu(r4, &(0x7f0000000700)={0x235, 0x7d, 0x0, {{0x500, 0xf4, 0x0, 0x5000000, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x92\xff\xff\xff\x81\x02\x00\b\x00\x00\x001\xff\xce\xbc\x92\x00'/31, 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x58, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb5\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xcdr\xc4\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x235) 5.360229983s ago: executing program 4 (id=6912): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r1 = socket(0x840000000002, 0x3, 0xff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmsg$nl_netfilter(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4004004}, 0x20000000) r3 = socket(0xa, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f000000c6c0)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) fstat(0xffffffffffffffff, &(0x7f000000c700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f000000c900)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000500)="6961f51dfaef547e0886b67d4a3f28240d98caa9cfc512b5be0cc449c7b46b09eadb73a0700a33bf1b8ffb0bfb10ad3ac44f05c612e55adcd55c7ba2952078d6c59d08a4d1ec72e4365e39db63b97e06bb9b3190ed2c9bb945bca8b10ab5f78fce0ca358202819774f94748bd794ee8bb45acef2d693a5a60fcdb6a72bd8b146730a6199399af3834247bdfb153b3d29caa9a090d8fe880d7db64f52d738d6d6290b72eff769ec375752aefc6e6f99043e412e16df2af8bbd4b70f0b651fad664807cd4ff898ed534307d77f6510f5c145de579b8e622b5ad7c4186574daa1e0554dbe997113f50d40a2c050775dc0074b2534", 0xf3}, {&(0x7f0000000140)="3a0fd1cf81792743c8cd3c65de72fff32b670f538a2d235bb368ecfbe851edc6f0ead3a920b77bdc892d0286ef4984b27337c6c25161e9", 0x37}, {&(0x7f0000000380)="63408fc5ff6daea5324442587182d1b573064ba052573d59a117a595516fb4819918d986ca72e483ae6bebcf1d4c8ecc716c19a29645371802cd295e4af47bfffbe0dac322", 0x45}, {&(0x7f0000000600)="a47d9eab8c70d9eb50ffc873928fe75b6cf19829848532cabf84405d4dbb072dc4c6a463d7135ab6198fbceade5eb48de1bf84b7400f0749e06b796bceb0b7f25e66820833b64e79273b84ea7d2fa58d23e3a2", 0x53}, {&(0x7f0000000680)="88b8906e29a3b9ff1584cff180f086a11feb87f9a817ae07f905737ce8e15c37fd821fae19cfb622fce222ed1b027974117075e29a797032a542be424235f55e807d5b98af5d41538fee27692610159b4c5c4a5406fbddda4924712bf985fcfb5e262117b7624e7273292601aec518decdca87d1241c2c362374347feb098a10b74e3b7f195d285df5c372ad79b23757631de28e35d4751ff1ed0a65e9360f45709c653b15e867a8fbf525c716f113b6fd66db6e804bce55fcb3e29f889a", 0xbe}], 0x5, &(0x7f0000001b80)=ANY=[@ANYBLOB="1c00000000001f040100100002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x50, 0x20050890}}, {{&(0x7f0000001c00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000030c0)=[{&(0x7f0000001c80)="22d8e619efbbdf86546645f443b6f8134c52def3b31af1195154c50517fddb9d0eeac05019cb", 0x26}, {&(0x7f0000001cc0)="6509c4972a1d64129873732255849a9bdbe0c1b8762800a367fb61a76a3480b87dfa2ef725f8fa1c8def1ea487f7183396470dd55d7de59cfe7ef50f414ef3852e434eaa77cebf54ab228b826bedb7ef4d931ac774e8bb82e8379ab63047e6d62a3bcc84257d7eca770d93019d68c0ea657e41a6f3030f53bcfdc580024e551f45da471e71f1c4a9867ae379511268dfcac4f6373f7a0fd0207cee", 0x9b}, {&(0x7f0000001d80)="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", 0x1000}, {&(0x7f0000002d80)="b2d510a1553451dafa15efb9a114e4cf669f5351f8b5291ec5b9cd01286b895b6cff6450a5792a7d61b0dcb69f1feb82b82c61b624d44325ae3cb08f86e3ee76ac2596ac9fb5abed299771a0badb41f820371b60c8bcf6006455e1668dd7432a914bf397786ccbb64c3aa90c4c2c3165a86a4c7473e9ee9945012f0cf79aa08b597b4c62436c0097cf6913a2aea09c0fa3341c6d30acefb75cdacf1c3f3257dcd1059ff0ebe10ca82ee9cb65e2fec66eb70ebac3eeda43e8a3263de3379078d5168499bd8fbee874491933b5c361f0c471946016580f489e3ef0b30ba3d90a7dd4f7a7df", 0xe4}, {&(0x7f0000002e80)="54fc82a7b49b4b10c98f752970a5141c0286b95dbbddb5d87692356ce7f144d6", 0x20}, {&(0x7f0000002ec0)="b720def6564c3ff3c9d79e93520857ac6cbc036fb0ab6789985bdb", 0x1b}, {&(0x7f0000002f00)="9952c7c811ad6b201093a350df3c2681f43e3c0dc9d042c30881768f39dc3b2350beebcea72ea68a6638fd1892410de3959efdf5fc940be56b9ef51192959e1495b370aeb67cedcce52eaa1388d3afb715721c2f83859587e1edceb0944a2dba1ecf7b5c27abe9d9829f6812220bf794aaf2ba3ccac51ffa757964a66048ab0f017b0ea2d1af4c40868cc5af398d5030eb6f6b85f1b5f72ed4860013", 0x9c}, {&(0x7f0000002fc0)="1ecc2066781e803f435268b4640ea3bcd3359df1f2f938fcda87469cc161b195923b37d80869073f7613dc52c74d24ed135e6f10890ec83a7c3b253f860339ae12259abba8ec255181b7e5ee82debca90a509f9d32c0dc47df0acab1a5b05325f77f8233fb56383d3263acf8dfd4604789f1558f7b69e8a211e7fee0d137c87756a3f2307813ae144050e1bae242d3e56b3a753a7eeec613596076da524ce41b07f985579e09e0647284bff0edc7bcb363ce62b4981a40d75acc4a7e508db2501168f229bb4e6f084eb442a4f385d770dbf6ce5f0240152196ff184c08c7", 0xde}], 0x8, 0x0, 0x0, 0x60000040}}, {{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000003140)="dd8b7a243e1b05439d6b947bb8b2231ba09921fb74fdec9a2320fb2d5d13bf0b98be9ecaf8d10e3b8c3c4940a0939547a00fa3b4cd6d5069f26d0a53173bc1e4107cb3cc3ea859cd1cfc2ad5f288d537f28af6e92d6046215138637ef23865fa680650a37d40c730f22483546094b0a1b8736ae109b4f9f264e8328ed7d460b6112a0b8bb18cf5b4430b98092ac679b23287116f86e654cafd0f01ae0d2deb25a675bcc8ab2619e99c86f29619744512524c294e78e69eed73b365425a0eba8bccfc1d1bcbb00e584cb5952bc6458561e8ed709a5e8cb3344450", 0xda}, {&(0x7f0000003240)="8c913310cf2ad1decfc0fac19ae19c0731e6a088cffc30df49d4b08ebf28118f0924f129de28a26cc2016bddc3d491981767e1bf0b368eac11cbbd590f87c3ff3d47aafc8d67d28fbf2aa6b8f39b585408fd988d3826b0ec03c8a3e67ef7850a66b290bd1a73491415195f6b6d7bad24c788016a9d416206cbf98ab88b68b0c6a880040c798b09e72e3f64ee729edc9d7377a84dd0bbb5b121fd9a668f16764e99918b28fe102b43bb4a8b2d9bc13bf8de13d7c9ed7dd2d9d57a0813b21b2118f300f6ed58c79772bf9466f097caa99a327f6ddc8c643ea767cf233a3b232556f6bb251d1dfdceffcc0c966cf6e66099934bed", 0xf3}, {&(0x7f0000003340)="fcef2cf79749a2451095afe89748e6ce41d2260309d836801d12a1a0d183f2890d14b1b42c3536d55f8bcd443f00ffa94e7dc365dca91417c71b706d9676e8cf166a2875643940786dabd8efc1ad0a8a871b5f61dc254b3942126f46955e3e325b57672f069d86539e986a2a9498a6852f78bafceace02126b9e1623f2c24ef3a0ac6b5e29c34e4e172739a1668ce5c1807e0c0e96f54c072062eac3209e2d74ff06d4c86384eaa0fcef5c7e1066eb9bb386c05d89d7afd0b609e3e1329bccb2dd9993253cf838efd976b9c223537dbabc7b32a396053d880eaaee2bf281e341f4f7b9e1e69f5316bde2002de7732c2fe17f6e98c2", 0xf5}, {&(0x7f0000003440)="84ba0797749988fe0683f8be707f9e84be34f9495d18fa04a689e5e03ba3e1ac70d60f611a1e5955542726f10119d9e58e4bfec647473fbb34332d9b50b228cdeed4d1e0978c2a4d22351cb0d98f0f5671d5d5fc399393039bc67881c21acf6b3eb23139d7af1da4e914cf93a62cca4a2ccea3a256658910102a1862f0a07e235acf7f0ab36394d664794c6a8aa9f613", 0x90}, {&(0x7f0000003500)="084dd1eaf16062add73bec98dfe72f8e1b6172c3746e9149c967a67c10065ea995bfae06ff03be317b81562042f405edf50c498d9c88b74f634308ce35da1cbc749e4c0f16c7f2b2f390a974e513a0feba2dc095dfc18774bd5b216ded4fb62af2376b0ded2923371ecf593e2fb33059a87ab82ee1e1027c09fe525d34de1d4b93c073a9b441c2cd83ec0c40d97d9c48d0134b95cddd7c03edf3eebf03c463d7054f73e5f1c813bc8ce198e3827fc0ca6ba2d4ab7e639c0351d58cd64d24e590f6fd", 0xc2}, {&(0x7f0000003600)="4cee41b31cd0766fef0421c3ecb2888ff3c7be10ca645fdf00ed9bc882be7d5f760f18d96bddade75dcd6f742549ee9625c2df44982775deaf2714bf0ab20de35428de29149ec0be2f12e3597e35a0005b88d812117b64058bc01e50c96bfc4a8fcdf326efb3dfbf2376a43ff3fde061576bee371807aabfdb5f30818db2cfbc1442b33931461a3ad3f140af36ed40afc33350dbb7def88c0c4d4165471282155dce960bb3a7298e4f39794a9064e00cf4fdec9aa3b9f93a1f0fae6a0f6653e268a15f06e1ae22143ec2ff7e2f8c25864dd5e70a7c25fb1a50365e6b2490065148101f9af23176cdadb38eca8732b5dae981f5a22b35aea064", 0xf9}, {&(0x7f0000003840)="dfcf048cfdd234c598931c5a072b7c048f85b3907c45adb232bb5534a4e94d7edbe7b62f19d8a7fab4ac11cfb60f4eb6e7dc13d1879c0119f244c23b335c93b6bc650523ca525d30f7c0f564b28007ab4b34ff2f1870d8b8b823f53294040f1dec11393bc7d40a9a2ce0e7a2b8bcfaf6ffe610e55e5f609953b9fe0b8ec618fba47d0ef18b70cddfd8962b048e5a69e3e52189333561ac3ee2285abcb095fa8d8020dea112700b8cc84fbde0bb9b68a3d7", 0xb1}, {&(0x7f0000003900)="a7a797feb130b82fecf9ce39f99664e3cb25796df1c4fcee3f0d05bbb49c02db9ab704a30eafe3fd31fa369dcb3ea2ed7900c977b3f10a0fba4ff18c2cb96fc7d9bdcd7abc601fc584d8a5c6369420defd209fc4fb696461d0be2969690eb1e58f79db3318f6c8fb7853bf3c773939f5534ac999be7395d2d1ecba61c971b493ab1cc69be873b0d5338e159d29cccddce54329e2b1d6c742fbfdc7368a67e368c0cda433bccd0d19494277055fd52d4c1e5923f5882f93e536b5c8fbcf75a12c0286e4d4ff8bc0e78f53847db57d4686f57639cc7600a05bd9fd3b3e44931433b36bb465074d74da2ba21a7495f204dd", 0xf0}], 0x8, &(0x7f0000007e40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [r3, r0, r2]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, r1, r2]}}, @rights={{0x28, 0x1, 0x1, [r1, r3, r3, r2, 0xffffffffffffffff, r2]}}], 0xf0, 0x44000}}, {{0x0, 0x0, &(0x7f00000082c0)=[{&(0x7f0000007f40)="ad2ce491ccf815b7c7de985ae94c7128c597bfa6e5eabf020ab7421d0497b3342b22030ac33ced997613b9af714810a380be0e7cd932c249d5d408de701236f5125216bde038046919ba7650156b70c6b9d011798766e27e8e224788a163d471e71a6af45ee9546d416d7184e3ecc6085bf299cf8e86073a8643e132190b26517309e542528e5964d316ccd8bbfc1e644a028b1d", 0x94}, {&(0x7f0000008000)="0ca1c796e9fe500b5d1499e323fd1d474bd6debccbd280312bc8c027a008ec0a0b95729cea64d1547f8be85a8fa2ac7734efa8e17530529b1645560d0c7981504ad1b11a80d8652bf518008d76b90f642e3c9691e47e0ab41a0b92c5937e968351c2eefd7327c34e1db6c2cc558faa15d967cc4daf018f6f3ab0c4b2a81dd4de7851401150692ebeaf37a9c1", 0x8c}, {&(0x7f00000080c0)="464b4e2bb24e1e53c506c544905c68a7dac49a93f262cebfea9399154ca0f9e98435a03044c6b72adb0dd457640838a37392fe0f9fa2ad804ce71d0551307e9acae5b67f956939ee1ae3650e90e49de943263613ca9ac0a30a80f9a512085f4d479343b315bd2955dfe0ba4a3dcf5454ba74ba4c3f2a82a72f", 0x79}, {&(0x7f0000008140)="a1491c259bddf87ea65d287eb10b56f6feaad2c05e92451ec5db0d46232528665c30112a51b654fb3734910eedb06514ab939b5e0db3354db2696e726f62549aafe93cd6729db0befce7f74de8dd05905eaaf972a4ff8f1d039f4d81757ed28075d0db65ba8a85e636230bb3a75c8fdd44fc5e7aae0705d16d33f6b07616fbb3f51f59e01289cb260e0602c7a5d30e00f2604dce5b4c1b10a25b77ecd68ad3333c5f6ab587301c6316de424e4bf68beefd1f27e1294e30296954aab8be883ab9e831", 0xc2}, {&(0x7f0000008240)="3b70966a89ef1ea8117fdcab361b3e9cd59df89d9a01ed234605691953208b82ba3aefc23be2d0468a3e0822eb3a22961d674b9286d0604af232d1081d0759bed42e319c5595f36ee951f23c29b0fea32a003f0747c0fcf09925c0", 0x5b}], 0x5, &(0x7f000000c780)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [r2, r1, r0]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r1]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r1, r3, r3]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r4}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r5}}}], 0x128, 0x10}}], 0x4, 0x40c0) fanotify_init(0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = memfd_secret(0x80000) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r7, 0x1e, &(0x7f0000000100)={r6}, 0x1) ftruncate(r7, 0x51a9497) r8 = userfaultfd(0x80001) set_mempolicy(0x3, &(0x7f0000000080)=0x1fe, 0x5) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000050a000/0x13000)=nil, 0x13000}, 0x1}) readv(r8, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/215, 0xd7}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x200480d5) sched_setscheduler(0x0, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x18, 0x31, 0x12f, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 4.221554997s ago: executing program 7 (id=6913): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) syz_emit_ethernet(0x44, &(0x7f0000000440)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x36, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x37}}, "000000008045"}}}}}, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) memfd_create(0x0, 0x0) r4 = epoll_create1(0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r6 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000001800)=""/200, 0xc8}], 0x1}) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000580)=[{}], 0x1, 0x8, 0x0, 0x0) read$msr(r0, &(0x7f0000000140)=""/140, 0x8c) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 4.220744927s ago: executing program 4 (id=6914): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0xfefe) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e2e000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 3.256963448s ago: executing program 0 (id=6915): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="5d5b18f9bf", 0x5, 0xfffffffffffffffb) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x0, 0x0, 0x0, 0x1, 0xd3, &(0x7f0000001380)=""/211, 0x100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x10, 0x8c}, 0x94) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080), &(0x7f0000000180)=0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000040)=@arm64_ccsidr={0x6020000000110009, 0x0}) 3.123202551s ago: executing program 4 (id=6916): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) semctl$SEM_STAT(0x0, 0x2, 0x12, &(0x7f00000000c0)=""/63) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0xe, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x2000000}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet(0x2, 0x802, 0x1) r4 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000007d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r4, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x439, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x18000}}, 0x20}}, 0x0) write(r3, &(0x7f0000000000)="08001800000020a3", 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000080), &(0x7f0000000200)=ANY=[@ANYBLOB="00fb5a0004444e630f7be0945cec871816f1d19af4c6fdd77662539541aa2a097a18255e49b4e769dc2b03aaa07c389b7166d0934ccb430d802756d15ac98c32effb8379b7e26de62f9e688c"], 0x5a, 0x2) r8 = dup(0xffffffffffffffff) ioctl$VHOST_SET_VRING_BASE(r8, 0x4008af12, 0x0) ioctl$BLKGETSIZE(r8, 0x1260, &(0x7f0000000440)) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x3beb947}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x10}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48801}, 0x0) read(r3, &(0x7f00000003c0)=""/14, 0xe) 2.410105599s ago: executing program 4 (id=6917): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x2200, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) 1.946716108s ago: executing program 6 (id=6918): recvfrom(0xffffffffffffffff, &(0x7f00000000c0)=""/254, 0xfe, 0x2, &(0x7f0000000000)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1}, [@null, @null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r0 = socket$isdn(0x22, 0x2, 0x3) socket$isdn(0x22, 0x2, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, 0x4000000) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') open_by_handle_at(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r1], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1a4}}, 0x20004000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, &(0x7f0000001140)=[{0x2, 0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/209, 0xd1}, {&(0x7f0000000440)=""/131, 0x83}], &(0x7f0000000380)=[0x17, 0x10, 0x7, 0x0, 0x2, 0x8, 0x7, 0xffffffff7fffffff, 0x4, 0x3]}, {0x4, 0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000500)=""/135, 0x87}, {0x0}, {&(0x7f0000000640)=""/129, 0x81}], &(0x7f00000002c0)=[0x5, 0x9, 0x3, 0x80000000]}, {0x8, 0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000700)=""/153, 0x99}, {&(0x7f00000007c0)=""/253, 0xfd}, {&(0x7f00000008c0)=""/174, 0xae}, {&(0x7f0000000980)=""/103, 0x67}, {&(0x7f0000000a00)=""/135, 0x87}, {&(0x7f0000000ac0)=""/136, 0x88}, {&(0x7f0000000b80)=""/254, 0xfe}, {&(0x7f0000000c80)=""/25, 0x19}], &(0x7f0000000d40)=[0x8, 0x5, 0x0, 0x6cac, 0xe553, 0x8]}, {0x7, 0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000d80)=""/146, 0x92}, {&(0x7f0000000e40)=""/190, 0xbe}, {&(0x7f0000000f00)=""/23, 0x17}, {&(0x7f000001aa40)=""/4096, 0x1000}, {&(0x7f0000000f40)=""/21, 0x15}, {&(0x7f000001ba40)=""/4096, 0x1000}, {&(0x7f0000000f80)=""/217, 0xd9}], 0x0}], 0x4) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000340), 0x4) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101000, 0x0) gettid() r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f00000011c0)={r5, 0x9, 0xce2, "30be2b32730e7ee421086ca5b2744f1c4ca68e46290e81309d0c5ea5c89aa5fe355f38397716f2faccac63ce5a90c7b1c589675305f7ad0a9ff3e605f0018a60bd99fe05eeccae5dfa5397079eeb2d480238f8951b6d88664b567bd5550f7532d3fa121b7599112fb9f1883692024aab3c16eaf9f3aed400bdb4bd29dd833d990c2741f7d401d59a697c7515f2702817d2758c0f5bc81f2a2f48601260fabe8973052b440b210b7698de46fd2cf8a085cba30a558a0ed19bbe165a596bc5ac198fe2cbd609929355a494bfaaec46c0b941d62214f2fea0e4ff489295cd31ac6384344d5d89c37b43392062827d02cd6a4492b891d81b"}) timer_create(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000080), 0x10) 1.263881269s ago: executing program 6 (id=6919): socket$nl_route(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20800000000, 0xb, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timerfd_settime(0xffffffffffffffff, 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) 1.105702054s ago: executing program 4 (id=6920): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000150001030ec00000fcdbdf250500"], 0x14}}, 0x0) 1.102526034s ago: executing program 7 (id=6921): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fanotify_init(0x200, 0x40000) fanotify_mark(r1, 0x1, 0x8000018, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r2 = fsopen(0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffffb, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) sched_setaffinity(0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r8 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) bind$netrom(r7, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 0s ago: executing program 4 (id=6922): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) semctl$SEM_STAT(0x0, 0x2, 0x12, &(0x7f00000000c0)=""/63) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f0000000380)={&(0x7f0000000500)=""/238, 0xee, 0x0, &(0x7f0000000300)=""/113, 0x71}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0xe, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x2000000}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet(0x2, 0x802, 0x1) r5 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000007d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r5, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x439, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x18000}}, 0x20}}, 0x0) connect$inet(r4, &(0x7f0000002780)={0x2, 0x4e22, @remote}, 0x10) write(r4, &(0x7f0000000000)="08001800000020a3", 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000080), &(0x7f0000000200)=ANY=[@ANYBLOB="00fb5a0004444e630f7be0945cec871816f1d19af4c6fdd77662539541aa2a097a18255e49b4e769dc2b03aaa07c389b7166d0934ccb430d802756d15ac98c32effb8379b7e26de62f9e688c"], 0x5a, 0x2) r9 = dup(0xffffffffffffffff) ioctl$VHOST_SET_VRING_BASE(r9, 0x4008af12, 0x0) ioctl$BLKGETSIZE(r9, 0x1260, &(0x7f0000000440)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x4, &(0x7f0000000100)=0x3b0, 0x4) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x3beb947}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x10}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48801}, 0x0) kernel console output (not intermixed with test programs): 2.6367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458819c799 code=0x7ffc0000 [ 1890.274712][T30272] binder: BINDER_SET_CONTEXT_MGR already set [ 1890.293201][T30272] binder: 30271:30272 ioctl 4018620d 200000000040 returned -16 [ 1890.308082][ T29] audit: type=1326 audit(1808.933:2377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30262 comm="syz.2.6367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f458819c799 code=0x7ffc0000 [ 1890.387281][ T29] audit: type=1326 audit(1808.933:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30262 comm="syz.2.6367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458819c799 code=0x7ffc0000 [ 1890.411569][ T29] audit: type=1326 audit(1808.933:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30262 comm="syz.2.6367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f458819c799 code=0x7ffc0000 [ 1890.881012][ T5808] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1891.055827][ T5808] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 1891.066067][ T5808] usb 2-1: config 0 has no interface number 0 [ 1891.077144][ T5808] usb 2-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 1891.094696][ T5808] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1891.096411][T30297] xt_hashlimit: size too large, truncated to 1048576 [ 1891.104781][ T5808] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1891.104844][ T5808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1891.204623][ T5808] usb 2-1: config 0 descriptor?? [ 1891.336832][ T5808] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/input/input101 [ 1891.464914][T30277] Invalid source name [ 1891.475291][ T5808] usb 2-1: USB disconnect, device number 94 [ 1891.898731][T30308] netlink: 'syz.2.6383': attribute type 49 has an invalid length. [ 1891.971614][T20073] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1892.261113][T20073] usb 5-1: Using ep0 maxpacket: 16 [ 1892.267874][T20073] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1892.292719][T20073] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1892.309875][T20073] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1892.334712][T20073] usb 5-1: Product: syz [ 1892.338902][T20073] usb 5-1: Manufacturer: syz [ 1892.360501][T20073] usb 5-1: SerialNumber: syz [ 1892.379052][T20073] usb 5-1: config 0 descriptor?? [ 1892.463294][T16802] wlan0: Trigger new scan to find an IBSS to join [ 1892.613105][T20073] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1892.613468][ T5808] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1893.018906][ T5808] usb 2-1: Using ep0 maxpacket: 16 [ 1893.026222][ T5808] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1893.040045][ T5808] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1893.049843][ T5808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1893.074493][ T5808] usb 2-1: Product: syz [ 1893.081955][ T5808] usb 2-1: Manufacturer: syz [ 1893.087984][ T5808] usb 2-1: SerialNumber: syz [ 1893.106891][ T5808] usb 2-1: config 0 descriptor?? [ 1893.176181][ T5808] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1893.628642][T16802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1893.949109][ T7728] usb 5-1: Failed to submit usb control message: -110 [ 1893.967636][ T7728] usb 5-1: unable to send the bmi data to the device: -110 [ 1893.999133][T20073] usb 5-1: USB disconnect, device number 30 [ 1894.012597][ T7728] usb 5-1: unable to get target info from device [ 1894.026546][ T7728] usb 5-1: could not get target info (-110) [ 1894.033405][ T7728] usb 5-1: could not probe fw (-110) [ 1894.270148][ T7716] usb 2-1: Failed to submit usb control message: -110 [ 1894.278143][ T7716] usb 2-1: unable to send the bmi data to the device: -110 [ 1894.289855][ T7716] usb 2-1: unable to get target info from device [ 1894.296514][ T7716] usb 2-1: could not get target info (-110) [ 1894.302721][ T7716] usb 2-1: could not probe fw (-110) [ 1894.487814][T20073] usb 2-1: USB disconnect, device number 95 [ 1894.598363][T30343] xt_socket: unknown flags 0x4 [ 1897.145363][ T2009] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1897.316394][ T2009] usb 2-1: Using ep0 maxpacket: 8 [ 1897.323238][ T2009] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1897.337819][ T2009] usb 2-1: config 179 has no interface number 0 [ 1897.344091][ T2009] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1897.357993][ T2009] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1897.370984][ T2009] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1897.382746][ T2009] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1897.414855][ T2009] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1897.452500][ T2009] usb 2-1: config 179 interface 65 has no altsetting 0 [ 1897.468283][ T2009] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1897.478162][ T2009] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1897.543369][ T2009] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input102 [ 1897.769668][T20073] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1897.836643][T30385] libceph: resolve 'c' (ret=-3): failed [ 1897.989786][T20073] usb 5-1: Using ep0 maxpacket: 16 [ 1897.998219][T20073] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1898.011162][T20073] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1898.020654][T20073] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1898.029104][T20073] usb 5-1: Product: syz [ 1898.128527][T20073] usb 5-1: Manufacturer: syz [ 1898.133511][T20073] usb 5-1: SerialNumber: syz [ 1898.145043][T20073] usb 5-1: config 0 descriptor?? [ 1898.253751][T20073] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1898.915536][ T7716] usb 5-1: Failed to submit usb control message: -71 [ 1898.923437][T20073] usb 5-1: USB disconnect, device number 31 [ 1898.931829][ T7716] usb 5-1: unable to send the bmi data to the device: -71 [ 1898.941191][ T7716] usb 5-1: unable to get target info from device [ 1898.948076][ T7716] usb 5-1: could not get target info (-71) [ 1898.954473][ T7716] usb 5-1: could not probe fw (-71) [ 1899.208137][T30401] 9p: Bad value for 'rfdno' [ 1899.462165][T30410] netlink: 'syz.0.6408': attribute type 4 has an invalid length. [ 1899.470042][T30410] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6408'. [ 1899.479930][T30410] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 1899.591555][ T2009] usb 2-1: USB disconnect, device number 96 [ 1900.205824][T30426] FAULT_INJECTION: forcing a failure. [ 1900.205824][T30426] name failslab, interval 1, probability 0, space 0, times 0 [ 1900.224336][T30426] CPU: 0 UID: 0 PID: 30426 Comm: syz.4.6416 Tainted: G L syzkaller #0 PREEMPT(full) [ 1900.224364][T30426] Tainted: [L]=SOFTLOCKUP [ 1900.224371][T30426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1900.224381][T30426] Call Trace: [ 1900.224387][T30426] [ 1900.224394][T30426] dump_stack_lvl+0x100/0x190 [ 1900.224425][T30426] should_fail_ex.cold+0x5/0xa [ 1900.224444][T30426] should_failslab+0xc2/0x120 [ 1900.224460][T30426] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1900.224481][T30426] ? __alloc_skb+0x140/0x710 [ 1900.224501][T30426] __alloc_skb+0x140/0x710 [ 1900.224514][T30426] ? __alloc_skb+0x5b7/0x710 [ 1900.224529][T30426] ? __pfx___alloc_skb+0x10/0x10 [ 1900.224543][T30426] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 1900.224567][T30426] netlink_alloc_large_skb+0x69/0x150 [ 1900.224589][T30426] netlink_sendmsg+0x680/0xda0 [ 1900.224611][T30426] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1900.224629][T30426] ? __pfx___might_fault+0x10/0x10 [ 1900.224660][T30426] ____sys_sendmsg+0x9e1/0xb70 [ 1900.224682][T30426] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1900.224703][T30426] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1900.224736][T30426] ___sys_sendmsg+0x190/0x1e0 [ 1900.224762][T30426] ? __pfx____sys_sendmsg+0x10/0x10 [ 1900.224810][T30426] __sys_sendmsg+0x170/0x220 [ 1900.224828][T30426] ? __pfx___sys_sendmsg+0x10/0x10 [ 1900.224859][T30426] do_syscall_64+0x106/0xf80 [ 1900.224879][T30426] ? clear_bhb_loop+0x40/0x90 [ 1900.224900][T30426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1900.224916][T30426] RIP: 0033:0x7f486a99c799 [ 1900.224932][T30426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1900.224950][T30426] RSP: 002b:00007f486b92c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1900.224965][T30426] RAX: ffffffffffffffda RBX: 00007f486ac15fa0 RCX: 00007f486a99c799 [ 1900.224976][T30426] RDX: 0000000020004080 RSI: 0000200000000200 RDI: 0000000000000004 [ 1900.224987][T30426] RBP: 00007f486b92c090 R08: 0000000000000000 R09: 0000000000000000 [ 1900.224997][T30426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1900.225006][T30426] R13: 00007f486ac16038 R14: 00007f486ac15fa0 R15: 00007ffdf6115098 [ 1900.225026][T30426] [ 1900.826178][T30436] syzkaller0: entered promiscuous mode [ 1900.926727][T30436] syzkaller0: entered allmulticast mode [ 1900.987906][T30436] tipc: Started in network mode [ 1900.998393][T30436] tipc: Node identity 06a3fe83756d, cluster identity 4711 [ 1901.030388][T30436] tipc: Enabled bearer , priority 0 [ 1901.045698][T30436] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6417'. [ 1901.074678][T30442] FAULT_INJECTION: forcing a failure. [ 1901.074678][T30442] name failslab, interval 1, probability 0, space 0, times 0 [ 1901.089031][T30435] tipc: Resetting bearer [ 1901.101720][T30442] CPU: 1 UID: 0 PID: 30442 Comm: syz.1.6418 Tainted: G L syzkaller #0 PREEMPT(full) [ 1901.101751][T30442] Tainted: [L]=SOFTLOCKUP [ 1901.101758][T30442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1901.101769][T30442] Call Trace: [ 1901.101775][T30442] [ 1901.101783][T30442] dump_stack_lvl+0x100/0x190 [ 1901.101816][T30442] should_fail_ex.cold+0x5/0xa [ 1901.101841][T30442] should_failslab+0xc2/0x120 [ 1901.101860][T30442] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1901.101887][T30442] ? __alloc_skb+0x140/0x710 [ 1901.101911][T30442] __alloc_skb+0x140/0x710 [ 1901.101928][T30442] ? __alloc_skb+0x5b7/0x710 [ 1901.101945][T30442] ? __pfx___alloc_skb+0x10/0x10 [ 1901.101970][T30442] netlink_ack+0x117/0xb80 [ 1901.102001][T30442] netlink_rcv_skb+0x333/0x420 [ 1901.102024][T30442] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1901.102047][T30442] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1901.102078][T30442] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1901.102104][T30442] netlink_unicast+0x5aa/0x870 [ 1901.102130][T30442] ? __pfx_netlink_unicast+0x10/0x10 [ 1901.102162][T30442] netlink_sendmsg+0x8b0/0xda0 [ 1901.102189][T30442] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1901.102209][T30442] ? __pfx___might_fault+0x10/0x10 [ 1901.102243][T30442] ____sys_sendmsg+0x9e1/0xb70 [ 1901.102268][T30442] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1901.102293][T30442] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1901.102328][T30442] ___sys_sendmsg+0x190/0x1e0 [ 1901.102356][T30442] ? __pfx____sys_sendmsg+0x10/0x10 [ 1901.102411][T30442] __sys_sendmsg+0x170/0x220 [ 1901.102432][T30442] ? __pfx___sys_sendmsg+0x10/0x10 [ 1901.102467][T30442] do_syscall_64+0x106/0xf80 [ 1901.102488][T30442] ? clear_bhb_loop+0x40/0x90 [ 1901.102511][T30442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1901.102530][T30442] RIP: 0033:0x7fa20059c799 [ 1901.102546][T30442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1901.102564][T30442] RSP: 002b:00007fa20143d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1901.102582][T30442] RAX: ffffffffffffffda RBX: 00007fa200816090 RCX: 00007fa20059c799 [ 1901.102595][T30442] RDX: 0000000020040110 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1901.102606][T30442] RBP: 00007fa20143d090 R08: 0000000000000000 R09: 0000000000000000 [ 1901.102623][T30442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1901.102633][T30442] R13: 00007fa200816128 R14: 00007fa200816090 R15: 00007ffffdaeba08 [ 1901.102658][T30442] [ 1901.433746][T30435] tipc: Disabling bearer [ 1901.574125][T30452] netlink: 184 bytes leftover after parsing attributes in process `syz.1.6419'. [ 1901.795873][T11181] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1901.924064][ T5808] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1901.956123][T11181] usb 3-1: Using ep0 maxpacket: 32 [ 1901.963130][T11181] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1901.982045][T11181] usb 3-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40 [ 1901.991128][T11181] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1901.999498][T11181] usb 3-1: Product: syz [ 1902.006477][T11181] usb 3-1: Manufacturer: syz [ 1902.014736][T11181] usb 3-1: SerialNumber: syz [ 1902.084585][ T5808] usb 5-1: Using ep0 maxpacket: 16 [ 1902.094065][ T5808] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1902.112851][ T5808] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1902.122376][ T5808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1902.130736][ T5808] usb 5-1: Product: syz [ 1902.135085][ T5808] usb 5-1: Manufacturer: syz [ 1902.140341][ T5808] usb 5-1: SerialNumber: syz [ 1902.146935][ T5808] usb 5-1: config 0 descriptor?? [ 1902.160179][ T5808] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1902.251859][T11181] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1902.258959][T11181] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1902.287314][T11181] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1902.302421][T11181] usb 3-1: USB disconnect, device number 54 [ 1902.322563][T27984] udevd[27984]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1902.677993][T11181] usb 5-1: USB disconnect, device number 32 [ 1902.684718][ T7714] usb 5-1: Failed to submit usb control message: -71 [ 1902.691863][ T7714] usb 5-1: unable to send the bmi data to the device: -71 [ 1902.721145][ T7714] usb 5-1: unable to get target info from device [ 1902.727993][ T7714] usb 5-1: could not get target info (-71) [ 1902.733822][ T7714] usb 5-1: could not probe fw (-71) [ 1903.294529][T30478] netlink: 'syz.0.6429': attribute type 49 has an invalid length. [ 1904.004258][T25291] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1904.015994][T25291] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1904.036113][T25291] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1904.048536][T25291] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1904.056212][T25291] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1904.067916][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 1904.067933][ T29] audit: type=1400 audit(1822.393:2422): avc: denied { view } for pid=30490 comm="syz.0.6435" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1904.296133][T30500] xt_hashlimit: size too large, truncated to 1048576 [ 1905.010603][T30491] chnl_net:caif_netlink_parms(): no params data found [ 1905.130733][T30512] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1905.185956][T30491] bridge0: port 1(bridge_slave_0) entered blocking state [ 1905.200540][T30491] bridge0: port 1(bridge_slave_0) entered disabled state [ 1905.214548][T30491] bridge_slave_0: entered allmulticast mode [ 1905.223564][T30491] bridge_slave_0: entered promiscuous mode [ 1905.233830][T30491] bridge0: port 2(bridge_slave_1) entered blocking state [ 1905.292803][T30491] bridge0: port 2(bridge_slave_1) entered disabled state [ 1905.451965][ T9811] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1905.488610][T30491] bridge_slave_1: entered allmulticast mode [ 1905.545262][T30491] bridge_slave_1: entered promiscuous mode [ 1905.591859][T30491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1905.608859][T30491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1905.623275][ T9811] usb 1-1: Using ep0 maxpacket: 16 [ 1905.632678][ T9811] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1905.659719][T30491] team0: Port device team_slave_0 added [ 1905.661002][ T9811] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1905.667920][T30491] team0: Port device team_slave_1 added [ 1905.675469][ T9811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1905.691789][ T9811] usb 1-1: Product: syz [ 1905.696284][ T9811] usb 1-1: Manufacturer: syz [ 1905.711804][ T9811] usb 1-1: SerialNumber: syz [ 1905.754488][T30491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1905.761053][ T9811] usb 1-1: config 0 descriptor?? [ 1905.761455][T30491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1905.829530][T30491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1905.837060][ T9811] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1905.842334][T30491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1905.856725][T30491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1905.882892][T30491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1905.928709][T30491] hsr_slave_0: entered promiscuous mode [ 1905.936065][T30491] hsr_slave_1: entered promiscuous mode [ 1905.942455][T30491] debugfs: 'hsr0' already exists in 'hsr' [ 1905.948961][T30491] Cannot create hsr debugfs directory [ 1906.247403][T25291] Bluetooth: hci0: command tx timeout [ 1906.332634][ T78] usb 1-1: Failed to submit usb control message: -71 [ 1906.341053][ T9811] usb 1-1: USB disconnect, device number 101 [ 1906.348733][ T78] usb 1-1: unable to send the bmi data to the device: -71 [ 1906.356368][ T78] usb 1-1: unable to get target info from device [ 1906.362865][ T78] usb 1-1: could not get target info (-71) [ 1906.368717][ T78] usb 1-1: could not probe fw (-71) [ 1906.611194][T30491] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1906.631008][T30491] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1906.648944][T30491] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1906.666253][T30491] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1906.686015][T20075] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1906.697749][T20075] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1906.707546][T20075] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1906.716563][T20075] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1906.724208][T20075] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1906.864818][T30552] kvm: user requested TSC rate below hardware speed [ 1906.990439][T30491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1907.008578][T30491] 8021q: adding VLAN 0 to HW filter on device team0 [ 1907.029995][ T974] bridge0: port 1(bridge_slave_0) entered blocking state [ 1907.037167][ T974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1907.055884][T19106] bridge0: port 2(bridge_slave_1) entered blocking state [ 1907.063061][T19106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1907.535894][T30543] chnl_net:caif_netlink_parms(): no params data found [ 1907.754337][T30543] bridge0: port 1(bridge_slave_0) entered blocking state [ 1907.761763][T30543] bridge0: port 1(bridge_slave_0) entered disabled state [ 1907.769856][T30543] bridge_slave_0: entered allmulticast mode [ 1907.778487][T30543] bridge_slave_0: entered promiscuous mode [ 1907.788935][T30543] bridge0: port 2(bridge_slave_1) entered blocking state [ 1907.797491][T30543] bridge0: port 2(bridge_slave_1) entered disabled state [ 1907.809590][T30543] bridge_slave_1: entered allmulticast mode [ 1907.818425][T30543] bridge_slave_1: entered promiscuous mode [ 1907.874677][T30543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1907.916442][T30543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1908.030171][T30572] binder: BINDER_SET_CONTEXT_MGR already set [ 1908.036237][T30572] binder: 30570:30572 ioctl 4018620d 200000000040 returned -16 [ 1908.073446][T30543] team0: Port device team_slave_0 added [ 1908.106775][T30543] team0: Port device team_slave_1 added [ 1908.175517][T30543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1908.183484][T30543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1908.211395][T30543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1908.338423][T30580] netlink: 'syz.0.6452': attribute type 4 has an invalid length. [ 1908.346883][T30580] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6452'. [ 1908.356041][ T5808] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1908.364029][T30580] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 1908.507612][T25291] Bluetooth: hci0: command tx timeout [ 1908.543635][T30543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1908.550656][T30543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1908.618286][T30543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1908.631486][ T5808] usb 5-1: Using ep0 maxpacket: 32 [ 1908.642674][ T5808] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1908.654246][ T5808] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 1908.656580][T30491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1908.685627][ T5808] usb 5-1: New USB device found, idVendor=17cc, idProduct=0d8d, bcdDevice= 0.40 [ 1908.883608][ T5808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1908.892362][ T5808] usb 5-1: Product: syz [ 1908.932983][T25291] Bluetooth: hci6: command tx timeout [ 1908.967076][ T5808] usb 5-1: Manufacturer: syz [ 1908.990725][ T5808] usb 5-1: SerialNumber: syz [ 1909.046655][T30543] hsr_slave_0: entered promiscuous mode [ 1909.053538][T30543] hsr_slave_1: entered promiscuous mode [ 1909.061541][T30543] debugfs: 'hsr0' already exists in 'hsr' [ 1909.067792][T30543] Cannot create hsr debugfs directory [ 1909.281050][ T5808] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1909.304019][ T5808] usb 5-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 1909.340427][ T5808] usb 5-1: 2:1: All rates were zero [ 1909.455363][ T5808] usb 5-1: USB disconnect, device number 33 [ 1909.584784][T30543] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1909.611832][T30543] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1909.629576][T30543] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1909.648769][T30543] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1909.669795][T30491] veth0_vlan: entered promiscuous mode [ 1909.703905][T30491] veth1_vlan: entered promiscuous mode [ 1909.791385][T30491] veth0_macvtap: entered promiscuous mode [ 1909.806593][T30491] veth1_macvtap: entered promiscuous mode [ 1909.839011][T30543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1909.849831][T30491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1909.869695][T30491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1909.898247][ T78] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1909.930650][T30543] 8021q: adding VLAN 0 to HW filter on device team0 [ 1909.943379][ T78] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1909.957771][ T78] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1909.968090][ T78] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1909.977833][T30610] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1910.003007][ T7716] bridge0: port 1(bridge_slave_0) entered blocking state [ 1910.010156][ T7716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1910.046488][ T7716] bridge0: port 2(bridge_slave_1) entered blocking state [ 1910.053652][ T7716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1910.555616][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1910.568114][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1910.666304][ T7716] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1910.676207][T30621] binder: BINDER_SET_CONTEXT_MGR already set [ 1910.681181][ T7716] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1910.685892][T30621] binder: 30620:30621 ioctl 4018620d 200000000040 returned -16 [ 1910.703293][T25291] Bluetooth: hci0: command tx timeout [ 1911.025126][T30543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1911.118843][T25291] Bluetooth: hci6: command tx timeout [ 1911.964086][T30543] veth0_vlan: entered promiscuous mode [ 1911.974669][T30654] libceph: resolve 'c' (ret=-3): failed [ 1912.010188][T30543] veth1_vlan: entered promiscuous mode [ 1912.055558][T30543] veth0_macvtap: entered promiscuous mode [ 1912.065640][T30543] veth1_macvtap: entered promiscuous mode [ 1912.442033][T30661] syz.0.6467 uses old SIOCAX25GETINFO [ 1912.920167][ T29] audit: type=1326 audit(1830.204:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30655 comm="syz.0.6467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3df9c799 code=0x7ffc0000 [ 1912.920183][T25291] Bluetooth: hci0: command tx timeout [ 1913.021248][ T29] audit: type=1326 audit(1830.213:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30655 comm="syz.0.6467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f2d3df9c799 code=0x7ffc0000 [ 1913.058577][ T29] audit: type=1326 audit(1830.213:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30655 comm="syz.0.6467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3df9c799 code=0x7ffc0000 [ 1913.081718][ T29] audit: type=1326 audit(1830.213:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30655 comm="syz.0.6467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f2d3df9c799 code=0x7ffc0000 [ 1913.082889][T30543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1913.105354][ T29] audit: type=1326 audit(1830.213:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30655 comm="syz.0.6467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3df9c799 code=0x7ffc0000 [ 1913.105404][ T29] audit: type=1326 audit(1830.213:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30655 comm="syz.0.6467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f2d3df9c799 code=0x7ffc0000 [ 1913.105441][ T29] audit: type=1400 audit(1830.213:2429): avc: denied { write } for pid=30655 comm="syz.0.6467" path="socket:[155721]" dev="sockfs" ino=155721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1913.105479][ T29] audit: type=1326 audit(1830.213:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30655 comm="syz.0.6467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3df9c799 code=0x7ffc0000 [ 1913.105518][ T29] audit: type=1326 audit(1830.213:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30655 comm="syz.0.6467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2d3df9c799 code=0x7ffc0000 [ 1913.105556][ T29] audit: type=1326 audit(1830.223:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30655 comm="syz.0.6467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3df9c799 code=0x7ffc0000 [ 1913.363225][T25291] Bluetooth: hci6: command tx timeout [ 1913.399471][T30664] binder: BINDER_SET_CONTEXT_MGR already set [ 1913.438492][T30664] binder: 30663:30664 ioctl 4018620d 200000000040 returned -16 [ 1913.621966][T30543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1913.851477][ T78] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1913.919124][ T78] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1913.934641][T30669] FAULT_INJECTION: forcing a failure. [ 1913.934641][T30669] name failslab, interval 1, probability 0, space 0, times 0 [ 1913.964064][ T78] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1913.974857][ T78] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1913.983123][ T5808] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1914.026108][T30669] CPU: 0 UID: 0 PID: 30669 Comm: syz.0.6470 Tainted: G L syzkaller #0 PREEMPT(full) [ 1914.026138][T30669] Tainted: [L]=SOFTLOCKUP [ 1914.026144][T30669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1914.026154][T30669] Call Trace: [ 1914.026161][T30669] [ 1914.026168][T30669] dump_stack_lvl+0x100/0x190 [ 1914.026197][T30669] should_fail_ex.cold+0x5/0xa [ 1914.026215][T30669] should_failslab+0xc2/0x120 [ 1914.026233][T30669] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1914.026254][T30669] ? binder_get_thread+0x201/0x850 [ 1914.026277][T30669] binder_get_thread+0x201/0x850 [ 1914.026300][T30669] binder_ioctl+0x26f/0x7610 [ 1914.026328][T30669] ? tomoyo_path_number_perm+0x188/0x580 [ 1914.026356][T30669] ? __pfx_binder_ioctl+0x10/0x10 [ 1914.026390][T30669] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1914.026417][T30669] ? do_vfs_ioctl+0x226/0x13e0 [ 1914.026443][T30669] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1914.026465][T30669] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1914.026493][T30669] ? __fget_files+0x215/0x3d0 [ 1914.026511][T30669] ? hook_file_ioctl_common+0x146/0x410 [ 1914.026543][T30669] ? selinux_file_ioctl+0x139/0x290 [ 1914.026564][T30669] ? selinux_file_ioctl+0xb4/0x290 [ 1914.026587][T30669] ? __pfx_binder_ioctl+0x10/0x10 [ 1914.026610][T30669] __x64_sys_ioctl+0x18e/0x210 [ 1914.026638][T30669] do_syscall_64+0x106/0xf80 [ 1914.026658][T30669] ? clear_bhb_loop+0x40/0x90 [ 1914.026680][T30669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1914.026699][T30669] RIP: 0033:0x7f2d3df9c799 [ 1914.026716][T30669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1914.026732][T30669] RSP: 002b:00007f2d3ee4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1914.026750][T30669] RAX: ffffffffffffffda RBX: 00007f2d3e215fa0 RCX: 00007f2d3df9c799 [ 1914.026761][T30669] RDX: 0000200000000240 RSI: 00000000c018620b RDI: 0000000000000003 [ 1914.026772][T30669] RBP: 00007f2d3ee4f090 R08: 0000000000000000 R09: 0000000000000000 [ 1914.026782][T30669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1914.026792][T30669] R13: 00007f2d3e216038 R14: 00007f2d3e215fa0 R15: 00007ffd4d199058 [ 1914.026816][T30669] [ 1914.026823][T30669] binder: 30668:30669 ioctl c018620b 200000000240 returned -12 [ 1914.301136][ T5808] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1914.344701][ T5808] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1914.372731][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1914.379220][ T5808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1914.396510][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1914.404185][ T5808] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1914.425638][ T5808] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1914.437835][ T5808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1914.446490][ T5808] usb 2-1: Product: syz [ 1914.461503][ T5808] usb 2-1: Manufacturer: syz [ 1914.481718][ T974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1914.482091][ T5808] usb 2-1: SerialNumber: syz [ 1914.489765][ T974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1914.522410][ T5808] usb 2-1: config 0 descriptor?? [ 1914.531578][ T5808] garmin_gps 2-1:0.0: Garmin GPS usb/tty converter detected [ 1914.571512][ T5808] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 1914.599588][ T5808] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 1914.711085][ T9811] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1914.867392][T30681] xt_hashlimit: size too large, truncated to 1048576 [ 1914.895089][T30680] random: crng reseeded on system resumption [ 1915.031017][ T9811] usb 7-1: device descriptor read/64, error -71 [ 1915.397470][T30667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1915.406156][T30667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1915.871667][T11181] usb 2-1: USB disconnect, device number 97 [ 1915.874656][T25291] Bluetooth: hci6: command tx timeout [ 1915.879317][T11181] garmin_gps 2-1:0.0: device disconnected [ 1915.939438][ T9811] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1916.115508][ T9811] usb 7-1: device descriptor read/64, error -71 [ 1916.250484][ T9811] usb usb7-port1: attempt power cycle [ 1916.402631][T30701] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 1916.409157][T30701] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1916.461383][T30701] vhci_hcd vhci_hcd.0: Device attached [ 1916.477816][T30702] vhci_hcd: connection closed [ 1916.478028][ T7728] vhci_hcd vhci_hcd.4: stop threads [ 1916.499113][ T7728] vhci_hcd vhci_hcd.4: release socket [ 1916.517009][ T7728] vhci_hcd vhci_hcd.4: disconnect device [ 1916.575897][T30705] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1916.635100][ T9811] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1916.763402][ T9811] usb 7-1: device descriptor read/8, error -71 [ 1917.019855][ T9811] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1917.320580][ T9811] usb 7-1: device descriptor read/8, error -71 [ 1917.427659][T30713] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1917.436945][T30715] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6482'. [ 1917.446105][T30713] block nbd0: shutting down sockets [ 1917.465087][ T9811] usb usb7-port1: unable to enumerate USB device [ 1917.509101][T30715] syzkaller1: entered promiscuous mode [ 1917.528050][T30715] syzkaller1: entered allmulticast mode [ 1918.520096][T30731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6487'. [ 1918.615937][T30734] --map-set only usable from mangle table [ 1918.858141][ T5808] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1919.296318][ T9811] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 1919.426825][ T5808] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1919.446046][ T5808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1919.454189][ T5808] usb 2-1: Product: syz [ 1919.464313][ T5808] usb 2-1: Manufacturer: syz [ 1919.476320][ T5808] usb 2-1: SerialNumber: syz [ 1919.480891][ T9811] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1919.493534][ T5808] usb 2-1: config 0 descriptor?? [ 1919.545083][ T9811] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1919.905303][ T9811] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1919.925374][ T9811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1919.965914][ T9811] usb 1-1: config 0 descriptor?? [ 1920.009768][T30736] netlink: 'syz.6.6489': attribute type 3 has an invalid length. [ 1920.741036][T25803] usb 1-1: USB disconnect, device number 102 [ 1921.330541][T30776] netlink: 'syz.6.6496': attribute type 8 has an invalid length. [ 1921.357244][T30776] loop3: detected capacity change from 0 to 7 [ 1921.377142][T30776] Dev loop3: unable to read RDB block 7 [ 1921.402493][T30776] loop3: unable to read partition table [ 1921.408416][T30776] loop3: partition table beyond EOD, truncated [ 1921.431454][T30776] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1921.496006][ T5808] usb 2-1: Firmware version (0.0) predates our first public release. [ 1921.525430][ T5808] usb 2-1: Please update to version 0.2 or newer [ 1921.655206][ T5808] usb 2-1: USB disconnect, device number 98 [ 1921.780888][T30799] netlink: 'syz.6.6500': attribute type 49 has an invalid length. [ 1923.640148][ T5808] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1923.666306][T30830] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6506'. [ 1923.821927][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 1923.821943][ T29] audit: type=1400 audit(1840.802:2454): avc: denied { name_connect } for pid=30816 comm="syz.6.6506" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1923.872131][ T5808] usb 8-1: Using ep0 maxpacket: 32 [ 1923.885860][ T5808] usb 8-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 1923.899771][T30827] netlink: set zone limit has 4 unknown bytes [ 1923.901582][ T5808] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1923.915131][ T5808] usb 8-1: Product: syz [ 1923.919439][ T5808] usb 8-1: Manufacturer: syz [ 1923.924514][ T5808] usb 8-1: SerialNumber: syz [ 1923.951200][ T5808] usb 8-1: config 0 descriptor?? [ 1923.968132][T25803] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1924.128650][T25803] usb 1-1: Using ep0 maxpacket: 16 [ 1924.135832][T25803] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1924.158234][T25803] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1924.170072][T25803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1924.179267][T25803] usb 1-1: Product: syz [ 1924.184047][T25803] usb 1-1: Manufacturer: syz [ 1924.188747][T25803] usb 1-1: SerialNumber: syz [ 1924.209609][T25803] usb 1-1: config 0 descriptor?? [ 1924.226579][T25803] sr9700 1-1:0.0: probe with driver sr9700 failed with error -22 [ 1924.246448][ T5808] usb 8-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 1924.352945][T21143] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1924.741069][T21143] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1924.756579][T21143] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1924.779228][T21143] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1924.790290][T21143] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1924.828594][T21143] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1924.850000][T21143] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1924.861004][T21143] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1924.872132][T21143] usb 5-1: Product: syz [ 1924.892451][T21143] usb 5-1: Manufacturer: syz [ 1924.913530][T21143] cdc_wdm 5-1:1.0: skipping garbage [ 1924.918786][T21143] cdc_wdm 5-1:1.0: skipping garbage [ 1924.933652][T21143] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1924.949672][T21143] cdc_wdm 5-1:1.0: Unknown control protocol [ 1925.039927][ T5808] usb 8-1: reset high-speed USB device number 2 using dummy_hcd [ 1925.088666][T21143] usb 1-1: USB disconnect, device number 103 [ 1925.427997][T30857] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1925.612845][ T5808] usb 8-1: [UEAGLE-ATM] interface 1 not found [ 1925.624253][ T5808] ueagle-atm 8-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1925.748857][T30860] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6509'. [ 1925.824178][ T29] audit: type=1400 audit(1842.654:2455): avc: denied { append } for pid=30836 comm="syz.4.6509" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1926.275172][ T2009] usb 8-1: USB disconnect, device number 2 [ 1927.678674][T21143] usb 5-1: USB disconnect, device number 34 [ 1928.056387][T20073] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1928.415377][T20073] usb 8-1: Using ep0 maxpacket: 32 [ 1928.443099][T20073] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 1928.457125][T20073] usb 8-1: config 0 has no interface number 0 [ 1928.479783][T20073] usb 8-1: config 0 interface 184 has no altsetting 0 [ 1928.489558][T20073] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1928.501181][T20073] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1928.509221][T20073] usb 8-1: Product: syz [ 1928.513846][T20073] usb 8-1: Manufacturer: syz [ 1928.528930][T20073] usb 8-1: SerialNumber: syz [ 1928.544137][T20073] usb 8-1: config 0 descriptor?? [ 1928.583451][T30878] netlink: 'syz.1.6519': attribute type 21 has an invalid length. [ 1928.592953][T30878] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6519'. [ 1928.607558][T30878] netlink: 'syz.1.6519': attribute type 21 has an invalid length. [ 1928.616516][T30878] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6519'. [ 1928.639972][T30878] input: syz0 as /devices/virtual/input/input104 [ 1928.684773][T30878] geneve3: entered promiscuous mode [ 1928.696744][T30878] geneve3: entered allmulticast mode [ 1928.703791][ T7714] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1928.722886][ T7714] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1928.731961][ T9811] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1928.770471][ T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1928.789629][ T7714] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1928.852108][T30870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1928.891547][T30870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1928.973069][T30885] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1929.087863][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1929.107525][ T9811] usb 5-1: Using ep0 maxpacket: 32 [ 1929.179202][ T9811] usb 5-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 1929.258111][ T9811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1929.276388][ T9811] usb 5-1: Product: syz [ 1929.286177][ T9811] usb 5-1: Manufacturer: syz [ 1929.296714][ T9811] usb 5-1: SerialNumber: syz [ 1929.310854][ T9811] usb 5-1: config 0 descriptor?? [ 1930.584927][ T9811] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 1930.640479][T30870] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6515'. [ 1930.719548][T20073] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1930.731816][T20073] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1930.742689][T20073] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1930.753296][T20073] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71 [ 1930.765416][T20073] usb 8-1: USB disconnect, device number 3 [ 1931.088860][T21143] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1931.216568][ T9811] usb 5-1: reset high-speed USB device number 35 using dummy_hcd [ 1931.275950][T21143] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1931.319865][T21143] usb 1-1: config 0 has no interfaces? [ 1931.350804][T21143] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1931.363165][T21143] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1931.403446][T21143] usb 1-1: config 0 descriptor?? [ 1931.568677][T30910] netlink: set zone limit has 4 unknown bytes [ 1931.571492][T30911] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1931.723067][T30916] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.6529'. [ 1931.795820][ T9811] usb 5-1: [UEAGLE-ATM] interface 1 not found [ 1931.801954][ T9811] ueagle-atm 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1931.992140][T30925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1932.001259][T30925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1932.044843][T21143] usb 5-1: USB disconnect, device number 35 [ 1932.093174][ T5808] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1932.278096][ T5808] usb 7-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 1932.288487][ T5808] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1932.305636][ T5808] usb 7-1: Product: syz [ 1932.319485][ T5808] usb 7-1: Manufacturer: syz [ 1932.324923][ T5808] usb 7-1: SerialNumber: syz [ 1932.476535][T21143] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 1932.501519][ T5808] usb 7-1: config 0 descriptor?? [ 1932.661845][T21143] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1932.672301][T21143] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1932.718761][T21143] usb 8-1: config 0 descriptor?? [ 1932.724945][ T5808] peak_usb 7-1:0.0: PEAK-System PCAN-USB FD v0 fw v0.0.0 (1 channels) [ 1932.820456][ T2009] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1932.947780][ T5808] peak_usb 7-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 1932.958688][T21143] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1932.967168][ T5808] peak_usb 7-1:0.0: unable to tell PCAN-USB FD driver is loaded (err -71) [ 1932.991030][ T2009] usb 2-1: Using ep0 maxpacket: 32 [ 1932.991351][T30127] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1933.007676][ T2009] usb 2-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 1933.018173][ T5808] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -71 [ 1933.026631][ T2009] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1933.041268][ T2009] usb 2-1: Product: syz [ 1933.045964][ T5808] usb 7-1: USB disconnect, device number 6 [ 1933.055263][ T2009] usb 2-1: Manufacturer: syz [ 1933.066761][ T2009] usb 2-1: SerialNumber: syz [ 1933.082340][ T2009] usb 2-1: config 0 descriptor?? [ 1933.162154][T30127] usb 5-1: Using ep0 maxpacket: 32 [ 1933.170415][T30127] usb 5-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 1933.180009][T30127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1933.189206][T30127] usb 5-1: Product: syz [ 1933.192029][T21143] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 2 [ 1933.193844][T30127] usb 5-1: Manufacturer: syz [ 1933.207069][T21143] [drm] Initialized udl on minor 2 [ 1933.212341][T30127] usb 5-1: SerialNumber: syz [ 1933.226154][T30127] usb 5-1: config 0 descriptor?? [ 1933.311794][ T2009] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 1933.402290][T21143] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1933.411216][T21143] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1933.422408][ T5808] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1933.438230][ T5808] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1933.450770][T21143] usb 8-1: USB disconnect, device number 4 [ 1933.465471][T30127] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 1933.963863][T30127] usb 5-1: reset high-speed USB device number 36 using dummy_hcd [ 1934.006617][ T2009] usb 2-1: reset high-speed USB device number 99 using dummy_hcd [ 1934.057532][T20073] usb 1-1: USB disconnect, device number 104 [ 1934.078135][ T9811] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1934.242044][ T9811] usb 7-1: Using ep0 maxpacket: 16 [ 1934.322368][ T9811] usb 7-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1934.339483][ T9811] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1934.348516][ T9811] usb 7-1: Product: syz [ 1934.355535][ T9811] usb 7-1: Manufacturer: syz [ 1934.362035][ T9811] usb 7-1: SerialNumber: syz [ 1934.396676][ T9811] usb 7-1: config 0 descriptor?? [ 1934.481691][ T2009] usb 2-1: [UEAGLE-ATM] interface 1 not found [ 1934.481972][T30127] usb 5-1: [UEAGLE-ATM] interface 1 not found [ 1934.494671][ T2009] ueagle-atm 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1934.505241][ T9811] visor 7-1:0.0: Sony Clie 3.5 converter detected [ 1934.506207][ T5808] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1934.521410][T30127] ueagle-atm 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1934.717566][T30127] usb 2-1: USB disconnect, device number 99 [ 1934.722159][T25291] Bluetooth: hci2: unexpected event for opcode 0x200f [ 1934.734845][ T5808] usb 8-1: Using ep0 maxpacket: 32 [ 1934.743263][ T5808] usb 8-1: config 9 has an invalid interface number: 221 but max is 1 [ 1934.765675][ T9811] usb 7-1: clie_3_5_startup: get interface number failed: -71 [ 1934.766403][ T5808] usb 8-1: config 9 has an invalid interface number: 221 but max is 1 [ 1934.801541][ T9811] visor 7-1:0.0: probe with driver visor failed with error -71 [ 1935.195547][ T9811] usb 7-1: USB disconnect, device number 7 [ 1935.266882][ T5808] usb 8-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 1935.276539][ T5808] usb 8-1: config 9 has no interface number 0 [ 1935.285493][ T5808] usb 8-1: config 9 interface 221 altsetting 64 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1935.296900][ T5808] usb 8-1: config 9 interface 221 altsetting 64 endpoint 0xA has invalid wMaxPacketSize 0 [ 1935.307451][T11181] usb 5-1: USB disconnect, device number 36 [ 1935.313563][ T5808] usb 8-1: config 9 interface 221 has no altsetting 0 [ 1935.315910][ T5808] usb 8-1: New USB device found, idVendor=0582, idProduct=74ce, bcdDevice=ba.38 [ 1935.334548][ T5808] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1935.343552][ T5808] usb 8-1: Product: syz [ 1935.347857][ T5808] usb 8-1: Manufacturer: syz [ 1935.352529][ T5808] usb 8-1: SerialNumber: syz [ 1935.442356][T30952] netlink: set zone limit has 4 unknown bytes [ 1935.636696][T30956] xt_hashlimit: size too large, truncated to 1048576 [ 1935.888768][T30938] netlink: 'syz.7.6539': attribute type 1 has an invalid length. [ 1935.932751][T30938] netlink: 'syz.7.6539': attribute type 2 has an invalid length. [ 1935.940545][T30938] netlink: 'syz.7.6539': attribute type 2 has an invalid length. [ 1936.199183][ T5808] usb 8-1: USB disconnect, device number 5 [ 1936.289952][T30902] udevd[30902]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:9.221/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1936.523039][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1940.303813][T11181] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1940.559940][T11181] usb 5-1: Using ep0 maxpacket: 8 [ 1940.561714][T31012] netlink: set zone limit has 4 unknown bytes [ 1940.566633][T11181] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1940.986629][T11181] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1941.001543][T11181] usb 5-1: config 0 has no interface number 0 [ 1941.018711][T11181] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1941.042403][T11181] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1941.051567][T11181] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1941.054618][T31021] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6560'. [ 1941.069724][T11181] usb 5-1: config 0 descriptor?? [ 1941.081340][T11181] ldusb 5-1:0.55: Interrupt in endpoint not found [ 1941.144970][ T29] audit: type=1326 audit(1857.078:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31020 comm="syz.6.6560" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feeac19c799 code=0x0 [ 1941.877386][ T2009] usb 5-1: USB disconnect, device number 37 [ 1942.017383][T11181] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1942.213264][T31032] netlink: 'syz.1.6563': attribute type 8 has an invalid length. [ 1942.221172][T11181] usb 1-1: Using ep0 maxpacket: 32 [ 1942.239637][T11181] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1942.289880][T11181] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1942.322233][T11181] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1942.334561][T11181] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1942.370367][T31034] netlink: 'syz.1.6564': attribute type 49 has an invalid length. [ 1942.377318][T11181] usb 1-1: Product: syz [ 1942.382356][T11181] usb 1-1: Manufacturer: syz [ 1942.643613][T11181] hub 1-1:4.0: USB hub found [ 1942.737517][T11181] hub 1-1:4.0: 2 ports detected [ 1942.887130][T31037] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1942.962599][T11181] hub 1-1:4.0: hub_hub_status failed (err = -32) [ 1942.983286][T11181] hub 1-1:4.0: config failed, can't get hub status (err -32) [ 1943.863303][T11181] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1943.970496][ T5808] usb 1-1: USB disconnect, device number 105 [ 1944.211877][T31068] xt_hashlimit: size too large, truncated to 1048576 [ 1944.380811][T11181] usb 7-1: Using ep0 maxpacket: 8 [ 1944.451967][T11181] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1944.460722][T11181] usb 7-1: config 4 has an invalid interface number: 147 but max is 0 [ 1944.471010][T11181] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1944.482118][T11181] usb 7-1: config 4 has no interface number 0 [ 1944.615581][T11181] usb 7-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1944.650500][T11181] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1944.678798][T11181] usb 7-1: Product: ꆑ꓌昚긘뚚ᴙꔘ愰켰庫歀 [ 1944.847963][T31072] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6574'. [ 1945.600224][T31081] xt_hashlimit: size too large, truncated to 1048576 [ 1945.705380][T11181] uvcvideo 7-1:4.147: Found UVC 0.00 device ꆑ꓌昚긘뚚ᴙꔘ愰켰庫歀 (04f2:b746) [ 1945.761678][T11181] uvcvideo 7-1:4.147: No valid video chain found. [ 1945.831803][T11181] usb 7-1: USB disconnect, device number 8 [ 1945.906537][T31087] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1946.439820][T31102] xt_hashlimit: size too large, truncated to 1048576 [ 1948.620668][ T5808] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1948.984715][ T5808] usb 8-1: Using ep0 maxpacket: 16 [ 1948.992193][ T5808] usb 8-1: config 6 has an invalid interface number: 152 but max is 3 [ 1949.000850][ T5808] usb 8-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1949.011735][ T5808] usb 8-1: config 6 has 1 interface, different from the descriptor's value: 4 [ 1949.035098][ T5808] usb 8-1: config 6 has no interface number 0 [ 1949.050589][ T5808] usb 8-1: config 6 interface 152 altsetting 253 endpoint 0xB has invalid wMaxPacketSize 0 [ 1949.069082][ T5808] usb 8-1: config 6 interface 152 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1949.092652][ T5808] usb 8-1: config 6 interface 152 has no altsetting 0 [ 1949.115446][ T5808] usb 8-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=e9.aa [ 1949.126268][ T5808] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1949.139280][ T5808] usb 8-1: Product: syz [ 1949.149311][ T5808] usb 8-1: Manufacturer: syz [ 1949.162296][ T5808] usb 8-1: SerialNumber: syz [ 1949.196468][T31136] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1950.290186][T31149] FAULT_INJECTION: forcing a failure. [ 1950.290186][T31149] name failslab, interval 1, probability 0, space 0, times 0 [ 1950.303985][T31149] CPU: 0 UID: 0 PID: 31149 Comm: syz.0.6601 Tainted: G L syzkaller #0 PREEMPT(full) [ 1950.304015][T31149] Tainted: [L]=SOFTLOCKUP [ 1950.304021][T31149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1950.304032][T31149] Call Trace: [ 1950.304039][T31149] [ 1950.304045][T31149] dump_stack_lvl+0x100/0x190 [ 1950.304080][T31149] should_fail_ex.cold+0x5/0xa [ 1950.304101][T31149] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1950.304124][T31149] should_failslab+0xc2/0x120 [ 1950.304141][T31149] __kmalloc_noprof+0xe0/0x850 [ 1950.304171][T31149] tomoyo_realpath_from_path+0xb6/0x690 [ 1950.304200][T31149] tomoyo_mount_acl+0x1b6/0x8b0 [ 1950.304219][T31149] ? is_bpf_text_address+0x8a/0x1a0 [ 1950.304245][T31149] ? bpf_ksym_find+0x128/0x1c0 [ 1950.304261][T31149] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1950.304286][T31149] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 1950.304305][T31149] ? kernel_text_address+0x8d/0x100 [ 1950.304327][T31149] ? unwind_get_return_address+0x59/0xa0 [ 1950.304378][T31149] ? tomoyo_domain+0xb2/0x150 [ 1950.304402][T31149] ? tomoyo_profile+0x47/0x60 [ 1950.304426][T31149] tomoyo_mount_permission+0x214/0x460 [ 1950.304446][T31149] ? tomoyo_mount_permission+0x1f6/0x460 [ 1950.304469][T31149] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 1950.304506][T31149] security_sb_mount+0xdd/0x270 [ 1950.304528][T31149] path_mount+0x158/0x23d0 [ 1950.304560][T31149] ? __pfx_path_mount+0x10/0x10 [ 1950.304579][T31149] ? lockdep_hardirqs_on+0x78/0x100 [ 1950.304603][T31149] ? putname+0xb1/0x110 [ 1950.304620][T31149] ? kmem_cache_free+0x124/0x6a0 [ 1950.304651][T31149] ? __x64_sys_mount+0x293/0x310 [ 1950.304672][T31149] __x64_sys_mount+0x293/0x310 [ 1950.304694][T31149] ? __pfx___x64_sys_mount+0x10/0x10 [ 1950.304721][T31149] do_syscall_64+0x106/0xf80 [ 1950.304740][T31149] ? clear_bhb_loop+0x40/0x90 [ 1950.304764][T31149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1950.304782][T31149] RIP: 0033:0x7f2d3df9c799 [ 1950.304795][T31149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1950.304812][T31149] RSP: 002b:00007f2d3ee4f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1950.304829][T31149] RAX: ffffffffffffffda RBX: 00007f2d3e215fa0 RCX: 00007f2d3df9c799 [ 1950.304840][T31149] RDX: 00002000000002c0 RSI: 0000200000000300 RDI: 0000000000000000 [ 1950.304850][T31149] RBP: 00007f2d3ee4f090 R08: 0000200000000100 R09: 0000000000000000 [ 1950.304860][T31149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1950.304870][T31149] R13: 00007f2d3e216038 R14: 00007f2d3e215fa0 R15: 00007ffd4d199058 [ 1950.304895][T31149] [ 1950.304963][T31149] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1950.700838][T31155] xt_hashlimit: size too large, truncated to 1048576 [ 1950.717512][T20073] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 1950.743277][T31154] netlink: 'syz.4.6593': attribute type 8 has an invalid length. [ 1950.891958][T31154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1950.899361][T31154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1951.029615][T20073] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 1951.044405][T20073] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1152, setting to 64 [ 1951.072559][T20073] usb 7-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1951.105759][T20073] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1951.188512][T20073] usb 7-1: Product: syz [ 1951.199741][T20073] usb 7-1: Manufacturer: syz [ 1951.210815][T20073] usb 7-1: SerialNumber: syz [ 1951.241001][T31160] netlink: set zone limit has 4 unknown bytes [ 1951.664805][T20073] usb 7-1: config 0 descriptor?? [ 1951.695818][ T5808] ushc 8-1:6.152: probe with driver ushc failed with error -71 [ 1951.713906][ T5808] usb 8-1: USB disconnect, device number 6 [ 1951.770246][T31138] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1951.777857][T31138] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1952.736535][ T29] audit: type=1400 audit(1867.255:2457): avc: denied { bind } for pid=31168 comm="syz.7.6607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1952.738347][ C0] port100 7-1:0.0: NFC: Urb failure (status -71) [ 1952.984334][ C0] port100 7-1:0.0: NFC: Urb failure (status -71) [ 1952.992487][T20073] port100 7-1:0.0: NFC: Could not get supported command types [ 1953.095497][ T5808] usb 7-1: USB disconnect, device number 9 [ 1954.361552][T21143] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1954.389331][T31187] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6614'. [ 1954.468241][T31187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1954.501159][T31187] team0: Port device bond0 added [ 1954.523422][T31188] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=31188 comm=syz.1.6614 [ 1954.543612][T21143] usb 8-1: Using ep0 maxpacket: 8 [ 1954.571838][T21143] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 1954.590514][T21143] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1954.604239][T21143] usb 8-1: config 0 has no interface number 0 [ 1954.644015][T21143] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1954.675652][T21143] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1954.691701][T21143] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1954.721678][T21143] usb 8-1: config 0 descriptor?? [ 1954.732547][T21143] ldusb 8-1:0.55: Interrupt in endpoint not found [ 1954.932940][T31191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6615'. [ 1955.077568][T11181] usb 8-1: USB disconnect, device number 7 [ 1955.131500][T21143] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1955.308045][T21143] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1955.318422][T21143] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1955.379270][T31195] netlink: 'syz.6.6616': attribute type 4 has an invalid length. [ 1955.379375][T21143] usb 2-1: Product: syz [ 1955.391873][T31195] netlink: 152 bytes leftover after parsing attributes in process `syz.6.6616'. [ 1955.468099][T31195] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1955.473424][T21143] usb 2-1: Manufacturer: syz [ 1955.598495][T21143] usb 2-1: SerialNumber: syz [ 1955.660262][T21143] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1955.683271][ T5808] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1955.723699][T31197] syzkaller0: entered promiscuous mode [ 1955.741481][T31197] syzkaller0: entered allmulticast mode [ 1955.844115][T31197] tipc: Started in network mode [ 1955.856047][T31197] tipc: Node identity 8afeb4488d1c, cluster identity 4711 [ 1955.871518][T31197] tipc: Enabled bearer , priority 0 [ 1956.020569][T31196] tipc: Resetting bearer [ 1956.043141][T31196] tipc: Disabling bearer [ 1956.607269][T21143] usb 2-1: USB disconnect, device number 100 [ 1956.745257][T31217] netlink: 'syz.0.6624': attribute type 8 has an invalid length. [ 1956.875195][ T5808] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1956.915713][ T5808] ath9k_htc: Failed to initialize the device [ 1956.993422][T31223] netlink: 'syz.4.6625': attribute type 4 has an invalid length. [ 1957.001198][T31223] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6625'. [ 1957.011359][T31223] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1957.224295][T21143] usb 2-1: ath9k_htc: USB layer deinitialized [ 1957.321600][T31227] mac80211_hwsim hwsim41 syzkaller0: entered promiscuous mode [ 1957.331983][T31227] mac80211_hwsim hwsim41 syzkaller0: entered allmulticast mode [ 1957.515267][T20073] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1957.564014][T31229] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1957.580675][T31218] netlink: set zone limit has 4 unknown bytes [ 1957.698814][T20073] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1957.720670][T20073] usb 1-1: config 0 has no interfaces? [ 1957.726187][T20073] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1957.770888][T20073] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1957.838810][ T9811] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1957.886593][T31236] netlink: 'syz.1.6630': attribute type 4 has an invalid length. [ 1957.894646][T31236] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6630'. [ 1958.148926][T20073] usb 1-1: config 0 descriptor?? [ 1958.178059][ T9811] usb 5-1: Using ep0 maxpacket: 32 [ 1958.184898][ T9811] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1958.195535][ T9811] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1958.213241][ T9811] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1958.222736][ T9811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1958.246025][ T9811] usb 5-1: Product: syz [ 1958.259033][ T9811] usb 5-1: Manufacturer: syz [ 1958.286492][ T9811] usb 5-1: SerialNumber: syz [ 1958.383452][ T9811] usb 5-1: config 0 descriptor?? [ 1958.761724][T31231] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6629'. [ 1958.794115][T31247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1958.803179][T31247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1958.985246][T31231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1959.041179][T31231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1959.795356][T31252] netlink: set zone limit has 4 unknown bytes [ 1959.849057][T21143] usb 5-1: USB disconnect, device number 38 [ 1960.048149][T31259] netlink: 'syz.4.6637': attribute type 4 has an invalid length. [ 1960.056121][T31259] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6637'. [ 1960.065609][T31259] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1960.524815][T31266] overlay: ./file0 is not a directory [ 1960.547921][T31266] overlay: ./file0 is not a directory [ 1960.598192][T31266] overlay: ./file0 is not a directory [ 1960.604039][T31266] overlay: ./file0 is not a directory [ 1960.658639][T31266] overlay: ./file0 is not a directory [ 1960.664642][T31266] overlay: ./file0 is not a directory [ 1960.681307][T31266] overlay: ./file0 is not a directory [ 1960.687144][T31266] overlay: ./file0 is not a directory [ 1960.692958][T31266] overlay: ./file0 is not a directory [ 1960.711572][T31266] overlay: ./file0 is not a directory [ 1960.720862][T31266] overlay: ./file0 is not a directory [ 1960.730354][T31266] overlay: ./file0 is not a directory [ 1960.735161][T20073] usb 1-1: USB disconnect, device number 106 [ 1960.742278][T31266] overlay: ./file0 is not a directory [ 1960.776628][T31266] overlay: ./file0 is not a directory [ 1960.784545][T31266] overlay: ./file0 is not a directory [ 1960.791786][T31266] overlay: ./file0 is not a directory [ 1960.800971][T31266] overlay: ./file0 is not a directory [ 1960.808730][T31268] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1960.847416][T31266] overlay: ./file0 is not a directory [ 1960.883475][T31266] overlay: ./file0 is not a directory [ 1960.930694][T31266] overlay: ./file0 is not a directory [ 1960.949690][T31266] overlay: ./file0 is not a directory [ 1960.955827][T31266] overlay: ./file0 is not a directory [ 1962.820015][T31280] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1962.833458][T25291] Bluetooth: hci2: unexpected event for opcode 0x200f [ 1963.149270][ T2009] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1963.440444][ T2009] usb 2-1: device descriptor read/64, error -71 [ 1963.501811][T31297] netlink: 'syz.4.6649': attribute type 4 has an invalid length. [ 1963.509676][T31297] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6649'. [ 1963.520863][T31297] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1963.783617][ T2009] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1963.903014][T31304] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1963.944669][T31306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6652'. [ 1963.954110][ T2009] usb 2-1: device descriptor read/64, error -71 [ 1963.961432][T21143] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1963.969538][T31306] netlink: 'syz.4.6652': attribute type 20 has an invalid length. [ 1963.980530][T31306] netlink: 'syz.4.6652': attribute type 21 has an invalid length. [ 1963.996763][T31306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6652'. [ 1964.010214][T31306] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31306 comm=syz.4.6652 [ 1964.069075][ T2009] usb usb2-port1: attempt power cycle [ 1964.678741][ T7714] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1964.711909][T21143] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1964.737885][T21143] usb 8-1: config 0 has no interfaces? [ 1964.756074][T21143] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1964.785186][T21143] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1964.816210][T21143] usb 8-1: config 0 descriptor?? [ 1964.929014][ T29] audit: type=1400 audit(1879.322:2458): avc: denied { setattr } for pid=31319 comm="syz.0.6657" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1964.991598][ T2009] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1965.022892][ T2009] usb 2-1: device descriptor read/8, error -71 [ 1965.356691][T31327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1965.365868][T31327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1965.492652][ T2009] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1965.533919][ T2009] usb 2-1: device descriptor read/8, error -71 [ 1965.640167][ T9811] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1965.652727][ T2009] usb usb2-port1: unable to enumerate USB device [ 1965.963335][T31331] xt_hashlimit: size too large, truncated to 1048576 [ 1966.005261][ T9811] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1966.019801][ T9811] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1966.053628][ T9811] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1966.073443][ T9811] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1966.088196][ T9811] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1966.122492][ T9811] usb 7-1: config 0 descriptor?? [ 1966.569584][ T9811] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1966.644323][T31336] netlink: 'syz.0.6661': attribute type 4 has an invalid length. [ 1966.660811][T31336] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6661'. [ 1966.924968][T31326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1966.938057][T31326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1966.965566][T31336] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 1967.015374][ T5808] usb 8-1: USB disconnect, device number 8 [ 1967.058559][ T9811] usb 7-1: USB disconnect, device number 10 [ 1968.530668][T31349] netlink: 'syz.1.6665': attribute type 4 has an invalid length. [ 1968.538608][T31349] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6665'. [ 1969.417842][ T29] audit: type=1326 audit(1883.522:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31357 comm="syz.4.6667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486a99c799 code=0x7ffc0000 [ 1969.451796][ T29] audit: type=1326 audit(1883.522:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31357 comm="syz.4.6667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486a99c799 code=0x7ffc0000 [ 1969.536520][ T29] audit: type=1326 audit(1883.522:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31357 comm="syz.4.6667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f486a99c799 code=0x7ffc0000 [ 1969.542623][T31363] FAULT_INJECTION: forcing a failure. [ 1969.542623][T31363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1969.562133][ T29] audit: type=1326 audit(1883.522:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31357 comm="syz.4.6667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486a99c799 code=0x7ffc0000 [ 1969.618882][ T29] audit: type=1326 audit(1883.522:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31357 comm="syz.4.6667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f486a99c799 code=0x7ffc0000 [ 1969.655725][T31363] CPU: 0 UID: 0 PID: 31363 Comm: syz.6.6669 Tainted: G L syzkaller #0 PREEMPT(full) [ 1969.655754][T31363] Tainted: [L]=SOFTLOCKUP [ 1969.655762][T31363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1969.655772][T31363] Call Trace: [ 1969.655778][T31363] [ 1969.655785][T31363] dump_stack_lvl+0x100/0x190 [ 1969.655819][T31363] should_fail_ex.cold+0x5/0xa [ 1969.655842][T31363] _copy_from_iter+0x43a/0x1690 [ 1969.655873][T31363] ? __pfx__copy_from_iter+0x10/0x10 [ 1969.655899][T31363] ? _copy_from_iter+0x270/0x1690 [ 1969.655929][T31363] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1969.655960][T31363] skb_copy_datagram_from_iter+0x11f/0x720 [ 1969.655988][T31363] ? find_held_lock+0x2b/0x80 [ 1969.656010][T31363] ? iov_iter_advance+0xac/0x6d0 [ 1969.656037][T31363] tun_get_user+0x1884/0x3e10 [ 1969.656071][T31363] ? __pfx_tun_get_user+0x10/0x10 [ 1969.656096][T31363] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1969.656131][T31363] ? find_held_lock+0x2b/0x80 [ 1969.656152][T31363] ? tun_get+0x191/0x370 [ 1969.656171][T31363] ? tun_get+0x191/0x370 [ 1969.656198][T31363] tun_chr_write_iter+0xdc/0x200 [ 1969.656223][T31363] do_iter_readv_writev+0x6ee/0x920 [ 1969.656250][T31363] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1969.656274][T31363] ? avc_policy_seqno+0x9/0x20 [ 1969.656296][T31363] ? selinux_file_permission+0x8f/0x6d0 [ 1969.656321][T31363] ? bpf_lsm_file_permission+0x9/0x10 [ 1969.656347][T31363] ? security_file_permission+0x76/0x210 [ 1969.656369][T31363] ? rw_verify_area+0xce/0x6d0 [ 1969.656394][T31363] vfs_writev+0x360/0xe10 [ 1969.656426][T31363] ? __pfx_vfs_writev+0x10/0x10 [ 1969.656450][T31363] ? find_held_lock+0x2b/0x80 [ 1969.656486][T31363] ? __fget_files+0x21f/0x3d0 [ 1969.656509][T31363] ? do_writev+0x13e/0x340 [ 1969.656532][T31363] do_writev+0x13e/0x340 [ 1969.656558][T31363] ? __pfx_do_writev+0x10/0x10 [ 1969.656589][T31363] do_syscall_64+0x106/0xf80 [ 1969.656609][T31363] ? clear_bhb_loop+0x40/0x90 [ 1969.656632][T31363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1969.656648][T31363] RIP: 0033:0x7feeac19c799 [ 1969.656663][T31363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1969.656686][T31363] RSP: 002b:00007feead06e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1969.656704][T31363] RAX: ffffffffffffffda RBX: 00007feeac415fa0 RCX: 00007feeac19c799 [ 1969.656714][T31363] RDX: 0000000000000003 RSI: 0000200000000180 RDI: 0000000000000003 [ 1969.656725][T31363] RBP: 00007feead06e090 R08: 0000000000000000 R09: 0000000000000000 [ 1969.656735][T31363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1969.656745][T31363] R13: 00007feeac416038 R14: 00007feeac415fa0 R15: 00007fffe551b958 [ 1969.656769][T31363] [ 1970.031741][T31372] xt_hashlimit: size too large, truncated to 1048576 [ 1970.237220][ T792] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1970.247242][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 1970.398334][ T792] usb 5-1: device descriptor read/64, error -32 [ 1971.470581][T31381] ref_ctr increment failed for inode: 0xa5 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888078b59880 [ 1971.555913][T31384] netlink: 'syz.1.6674': attribute type 4 has an invalid length. [ 1971.564944][T31384] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6674'. [ 1971.579176][ T792] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1971.856337][ T792] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1971.874227][ T792] usb 5-1: config 0 has no interfaces? [ 1971.891026][ T792] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1971.924349][ T792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1971.948949][ T792] usb 5-1: config 0 descriptor?? [ 1972.263951][T31390] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1972.292394][T31390] SELinux: failed to load policy [ 1972.339259][T31393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1972.349175][T31393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1972.744113][ T2009] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1972.782775][T31400] netlink: set zone limit has 4 unknown bytes [ 1972.848086][T31401] netlink: 'syz.0.6679': attribute type 4 has an invalid length. [ 1972.856061][T31401] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6679'. [ 1972.865414][T31401] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 1973.017504][ T2009] usb 8-1: device descriptor read/64, error -71 [ 1973.375402][ T2009] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1973.523247][ T2009] usb 8-1: device descriptor read/64, error -71 [ 1973.650055][ T2009] usb usb8-port1: attempt power cycle [ 1974.032376][ T2009] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1974.532371][ T2009] usb 8-1: device descriptor read/8, error -71 [ 1974.665382][T31412] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1974.678208][T31412] block nbd0: shutting down sockets [ 1974.812871][ T2009] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1975.013816][ T2009] usb 8-1: device descriptor read/8, error -71 [ 1975.071254][T31418] fuse: Bad value for 'fd' [ 1976.207087][ T2009] usb usb8-port1: unable to enumerate USB device [ 1977.448021][T31437] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1977.531445][ T792] usb 5-1: USB disconnect, device number 40 [ 1977.932911][T31443] binder: BINDER_SET_CONTEXT_MGR already set [ 1977.939036][T31443] binder: 31440:31443 ioctl 4018620d 200000004a80 returned -16 [ 1978.276391][ T29] audit: type=1400 audit(1891.482:2464): avc: denied { setopt } for pid=31440 comm="syz.4.6692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1979.566847][T31463] netlink: 'syz.0.6687': attribute type 4 has an invalid length. [ 1979.574935][T31463] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6687'. [ 1979.584387][T31463] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 1980.473235][T31478] netlink: 'syz.0.6698': attribute type 3 has an invalid length. [ 1981.550973][ T29] audit: type=1400 audit(1894.868:2465): avc: denied { map } for pid=31476 comm="syz.1.6699" path="socket:[159997]" dev="sockfs" ino=159997 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1982.817090][ T29] audit: type=1326 audit(1896.056:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31487 comm="syz.6.6705" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feeac19c799 code=0x0 [ 1983.057465][ T2009] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1983.065529][T25803] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1983.324270][ T2009] usb 1-1: device descriptor read/64, error -71 [ 1983.449407][T25803] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1983.460610][T25803] usb 8-1: config 0 has no interfaces? [ 1983.477652][T25803] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1983.489722][T25803] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1983.527188][T25803] usb 8-1: config 0 descriptor?? [ 1983.611032][ T2009] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1983.761026][ T2009] usb 1-1: device descriptor read/64, error -71 [ 1983.940324][T31510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1983.949137][T31510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1983.958026][ T2009] usb usb1-port1: attempt power cycle [ 1984.058896][T31509] netlink: 'syz.4.6708': attribute type 4 has an invalid length. [ 1984.066870][T31509] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6708'. [ 1984.077134][T31509] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1984.491110][ T2009] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1984.554815][ T2009] usb 1-1: device descriptor read/8, error -71 [ 1984.878702][ T2009] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1985.113233][ T2009] usb 1-1: device not accepting address 110, error -71 [ 1985.124115][ T2009] usb usb1-port1: unable to enumerate USB device [ 1985.448585][T31523] netlink: 'syz.4.6711': attribute type 3 has an invalid length. [ 1986.732758][ T2009] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1987.011981][ T2009] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1987.024231][T31532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6714'. [ 1987.034814][ T2009] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1987.050976][ T2009] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1987.083388][ T2009] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1987.134131][ T2009] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1987.162199][ T2009] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1987.176296][ T792] usb 8-1: USB disconnect, device number 13 [ 1987.179546][ T2009] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1987.192257][ T2009] usb 1-1: Product: syz [ 1987.197919][ T2009] usb 1-1: Manufacturer: syz [ 1987.217336][T31536] kvm: user requested TSC rate below hardware speed [ 1987.247431][ T2009] cdc_wdm 1-1:1.0: skipping garbage [ 1987.278441][ T2009] cdc_wdm 1-1:1.0: skipping garbage [ 1987.296024][ T2009] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1987.320805][ T2009] cdc_wdm 1-1:1.0: Unknown control protocol [ 1987.856541][T31550] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1988.175071][T31554] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6710'. [ 1988.727386][ T9811] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1988.895493][ T9811] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1988.916355][ T9811] usb 7-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f6.6a [ 1988.925868][ T9811] usb 7-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160 [ 1988.934416][ T9811] usb 7-1: Product: syz [ 1988.939897][ T9811] usb 7-1: Manufacturer: syz [ 1988.950953][ T9811] usb 7-1: SerialNumber: syz [ 1989.016606][ T9811] usb 7-1: config 0 descriptor?? [ 1989.053445][ T9811] comedi comedi5: Wrong number of endpoints [ 1989.063214][ T9811] ni6501 7-1:0.0: driver 'ni6501' failed to auto-configure device. [ 1989.295835][ T9811] usb 7-1: USB disconnect, device number 11 [ 1991.584128][ T9811] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1991.891594][ T9811] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1991.902087][ T9811] usb 2-1: config 0 has no interfaces? [ 1992.095143][ T9811] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1992.110250][ T9811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1992.120931][ T9811] usb 2-1: config 0 descriptor?? [ 1992.497465][T31583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1992.506481][T31583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1992.542829][ T9811] usb 1-1: USB disconnect, device number 111 [ 1994.040955][T31599] netlink: 'syz.6.6732': attribute type 8 has an invalid length. [ 1994.111179][T31599] bridge0: port 2(bridge_slave_1) entered disabled state [ 1994.118684][T31599] bridge0: port 1(bridge_slave_0) entered disabled state [ 1994.130027][T31602] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6733'. [ 1994.237986][T31602] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1994.255658][T31602] block nbd0: shutting down sockets [ 1995.532889][ T9811] usb 2-1: USB disconnect, device number 105 [ 1996.536955][T31614] netlink: 'syz.7.6736': attribute type 2 has an invalid length. [ 1996.544733][T31614] netlink: 224 bytes leftover after parsing attributes in process `syz.7.6736'. [ 1996.572499][T31620] infiniband syz2: set active [ 1996.577338][T31620] infiniband syz2: added bridge_slave_1 [ 1996.598204][T31620] RDS/IB: syz2: added [ 1996.602251][T31620] smc: adding ib device syz2 with port count 1 [ 1996.608400][T31620] smc: ib device syz2 port 1 has no pnetid [ 1997.398676][T31625] netlink: 'syz.7.6739': attribute type 2 has an invalid length. [ 1998.963650][T20075] Bluetooth: hci4: command 0x0406 tx timeout [ 1999.422542][T15396] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1999.465295][ T7726] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1999.604300][T15396] usb 7-1: Using ep0 maxpacket: 8 [ 1999.617517][T15396] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 1999.627871][T15396] usb 7-1: config 0 has no interface number 0 [ 1999.644450][T15396] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1999.666702][T15396] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1999.676184][T15396] usb 7-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 1999.737322][T15396] usb 7-1: Product: syz [ 1999.751061][T15396] usb 7-1: config 0 descriptor?? [ 2000.112156][ T2009] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 2000.155914][T15396] iowarrior 7-1:0.8: IOWarrior product=0x1512, serial= interface=8 now attached to iowarrior0 [ 2000.301368][ T2009] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2000.311805][ T2009] usb 1-1: config 0 has no interfaces? [ 2000.327698][ T2009] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 2000.344991][ T2009] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2000.374008][ T2009] usb 1-1: config 0 descriptor?? [ 2000.402595][T31641] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6743'. [ 2000.773250][T31666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2000.782467][T31666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2001.536519][T31674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6749'. [ 2001.794796][T15396] usb 7-1: USB disconnect, device number 12 [ 2002.204862][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2002.881699][T15396] usb 1-1: USB disconnect, device number 112 [ 2003.936370][T20073] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2004.010279][T20073] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2004.645803][T31718] fido_id[31718]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2005.439171][T31733] tipc: Enabled bearer , priority 0 [ 2005.442035][T31739] netlink: 'syz.7.6766': attribute type 8 has an invalid length. [ 2005.473693][T31739] bridge0: port 2(bridge_slave_1) entered disabled state [ 2005.481223][T31739] bridge0: port 1(bridge_slave_0) entered disabled state [ 2005.518478][T31732] tipc: Disabling bearer [ 2006.240888][T31751] syzkaller0: entered promiscuous mode [ 2006.246496][T31751] syzkaller0: entered allmulticast mode [ 2007.120499][T31770] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6774'. [ 2007.811509][T31770] block nbd0: Unsupported socket: should be TCP or UNIX. [ 2007.889668][T31770] block nbd0: shutting down sockets [ 2007.939667][T31780] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6776'. [ 2008.324881][T31786] netlink: 'syz.0.6779': attribute type 8 has an invalid length. [ 2008.435838][T15396] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 2008.537282][T31793] syzkaller0: entered promiscuous mode [ 2008.554953][T31793] syzkaller0: entered allmulticast mode [ 2008.613354][T15396] usb 5-1: Using ep0 maxpacket: 8 [ 2008.634507][T15396] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2008.648454][T15396] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2008.658601][T31793] tipc: Enabled bearer , priority 0 [ 2008.675306][T31792] tipc: Resetting bearer [ 2008.681819][T15396] usb 5-1: Product: syz [ 2008.694276][T15396] usb 5-1: Manufacturer: syz [ 2008.702921][T15396] usb 5-1: SerialNumber: syz [ 2008.780194][T15396] usb 5-1: config 0 descriptor?? [ 2008.786518][T31797] overlayfs: failed to set uuid (63/file0, err=-1); falling back to uuid=null. [ 2008.797429][T31792] tipc: Disabling bearer [ 2008.807934][T31797] overlayfs: failed to verify upper root origin [ 2009.288105][T15396] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2010.776915][T31825] netlink: 'syz.6.6791': attribute type 6 has an invalid length. [ 2010.786631][T31825] netlink: 'syz.6.6791': attribute type 6 has an invalid length. [ 2010.882942][ T2009] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 2010.996789][T31826] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 2011.079754][ T2009] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2011.133525][ T2009] usb 2-1: config 0 has no interfaces? [ 2011.144290][ T2009] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 2011.157939][ T2009] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2011.174367][ T2009] usb 2-1: config 0 descriptor?? [ 2011.218237][T31830] openvswitch: netlink: Message has 592 unknown bytes. [ 2011.235825][T31830] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2011.348645][T15396] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2011.372229][T25291] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 2011.383645][T15396] usb 5-1: USB disconnect, device number 41 [ 2011.383776][T25291] Bluetooth: hci0: Injecting HCI hardware error event [ 2011.393860][T31830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31830 comm=syz.6.6794 [ 2011.401242][T20075] Bluetooth: hci0: hardware error 0x00 [ 2011.884457][T31840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2011.894480][T31840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2012.074986][T31846] netlink: 68 bytes leftover after parsing attributes in process `syz.7.6796'. [ 2012.084157][T31846] tipc: Enabling of bearer <}dp:sÿÿ> rejected, media not registered [ 2013.834590][T31866] FAULT_INJECTION: forcing a failure. [ 2013.834590][T31866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2013.848133][T31866] CPU: 1 UID: 0 PID: 31866 Comm: syz.4.6802 Tainted: G L syzkaller #0 PREEMPT(full) [ 2013.848176][T31866] Tainted: [L]=SOFTLOCKUP [ 2013.848181][T31866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2013.848191][T31866] Call Trace: [ 2013.848197][T31866] [ 2013.848204][T31866] dump_stack_lvl+0x100/0x190 [ 2013.848247][T31866] should_fail_ex.cold+0x5/0xa [ 2013.848265][T31866] _copy_from_user+0x2e/0xd0 [ 2013.848291][T31866] ucma_listen+0x81/0x220 [ 2013.848310][T31866] ? __pfx_ucma_listen+0x10/0x10 [ 2013.848331][T31866] ? __pfx_ucma_listen+0x10/0x10 [ 2013.848343][T31866] ucma_write+0x1fb/0x330 [ 2013.848353][T31866] ? __pfx_ucma_write+0x10/0x10 [ 2013.848363][T31866] ? bpf_lsm_file_permission+0x9/0x10 [ 2013.848379][T31866] ? security_file_permission+0x76/0x210 [ 2013.848394][T31866] ? rw_verify_area+0xce/0x6d0 [ 2013.848411][T31866] vfs_write+0x2aa/0x1070 [ 2013.848427][T31866] ? __pfx_ucma_write+0x10/0x10 [ 2013.848438][T31866] ? __pfx_vfs_write+0x10/0x10 [ 2013.848453][T31866] ? find_held_lock+0x2b/0x80 [ 2013.848467][T31866] ? __fget_files+0x215/0x3d0 [ 2013.848477][T31866] ? __fget_files+0x215/0x3d0 [ 2013.848490][T31866] ? __fget_files+0x21f/0x3d0 [ 2013.848504][T31866] ksys_write+0x1f8/0x250 [ 2013.848520][T31866] ? __pfx_ksys_write+0x10/0x10 [ 2013.848540][T31866] do_syscall_64+0x106/0xf80 [ 2013.848551][T31866] ? clear_bhb_loop+0x40/0x90 [ 2013.848564][T31866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2013.848575][T31866] RIP: 0033:0x7f486a99c799 [ 2013.848586][T31866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2013.848597][T31866] RSP: 002b:00007f486b92c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2013.848608][T31866] RAX: ffffffffffffffda RBX: 00007f486ac15fa0 RCX: 00007f486a99c799 [ 2013.848615][T31866] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 2013.848621][T31866] RBP: 00007f486b92c090 R08: 0000000000000000 R09: 0000000000000000 [ 2013.848627][T31866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2013.848634][T31866] R13: 00007f486ac16038 R14: 00007f486ac15fa0 R15: 00007ffdf6115098 [ 2013.848647][T31866] [ 2014.075030][T20075] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 2014.218446][T15396] usb 2-1: USB disconnect, device number 106 [ 2018.102630][T31895] fuse: Unknown parameter 'fd0x0000000000000003' [ 2018.134605][T20073] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 2018.451702][T20073] usb 1-1: Using ep0 maxpacket: 8 [ 2018.458981][T20073] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 2018.488626][T20073] usb 1-1: config 0 has no interface number 0 [ 2018.518386][T20073] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2018.729943][T20073] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2018.743295][T20073] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2018.871546][T20073] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2018.900721][T20073] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2018.924270][T20073] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2018.955628][T20073] usb 1-1: config 0 descriptor?? [ 2018.981111][T20073] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2020.406031][ C1] ldusb 1-1:0.55: usb_submit_urb failed (-19) [ 2020.455289][ T2009] usb 1-1: USB disconnect, device number 113 [ 2020.564778][T21143] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 2020.997417][T21143] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2021.137543][T21143] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 2021.162312][T21143] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2022.428915][ T2009] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 2022.442032][T21143] usb 5-1: config 0 descriptor?? [ 2022.450365][T21143] usb 5-1: can't set config #0, error -71 [ 2022.522592][T31923] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 2022.531821][T21143] usb 5-1: USB disconnect, device number 42 [ 2023.549480][T31944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6825'. [ 2024.338582][T31952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6827'. [ 2026.249438][ T29] audit: type=1326 audit(1935.306:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31953 comm="syz.0.6828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3df9c799 code=0x7ffc0000 [ 2026.287989][ T29] audit: type=1326 audit(1935.306:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31953 comm="syz.0.6828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3df9c799 code=0x7ffc0000 [ 2026.413265][ T29] audit: type=1326 audit(1935.306:2469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31953 comm="syz.0.6828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7f2d3df9c799 code=0x7ffc0000 [ 2026.650998][ T29] audit: type=1326 audit(1935.315:2470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31953 comm="syz.0.6828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3df9c799 code=0x7ffc0000 [ 2026.736375][ T29] audit: type=1326 audit(1935.315:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31953 comm="syz.0.6828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3df9c799 code=0x7ffc0000 [ 2026.793974][ T29] audit: type=1326 audit(1935.315:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31953 comm="syz.0.6828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f2d3df9c799 code=0x7ffc0000 [ 2026.838494][ T29] audit: type=1326 audit(1935.315:2473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31953 comm="syz.0.6828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3df9c799 code=0x7ffc0000 [ 2026.869813][ T29] audit: type=1326 audit(1935.315:2474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31953 comm="syz.0.6828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3df9c799 code=0x7ffc0000 [ 2026.894373][ T29] audit: type=1326 audit(1935.315:2475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31953 comm="syz.0.6828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f2d3df9c799 code=0x7ffc0000 [ 2026.919784][ T29] audit: type=1326 audit(1935.315:2476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31953 comm="syz.0.6828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3df9c799 code=0x7ffc0000 [ 2026.993245][T31976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6833'. [ 2027.004290][T31958] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 2028.599146][T25291] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 2028.609889][T25291] CPU: 0 UID: 0 PID: 25291 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 2028.609920][T25291] Tainted: [L]=SOFTLOCKUP [ 2028.609925][T25291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2028.609935][T25291] Workqueue: hci2 hci_rx_work [ 2028.609957][T25291] Call Trace: [ 2028.609962][T25291] [ 2028.609967][T25291] dump_stack_lvl+0x100/0x190 [ 2028.609986][T25291] sysfs_warn_dup.cold+0x1c/0x28 [ 2028.610005][T25291] sysfs_create_dir_ns+0x24b/0x2b0 [ 2028.610024][T25291] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 2028.610041][T25291] ? find_held_lock+0x2b/0x80 [ 2028.610055][T25291] ? kobject_add_internal+0x25f/0x930 [ 2028.610071][T25291] ? kobject_add_internal+0x25f/0x930 [ 2028.610086][T25291] ? do_raw_spin_unlock+0x145/0x1e0 [ 2028.610100][T25291] kobject_add_internal+0x2c8/0x930 [ 2028.610117][T25291] kobject_add+0x16a/0x1e0 [ 2028.610133][T25291] ? __pfx_kobject_add+0x10/0x10 [ 2028.610147][T25291] ? class_to_subsys+0x10f/0x150 [ 2028.610169][T25291] ? kobject_put+0xb9/0x640 [ 2028.610181][T25291] ? _raw_spin_unlock+0x28/0x50 [ 2028.610203][T25291] device_add+0x294/0x1950 [ 2028.610220][T25291] ? __pfx_dev_set_name+0x10/0x10 [ 2028.610232][T25291] ? __pfx_device_add+0x10/0x10 [ 2028.610249][T25291] ? mgmt_send_event_skb+0x2fb/0x460 [ 2028.610271][T25291] hci_conn_add_sysfs+0x1a3/0x260 [ 2028.610286][T25291] le_conn_complete_evt+0x11cb/0x1f40 [ 2028.610307][T25291] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 2028.610328][T25291] hci_le_conn_complete_evt+0x23c/0x3a0 [ 2028.610346][T25291] ? skb_pull_data+0x15f/0x1e0 [ 2028.610362][T25291] hci_le_meta_evt+0x34a/0x5f0 [ 2028.610374][T25291] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 2028.610393][T25291] hci_event_packet+0x682/0x11c0 [ 2028.610410][T25291] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 2028.610422][T25291] ? __pfx_hci_event_packet+0x10/0x10 [ 2028.610443][T25291] ? kcov_remote_start+0x384/0x660 [ 2028.610461][T25291] hci_rx_work+0x451/0xfc0 [ 2028.610480][T25291] process_one_work+0x9d7/0x1920 [ 2028.610500][T25291] ? __pfx_process_one_work+0x10/0x10 [ 2028.610516][T25291] ? __pfx_hci_rx_work+0x10/0x10 [ 2028.610534][T25291] worker_thread+0x5da/0xe40 [ 2028.610549][T25291] ? __pfx_worker_thread+0x10/0x10 [ 2028.610562][T25291] ? kthread+0x13a/0x450 [ 2028.610571][T25291] ? __pfx_worker_thread+0x10/0x10 [ 2028.610582][T25291] kthread+0x370/0x450 [ 2028.610591][T25291] ? __pfx_kthread+0x10/0x10 [ 2028.610602][T25291] ret_from_fork+0x754/0xd80 [ 2028.610615][T25291] ? __pfx_ret_from_fork+0x10/0x10 [ 2028.610627][T25291] ? __switch_to+0x7b4/0x1120 [ 2028.610640][T25291] ? __pfx_kthread+0x10/0x10 [ 2028.610651][T25291] ret_from_fork_asm+0x1a/0x30 [ 2028.610681][T25291] [ 2028.610715][T25291] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 2029.782325][T25291] Bluetooth: hci2: failed to register connection device [ 2029.832186][T31990] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 2029.838737][T31990] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2029.846435][T31990] vhci_hcd vhci_hcd.0: Device attached [ 2030.038506][T31993] vhci_hcd: connection closed [ 2030.039191][T19106] vhci_hcd vhci_hcd.1: stop threads [ 2030.071250][T31997] netlink: 'syz.0.6838': attribute type 16 has an invalid length. [ 2030.080384][T31997] netlink: 'syz.0.6838': attribute type 17 has an invalid length. [ 2030.099152][T25803] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 2030.118588][T31997] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2030.159381][T19106] vhci_hcd vhci_hcd.1: release socket [ 2030.164878][T19106] vhci_hcd vhci_hcd.1: disconnect device [ 2030.318291][ T792] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 2030.396033][T32001] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6839'. [ 2030.461619][T32006] binder: BINDER_SET_CONTEXT_MGR already set [ 2030.463737][T32001] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6839'. [ 2030.477171][T32006] binder: 32005:32006 ioctl 4018620d 200000000100 returned -16 [ 2030.495983][ T792] usb 5-1: config index 0 descriptor too short (expected 170, got 115) [ 2030.506741][ T792] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2030.519920][T32006] FAULT_INJECTION: forcing a failure. [ 2030.519920][T32006] name failslab, interval 1, probability 0, space 0, times 0 [ 2030.535995][T32006] CPU: 0 UID: 0 PID: 32006 Comm: syz.7.6840 Tainted: G L syzkaller #0 PREEMPT(full) [ 2030.536023][T32006] Tainted: [L]=SOFTLOCKUP [ 2030.536030][T32006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2030.536047][T32006] Call Trace: [ 2030.536057][T32006] [ 2030.536064][T32006] dump_stack_lvl+0x100/0x190 [ 2030.536095][T32006] should_fail_ex.cold+0x5/0xa [ 2030.536113][T32006] ? tomoyo_realpath_from_path+0xb6/0x690 [ 2030.536132][T32006] should_failslab+0xc2/0x120 [ 2030.536150][T32006] __kmalloc_noprof+0xe0/0x850 [ 2030.536179][T32006] tomoyo_realpath_from_path+0xb6/0x690 [ 2030.536208][T32006] tomoyo_path_number_perm+0x23c/0x580 [ 2030.536226][T32006] ? tomoyo_path_number_perm+0x22e/0x580 [ 2030.536245][T32006] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2030.536283][T32006] ? find_held_lock+0x2b/0x80 [ 2030.536303][T32006] ? __fget_files+0x215/0x3d0 [ 2030.536318][T32006] ? hook_file_ioctl_common+0x146/0x410 [ 2030.536342][T32006] ? __fget_files+0x21f/0x3d0 [ 2030.536358][T32006] security_file_ioctl+0xd3/0x230 [ 2030.536375][T32006] __x64_sys_ioctl+0xb7/0x210 [ 2030.536395][T32006] do_syscall_64+0x106/0xf80 [ 2030.536412][T32006] ? clear_bhb_loop+0x40/0x90 [ 2030.536433][T32006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2030.536448][T32006] RIP: 0033:0x7f985219c799 [ 2030.536463][T32006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2030.536480][T32006] RSP: 002b:00007f9852f8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2030.536496][T32006] RAX: ffffffffffffffda RBX: 00007f9852415fa0 RCX: 00007f985219c799 [ 2030.536507][T32006] RDX: 00002000000003c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 2030.536516][T32006] RBP: 00007f9852f8a090 R08: 0000000000000000 R09: 0000000000000000 [ 2030.536527][T32006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2030.536536][T32006] R13: 00007f9852416038 R14: 00007f9852415fa0 R15: 00007fffe50f6948 [ 2030.536560][T32006] [ 2030.537261][T32006] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2030.767409][ T792] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2030.776918][ T792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2030.785630][ T792] usb 5-1: Product: syz [ 2030.790199][ T792] usb 5-1: Manufacturer: syz [ 2030.795409][ T792] usb 5-1: SerialNumber: syz [ 2030.827260][ T792] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2030.860761][ T9811] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2030.906927][T21143] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 2031.117661][T21143] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2031.148884][T31999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2031.157457][T21143] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2031.157518][T21143] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2031.184425][T31999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2031.219628][T21143] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2031.251307][T32010] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 2031.292859][T21143] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2031.444019][T15396] usb 5-1: USB disconnect, device number 43 [ 2031.550823][T32026] autofs: Unknown parameter './file0' [ 2031.620644][T11181] usb 1-1: USB disconnect, device number 114 [ 2031.974300][ T9811] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2031.983818][ T9811] ath9k_htc: Failed to initialize the device [ 2032.020602][T15396] usb 5-1: ath9k_htc: USB layer deinitialized [ 2032.136277][T32034] FAULT_INJECTION: forcing a failure. [ 2032.136277][T32034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2032.149336][T32034] CPU: 0 UID: 0 PID: 32034 Comm: syz.6.6849 Tainted: G L syzkaller #0 PREEMPT(full) [ 2032.149356][T32034] Tainted: [L]=SOFTLOCKUP [ 2032.149360][T32034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2032.149367][T32034] Call Trace: [ 2032.149371][T32034] [ 2032.149376][T32034] dump_stack_lvl+0x100/0x190 [ 2032.149397][T32034] should_fail_ex.cold+0x5/0xa [ 2032.149412][T32034] _copy_from_user+0x2e/0xd0 [ 2032.149429][T32034] __sys_bpf+0x243/0x4b90 [ 2032.149442][T32034] ? __pfx___sys_bpf+0x10/0x10 [ 2032.149452][T32034] ? proc_fail_nth_write+0x9f/0x220 [ 2032.149467][T32034] ? find_held_lock+0x2b/0x80 [ 2032.149483][T32034] ? find_held_lock+0x2b/0x80 [ 2032.149496][T32034] ? ksys_write+0x190/0x250 [ 2032.149516][T32034] ? __mutex_unlock_slowpath+0x15c/0x790 [ 2032.149530][T32034] ? __fget_files+0x215/0x3d0 [ 2032.149547][T32034] ? fput+0x79/0x100 [ 2032.149559][T32034] ? ksys_write+0x1ac/0x250 [ 2032.149574][T32034] ? __pfx_ksys_write+0x10/0x10 [ 2032.149592][T32034] __x64_sys_bpf+0x7b/0xc0 [ 2032.149609][T32034] ? lockdep_hardirqs_on+0x78/0x100 [ 2032.149620][T32034] do_syscall_64+0x106/0xf80 [ 2032.149631][T32034] ? clear_bhb_loop+0x40/0x90 [ 2032.149644][T32034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2032.149655][T32034] RIP: 0033:0x7feeac19c799 [ 2032.149665][T32034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2032.149676][T32034] RSP: 002b:00007feead06e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2032.149687][T32034] RAX: ffffffffffffffda RBX: 00007feeac415fa0 RCX: 00007feeac19c799 [ 2032.149693][T32034] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 2032.149700][T32034] RBP: 00007feead06e090 R08: 0000000000000000 R09: 0000000000000000 [ 2032.149706][T32034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2032.149712][T32034] R13: 00007feeac416038 R14: 00007feeac415fa0 R15: 00007fffe551b958 [ 2032.149725][T32034] [ 2033.586698][T32062] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6858'. [ 2033.690012][ T78] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2033.793297][T15396] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 2034.054757][T15396] usb 5-1: Using ep0 maxpacket: 16 [ 2034.072495][T15396] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 2034.086531][T15396] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 2034.097888][T15396] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2034.581422][T15396] usb 5-1: Product: syz [ 2034.641886][T15396] usb 5-1: Manufacturer: syz [ 2034.700119][T15396] usb 5-1: SerialNumber: syz [ 2034.716685][T15396] usb 5-1: config 0 descriptor?? [ 2034.727687][T15396] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 2034.740607][T15396] usb 5-1: Detected FT232R [ 2034.951696][T15396] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 2034.988034][T15396] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2034.996333][T15396] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 2035.009973][T15396] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2035.119374][T15396] usb 5-1: USB disconnect, device number 44 [ 2035.165809][T15396] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2035.211059][T15396] ftdi_sio 5-1:0.0: device disconnected [ 2035.278265][T32077] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6861'. [ 2035.568274][T25803] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 2036.048508][T15396] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 2036.259761][T15396] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2036.482344][T15396] usb 7-1: string descriptor 0 read error: -22 [ 2036.508259][T15396] usb 7-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=f2.d0 [ 2036.533323][T15396] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2036.595516][T15396] usb 7-1: config 0 descriptor?? [ 2036.613127][T15396] empeg 7-1:0.0: empeg converter detected [ 2036.647305][T15396] usb 7-1: active config #0 != 1 ?? [ 2036.805654][T32098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6869'. [ 2036.963004][T20075] Bluetooth: hci2: command 0x0406 tx timeout [ 2036.976218][T32093] netlink: set zone limit has 4 unknown bytes [ 2037.008652][T21143] usb 7-1: USB disconnect, device number 13 [ 2037.021288][T15396] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 2037.182223][T15396] usb 1-1: Using ep0 maxpacket: 16 [ 2037.196210][T15396] usb 1-1: config 6 has an invalid interface number: 152 but max is 3 [ 2037.231885][T15396] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 2037.278094][T20075] Bluetooth: hci6: command 0x0406 tx timeout [ 2037.282922][T15396] usb 1-1: config 6 has 1 interface, different from the descriptor's value: 4 [ 2037.374139][T15396] usb 1-1: config 6 has no interface number 0 [ 2037.384964][T15396] usb 1-1: config 6 interface 152 altsetting 253 endpoint 0xB has invalid wMaxPacketSize 0 [ 2037.399214][T15396] usb 1-1: config 6 interface 152 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2037.420971][T15396] usb 1-1: config 6 interface 152 has no altsetting 0 [ 2037.683143][T15396] usb 1-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=e9.aa [ 2037.693179][T32106] FAULT_INJECTION: forcing a failure. [ 2037.693179][T32106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2037.706512][T32106] CPU: 1 UID: 0 PID: 32106 Comm: syz.1.6872 Tainted: G L syzkaller #0 PREEMPT(full) [ 2037.706541][T32106] Tainted: [L]=SOFTLOCKUP [ 2037.706547][T32106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2037.706558][T32106] Call Trace: [ 2037.706565][T32106] [ 2037.706571][T32106] dump_stack_lvl+0x100/0x190 [ 2037.706605][T32106] should_fail_ex.cold+0x5/0xa [ 2037.706629][T32106] _copy_to_user+0x32/0xd0 [ 2037.706658][T32106] simple_read_from_buffer+0xcb/0x170 [ 2037.706689][T32106] proc_fail_nth_read+0x1af/0x230 [ 2037.706716][T32106] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2037.706742][T32106] ? rw_verify_area+0xce/0x6d0 [ 2037.706768][T32106] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2037.706792][T32106] vfs_read+0x1e4/0xb30 [ 2037.706822][T32106] ? __pfx_vfs_read+0x10/0x10 [ 2037.706847][T32106] ? __fget_files+0x215/0x3d0 [ 2037.706872][T32106] ? __fget_files+0x21f/0x3d0 [ 2037.706897][T32106] ksys_read+0x12a/0x250 [ 2037.706923][T32106] ? __pfx_ksys_read+0x10/0x10 [ 2037.706948][T32106] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 2037.706974][T32106] ? syscall_user_dispatch+0x76/0x130 [ 2037.706997][T32106] do_syscall_64+0x106/0xf80 [ 2037.707016][T32106] ? clear_bhb_loop+0x40/0x90 [ 2037.707045][T32106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2037.707063][T32106] RIP: 0033:0x7fa20055cfce [ 2037.707078][T32106] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2037.707095][T32106] RSP: 002b:00007fa20145dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2037.707113][T32106] RAX: ffffffffffffffda RBX: 00007fa20145e6c0 RCX: 00007fa20055cfce [ 2037.707125][T32106] RDX: 000000000000000f RSI: 00007fa20145e0a0 RDI: 0000000000000003 [ 2037.707135][T32106] RBP: 00007fa20145e090 R08: 0000000000000000 R09: 0000000000000000 [ 2037.707146][T32106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2037.707156][T32106] R13: 00007fa200816038 R14: 00007fa200815fa0 R15: 00007ffffdaeba08 [ 2037.707182][T32106] [ 2037.917953][T15396] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2037.926183][T15396] usb 1-1: Product: syz [ 2037.930336][T15396] usb 1-1: Manufacturer: syz [ 2037.934903][T15396] usb 1-1: SerialNumber: syz [ 2038.090689][T21143] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 2038.293830][T21143] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2038.317832][T21143] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2038.447334][T21143] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2038.456671][T21143] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2038.468961][T21143] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2038.481768][T21143] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2039.003265][T21143] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2039.048213][T21143] usb 8-1: Product: syz [ 2039.069444][T21143] usb 8-1: Manufacturer: syz [ 2039.115682][T21143] cdc_wdm 8-1:1.0: skipping garbage [ 2039.207257][T21143] cdc_wdm 8-1:1.0: skipping garbage [ 2039.216793][T21143] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 2039.229061][T21143] cdc_wdm 8-1:1.0: Unknown control protocol [ 2039.831827][T32141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6880'. [ 2040.232203][T32104] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 2040.235543][T15396] ushc 1-1:6.152: probe with driver ushc failed with error -71 [ 2040.382805][T15396] usb 1-1: USB disconnect, device number 115 [ 2041.872881][T32151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6881'. [ 2042.003285][ T792] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 2042.356030][ T792] usb 5-1: Using ep0 maxpacket: 16 [ 2042.372897][ T792] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2042.414737][ T792] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2042.445105][T15396] usb 8-1: USB disconnect, device number 14 [ 2042.484808][ T792] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2042.519747][ T792] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2042.548391][ T792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2042.584839][ T792] usb 5-1: Product: syz [ 2042.601765][ T792] usb 5-1: Manufacturer: syz [ 2042.606425][ T792] usb 5-1: SerialNumber: syz [ 2042.844854][T32169] overlayfs: missing 'lowerdir' [ 2044.296683][ T792] usb 5-1: 0:2 : does not exist [ 2045.415022][T32191] xt_hashlimit: size too large, truncated to 1048576 [ 2045.422077][ T792] usb 5-1: USB disconnect, device number 45 [ 2045.553928][T30902] udevd[30902]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2046.378737][T32205] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6895'. [ 2047.163522][T32206] netlink: set zone limit has 4 unknown bytes [ 2047.470488][T32220] overlayfs: missing 'lowerdir' [ 2048.732774][T32228] netlink: 'syz.6.6902': attribute type 4 has an invalid length. [ 2048.740735][T32228] netlink: 152 bytes leftover after parsing attributes in process `syz.6.6902'. [ 2048.759780][T32228] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2049.146578][T25803] libceph: connect (1)[c::]:6789 error -101 [ 2049.170206][T25803] libceph: mon0 (1)[c::]:6789 connect error [ 2049.272836][T20073] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 2049.445327][T25803] libceph: connect (1)[c::]:6789 error -101 [ 2049.454753][T25803] libceph: mon0 (1)[c::]:6789 connect error [ 2049.487325][T20073] usb 8-1: Using ep0 maxpacket: 8 [ 2049.494342][T20073] usb 8-1: config index 0 descriptor too short (expected 30, got 18) [ 2049.506478][T20073] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2049.540078][T20073] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2049.560244][T20073] usb 8-1: Product: syz [ 2049.579102][T20073] usb 8-1: Manufacturer: syz [ 2049.594126][T20073] usb 8-1: SerialNumber: syz [ 2049.675375][T20073] usb 8-1: config 0 descriptor?? [ 2049.806426][T20073] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2049.869956][T20073] usb 8-1: setting power ON [ 2049.941653][T20073] dvb-usb: bulk message failed: -22 (2/0) [ 2049.958140][T20073] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2049.970491][T20073] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2049.979733][T32231] ceph: No mds server is up or the cluster is laggy [ 2049.981533][T20073] usb 8-1: media controller created [ 2050.841164][T25803] libceph: connect (1)[c::]:6789 error -101 [ 2050.846253][T20073] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2050.859402][T25803] libceph: mon0 (1)[c::]:6789 connect error [ 2050.951576][T20073] usb 8-1: selecting invalid altsetting 6 [ 2050.958005][T20073] usb 8-1: digital interface selection failed (-22) [ 2050.964742][T20073] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2050.984685][T20073] usb 8-1: setting power OFF [ 2050.990123][T20073] dvb-usb: bulk message failed: -22 (2/0) [ 2050.996099][T20073] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2051.094475][T20073] (NULL device *): no alternate interface [ 2051.180897][T20073] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2051.207836][T25803] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 2051.213850][T20073] usb 8-1: USB disconnect, device number 15 [ 2051.400368][T25803] usb 7-1: Using ep0 maxpacket: 16 [ 2051.426420][T25803] usb 7-1: config 6 has an invalid interface number: 152 but max is 3 [ 2051.448677][T25803] usb 7-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 2051.505198][T25803] usb 7-1: config 6 has 1 interface, different from the descriptor's value: 4 [ 2051.525682][T25803] usb 7-1: config 6 has no interface number 0 [ 2051.539182][T25803] usb 7-1: config 6 interface 152 altsetting 253 endpoint 0xB has invalid wMaxPacketSize 0 [ 2051.581909][T25803] usb 7-1: config 6 interface 152 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2051.773492][T25803] usb 7-1: config 6 interface 152 has no altsetting 0 [ 2051.858800][T32262] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 2052.226633][T25803] usb 7-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=e9.aa [ 2052.255714][T25803] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2052.641198][T25803] usb 7-1: Product: syz [ 2052.683124][T25803] usb 7-1: Manufacturer: syz [ 2052.700046][T25803] usb 7-1: SerialNumber: syz [ 2054.791946][T25803] ushc 7-1:6.152: probe with driver ushc failed with error -71 [ 2054.955875][T25803] usb 7-1: USB disconnect, device number 14 [ 2056.822905][ T30] INFO: task syz.5.6372:30289 blocked for more than 145 seconds. [ 2056.830661][ T30] Tainted: G L syzkaller #0 [ 2056.895699][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2056.904681][ T30] task:syz.5.6372 state:D stack:27480 pid:30289 tgid:30273 ppid:25938 task_flags:0x400640 flags:0x00080002 [ 2057.926020][ T30] Call Trace: [ 2057.929355][ T30] [ 2057.932332][ T30] __schedule+0xfee/0x6120 [ 2057.936762][ T30] ? __lock_acquire+0x4a5/0x2630 [ 2057.941938][ T30] ? __pfx___schedule+0x10/0x10 [ 2057.946863][ T30] ? find_held_lock+0x2b/0x80 [ 2057.956409][ T30] ? schedule+0x2bf/0x390 [ 2057.961098][ T30] schedule+0xdd/0x390 [ 2057.965715][ T30] schedule_timeout+0x1b2/0x280 [ 2058.189010][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 2058.194451][ T30] ? __wait_for_common+0x2da/0x4c0 [ 2058.204918][T32305] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 2058.258122][ T30] ? rcu_is_watching+0x12/0xc0 [ 2058.269151][ T30] __wait_for_common+0x2e7/0x4c0 [ 2058.284610][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 2058.305007][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 2058.325635][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 2058.341766][ T30] wait_for_completion_state+0x1c/0x40 [ 2058.356512][ T30] vfs_coredump+0x80d/0x5570 [ 2058.370399][ T30] ? __pfx_vfs_coredump+0x10/0x10 [ 2058.375534][ T30] ? __lock_acquire+0x4a5/0x2630 [ 2058.380782][ T30] ? lock_acquire+0x1cf/0x380 [ 2058.385950][ T30] ? lock_acquire+0x1cf/0x380 [ 2058.390693][ T30] ? find_held_lock+0x2b/0x80 [ 2058.395670][ T30] ? is_bpf_text_address+0x8a/0x1a0 [ 2058.400934][ T30] ? is_bpf_text_address+0x8a/0x1a0 [ 2058.406516][ T30] ? bpf_ksym_find+0x128/0x1c0 [ 2058.411357][ T30] ? __kernel_text_address+0xd/0x30 [ 2058.417140][ T30] ? unwind_get_return_address+0x59/0xa0 [ 2058.422855][ T30] ? arch_stack_walk+0xa6/0xf0 [ 2058.432972][ T30] ? __sigqueue_free+0xbe/0x2a0 [ 2058.445242][ T30] ? stack_trace_save+0x8e/0xc0 [ 2058.458837][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 2058.533056][ T30] ? stack_depot_save_flags+0x27/0x9d0 [ 2058.541717][ T30] ? __lock_acquire+0x4a5/0x2630 [ 2058.550814][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2058.562988][ T30] ? proc_coredump_connector+0x2d3/0x4f0 [ 2058.572397][ T30] ? __pfx_proc_coredump_connector+0x10/0x10 [ 2058.588447][ T30] ? rcu_is_watching+0x12/0xc0 [ 2058.602244][ T30] get_signal+0x1f2a/0x21e0 [ 2058.609045][ T30] ? __pfx_get_signal+0x10/0x10 [ 2058.620537][ T30] arch_do_signal_or_restart+0x91/0x7a0 [ 2058.629731][ T30] ? force_sig_info_to_task+0x4d2/0x660 [ 2058.638025][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2058.647080][ T30] ? rcu_is_watching+0x12/0xc0 [ 2058.657731][ T30] exit_to_user_mode_loop+0x86/0x4a0 [ 2058.669795][ T30] do_syscall_64+0x67c/0xf80 [ 2058.674422][ T30] ? clear_bhb_loop+0x40/0x90 [ 2058.679106][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2058.696229][ T30] RIP: 0033:0x7f0722f9c799 [ 2058.700759][ T30] RSP: 002b:00007f07211b40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2058.723896][ T30] RAX: 00000000000000ca RBX: 00007f0723216188 RCX: 00007f0722f9c799 [ 2058.731910][ T30] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f072321618c [ 2058.748136][ T30] RBP: 00007f0723216180 R08: 0000000000000000 R09: 0000000000000000 [ 2058.767950][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2058.776067][ T30] R13: 00007f0723216218 R14: 00007ffcd1d33330 R15: 00007ffcd1d33418 [ 2058.787436][ T30] [ 2058.792896][ T30] [ 2058.792896][ T30] Showing all locks held in the system: [ 2058.814566][ T30] 1 lock held by khungtaskd/30: [ 2058.833163][ T30] #0: ffffffff8e7e75e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 2058.853904][ T30] 2 locks held by kworker/u8:5/78: [ 2058.864917][ T30] #0: ffff8880b843b1a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 2058.889625][ T30] #1: ffff8880b8424648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2c11/0x6120 [ 2058.908173][ T30] 2 locks held by getty/5564: [ 2058.918544][ T30] #0: ffff8880398f10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 2058.937054][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 2058.947346][ T30] 3 locks held by syz-executor/29826: [ 2058.952883][ T30] [ 2058.955217][ T30] ============================================= [ 2058.955217][ T30] [ 2058.964726][ T30] NMI backtrace for cpu 1 [ 2058.964743][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2058.964768][ T30] Tainted: [L]=SOFTLOCKUP [ 2058.964774][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2058.964785][ T30] Call Trace: [ 2058.964798][ T30] [ 2058.964805][ T30] dump_stack_lvl+0x100/0x190 [ 2058.964838][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 2058.964860][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2058.964890][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 2058.964921][ T30] sys_info+0x141/0x190 [ 2058.964944][ T30] watchdog+0xd25/0x1050 [ 2058.964976][ T30] ? __pfx_watchdog+0x10/0x10 [ 2058.965000][ T30] ? __kthread_parkme+0x18c/0x230 [ 2058.965028][ T30] ? kthread+0x13a/0x450 [ 2058.965043][ T30] ? __pfx_watchdog+0x10/0x10 [ 2058.965068][ T30] kthread+0x370/0x450 [ 2058.965084][ T30] ? __pfx_kthread+0x10/0x10 [ 2058.965102][ T30] ret_from_fork+0x754/0xd80 [ 2058.965122][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 2058.965142][ T30] ? __switch_to+0x7b4/0x1120 [ 2058.965164][ T30] ? __pfx_kthread+0x10/0x10 [ 2058.965183][ T30] ret_from_fork_asm+0x1a/0x30 [ 2058.965215][ T30] [ 2058.965241][ T30] Sending NMI from CPU 1 to CPUs 0: [ 2059.095797][ C0] NMI backtrace for cpu 0 [ 2059.095815][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 2059.095835][ C0] Tainted: [L]=SOFTLOCKUP [ 2059.095840][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2059.095848][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2059.095868][ C0] Code: e8 82 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 f1 1b 00 fb f4 fc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 2059.095882][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000242 [ 2059.095894][ C0] RAX: 000000000abc2b0b RBX: ffffffff8e4975c0 RCX: ffffffff8b8f9c75 [ 2059.095905][ C0] RDX: 0000000000000000 RSI: ffffffff8de74cf8 RDI: ffffffff8c1afaa0 [ 2059.095914][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1017086795 [ 2059.095923][ C0] R10: ffff8880b8433cab R11: 0000000000000000 R12: fffffbfff1c92eb8 [ 2059.095932][ C0] R13: 0000000000000000 R14: ffffffff90d98310 R15: 0000000000000000 [ 2059.095941][ C0] FS: 0000000000000000(0000) GS:ffff888124347000(0000) knlGS:0000000000000000 [ 2059.095956][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2059.095965][ C0] CR2: 00007f486aa4eaeb CR3: 0000000032e85000 CR4: 00000000003526f0 [ 2059.095975][ C0] DR0: 0000000000000000 DR1: 0000000000006800 DR2: 0000000000009951 [ 2059.095984][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2059.095993][ C0] Call Trace: [ 2059.095998][ C0] [ 2059.096003][ C0] default_idle+0x9/0x10 [ 2059.096020][ C0] default_idle_call+0x6c/0xb0 [ 2059.096036][ C0] do_idle+0x35b/0x4b0 [ 2059.096055][ C0] ? __pfx_do_idle+0x10/0x10 [ 2059.096074][ C0] cpu_startup_entry+0x4f/0x60 [ 2059.096091][ C0] rest_init+0x251/0x260 [ 2059.096108][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 2059.096129][ C0] start_kernel+0x47f/0x480 [ 2059.096148][ C0] x86_64_start_reservations+0x24/0x30 [ 2059.096167][ C0] x86_64_start_kernel+0x12b/0x130 [ 2059.096186][ C0] common_startup_64+0x13e/0x148 [ 2059.096207][ C0] [ 2059.319313][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 2059.326193][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2059.336871][ T30] Tainted: [L]=SOFTLOCKUP [ 2059.341180][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2059.351235][ T30] Call Trace: [ 2059.354494][ T30] [ 2059.357401][ T30] dump_stack_lvl+0x100/0x190 [ 2059.362061][ T30] vpanic+0x552/0x970 [ 2059.366028][ T30] ? __pfx_vpanic+0x10/0x10 [ 2059.370539][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 2059.376721][ T30] panic+0xd1/0xe0 [ 2059.380439][ T30] ? __pfx_panic+0x10/0x10 [ 2059.384837][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 2059.390968][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 2059.397099][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 2059.403228][ T30] ? watchdog.cold+0x198/0x1ca [ 2059.407978][ T30] ? watchdog+0xd35/0x1050 [ 2059.412384][ T30] watchdog.cold+0x1a9/0x1ca [ 2059.416972][ T30] ? __pfx_watchdog+0x10/0x10 [ 2059.421640][ T30] ? __kthread_parkme+0x18c/0x230 [ 2059.426659][ T30] ? kthread+0x13a/0x450 [ 2059.430876][ T30] ? __pfx_watchdog+0x10/0x10 [ 2059.435528][ T30] kthread+0x370/0x450 [ 2059.439590][ T30] ? __pfx_kthread+0x10/0x10 [ 2059.444156][ T30] ret_from_fork+0x754/0xd80 [ 2059.448723][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 2059.453807][ T30] ? __switch_to+0x7b4/0x1120 [ 2059.458463][ T30] ? __pfx_kthread+0x10/0x10 [ 2059.463036][ T30] ret_from_fork_asm+0x1a/0x30 [ 2059.467781][ T30] [ 2059.471050][ T30] Kernel Offset: disabled [ 2059.475364][ T30] Rebooting in 86400 seconds..