last executing test programs: 5m50.23664801s ago: executing program 0 (id=633): r0 = open(&(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', 0x16b442, 0xa9) write$binfmt_format(r0, &(0x7f0000000080)='-1\x00', 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="1c0000f5", @ANYRES16=r3, @ANYRESHEX=r3], 0xfdef) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x41000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r4, 0x8b2a, &(0x7f0000000040)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r5, 0x8800000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r8, &(0x7f00000017c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}, {{&(0x7f0000000400)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000500)="b5", 0x1}], 0x1}}], 0x3, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000000)={r7, 0x10000}, 0x8) 5m48.744383968s ago: executing program 0 (id=643): socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) (async, rerun: 32) recvmmsg(r0, &(0x7f0000005200)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/6, 0x6}, {&(0x7f0000000340)=""/111, 0x6f}], 0x2, &(0x7f00000004c0)=""/108, 0x6c}, 0x8}, {{&(0x7f00000006c0)=@un=@abs, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000740)=""/107, 0x6b}, {&(0x7f00000007c0)=""/247, 0xf7}, {&(0x7f00000008c0)}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/171, 0xab}, {&(0x7f00000019c0)=""/161, 0xa1}, {&(0x7f0000001a80)=""/92, 0x5c}, {&(0x7f0000001b00)=""/187, 0xbb}, {&(0x7f0000001bc0)=""/244, 0xf4}], 0x9, &(0x7f0000001d80)=""/230, 0xe6}, 0x1}, {{&(0x7f0000001e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001f00)=""/129, 0x81}], 0x1, &(0x7f0000005480)=""/263, 0x107}, 0x3}, {{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000002000)=""/69, 0x45}, {&(0x7f0000002080)=""/53, 0x35}, {&(0x7f0000002200)=""/226, 0xe2}, {&(0x7f0000002300)=""/144, 0x90}, {&(0x7f00000023c0)=""/148, 0x94}, {&(0x7f0000002480)=""/27, 0x1b}, {&(0x7f00000024c0)=""/100, 0x64}, {&(0x7f0000002540)=""/232, 0xe8}, {&(0x7f0000002640)=""/86, 0x56}], 0x9, &(0x7f0000002780)=""/30, 0x1e}}, {{&(0x7f00000027c0)=@vsock, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002840)=""/203, 0xcb}, {&(0x7f0000002940)=""/112, 0x70}, {&(0x7f00000029c0)=""/207, 0xcf}, {&(0x7f0000002ac0)=""/84, 0x54}, {&(0x7f0000002b40)=""/133, 0x85}, {&(0x7f0000002c00)=""/4, 0x4}, {&(0x7f0000002c40)=""/254, 0xfe}, {&(0x7f0000002d40)=""/60, 0x3c}], 0x8, &(0x7f0000002e00)=""/40, 0x28}}, {{&(0x7f0000002e40)=@alg, 0x80, &(0x7f0000004100)=[{&(0x7f0000002ec0)=""/4096, 0x1000}, {&(0x7f0000003ec0)=""/183, 0xb7}, {&(0x7f0000003f80)=""/78, 0x4e}, {&(0x7f0000004000)=""/91, 0x5b}, {&(0x7f0000004080)=""/97, 0x61}], 0x5, &(0x7f0000004180)=""/159, 0x9f}, 0x4}, {{&(0x7f0000004240)=@qipcrtr, 0x80, &(0x7f0000004600)=[{&(0x7f00000042c0)=""/209, 0xd1}, {&(0x7f00000043c0)=""/193, 0xc1}, {&(0x7f00000044c0)=""/248, 0xf8}, {&(0x7f00000045c0)}], 0x4, &(0x7f0000004640)=""/152, 0x98}, 0x9}, {{&(0x7f0000004700)=@nl=@unspec, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004780)=""/110, 0x6e}, {&(0x7f0000004800)=""/218, 0xda}, {&(0x7f0000004900)=""/253, 0xfd}, {&(0x7f0000004a00)=""/85, 0x55}], 0x4, &(0x7f0000004ac0)=""/217, 0xd9}, 0x400}, {{&(0x7f0000004bc0)=@caif=@rfm, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000004c40)=""/29, 0x1d}, {&(0x7f0000004c80)=""/148, 0x94}, {&(0x7f0000004d40)=""/52, 0x34}, {&(0x7f0000004d80)=""/91, 0x5b}, {&(0x7f0000004e00)=""/17, 0x11}, {&(0x7f0000004e40)=""/37, 0x25}, {&(0x7f0000004e80)}], 0x7, &(0x7f0000004f40)=""/247, 0xf7}, 0x1}, {{&(0x7f0000005040)=@un=@abs, 0x80, &(0x7f0000005100)=[{&(0x7f00000050c0)=""/62, 0x3e}], 0x1, &(0x7f0000005140)=""/139, 0x8b}, 0x81}], 0xa, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/19, @ANYRES32=0x0, @ANYBLOB], 0x40}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) (async) socket(0x400000000010, 0x3, 0x0) (async) syz_open_procfs(0x0, 0x0) (async) getsockopt$packet_buf(r2, 0x107, 0x5, &(0x7f0000000540)=""/220, 0x0) (async) read$FUSE(r2, &(0x7f0000006140)={0x2020}, 0x2020) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r5, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) sendmsg$nl_xfrm(r6, 0x0, 0x0) (async, rerun: 32) socket$alg(0x26, 0x5, 0x0) (async, rerun: 64) msgctl$IPC_RMID(0x0, 0x0) (rerun: 64) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) add_key(&(0x7f0000000200)='cifs.idmap\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) (async, rerun: 32) write$vga_arbiter(r7, &(0x7f0000000080), 0xf) (rerun: 32) 5m48.46066222s ago: executing program 0 (id=646): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x10, 0x4, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x34}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884d01a507, 0x4008032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000c7a000/0x2000)=nil, &(0x7f0000dad000/0x2000)=nil, 0x2000, 0x3}) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@local, 0x0, 0x0, 0x30, 0x0, [{@loopback}, {@broadcast}, {@broadcast}]}}) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) (async) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 5m47.040561985s ago: executing program 0 (id=657): syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000035c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000500)=@mmap={0x1, 0x2, 0x4, 0x2000, 0x9, {}, {0x1, 0xc, 0x4, 0xc0, 0x0, 0x9, "04000010"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x800000, 0x81, {}, {0x4, 0x2, 0x8, 0x9, 0x29, 0x9, "0adb3fb8"}, 0x7, 0x1, {}, 0x0, 0x0, r1}) 5m44.677635254s ago: executing program 0 (id=669): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x10, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, 0x0) 5m44.579051527s ago: executing program 0 (id=671): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(twofish)\x00'}, 0x7d) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="a443fcd7770245fc989b50ea09817223dd9fac342f8f7c3d2cdcae3b14f82c97", 0x20}], 0x1}, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xaa02, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e1d, 0x80000003, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x1c) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m35.783800706s ago: executing program 1 (id=718): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)='D', 0x1}], 0x1}, 0x4048841) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000001c0)="04", 0x1}, {&(0x7f0000001640)="84", 0x1}], 0x2}, 0x1) recvmsg(r0, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x10102) 5m34.52868462s ago: executing program 1 (id=722): socket$kcm(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'veth0_to_hsr\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={0xffffffffffffffff, 0x27, 0xd, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc800320081", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0xfffffffffffffd87, 0x7, 0x3}]}}]}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c"], 0x340a) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000000c0)={0x1c, 0x33, 0x203, 0x70bd29, 0x27dfdbfc, {0x4}, [@typed={0x8, 0x5f, 0x0, 0x0, @ipv4=@empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x24000014) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x5, 0x5c, 0x0, &(0x7f0000000000)='%', 0x0, 0x7fffffff, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5m31.967163069s ago: executing program 32 (id=659): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) socket$vsock_stream(0x28, 0x1, 0x0) r1 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000002380), 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000004000', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000300)=ANY=[@ANYBLOB='usrquota,usrquota_block_hardlimit=8']) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x105842, 0xa9) writev(r3, &(0x7f0000000a40)=[{0x0}, {0x0}, {&(0x7f0000001000)="d6", 0x1}], 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000001bc0)=[{{&(0x7f0000000640)={0x2, 0x4e20, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000001a40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}], 0x18}}], 0x1, 0x4000000) sendmsg$nl_generic(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003d00010325bd7000fcffffff010000009b754a65e4c8f7e6f98e8dc6147dfef2d6138688a0ba2475c67f7bbd99dbe2e5a4a1c74424b5fee16f27944ad66126ca98cf2c0fce68758b36d2"], 0x14}, 0x1, 0x0, 0x0, 0x885}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000340)=0xc) prlimit64(r6, 0x1, &(0x7f0000000380)={0x1, 0x7fff}, &(0x7f0000000440)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=@newtaction={0x60, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7fff}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) fsopen(&(0x7f0000000000)='jfs\x00', 0x0) 5m31.330686723s ago: executing program 1 (id=729): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbefb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) connect$unix(r1, &(0x7f0000000700)=@abs={0x0, 0x0, 0x10000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$FUSE_NOTIFY_DELETE(r5, 0x0, 0x0) r6 = memfd_create(0x0, 0x0) execveat(r6, 0x0, 0x0, 0x0, 0x1000) r7 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x46ee, 0x400, 0xffffcffe, 0x1d0}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r4, 0x22, &(0x7f00000000c0)=@un=@file={0x1, './file0\x00'}, 0x0, 0x0, 0x1}) io_uring_enter(r7, 0x3516, 0x67f, 0x64, 0x0, 0x0) 5m30.367347992s ago: executing program 1 (id=731): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m30.150986256s ago: executing program 1 (id=733): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x10, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) (fail_nth: 2) 5m29.719831303s ago: executing program 1 (id=734): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0x11, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100008000000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000200)="4db9222e27226d1ac5184422543e", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) setns(r2, 0x20000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x24, 0x1a, 0x1, 0x70bd26, 0x25dfdbfb, {0x2}, [@IFAL_LABEL={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x24, 0x1a, 0x1, 0x70bd26, 0x25dfdbfb, {0x2}, [@IFAL_LABEL={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) 5m29.474067804s ago: executing program 33 (id=671): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(twofish)\x00'}, 0x7d) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="a443fcd7770245fc989b50ea09817223dd9fac342f8f7c3d2cdcae3b14f82c97", 0x20}], 0x1}, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xaa02, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e1d, 0x80000003, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x1c) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m26.10786163s ago: executing program 3 (id=741): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) unlink(&(0x7f0000000100)='./file0/file0\x00') mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x299021, 0x0) 5m25.847548184s ago: executing program 3 (id=742): sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) r0 = creat(0x0, 0x0) close(r0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000380)=ANY=[@ANYBLOB="1f00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001b200000000000000071a784c2e59d00005c04000066d8a6"], 0x50) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000004, 0x10010, r1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000000c0), 0x0, 0x20008801) recvmmsg(r3, &(0x7f0000005b40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)=""/167, 0xa7}], 0x1, &(0x7f0000000340)=""/55, 0x37}, 0x4}, {{&(0x7f0000000500)=@un=@abs, 0x80, &(0x7f0000000680)=[{&(0x7f0000000580)=""/78, 0x4e}, {&(0x7f0000000400)=""/44, 0x2c}, {&(0x7f0000000640)=""/47, 0x2f}], 0x3, &(0x7f00000006c0)=""/132, 0x84}, 0xffff3e3b}, {{&(0x7f0000000980)=@qipcrtr, 0x80, &(0x7f0000001e00)=[{&(0x7f0000000780)=""/33, 0x21}, {&(0x7f0000000a00)=""/230, 0xe6}, {&(0x7f0000000b00)=""/24, 0x18}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/37, 0x25}, {&(0x7f0000001b80)=""/255, 0xff}, {&(0x7f0000001c80)=""/45, 0x2d}, {&(0x7f0000001cc0)=""/188, 0xbc}, {&(0x7f0000001d80)=""/100, 0x64}], 0x9, &(0x7f0000001ec0)=""/125, 0x7d}, 0x6cce}, {{&(0x7f0000001f40)=@un=@abs, 0x80, &(0x7f0000002340)=[{&(0x7f0000001fc0)=""/207, 0xcf}, {&(0x7f0000005dc0)=""/250, 0xfa}, {&(0x7f00000021c0)=""/79, 0x4f}, {&(0x7f0000002240)=""/243, 0xf3}], 0x4}, 0x8}, {{&(0x7f0000002380)=@ax25={{0x3, @null}, [@remote, @rose, @default, @remote, @rose, @rose, @remote, @bcast]}, 0x80, &(0x7f0000002780)=[{&(0x7f0000002400)=""/32, 0x20}, {&(0x7f0000002440)=""/255, 0xff}, {&(0x7f0000002540)=""/204, 0xcc}, {&(0x7f0000002640)=""/153, 0x99}, {&(0x7f0000002700)=""/99, 0x63}], 0x5, &(0x7f0000002800)=""/112, 0x70}, 0x7fff}, {{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000002880)=""/195, 0xc3}, {&(0x7f0000002980)=""/195, 0xc3}, {&(0x7f0000002a80)=""/37, 0x25}, {&(0x7f0000002ac0)=""/1, 0x1}, {&(0x7f0000002b00)=""/87, 0x57}], 0x5, &(0x7f0000002c00)=""/148, 0x94}, 0xa}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000002cc0)=""/134, 0x86}, {&(0x7f0000002d80)=""/39, 0x27}], 0x2, &(0x7f0000002e00)=""/192, 0xc0}, 0x9}, {{&(0x7f0000002ec0)=@nfc, 0x80, &(0x7f0000003300)=[{&(0x7f0000002f40)=""/92, 0x5c}, {&(0x7f0000002fc0)=""/165, 0xa5}, {&(0x7f0000003080)=""/140, 0x8c}, {&(0x7f0000003140)=""/210, 0xd2}, {&(0x7f0000003240)=""/137, 0x89}], 0x5}, 0x5}, {{&(0x7f0000003380)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000057c0)=[{&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/4096, 0x1000}, {&(0x7f0000005400)=""/129, 0x81}, {&(0x7f00000054c0)=""/200, 0xc8}, {&(0x7f00000055c0)=""/168, 0xa8}, {&(0x7f0000005680)=""/68, 0x44}, {&(0x7f0000005700)=""/166, 0xa6}], 0x7, &(0x7f0000005840)=""/81, 0x51}, 0x7}, {{&(0x7f00000058c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000005ac0)=[{&(0x7f0000005940)=""/223, 0xdf}, {&(0x7f0000005a40)=""/100, 0x64}], 0x2, &(0x7f0000005b00)=""/41, 0x29}, 0x101}], 0xa, 0x2, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newtaction={0x188, 0x30, 0x1, 0x8002, 0x25dfdbfd, {}, [{0x174, 0x1, [@m_mpls={0x170, 0x1, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x6, 0x0, 0x2}, 0x5}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x1fffc000, 0x9, 0x999fc40ba6e68d2a, 0x3ff, 0x7fff}, 0x3}}]}, {0xf9, 0x4, "c100219dcb38155853b409a14673b786177ac867548593fdf98ad49139363dd4f62f8cb346dc4b39dc9fadcd453dc2b1ad1219df2c44a2d5fed7c8d00c6058dd400104d36afdcb094ac8d7bd4bb6e2a151111eb03b04ca91df54dbe34bc5fbf7706094b8ba409c37b246ccb92cd03337f709b1e0474439ffd4a60bd67fff58a6ea79df92d49d1f3a5e39f63c24f2855d880911899ed687e3a562221f9529e5a0473ebd661de83472d72d48e79b4bed77d6d37a04f105f9a8c3ace276235e7e5d4a0d04f2c513e373b30b553f82b0f08ae4bea2484111e85210fb55a3f03de26aff1e48adad02d73067f56980722bea567fbac40bdc"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x188}}, 0x0) connect$packet(r0, &(0x7f00000000c0)={0x11, 0x2, 0x0, 0x1, 0x6, 0x6, @multicast}, 0x14) setsockopt$PNPIPE_HANDLE(r6, 0x113, 0x3, &(0x7f0000000100)=0x7d7, 0x4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_START_POLL(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000053", @ANYRES16=r9, @ANYBLOB="0100230100003402000006000000"], 0x14}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) io_setup(0x8, &(0x7f0000000600)) sendmsg$nl_xfrm(r0, &(0x7f0000002140)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002100)={&(0x7f0000005ec0)=@delsa={0x1c8, 0x11, 0x200, 0x70bd2d, 0x25dfdbfb, {@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x4d3, 0x2, 0x33}, [@extra_flags={0x8, 0x18, 0x6}, @tmpl={0xc4, 0x5, [{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d6, 0x6c}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3500, 0x1, 0x0, 0x10, 0x1, 0x0, 0x3}, {{@in=@rand_addr=0x64010102, 0x4d4, 0x6c}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x34ff, 0x3, 0x2, 0x2, 0x10, 0xa, 0x9}, {{@in=@local, 0x4d4, 0x78734c4031fd7afa}, 0xa, @in=@private=0xa010101, 0x3502, 0x4, 0x1, 0x8, 0xd, 0x1, 0x8000}]}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x4}, @encap={0x1c, 0x4, {0x3, 0x4e20, 0x4e24, @in=@private=0xa010102}}, @migrate={0x9c, 0x11, [{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, @in6=@rand_addr=' \x01\x00', @in=@local, 0x2b, 0x0, 0x0, 0x3501, 0xa, 0xa}, {@in=@local, @in=@local, @in6=@mcast2, @in=@private=0xa010100, 0x33, 0x1, 0x0, 0x3503, 0xa, 0xa}]}, @coaddr={0x14, 0xe, @in=@loopback}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x8000}, 0x4040040) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="3183000000000000000019f3ffff17000180140002006e657464657673696d30000000000000"], 0x2c}}, 0x0) 5m24.844344426s ago: executing program 3 (id=744): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)='D', 0x1}], 0x1}, 0x4048841) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000001c0)="04", 0x1}, {&(0x7f0000001640)="84", 0x1}], 0x2}, 0x1) recvmsg(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000740)}, 0x10102) 5m23.939812929s ago: executing program 3 (id=745): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000001480), &(0x7f00000014c0)=0x4) rseq(&(0x7f0000003140)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2, 0x8000000000000000, 0x5, 0x3}, 0x2}, 0x20, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/245, 0xf5}], 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xe) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000000)) fgetxattr(r2, &(0x7f0000000100)=@known='user.syz\x00', &(0x7f0000000140)=""/82, 0x52) 5m23.832642339s ago: executing program 3 (id=746): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x10, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 5m23.743986314s ago: executing program 3 (id=747): r0 = socket$inet6(0xa, 0x2, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) listen(r1, 0x10040) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x8, 0x5}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x40, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x43, 0x10000}]}}}}}}}, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f00000004c0)={0x0, 0x200, 0x1e00, 0x3231564e, 0x2, [0x2], [0x7fc], [0x4], [0x3fffffffffffffd]}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000580)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) write$nci(r4, &(0x7f0000000000)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x33, {0x1, 0x20, 0x5}}, 0x6) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000bb"], 0x190) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x1, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback={0x4000000}, @empty, [@srh={0x2b}]}}}}}}}, 0x0) socket$inet6(0xa, 0x2, 0x4) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (async) listen(r1, 0x10040) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x8, 0x5}]}}}}}}}, 0x0) (async) syz_emit_ethernet(0x42, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x40, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x43, 0x10000}]}}}}}}}, 0x0) (async) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f00000004c0)={0x0, 0x200, 0x1e00, 0x3231564e, 0x2, [0x2], [0x7fc], [0x4], [0x3fffffffffffffd]}) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88) (async) socket$kcm(0x2, 0x200000000000001, 0x0) (async) sendmsg$inet(r3, &(0x7f0000000580)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) (async) write$nci(r4, &(0x7f0000000000)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x33, {0x1, 0x20, 0x5}}, 0x6) (async) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000bb"], 0x190) (async) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x1, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback={0x4000000}, @empty, [@srh={0x2b}]}}}}}}}, 0x0) (async) 5m15.159981452s ago: executing program 5 (id=784): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x10, 0x0, 0x0) 5m15.125462879s ago: executing program 5 (id=785): keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x3}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001f80)=@newtaction={0x14, 0x76, 0x1, 0x6, 0x0, {0x0, 0x0, 0x300}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000019000100010500000000000000140004ff40480b012000000800050000000000080001000a010101"], 0x2c}, 0x1, 0xba01}, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x100, 0x7ffc, 0x0, 0x9, 0x100000000, 0x0, 0x4, 0x8, 0x0, 0xc3, 0x7f, 0x1, 0x0, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x100000000, 0xffffffffffffffff, 0x0, 0x5, 0x4, 0x4, 0x10000002, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x4, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fd, 0xb4e, 0xffffffff, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0xd87, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0xdf9cd8e, 0x8000200, 0x6, 0x5, 0x0, 0x3ec, 0x0, 0xbb, 0x200000, 0x0, 0x0, 0xfffffffe, 0x7, 0x7ffffffd, 0x3, 0x0, 0xffffffffffff2328, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0xb, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff]}) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r7 = io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0), 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) fsopen(&(0x7f00000029c0)='cifs\x00', 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x4000041) r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x183003) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r8, 0x80dc5521, &(0x7f00000011c0)=""/230) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r9, 0x400, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x4000000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) 5m14.972325669s ago: executing program 5 (id=786): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xffffffff}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x2, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r2) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x4084) read$FUSE(r2, &(0x7f00000024c0)={0x2020}, 0xfffffec1) landlock_restrict_self(r1, 0xa) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "ce441b5db0d9a57acbd41fe406b4b7aabe8a66a25a2f09bb892d166bca4d3e6eb7151fa49aff99e49bd89a70ae52ccf501bf1dace7ed38a940f2d83e4ff2358f", 0x36}, 0x48, 0xfffffffffffffffb) 5m14.803331308s ago: executing program 5 (id=787): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x7f, 0x228000, 0x3, 0x9, 0x8, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x6, {0x0, 0x18}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xa6c81, 0xc0) open_by_handle_at(r2, &(0x7f0000000000)=@fuse_with_parent={0x18, 0x82, {{0x91, 0x1, 0x7}, {0x9, 0xfffffff7, 0x9}}}, 0x80301) 5m14.687355363s ago: executing program 34 (id=734): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0x11, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100008000000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000200)="4db9222e27226d1ac5184422543e", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) setns(r2, 0x20000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x24, 0x1a, 0x1, 0x70bd26, 0x25dfdbfb, {0x2}, [@IFAL_LABEL={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x24, 0x1a, 0x1, 0x70bd26, 0x25dfdbfb, {0x2}, [@IFAL_LABEL={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) 5m14.683784389s ago: executing program 5 (id=790): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x10, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) (fail_nth: 4) 5m14.560045531s ago: executing program 5 (id=791): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2282, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x45, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, 0x0) r2 = socket$inet(0x2, 0xa, 0x2) close(0x3) socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendto$inet(r2, 0x0, 0x0, 0x20000050, &(0x7f00000002c0)={0x2, 0x4e21, @private=0xa010101}, 0x10) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x74, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfa4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x802}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc00}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x74}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x40000019}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004840}, 0xcc00) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf250601f2800c"], 0x118}], 0x1, 0x0, 0x0, 0x811}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_delroute={0xffffffffffffff56, 0x18, 0x9, 0x70bd2d, 0x10000, {0x1c, 0x14, 0x14, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x1000}, [@RTA_NEWDST={0x84, 0x13, [{0xb, 0x0, 0x1}, {0xae5, 0x0, 0x1}, {0x9}, {0x1}, {0x6}, {0x8, 0x0, 0x1}, {0x3ff, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x6}, {0x7ff, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x75a}, {0xfff, 0x0, 0x1}, {0x4}, {0xf0001, 0x0, 0x1}, {0x9}, {0xffff}, {}, {0x3, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x9}, {0x2}, {0x3ff}, {0x800, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5}, {0xd24a2, 0x0, 0x1}, {0x572a, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x200}, {0x1a}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x0, 0x800) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@fallback=r4, 0x24, 0x0, 0x48d9, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r9 = inotify_init1(0x0) inotify_rm_watch(r9, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@map, 0xffffffffffffffff, 0x2e, 0x0, 0x0, @void, @value=r7, @void, @void, r8}, 0x20) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x48b, 0x0, 0x2}]}) 5m8.733544654s ago: executing program 35 (id=747): r0 = socket$inet6(0xa, 0x2, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) listen(r1, 0x10040) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x8, 0x5}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x40, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x43, 0x10000}]}}}}}}}, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f00000004c0)={0x0, 0x200, 0x1e00, 0x3231564e, 0x2, [0x2], [0x7fc], [0x4], [0x3fffffffffffffd]}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000580)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) write$nci(r4, &(0x7f0000000000)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x33, {0x1, 0x20, 0x5}}, 0x6) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000bb"], 0x190) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x1, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback={0x4000000}, @empty, [@srh={0x2b}]}}}}}}}, 0x0) socket$inet6(0xa, 0x2, 0x4) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (async) listen(r1, 0x10040) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x8, 0x5}]}}}}}}}, 0x0) (async) syz_emit_ethernet(0x42, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x40, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x43, 0x10000}]}}}}}}}, 0x0) (async) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f00000004c0)={0x0, 0x200, 0x1e00, 0x3231564e, 0x2, [0x2], [0x7fc], [0x4], [0x3fffffffffffffd]}) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88) (async) socket$kcm(0x2, 0x200000000000001, 0x0) (async) sendmsg$inet(r3, &(0x7f0000000580)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) (async) write$nci(r4, &(0x7f0000000000)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x33, {0x1, 0x20, 0x5}}, 0x6) (async) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000bb"], 0x190) (async) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x1, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback={0x4000000}, @empty, [@srh={0x2b}]}}}}}}}, 0x0) (async) 4m59.296662102s ago: executing program 36 (id=791): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2282, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x45, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, 0x0) r2 = socket$inet(0x2, 0xa, 0x2) close(0x3) socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendto$inet(r2, 0x0, 0x0, 0x20000050, &(0x7f00000002c0)={0x2, 0x4e21, @private=0xa010101}, 0x10) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x74, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfa4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x802}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc00}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x74}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x40000019}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004840}, 0xcc00) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf250601f2800c"], 0x118}], 0x1, 0x0, 0x0, 0x811}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_delroute={0xffffffffffffff56, 0x18, 0x9, 0x70bd2d, 0x10000, {0x1c, 0x14, 0x14, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x1000}, [@RTA_NEWDST={0x84, 0x13, [{0xb, 0x0, 0x1}, {0xae5, 0x0, 0x1}, {0x9}, {0x1}, {0x6}, {0x8, 0x0, 0x1}, {0x3ff, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x6}, {0x7ff, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x75a}, {0xfff, 0x0, 0x1}, {0x4}, {0xf0001, 0x0, 0x1}, {0x9}, {0xffff}, {}, {0x3, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x9}, {0x2}, {0x3ff}, {0x800, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x5}, {0xd24a2, 0x0, 0x1}, {0x572a, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x200}, {0x1a}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x0, 0x800) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@fallback=r4, 0x24, 0x0, 0x48d9, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r9 = inotify_init1(0x0) inotify_rm_watch(r9, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@map, 0xffffffffffffffff, 0x2e, 0x0, 0x0, @void, @value=r7, @void, @void, r8}, 0x20) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x48b, 0x0, 0x2}]}) 3m10.94485404s ago: executing program 7 (id=1288): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x1, @loopback, 0x3}}, 0x0, 0x0, 0x3e, 0x0, "bb02a3c364ca41d6357e544507684004000b42a28000000000000010208a0e2f964e0000c534b602cd6193fc049b2df3eea18afaa4ff1f5600000000000000000000000000ff00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'veth0_to_hsr\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4) listen(r0, 0x800) accept4(r0, 0x0, 0x0, 0x80000) futex(0x0, 0x9, 0x1, 0x0, 0x0, 0x2) syz_usb_connect(0x2, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6578, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) io_setup(0x1, &(0x7f0000002500)=0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, 0x0, 0x0) io_submit(r6, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000004, 0x46031, 0xffffffffffffffff, 0x0) 3m7.685121517s ago: executing program 7 (id=1304): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) (async) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100080020b404010000000000000109022400"], 0x0) (async) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 64) ftruncate(0xffffffffffffffff, 0x3) (async, rerun: 64) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) fanotify_mark(0xffffffffffffffff, 0x105, 0x44009975, 0xffffffffffffffff, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f00000028c0)={0x0, 0x28}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f0000000400)=[{{&(0x7f0000000240)=@can, 0x80, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/232, 0xe8}], 0x1, &(0x7f00000003c0)=""/11, 0xb}, 0xfffffff8}], 0x1, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) syz_open_dev$vim2m(0x0, 0x7, 0x2) socket(0x2b, 0x3, 0x1) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000200), 0x0, 0x80800}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0xfffffffe, 0xab000000, 0x3}) (rerun: 64) 3m7.356627618s ago: executing program 7 (id=1307): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r5, r8, 0x4e, 0x0) write$binfmt_script(r8, &(0x7f0000000800)={'#! ', './file0'}, 0xb) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10}}]}}, 0x0) tee(r7, r6, 0x9, 0x8) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r9 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509"], 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) syz_usb_disconnect(r9) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r10, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x1c, r3, 0x409, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}}, 0x20004880) 3m2.563518462s ago: executing program 7 (id=1325): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r4 = creat(&(0x7f0000000940)='./file1\x00', 0x149) close(r4) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r4, &(0x7f00000008c0)=[{&(0x7f0000000600)=""/221, 0xdd}], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x80044940, &(0x7f0000000400)) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x8040) 3m2.552578648s ago: executing program 7 (id=1328): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x10, &(0x7f0000000400)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002500), 0x2, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r3, &(0x7f00000024c0)={0x18, 0x0, r5, {0xddf}}, 0x18) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r6, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r6, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r8 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0x0, 0xa}, {0xfff1}}}, 0x24}}, 0x0) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r10, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 3m2.551393019s ago: executing program 7 (id=1330): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x8, 0x8, 0x6e, 0x2, 0x4, 0xffffffffffffffff}) ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_clone3(0x0, 0x0) read$msr(r1, &(0x7f0000025300)=""/102392, 0x18ff8) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, 0x0, 0x4008040) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) (async) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket(0x2b, 0xa, 0x1) (async) socket(0x2b, 0xa, 0x1) ioctl$UI_DEV_CREATE(r3, 0x5501) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc9) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc9) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r4) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000d0000000500070012000000050018007f00000006000800feff0000050017000000000005001a000000000006000a00ffff00000500190004000000050007000700000005001b00ff0000000500010001000000060008"], 0x6c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x2000000, &(0x7f00000003c0)={[], [], 0x2f}) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x2000000, &(0x7f00000003c0)={[], [], 0x2f}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup(0x3ca9, 0x0) (async) io_uring_setup(0x3ca9, 0x0) 2m48.487108132s ago: executing program 37 (id=1330): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x8, 0x8, 0x6e, 0x2, 0x4, 0xffffffffffffffff}) ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_clone3(0x0, 0x0) read$msr(r1, &(0x7f0000025300)=""/102392, 0x18ff8) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, 0x0, 0x4008040) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) (async) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket(0x2b, 0xa, 0x1) (async) socket(0x2b, 0xa, 0x1) ioctl$UI_DEV_CREATE(r3, 0x5501) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc9) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc9) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r4) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000d0000000500070012000000050018007f00000006000800feff0000050017000000000005001a000000000006000a00ffff00000500190004000000050007000700000005001b00ff0000000500010001000000060008"], 0x6c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x2000000, &(0x7f00000003c0)={[], [], 0x2f}) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x2000000, &(0x7f00000003c0)={[], [], 0x2f}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup(0x3ca9, 0x0) (async) io_uring_setup(0x3ca9, 0x0) 11.015280232s ago: executing program 4 (id=2024): sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x8048451}, 0x48110) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f0000000340), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10003, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x3, 0x400, 0x80, 0x89, 0x0, 0xa, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x9) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 10.744147207s ago: executing program 6 (id=2027): sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400", @ANYRES16=0x0, @ANYBLOB="010028bd700bfbdbdf"], 0x14}, 0x1, 0x0, 0x0, 0x8048451}, 0x48110) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x9) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9.604796853s ago: executing program 6 (id=2033): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x50) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000340)={@ipv4={""/10, ""/2, @initdev}, 0x0}, &(0x7f0000000380)=0x14) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/rcu_expedited', 0x1, 0x87) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0xa, &(0x7f0000000180)=@raw=[@map_idx={0x18, 0xa, 0x5, 0x0, 0xd}, @initr0={0x18, 0x0, 0x0, 0x0, 0xf93, 0x0, 0x0, 0x0, 0x7fffffff}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_val={0x18, 0x8, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6}, @generic={0x93, 0x2, 0xd, 0x787b, 0x9}], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x6f, &(0x7f00000002c0)=""/111, 0x40f00, 0x42, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000400)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x3, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000480)=[{0x3, 0x2, 0xd, 0xa}, {0x0, 0x3, 0xf, 0xa}, {0x3, 0x4, 0x9, 0x8}, {0x2, 0x1, 0xc, 0xa}, {0x2, 0x4, 0x3, 0x2}, {0x4, 0x2, 0x3, 0x1}, {0x4, 0x5, 0xe, 0x4}, {0x2, 0x3, 0xa, 0xb}], 0x10, 0x5}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r4, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff038}, {0xb1, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r6, &(0x7f0000001c00), 0x400000000000159, 0x40840) (async) sendmmsg(r6, &(0x7f0000001c00), 0x400000000000159, 0x40840) io_uring_enter(0xffffffffffffffff, 0x46f6, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x11, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x11, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000004600)) 9.296210215s ago: executing program 4 (id=2034): r0 = socket$xdp(0x2c, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x3, &(0x7f0000000440)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100feffffff0000010017000000440006803d00040067636d40d1286165732900000000000000000000000000000000000000000000000015000000e38e7e1a5ea29bfc1b77b94955c07855eb12198979"], 0x58}, 0x1, 0x0, 0x0, 0x4000024}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000400)={0x80000000, 0x0, &(0x7f00000002c0)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000180)={r8, 0x0, &(0x7f0000000380)}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="150327bd7000fdeddf25040000000c0001800800030003"], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x4800) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e23, 0x4, @empty, 0xffbffffc}, 0x1c) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000140)=0x80000001, 0x4) 8.040183757s ago: executing program 6 (id=2040): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300), r2, 0x0, 0x2, 0x4}}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x1}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000003c0)={0x7, 0x8, 0xfa00, {r2, 0x7}}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaa5aa08004500001a000000000002907800000000e0000001080090780004007fddb38bf13e868e9667c64a4863ae052f07d83d4e6a65e403d62e672186c5c670d06720242b92fc42299b3287c1a8d59aeaea3c9e553d769b1084e0d54e46568cdf5bfc5a188efe"], 0x0) syz_usb_connect(0x3, 0x34, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02000905000000000000000705e3"], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x900000000, 0xc440) 8.00724732s ago: executing program 9 (id=2041): prlimit64(0x0, 0x2, &(0x7f0000000440)={0x6, 0x1000000000000000}, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x1, 0x5000}, {0x1, 0x101}]}]}, {0x0, [0x5f]}}, 0x0, 0x37, 0x0, 0x7, 0x1}, 0x28) 7.812892383s ago: executing program 9 (id=2042): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x24002800) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, 0x0) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[], 0x1c}}, 0x0) r10 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r1, &(0x7f0000000340)={0x40000000}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x7) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x56074974}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0xc080) 6.932770873s ago: executing program 9 (id=2043): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) r1 = socket(0x10, 0x803, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000440)='cpuacct.usage_all\x00', 0x275a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a310000000009000100730c00018006000100000000000800034000000001140000001100010000000000000000000300000a00"/112], 0x70}, 0x1, 0x0, 0x0, 0x4000810}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000680)=""/180, 0xb4}], 0x1, 0x6, 0x7) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000006a0001002abd7000fbdbdf25000000000000000004000b001c1a53e10346f61068a75cc5b644ca153a1f8c4f3126011b01873399451804cc0426b0576c488e53e63408"], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x440b0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000640)="3013f93f6a23826aeaa571d88a1fc628ec108a5ce411744d4e3ae79c5374eb3bdc7564d840b7d870c0da80f54b31a033a88be722054380", 0x37}, {&(0x7f0000000880)="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", 0x193}], 0x2, &(0x7f0000000600)=ANY=[], 0x10}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYRES64=r6, @ANYRESDEC=r0, @ANYRESDEC, @ANYRES16=r1, @ANYRESDEC=r3], 0x6f4}}, 0x4044805) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r6, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="08032abd7000fbdbdf251900000008000300", @ANYRES32=r9, @ANYBLOB="0c009900010400000e0000000500a2000328e2fa4488bb70dac2c6e7"], 0x38}, 0x1, 0x0, 0x0, 0x8050}, 0x0) r10 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_PARM(r10, 0xc0cc5616, &(0x7f0000000140)={0x4, @capture={0x1000, 0x1, {0x0, 0x1}, 0x9, 0x10}}) ioctl$sock_netdev_private(r6, 0x8948, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a") ioctl$DVB_DEMUX_DMX_DQBUF(r3, 0xc0186f40, &(0x7f0000000380)={0xffff, 0xc858, 0x3, 0x387, 0x8, 0x1}) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x4138013, r3, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001480)=0x7) 5.098630473s ago: executing program 9 (id=2046): r0 = memfd_create(&(0x7f0000001000)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\n\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xce\x1b\n\x87t\x14\xd7\xf3\x1cW\x862l\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x109081, 0x34) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000a00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r4}}, './file0\x00'}) syz_fuse_handle_req(r2, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)={0x20, 0x0, 0x7, {0xffffffff, 0x4, 0xbf9, 0x2000000}}, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r1, 0x3b86, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0xa, 0x2) r8 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r8, 0x80079a0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setstatus(r9, 0x4, 0x22bc2fc78e92c4cb) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff, 0x100000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, 0x0, 0x0) lseek(r8, 0x0, 0x4) 4.428270568s ago: executing program 8 (id=2048): r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = getpgid(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3303f5ff17ec04f20000150000000c0001800800030007"], 0x20}}, 0x0) r4 = syz_open_procfs(r1, &(0x7f0000000080)='net/icmp\x00') r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40500, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x27) preadv(r4, &(0x7f0000000700)=[{&(0x7f0000000380)=""/165, 0xa5}], 0x1, 0x7, 0x2) 4.401011908s ago: executing program 4 (id=2049): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) syz_emit_ethernet(0xa6, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x70, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x20}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, '\x00'/12}]}}}}}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000440)="5800000014001923060000000000000010ff000000000069d6e580dfee0000004e32f61bcdf1e422676b001000000100800000000000001000aadc28dad12c0d03cf77ce8196c2b228742e6faa000000c600000000000000", 0x58}], 0x1) (async) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2a, 0x8001, 0x2, 0x6, 0x6, 0x5, 0x3, 0x200, 0xfffffffb}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b80)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffe0, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x0) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 4.185659043s ago: executing program 8 (id=2050): sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010028bd700bfbdb"], 0x14}, 0x1, 0x0, 0x0, 0x8048451}, 0x48110) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f0000000340), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10003, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x3, 0x400, 0x80, 0x89, 0x0, 0xa, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x9) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.173887266s ago: executing program 2 (id=2051): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) getpgid(r0) syz_open_procfs$pagemap(r0, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) gettimeofday(0x0, &(0x7f0000000100)) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x65) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='clear_refs\x00') 4.056263165s ago: executing program 9 (id=2052): socket$nl_generic(0x10, 0x3, 0x10) unshare(0x200) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000600)=@random="abeedb077f3c3400d27daacf55462eb341499b65", 0x14, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001740)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYBLOB, @ANYRESDEC=r0, @ANYRES16, @ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xc, 0xb9, &(0x7f0000000140)=""/185, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) syz_emit_vhci(0x0, 0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0x7}, {0x0, 0xfff3}, {0xd, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffe}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x9}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x4890) 4.055084995s ago: executing program 6 (id=2053): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x3}]}, @ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @restrict={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x4a}, 0x20) io_uring_setup(0x6f6, &(0x7f0000005100)={0x0, 0x9dcc, 0x802}) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000180)={0x0, 0x40c987, 0x0, 0xffffffdf, 0x316}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r3, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x200000000000012a, &(0x7f0000000200)=[{0x2f, 0x0, 0x0, 0x4}]}, 0x10) r6 = syz_io_uring_setup(0x7cf0, &(0x7f0000000440)={0x0, 0x15d2, 0x30101, 0x0, 0x185}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r9}}) io_uring_enter(r6, 0x7a98, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000000)='./cgroup\x00') munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r10 = open(&(0x7f00000000c0)='.\x00', 0x101000, 0x190) getdents(r10, &(0x7f0000001fc0)=""/184, 0xb8) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x25cb}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x6020}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 3.81110526s ago: executing program 4 (id=2054): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, 0x0) ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, &(0x7f0000000080)={0x36}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) landlock_create_ruleset(0x0, 0x0, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1d, 0xc, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1800000000000000000000000000100085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2af}, 0x94) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newqdisc={0x138, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x400405d}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050025bd7000fdffdfff4400000008000300bab2d7c0fc35adce525969437838542c488e8d2304de2cbdc1f34740f7652eb542faf403989183efc3c22bcc4cbd37d3e4064c5eafae0e3d1bb3f79cae3ef9085ce2a8e544a03160d2a4458a8e4c6c659af7d7b80284e164460d68ca423c44bbe122cdc338ca822ae4e2511d85e480457ec6f0c5b4fd681b071b4ac706956418c5aca1f6fc55ff8aca690d96053b3426418236f8af60e9ec967f2061f2e6c0992c8e0c5f0f2b3071a03de89fe4ca2eb811a960766368d047819d378a8e6fc3883c9542", @ANYRES32=r11, @ANYBLOB="100070000500010000000000040007000a0018000303030303030000"], 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r12, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="270302", 0x3}], 0x1}, 0x5) 3.330459451s ago: executing program 2 (id=2055): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r1, 0x0, 0x25, 0x2, @void}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000000000000000000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff8500000004000000954759ed1fe2d1d95eb67b64bd614bf89df82316ea5cd4db3193a45b61961c7685e022d70760041e62896c735e971e35eaf1e5a331ae04ce6a1407c4acf7d493d0a39b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0xc, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r4, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568daf133e50b", @ANYRESHEX, @ANYRESOCT=r2], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@fallback=r3, r5, 0x37, 0x2000}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xffff, 0x4, 0x5, 0x1000, 0x1, 0xffff2d79, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x24, 0x2, 0x3}, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map=r7, r2, 0x24, 0x2000, r2}, 0x20) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_ext={0x1c, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000099940000a4403000f0ffffff183a0000030000000000000000000000d50850000800000005881000ff0300009500010000000000f7b9f01b6d8c873a01fe71390e0e8f0683ef0e5646ea00a1a0cd4a582e467362d5d16da9e4a9032cee1bc4d319b93514aaba6b869a7bca1d78e9a80b1c85ceb74dcba028ddd5efc7fb489b3cdff18729ffe41ef59a0fb414710d24fcd74898c222297dce173aeb844e524e6939ce2cfaa0e4ac0498ceb6918f56c8e72b0def8681026bcda4ffa52421dd5300000000c46cca3e2bde5d93975037bbc9b31889aa2f0e14e72f19"], &(0x7f0000000200)='syzkaller\x00', 0xf0, 0x90, &(0x7f0000000300)=""/144, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x10, 0xffffffff, 0xd}, 0x10, 0x268e, 0xffffffffffffffff, 0x2, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000400)=[{0x1, 0x5, 0xf, 0x2}, {0x0, 0x1, 0x6, 0x7}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@ifindex, r0, 0x22, 0x0, r1, @void, @value=r8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x23}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r9, 0x8935, &(0x7f0000000000)={'veth0_macvtap\x00'}) syz_usb_connect(0x2, 0x1b2, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x34, 0xb, 0xd4, 0x8, 0x1a8d, 0x100e, 0x2500, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1a0, 0x1, 0x2, 0x4c, 0x80, 0x80, "", [{{0x9, 0x4, 0xe, 0x8, 0x9, 0xff, 0x85, 0x2c, 0xc2, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "73e9"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x800, 0xffa3, 0xf51d, 0x40}, {0x6, 0x24, 0x1a, 0x5, 0x9}, [@mdlm={0x15, 0x24, 0x12, 0xc2}, @mdlm_detail={0xc9, 0x24, 0x13, 0x3, "4d82e032277059f15d662bbb1641f12cbdbe5a6b1fe86658cba7d3e454ed8bcbf5ed231d0d80ab68fa8ea158bb4516df58cc9a1a335b5f3c507356a681b0c8225fff2928bdda8960475e204c020c988072914d81283412710bd0e03106252530bfe3f95ad7fecc8726d5904ee9d96aeee773636e23ae4bc01247e7ec8962df870c51dc2a04bdc63c27dc32b53c925cc18fa5714b03c53b701ec48793f5616cb7af9635a211bc501942292a1b0665f5697d4f31d663c573c028c82cfae505741d0a78078175"}, @country_functional={0x10, 0x24, 0x7, 0x1, 0x7, [0x7, 0x6, 0x20, 0x6c, 0xf]}]}], [{{0x9, 0x5, 0xe, 0xc, 0x20, 0x16, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x50b4}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x10, 0x4, 0x6, [@generic={0x3, 0x23, "c9"}]}}, {{0x9, 0x5, 0xb, 0x3, 0x10, 0x9, 0x7, 0xb2, [@generic={0x11, 0x0, "df0a6ae6fd274baa49665fcccc566e"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x3}]}}, {{0x9, 0x5, 0x0, 0x2, 0x200, 0x7, 0x40, 0x4}}, {{0x9, 0x5, 0x2, 0x4, 0x1d7, 0x7, 0x7}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x5, 0xc8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x2}]}}, {{0x9, 0x5, 0xbd98f44778e6a48, 0x0, 0x10, 0x2, 0x7, 0x9}}, {{0x9, 0x5, 0xf, 0xe, 0x200, 0x2, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0xff8f}]}}, {{0x9, 0x5, 0x3, 0x3, 0x10, 0x5, 0x6, 0x3}}]}}]}}]}}, 0x0) 2.524182504s ago: executing program 2 (id=2056): sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010028bd700bfbdbdf"], 0x14}, 0x1, 0x0, 0x0, 0x8048451}, 0x48110) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000040), 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x9) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.420592928s ago: executing program 8 (id=2057): sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x8048451}, 0x48110) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f0000000340), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10003, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x3, 0x400, 0x80, 0x89, 0x0, 0xa, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x9) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.296499896s ago: executing program 2 (id=2058): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000000)={0xf3b5, {"771c2e01f8ffffffffffee00", "000900008000"}, 0x7, 0x4}) syz_emit_ethernet(0x7e, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000700000000000889078ac1eff01ac1414aa0b009078005c000044050007006700080108fffdac1414aaffffffff831f4ee0000002e00000017f000001ac141421e00000020000007fac1e01e4061b087f000001ffffffffac141437ffffffffac1414bb0a01010100003276ba29"], 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x80000001, 0x0, 0x0, 0x10000004, {0x40, 0xd08, 0x0, 0xfe, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000440)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000006100)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x8000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f0000002580)=[{&(0x7f0000000080)="cb86", 0x2}], 0x1}}, {{&(0x7f0000000280)={0xa, 0x4e22, 0x101, @remote, 0x6}, 0x1c, &(0x7f0000002a00)=[{&(0x7f0000002680)="37e1f1", 0x3}], 0x1}}, {{&(0x7f0000002f80)={0xa, 0x4e20, 0x3, @private1, 0x18fc}, 0x1c, &(0x7f00000032c0)=[{&(0x7f0000002fc0)='\n30', 0x3}], 0x1}}], 0x3, 0x931766f6319ae5c4) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, 0x0, 0x0) ioctl$TIOCGPTPEER(r5, 0x40140921, 0x200000000005) ioctl$TIOCGPTPEER(r4, 0x40480923, 0x9e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace(0x10, 0x0) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f0000000940)=[{{&(0x7f00000002c0)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000340)=""/108, 0x6c}, {&(0x7f00000004c0)=""/164, 0xa4}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000580)=""/129, 0x81}, {&(0x7f0000000640)=""/202, 0xca}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000000740)=""/192, 0xc0}], 0x4, &(0x7f0000000840)=""/193, 0xc1}, 0x6}], 0x2, 0x2, 0x0) 1.854552427s ago: executing program 4 (id=2059): socket$inet6_sctp(0xa, 0x4, 0x84) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6a000000006411fffe8000000000000000000000000000aaff0200000000000000000000000000014e1d4e2000649078e3d0c702000000030000000200000054e90dade0f83f43817a33a14e805678a5f38ab436a174d6f2369fc532f6c82bfc7dfb6e5293418dd950af36edd6dc1c9cf20b4958f15cd0a3eddaf23b2e0eaf6272f64f06756f4bee6f8933b15248432ce042c5ab820e5e8ea6c2a2b7219b4b45a34a6a4b51118c933180e1a976ce751eaa43f8d395"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) socket$packet(0x11, 0xa, 0x300) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syslog(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setregid(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000200)={0x2, 0xfffffffffffffffe}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0xa, 0x5, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x3, 0x80000) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000540)=ANY=[@ANYBLOB="0500000000000007"]) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000340)={'\x00', 0xe14, 0x100094, 0x8, 0x4dd8, 0x1}) 1.853554915s ago: executing program 9 (id=2060): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000640)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000000c0)={0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="00000001"], 0x0}, 0x0) 1.504303346s ago: executing program 8 (id=2061): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f0000000000)=0x80000000, 0x4) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r0, 0x0, 0x0) 1.20183176s ago: executing program 4 (id=2062): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28c81, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4d, &(0x7f0000000300)=ANY=[@ANYBLOB="3af5000000001780c202090e8100110000048eff000063b15c5455b050d847e6abf67bf84a87c5b12ca45496907d3d54aac39e065527c693080000000000003d1d6225f16c2a41e3ef15597af030869fac0b06521f7e5ef49c1f"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xca, 0x0, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x7f}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffe0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x12, 0x40, 0x1, 0x2, 0x7, 0x3}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 1.11608442s ago: executing program 2 (id=2063): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000900), 0x10, 0x0) r1 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0) ftruncate(r1, 0x51a9497) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0xf1d, &(0x7f00000002c0)={0x0, 0x10f6b1, 0x2000, 0x8000, 0x40024e, 0x0, r1}, &(0x7f0000000480)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x16, 0x1}) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280), 0x0) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x95}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1", 0x7a}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0xf0ff) io_uring_enter(r4, 0xd44, 0x44c1, 0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00', @ANYRES16, @ANYBLOB="000228bd8a00fddbdf250900000008000300", @ANYRES32=r9, @ANYBLOB="0c006e800400020004000100"], 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x91) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="000000000000000000e6a94b25d20a7ed5358c2523000002e7057b8af8ff00000000bfa20000000000000702000800ffffffb70300000800000095000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.109981359s ago: executing program 8 (id=2064): sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010028bd700bfbdbdf"], 0x14}, 0x1, 0x0, 0x0, 0x8048451}, 0x48110) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f0000000340), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000040), 0x4) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x9) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.0393312s ago: executing program 6 (id=2065): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3b071, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 844.270629ms ago: executing program 6 (id=2066): syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="127b0734f62e021b00810100807f090400000007521af27c0501027043dc8b8cae04d8dd60f6f0731018fce890878c13127ffa9d3cf3e88506ead09008e241757831b95f237294ce79470d81a0bfdcdc9a294a1ac40acc189f8cfd75d12a2b1fb2ab0f81c5634a3513862adcd419f38d"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lstat(&(0x7f0000000180)='./file2\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$vbi(0x0, 0x0, 0x2) syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYRESOCT=r0, @ANYBLOB="c8f3b92a81d0716d08eca984669eed524a04eeac38640decc2c176fbc0f71333b7bf55d6c2f17426f6329d92bfcf6bca6c6c16cab6c5242eeb3bedcbcd5b11418a4f5f8c699a4fc8abea21e3394eca9a841d5dfffc1ebe6a4a0b87f16bb29735fbb4e84aaac0be68a5f5161c6e608c03f8bf2d6eae736e9bb235e1e0ca321d683479", @ANYRESHEX=r0, @ANYBLOB="908fb7d0dd49fef8244288057e394b7f0bc85ad59ad6422895e06fddc814188ad058034bf9728b52b2a0d447dc55623ce67937868a59b0cc9b", @ANYRES16=r2, @ANYRES64=r4], 0x7) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x20004, r5, 0x2}) r8 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) close_range(r8, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x624000, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000001c0)={@mcast1}, &(0x7f0000000200)=0x14) 354.333433ms ago: executing program 8 (id=2067): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtaction={0xf4, 0x30, 0xffff, 0x0, 0x0, {}, [{0xe0, 0x1, [@m_ife={0xdc, 0x1, 0x0, 0x0, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @link_local}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xe}]}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_PARMS={0x1c}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_SMAC={0xa, 0x4, @dev}, @TCA_IFE_METALST={0x30, 0x6, [@IFE_META_SKBMARK={0x8}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x5}, @IFE_META_PRIO={0x8}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf4}}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x9007}, 0x4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0) poll(&(0x7f0000000140)=[{r1, 0x2cfc08c20dafc34e}, {0xffffffffffffffff, 0xa8}, {0xffffffffffffffff, 0xf102}], 0x3, 0x8000007) 0s ago: executing program 2 (id=2068): sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010028bd700bfbdbdf"], 0x14}, 0x1, 0x0, 0x0, 0x8048451}, 0x48110) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000040), 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x9) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): pid=11819 comm="syz.8.1463" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 388.733569][ T29] audit: type=1400 audit(1773605069.011:580): avc: denied { ioctl } for pid=11819 comm="syz.8.1463" path="/dev/usbmon9" dev="devtmpfs" ino=743 ioctlcmd=0x9205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 388.763669][ T75] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.773899][ T75] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.022088][ T1010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.034455][ T1010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.110171][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.126093][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.373482][ T29] audit: type=1400 audit(1773605069.671:581): avc: denied { create } for pid=11841 comm="syz.2.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 389.426899][ T29] audit: type=1400 audit(1773605069.711:582): avc: denied { write } for pid=11841 comm="syz.2.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 389.448929][T11842] netlink: 'syz.2.1468': attribute type 1 has an invalid length. [ 390.127343][ T29] audit: type=1400 audit(1773605070.431:583): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 390.166925][T11852] block nbd9: shutting down sockets [ 390.239743][T11858] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1469'. [ 390.738602][ T5868] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 391.134937][ T5868] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.168658][ T5868] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.189637][ T5868] usb 10-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 391.204681][ T5868] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.216739][ T5868] usb 10-1: config 0 descriptor?? [ 391.416065][T11894] fuse: Bad value for 'group_id' [ 391.422270][T11894] fuse: Bad value for 'group_id' [ 391.668537][T11898] infiniband syz1: set active [ 391.673514][T11898] infiniband syz1: added syz_tun [ 391.713507][T11898] RDS/IB: syz1: added [ 391.718389][T11898] smc: adding ib device syz1 with port count 1 [ 391.724710][T11898] smc: ib device syz1 port 1 has no pnetid [ 392.351009][T11907] blktrace: Concurrent blktraces are not allowed on loop3 [ 392.647117][ T29] audit: type=1400 audit(1773605072.951:584): avc: denied { shutdown } for pid=11905 comm="syz.8.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 393.365861][ T5868] usbhid 10-1:0.0: can't add hid device: -71 [ 393.386791][ T5868] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 393.445267][ T5868] usb 10-1: USB disconnect, device number 10 [ 393.601250][T11924] siw: device registration error -23 [ 395.298581][ T977] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 395.617169][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 395.648723][ T977] usb 9-1: Using ep0 maxpacket: 32 [ 395.871174][ T977] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.904981][ T977] usb 9-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 395.924272][ T977] usb 9-1: config 0 interface 0 has no altsetting 0 [ 395.944348][ T977] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 395.953763][ T977] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.966269][ T977] usb 9-1: Product: syz [ 395.971845][ T977] usb 9-1: Manufacturer: syz [ 395.976556][ T977] usb 9-1: SerialNumber: syz [ 395.994345][ T977] usb 9-1: config 0 descriptor?? [ 396.000520][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 396.018004][ T24] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 396.027660][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.039790][ T977] gs_usb 9-1:0.0: Required endpoints not found [ 396.056013][ T24] usb 5-1: Product: syz [ 396.080696][ T24] usb 5-1: Manufacturer: syz [ 396.155281][ T24] usb 5-1: SerialNumber: syz [ 396.174075][ T24] usb 5-1: config 0 descriptor?? [ 396.186727][ T24] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 396.444808][T11951] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1489'. [ 396.655573][ T24] usb 5-1: clie_3_5_startup: get config number failed: -71 [ 396.675536][ T24] visor 5-1:0.0: probe with driver visor failed with error -71 [ 396.741074][ T24] usb 5-1: USB disconnect, device number 11 [ 397.463418][T11988] FAULT_INJECTION: forcing a failure. [ 397.463418][T11988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.488333][ T5916] usb 9-1: USB disconnect, device number 18 [ 397.530140][T11988] CPU: 1 UID: 0 PID: 11988 Comm: syz.4.1494 Not tainted syzkaller #0 PREEMPT(full) [ 397.530156][T11988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 397.530163][T11988] Call Trace: [ 397.530167][T11988] [ 397.530171][T11988] dump_stack_lvl+0x100/0x190 [ 397.530193][T11988] should_fail_ex.cold+0x5/0xa [ 397.530208][T11988] strncpy_from_user+0x3b/0x2d0 [ 397.530227][T11988] do_getname+0x78/0x390 [ 397.530243][T11988] do_sys_openat2+0xc5/0x1e0 [ 397.530257][T11988] ? __pfx_do_sys_openat2+0x10/0x10 [ 397.530272][T11988] ? __fget_files+0x21f/0x3d0 [ 397.530286][T11988] __x64_sys_open+0xfe/0x1d0 [ 397.530299][T11988] ? __pfx___x64_sys_open+0x10/0x10 [ 397.530312][T11988] ? ksys_write+0x1ac/0x250 [ 397.530334][T11988] do_syscall_64+0x106/0xf80 [ 397.530348][T11988] ? clear_bhb_loop+0x40/0x90 [ 397.530362][T11988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.530373][T11988] RIP: 0033:0x7fb04919c799 [ 397.530383][T11988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.530394][T11988] RSP: 002b:00007fb0473f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 397.530405][T11988] RAX: ffffffffffffffda RBX: 00007fb049416090 RCX: 00007fb04919c799 [ 397.530412][T11988] RDX: 000000000000008a RSI: 0000000000010000 RDI: 0000200000000040 [ 397.530419][T11988] RBP: 00007fb0473f6090 R08: 0000000000000000 R09: 0000000000000000 [ 397.530425][T11988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.530431][T11988] R13: 00007fb049416128 R14: 00007fb049416090 R15: 00007ffc5f0260e8 [ 397.530450][T11988] [ 397.801451][ T29] audit: type=1400 audit(1773605078.111:585): avc: denied { write } for pid=11970 comm="syz.2.1493" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 397.918299][ T29] audit: type=1400 audit(1773605078.221:586): avc: denied { ioctl } for pid=11970 comm="syz.2.1493" path="socket:[42616]" dev="sockfs" ino=42616 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 397.947948][T11993] ip6t_srh: unknown srh match flags 4000 [ 398.319777][T11999] block nbd8: Device being setup by another task [ 398.331157][ T29] audit: type=1326 audit(1773605078.641:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11992 comm="syz.8.1496" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa0ef39c799 code=0x0 [ 398.416816][ T5811] block nbd8: Receive control failed (result -32) [ 398.425337][ T51] block nbd8: Receive control failed (result -32) [ 398.449992][ T7473] block nbd8: shutting down sockets [ 398.635445][ T5811] Bluetooth: hci1: Malformed LE Event: 0x0d [ 398.643004][ T29] audit: type=1400 audit(1773605078.941:588): avc: denied { setattr } for pid=12016 comm="syz.4.1502" name="adsp1" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 398.978738][T12029] overlayfs: failed to resolve './file1/file0': -2 [ 399.428672][ T5916] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 399.574001][ T3564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.584459][ T29] audit: type=1400 audit(1773605079.881:589): avc: denied { remount } for pid=12038 comm="syz.9.1507" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 399.608960][ T5916] usb 7-1: Using ep0 maxpacket: 32 [ 399.618286][ T5916] usb 7-1: config 0 has an invalid interface number: 86 but max is 0 [ 399.642864][ T5916] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.698579][ T3564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.841690][ T5916] usb 7-1: config 0 has no interface number 0 [ 399.992336][ T5916] usb 7-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=6a.32 [ 400.012893][ T5916] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.035920][ T5916] usb 7-1: Product: syz [ 400.040848][ T5916] usb 7-1: Manufacturer: syz [ 400.053974][ T5916] usb 7-1: SerialNumber: syz [ 400.075877][ T5916] usb 7-1: config 0 descriptor?? [ 400.309428][ T5916] ljca 7-1:0.86: bulk endpoints not found [ 400.322961][ T29] audit: type=1326 audit(1773605080.631:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12058 comm="syz.2.1510" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f23b979c799 code=0x0 [ 400.332471][ T5916] usb 7-1: USB disconnect, device number 16 [ 400.419959][ T51] block nbd2: Receive control failed (result -32) [ 400.426635][ T5811] block nbd2: Receive control failed (result -32) [ 400.433257][ T5822] block nbd2: Receive control failed (result -32) [ 400.441511][T12059] block nbd2: shutting down sockets [ 400.703761][ T29] audit: type=1400 audit(1773605081.011:591): avc: denied { create } for pid=12091 comm="syz.4.1515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 400.747997][ T29] audit: type=1400 audit(1773605081.021:592): avc: denied { sys_admin } for pid=12091 comm="syz.4.1515" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 400.878550][ T5916] usb 9-1: new full-speed USB device number 19 using dummy_hcd [ 401.099521][ T5916] usb 9-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 401.150501][ T5916] usb 9-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 401.214814][ T5916] usb 9-1: Product: syz [ 401.234241][ T5916] usb 9-1: Manufacturer: syz [ 401.258562][ T5916] usb 9-1: SerialNumber: syz [ 401.288026][ T5916] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 401.465773][T12111] misc userio: Invalid payload size [ 402.531688][ T29] audit: type=1326 audit(1773605082.291:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12109 comm="syz.6.1520" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a4bf9c799 code=0x0 [ 402.578449][T12114] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 402.820838][ T5916] vp7045: USB control message 'in' went wrong. [ 403.281070][ T5916] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 403.291893][ T5916] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 403.320222][ T5916] usb 9-1: USB disconnect, device number 19 [ 403.754963][ T29] audit: type=1400 audit(1773605084.061:594): avc: denied { map } for pid=12146 comm="syz.9.1529" path="socket:[42965]" dev="sockfs" ino=42965 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 403.887013][ T29] audit: type=1400 audit(1773605084.061:595): avc: denied { read accept } for pid=12146 comm="syz.9.1529" path="socket:[42965]" dev="sockfs" ino=42965 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 404.279684][T12148] netlink: 35 bytes leftover after parsing attributes in process `syz.9.1529'. [ 404.308548][ T5868] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 404.519161][ T5868] usb 3-1: Using ep0 maxpacket: 32 [ 404.553735][ T5868] usb 3-1: config 0 has an invalid interface number: 86 but max is 0 [ 404.589630][ T5868] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.640146][ T5868] usb 3-1: config 0 has no interface number 0 [ 404.675097][ T5868] usb 3-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=6a.32 [ 404.730556][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.778570][ T5868] usb 3-1: Product: syz [ 404.782759][ T5868] usb 3-1: Manufacturer: syz [ 404.787353][ T5868] usb 3-1: SerialNumber: syz [ 404.842925][ T5868] usb 3-1: config 0 descriptor?? [ 405.107958][T12177] xt_ipcomp: unknown flags 1D [ 405.113697][ T5868] ljca 3-1:0.86: bulk endpoints not found [ 405.138996][ T5868] usb 3-1: USB disconnect, device number 37 [ 405.408633][ T5916] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 405.425210][T12193] can: request_module (can-proto-0) failed. [ 405.459650][T12197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1536'. [ 405.581032][ T5916] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.615427][ T5916] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.674094][ T5916] usb 10-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 405.809347][ T5916] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.880176][ T5916] usb 10-1: config 0 descriptor?? [ 406.351710][ T5916] usbhid 10-1:0.0: can't add hid device: -71 [ 406.396683][ T5916] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 406.462781][T12224] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12224 comm=syz.6.1541 [ 406.475584][ T5916] usb 10-1: USB disconnect, device number 11 [ 406.536364][T12224] netlink: 'syz.6.1541': attribute type 1 has an invalid length. [ 406.698117][T12224] 8021q: adding VLAN 0 to HW filter on device bond3 [ 407.214820][ T29] audit: type=1326 audit(1773605087.521:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12235 comm="syz.2.1543" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f23b979c799 code=0x0 [ 407.328704][T12240] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1543'. [ 407.609700][T12252] bridge0: entered promiscuous mode [ 407.640740][T12252] bridge0: left promiscuous mode [ 407.859807][ T5916] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 407.865020][T12260] overlayfs: overlapping lowerdir path [ 408.020456][ T5916] usb 5-1: Using ep0 maxpacket: 32 [ 408.043255][ T5916] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.054392][T12266] FAULT_INJECTION: forcing a failure. [ 408.054392][T12266] name failslab, interval 1, probability 0, space 0, times 0 [ 408.080977][ T5916] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 408.101740][T12266] CPU: 0 UID: 0 PID: 12266 Comm: syz.6.1551 Not tainted syzkaller #0 PREEMPT(full) [ 408.101764][T12266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 408.101773][T12266] Call Trace: [ 408.101780][T12266] [ 408.101786][T12266] dump_stack_lvl+0x100/0x190 [ 408.101820][T12266] should_fail_ex.cold+0x5/0xa [ 408.101849][T12266] should_failslab+0xc2/0x120 [ 408.101867][T12266] __kmalloc_cache_noprof+0x7a/0x6f0 [ 408.101888][T12266] ? tc_new_tfilter+0xe17/0x24a0 [ 408.101911][T12266] ? tcf_chain_tp_find+0x2b5/0x470 [ 408.101935][T12266] tc_new_tfilter+0xe17/0x24a0 [ 408.101967][T12266] ? avc_has_perm_noaudit+0x40/0x3b0 [ 408.101985][T12266] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 408.102004][T12266] ? __pfx_tc_new_tfilter+0x10/0x10 [ 408.102037][T12266] ? __lock_acquire+0x4a5/0x2630 [ 408.102080][T12266] ? find_held_lock+0x2b/0x80 [ 408.102101][T12266] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 408.102126][T12266] ? __pfx_tc_new_tfilter+0x10/0x10 [ 408.102151][T12266] rtnetlink_rcv_msg+0x95e/0xe90 [ 408.102176][T12266] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 408.102206][T12266] ? ref_tracker_free+0x37e/0x6c0 [ 408.102229][T12266] netlink_rcv_skb+0x159/0x420 [ 408.102254][T12266] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 408.102278][T12266] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 408.102312][T12266] ? netlink_deliver_tap+0x1ae/0xcc0 [ 408.102341][T12266] netlink_unicast+0x5aa/0x870 [ 408.102368][T12266] ? __pfx_netlink_unicast+0x10/0x10 [ 408.102403][T12266] netlink_sendmsg+0x8b0/0xda0 [ 408.102431][T12266] ? __pfx_netlink_sendmsg+0x10/0x10 [ 408.102453][T12266] ? __might_fault+0x20/0x140 [ 408.102487][T12266] ____sys_sendmsg+0x9e1/0xb70 [ 408.102512][T12266] ? __pfx_netlink_sendmsg+0x10/0x10 [ 408.102539][T12266] ? __pfx_____sys_sendmsg+0x10/0x10 [ 408.102577][T12266] ___sys_sendmsg+0x190/0x1e0 [ 408.102606][T12266] ? __pfx____sys_sendmsg+0x10/0x10 [ 408.102666][T12266] __sys_sendmsg+0x170/0x220 [ 408.102688][T12266] ? __pfx___sys_sendmsg+0x10/0x10 [ 408.102727][T12266] do_syscall_64+0x106/0xf80 [ 408.102749][T12266] ? clear_bhb_loop+0x40/0x90 [ 408.102771][T12266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.102789][T12266] RIP: 0033:0x7f9a4bf9c799 [ 408.102803][T12266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.102819][T12266] RSP: 002b:00007f9a4a1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 408.102835][T12266] RAX: ffffffffffffffda RBX: 00007f9a4c215fa0 RCX: 00007f9a4bf9c799 [ 408.102851][T12266] RDX: 0000000000000000 RSI: 0000200000006040 RDI: 0000000000000004 [ 408.102861][T12266] RBP: 00007f9a4a1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 408.102870][T12266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.102879][T12266] R13: 00007f9a4c216038 R14: 00007f9a4c215fa0 R15: 00007ffd1c439528 [ 408.102902][T12266] [ 408.435496][ T5916] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 408.445618][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.459153][ T5916] usb 5-1: Product: syz [ 408.463343][ T5916] usb 5-1: Manufacturer: syz [ 408.467931][ T5916] usb 5-1: SerialNumber: syz [ 408.480871][ T5916] usb 5-1: config 0 descriptor?? [ 408.559142][ T10] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 408.802324][T12277] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 408.809397][ T5916] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 408.865957][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.882641][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.910482][ T10] usb 10-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 408.912530][T12248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.955582][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.960275][T12248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.019857][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.046822][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.061986][ T10] usb 10-1: config 0 descriptor?? [ 409.069658][T12283] FAULT_INJECTION: forcing a failure. [ 409.069658][T12283] name failslab, interval 1, probability 0, space 0, times 0 [ 409.085867][ T5916] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 409.086065][ T977] usb 5-1: USB disconnect, device number 12 [ 409.104161][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.116515][T12283] CPU: 0 UID: 0 PID: 12283 Comm: syz.6.1556 Not tainted syzkaller #0 PREEMPT(full) [ 409.116538][T12283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 409.116548][T12283] Call Trace: [ 409.116554][T12283] [ 409.116560][T12283] dump_stack_lvl+0x100/0x190 [ 409.116591][T12283] should_fail_ex.cold+0x5/0xa [ 409.116617][T12283] should_failslab+0xc2/0x120 [ 409.116636][T12283] __kmalloc_cache_noprof+0x7a/0x6f0 [ 409.116657][T12283] ? rtnl_newlink+0x126/0x2380 [ 409.116681][T12283] ? __pfx_rtnl_newlink+0x10/0x10 [ 409.116702][T12283] rtnl_newlink+0x126/0x2380 [ 409.116732][T12283] ? __pfx_rtnl_newlink+0x10/0x10 [ 409.116752][T12283] ? find_held_lock+0x2b/0x80 [ 409.116774][T12283] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 409.116791][T12283] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 409.116809][T12283] ? avc_has_perm_noaudit+0x145/0x3b0 [ 409.116836][T12283] ? __lock_acquire+0x4a5/0x2630 [ 409.116870][T12283] ? find_held_lock+0x2b/0x80 [ 409.116890][T12283] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 409.116911][T12283] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 409.116934][T12283] ? __pfx_rtnl_newlink+0x10/0x10 [ 409.116955][T12283] rtnetlink_rcv_msg+0x95e/0xe90 [ 409.116979][T12283] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 409.117007][T12283] ? ref_tracker_free+0x37e/0x6c0 [ 409.117029][T12283] netlink_rcv_skb+0x159/0x420 [ 409.117053][T12283] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 409.117077][T12283] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 409.117110][T12283] ? netlink_deliver_tap+0x1ae/0xcc0 [ 409.117137][T12283] netlink_unicast+0x5aa/0x870 [ 409.117164][T12283] ? __pfx_netlink_unicast+0x10/0x10 [ 409.117194][T12283] netlink_sendmsg+0x8b0/0xda0 [ 409.117221][T12283] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.117243][T12283] ? __might_fault+0x20/0x140 [ 409.117274][T12283] ____sys_sendmsg+0x9e1/0xb70 [ 409.117298][T12283] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.117321][T12283] ? __pfx_____sys_sendmsg+0x10/0x10 [ 409.117355][T12283] ___sys_sendmsg+0x190/0x1e0 [ 409.117384][T12283] ? __pfx____sys_sendmsg+0x10/0x10 [ 409.117437][T12283] __sys_sendmsg+0x170/0x220 [ 409.117459][T12283] ? __pfx___sys_sendmsg+0x10/0x10 [ 409.117493][T12283] do_syscall_64+0x106/0xf80 [ 409.117514][T12283] ? clear_bhb_loop+0x40/0x90 [ 409.117535][T12283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.117551][T12283] RIP: 0033:0x7f9a4bf9c799 [ 409.117566][T12283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.117581][T12283] RSP: 002b:00007f9a4a1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 409.117597][T12283] RAX: ffffffffffffffda RBX: 00007f9a4c215fa0 RCX: 00007f9a4bf9c799 [ 409.117607][T12283] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 409.117617][T12283] RBP: 00007f9a4a1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 409.117628][T12283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.117639][T12283] R13: 00007f9a4c216038 R14: 00007f9a4c215fa0 R15: 00007ffd1c439528 [ 409.117663][T12283] [ 409.453303][ T5916] usb 3-1: config 0 descriptor?? [ 409.865348][ T5916] usbhid 3-1:0.0: can't add hid device: -71 [ 409.874420][ T5916] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 409.895582][ T5916] usb 3-1: USB disconnect, device number 38 [ 409.988767][ T10] usbhid 10-1:0.0: can't add hid device: -71 [ 409.998186][ T10] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 410.026510][ T10] usb 10-1: USB disconnect, device number 12 [ 410.303332][T12311] FAULT_INJECTION: forcing a failure. [ 410.303332][T12311] name failslab, interval 1, probability 0, space 0, times 0 [ 410.329382][T12311] CPU: 1 UID: 0 PID: 12311 Comm: syz.4.1558 Not tainted syzkaller #0 PREEMPT(full) [ 410.329408][T12311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 410.329417][T12311] Call Trace: [ 410.329424][T12311] [ 410.329432][T12311] dump_stack_lvl+0x100/0x190 [ 410.329462][T12311] should_fail_ex.cold+0x5/0xa [ 410.329486][T12311] ? tomoyo_encode2+0xfb/0x3c0 [ 410.329507][T12311] should_failslab+0xc2/0x120 [ 410.329523][T12311] __kmalloc_noprof+0xe0/0x850 [ 410.329547][T12311] ? d_absolute_path+0x136/0x1b0 [ 410.329573][T12311] tomoyo_encode2+0xfb/0x3c0 [ 410.329601][T12311] tomoyo_encode+0x29/0x50 [ 410.329622][T12311] tomoyo_realpath_from_path+0x18c/0x690 [ 410.329652][T12311] tomoyo_check_open_permission+0x2af/0x3c0 [ 410.329673][T12311] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 410.329693][T12311] ? register_lock_class+0x40/0x560 [ 410.329732][T12311] ? do_raw_spin_lock+0x128/0x260 [ 410.329753][T12311] ? path_get+0x61/0x80 [ 410.329775][T12311] tomoyo_file_open+0x6b/0x90 [ 410.329791][T12311] security_file_open+0xb5/0x1e0 [ 410.329815][T12311] do_dentry_open+0x5aa/0x1660 [ 410.329842][T12311] ? security_inode_permission+0xbf/0x250 [ 410.329867][T12311] vfs_open+0x82/0x3f0 [ 410.329890][T12311] path_openat+0x208c/0x31a0 [ 410.329911][T12311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.329933][T12311] ? __pfx_path_openat+0x10/0x10 [ 410.329959][T12311] do_file_open+0x20e/0x430 [ 410.329979][T12311] ? __pfx_do_file_open+0x10/0x10 [ 410.330013][T12311] ? _raw_spin_unlock+0x28/0x50 [ 410.330031][T12311] ? alloc_fd+0x476/0x790 [ 410.330056][T12311] do_sys_openat2+0x10d/0x1e0 [ 410.330078][T12311] ? __pfx_do_sys_openat2+0x10/0x10 [ 410.330101][T12311] ? __fget_files+0x21f/0x3d0 [ 410.330122][T12311] __x64_sys_open+0xfe/0x1d0 [ 410.330144][T12311] ? __pfx___x64_sys_open+0x10/0x10 [ 410.330161][T12311] ? ksys_write+0x1ac/0x250 [ 410.330195][T12311] do_syscall_64+0x106/0xf80 [ 410.330215][T12311] ? clear_bhb_loop+0x40/0x90 [ 410.330235][T12311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.330255][T12311] RIP: 0033:0x7fb04919c799 [ 410.330275][T12311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.330293][T12311] RSP: 002b:00007fb049f80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 410.330310][T12311] RAX: ffffffffffffffda RBX: 00007fb049415fa0 RCX: 00007fb04919c799 [ 410.330321][T12311] RDX: 000000000000008a RSI: 0000000000010000 RDI: 0000200000000040 [ 410.330331][T12311] RBP: 00007fb049f80090 R08: 0000000000000000 R09: 0000000000000000 [ 410.330341][T12311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.330350][T12311] R13: 00007fb049416038 R14: 00007fb049415fa0 R15: 00007ffc5f0260e8 [ 410.330373][T12311] [ 410.330392][T12311] ERROR: Out of memory at tomoyo_realpath_from_path. [ 410.738282][T12322] overlayfs: overlapping lowerdir path [ 411.100448][T12333] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1562'. [ 412.413260][T12336] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12336 comm=syz.2.1559 [ 412.440060][T12329] vlan2: entered promiscuous mode [ 412.445162][T12329] vlan2: entered allmulticast mode [ 412.457801][T12336] netlink: 'syz.2.1559': attribute type 1 has an invalid length. [ 412.466180][T12342] fuse: Bad value for 'fd' [ 412.472075][T12329] hsr_slave_1: entered allmulticast mode [ 412.599068][T12336] 8021q: adding VLAN 0 to HW filter on device bond8 [ 412.869388][ T29] audit: type=1400 audit(1773605093.171:597): avc: denied { map } for pid=12351 comm="syz.8.1567" path="socket:[44365]" dev="sockfs" ino=44365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 413.176598][ T29] audit: type=1400 audit(1773605093.391:598): avc: denied { map } for pid=12360 comm="syz.6.1568" path="/dev/media4" dev="devtmpfs" ino=962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 413.280324][T12367] netlink: 'syz.6.1568': attribute type 2 has an invalid length. [ 413.428680][ T29] audit: type=1400 audit(1773605861.724:599): avc: denied { read append } for pid=12352 comm="syz.4.1566" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 413.670440][ T29] audit: type=1400 audit(1773605861.724:600): avc: denied { open } for pid=12352 comm="syz.4.1566" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 414.656760][T12379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1571'. [ 414.754250][ T29] audit: type=1400 audit(1773605861.734:601): avc: denied { ioctl } for pid=12352 comm="syz.4.1566" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 414.991561][T12385] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 415.081539][T12379] can: request_module (can-proto-3) failed. [ 415.203781][T12390] FAULT_INJECTION: forcing a failure. [ 415.203781][T12390] name failslab, interval 1, probability 0, space 0, times 0 [ 415.273927][T12390] CPU: 1 UID: 0 PID: 12390 Comm: syz.6.1573 Not tainted syzkaller #0 PREEMPT(full) [ 415.273952][T12390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 415.273962][T12390] Call Trace: [ 415.273968][T12390] [ 415.273974][T12390] dump_stack_lvl+0x100/0x190 [ 415.274007][T12390] should_fail_ex.cold+0x5/0xa [ 415.274030][T12390] should_failslab+0xc2/0x120 [ 415.274048][T12390] __kmalloc_cache_noprof+0x7a/0x6f0 [ 415.274069][T12390] ? fuse_file_alloc+0x51/0x2d0 [ 415.274098][T12390] fuse_file_alloc+0x51/0x2d0 [ 415.274122][T12390] fuse_file_open+0xbf/0x820 [ 415.274148][T12390] fuse_do_open+0x50/0xd0 [ 415.274173][T12390] fuse_dir_open+0x12c/0x2a0 [ 415.274191][T12390] do_dentry_open+0x6d8/0x1660 [ 415.274215][T12390] ? __pfx_fuse_dir_open+0x10/0x10 [ 415.274235][T12390] vfs_open+0x82/0x3f0 [ 415.274264][T12390] path_openat+0x208c/0x31a0 [ 415.274286][T12390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.274307][T12390] ? __pfx_path_openat+0x10/0x10 [ 415.274333][T12390] do_file_open+0x20e/0x430 [ 415.274356][T12390] ? __pfx_do_file_open+0x10/0x10 [ 415.274392][T12390] ? _raw_spin_unlock+0x28/0x50 [ 415.274411][T12390] ? alloc_fd+0x476/0x790 [ 415.274436][T12390] do_sys_openat2+0x10d/0x1e0 [ 415.274457][T12390] ? __pfx_do_sys_openat2+0x10/0x10 [ 415.274481][T12390] ? __fget_files+0x21f/0x3d0 [ 415.274503][T12390] __x64_sys_open+0xfe/0x1d0 [ 415.274523][T12390] ? __pfx___x64_sys_open+0x10/0x10 [ 415.274541][T12390] ? ksys_write+0x1ac/0x250 [ 415.274574][T12390] do_syscall_64+0x106/0xf80 [ 415.274595][T12390] ? clear_bhb_loop+0x40/0x90 [ 415.274615][T12390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.274632][T12390] RIP: 0033:0x7f9a4bf9c799 [ 415.274649][T12390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.274664][T12390] RSP: 002b:00007f9a4a1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 415.274681][T12390] RAX: ffffffffffffffda RBX: 00007f9a4c215fa0 RCX: 00007f9a4bf9c799 [ 415.274692][T12390] RDX: 000000000000008a RSI: 0000000000010000 RDI: 0000200000000040 [ 415.274702][T12390] RBP: 00007f9a4a1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 415.274712][T12390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.274721][T12390] R13: 00007f9a4c216038 R14: 00007f9a4c215fa0 R15: 00007ffd1c439528 [ 415.274744][T12390] [ 415.797299][T12392] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 415.804623][T12392] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 415.817708][T12392] vhci_hcd vhci_hcd.0: Device attached [ 415.830763][T12399] vhci_hcd: connection closed [ 415.845048][ T6110] vhci_hcd vhci_hcd.9: stop threads [ 415.855981][ T6110] vhci_hcd vhci_hcd.9: release socket [ 415.861377][ T6110] vhci_hcd vhci_hcd.9: disconnect device [ 416.724818][T12430] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1580'. [ 417.165534][T12436] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12436 comm=syz.9.1581 [ 417.187802][ T29] audit: type=1326 audit(1773605865.682:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12440 comm="syz.8.1584" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa0ef39c799 code=0x0 [ 417.230124][T12436] netlink: 'syz.9.1581': attribute type 1 has an invalid length. [ 417.505852][T12436] 8021q: adding VLAN 0 to HW filter on device bond1 [ 417.954712][T12451] fuse: Unknown parameter '‰bŸ“Zñ´¥8ßôº'W‘' [ 418.470409][T12421] ALSA: mixer_oss: invalid OSS volume '3͸œñ—„„„kÓ’F,PxVÅ¢rH' [ 418.598675][ T5875] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 418.711753][ T10] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 418.749678][ T5875] usb 3-1: Using ep0 maxpacket: 8 [ 418.765064][ T5875] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 418.775110][ T5875] usb 3-1: config 179 has no interface number 0 [ 418.781782][ T5875] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 418.794615][ T5875] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 418.806273][ T5875] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 28, changing to 8 [ 418.828004][ T5875] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 25739, setting to 1024 [ 418.858760][ T5875] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 418.872999][ T5875] usb 3-1: config 179 interface 65 has no altsetting 0 [ 418.881171][ T5875] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 418.893649][ T10] usb 5-1: device descriptor read/64, error -71 [ 418.904280][T12469] FAULT_INJECTION: forcing a failure. [ 418.904280][T12469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.917408][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.941317][T12469] CPU: 0 UID: 0 PID: 12469 Comm: syz.9.1590 Not tainted syzkaller #0 PREEMPT(full) [ 418.941334][T12469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 418.941341][T12469] Call Trace: [ 418.941344][T12469] [ 418.941349][T12469] dump_stack_lvl+0x100/0x190 [ 418.941370][T12469] should_fail_ex.cold+0x5/0xa [ 418.941386][T12469] _copy_from_user+0x2e/0xd0 [ 418.941405][T12469] do_sock_getsockopt+0x30b/0x3d0 [ 418.941425][T12469] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 418.941449][T12469] __sys_getsockopt+0x148/0x260 [ 418.941466][T12469] ? __x64_sys_getsockopt+0xbd/0x160 [ 418.941478][T12469] __x64_sys_getsockopt+0xbd/0x160 [ 418.941491][T12469] ? do_syscall_64+0x95/0xf80 [ 418.941505][T12469] ? lockdep_hardirqs_on+0x78/0x100 [ 418.941519][T12469] do_syscall_64+0x106/0xf80 [ 418.941532][T12469] ? clear_bhb_loop+0x40/0x90 [ 418.941545][T12469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.941556][T12469] RIP: 0033:0x7f432ad9c799 [ 418.941566][T12469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.941577][T12469] RSP: 002b:00007f432bc1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 418.941588][T12469] RAX: ffffffffffffffda RBX: 00007f432b015fa0 RCX: 00007f432ad9c799 [ 418.941595][T12469] RDX: 000000000000003b RSI: 0000000000000029 RDI: 0000000000000003 [ 418.941601][T12469] RBP: 00007f432bc1e090 R08: 0000200000000180 R09: 0000000000000000 [ 418.941607][T12469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.941613][T12469] R13: 00007f432b016038 R14: 00007f432b015fa0 R15: 00007ffed06b4d08 [ 418.941627][T12469] [ 418.942519][T12455] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 419.248841][ T5875] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input24 [ 419.260099][ T10] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 419.272476][ T5916] IPVS: starting estimator thread 0... [ 419.340552][ T5166] input input24: unable to receive magic message: -110 [ 419.358876][T12474] IPVS: using max 43 ests per chain, 103200 per kthread [ 419.389692][ T10] usb 5-1: device descriptor read/64, error -71 [ 419.404080][ T5940] usb 3-1: USB disconnect, device number 39 [ 419.404119][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 419.419330][ C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 419.455469][T12476] FAULT_INJECTION: forcing a failure. [ 419.455469][T12476] name failslab, interval 1, probability 0, space 0, times 0 [ 419.471023][T12476] CPU: 0 UID: 0 PID: 12476 Comm: syz.6.1592 Not tainted syzkaller #0 PREEMPT(full) [ 419.471045][T12476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 419.471055][T12476] Call Trace: [ 419.471061][T12476] [ 419.471068][T12476] dump_stack_lvl+0x100/0x190 [ 419.471100][T12476] should_fail_ex.cold+0x5/0xa [ 419.471123][T12476] should_failslab+0xc2/0x120 [ 419.471140][T12476] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 419.471163][T12476] ? __d_alloc+0x34/0xa80 [ 419.471196][T12476] __d_alloc+0x34/0xa80 [ 419.471219][T12476] d_alloc+0x4a/0x1e0 [ 419.471241][T12476] lookup_one_qstr_excl+0x175/0x250 [ 419.471265][T12476] start_dirop+0x59/0xb0 [ 419.471282][T12476] simple_start_creating+0xf9/0x110 [ 419.471299][T12476] ? __pfx_simple_start_creating+0x10/0x10 [ 419.471317][T12476] ? mntput+0x70/0xa0 [ 419.471331][T12476] ? simple_pin_fs+0xa3/0x190 [ 419.471356][T12476] debugfs_start_creating.part.0+0x82/0x170 [ 419.471376][T12476] __debugfs_create_file+0xb3/0x4f0 [ 419.471399][T12476] debugfs_create_file_full+0x41/0x60 [ 419.471421][T12476] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 419.471441][T12476] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 419.471478][T12476] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 419.471502][T12476] ? alloc_netdev_mqs+0xd7/0x14f0 [ 419.471524][T12476] ? lockdep_init_map_type+0x5c/0x250 [ 419.471543][T12476] ? __pfx_ppp_setup+0x10/0x10 [ 419.471558][T12476] alloc_netdev_mqs+0x314/0x14f0 [ 419.471586][T12476] rtnl_create_link+0xc13/0xf80 [ 419.471611][T12476] rtnl_newlink+0x13b8/0x2380 [ 419.471641][T12476] ? __pfx_rtnl_newlink+0x10/0x10 [ 419.471659][T12476] ? find_held_lock+0x2b/0x80 [ 419.471680][T12476] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 419.471696][T12476] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 419.471716][T12476] ? avc_has_perm_noaudit+0x145/0x3b0 [ 419.471754][T12476] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 419.471774][T12476] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 419.471796][T12476] ? __pfx_rtnl_newlink+0x10/0x10 [ 419.471817][T12476] rtnetlink_rcv_msg+0x95e/0xe90 [ 419.471839][T12476] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 419.471864][T12476] ? ref_tracker_free+0x37e/0x6c0 [ 419.471885][T12476] netlink_rcv_skb+0x159/0x420 [ 419.471909][T12476] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 419.471932][T12476] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 419.471965][T12476] ? netlink_deliver_tap+0x1ae/0xcc0 [ 419.471994][T12476] netlink_unicast+0x5aa/0x870 [ 419.472021][T12476] ? __pfx_netlink_unicast+0x10/0x10 [ 419.472054][T12476] netlink_sendmsg+0x8b0/0xda0 [ 419.472082][T12476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.472104][T12476] ? __might_fault+0x20/0x140 [ 419.472135][T12476] ____sys_sendmsg+0x9e1/0xb70 [ 419.472159][T12476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.472191][T12476] ? __pfx_____sys_sendmsg+0x10/0x10 [ 419.472227][T12476] ___sys_sendmsg+0x190/0x1e0 [ 419.472255][T12476] ? __pfx____sys_sendmsg+0x10/0x10 [ 419.472314][T12476] __sys_sendmsg+0x170/0x220 [ 419.472336][T12476] ? __pfx___sys_sendmsg+0x10/0x10 [ 419.472375][T12476] do_syscall_64+0x106/0xf80 [ 419.472395][T12476] ? clear_bhb_loop+0x40/0x90 [ 419.472417][T12476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.472434][T12476] RIP: 0033:0x7f9a4bf9c799 [ 419.472450][T12476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.472466][T12476] RSP: 002b:00007f9a4a1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.472482][T12476] RAX: ffffffffffffffda RBX: 00007f9a4c215fa0 RCX: 00007f9a4bf9c799 [ 419.472493][T12476] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 419.472503][T12476] RBP: 00007f9a4a1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 419.472513][T12476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.472523][T12476] R13: 00007f9a4c216038 R14: 00007f9a4c215fa0 R15: 00007ffd1c439528 [ 419.472547][T12476] [ 419.885639][ T10] usb usb5-port1: attempt power cycle [ 420.036177][T12486] block nbd9: Device being setup by another task [ 420.104594][T12488] blktrace: Concurrent blktraces are not allowed on loop3 [ 420.131881][ T29] audit: type=1326 audit(1773605868.779:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12480 comm="syz.9.1594" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f432ad9c799 code=0x0 [ 420.192561][ T51] block nbd9: Receive control failed (result -32) [ 420.199104][ T5822] block nbd9: Receive control failed (result -32) [ 420.206005][T12481] block nbd9: shutting down sockets [ 420.226466][ T10] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 420.245421][ T10] usb 5-1: device descriptor read/8, error -71 [ 420.292476][ T5875] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 420.513386][ T10] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 420.521150][ T29] audit: type=1400 audit(1773605869.178:604): avc: denied { setattr } for pid=12490 comm="syz.2.1596" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 420.546660][ T5875] usb 7-1: Using ep0 maxpacket: 32 [ 420.558553][ T5875] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.007524][ T10] usb 5-1: device descriptor read/8, error -71 [ 421.040237][ T5875] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 421.068582][ T5875] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 421.086372][ T5875] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.099876][ T5875] usb 7-1: Product: syz [ 421.104695][ T5875] usb 7-1: Manufacturer: syz [ 421.109544][ T5875] usb 7-1: SerialNumber: syz [ 421.118663][ T5875] usb 7-1: config 0 descriptor?? [ 421.140315][ T10] usb usb5-port1: unable to enumerate USB device [ 421.290173][T12501] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12501 comm=syz.9.1598 [ 421.304847][T12501] netlink: 'syz.9.1598': attribute type 1 has an invalid length. [ 421.326581][T12485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.336850][T12485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.346523][T12501] 8021q: adding VLAN 0 to HW filter on device bond2 [ 421.359352][ T10] usb 7-1: USB disconnect, device number 17 [ 421.487571][T12505] syz_tun: entered promiscuous mode [ 421.493548][T12505] macvtap1: entered promiscuous mode [ 421.503796][T12505] syz_tun: left promiscuous mode [ 421.809729][ T29] audit: type=1400 audit(1773605870.533:605): avc: denied { mounton } for pid=12507 comm="syz.4.1600" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 421.912072][T12494] block nbd8: shutting down sockets [ 422.051307][ T29] audit: type=1400 audit(1773605870.795:606): avc: denied { connect } for pid=12516 comm="syz.8.1601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 422.127366][ T29] audit: type=1400 audit(1773605870.816:607): avc: denied { shutdown } for pid=12516 comm="syz.8.1601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 422.729108][T12534] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 424.647675][T12565] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 424.873861][T12568] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 425.063339][T12573] netlink: 'syz.4.1612': attribute type 2 has an invalid length. [ 425.337706][ T29] audit: type=1326 audit(1773605874.239:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12575 comm="syz.8.1613" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa0ef39c799 code=0x0 [ 425.431269][ T51] block nbd8: Receive control failed (result -32) [ 425.440103][ T5822] block nbd8: Receive control failed (result -32) [ 425.447575][T12580] block nbd8: shutting down sockets [ 426.061788][ T29] audit: type=1400 audit(1773605875.005:609): avc: denied { open } for pid=12609 comm="syz.8.1618" path="/dev/ttyr5" dev="devtmpfs" ino=396 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 426.380014][T12621] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 426.418484][T12621] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 426.528158][T12629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12629 comm=syz.2.1621 [ 426.559392][T12629] netlink: 'syz.2.1621': attribute type 1 has an invalid length. [ 426.683318][ T5868] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 426.691986][T12629] 8021q: adding VLAN 0 to HW filter on device bond9 [ 426.847059][ T5868] usb 10-1: unable to get BOS descriptor or descriptor too short [ 426.878007][ T5868] usb 10-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config [ 426.924107][ T5868] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 426.980834][ T5868] usb 10-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 427.019107][ T5868] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.061374][ T5868] usb 10-1: Product: syz [ 427.077948][ T5868] usb 10-1: Manufacturer: syz [ 427.106307][ T5868] usb 10-1: SerialNumber: syz [ 427.335553][ T5868] usb 10-1: unit 3 not found! [ 427.439539][ T5868] usb 10-1: USB disconnect, device number 13 [ 427.491108][ T7473] udevd[7473]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 427.536498][ T29] audit: type=1400 audit(1773605876.549:610): avc: denied { setopt } for pid=12651 comm="syz.8.1624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 428.213944][ T9640] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 428.398815][ T9640] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 428.430872][ T9640] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 428.462050][ T9640] usb 10-1: config 1 has no interface number 0 [ 428.478817][ T9640] usb 10-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 428.527529][ T9640] usb 10-1: config 1 interface 1 has no altsetting 0 [ 428.549346][ T9640] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 428.616723][ T9640] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.624836][ T9640] usb 10-1: Product: syz [ 428.646073][ T9640] usb 10-1: Manufacturer: syz [ 428.650818][ T9640] usb 10-1: SerialNumber: syz [ 428.867099][T12669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.885398][T12669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.905555][ T9640] cdc_mbim 10-1:1.1: probe with driver cdc_mbim failed with error -71 [ 428.927641][ T9640] usb 10-1: USB disconnect, device number 14 [ 429.035823][T12678] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1630'. [ 429.544165][T12692] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 430.143765][ T29] audit: type=1400 audit(1773605879.226:611): avc: denied { mount } for pid=12695 comm="syz.9.1634" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 430.430507][T12706] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12706 comm=syz.6.1635 [ 430.461849][T12706] netlink: 'syz.6.1635': attribute type 1 has an invalid length. [ 430.536086][T12706] 8021q: adding VLAN 0 to HW filter on device bond4 [ 430.606119][ T29] audit: type=1400 audit(1773605879.772:612): avc: denied { sys_module } for pid=12710 comm="syz.8.1638" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 431.795066][ T29] audit: type=1400 audit(1773605881.011:613): avc: denied { mount } for pid=12730 comm="syz.8.1643" name="/" dev="configfs" ino=1060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 431.870712][ T29] audit: type=1400 audit(1773605881.063:614): avc: denied { search } for pid=12730 comm="syz.8.1643" name="/" dev="configfs" ino=1060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 431.947613][T12736] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1645'. [ 431.956701][ T29] audit: type=1400 audit(1773605881.063:615): avc: denied { search } for pid=12730 comm="syz.8.1643" name="/" dev="configfs" ino=1060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 431.956843][ T29] audit: type=1400 audit(1773605881.074:616): avc: denied { read open } for pid=12730 comm="syz.8.1643" path="/" dev="configfs" ino=1060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 432.011359][ T29] audit: type=1400 audit(1773605881.074:617): avc: denied { search } for pid=12730 comm="syz.8.1643" name="/" dev="configfs" ino=1060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 432.035415][ T29] audit: type=1400 audit(1773605881.074:618): avc: denied { search } for pid=12730 comm="syz.8.1643" name="/" dev="configfs" ino=1060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 432.061743][T12740] overlayfs: missing 'lowerdir' [ 432.297683][T12745] fuse: Unknown parameter 'Ϻ ÉúÐ_(náU}iYè÷¸ãšHâÚ$¼ÆUáà€?Œ½:?Á¼Ð¾8ßø»Æ×…?x;Šÿs"Ó´{4kÓG´ÐT´RÜÁ' [ 432.588231][T12749] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 432.687884][ T29] audit: type=1400 audit(1773605881.956:619): avc: denied { accept } for pid=12748 comm="syz.6.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 432.743267][ T29] audit: type=1400 audit(1773605881.956:620): avc: denied { ioctl } for pid=12748 comm="syz.6.1650" path="socket:[45519]" dev="sockfs" ino=45519 ioctlcmd=0x8b14 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 432.799193][ T1574] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 433.003045][ T1574] usb 3-1: unable to get BOS descriptor or descriptor too short [ 433.372127][ T1574] usb 3-1: config 1 has an invalid interface number: 94 but max is 1 [ 433.383782][ T1574] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 433.409602][ T1574] usb 3-1: config 1 has no interface number 1 [ 433.417381][T12764] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12764 comm=syz.8.1655 [ 433.430126][ T1574] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 433.436497][ T24] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 433.451485][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 433.457804][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 433.466534][T12764] netlink: 'syz.8.1655': attribute type 1 has an invalid length. [ 433.476728][ T1574] usb 3-1: config 1 interface 94 altsetting 79 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 433.502792][ T1574] usb 3-1: config 1 interface 94 has no altsetting 0 [ 433.520109][ T1574] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 433.534541][T12764] 8021q: adding VLAN 0 to HW filter on device bond1 [ 433.541361][ T1574] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.550202][ T1574] usb 3-1: Product: syz [ 433.559200][ T1574] usb 3-1: Manufacturer: syz [ 433.567403][ T1574] usb 3-1: SerialNumber: syz [ 433.692175][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.714094][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.726338][ T24] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 433.739730][ T24] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 433.751380][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.779237][ T24] usb 10-1: config 0 descriptor?? [ 434.876332][ T24] usbhid 10-1:0.0: can't add hid device: -71 [ 435.269802][ T24] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 435.280634][ T24] usb 10-1: USB disconnect, device number 15 [ 435.360098][T12781] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8208 sclass=netlink_route_socket pid=12781 comm=syz.9.1658 [ 435.409023][ T1574] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 435.415820][ T1574] cdc_ncm 3-1:1.0: bind() failure [ 436.052340][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 436.052359][ T29] audit: type=1400 audit(1773605885.043:624): avc: denied { bind } for pid=12782 comm="syz.4.1659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 436.087913][ T29] audit: type=1400 audit(1773605885.043:625): avc: denied { connect } for pid=12782 comm="syz.4.1659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 436.134739][ T1574] usb 3-1: USB disconnect, device number 40 [ 436.576068][T12795] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 436.903010][ T1574] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 436.922067][ T10] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 437.061222][ T1574] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.072888][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 437.132010][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 437.164124][ T1574] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 437.228635][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.259777][ T1574] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.326739][ T10] usb 3-1: Product: syz [ 437.363457][ T10] usb 3-1: Manufacturer: syz [ 437.403401][ T10] usb 3-1: SerialNumber: syz [ 437.415775][ T1574] usb 9-1: config 0 descriptor?? [ 437.514885][ T10] usb 3-1: config 0 descriptor?? [ 437.635774][ T1574] pwc: Askey VC010 type 2 USB webcam detected. [ 438.482492][ T1574] pwc: recv_control_msg error -32 req 02 val 2700 [ 438.496853][ T1574] pwc: recv_control_msg error -32 req 02 val 2c00 [ 438.527980][ T1574] pwc: recv_control_msg error -32 req 04 val 1000 [ 438.548205][ T10] usb read operation failed. (-71) [ 438.555367][ T10] usb write operation failed. (-71) [ 438.565620][ T10] usb write operation failed. (-71) [ 438.610506][ T1574] pwc: recv_control_msg error -32 req 04 val 1300 [ 438.617030][ T10] usb write operation failed. (-71) [ 438.634466][ T10] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 438.649242][ T1574] pwc: recv_control_msg error -32 req 04 val 1400 [ 438.793195][T12824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12824 comm=syz.9.1670 [ 438.816642][ T10] usb 3-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 439.198256][ T1574] pwc: recv_control_msg error -32 req 02 val 2000 [ 439.211095][ T1574] pwc: recv_control_msg error -32 req 02 val 2100 [ 439.219100][ T1574] pwc: recv_control_msg error -32 req 04 val 1500 [ 439.233767][ T29] audit: type=1400 audit(1773605888.833:626): avc: denied { firmware_load } for pid=10 comm="kworker/0:1" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 439.255818][T12824] netlink: 'syz.9.1670': attribute type 1 has an invalid length. [ 439.264365][ T10] usb 3-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 439.274704][ T1574] pwc: recv_control_msg error -32 req 02 val 2500 [ 439.301680][T12833] fuse: Bad value for 'user_id' [ 439.326139][T12833] fuse: Bad value for 'user_id' [ 439.434176][T12824] 8021q: adding VLAN 0 to HW filter on device bond3 [ 439.527500][ T1574] pwc: recv_control_msg error -71 req 02 val 2600 [ 439.542155][ T1574] pwc: recv_control_msg error -71 req 02 val 2900 [ 439.551227][ T1574] pwc: recv_control_msg error -71 req 02 val 2800 [ 439.568482][ T1574] pwc: recv_control_msg error -71 req 04 val 1100 [ 439.595654][ T1574] pwc: recv_control_msg error -71 req 04 val 1200 [ 439.625320][ T1574] pwc: Registered as video103. [ 439.652851][ T1574] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input25 [ 439.685252][ T1574] usb 9-1: USB disconnect, device number 20 [ 441.155442][T12869] siw: device registration error -23 [ 441.700090][T12872] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 442.482446][T12892] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12892 comm=syz.6.1684 [ 442.511392][T12892] netlink: 'syz.6.1684': attribute type 1 has an invalid length. [ 442.610403][T12892] 8021q: adding VLAN 0 to HW filter on device bond5 [ 442.669563][ T29] audit: type=1400 audit(2000000000.000:627): avc: denied { append } for pid=12890 comm="syz.4.1688" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 442.790062][T12847] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 444.090098][T12908] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1691'. [ 444.099305][T12908] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1691'. [ 444.360383][T12905] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1691'. [ 444.369498][T12905] gretap0: entered promiscuous mode [ 444.912823][T12919] netlink: 'syz.6.1693': attribute type 21 has an invalid length. [ 444.935715][T12919] netlink: 'syz.6.1693': attribute type 6 has an invalid length. [ 444.943793][T12919] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1693'. [ 445.227732][ T1574] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 445.401942][ T1574] usb 5-1: Using ep0 maxpacket: 16 [ 445.408894][ T1574] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 445.551313][ T1574] usb 5-1: config 0 has no interface number 0 [ 445.608632][ T1574] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.642229][ T1574] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.673181][ T1574] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 445.699015][ T1574] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.714374][ T1574] usb 5-1: config 0 descriptor?? [ 445.881083][T12931] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 446.313670][ T5875] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 446.378749][ T1574] input: HID 28bd:0071 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.0016/input/input26 [ 446.402946][T12944] IPv6: NLM_F_CREATE should be specified when creating new route [ 446.459142][T12945] siw: device registration error -23 [ 446.829701][ T5875] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 446.847158][ T5875] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.859513][ T5875] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.870597][ T5875] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 446.886905][ T1574] input: HID 28bd:0071 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.0016/input/input27 [ 446.900224][ T5875] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 446.913347][ T5875] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 446.924588][ T1574] uclogic 0003:28BD:0071.0016: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.4-1/input1 [ 446.952281][ T5875] usb 10-1: Manufacturer: syz [ 446.961378][ T1574] usb 5-1: USB disconnect, device number 17 [ 446.973145][ T5875] usb 10-1: config 0 descriptor?? [ 447.141368][T12949] fido_id[12949]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 447.159277][T12951] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12951 comm=syz.8.1703 [ 447.196711][T12951] netlink: 'syz.8.1703': attribute type 1 has an invalid length. [ 447.333123][T12951] 8021q: adding VLAN 0 to HW filter on device bond2 [ 447.456338][ T29] audit: type=1400 audit(2000000005.028:628): avc: denied { create } for pid=12957 comm="syz.6.1705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 447.498468][ T29] audit: type=1400 audit(2000000005.060:629): avc: denied { ioctl } for pid=12957 comm="syz.6.1705" path="socket:[46584]" dev="sockfs" ino=46584 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 447.527211][ T29] audit: type=1400 audit(2000000005.070:630): avc: denied { write } for pid=12957 comm="syz.6.1705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 447.655418][T12962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1706'. [ 447.799066][T12962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1706'. [ 447.918775][T12967] FAULT_INJECTION: forcing a failure. [ 447.918775][T12967] name failslab, interval 1, probability 0, space 0, times 0 [ 447.932728][T12967] CPU: 1 UID: 0 PID: 12967 Comm: syz.6.1707 Tainted: G L syzkaller #0 PREEMPT(full) [ 447.932758][T12967] Tainted: [L]=SOFTLOCKUP [ 447.932765][T12967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 447.932775][T12967] Call Trace: [ 447.932782][T12967] [ 447.932789][T12967] dump_stack_lvl+0x100/0x190 [ 447.932823][T12967] should_fail_ex.cold+0x5/0xa [ 447.932845][T12967] ? iter_file_splice_write+0x1d8/0x10a0 [ 447.932864][T12967] should_failslab+0xc2/0x120 [ 447.932881][T12967] __kmalloc_noprof+0xe0/0x850 [ 447.932904][T12967] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 447.932932][T12967] iter_file_splice_write+0x1d8/0x10a0 [ 447.932956][T12967] ? __pfx_ovl_other_xattr_get+0x10/0x10 [ 447.932983][T12967] ? __pfx___vfs_getxattr+0x10/0x10 [ 447.933001][T12967] ? bpf_lsm_capable+0x9/0x10 [ 447.933041][T12967] ? __pfx_iter_file_splice_write+0x10/0x10 [ 447.933061][T12967] ? __lock_acquire+0x4a5/0x2630 [ 447.933087][T12967] ? security_inode_need_killpriv+0x71/0x1e0 [ 447.933112][T12967] ? file_remove_privs_flags+0x251/0x590 [ 447.933152][T12967] backing_file_splice_write+0x27b/0x860 [ 447.933186][T12967] ovl_splice_write+0x328/0x600 [ 447.933216][T12967] ? __pfx_ovl_splice_write+0x10/0x10 [ 447.933242][T12967] ? __pfx_ovl_file_end_write+0x10/0x10 [ 447.933276][T12967] ? __pfx_ovl_splice_write+0x10/0x10 [ 447.933303][T12967] direct_splice_actor+0x192/0x6c0 [ 447.933325][T12967] splice_direct_to_actor+0x345/0xa30 [ 447.933347][T12967] ? __pfx_direct_splice_actor+0x10/0x10 [ 447.933370][T12967] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 447.933397][T12967] do_splice_direct+0x174/0x240 [ 447.933415][T12967] ? __pfx_do_splice_direct+0x10/0x10 [ 447.933432][T12967] ? avc_policy_seqno+0x9/0x20 [ 447.933448][T12967] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 447.933472][T12967] ? rw_verify_area+0xce/0x6d0 [ 447.933497][T12967] do_sendfile+0xadc/0xe20 [ 447.933527][T12967] ? __pfx_do_sendfile+0x10/0x10 [ 447.933560][T12967] __x64_sys_sendfile64+0x154/0x220 [ 447.933581][T12967] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 447.933609][T12967] do_syscall_64+0x106/0xf80 [ 447.933631][T12967] ? clear_bhb_loop+0x40/0x90 [ 447.933653][T12967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.933670][T12967] RIP: 0033:0x7f9a4bf9c799 [ 447.933686][T12967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.933702][T12967] RSP: 002b:00007f9a4a1b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 447.933720][T12967] RAX: ffffffffffffffda RBX: 00007f9a4c216180 RCX: 00007f9a4bf9c799 [ 447.933731][T12967] RDX: 0000200000000080 RSI: 0000000000000005 RDI: 0000000000000005 [ 447.933742][T12967] RBP: 00007f9a4a1b4090 R08: 0000000000000000 R09: 0000000000000000 [ 447.933752][T12967] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000002 [ 447.933763][T12967] R13: 00007f9a4c216218 R14: 00007f9a4c216180 R15: 00007ffd1c439528 [ 447.933788][T12967] [ 448.276354][ T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 448.419938][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 448.426822][ T24] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 448.435391][ T24] usb 5-1: config 0 has no interface number 0 [ 448.442423][ T24] usb 5-1: config 0 interface 12 has no altsetting 0 [ 448.452119][ T24] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 448.461224][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.472198][ T24] usb 5-1: Product: syz [ 448.476811][ T24] usb 5-1: Manufacturer: syz [ 448.482337][ T24] usb 5-1: SerialNumber: syz [ 448.558697][ T24] usb 5-1: config 0 descriptor?? [ 449.346469][T12962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.373292][T12962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.414298][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 449.421797][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 449.432667][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 449.440379][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 449.453920][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 449.463603][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 449.472432][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 449.480056][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 449.489070][ T24] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -32 [ 449.496717][ T24] f81534 5-1:0.12: f81534_find_config_idx: read failed: -32 [ 449.504046][ T24] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 449.557177][ T24] f81534 5-1:0.12: probe with driver f81534 failed with error -32 [ 449.581404][ T24] usb 5-1: USB disconnect, device number 18 [ 449.704092][ T5875] usbhid 10-1:0.0: can't add hid device: -71 [ 449.710588][ T5875] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 449.720674][ T5875] usb 10-1: USB disconnect, device number 16 [ 449.796700][T12975] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 450.057992][ T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 450.261825][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 450.282558][ T24] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 450.293068][ T24] usb 5-1: config 0 has no interface number 0 [ 450.302448][ T24] usb 5-1: config 0 interface 12 has no altsetting 0 [ 450.516452][ T24] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 450.526037][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.535529][ T24] usb 5-1: Product: syz [ 450.539764][ T24] usb 5-1: Manufacturer: syz [ 450.544869][ T24] usb 5-1: SerialNumber: syz [ 450.658868][ T24] usb 5-1: config 0 descriptor?? [ 450.749614][ T24] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 450.778160][ T24] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 450.787362][T13000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1717'. [ 450.817200][ T24] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 450.876305][ T24] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 450.887289][T13010] fuse: Bad value for 'user_id' [ 450.905578][ T24] usb 5-1: USB disconnect, device number 19 [ 450.931438][T13010] fuse: Bad value for 'user_id' [ 451.171041][T13021] blktrace: Concurrent blktraces are not allowed on loop3 [ 451.209964][T13020] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13020 comm=syz.6.1718 [ 451.293132][T13020] netlink: 'syz.6.1718': attribute type 1 has an invalid length. [ 451.497814][T13020] 8021q: adding VLAN 0 to HW filter on device bond6 [ 454.200028][T13054] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 455.361711][ T29] audit: type=1400 audit(2000000013.258:631): avc: denied { mounton } for pid=13038 comm="syz.2.1725" path="/348/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 455.393550][T13059] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 455.510378][T13062] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 455.702418][T13065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1731'. [ 455.754381][T13068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1731'. [ 456.094745][T13081] fuse: Unknown parameter 'rootmoee' [ 458.665405][T13104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.750684][T13104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.939858][T13114] netlink: 'syz.9.1741': attribute type 4 has an invalid length. [ 458.953027][T13114] netlink: 152 bytes leftover after parsing attributes in process `syz.9.1741'. [ 459.477027][T13122] fuse: Bad value for 'fd' [ 459.482474][T13114] .`: renamed from bond0 (while UP) [ 459.554948][T13123] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 461.319078][ T29] audit: type=1400 audit(2000000019.589:632): avc: denied { lock } for pid=13137 comm="syz.2.1748" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 462.111986][T13148] lo speed is unknown, defaulting to 1000 [ 462.247831][ T29] audit: type=1400 audit(2000000020.271:633): avc: denied { bind } for pid=13144 comm="syz.6.1750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 463.184604][T13161] ceph: No mds server is up or the cluster is laggy [ 463.192453][ T979] libceph: connect (1)[c::]:6789 error -101 [ 463.224089][ T979] libceph: mon0 (1)[c::]:6789 connect error [ 463.804775][T13170] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 465.079659][T13191] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13191 comm=syz.8.1762 [ 465.184512][ T1574] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 465.776323][ T1574] usb 5-1: Using ep0 maxpacket: 16 [ 465.787091][ T1574] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 465.821876][ T1574] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 465.922641][ T1574] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 1024 [ 465.951885][T13199] comedi comedi0: dt2815: I/O port conflict (0x4f27,2) [ 466.184829][ T1574] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 466.200835][ T1574] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 466.220190][ T1574] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 466.249658][ T1574] usb 5-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 466.327958][ T1574] usb 5-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3 [ 466.340432][ T1574] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.350608][ T1574] usb 5-1: Product: syz [ 466.355764][ T1574] usb 5-1: Manufacturer: syz [ 466.384908][ T1574] usb 5-1: SerialNumber: syz [ 466.408143][ T1574] usb 5-1: config 0 descriptor?? [ 466.518130][T13186] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 466.553699][ T1574] iuu_phoenix 5-1:0.0: iuu_phoenix converter detected [ 466.602218][ T1574] usb 5-1: iuu_phoenix converter now attached to ttyUSB0 [ 466.761981][ T24] usb 5-1: USB disconnect, device number 20 [ 466.788352][ T24] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 466.820326][ T24] iuu_phoenix 5-1:0.0: device disconnected [ 467.162501][ T29] audit: type=1400 audit(2000000025.720:634): avc: denied { bind } for pid=13210 comm="syz.2.1768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 467.208831][ T29] audit: type=1400 audit(2000000025.720:635): avc: denied { listen } for pid=13210 comm="syz.2.1768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 467.249408][ T29] audit: type=1400 audit(2000000025.772:636): avc: denied { read } for pid=13210 comm="syz.2.1768" path="socket:[49217]" dev="sockfs" ino=49217 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 467.727918][ T977] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 467.883244][ T977] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.894611][ T977] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.905457][ T977] usb 9-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 467.915466][ T977] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.994389][ T977] usb 9-1: config 0 descriptor?? [ 468.330922][ T29] audit: type=1400 audit(2000000026.948:637): avc: denied { read write } for pid=13229 comm="syz.2.1772" name="file0" dev="fuse" ino=16387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 468.355284][ T29] audit: type=1400 audit(2000000026.948:638): avc: denied { open } for pid=13229 comm="syz.2.1772" path="/356/file0/file0" dev="fuse" ino=16387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 468.492045][ T977] hid-led 0003:1D34:000A.0017: unknown main item tag 0x0 [ 468.499940][ T977] hid-led 0003:1D34:000A.0017: unknown main item tag 0x0 [ 468.507177][ T977] hid-led 0003:1D34:000A.0017: unknown main item tag 0x0 [ 468.902807][ T29] audit: type=1326 audit(2000000027.557:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13229 comm="syz.2.1772" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f23b979c799 code=0x0 [ 469.539717][ T977] hid-led 0003:1D34:000A.0017: probe with driver hid-led failed with error -71 [ 469.559128][T13233] block device autoloading is deprecated and will be removed. [ 469.760606][ T977] usb 9-1: USB disconnect, device number 21 [ 469.787363][ T29] audit: type=1400 audit(2000000028.481:640): avc: denied { ioctl } for pid=13231 comm="syz.6.1773" path="socket:[49369]" dev="sockfs" ino=49369 ioctlcmd=0x8994 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 470.111708][T13244] netlink: 'syz.4.1774': attribute type 21 has an invalid length. [ 470.119954][T13244] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1774'. [ 470.129657][T13244] netlink: 'syz.4.1774': attribute type 4 has an invalid length. [ 470.137377][T13244] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1774'. [ 470.228429][T13244] netlink: 'syz.4.1774': attribute type 1 has an invalid length. [ 470.237273][T13244] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1774'. [ 471.429971][ T29] audit: type=1400 audit(2000000030.181:641): avc: denied { read write } for pid=8384 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 471.499812][ T29] audit: type=1400 audit(2000000030.181:642): avc: denied { open } for pid=8384 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 471.723923][ T29] audit: type=1400 audit(2000000030.181:643): avc: denied { ioctl } for pid=8384 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 472.836328][ T29] audit: type=1400 audit(2000000031.682:644): avc: denied { lock } for pid=13281 comm="syz.4.1786" path="socket:[49537]" dev="sockfs" ino=49537 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 473.176201][ T1574] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 473.237301][T13302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1792'. [ 473.359115][ T1574] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.375206][ T1574] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.386464][ T1574] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 473.399971][ T1574] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 473.409401][ T1574] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.435154][ T1574] usb 10-1: config 0 descriptor?? [ 473.841638][T13297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.850364][T13297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.865238][ T1574] plantronics 0003:047F:FFFF.0018: reserved main item tag 0xd [ 473.878497][ T1574] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 474.142247][ T1574] usb 10-1: USB disconnect, device number 17 [ 474.565878][T13337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13337 comm=syz.8.1799 [ 474.602768][T13337] netlink: 'syz.8.1799': attribute type 1 has an invalid length. [ 474.681193][T13337] 8021q: adding VLAN 0 to HW filter on device bond3 [ 474.922318][ T29] audit: type=1400 audit(2000000033.866:645): avc: denied { read } for pid=13340 comm="syz.9.1801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 475.319233][ T977] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 475.472035][ T977] usb 5-1: Using ep0 maxpacket: 32 [ 475.499090][ T977] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 475.508052][ T977] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 475.532980][ T977] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 475.718250][ T977] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 475.861942][ T977] usb 5-1: config 0 interface 0 has no altsetting 0 [ 475.907327][ T977] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 475.930076][ T977] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 475.951284][ T977] usb 5-1: Product: syz [ 475.960890][ T977] usb 5-1: Manufacturer: syz [ 475.971024][ T977] usb 5-1: SerialNumber: syz [ 475.986264][ T977] usb 5-1: config 0 descriptor?? [ 476.022634][ T977] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 476.044583][T13361] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1807'. [ 476.056959][ T977] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 476.217914][T13344] ldusb 5-1:0.0: Write buffer overflow, 64804 bytes dropped [ 476.238161][T13345] ldusb 5-1:0.0: Write buffer overflow, 64804 bytes dropped [ 477.014060][ T29] audit: type=1326 audit(2000000036.060:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13369 comm="syz.9.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f432ad9c799 code=0x7ffc0000 [ 477.086873][ T29] audit: type=1326 audit(2000000036.092:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13369 comm="syz.9.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f432ad9c799 code=0x7ffc0000 [ 477.284424][ T5916] usb 5-1: USB disconnect, device number 21 [ 477.304369][ T5916] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 477.539580][T13380] blktrace: Concurrent blktraces are not allowed on loop3 [ 477.881635][ T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 478.045651][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.078843][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.098344][ T24] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 478.109883][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.131361][ T24] usb 5-1: config 0 descriptor?? [ 478.274005][ T5916] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 478.619306][ T24] hid-led 0003:1D34:000A.0019: unknown main item tag 0x0 [ 478.642237][ T24] hid-led 0003:1D34:000A.0019: unknown main item tag 0x0 [ 478.657596][ T24] hid-led 0003:1D34:000A.0019: unknown main item tag 0x0 [ 478.681944][ T5916] usb 7-1: Using ep0 maxpacket: 32 [ 478.696765][ T5916] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.708354][ T5916] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 478.745642][ T5916] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 478.780270][ T5916] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.798396][T13416] syz_tun: entered promiscuous mode [ 478.804221][T13416] macvtap1: entered promiscuous mode [ 478.932045][ T5916] usb 7-1: Product: syz [ 479.043127][ T5916] usb 7-1: Manufacturer: syz [ 479.047550][ T24] hid-led 0003:1D34:000A.0019: probe with driver hid-led failed with error -71 [ 479.047869][ T5916] usb 7-1: SerialNumber: syz [ 479.081059][ T5916] usb 7-1: config 0 descriptor?? [ 479.096543][ T24] usb 5-1: USB disconnect, device number 22 [ 479.122386][T13416] syz_tun: left promiscuous mode [ 479.334864][T13392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.352947][T13392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.393234][ T5916] usb 7-1: USB disconnect, device number 18 [ 479.610850][T13423] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 480.466921][T13422] delete_channel: no stack [ 480.626064][T13440] wg1: entered promiscuous mode [ 480.656478][T13440] wg1: entered allmulticast mode [ 481.347798][T13452] blktrace: Concurrent blktraces are not allowed on loop3 [ 481.882720][ T979] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 482.044649][ T979] usb 7-1: device descriptor read/64, error -71 [ 482.311432][ T979] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 482.322760][T13473] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1834'. [ 482.778294][ T979] usb 7-1: device descriptor read/64, error -71 [ 482.830601][T13473] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1834'. [ 482.912118][ T979] usb usb7-port1: attempt power cycle [ 483.254865][ T979] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 483.473312][T13473] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1834'. [ 483.521499][ T979] usb 7-1: device descriptor read/8, error -71 [ 483.759379][ T979] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 483.811487][ T979] usb 7-1: device descriptor read/8, error -71 [ 483.861176][T13492] syzkaller0: entered promiscuous mode [ 483.866782][T13492] syzkaller0: entered allmulticast mode [ 483.879222][T13492] TC_ACT_REPEAT abuse ? [ 483.921707][ T979] usb usb7-port1: unable to enumerate USB device [ 484.116191][ T29] audit: type=1400 audit(2000000043.524:648): avc: denied { map } for pid=13496 comm="syz.2.1842" path="socket:[50205]" dev="sockfs" ino=50205 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 484.281946][T13501] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1843'. [ 485.113734][ T5916] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 485.379020][ T5916] usb 9-1: device descriptor read/64, error -71 [ 485.433181][T13523] tipc: Started in network mode [ 485.439683][T13523] tipc: Node identity 080211000001, cluster identity 4711 [ 485.455727][T13523] tipc: Enabled bearer , priority 0 [ 485.469235][T13523] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 485.476839][T13523] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 485.504751][T13523] tipc: Resetting bearer [ 485.625991][ T5916] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 486.427582][ T29] audit: type=1400 audit(2000000045.918:649): avc: denied { getopt } for pid=13518 comm="syz.4.1850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 486.777539][ T5875] tipc: Node number set to 134418688 [ 486.841695][ T29] audit: type=1400 audit(2000000046.380:650): avc: denied { create } for pid=13522 comm="syz.2.1852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 486.944513][T13533] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1856'. [ 486.954770][T13533] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1856'. [ 486.964173][ T5916] usb 9-1: device descriptor read/64, error -71 [ 487.078559][ T5916] usb usb9-port1: attempt power cycle [ 487.171061][T13537] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 487.504313][ T5916] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 487.677068][ T5916] usb 9-1: device descriptor read/8, error -71 [ 488.045454][ T5868] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 488.096230][T13545] mmap: syz.9.1861 (13545): VmData 26230784 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 488.179090][ T977] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 488.198199][ T5868] usb 7-1: device descriptor read/64, error -71 [ 488.331219][ T977] usb 5-1: Using ep0 maxpacket: 32 [ 488.342382][ T977] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 488.355748][ T977] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 488.367084][ T977] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 488.377285][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.385568][ T977] usb 5-1: Product: syz [ 488.391916][ T977] usb 5-1: Manufacturer: syz [ 488.396614][ T977] usb 5-1: SerialNumber: syz [ 488.417927][ T977] usb 5-1: config 0 descriptor?? [ 488.503139][ T5868] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 488.533174][ T29] audit: type=1400 audit(2000000048.164:651): avc: denied { write } for pid=13570 comm="syz.2.1868" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 488.645499][ T5868] usb 7-1: device descriptor read/64, error -71 [ 488.699878][T13555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.729296][T13555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.760163][ T5868] usb usb7-port1: attempt power cycle [ 488.872893][ T5940] usb 5-1: USB disconnect, device number 23 [ 489.121840][ T5868] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 489.191238][ T5868] usb 7-1: device descriptor read/8, error -71 [ 489.436451][ T5868] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 489.487645][ T5868] usb 7-1: device descriptor read/8, error -71 [ 489.498338][T13583] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 489.615785][ T5868] usb usb7-port1: unable to enumerate USB device [ 489.800966][T13587] ieee802154 phy0 wpan0: encryption failed: -22 [ 491.076098][ T977] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 491.313023][ T977] usb 7-1: device descriptor read/64, error -71 [ 491.587698][ T29] audit: type=1400 audit(2000000051.324:652): avc: denied { append } for pid=13615 comm="syz.8.1882" name="event3" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 491.963754][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 492.061441][ T977] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 493.081525][ T29] audit: type=1400 audit(2000000052.573:653): avc: denied { accept } for pid=13627 comm="syz.2.1884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 493.560872][ T977] usb 7-1: device descriptor read/64, error -71 [ 493.665713][ T977] usb usb7-port1: attempt power cycle [ 493.676203][T13635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.688702][T13635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.744452][T13633] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 493.941763][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 494.501495][T13648] siw: device registration error -23 [ 496.426957][ T29] audit: type=1400 audit(2000000056.447:654): avc: denied { ioctl } for pid=13668 comm="syz.8.1895" path="socket:[50689]" dev="sockfs" ino=50689 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 496.841071][ T10] usb 3-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 497.370760][ T10] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 497.393334][ T10] usb 3-1: USB disconnect, device number 41 [ 497.727449][T13685] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 497.909777][ T29] audit: type=1400 audit(2000000058.001:655): avc: denied { ioctl } for pid=13686 comm="syz.4.1900" path="socket:[51700]" dev="sockfs" ino=51700 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 497.988081][ T29] audit: type=1400 audit(2000000058.053:656): avc: denied { map } for pid=13686 comm="syz.4.1900" path="/proc/292/auxv" dev="proc" ino=50842 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 498.062067][ T29] audit: type=1400 audit(2000000058.053:657): avc: denied { execute } for pid=13686 comm="syz.4.1900" path="/proc/292/auxv" dev="proc" ino=50842 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 498.200262][ T29] audit: type=1400 audit(2000000058.053:658): avc: denied { execute } for pid=13686 comm="syz.4.1900" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=51736 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 498.443876][ T29] audit: type=1400 audit(2000000058.190:659): avc: denied { read } for pid=13691 comm="syz.6.1901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 499.082777][ T977] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 499.585557][T13693] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.592922][T13693] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.658080][ T977] usb 7-1: Using ep0 maxpacket: 8 [ 499.674832][ T977] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 499.692145][ T977] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.700590][ T977] usb 7-1: Product: syz [ 499.706748][ T977] usb 7-1: Manufacturer: syz [ 499.711445][ T977] usb 7-1: SerialNumber: syz [ 499.718699][ T977] usb 7-1: config 0 descriptor?? [ 500.244866][ T977] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 500.266352][T13693] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 500.312967][T13693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.681613][ T977] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 501.803114][ T10] usb 7-1: USB disconnect, device number 30 [ 501.821289][ T3564] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.886664][ T3564] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.946671][ T3564] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.966924][ T3564] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.048792][T13728] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 502.048792][T13728] program syz.4.1911 not setting count and/or reply_len properly [ 502.053265][T13730] binder: 13722:13730 unknown command 1472 [ 502.071776][T13730] binder: 13722:13730 ioctl c0306201 200000000080 returned -22 [ 502.270879][T13733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1911'. [ 502.396381][T13737] binder: BINDER_SET_CONTEXT_MGR already set [ 502.403620][T13737] binder: 13732:13737 ioctl 4018620d 200000004a80 returned -16 [ 502.433717][ T29] audit: type=1400 audit(2000000062.694:660): avc: denied { setopt } for pid=13732 comm="syz.6.1913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 502.792978][ T29] audit: type=1400 audit(2000000062.746:661): avc: denied { name_bind } for pid=13732 comm="syz.6.1913" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 502.820449][T13733] ipvlan2: entered promiscuous mode [ 505.413595][T13767] netlink: 'syz.8.1921': attribute type 1 has an invalid length. [ 505.465238][T13767] 8021q: adding VLAN 0 to HW filter on device bond4 [ 505.667487][T13772] bond4: (slave veth3): Enslaving as an active interface with a down link [ 505.738902][T13767] vlan2: entered allmulticast mode [ 505.744899][T13767] veth0_to_bond: entered allmulticast mode [ 506.029131][T13767] veth0_to_bond: entered promiscuous mode [ 506.075182][T13767] veth0_to_bond: left promiscuous mode [ 506.165018][T13767] bond4: (slave vlan2): making interface the new active one [ 506.177395][T13767] veth0_to_bond: entered promiscuous mode [ 506.186651][T13767] vlan2: entered promiscuous mode [ 506.192755][T13767] bond4: (slave vlan2): Enslaving as an active interface with an up link [ 506.578386][T13796] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1926'. [ 506.594280][T13796] netlink: 'syz.9.1926': attribute type 10 has an invalid length. [ 507.052279][T13796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.060245][T13796] .`: (slave batadv0): Enslaving as an active interface with an up link [ 507.091109][T13798] blktrace: Concurrent blktraces are not allowed on loop3 [ 507.763586][ T10] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 508.602421][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.615591][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.626188][ T10] usb 10-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 508.641017][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.657671][ T10] usb 10-1: config 0 descriptor?? [ 509.261792][ T10] hid-led 0003:1D34:000A.001A: unknown main item tag 0x0 [ 509.305365][ T10] hid-led 0003:1D34:000A.001A: unknown main item tag 0x0 [ 509.316620][ T10] hid-led 0003:1D34:000A.001A: unknown main item tag 0x0 [ 509.440683][ T10] hid-led 0003:1D34:000A.001A: probe with driver hid-led failed with error -71 [ 509.480715][ T10] usb 10-1: USB disconnect, device number 18 [ 510.421355][T13846] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 510.666458][T13842] netlink: 'syz.8.1939': attribute type 9 has an invalid length. [ 510.695063][T13842] netlink: 'syz.8.1939': attribute type 11 has an invalid length. [ 510.741082][T13842] netlink: 'syz.8.1939': attribute type 12 has an invalid length. [ 510.769246][T13842] netlink: 210020 bytes leftover after parsing attributes in process `syz.8.1939'. [ 510.803792][T13842] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1939'. [ 510.846742][ T29] audit: type=1400 audit(2000000071.585:662): avc: denied { write } for pid=13853 comm="syz.4.1941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 510.975397][ T5916] usb 9-1: new full-speed USB device number 26 using dummy_hcd [ 511.042037][T13862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 511.194255][ T5916] usb 9-1: config 0 interface 0 has no altsetting 0 [ 511.201065][ T5916] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 511.210498][ T5916] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.230356][ T5916] usb 9-1: config 0 descriptor?? [ 511.900375][ T5916] corsair-psu 0003:1B1C:1C09.001B: unknown main item tag 0x0 [ 511.931707][ T29] audit: type=1400 audit(2000000072.719:663): avc: denied { accept } for pid=13879 comm="syz.9.1948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 511.951503][ T5916] corsair-psu 0003:1B1C:1C09.001B: unknown main item tag 0x0 [ 511.975196][ T5916] corsair-psu 0003:1B1C:1C09.001B: unknown main item tag 0x0 [ 512.034818][ T5916] corsair-psu 0003:1B1C:1C09.001B: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.8-1/input0 [ 512.403289][ T5916] corsair-psu 0003:1B1C:1C09.001B: unable to initialize device (-71) [ 512.429642][ T5916] corsair-psu 0003:1B1C:1C09.001B: probe with driver corsair-psu failed with error -71 [ 512.451475][ T5916] usb 9-1: USB disconnect, device number 26 [ 514.176805][T13902] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 514.384732][ T979] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 514.680200][ T979] usb 7-1: Using ep0 maxpacket: 8 [ 514.685375][T13910] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=290 sclass=netlink_route_socket pid=13910 comm=syz.4.1955 [ 514.713620][T13911] xt_ecn: cannot match TCP bits for non-tcp packets [ 514.721513][ T979] usb 7-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 514.764044][ T979] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.889522][ T979] usb 7-1: config 0 descriptor?? [ 514.960369][T13919] ptrace attach of "./syz-executor exec"[8889] was attempted by " [ 515.040889][ T979] ums-jumpshot 7-1:0.0: USB Mass Storage device detected [ 515.257462][T13901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.357755][T13901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.367934][ T979] ums-jumpshot 7-1:0.0: Quirks match for vid 05dc pid 0001: 2 [ 515.413070][ T977] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 515.520518][ T29] audit: type=1400 audit(2000000076.488:664): avc: denied { bind } for pid=13924 comm="syz.2.1959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 515.595778][ T977] usb 10-1: device descriptor read/64, error -71 [ 515.802860][T13931] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1960'. [ 515.819283][T13901] netlink: 212084 bytes leftover after parsing attributes in process `syz.6.1952'. [ 515.829098][T13931] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 515.851044][ T977] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 515.851672][ T5875] usb 7-1: USB disconnect, device number 31 [ 515.993580][ T977] usb 10-1: device descriptor read/64, error -71 [ 516.098735][ T977] usb usb10-port1: attempt power cycle [ 516.422222][ T977] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 516.485508][ T977] usb 10-1: device descriptor read/8, error -71 [ 516.737260][ T977] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 516.767812][ T977] usb 10-1: device descriptor read/8, error -71 [ 516.856118][T13958] xt_ecn: cannot match TCP bits for non-tcp packets [ 516.889343][ T977] usb usb10-port1: unable to enumerate USB device [ 517.004348][ T5817] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 517.315818][T13964] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 517.405614][ T5817] usb 7-1: unable to get BOS descriptor or descriptor too short [ 517.432059][ T5817] usb 7-1: not running at top speed; connect to a high speed hub [ 517.441635][ T5817] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 517.455143][ T5817] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 517.468817][ T5817] usb 7-1: string descriptor 0 read error: -22 [ 517.475220][ T5817] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 517.484450][ T5817] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.532914][ T5817] usb 7-1: 0:2 : does not exist [ 517.679708][ T977] usb 9-1: new full-speed USB device number 27 using dummy_hcd [ 518.125825][T13979] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1972'. [ 518.981825][T13984] lo speed is unknown, defaulting to 1000 [ 519.207321][T13985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.217251][T13985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.327974][ T29] audit: type=1400 audit(2000000080.047:665): avc: denied { watch } for pid=13969 comm="syz.8.1970" path="/proc/844/fd" dev="proc" ino=53749 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 519.369259][ T5817] usb 7-1: 5:0: cannot get min/max values for control 2 (id 5) [ 519.383153][ T5817] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 519.400703][ T5817] usb 7-1: 5:0: failed to get current value for ch 1 (-22) [ 519.524381][ T5817] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 519.558024][ T5817] usb 7-1: USB disconnect, device number 32 [ 519.589625][T13988] overlayfs: failed to resolve './file1/file0': -2 [ 519.702842][T13991] lo speed is unknown, defaulting to 1000 [ 519.712951][T13990] lo speed is unknown, defaulting to 1000 [ 520.636625][ T977] usb 9-1: unable to get BOS descriptor or descriptor too short [ 520.646052][ T977] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 520.654020][ T977] usb 9-1: can't read configurations, error -71 [ 521.327798][T14016] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 521.334602][T14016] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 521.365952][T14020] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1980'. [ 521.374804][T14016] vhci_hcd vhci_hcd.0: Device attached [ 521.623626][ T979] usb 51-1: new low-speed USB device number 2 using vhci_hcd [ 521.709547][ T29] audit: type=1400 audit(2000000082.976:666): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 521.995093][ T977] usb 10-1: new full-speed USB device number 23 using dummy_hcd [ 522.028932][ T6108] vlan2: left promiscuous mode [ 522.108101][T14037] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 522.254914][ T977] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 522.278894][ T977] usb 10-1: config 0 has no interfaces? [ 522.284816][ T977] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 522.300867][ T977] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.322560][ T977] usb 10-1: config 0 descriptor?? [ 522.527897][T14017] usb 51-1: recv xbuf, 0 [ 522.536733][ T6108] vhci_hcd vhci_hcd.9: stop threads [ 522.563721][ T6108] vhci_hcd vhci_hcd.9: release socket [ 522.573302][ T6108] vhci_hcd vhci_hcd.9: disconnect device [ 522.595058][ T979] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 523.282169][T14053] overlayfs: failed to resolve 'pcr=00000000000000000052': -2 [ 523.295241][ T29] audit: type=1400 audit(2000000084.645:667): avc: denied { mount } for pid=14052 comm="syz.8.1988" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 523.373131][T14060] blktrace: Concurrent blktraces are not allowed on loop3 [ 523.464877][ T29] audit: type=1400 audit(2000000084.834:668): avc: denied { unmount } for pid=8889 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 523.747895][ T10] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 523.919009][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 523.925574][ T10] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 523.936100][ T10] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 523.947960][ T10] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 523.959637][ T10] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 523.975115][ T10] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 523.984457][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.992506][ T10] usb 9-1: Product: syz [ 523.996729][ T10] usb 9-1: Manufacturer: syz [ 524.001323][ T10] usb 9-1: SerialNumber: syz [ 524.013166][ C0] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 524.024120][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/input/input29 [ 524.278823][ T10] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 524.288870][ T5817] usb 10-1: USB disconnect, device number 23 [ 524.296201][ T10] (id 0x00) [ 524.323072][T14065] misc userio: Invalid payload size [ 524.329954][T14065] misc userio: No port type given on /dev/userio [ 524.339370][T14065] netlink: 'syz.9.1991': attribute type 1 has an invalid length. [ 524.361394][T14065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.366551][ T10] rc_core: IR keymap rc-imon-pad not found [ 524.374916][ T10] Registered IR keymap rc-empty [ 524.379886][ T10] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 524.390836][T14036] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 524.390941][ T10] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 524.403011][T14065] bond0: (slave geneve2): making interface the new active one [ 524.438790][T14065] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 524.478922][ T10] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0 [ 524.500708][ T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0/input30 [ 524.524903][T14067] bond0: entered promiscuous mode [ 524.529639][ T10] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:29> initialized [ 524.538540][T14067] geneve2: entered promiscuous mode [ 524.676587][T14067] misc userio: The device must be registered before sending interrupts [ 524.819339][T14068] misc userio: The device must be registered before sending interrupts [ 524.821679][T14075] autofs: Unknown parameter 'fd00000000000000000000' [ 526.876002][ T5919] usb 9-1: USB disconnect, device number 29 [ 528.018978][ T51] Bluetooth: hci2: unexpected event for opcode 0x0c5a [ 528.032038][T14116] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 528.088291][T14116] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 528.104793][T14116] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 528.113961][T14116] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 528.405915][ T10] usb 9-1: new full-speed USB device number 30 using dummy_hcd [ 528.578190][ T10] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 528.629947][ T10] usb 9-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 528.653613][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.682096][ T10] usb 9-1: Product: syz [ 528.686289][ T10] usb 9-1: Manufacturer: syz [ 528.703976][ T10] usb 9-1: SerialNumber: syz [ 528.738687][ T10] usb 9-1: config 0 descriptor?? [ 528.818779][ T10] streamzap 9-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 529.091929][T14121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.120187][T14121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.155837][ T5919] usb 9-1: USB disconnect, device number 30 [ 529.691335][T14143] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 529.699019][T14143] overlayfs: failed to set xattr on upper [ 529.704808][T14143] overlayfs: ...falling back to redirect_dir=nofollow. [ 529.711709][T14143] overlayfs: ...falling back to index=off. [ 529.717537][T14143] overlayfs: ...falling back to uuid=null. [ 529.752551][T14144] overlayfs: failed to resolve './file1/file0': -2 [ 529.759460][ T5822] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 529.770143][ T29] audit: type=1400 audit(2000000091.353:669): avc: denied { mounton } for pid=14139 comm="syz.6.2009" path="/file0" dev="ramfs" ino=54582 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 530.547312][T14168] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 531.091491][T14179] overlay: filesystem on ./bus not supported as upperdir [ 531.256413][T14184] hub 9-0:1.0: USB hub found [ 531.262230][T14184] hub 9-0:1.0: 1 port detected [ 531.852233][T14192] kvm: emulating exchange as write [ 532.294719][T14194] tipc: Started in network mode [ 532.299614][T14194] tipc: Node identity ac14140f, cluster identity 4711 [ 532.307014][T14194] tipc: New replicast peer: 255.255.255.255 [ 532.313677][T14194] tipc: Enabled bearer , priority 10 [ 532.322507][T14194] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2018'. [ 532.670665][T14221] netlink: 'syz.2.2028': attribute type 3 has an invalid length. [ 532.854594][ T29] audit: type=1400 audit(2000000094.691:670): avc: denied { read } for pid=14228 comm="syz.8.2031" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 533.447028][ T29] audit: type=1400 audit(2000000094.901:671): avc: denied { ioctl } for pid=14222 comm="syz.9.2029" path="socket:[55482]" dev="sockfs" ino=55482 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 533.473634][ T10] tipc: Node number set to 2886997007 [ 533.620682][T14237] blktrace: Concurrent blktraces are not allowed on loop3 [ 534.836554][ T29] audit: type=1326 audit(2000000096.770:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14261 comm="syz.2.2037" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f23b979c799 code=0x0 [ 534.988620][ T29] audit: type=1400 audit(2000000096.928:673): avc: denied { create } for pid=14257 comm="syz.8.2035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 535.163696][ T29] audit: type=1400 audit(2000000096.970:674): avc: denied { getopt } for pid=14257 comm="syz.8.2035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 535.257928][T14268] pim6reg99999999: entered allmulticast mode [ 535.416303][ T979] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 535.580907][ T979] usb 3-1: Using ep0 maxpacket: 16 [ 535.602162][ T979] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 535.625903][ T5919] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 535.769480][ T979] usb 3-1: config 0 interface 0 has no altsetting 0 [ 535.777750][ T979] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 535.811542][ T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.902111][T14281] batadv0: entered promiscuous mode [ 535.908016][T14281] batadv0: left promiscuous mode [ 536.262493][ T979] usb 3-1: Product: syz [ 536.291294][ T979] usb 3-1: Manufacturer: syz [ 536.309971][ T5919] usb 7-1: Using ep0 maxpacket: 32 [ 536.324261][ T5919] usb 7-1: config 0 has an invalid interface number: 119 but max is 0 [ 536.340659][ T979] usb 3-1: SerialNumber: syz [ 536.359566][ T5919] usb 7-1: config 0 has no interface number 0 [ 536.366196][ T979] usb 3-1: config 0 descriptor?? [ 536.463249][ T5919] usb 7-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 536.522233][ T5919] usb 7-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 536.578820][ T5919] usb 7-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 21506, setting to 1024 [ 536.618126][ T5919] usb 7-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 536.660707][ T979] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input31 [ 536.674898][ T5919] usb 7-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 536.695618][T14285] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2043'. [ 536.728603][ T5919] usb 7-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 536.747585][T14284] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2043'. [ 536.749881][ T5919] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.804728][ T5919] usb 7-1: Product: syz [ 536.814309][ T5919] usb 7-1: Manufacturer: syz [ 536.823939][ T5919] usb 7-1: SerialNumber: syz [ 536.831521][T14270] fuse: Unknown parameter '' [ 536.854126][ T5919] usb 7-1: config 0 descriptor?? [ 536.867455][T14275] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 536.932105][T14284] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2043'. [ 536.956728][ T5919] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.119/input/input33 [ 537.114948][ T29] audit: type=1400 audit(2000000099.153:675): avc: denied { create } for pid=14269 comm="syz.2.2039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 537.692204][T14292] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 537.963498][ T5166] usb 7-1: BOGUS urb xfer, pipe 1 != type 3 [ 538.188072][ T979] rc_core: IR keymap rc-imon-pad not found [ 538.198226][ T979] Registered IR keymap rc-empty [ 538.203169][ T979] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 538.235849][ T979] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 538.242901][ T10] usb 7-1: USB disconnect, device number 33 [ 538.354094][ C1] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 538.370256][ T979] imon:send_packet: packet tx failed (-71) [ 538.418776][ T979] imon 3-1:0.0: remote input dev register failed [ 538.426855][T14300] fuse: Bad value for 'fd' [ 538.431381][ T29] audit: type=1400 audit(2000000100.539:676): avc: denied { mounton } for pid=14299 comm="syz.9.2046" path="/259/file0" dev="tmpfs" ino=1517 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 538.467926][ T979] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 538.746804][T14307] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 538.875581][ T979] imon 3-1:0.0: unable to initialize intf0, err 0 [ 538.923337][ T979] imon:imon_probe: failed to initialize context! [ 538.953106][ T979] imon 3-1:0.0: unable to register, err -19 [ 538.982732][ T979] usb 3-1: USB disconnect, device number 42 [ 539.015250][ T29] audit: type=1400 audit(2000000101.148:677): avc: denied { node_bind } for pid=14310 comm="syz.8.2048" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 539.168215][T14313] syzkaller0: entered promiscuous mode [ 539.207388][T14313] syzkaller0: entered allmulticast mode [ 539.292140][ T29] audit: type=1326 audit(2000000101.431:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14315 comm="syz.2.2051" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f23b9796517 code=0x0 [ 540.330180][T14342] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2054'. [ 541.165536][T14367] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 541.186093][T14367] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 541.305471][T14369] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 541.351245][T14369] block device autoloading is deprecated and will be removed. [ 541.362039][ T29] audit: type=1400 audit(2000000103.625:679): avc: denied { ioctl } for pid=14366 comm="syz.2.2058" path="/410/file0/file0" dev="fuse" ino=64 ioctlcmd=0x921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 541.709958][T14372] blktrace: Concurrent blktraces are not allowed on loop3 [ 541.789871][T14367] md: could not open device unknown-block(0,0). [ 541.798575][ T24] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 541.807046][T14367] md: md_import_device returned -6 [ 541.922294][ T24] usb 10-1: device descriptor read/64, error -71 [ 542.170504][ T24] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 542.341770][ T24] usb 10-1: device descriptor read/64, error -71 [ 542.456104][ T24] usb usb10-port1: attempt power cycle [ 542.475061][ T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 542.656314][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 542.666954][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.679101][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.690591][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 542.706099][ T10] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 542.724806][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.737015][ T10] usb 5-1: config 0 descriptor?? [ 542.789404][ T5817] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 542.818264][ T24] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 542.866962][ T24] usb 10-1: device descriptor read/8, error -71 [ 542.913035][ T5817] usb 7-1: device descriptor read/64, error -71 [ 543.093982][ T24] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 543.131747][ T24] usb 10-1: device descriptor read/8, error -71 [ 543.153798][ T10] shield 0003:0955:7214.001C: unknown main item tag 0x0 [ 543.160796][ T10] shield 0003:0955:7214.001C: unknown main item tag 0x0 [ 543.169603][ T5817] usb 7-1: new full-speed USB device number 35 using dummy_hcd [ 543.189260][ T10] shield 0003:0955:7214.001C: unknown main item tag 0x0 [ 543.208546][ T10] shield 0003:0955:7214.001C: unknown main item tag 0x0 [ 543.221815][ T10] shield 0003:0955:7214.001C: unknown main item tag 0x0 [ 543.237587][ T24] usb usb10-port1: unable to enumerate USB device [ 543.239451][ T10] input: HID 0955:7214 Haptics as /devices/virtual/input/input34 [ 543.305910][ T10] shield 0003:0955:7214.001C: Registered Thunderstrike controller [ 543.315616][ T5817] usb 7-1: device descriptor read/64, error -71 [ 543.342341][T14386] random: crng reseeded on system resumption [ 543.349642][ T29] audit: type=1400 audit(2000000105.693:680): avc: denied { append } for pid=14385 comm="syz.4.2062" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 543.373954][ T10] shield 0003:0955:7214.001C: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 543.386548][ T29] audit: type=1400 audit(2000000105.704:681): avc: denied { open } for pid=14385 comm="syz.4.2062" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 543.417077][ T29] audit: type=1400 audit(2000000105.777:682): avc: denied { map_create } for pid=14385 comm="syz.4.2062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 543.440971][ T5817] usb usb7-port1: attempt power cycle [ 543.441799][T14386] sch_tbf: burst 480 is lower than device lo mtu (65550) ! [ 543.465580][ T29] audit: type=1400 audit(2000000105.777:683): avc: denied { bpf } for pid=14385 comm="syz.4.2062" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 543.487130][ T29] audit: type=1400 audit(2000000105.777:684): avc: denied { map_read map_write } for pid=14385 comm="syz.4.2062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 543.507358][ T29] audit: type=1400 audit(2000000105.777:685): avc: denied { prog_load } for pid=14385 comm="syz.4.2062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 543.527633][ T29] audit: type=1400 audit(2000000105.777:686): avc: denied { perfmon } for pid=14385 comm="syz.4.2062" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 543.552225][ T29] audit: type=1400 audit(2000000105.777:687): avc: denied { prog_run } for pid=14385 comm="syz.4.2062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 543.585321][ T24] usb 5-1: USB disconnect, device number 24 [ 543.589068][ T5875] shield 0003:0955:7214.001C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 543.611216][ T24] ------------[ cut here ]------------ [ 543.616685][ T24] workqueue: work disable count underflowed [ 543.622553][ T24] WARNING: kernel/workqueue.c:4410 at enable_work+0x2d1/0x320, CPU#1: kworker/1:0/24 [ 543.632003][ T24] Modules linked in: [ 543.636351][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 543.647102][ T24] Tainted: [L]=SOFTLOCKUP [ 543.651426][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 543.661466][ T24] Workqueue: usb_hub_wq hub_event [ 543.666496][ T24] RIP: 0010:enable_work+0x2d1/0x320 [ 543.671683][ T24] Code: ff e8 f3 a9 38 00 e8 ae e8 bf 09 e9 61 ff ff ff e8 e4 a9 38 00 90 0f 0b 90 e9 17 fe ff ff e8 d6 a9 38 00 48 8d 3d 6f 81 0c 0f <67> 48 0f b9 3a 45 31 f6 e9 36 fe ff ff 48 89 ef e8 6a 2e a5 00 e9 [ 543.691294][ T24] RSP: 0018:ffffc900001e73b0 EFLAGS: 00010087 [ 543.697360][ T24] RAX: 000000000000e7e8 RBX: 0000000000000000 RCX: ffffc9001ac2c000 [ 543.705323][ T24] RDX: 0000000000100000 RSI: ffffffff81d0116a RDI: ffffffff90dc92e0 [ 543.713284][ T24] RBP: ffff88801bb7e738 R08: 0000000000000007 R09: 0000000000000000 [ 543.721249][ T24] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 543.729217][ T24] R13: 1ffff9200003ce77 R14: ffff88801bb7e698 R15: 000000007fffffff [ 543.737172][ T24] FS: 0000000000000000(0000) GS:ffff888124442000(0000) knlGS:0000000000000000 [ 543.746085][ T24] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 543.752653][ T24] CR2: 0000000000000000 CR3: 00000000374eb000 CR4: 00000000003526f0 [ 543.760606][ T24] Call Trace: [ 543.763869][ T24] [ 543.766804][ T24] ? __pfx_enable_work+0x10/0x10 [ 543.771734][ T24] ? __pfx___might_resched+0x10/0x10 [ 543.777005][ T24] cancel_delayed_work_sync+0x96/0xf0 [ 543.782363][ T24] thermal_zone_device_unregister+0x28e/0x4e0 [ 543.788416][ T24] ? __pfx_shield_remove+0x10/0x10 [ 543.793533][ T24] power_supply_unregister+0x10a/0x150 [ 543.798979][ T24] shield_remove+0x75/0x130 [ 543.803470][ T24] ? __pfx_shield_remove+0x10/0x10 [ 543.808570][ T24] hid_device_remove+0xd1/0x270 [ 543.813489][ T24] ? __pfx_hid_device_remove+0x10/0x10 [ 543.818930][ T24] device_remove+0xcb/0x180 [ 543.823420][ T24] device_release_driver_internal+0x42e/0x600 [ 543.829481][ T24] bus_remove_device+0x22f/0x440 [ 543.834409][ T24] device_del+0x376/0x9b0 [ 543.838731][ T24] ? __pfx_device_del+0x10/0x10 [ 543.843566][ T24] ? do_raw_spin_lock+0x128/0x260 [ 543.848572][ T24] ? find_held_lock+0x2b/0x80 [ 543.853238][ T24] hid_destroy_device+0x19c/0x240 [ 543.858254][ T24] usbhid_disconnect+0xa0/0xe0 [ 543.863003][ T24] usb_unbind_interface+0x1dd/0x9e0 [ 543.868192][ T24] ? kernfs_remove_by_name_ns+0x9f/0xf0 [ 543.873726][ T24] ? __pfx_usb_unbind_interface+0x10/0x10 [ 543.879433][ T24] device_remove+0x12a/0x180 [ 543.884012][ T24] device_release_driver_internal+0x42e/0x600 [ 543.890072][ T24] bus_remove_device+0x22f/0x440 [ 543.894998][ T24] device_del+0x376/0x9b0 [ 543.899319][ T24] ? __pfx_device_del+0x10/0x10 [ 543.904152][ T24] ? kobject_put+0xb9/0x640 [ 543.908650][ T24] usb_disable_device+0x367/0x810 [ 543.913664][ T24] usb_disconnect+0x2e2/0x9a0 [ 543.918330][ T24] hub_event+0x1d0c/0x4af0 [ 543.922753][ T24] ? __lock_acquire+0x4a5/0x2630 [ 543.927697][ T24] ? do_raw_spin_unlock+0x145/0x1e0 [ 543.932883][ T24] ? __pfx_hub_event+0x10/0x10 [ 543.937631][ T24] ? debug_object_deactivate+0x2e4/0x3b0 [ 543.943252][ T24] ? sched_core_enqueue+0x60/0xc00 [ 543.948357][ T24] ? rcu_is_watching+0x12/0xc0 [ 543.953106][ T24] process_one_work+0xa23/0x19a0 [ 543.958035][ T24] ? __pfx_process_one_work+0x10/0x10 [ 543.963394][ T24] ? __pfx_hub_event+0x10/0x10 [ 543.968155][ T24] worker_thread+0x5ef/0xe50 [ 543.972735][ T24] ? kthread+0x13a/0x450 [ 543.976955][ T24] ? __pfx_worker_thread+0x10/0x10 [ 543.982052][ T24] kthread+0x370/0x450 [ 543.986100][ T24] ? __pfx_kthread+0x10/0x10 [ 543.990672][ T24] ret_from_fork+0x754/0xd80 [ 543.995247][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 544.000339][ T24] ? __switch_to+0x7b4/0x1120 [ 544.005001][ T24] ? __pfx_kthread+0x10/0x10 [ 544.009574][ T24] ret_from_fork_asm+0x1a/0x30 [ 544.014333][ T24] [ 544.017333][ T24] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 544.024596][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 544.035336][ T24] Tainted: [L]=SOFTLOCKUP [ 544.039637][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 544.049673][ T24] Workqueue: usb_hub_wq hub_event [ 544.054688][ T24] Call Trace: [ 544.057948][ T24] [ 544.060860][ T24] dump_stack_lvl+0x100/0x190 [ 544.065525][ T24] vpanic+0x552/0x970 [ 544.069488][ T24] ? __pfx_vpanic+0x10/0x10 [ 544.073983][ T24] panic+0xd1/0xe0 [ 544.077685][ T24] ? __pfx_panic+0x10/0x10 [ 544.082093][ T24] check_panic_on_warn.cold+0x19/0x34 [ 544.087449][ T24] ? enable_work+0x2d1/0x320 [ 544.092022][ T24] __warn.cold+0x191/0x348 [ 544.096421][ T24] __report_bug+0x296/0x3d0 [ 544.100906][ T24] ? enable_work+0x2d1/0x320 [ 544.105478][ T24] ? __pfx___report_bug+0x10/0x10 [ 544.110484][ T24] ? __pfx_debug_object_free+0x10/0x10 [ 544.115929][ T24] ? enable_work+0x2ca/0x320 [ 544.120505][ T24] ? find_held_lock+0x2b/0x80 [ 544.125165][ T24] ? __flush_work+0x928/0xcb0 [ 544.129825][ T24] ? __flush_work+0x928/0xcb0 [ 544.134487][ T24] report_bug_entry+0xe1/0x290 [ 544.139240][ T24] ? enable_work+0x2d1/0x320 [ 544.143810][ T24] handle_bug+0x1cd/0x2a0 [ 544.148128][ T24] exc_invalid_op+0x17/0x50 [ 544.152618][ T24] asm_exc_invalid_op+0x1a/0x20 [ 544.157454][ T24] RIP: 0010:enable_work+0x2d1/0x320 [ 544.162635][ T24] Code: ff e8 f3 a9 38 00 e8 ae e8 bf 09 e9 61 ff ff ff e8 e4 a9 38 00 90 0f 0b 90 e9 17 fe ff ff e8 d6 a9 38 00 48 8d 3d 6f 81 0c 0f <67> 48 0f b9 3a 45 31 f6 e9 36 fe ff ff 48 89 ef e8 6a 2e a5 00 e9 [ 544.182229][ T24] RSP: 0018:ffffc900001e73b0 EFLAGS: 00010087 [ 544.188280][ T24] RAX: 000000000000e7e8 RBX: 0000000000000000 RCX: ffffc9001ac2c000 [ 544.196231][ T24] RDX: 0000000000100000 RSI: ffffffff81d0116a RDI: ffffffff90dc92e0 [ 544.204184][ T24] RBP: ffff88801bb7e738 R08: 0000000000000007 R09: 0000000000000000 [ 544.212137][ T24] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 544.220100][ T24] R13: 1ffff9200003ce77 R14: ffff88801bb7e698 R15: 000000007fffffff [ 544.228078][ T24] ? enable_work+0x2ca/0x320 [ 544.232660][ T24] ? __pfx_enable_work+0x10/0x10 [ 544.237581][ T24] ? __pfx___might_resched+0x10/0x10 [ 544.242868][ T24] cancel_delayed_work_sync+0x96/0xf0 [ 544.248227][ T24] thermal_zone_device_unregister+0x28e/0x4e0 [ 544.254281][ T24] ? __pfx_shield_remove+0x10/0x10 [ 544.259381][ T24] power_supply_unregister+0x10a/0x150 [ 544.264824][ T24] shield_remove+0x75/0x130 [ 544.269314][ T24] ? __pfx_shield_remove+0x10/0x10 [ 544.274407][ T24] hid_device_remove+0xd1/0x270 [ 544.279239][ T24] ? __pfx_hid_device_remove+0x10/0x10 [ 544.284678][ T24] device_remove+0xcb/0x180 [ 544.289171][ T24] device_release_driver_internal+0x42e/0x600 [ 544.295230][ T24] bus_remove_device+0x22f/0x440 [ 544.300170][ T24] device_del+0x376/0x9b0 [ 544.304541][ T24] ? __pfx_device_del+0x10/0x10 [ 544.309401][ T24] ? do_raw_spin_lock+0x128/0x260 [ 544.314412][ T24] ? find_held_lock+0x2b/0x80 [ 544.319078][ T24] hid_destroy_device+0x19c/0x240 [ 544.324095][ T24] usbhid_disconnect+0xa0/0xe0 [ 544.328860][ T24] usb_unbind_interface+0x1dd/0x9e0 [ 544.334073][ T24] ? kernfs_remove_by_name_ns+0x9f/0xf0 [ 544.339618][ T24] ? __pfx_usb_unbind_interface+0x10/0x10 [ 544.345332][ T24] device_remove+0x12a/0x180 [ 544.349911][ T24] device_release_driver_internal+0x42e/0x600 [ 544.355972][ T24] bus_remove_device+0x22f/0x440 [ 544.360897][ T24] device_del+0x376/0x9b0 [ 544.365216][ T24] ? __pfx_device_del+0x10/0x10 [ 544.370053][ T24] ? kobject_put+0xb9/0x640 [ 544.374549][ T24] usb_disable_device+0x367/0x810 [ 544.379564][ T24] usb_disconnect+0x2e2/0x9a0 [ 544.384233][ T24] hub_event+0x1d0c/0x4af0 [ 544.388648][ T24] ? __lock_acquire+0x4a5/0x2630 [ 544.393577][ T24] ? do_raw_spin_unlock+0x145/0x1e0 [ 544.398760][ T24] ? __pfx_hub_event+0x10/0x10 [ 544.403507][ T24] ? debug_object_deactivate+0x2e4/0x3b0 [ 544.409126][ T24] ? sched_core_enqueue+0x60/0xc00 [ 544.414231][ T24] ? rcu_is_watching+0x12/0xc0 [ 544.418989][ T24] process_one_work+0xa23/0x19a0 [ 544.423918][ T24] ? __pfx_process_one_work+0x10/0x10 [ 544.429278][ T24] ? __pfx_hub_event+0x10/0x10 [ 544.434043][ T24] worker_thread+0x5ef/0xe50 [ 544.438637][ T24] ? kthread+0x13a/0x450 [ 544.442859][ T24] ? __pfx_worker_thread+0x10/0x10 [ 544.447964][ T24] kthread+0x370/0x450 [ 544.452012][ T24] ? __pfx_kthread+0x10/0x10 [ 544.456583][ T24] ret_from_fork+0x754/0xd80 [ 544.461155][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 544.466248][ T24] ? __switch_to+0x7b4/0x1120 [ 544.470907][ T24] ? __pfx_kthread+0x10/0x10 [ 544.475492][ T24] ret_from_fork_asm+0x1a/0x30 [ 544.480254][ T24] [ 544.483465][ T24] Kernel Offset: disabled [ 544.487769][ T24] Rebooting in 86400 seconds..