last executing test programs: 9m37.370163839s ago: executing program 32 (id=2908): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) lseek(0xffffffffffffffff, 0x8, 0x4) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x100008, 0x0, 0xfffc, 0x0, 0x3, 0x0, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffeff, [0xfffffffc]}}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x1002002, 0x0) r6 = dup(r5) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000001c0)=0x19) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r6, 0x40085500, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000000c0), 0xce4, r3}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r3, 0x0, 0x100000000000000}, 0x38) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="6000000002060502000000000000000000000000140007800800114000000000050015000600000005000100060000e0050005000200000005000400000000000900020073797a310000000011000300"], 0x60}}, 0x0) 8m3.856362593s ago: executing program 33 (id=3180): syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaade3500590a7f080059f68b020611907800000000000000004e2300"/42], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioprio_set$pid(0x2, 0x0, 0x4000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 7m59.016630739s ago: executing program 34 (id=3194): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000940), 0x800, 0x0) ptrace$setopts(0x4200, 0x0, 0x2, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0xd66a) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) dup(r1) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000300), 0x3fffffffffffef1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x0) socket$netlink(0x10, 0x3, 0x7) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r5, 0x540a, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000010c0)=0x1) openat$nullb(0xffffffffffffff9c, 0x0, 0x121003, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, 0x0, &(0x7f00000002c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x0, 0x1, 0x1, 0x8001}, {0xf801, 0x7, 0x1, 0x5}, {0xd718, 0xf9, 0x5, 0x9}, {0x6, 0x10, 0x5, 0x1}]}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000980)={0xf0, 0x80, 0x300, 0x384, 0x3ff, 0x4, 0x14, 0x2, {0x0, 0x4}, {0x6, 0x7, 0x1}, {0xc, 0x5}, {0x1, 0xb74}, 0x1, 0x1, 0x40, 0x80000001, 0x0, 0x400, 0x8, 0x2, 0x6c, 0x1, 0x3, 0x27a, 0x34, 0x1, 0x2, 0xa}) 7m40.40981703s ago: executing program 5 (id=3269): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f}}], 0x1, 0x400c404) 7m39.810185674s ago: executing program 5 (id=3271): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x14, 0x2}, @flat=@weak_binder, @flat=@handle={0x70742a85, 0x10a, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 7m39.713816301s ago: executing program 2 (id=3272): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000}, 0x50) 7m39.578076568s ago: executing program 5 (id=3273): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) (async) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)=0x5) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) write(r1, &(0x7f0000000080)='g', 0x1) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0x16, 0x3, 0x0, 0x4004, 0x9, "ee1dd80000000000c70018008000000000cb09"}) 7m39.292248059s ago: executing program 5 (id=3274): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x24048041}, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {0x0, 0x0, 0xa8000000}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) 7m38.400071444s ago: executing program 2 (id=3279): socket$nl_netfilter(0x10, 0x3, 0xc) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) ptrace$poke(0x4, r0, &(0x7f0000000380), 0x917) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x2004000, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/14, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000015, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x3cb1d9cca71405cd}, 0x400000000000000) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) capget(&(0x7f0000000180), 0x0) r4 = request_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000340)='-@\x00', 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f00000002c0)={0xffffffffffffffff, 0x1, 0x5, 0x1, 0x5}) (async) keyctl$clear(0x7, r4) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) (async) r5 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) (async) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) gettid() 7m37.765615638s ago: executing program 5 (id=3281): mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000002c0)="cac1681cb34d75937a3e4b65be53e2", 0xf}, {&(0x7f0000000300)="4ee69cd8f57fdb34c0b20ee0b6a5", 0xe}, {&(0x7f0000000340)="d37bd9c43f8153b27c58a7378dd5947062a3b5cbb93c3083777f4ab81f80add08ddefb831c6c0502b64146f9bfd0583aba078d9149c543cb8b3a76b2f6c7892753200072af76379cd2642358cf8566c2b173a64eb7a7028bf5494a1a2849ed4286fcfe", 0x63}], 0x3}, 0x20008000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000121000), 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10b) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) ioctl$NS_GET_OWNER_UID(r1, 0xb704, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xa0842, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f00000000c0)={0x2d, &(0x7f0000000280)=[{0x1c, '\x00', @data=0x1, 0x1200000}, {0x11, '\x00', @st={0x4, [{0x3, @uvalue=0x8000000000000000}, {0x2, @uvalue=0x1}, {0x3, @uvalue=0x6}, {0x1, @uvalue=0x8000000000000001}]}, 0xc}]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r1}, './file0\x00'}) 7m37.758930935s ago: executing program 2 (id=3282): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8080) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = fsopen(&(0x7f0000000300)='ntfs\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001100), 0x8400, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000000206010800ffff0f00000000000000000c0007800500150082000000050005000a000000050001000700000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x58}, 0x1, 0x0, 0x0, 0x20}, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) (async) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000004c0)='\xbf\xa1\xe8\x8d\x05\xbe\xf5\xaf~\xb47\x0f\x9aZ\xeeU\xfbgAE\xe4K\xe8hu\xae2Z\x9c\x8c-\xf4\xf7\x8b9s[\xf9\xe9\xd7\xd2;\xd0,\xbc\x1d_`\x18\xd9P\xf1l\v\x86\xec\xb9-V\x84\xa7-x\xdb16\xd7(\xf8\xc3\x17\xe4\xbc\xcbF\xa3\xeb\xaf\xd0\xc8\x8a\xbb\x15\xa6\x89\x9d/\x83\xa5\xd8\xc9_\xf15a\x9bC\x1c\xc2\t+\xa4=\xcc\xd4\xedu\xab\xfaz\x9bw[L G\x1a\t}g\x1cp\xd3\x16\xa4\xad\x97\\\xb7\x98Hf\xa6)\xd2\x0e\x9a\xb2\x8a\xc0\xe0\a\x81\xea\xd8e\xdc\x84\xc6IV!\xf0\xbc\x06\t\x00>\x05\x00\xa4^a\x82C\a\x9f\xe7[\x1e\xc4\xc4V3F\x82\x17\x93T\xb8\xd5\x19o\x86\xb6]\xed|G\x19a\x82?\xfco%\xcd\xef\x03=\x0fA\\\xcd\xa6#\xb5\x1d\xde\x86\xd1\x03\x18o\x83\x86\xb7\xb3x\xca\x90y\r\xe4\x12*ak\xf7\xb6\xe0\x80\xc3\x9b\xe8\x87i\n\x84l\x1f\x90\xf1\x12\xc4H\xfc4\x81\x02\xed\"\x1c\xa5\x1d\x17\xc4\xb8\xde\xbb8->&\xe3I\x97x#\x9f\x8b\r6\xb9\xde\xc7\x13 \x88l\xe2\xd93\x8d\xb8J\xe7\xd0m\xe8TUj\'\xb9s\xa9\xe7Zr\x9f\xd6\x85\xa97\x8b\xd4\x98i\x94\xd11\xceR\x90\x8f\x81,o\x98W\xe9\xb7\x1e\xd7$\\n4\xc2\xbahf\xb6Qw\x94\xcd\xea{W\xd6\xae\x12\xa3^@;\x89\n\xedfD\xf7\xe8\xe2.\x994\xf8E\xfa1?175\x9f\x81\tm\xad\x92\xa8\xb5\x1a\xb9s\x80LaV\x80x\xd0\xc6\xa3\xec\xcagd\x1d\xf4\x00\x00\x00\x00z\xf1\x92\xa0\xf4\xf7<\xa7\xad\v-\f\x00\x88\v\xbe\x81\r\xa4,0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fcdbdf2502000000", @ANYRES32=r10, @ANYBLOB="1000a206080001000000000008000f0005"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) (async) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="0e00000e", @ANYRES16=r11, @ANYBLOB="010028bd7000fddbdf2515000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x42, 0x0) 7m37.6682412s ago: executing program 2 (id=3283): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x2) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) (rerun: 32) read$msr(r0, &(0x7f000001a440)=""/102400, 0x19000) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x8000) r2 = inotify_init() r3 = socket(0x80000000000000a, 0x2, 0x0) (async, rerun: 64) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) (rerun: 64) syz_open_dev$sg(&(0x7f0000001bc0), 0x208, 0x2c41) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async, rerun: 32) r4 = socket(0x80000000000000a, 0x2, 0x0) (rerun: 32) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x20, {{0xa, 0x4e22, 0xfffffffc, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x3, @remote}}}, 0xffffffffffffff48) (async, rerun: 64) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) (rerun: 64) close_range(r2, 0xffffffffffffffff, 0x0) (async) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async, rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r6, r8, 0x25, 0x1c, @void}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r9, r10, 0x4, r10}, 0x5) (async) ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f00000002c0)={0x3f, {0x0, 0x2, 0x0, 0x1, 0x40000000, 0xfc9108e}}) 7m37.22260409s ago: executing program 5 (id=3284): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, 0x0, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000100), 0x4) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) syz_usb_connect(0x6, 0x3f, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) clock_settime(0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000680)) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00?\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000000000000"], 0x48) 7m36.552838782s ago: executing program 2 (id=3285): mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10b) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r0}, './file0\x00'}) (fail_nth: 4) 7m36.273466726s ago: executing program 2 (id=3289): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa01"], 0x18) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000140)="1f3c56e23e875f4e9fd33352", 0xc}, {&(0x7f0000000200)="9621207fab1ed3e57a94c247a887ef6760125cd70c5829db9f0f3bf51c67becc4610ea394a7832869a186d375e5d8492c05dd49bcf3a8eb529b0b3b90c846e8bc8c7c14865f27c3d8f903a4bf59b422c58e806381ad4ccddb1a571123db5f3258be6e2d920c725376c33062496f70768fdc280a8fe65", 0x76}], 0x2, &(0x7f00000002c0)=[@ip_retopts={{0x24, 0x0, 0x7, {[@generic={0x89, 0x8, "4b0f4831ed54"}, @lsrr={0x83, 0xb, 0xc4, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}], 0x28}, 0x81) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 7m34.333595074s ago: executing program 3 (id=3301): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x20}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xfffffe01}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$NFT_BATCH(r4, 0x0, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc0000001900010000000000fedbdf25fe8000000000000000000000000000bbac1414aa000000000000000000000000fffc0000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000040000000000ffffffffffffffff000000000000000000000000000000000000000000000000ff0900000000000000000000008040800000000000000008000000000000000000000000000000004400050000000000000000000000ffff0a010100000000003c00000000000000ffffffff00"/175], 0xfc}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYBLOB="cc000000210001000000000004000000fc0200000000000006000300000000000000000000000020000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ff0200000000000000000000000000010a0101000000000000000000000000000a010100000000000000000000000000000000060000000000000000000000003c000000000000000a000a002c0013000a010101000000000000000000000000ac1e0001000000000000000000000000000000000200"], 0xcc}, 0x1, 0x0, 0x0, 0xc060}, 0x0) r7 = getpgid(0x0) r8 = syz_pidfd_open(r7, 0x0) pidfd_send_signal(r8, 0x11, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m33.352917796s ago: executing program 3 (id=3305): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20"], 0xe4}, 0x1, 0x0, 0x0, 0x10}, 0x4000) mkdir(&(0x7f0000000340)='./file0/file0\x00', 0xfffffffffffffffe) fsopen(&(0x7f0000000000)='autofs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = syz_io_uring_setup(0x498, &(0x7f0000000240)={0x0, 0x79af, 0x3180, 0x8002, 0x40024c}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) accept4(r6, 0x0, 0x0, 0x800) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd_index=0x8, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r3, 0x627, 0x4c1, 0xb, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 7m32.520725161s ago: executing program 3 (id=3308): openat$audio(0xffffff9c, &(0x7f0000000000), 0x101100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="286727fadb0514e12c7f49900944676b3e90a8854c5cc2bcdfef42e2b4e4e0b4aff462d1ae370a30", @ANYRES16=r3, @ANYBLOB="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"], 0x228}, 0x1, 0x0, 0x0, 0x4000}, 0x20040800) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a0000070800024000f5ff020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c) writev(r4, &(0x7f00000000c0)=[{0x0}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) r7 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r7, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="000640000000a89711c94dbb"], 0x0, 0x0, 0x0, 0x0}) 7m31.556789731s ago: executing program 7 (id=3310): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x400002bc) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)='I', 0x1}], 0x1}}], 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x4, 0x7, 0x0, 0xc1dd, 0x7, 0x5b, 0x8, 0xfd, 0x7, 0x4, 0x2, 0x0, 0x20f400, 0x8, 0x44, 0xff, 0x1, 0xfc, '\x00', 0x1, 0x8}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}}, 0x8ff8, 0x4007}, 0x90) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2048, 0x0, 0x0, 0x0, 0x3, '\x00', 0x2}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r8) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) close_range(r1, 0xffffffffffffffff, 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r10, 0x0, 0xc8, &(0x7f0000000100), 0x4) r11 = inotify_init() inotify_add_watch(r11, &(0x7f0000000240)='./file0\x00', 0xd3000308) 7m31.293094058s ago: executing program 7 (id=3311): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x9f}}, 0x20) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) clock_getres(0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(r1, 0xffffffffffffffff, 0x0) 7m31.172375901s ago: executing program 7 (id=3312): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x43, 0xb9) syz_emit_ethernet(0x76, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaabb88a810008100000086dd6300000000383aff00000000000000000000ffffac141427fe8000000000000000001000000000aa040090780000004860fd3a8500ff8900fe8000000000000000000000000000bbfe8000000000000000000000000000aa85e7d2e1a48a75fce9b96b9ae871ca36b0c2de162265ef229a5302ffc04ce4fc9d5ecf7d0c1a0f6c63dba0f564a3e56e767b91de55cbafac4c3089883e518a52ca21dcbb1d742e572e3fa32d43a6b63dbaed4af41224b2a9376edb09749112fd418a9c395400febfca"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() ptrace$getsig(0x4202, r0, 0xc00000000, &(0x7f00000000c0)) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x7) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setuid(0xee01) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, 0x0}) unlink(&(0x7f0000000000)='./file0\x00') connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 7m30.497588926s ago: executing program 7 (id=3313): socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000003200)='lblc\x00', &(0x7f0000003240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', r3) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r9, 0x0, 0x0, 0x80800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) lstat(&(0x7f0000004780)='./file0\x00', &(0x7f00000047c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)='F', 0x1}, {&(0x7f0000000540)="3b9947faef59747dafbd09b53bc03cb2021e6b7d4b9754b02d11b0d8be74f969fdfe081bd7fe687debc1f4cfbd", 0x2d}], 0x2, &(0x7f00000008c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r5, r7, r9, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x38, 0x1, 0x1, [r7, 0xffffffffffffffff, r8, r10, r9, r5, 0xffffffffffffffff, r9, 0xffffffffffffffff, r5]}}], 0x80, 0x4040810}}, {{&(0x7f0000000d80)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001040)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x40}}, {{&(0x7f0000001340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001140)=[{&(0x7f0000004500)="e616a8f04d9d7cff92ccc5eee97da5092cdee410353cfc43bae793eef30312dfafa15e50a325ae5c410e0ad7139a503812e8b0de21528fc7dbc712c7252ba984213502ad05d7e5b221b955d1f16ecc871a21621a3a3ac19989316ebc9cf7af8b91a79e995a97a50230977f749868cb7f1eeb7aba4299e6c4f30f96f10a7173b981a09c78902ea41c28c7c122ef39d06bdd1b458584d06fd8a92f3802c39d78284ac565558885b4024e4bd55924d84d6741d029dc107884b0386be02ac31cd0463c974b8eebddb676ce0472e2dd9439fa3ad7c65772cf146a2cf6c5c2c985d03cacabc970b79c6c7443fc25ff5d1693", 0xef}], 0x1, &(0x7f0000004840)=[@cred={{0x1c, 0x1, 0x2, {r6}}}, @cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x28, 0x1, 0x1, [r9, r10, 0xffffffffffffffff, r9, 0xffffffffffffffff, r7]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r11}}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xee01, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r10, r7]}}], 0xc0, 0x4010}}], 0x3, 0x4000001) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x20002, &(0x7f00000001c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r11}, 0x2c, {[{@blksize}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0xfffffffffffffffb}}, {@blksize={'blksize', 0x3d, 0x200}}, {@max_read={'max_read', 0x3d, 0x84}}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions}], [{@smackfsfloor={'smackfsfloor', 0x3d, '%&])$^\x1c'}}]}}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r12, 0x10f, 0x81, &(0x7f0000000080), 0x4a) setsockopt$sock_int(r13, 0x1, 0x8, &(0x7f00000000c0)=0x2009, 0x4) sendmmsg$inet(r12, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 7m29.668441133s ago: executing program 7 (id=3314): mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10b) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 7m29.636755483s ago: executing program 7 (id=3315): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x9, 0x4) 7m29.417549997s ago: executing program 3 (id=3316): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) (fail_nth: 8) 7m29.088450972s ago: executing program 3 (id=3318): mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10b) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r0}, './file0\x00'}) (fail_nth: 5) 7m28.826343791s ago: executing program 3 (id=3319): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r2, &(0x7f0000000080)={&(0x7f00000001c0)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f0000000240)=""/78, 0x4e}, {&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f0000000380)=""/134, 0x86}], 0x3, &(0x7f0000000440)=""/115, 0x73}, 0x40000000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000600000081042dbd7000ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB="40004c060a000200aaaaaaaaaa1b0000"], 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c0c1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) bind$can_raw(r7, &(0x7f00000000c0), 0x10) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r8, 0x4) 7m22.005699797s ago: executing program 35 (id=3284): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, 0x0, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000100), 0x4) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) syz_usb_connect(0x6, 0x3f, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) clock_settime(0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000680)) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00?\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000000000000"], 0x48) 7m20.445423008s ago: executing program 36 (id=3289): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa01"], 0x18) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000140)="1f3c56e23e875f4e9fd33352", 0xc}, {&(0x7f0000000200)="9621207fab1ed3e57a94c247a887ef6760125cd70c5829db9f0f3bf51c67becc4610ea394a7832869a186d375e5d8492c05dd49bcf3a8eb529b0b3b90c846e8bc8c7c14865f27c3d8f903a4bf59b422c58e806381ad4ccddb1a571123db5f3258be6e2d920c725376c33062496f70768fdc280a8fe65", 0x76}], 0x2, &(0x7f00000002c0)=[@ip_retopts={{0x24, 0x0, 0x7, {[@generic={0x89, 0x8, "4b0f4831ed54"}, @lsrr={0x83, 0xb, 0xc4, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}], 0x28}, 0x81) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 7m14.47490338s ago: executing program 37 (id=3315): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000)=0x9, 0x4) 7m12.91643055s ago: executing program 38 (id=3319): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r2, &(0x7f0000000080)={&(0x7f00000001c0)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f0000000240)=""/78, 0x4e}, {&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f0000000380)=""/134, 0x86}], 0x3, &(0x7f0000000440)=""/115, 0x73}, 0x40000000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000600000081042dbd7000ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB="40004c060a000200aaaaaaaaaa1b0000"], 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c0c1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) bind$can_raw(r7, &(0x7f00000000c0), 0x10) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r8, 0x4) 2m35.721830407s ago: executing program 0 (id=4373): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x20000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) execveat$binfmt(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000094003e850000000700", @ANYRES32=r0, @ANYRESOCT=r1, @ANYRES32=r3], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2}, 0x94) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000002060300000034e40000000000000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f7274000000000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe80000000000000000000007649ec6188000440000400000500070006"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, &(0x7f0000000080)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x109842, 0x0) write$dsp(r6, &(0x7f0000000900)='B', 0x1) 2m33.048024219s ago: executing program 0 (id=4375): openat$kvm(0x0, 0x0, 0x4600, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@out_dx={0x6a, 0x28, {0x6769, 0x4, 0x2000000}}], 0x28}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000013000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 2m32.949639371s ago: executing program 0 (id=4376): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000004c0)=0x4) preadv2(r2, &(0x7f0000000100)=[{&(0x7f0000000200)=""/195, 0xc3}, {&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000000300)=""/164, 0xa4}], 0x3, 0x7fff, 0x7, 0x8) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x5, 0x6}]}) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f00000007c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) lremovexattr(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) clock_getres(0x8, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r5) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 2m30.352289955s ago: executing program 0 (id=4385): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) fcntl$setlease(r0, 0x400, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x39d) open$dir(&(0x7f0000000100)='./file0\x00', 0x189380, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80}, 0x18) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0xfffffffffffffe99, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r4, 0x0}, 0x20) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$unix(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x2c}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb682, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x90ff}, 0x48) 2m28.817920741s ago: executing program 0 (id=4388): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000480), 0x7, 0x2a082) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000040)) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x480800, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r5, 0x80045104, &(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000683200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="00000000000f0000b70500000800000085000076000000950000000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 2m28.613440579s ago: executing program 0 (id=4390): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000100)=""/24, 0x11}, {0x0, 0x2}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) 2m13.40426402s ago: executing program 39 (id=4390): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000100)=""/24, 0x11}, {0x0, 0x2}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) 14.586992544s ago: executing program 8 (id=4817): ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_mr_vif\x00') pread64(r0, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x0, 0x6, 0x81, @vifc_lcl_addr=@local, @rand_addr=0x64010102}, 0x10) r3 = syz_open_procfs(0x0, 0x0) read$FUSE(r3, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000004440)) mount(&(0x7f0000000440)=@sg0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='hpfs\x00', 0x800, &(0x7f0000000500)='*6}\x00') prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 14.363791392s ago: executing program 8 (id=4818): openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x4000008, 0x80000140008b}, 0x0) (async) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x4000008, 0x80000140008b}, 0x0) socket$inet6(0xa, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x2, 0x0) read$msr(r0, &(0x7f0000000600)=""/102400, 0x19000) (async) read$msr(r0, &(0x7f0000000600)=""/102400, 0x19000) truncate(0x0, 0x716c) (async) truncate(0x0, 0x716c) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x14, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) listen(r1, 0x80) accept$netrom(r1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r2, 0x0, 0x0) (async) write$cgroup_int(r2, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) (async) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x801, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) 14.033486316s ago: executing program 8 (id=4819): mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x3c) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) getpid() (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) (async) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) socket(0x10, 0x80002, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa000000000000015030000088d4e002d3501000000000095000000000000006916160000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a81426104000000000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546ccd3f1d5ab2af27546e7c070000000000000095cb202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec85eeeb83ccaec388158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d0800e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb400f692f374dfab73f90000000000000000000000004000bc00f679629709e7e78f4d08000000ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43000000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d0000000000000000b712c1e47be511fe32fbc90e2364a55e9bb609c64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd4722a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1d913c3fd6edc9b9bfc8c6a14ff595eff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c835d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a0397c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed551c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff5af657a67463d7dbf85ae9321fad16ee751cd7dde94ec97549c2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8bf377b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059a6cffb92e2a0cfd81434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5c4d188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a5cbb8be3f7741b18007dff12eb95f9ddf30e066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873d0ecdf904c2bdbef81f246d26f4b40df949e12bdac18092f4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054e5deb27f7922fe6c14eba96c9af409da03290e4009f872d5aac263dbe239efb1e02dd4fc07f8c5b070e2ddeb4b5afa6df2e7e162962e334d85fa4373d5b569ac3353cc56008ddc8277fa9e8f6684513bfa827686b6fb71259743f55f46fa7e6379312e93213faf275f0441d46bc5690181244c44bea45854ed4ccd99f3fd328110ae22ef1504ec0566652d742ed8a7e202539c6531824f7399b486fbb906a91b77f2a6ba27bf97ebc7482cea32278a7acd9f2210e6ed2defcbd112f29a92401c5a37c58835f870b056186ef3971d3d9effa5661cabc2ff070000cfb030dd4ac0fe54db67510d3e9a5d36b900000074000000000000000000000000006e96ba8f5e7e89bef4226173e20ebb17b924e9e6d0ee163713b2bd56f58dec64df91417beaac4061e6216774e048276e110d25ae7feb600897c8364af49ce59027a6ee5d7c6e12c0f45c0f376d9da065ca0499e209655d2420fcfa10fccf2cbe7b60161cc6cbd874c928689acd9d4e00cefacc887b76767ca1279e34d20b276dff8318e0ec5ab2929e63ef6a32b1abc55859804e2ec19e5b96a2df9f488e7e25a839701e37cdd850c2f26685047f1d492571482f993bb96642a3f56a0ea24d765c6edf2352e00bc4ff4a723ee2d9307e6f25bd05f98583cc0868"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x3c) (async) 12.711487549s ago: executing program 8 (id=4821): openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x121003, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) read$FUSE(r1, &(0x7f00000027c0)={0x2020}, 0x628) mount(&(0x7f00000010c0)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000040)='hpfs\x00', 0x800, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) 9.105765076s ago: executing program 8 (id=4831): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r2, &(0x7f0000004400), 0x3fffffffffffff2, 0x0, 0x0) 8.109229055s ago: executing program 9 (id=4834): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000004c0)=0x4) preadv2(r2, &(0x7f0000000100)=[{&(0x7f0000000200)=""/195, 0xc3}, {&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000000300)=""/164, 0xa4}], 0x3, 0x7fff, 0x7, 0x8) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x5, 0x6}]}) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f00000007c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) lremovexattr(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) clock_getres(0x8, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, r5) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x28}}, 0x0) 7.609385391s ago: executing program 6 (id=4835): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}, 0x1, 0x0, 0x60000000}, 0x808) 7.527451085s ago: executing program 6 (id=4836): mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x35a) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) listen(0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000004, 0x810, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3dd7, &(0x7f0000000000)={0x0, 0x9d34, 0x20, 0x0, 0x2e6}, &(0x7f0000000080), &(0x7f00000001c0)) (async) syz_socket_connect_nvme_tcp() socket$igmp(0x2, 0x3, 0x2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000020c0)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe8800000000000000000000000001010000000000000000000000000000000100000000080000000a000000", @ANYRES32=0x0, @ANYBLOB="7d98241ee8aab1343d771c270167b174969e525d7eab74695be3ba560153f300732d05f3ab22e96242587fb2d07c41509f628c80fb0f1e4c04489e12454ef512792171e3420e41d03dcd5418f3f151129f51ca2956194cfbb722581742877135f2bca54a060b5109ab7ad7c7185bb25fe46ce9fb3254aecf25d33498434b0448b879a74fe4c45232252cf68d06dc1a03f9071540bfb5ae165838b8d695218316ab9cef4b6436b15e0b9b2b671374919f09fa2c6f47cf0131c20881cad5a81e7b83860a7d4fb8995df65f07e42b54df2475f00d95ea8c70de6a01f10a984ce128fbbe1352bd31e0d806dc33abf3a76541410db5f39f0f5b26a43e20f1a687a3f6d77669ee679c6c389f8934a6524f31208fc1960373b79406ced74c4d7ebb7190b8525110ac6333102b12fcc43d6c68c29bba4bb5b6ab7431b36478f20300e3bb690a3e55ee9b09eba841b2b58fd0f40c9379684e94cc1150969caf5d946a6d9dc06557e0b33e251d7b2087e49f255fee889d51daffeaa8b81594517648d878b0b572c65b2cbb0dbe105035d52f2ae9c2d348119cf082e34431530adf0b9bbea0c99d4b17bafcb7b32698520261631dc6cd4b42b23e50fdc1eac98d4ec4f3153c88fc2f1107c01bf3347bb617f290ecc627aabca3da13a9c3a6cec616c7c8e35503ca5964f93ad6111d8b051bc4826768d80fa4dd79b5159c477519ff21d4279427b95c5965e66c7a0763eefd57ce3d7c9d1544ebde8d1b0aba93691431f8a18c6ff30a5a15995c59dd73b890380475567ebd79827edfbc39b6b8878087bfd587a9b40eee586b713016b309b8e61bf388003f9b5474e81d659531f08b3d16e871a4b89750f946014ec8b2c3b0c446df043b12c3d68c28a78101357688389325d21b8d90fcfce94ceb10944721f28928181242f3c16b4a071107ae637a24253d62e3452b53ab32522111856bfdd05cad5ef293c7a13107f76fd67eaf9589d3981082729548bd9059a93bc191a5a97653faa972f86166b69041c76914f962f6d9a43fcff9a0682c45ceef9d5ccdf3e2cbdc5d180b181aa7502e49d6619b3d48981304c85a09132b13213772dc2c74b274308f5328a42966172f82882ec4a6764ac003a79294a477ea126ac2779568101d177c7c88f5e68578c75acf7e51dc192d7015920f36b35eb7c215e9647a27ed0016955ea7adfdb391156f36a5af408912caff692d03f1e020bceecad743db6e3777323bbc0a088d4dcf251500426c36d797578c226f39bf38d293fdfab3f5a055c18d664247a7711aff4f89874a22d64592235198e25c7436af53b964f24b1831d1dc4b94c020bc82e8bdc0e200683ef96dc34a747adf5725738f5d634ebae9c121add44d943366486e3e8c38da7d2127086c6fce241c7374a091fc3e43244cb8aced506cea234b717721f97c6768b183957aa830c515d25b76c69cd8c3fe5a0e665e467a995911ecfeebc5c1a1208aeffc2dbe64306444594caa399f2054933c726abf4a6da74d3b91e130d83f5d4c6620e1d6e0812fbc96955260eb42d344820680ba6f88ecc9fafe382fe8854f4f8227d0f2b80d936a2d98785d34fc7e7d06afe044550b900debdb4f57df083b7cfaa66a3d95d1a365e72a43dea63846e18c5654d00fa04ef5f9ee8b1a7e8272ca28fe759b549ab219a131b358426d66165f46d1bea60cca79dacbe04345a2093389d58a739c8d06210a4a9b8171a7464742357f872000a286d826a805e69be1dfbbdcae3dd0497e7f51590385ae2b63a63a394b6030396f24857c4ff477626861af9cf218a4171d756c82fc8df74dc4150f7528414a62cc0d4131f576316196976a91d9f38f3829b2ba27bf7c6b6a177384986f261fcae6f58520b5be3202162e387b426460b399ed1c2a2e3dfdcc212929c339eceffb2980ebdf6bb3fb288a6c5786cedbc382b400eb3171155c5d38c380117bf896e174ab99b021a722db72c83e095672d8f9837b20559dc6ec481959937722f2327b561b2c41fac12f83527452a2e86407c3ff05b80fd7ef95a67073e1bd5d1d49524e442e1068590883f778e15eaffec198ecea36c895b887201040aabc10467da51b53f130609bc4dddd1ede99c2a2f659c0da596c24a3b9db3b37a14943f18578bb997fa0e28ad0d101a9385d8be3428daea5d3d835b3e6c27a99338be786d9c5d49f5d2a43df8e5f8bbe83d3bf9cbb29baf280d18f58c4eb4a57b818652688c29e7121f9b4f856e98c3e7cf1073d4b3c3e5b95171df302564fcfdb25ccae4f83fe0b653e24aaa5667da4bea36c69b104cd85f7b27b4477fa8398d2b6cd49741d94a0fed6f732b67de727c0aecfdf29fb26cef744e9c0c7776fae3aa9c9a1df8047bf0c028676054a947f79754d03746238edb17fa1e60302c7d47ad25c57edf38df903f03ec075e5f5f29ab1b0162addbc7cdca76e9d558601fd27c1a2050a52a5d8c5861f75c1c29d0be715faa618210a027e340e06d30bbf6a74336ad242444fb9c8e487a3262ca6633617e5988c37915cca32f925f736e761ef0a1b31f00c078871b41c7a56eff5046fbdff8413e0e7deeaf8acb486d5a6cdf3025ae09d5eb0921929d775f3a6cb0633675636700742efcb247f6223ba8fc678c8513876ba60c3d7e40b94566ab8ff6ccd3e71c66cf86b8d61cc1bf7697b8d1ae7e5b6cc7e110fb6ec28ada50d91ee2aabaa5d819dd04ec8be53629dcdf16bbf2fd4efaa10f0acefac031cc3dea5a72a7c0d2954796d64ea3a4083422774be43b3613cff9ee223cc1d339d0e8d6e1f5b49ae20daa1f4782b75059b1dada8760315aa46f89e88562cfd4e9078c84f3f077e337bff8ecec62d634d0cbdda1b31830a072c216f3d364479f53d89257f110d5c987195424a07c8a0d41c49969f872194342eeada7bc06d338c02a9efafc8bf9f09ddc9ddf73e50076da39b6630a0c180047c292e33d80f4a93709164f38567b5a451395d3809ff3dcd90512fde6c507658dbae2ba0c190aeaf4f332564c82303ab93c52560349c0d98f256d104eb8b545317379a0c5696d1415a7b8227fe61da84a1e0867092e04645ec98f0644a068fd132201f0ff1487cb7aa4b290c6e5cc66c1f2be96b86c30ca0057212ae80ccf72b5dad5384d2a30ee5e5eac0cc3362af1c1341cc23d9d64861aa98922640d52992223e6e42f24f22a7bb1805d46824d3f5d3411f6c809a16be1508e77789e8d01f13fb474ddac8b4d95357525a95a6d00e7c8f5a5cefb5e65ff94051fafae46ab48665233b4df8076149013e883939d1aa5f0ba7565867dcd0e188aaecd78962a5132f6fb5bdc4707c2e66387117b5bb261d9e3431b20d1e51677b50cf67b9d187e795881601ee86e1f3bdf8921483350ee51340886af48ad3a7861b8653d33f359ba0ccaed1e9b887eee14cd673a98ad867f71e79f74f4285c82f22501b01bcba21ff901889bbb7bc389364f798b25cc54139620fda16c7dfda64dbf08436aefee3da8cac436acfa0f7702a121a4d0a69f2caa6bf12346f2add4f654ee61a4765e89152dbdac6fef507b72a8050eb7f8614c00ebd0ab1a28544890a709498f8c29fe431cb5b2d9d3281f4ad8fa106f6fa748c69ab371508381c7acb109d48070d0d1a717e290ce8836d86ae705543928a8e27599b67c3fda27ef6aab48c4fe318a3fe94fe8356b66d49aad7e9f355bcdda4a2fd35e320117d39088269f521bde8478cdb6b752b025bda8dfa62dcc452431d29e090dfa2c2a32a895c7fb4a9b864f9bf8f00f69e808c7c9635e346f3dc1cff78970bffd8565c235511ed97f3ae0602962bf68842e3b2172c22a8b8d1a60df37e379a18c788480d6771d1470f0b38746cda249f89c5161300c8a41488e141c4093ac0495003c1f7c874169d6ea122a08cd7fc55e375c9a65f7664b0c19ee8456f02e4bc200beb8ef81c7486e0bdb2a734cf000587684cd06e9578cd5b0418ee894fb78f68cda3a594a22e5b993254a7c7113c4e46fbee22dc47fe724d651a4fd93d4a54726e931c00adef467ed6b5c8fd6a4cea8a6ab9bb84cb13d95f44b759c26b14989a15cc75312161d1c475d0d8ebf0d8fe97fa64d48b621810c52f3977a2e9ca215b8afb9c2b87f4474678d8a840652e88e6030ba4691296b886541770a116e868d26e621427820c6ca998f04c6f2e54cf6f5484c35bc729a25219cba537c7de04a7934a2e68fc8a618a588ea37c9539889ea87b0505fa86557d1df04bb4f44418295c6d9d2e871c7753be7de191b70ba901d8f2a3449ee7c027470819be06ce4b97693df9c8b091666c7bbfe7d6888ca074dc447ef2efb427e3a5feec0a43aa17cd6743b1ab5e1aae7b59e8f27a3593225e08c413d0a6bc7c6502241e4e862470be71d83d882b2e18b9b34eaca1b517105268764a4680fedac605eb75d7ba75fd8c0fae43c5f45fabd122e49b8b8dc74136cc96c023c0c268c8bee95c419728ee07cf17dfa09c006118d33d53e82012d70adff8824a9cdd38dad1070002dccdf1868982024f1d9ee59c9ef715049f9a3e1e3fb70cec10766129863c924aa41175e1ed8e8c45c5bc4b603b615880a23d0906036ed729cad84fb4cd76b7830c75db4b41d2046285ae300de117b0dab4eae298b6d903d212cd0f5370bdf6799cb6e3ff5efb48b53136da6e2e4a9f45b58f102e4a806a1c7068620c7a6e3e1f71a05328bde9abf0c437c3321b196ac62ee333dde37b437a5073a390bd1ef12c3b7ee32620008d87e6432b1d88a2b1f54adb07e6871738b4ecdbefb7a2f9bdaf8672371c3df66e66bb07de9779ac1f45d7c0fd65d9e01dd93ec2bab0ea106deb431d2f0fda722b62511b5b9a1c66b16e7de66ee9f6f1f4279e0e4ec733221691337485469dfcf83039e35b0f8f9a046a4ec6575b3f4506ce62f7fe2a53f7b98119383453eab5e92d4ee23ad6f95f288222a3a96f45c11aef5ed6827b99b203414bc39994029f995f1d121fc78c76b71db1955bde57e63c17f83e34842552b8c6c31cbd51faca0086df7f76a743bc2c24cd6b26388321570fded489f43ad3816723b936a47978e967a7d2f2bb9a1eebd359f93efca4c2efa67619b5e12267ce5f0b460d904a81aaca97c7c7620e9fafa838e480bb19c3452c6fa76b7226a261b7c49673712481dfe84553486a768ad0463b27e61360bce95e1ae2eb849665b762efee8d64a98b8b7cf3ec3e1498dc8ba37e657c38d4ed42d11fcd815ebf3bb43892eea4e0c133791f55b7c80115e0c4cca944c7edbce742792e14aa61fa0571bedf4b53670a830afa2e0ec9210eef8247485b6f01eaaad8a9f0b7abf9c056a1c0ab11ab78872561b6f0bfee56b8ed9b245422cd798d85e9363c56ecf1ce8c7893eaa21be56059365ab5dddad27b3b575861013bfd0907b711fc41a9fde4d607d135424c13c710671ccc2934c455925423a52dc0391251a1b43ff686c03252a2f848344580cfa9247555a62697f9d242834aeedfc36a4d53bc98a61a371f04184c5f1ce4dfb661787662491699bcc6e71746d5c5bdf28f9d5051a85fc3d9b5a941e68f4fa3fd0bacad96de14079e012ce54623cb71e0ec05dcef977dfc338a09c622618c9c39617529154aea0a017030ff149ad52cf7fae766fb446e6bfbd38f4b3ee06005e32a4dfd800dac230e194a497fdcb12d47275c49bde9bfb3317cdac565776a4973150c29c54c51c76071c41fa619faa16a7b4c00c53e862179cf7fce98d9696a7586b5231a98657c8bd2f7c65942fe5b2a66289951b4072eca", @ANYBLOB="0000000000000000000000000000000000000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff07000000000000000000000800000000000200000000000000000000000000000200000000000000000000000a000100cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000002abd700028bd7000000000004c001400"], 0x1a0}}, 0x0) (async) close(0x3) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='source', &(0x7f0000000180)='-\xde(\x9e^\xfa@:', 0x0) (async) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xfffffffffffffffd, 0x36}, 0x0) (async) getrlimit(0x7, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './bus\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)=0x6) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) (async) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000001040)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff0100000000000000000000000000010500000000000000000000000000000000000000000000000000000069f0df240000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a0600e400000000000000070000000000000000002c9ef300"/147], 0x90) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 7.356942858s ago: executing program 6 (id=4837): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000003b40), r0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000002680)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4040000) 7.170639352s ago: executing program 6 (id=4838): openat$audio(0xffffff9c, &(0x7f0000000000), 0x101100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="286727fadb0514e12c7f49900944676b3e90a8854c5cc2bcdfef42e2b4e4e0b4aff462d1ae370a30", @ANYRES16=r3, @ANYBLOB="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"], 0x228}, 0x1, 0x0, 0x0, 0x4000}, 0x20040800) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a310000f5ff2c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c) writev(r4, &(0x7f00000000c0)=[{0x0}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) r7 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r7, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="000640000000a89711c94dbb"], 0x0, 0x0, 0x0, 0x0}) 4.551451994s ago: executing program 9 (id=4845): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x109000, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x0, 0x80, 0x2, 0x800, 0x4, 0x3e7, 0x2, 0x300, 0x20, 0x1, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80202, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000400)=@vmx={0x8, 0x0, 0x2080, {0x4, 0x6000, {0x1}, 0x0, 0x100000001}, {"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", "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"}}) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}, {@workdir={'workdir', 0x3d, './file1'}}, {@xino_off}], [{@smackfsfloor}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x83) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 4.411704634s ago: executing program 9 (id=4846): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901560000800570080"], 0x2c}}, 0x808) 4.339208626s ago: executing program 1 (id=4847): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000", @ANYRES32=0x1, @ANYBLOB="fffffeff00000000000000000800000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000004000000000000000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f0000000000)) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x20, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x4000804) 4.307369426s ago: executing program 9 (id=4848): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000003b40), r0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000002680)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4040000) 4.216501891s ago: executing program 9 (id=4849): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$MSR(0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x100) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfecc) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="4c0000001900010929bd700080000000021810000000fd010000000008000100ac141400080005000a0101021800168014000300fc000000000000000000000000000000060015000200000054831618cec1a48326fd33246a7b7f91"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x700) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) pwritev(0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x2, 0x4) 4.121720513s ago: executing program 1 (id=4850): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x48200, 0x0) io_uring_setup(0x4685, &(0x7f0000000440)={0x0, 0x2078, 0x20, 0x0, 0x3a3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) sendfile(0xffffffffffffffff, r3, &(0x7f00000000c0), 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000380)=@ethtool_rxnfc={0x2e, 0x9, 0x4, {0x3, @esp_ip4_spec={@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x20}, 0x0, 0x8}, {0x0, @random="cd94ffd2d258", 0x4, 0x200, [0x6, 0x6]}, @usr_ip6_spec={@mcast2, @private0, 0x2, 0x6, 0x4}, {0x0, @link_local, 0xa, 0x94, [0xfff, 0x6]}, 0x8000000000000000}}}) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x42000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}]}}}]}, 0x44}}, 0x48000) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 3.654233274s ago: executing program 6 (id=4852): r0 = syz_open_dev$usbfs(&(0x7f00000003c0), 0x76, 0x141b41) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="48000000140081fb7059ae08060c040002ff0f03900000000000160000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a02000000461eb886a5e54f8f", 0x48}], 0x1}, 0x20000084) memfd_secret(0xa51cd372813f45c5) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0xa, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="18000007000000001001000001000000dc00000000000000"], 0x18}, 0x0) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40000040) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86ddf06712e90009118db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000d40)='$\x00\x00\x00\x00\x00', 0x6}, {&(0x7f0000000c80)="a43b2eaab40000000000f294601e8cde77cff5", 0x13}], 0x3) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x2, 0x4000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x2fb}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r9, 0x6, &(0x7f0000000380)=[{&(0x7f0000000440)=""/201, 0xc9}], 0x1}) 3.207998983s ago: executing program 8 (id=4853): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r2, &(0x7f0000004400), 0x3fffffffffffff2, 0x0, 0x0) 2.81466831s ago: executing program 9 (id=4854): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x110}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[], 0x48) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400018000000009040000010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x2, "d2903a4e"}]}}, 0x0}, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000980)={0x0, 0xef, 0x4, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x1800}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={&(0x7f0000003e40)="a4", 0x0, 0x0, 0x0, 0xe99a, 0xffffffffffffffff, 0x4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r5, r5, 0x35}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r5, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, &(0x7f0000003680)}, 0x40) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000680)) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}}], {0x14}}, 0x3c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x250040, 0x8) r7 = io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xca72, 0x1cc90, 0x0, 0x20002fb}) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x44000, &(0x7f0000000640)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@verity_off}], [{@permit_directio}, {@subj_role={'subj_role', 0x3d, 'GPL\x00'}}]}) 2.435881634s ago: executing program 1 (id=4855): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getrandom(0x0, 0x0, 0xd86b31f1268e345c) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) getrandom(&(0x7f0000000100)=""/116, 0x74, 0x3) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) syz_emit_ethernet(0x85, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd60000000004f000000000000aaff0235c52c67d6e50000000000000000000000000001860090780000040000000000000000fe1c571a000307bd3e6d4706598080a8030037ffffff0100000024732472eefa45ad96000000008e254c1e4a8a8b3f0ab0c430d3be27df3e34116d42ca0a00000000000000000000004344bcee0b9c9cffadf6d4"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) setrlimit(0x8, &(0x7f0000000040)={0x80000000, 0x7}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000001180)=0x2000000) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x5008, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$SNDCTL_DSP_GETOSPACE(r3, 0x8010500c, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f00000003c0)=0x246, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064d2, &(0x7f0000000240)={0x0, 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000007000000000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e20000000000000009dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 1.959960819s ago: executing program 1 (id=4856): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = add_key$user(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000080)={r1, 0x18, 0xee}, &(0x7f0000000100)={'enc=', 'raw', ' hash=', {'cryptd(sha256-ni)\x00'}}, &(0x7f0000000180)="fe7c93798e0a073a1e900e39d09f7fe91d07a0041a2ad561", &(0x7f00000001c0)="a990c2108d23a4a20e02161dc2f47aba581a427d291503caf6490192d2cd94c993182e0c0b9e221926896a059f5aabaf5267815bda25f75caab43e8171eb08a01791271265ff1d5716b3c011b28270cacc1dadbca8a2cb392fcb641a4796675bd8a7095bff7c0d6a89e4cac0bcfbb52346ce717ce0a4ebd9e482f9bc3dc8408dda4976279981eae767fc2e546c7a8e478ad95c6e43bc4cf00aa27775c6ca222cbceb3bd07622870d8fbb7cf2d02a6f1e6e3a89da3b4d2c8210129062e9d952f7626cf8204287758b5f25bac4f7d55ab662ca2339a36bdef06b623d0a5a30a3aefd62d5140fd6e2c3df1f1cb7bdb1") 1.661796235s ago: executing program 4 (id=4857): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x440, 0xffffffff, 0x0, 0x2d8, 0x0, 0xffffffff, 0xffffffff, 0x3a8, 0x3a8, 0x3a8, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0xffffff00, 0x0, 'veth0_to_batadv\x00', 'vlan0\x00', {0x100}, {0xff}, 0x84, 0x0, 0x2}, 0x0, 0x1e0, 0x208, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e21, 0x4e23], [0x4e21, 0x4e24], [0x7f, 0x8e, 0x4, 0x0, 0x8, 0x2d, 0x3, 0x7, 0x60e91136, 0x9, 0x1ff, 0xfffffffe, 0x748, 0x4, 0xa, 0x95, 0x20000, 0x2f3c0e1c, 0x3, 0x7, 0x3, 0x5, 0x200, 0xffffffff, 0xe, 0x7f, 0x2, 0x4, 0x1, 0xffffffff, 0x2, 0x7, 0x6, 0x7, 0x3, 0x40, 0x9, 0x40000009, 0x7, 0x9, 0x9, 0x730, 0x5, 0x3, 0x10, 0x101, 0x1, 0x800, 0x80, 0x9, 0x7fffffff, 0x0, 0x3, 0x6, 0x1, 0x4, 0xffff, 0x6, 0x5, 0x3, 0x7fffffb0, 0x9, 0x1, 0x3], 0x4, [{0x1, 0x3}, {0x1, 0x6, 0x9}, {0x4, 0x4, 0x1}, {0x40, 0xf9, 0x8}], 0x2, 0xe, 0x4}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0x4}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x0, 0x208}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x3, 0x3, [0x2, 0x2c, 0x4, 0x2, 0x12, 0x22, 0x16, 0x10, 0x3b, 0x1a, 0x0, 0x3e, 0x9, 0x2, 0x24, 0x39], 0x1, 0x6, 0xa}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xffffff00, 'team0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xd, 0x8, [0xa, 0x26, 0x2a, 0xa, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0xa, 0x20, 0x28, 0x18, 0x22, 0xa], 0x1, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) 1.574942497s ago: executing program 4 (id=4858): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a300000000014000380080002400000000008000140"], 0x68}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 1.454085818s ago: executing program 4 (id=4859): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000003b40), r0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000002680)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4040000) 1.388042064s ago: executing program 4 (id=4860): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x4d}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff0f0000}, 0x94) 1.337679592s ago: executing program 1 (id=4861): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xc4, &(0x7f0000000600)=""/196, 0x41000, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYRES64=r3, @ANYRES16=r6, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r0, @ANYRES32=r0], 0x3c}}, 0x0) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020011b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000000)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}, @exit], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x80) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="80b59700150001002cbd7038ca5d5bf1eb1df14714e4e9a687fd8dd8", @ANYRES32=r8, @ANYBLOB="08000800050200000800080008000000080008000002000008000a000300000008000a000100000014000200ff01000000000000000000000000000108000a00030000000800090003000000080008000100000014000100"/104], 0x80}, 0x1, 0x0, 0x0, 0x50}, 0x44004) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$inet6(r7, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x2f, 0x80, 0x10006, 0x4, 0x1, 0xcc7, 0x8, 0x17, 0xa, 0x249, 0xfff, 0x7, 0x5, 0x5, 0x44, 0x105, 0x2008, 0x8001, 0x2009, 0x1, 0x89, 0x2, 0x0, 0x20001e5a, 0x1020b, 0x7, 0x9, 0x8, 0x6, 0x401, 0xfffffffd]}) 1.205542217s ago: executing program 4 (id=4862): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0xfffffffffffffffa, 0x400) syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x1a1003) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x4ec6, &(0x7f00000008c0)={0x0, 0xfffffffc, 0x80, 0x0, 0xfffffffc}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x80000) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) socket(0x2, 0x80805, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x2040, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r2, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.167589009s ago: executing program 6 (id=4863): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012"], 0x3c}}, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240"], 0xc4}}, 0x0) sched_setattr(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000480)=[@nested_amd_vmload={0x182, 0x18, 0x3}, @wr_drn={0x68, 0x20, {0x3, 0xc7}}, @nested_amd_invlpga={0x17d, 0x20, {0x0, 0xdaae}}, @out_dx={0x6a, 0x28, {0x1581, 0x0, 0x1}}, @uexit={0x0, 0x18, 0x2}, @enable_nested={0x12c, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x56, 0x2, 0x4, 0x2}}], 0xe8}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x400400, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r5, 0x4068aea3, &(0x7f00000001c0)={0xa8, 0x0, 0x3}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe85, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000000), &(0x7f0000000140)=r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) r9 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) fcntl$dupfd(r9, 0x0, r9) r10 = msgget(0x0, 0x1a) msgctl$IPC_INFO(r10, 0x3, &(0x7f0000000100)=""/59) 262.943µs ago: executing program 4 (id=4864): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet_icmp(0x2, 0x2, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x4e) sendmmsg$unix(r3, &(0x7f000000e280)=[{{&(0x7f00000014c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001d80)=[{&(0x7f0000000240)="ab8841ec23a3626561c554b15e867d88120ea00dc3", 0x15}, {&(0x7f0000001540)="b5df7c3efb4eeeaba1ec066eeed156aac7bce713453e0ea8ae6c10bf8bd6f385d6af4ace171018726a24bb5bd4cb9e67df44a0d5afadf1a41a874d75e52f58da728f7a444a7cbd8dedc07cb4a3222843eeb657b876bc1636c3f1a0bcbd88cd8515e222b5", 0x64}, {&(0x7f0000001940)="0184fecf022532558fa58bbf48aa33014db15a0f50e7f08a0475c55877cdc1998d3b55648fb1c2275125b19c8d8233059365d5509351d94b61e9a2bac9171baf0ed2e1f2dc", 0x45}, {&(0x7f00000019c0)="2bb30bbf2bc2740423f26686c7d01b400a843d0e16a269ae5bad2d33cee0e0987e198926ff27805794c4548ad4c0e7bfe90324575695b8023ee396b5b07e9ccb662164", 0x43}, {&(0x7f0000001a40)="b7f82afefbf8972be16ee26bc9022143f553f457194cda46cf98068971206ee32101f0cf69f078e7303952acad278624b0ece04e7173d0629220c0a5e6f9ae49c2450ff10b1cadc8d655dc5a93c9e196a54d4a03bff68476bfa6129b376d02f0a79dc66631f20a759962bc0f40af40ac931363637f2ead6c426bfd4dac608e4626547879d1542427448283094ee7921f3fe36b4916e3b61aefa5f35693a585cde57338b6a56afb553b00ae98390002af49ac1a2babd40dca33b818c0a964ba8b27a5be88609d85cb0132ca825a9b3f235198a0dee55b1cd789a35f7db58c57c50d8a9e99e4015ad1582c", 0xea}, {&(0x7f0000001b40)="bf0245490c4b9c281367403c826d20191f62df47de277e396a6103", 0x1b}, {&(0x7f0000001b80)="9383b3383940811e", 0x8}, {&(0x7f0000001bc0)="f877f47772bfb9845483b6d548a40323b3813e8b298925f4a5bfae4ab5124b8160c4b8aff25576ec317056c8d914faa94654be9ca3157eb65aa36ad7f19733f73f502a3cb6a1af", 0x47}, {&(0x7f0000001c40)="132e6059a3ccba5f49245cf217756851df523eb36d9fe0dccc432a78f753f47fba3cc1d0733fb9835fc842ac977a789f5e99bf9c342c28f0c6ac61c8a923974011e4fef2978bc9e572ca1882d0d7ef018a7361f832590d1e7d7eef65f0f277bec67f6f0ccc6892", 0x67}, {&(0x7f0000001cc0)="cefae35f0308d1282abc5762c2b72190d75642a34673259f49fbed35430c628d1824d62c5a195f9bc5f3fd74b21df8a951a7c6a942364adc7120ecbb64408c9d6b0fdae2367d8e56b10870167ca747d5581353ae76ac3d647385e2ec1713b7fffcb0cdcf26be32128376d8d203931abda4b2b0241b2617420f0a9d1f414784a2b317accd82ea7394ac70caab27e22024be082861a1129c95d6ec90cb2320bf0da780a4d0881dba07857aa57e138af850adcd1385598a53cf22", 0xb9}], 0xa, &(0x7f0000003980)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r0, r1]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100, 0x4008000}}, {{&(0x7f0000004180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004200), 0x0, 0x0, 0x0, 0x800}}, {{&(0x7f0000004240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000006540)=[{&(0x7f0000006300)="eadb33931d8a5500cd9f33ca394c28a9878e9f8489374a81a8d2ee2135d5ef76ec72a26e0cb0a429715eab146d5aabd939873c7d7395ac50ac90489192340ba3d0ef884dedb3d8ab4845a43369ac56477a5902265ec8788ae47bd1e9c12652b086b2a4e286063f3e89521f092977995bbaa831f1b19f47e107757082739813f4d758fc11a410441df8302675c4ef0ef69e40ebaf30a783a2f5a9026c6662a715b01dacda1518b2c4f5b0abf7d78c2b32d4b52d466d8bffad715375202c7caf218de932ac66531435e94b97453a24fe838df6133bfcfdfe5a677ff8e6437705ad08", 0xe1}, {&(0x7f0000006400)="6831b359e3b0cfd3f5d30e65c167d37dc098851ac62105163987be047d1822ee3a93f52c8359dbe4247db463f562c6ba753c2cf21d24807f172fc402e1984b920e604890cd172526540370adebde66f6cfe15a16f5089a8f626cd147a1936a243cfa405eac3b9d2a49ae64a465bb834fedf4860193a80005779bd09870e20136d49c54b357f84d62e55f57092a7c84fd5791193cc7f8f5145ecb8394abbb191d525c26f6c174eacb435e0efcccaf26b4f2874114f039f10c1bc789a74c9527458a663057f9b4a0b660a1f64370126395b7614354276a7d56abbe3da22e574996b2662eb6", 0xe4}, {&(0x7f0000001e40)="130e181574001051e0a7ee4ecfb9a0f6323e616769db3b0eafdd48b343763c9c91b1e7040ce31f728762988be798611877a65b33be41cbc10f378d51ca9aface838041c876e1337c0b7c50d4cebc65c9376e716a1a57f2467d3f0fc74de18a9c9d04827372d3", 0x66}], 0x3, 0x0, 0x0, 0x4000}}, {{0x0, 0x0, &(0x7f0000007580)=[{&(0x7f0000006580)="22d4e180960e60b441d572e8bc781248facd0e29848b5efe57d9f2fd9c06f0f0f86ff1b2326d5fbf740bf18ee984f51a40c7ed291da8616ce8be74a51eebdb53822ceb29d83a1ab5895e9d8cbef393d8e6f81d7001d3a3760f7d947a194c2bb86f4b74de61170da24473610eb6a3aab6e5711a32fcb5532c30fd9bae526851aef3be8f4e80994fa1da42f454a0c6723951a04558260f668b6e1e1efc8646198337d5d6437bcdea91aefbbb8b9b730c636f09a4bc1be7388cb2ffacd28609067dff4f02dfec54fd1368cb33895a946d5ab9710f04004fbb850e02f114d2cb9e61ddb2517cf615f5ea9cf6a0cca64774a7ce4419f74a6049fa35f948362b3d0b78ab210d169b7026a61759f5886050a3e02931cb7fc082be915cc4776791bee478aaa2e3be46306673160a9ee8ae47fdc87c24a2c56860b4cc4a73b962e25fa52196f0e97b124f55c7c0fcf45df1b630167881af7820ec7616b287b8040cb6d9d64feba526e65bb70ca7c3d7772ae81f218c7db035463595cd3bc98e272fbbbae43da376984b1ea38ec0252a1f082e4d752ba72185b04753c4de0634117920468a6916a326f072a274ecb6aeeb13ab6c6e86a782c121e2c4ba720911b09436026fcf4050464f860c7587f35d580e24344f2b64f4679a6fa4ea07efccc7315a9ae5f689097fe702868f2262b5490d202d83c034bc7cf97b134c7bb53268c59c5bd27251d9c5b2647e9b565cf00aab16094fd6b91edac5c125182e586ee6c2515dbea7b3d81815e7c748f78c1b711c32754419a0e554d1aac61dd5595ec5532b9ea986bac7d11cb1f66733792a86ebe672b33ad5325d9013566a9f512b1e8c0df153ea5901468780a1b7eb2470757d1effd4a45d1429b244590fe59ac1737d1bd818907d2fe2a3a6f409d92c5877ac25d6fbab2bcd9340ac8b8b4c34cb490ae382cfa217d1fabfcafcdd237b93f3050cf92c828686a5fa94e8b2f28031c8383f64dbb9fa86e3d92f84082dd317c8543fece8e1ea734cfba3b33c7322a2b0c15fd2270ebbb27400e9117e2cfc446d8ea494eb853be2308e4d8df4ad415f3c8f27a3655897783849e40dc1483741cddbd2ffcadb170ef4acebf1319a032e7714b193089ed9980a2fc3d48ee462e1c87b2fac1630b6b8d867d06dd64ae9a1ee3cba9353f76b1ddc69c69462137526050cc7d26ceda0b2123166ac2c617baf56c3f75f1ed448ebceceb7ba6dc495d98b6f30ed1a85b6d9c2c84512fd7c638b01346196a976881c5a5a18b86f1983826fbb7be3553c3342984258723f7d928e3ad751466deb94a6dfe296744c884192bc003bfafa51518ff1e635e1af65db7f9faadee3491728ad6c00b1a09075c9f75bb05760f1596a30cd196efcbfd1bcfb47830f232a8c5782be6b9f3173629d42aade0ed5fecf2f4063bb54aeef85610ebd8ed42efd022962d2a330c27aaa5c2c73e8fb96290ddb589a1a0d9e7fcb5ae8d603de41cf0b2c5d5e7ab9607825f85b3d9c4801be6d9341337ad4addc7db02913231514a2a03a369fdaed5f9039ff32af0e6a3d5487b3e716577d12101846deeba1689945bec6656576b002038951855a6ccc4636d7f222b18ff4d0e8c6327c9cdcccef95ce5dceeea9908d098a98d4a833a9a5b04a5cdced0420368dc97849d69b59246a1003045f4939bfa6b8a8187a21490481421ef236f33800149db3601ec9f18fe5545298167187edcdd3d551fcbeaab388a72c525fb15ac1862a373d7577886ff16e894cd4730e78d6ec2a34a76c5a0acf5559eac36bf72b7ea82de74d8e61de7715a02aff2eb731d16a185513ca8701b18488ce5c668be2b4fadb2564b24dd7502494bf32c99f15cc53e2223d15f0c623b97f7959012df5d49bc7a91d9d6f700f792007421d8b52dad9c11eb7b7b7019ade826bc4ed68e10dd1983cc1d6b1d096eb00eb30fa653f5b475913b9bea033755cccbb125068e19d06b7c99a0c00d5e50f70fd52746482b44ba7fbf8cb88e31f4c863536bf1766d7f32c861062c7fc9d1c683846b398834903ef7d569d6ec6120bc21536c6f666202167fedc718067d9c92decc1eeada6c5a9773fd04eb70b149b2e14615c838569305fd7855e54532910c386ad776acadb0aada6f9f05bdeac24b1218f2ce64df6687b640bf8b3c7f664fb38cd59df43b3bf3aeae789885c2fc9a5911135106697adeab800f2aed019d932f5cf0d061c587df237d5bc133e30ba5462d8a0c65fe7884e2aa64c391a527a3b3de5f932a15771dd72882c726d3f3fba84c396cb7bd83ce77fac8ce6b503c340540ef5afe28c6afe0c24bd6ddbdd71449a063e98e40ab5302f1797ff703fa2ba2a35cbb1e0079662f565e20dbf427850a477262241006574bb1e0ee02b8359822610241ea89fd725db947b9f1c8451037e90c3c6a99b8fe1db1ebe37b385d870278ce7c8f9ef72a7c26ba8b8b63fccecde7cb5be966cf726131b9d3d4cda726a1dbef2e98d0f0104070b2e04059e86ecb18bcdaef793535384425314c6eeb029116bc9eb8c059e81f58555fd34091456322c065af3e0672059b3d8196db08261bc039922dd3a6cffe776aaa53678452b91a729ce8c478fbb67af5e2c04acba0628d5e6199c4b11bcf6960057086fac65ffa8dc24b04984592b00e90bea83e069b9b37ac89de5f091fb49338e973a8c929cbb9ad863dd688f63bf7195bdff72307764a5536538edd86d45075d2229be1b132b63c0857bce3f7f92d4531c39627f92c10379fc1ac1832c73d50f7b0906c4461378062c7a3813e7b2464b3508843d3479f60322f0f5a39b9abff2ac0f51948378f4c965ffa73b41cf6b7e9dc5b0c93e53e13772e114f31edfa4805d9860a7a0dcd658c0813b87156ad32ba12106bf32642451f7fb83d1aa21b01926d1b0c65fd7612f0cae6d9c5e6706bdd7fe36001820d9ac1f9d57a6f0a76be42e09df96c318871e8c0d9a448445cbfecf463bccd80911f3aa96f436b4580a3cd9285edb9655bc330f05c676c8ee4ac74d6c6be532588720d870846f40b489453ab328717befc3e15f4bd0a991eef704a7706c8261aac2b630e1cfa06420d2b0c67754d408182a043bed87177eb97e22b09d65fb000c5e0418f75941c7ab0542935bf3e642298d7e513802412fb9598b133f495bd33cc25b9296784538a41f2128a74d1f437212db0dd82124bb329a30314fca7cca4f2ad5d0fb619ca124dc2ac11516554165752237d756d0112cc0cf04b61a87b8c5fa7ef898a6171c9009efb0f225854ff62bcdec87dd5ff06859639fff41d85247a05a1f7e563008071fbcfda3ea157dcdde6f1917c36bc28de5b7bea073fc55b501152e8d12a24fb349d19c5533ec58a6b70986fdea7978076cd02b89516f4660414839ad87bcfc1dec7ed161c39d1138b37b013f90dd2318cef7f6bc15e4751412a01ccc4ab7203c932d7ced9cfd298a794efdc09c374fc34cd75d807e7daaef31c74f4caa7dae7f1086915d0264a4dd310f4e9d508542b0b7efc573c5ad99bdf22b6442cafe8a6347f1c5a0d1e5166d142538fb25db05aa39dc209bd7c483e9c67713fbb08e6ac390bd59ef6adda82d10b0509f3be12f7678f9642395a91744de723df95b8243e73c3bd90a7b619a30cb26f831ab8dc962db3ff8353059fe46f94dbee12b78f9b05b0673f093c5514710055ac6ba98ff7385bc82ad6d29685e0551502d0ae14a660d424f1f4713d82b0ec2966a15280c22dfebf2a31466517cf7af040acf949a292193a1dc50b147a88f4df6a74ae52302dac37d0862dbbeeae5d31858e580848efcfc00d553d8fcfc329eaeb711cefcec3a6274b8b975063a7d23e5f2f7518f5a0025ffbb5b14d2662340cd16c2726cf8475ef3fd4234bd2cfd097fd20c913acbf6f1a2eee5409c5d9f527634eb5cec8268ef623122328fd8244507089c8afbd85aff53756fe0dcaeee01649b132f48e8e5415abfeb6bea063228a8aae0028d34b80b55570ad8d2a4c22fab403a8a3c9d724f7a22664e9d5c8c5ebd7177e432e88404e6455473cb10210725df06e7ab93e08c553d6c5d147b1ce001bc635bbcdc9e46d29903ae8fde813d29a7fe1c0d0a3611f96aa600d8d3aa075a3c8132b916128fde1729645d7c4ae436e269bffdf48cc092e3b4a2f8e703afcb4dd752ec43bfd767671ddfa99d5afeeadbc4a70d6a45bb9c73d2a88dfe12612cc15a608246bdd7b8a8a5111cbe430420d06b6f59fc2b2baf512ba27413ae5cee55d2be8f597718bfb79a536d71a7fe490faf2fa908c2ecaeb8d25b54affebc1ec1eb0c987fb0e4dcff2f4bbd08272205a340eb4d48afb780d1f219cf0e753e4d0f19c1af596f779e5c248f481b1581c5f92f22b344237e7f1a04a495c4cf2771753ec5ee848e38f04c087cbcb282c45ae34d7c8e6cc4a59fbe0ad85d91883402d66e70aa3b503a7cbf1b158b242c6d7f3d9e92d234d6026a67421af36d50be36842a410449460f1c74cb4031a4faa33806ca4a9594560ac40e7027aa56ca08c5625b626f58fa00b126a906ea08ed5e7586e5d7c672004185d491863daeeeab2cf5bd0f0e1bac94dae487aad49cc1a8cb42ea66826131af7bcc0ff68e146d480eef6406987a8fcd07ff02724a0460a503393af6c1691cf4202292593e5244c0572f9034bda604c3c20290cf57874ead733090e8f8d2e2259d967436863b2b0d14fcf5cf464e6eae72dbe6c480f24f4354108186baf6b76374e091e2bc46259553d18a6aeeaa36c66c645ba1013517465b5dd12a475673f16a127f9855e0f789cdf66d4954e86b181a0f9ee7864b93edd01605b6598f7caaf9682b051bbe4cd417603f2bc68b402b5a753f15beb69dfbff710f66df7799c13282c3699dbd02b715afebfc3319993c5019813c38cb5eefe8cb4906f550e5503e1e84bd8106e9ef1ad8e2a2b465b9d2db88822164bfeb18522a12cb19442da5ff80e4607e7fa31ce54d74a37d94f00fc7a4306c73d8f8a32a77af61fb253b22b0bca2fb594eb32cf2db8c27398041835c3e013bf699512f9b1bd79e9e0261a03694ab1ecd6ae97a6ece90122eb5a99acd42a891f4c93f4cdd806c4ecc71791e009d7e5bd72e4f3e9826cf10df320e771a0f34ff5363456ea503013472b197e47e3fbfaf5000f1350747696aaaf73b50f0995e3ca17d02fd2d0de1bb9203a0ebea0c296df6fc89e1fce9d8b410c8071b071df87321313f12cd4782f370e909bf465e1ad5da8edd0f713d36fdea6daf8a0d3aff7f1b20815c9a622b7968f8be39fa5af1decec00060c6573cf442468a620f5a3310e2ad73692cb96bb4d78a68243a1da2768fb47e229d7c6c17145f544a19cac015047822db22b0970937d39fb51e38ccdac23de1bd0686da1fbaf526ec4959c28c0446ac29b2d7b3539a39c2c658eec43feae5447d25592ae5b94a973b85bd3f7fba8e12b5bc5935137360652466dc3836a561114d3c418705c95c3e811d0310c96038d45377d31d917afc262f99ad68725198239c9e3537bedb767459e70f0e17379ead6566972f613d8c1cd8e665cfe477cd8a16fa23dc280a00b213c7d0d1a960453fddf17d6f92abc72c7bfb9900b4ba46c792e457b1719da6b07624a1ff1b0bf1d5386c42677e545e5f1a9d8cd3555f13a94f5208ab8062d410d9499842782a61add077cc0e9583bff183ca3b604fce2f828bc96ce4313f17b5c2997a33612c2cb07d93ade34b8eae2086ccdd345ed20730378b0eadcb22d110efcea07404a6212dca89508cd06fa045650bcd", 0x1000}], 0x1, &(0x7f0000007680)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [r2, 0xffffffffffffffff, r2, r3, r2, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2]}}, @cred={{0x1c}}], 0x120, 0x2004c880}}, {{&(0x7f0000008180)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000008340)=[{&(0x7f0000008240)="b1411abb148d1dc49474a98bc85b695304a88c3684a83c98a9acf81dc3a1d2ae3e85ec996c4c7f2f69761a24eacf5bae06b9209bfdc4161ceeceec2a5d488ea29a95f16eda448a01710bd91411548578680b6f727f0959b580d70d54e41b6a5059ab7214cfca06b16b99d82e358569308b6e1050682115c9b131756898ae91c93a5d0088d013bc8e3835e37570b6a5f8a68182e79da63cb51489a8e5ddfdf6995f22df273aa7d5db715f5b33e3caf0f02be1b6cb997ed67b0afca29b7743774e2c57b9c20e4414f12200bc52c4f04129acf186", 0xd3}], 0x1, &(0x7f0000001ec0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r1, r1, r0, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x140}}], 0x5, 0x4840) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r7, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000000c0)={[0x15b2, 0x1000000000000000, 0x7, 0x109e93, 0xffffffffffffffff, 0x3ffffc, 0x8000000000000009, 0x4, 0x2, 0x2000000000000005, 0x48d7, 0x200000010000, 0x6, 0x7, 0x7, 0xffffffffffffbffc], 0xd5d5c004, 0x8340}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f00000001c0)=@x86={0x9, 0x0, 0xb, 0x0, 0x5, 0x8, 0xe, 0x4, 0x9, 0x3c, 0x2, 0x2, 0x0, 0x6, 0x9, 0xd, 0x4, 0xc2, 0x98, '\x00', 0xbc, 0x901c835}) ioctl$KVM_RUN(r7, 0xae80, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r5, {0x401}}, './file0/file0\x00'}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='wg1\x00', 0x4) recvmmsg(r2, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0xfffffe42, &(0x7f0000001640)=[{&(0x7f0000001480)=""/7, 0x7}, {&(0x7f0000000280)=""/64, 0x40}, {&(0x7f0000000480)=""/4092, 0x1000}, {&(0x7f0000001840)=""/230, 0xf0}, {&(0x7f0000001580)}, {&(0x7f00000015c0)=""/65, 0x41}], 0x6, &(0x7f00000016c0)=""/201, 0xc9}, 0x7}], 0x2, 0x10000, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r8, 0x0, 0xee01) 0s ago: executing program 1 (id=4865): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getrandom(0x0, 0x0, 0xd86b31f1268e345c) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) getrandom(&(0x7f0000000100)=""/116, 0x74, 0x3) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) syz_emit_ethernet(0x85, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd60000000004f000000000000aaff0235c52c67d6e50000000000000000000000000001860090780000040000000000000000fe1c571a000307bd3e6d4706598080a8030037ffffff0100000024732472eefa45ad96000000008e254c1e4a8a8b3f0ab0c430d3be27df3e34116d42ca0a00000000000000000000004344bcee0b9c9cffadf6d4"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) setrlimit(0x8, &(0x7f0000000040)={0x80000000, 0x7}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x2, 0x141240) fcntl$setstatus(r2, 0x4, 0x2000) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000007000000000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e20000000000000009dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) kernel console output (not intermixed with test programs): 575192][T22798] loop3: detected capacity change from 0 to 7 [ 1190.582024][T22798] Dev loop3: unable to read RDB block 7 [ 1190.623649][T22798] loop3: unable to read partition table [ 1190.629375][T22798] loop3: partition table beyond EOD, truncated [ 1190.642872][T22798] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1191.456062][T22807] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1192.659483][T22821] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1192.700922][T22821] bond3: Removing last arp target with arp_interval on [ 1192.725473][T22821] bond3: entered allmulticast mode [ 1192.731081][T22821] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1195.554699][T22839] netlink: 'syz.1.4102': attribute type 39 has an invalid length. [ 1195.648995][T22843] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input39 [ 1199.306408][T14478] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1199.488754][T14478] usb 7-1: Using ep0 maxpacket: 32 [ 1199.533679][T14478] usb 7-1: config 6 has an invalid interface number: 79 but max is 3 [ 1199.560627][T14478] usb 7-1: config 6 has an invalid interface number: 18 but max is 3 [ 1199.588582][T14478] usb 7-1: config 6 has an invalid interface number: 28 but max is 3 [ 1199.617617][T14478] usb 7-1: config 6 has no interface number 0 [ 1199.631879][T14478] usb 7-1: config 6 has no interface number 1 [ 1199.742645][T14478] usb 7-1: config 6 has no interface number 2 [ 1199.795344][T14478] usb 7-1: config 6 interface 79 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 1199.834852][T14478] usb 7-1: config 6 interface 79 altsetting 5 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1199.878853][T14478] usb 7-1: config 6 interface 79 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 1199.916148][T14478] usb 7-1: config 6 interface 79 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 1199.946457][T14478] usb 7-1: config 6 interface 79 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 1199.973064][T14478] usb 7-1: config 6 interface 79 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 1200.018116][T14478] usb 7-1: config 6 interface 79 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 1200.052791][T14478] usb 7-1: config 6 interface 79 altsetting 5 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 1200.077297][T14478] usb 7-1: config 6 interface 79 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 1200.101241][T14478] usb 7-1: config 6 interface 79 altsetting 5 bulk endpoint 0xB has invalid maxpacket 1023 [ 1200.135018][T14478] usb 7-1: config 6 interface 79 altsetting 5 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 1200.184474][T14478] usb 7-1: config 6 interface 79 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 1200.218509][T14478] usb 7-1: config 6 interface 79 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 1200.235766][T14478] usb 7-1: config 6 interface 18 altsetting 56 has a duplicate endpoint with address 0x7, skipping [ 1200.259396][T22917] netlink: 'syz.1.4124': attribute type 1 has an invalid length. [ 1200.295573][T14478] usb 7-1: config 6 interface 18 altsetting 56 has an endpoint descriptor with address 0x27, changing to 0x7 [ 1200.342162][T22917] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1200.355084][T14478] usb 7-1: config 6 interface 18 altsetting 56 has a duplicate endpoint with address 0x7, skipping [ 1200.432739][T14478] usb 7-1: config 6 interface 18 altsetting 56 has a duplicate endpoint with address 0x5, skipping [ 1200.475257][T22920] bond4: (slave ip6erspan0): making interface the new active one [ 1200.501536][T14478] usb 7-1: config 6 interface 18 altsetting 56 bulk endpoint 0x9 has invalid maxpacket 16 [ 1200.547610][T22920] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1200.572936][T14478] usb 7-1: config 6 interface 28 altsetting 5 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 1200.632773][T14478] usb 7-1: config 6 interface 28 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 1200.767862][T14478] usb 7-1: config 6 interface 28 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 1200.778846][T14478] usb 7-1: config 6 interface 28 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 1200.789765][T14478] usb 7-1: config 6 interface 28 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 1200.802506][T14478] usb 7-1: config 6 interface 28 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 1200.813452][T14478] usb 7-1: config 6 interface 3 has no altsetting 0 [ 1200.820919][T14478] usb 7-1: config 6 interface 79 has no altsetting 0 [ 1200.878056][T19931] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1200.924161][T14478] usb 7-1: config 6 interface 18 has no altsetting 0 [ 1200.937467][T14478] usb 7-1: config 6 interface 28 has no altsetting 0 [ 1200.949911][T14478] usb 7-1: New USB device found, idVendor=13d3, idProduct=3205, bcdDevice=3d.6c [ 1200.959935][T14478] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.960456][T22937] netlink: 'syz.8.4131': attribute type 12 has an invalid length. [ 1200.975945][T14478] usb 7-1: Product: ï¸ç…¥è©‘â„ोæªâ¨«á•Šî—á•ã§¯ï¶Œá€—眘ç¼ë¿Œé†¬è­»áŒ§á‚›â¿¥ç¾¼ê²ïŸ‰î¢¬á¸šï›€ä¿—輾ݜ㕬筥߷๠ࠊ巃疣ⵇ꽓⇿幋豵뙮쓕îî­ã¾¯è³¯á·®ì¢²å†œëªêœ‡ëœ™æ·¥îŽ–êŒí‡„上邖貑ç„䘕á®í”˜ä»¨äž»íœŒíˆªëœ—㛜涶뉾婞왷傞㉖ [ 1200.997726][T22937] netlink: 172 bytes leftover after parsing attributes in process `syz.8.4131'. [ 1201.051151][T14478] usb 7-1: Manufacturer: æ»ï‹„ç©»íŽî¡âŽƒá»ê‘¨ä‡Žä©¼é¼¿ëŒ»äªƒå¥¢é–ªê¿×¤å¢«ê»à¸‘á˜ç–³æ´¿ï„žíŸƒç‰‚렋鑹⥗픅뗮璺ʟ [ 1201.078951][T14478] usb 7-1: SerialNumber: Ó¿ [ 1201.087608][T19931] usb 10-1: Using ep0 maxpacket: 16 [ 1201.130974][T19931] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1201.153317][T22939] netlink: 'syz.0.4132': attribute type 39 has an invalid length. [ 1201.182097][T19931] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1201.204496][T22943] netlink: 148 bytes leftover after parsing attributes in process `syz.8.4134'. [ 1201.218601][T19931] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1201.234172][T19931] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1201.260085][T19931] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1201.307777][T19931] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1201.341699][T19931] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1201.351248][T14478] dvb-usb: found a 'Twinhan USB2.0 DVB-T receiver (TwinhanDTV Alpha/MagicBox II)' in cold state, will try to load a firmware [ 1201.466912][T19931] usb 10-1: Manufacturer: syz [ 1201.499901][T14478] usb 7-1: Direct firmware load for dvb-usb-vp7045-01.fw failed with error -2 [ 1201.519848][T19931] usb 10-1: config 0 descriptor?? [ 1201.571217][T22952] zonefs (nullb0) ERROR: Not a zoned block device [ 1201.921366][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1201.921383][ T30] audit: type=1400 audit(2000000805.363:1650): avc: denied { firmware_load } for pid=14478 comm="kworker/0:7" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1201.925701][T14478] usb 7-1: Falling back to sysfs fallback for: dvb-usb-vp7045-01.fw [ 1202.150460][ T30] audit: type=1400 audit(2000000805.593:1651): avc: denied { connect } for pid=22956 comm="syz.6.4139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1202.358681][T19931] rc_core: IR keymap rc-hauppauge not found [ 1202.364622][T19931] Registered IR keymap rc-empty [ 1202.369827][T19931] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1202.397009][T19931] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1202.489284][T22963] gfs2: not a GFS2 filesystem [ 1202.504515][T19931] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1202.537033][ T5820] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1202.540726][T19931] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input40 [ 1202.948588][T19931] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1202.976804][T19931] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1203.006755][T19931] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1203.026714][T19931] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1203.041483][ T5820] usb 2-1: Using ep0 maxpacket: 16 [ 1203.049841][T19931] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1203.076089][ T5820] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1203.076804][T19931] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1203.105721][ T5820] usb 2-1: config 1 has an invalid descriptor of length 74, skipping remainder of the config [ 1203.107107][T19931] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1203.133388][ T5820] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1203.149892][T19931] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1203.164865][ T5820] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1203.184021][T19931] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1203.189192][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.207278][T19931] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1203.219045][ T5820] usb 2-1: Product: syz [ 1203.311295][T19931] mceusb 10-1:0.0: Registered with mce emulator interface version 1 [ 1203.319539][T19931] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1203.328570][ T5820] usb 2-1: Manufacturer: syz [ 1203.337243][ T5820] usb 2-1: SerialNumber: syz [ 1203.346721][T19931] usb 10-1: USB disconnect, device number 19 [ 1203.448670][T22971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4142'. [ 1203.459955][ T30] audit: type=1400 audit(2000000806.883:1652): avc: denied { create } for pid=22968 comm="syz.0.4142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1203.647480][T22978] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1204.528868][T22988] netlink: 'syz.0.4146': attribute type 39 has an invalid length. [ 1206.852365][ T5820] usb 2-1: USB disconnect, device number 49 [ 1207.125379][T23013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4152'. [ 1207.510541][T23028] FAULT_INJECTION: forcing a failure. [ 1207.510541][T23028] name failslab, interval 1, probability 0, space 0, times 0 [ 1208.290301][T23028] CPU: 1 UID: 0 PID: 23028 Comm: syz.9.4156 Tainted: G L syzkaller #0 PREEMPT(full) [ 1208.290332][T23028] Tainted: [L]=SOFTLOCKUP [ 1208.290338][T23028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1208.290353][T23028] Call Trace: [ 1208.290359][T23028] [ 1208.290366][T23028] dump_stack_lvl+0x100/0x190 [ 1208.290397][T23028] should_fail_ex.cold+0x5/0xa [ 1208.290420][T23028] should_failslab+0xc2/0x120 [ 1208.290438][T23028] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1208.290461][T23028] ? skb_clone+0x190/0x400 [ 1208.290484][T23028] skb_clone+0x190/0x400 [ 1208.290503][T23028] pfkey_process+0xc0/0x810 [ 1208.290518][T23028] ? trace_contention_end+0x140/0x180 [ 1208.290536][T23028] ? __mutex_lock+0x26a/0x1b90 [ 1208.290557][T23028] ? __pfx_pfkey_process+0x10/0x10 [ 1208.290574][T23028] ? pfkey_sendmsg+0x41a/0x840 [ 1208.290604][T23028] ? __pfx___alloc_skb+0x10/0x10 [ 1208.290627][T23028] pfkey_sendmsg+0x428/0x840 [ 1208.290648][T23028] ____sys_sendmsg+0x9e1/0xb70 [ 1208.290670][T23028] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1208.290689][T23028] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1208.290722][T23028] ___sys_sendmsg+0x190/0x1e0 [ 1208.290746][T23028] ? __pfx____sys_sendmsg+0x10/0x10 [ 1208.290799][T23028] __sys_sendmsg+0x170/0x220 [ 1208.290817][T23028] ? __pfx___sys_sendmsg+0x10/0x10 [ 1208.290851][T23028] do_syscall_64+0x106/0xf80 [ 1208.290868][T23028] ? clear_bhb_loop+0x40/0x90 [ 1208.290890][T23028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1208.290907][T23028] RIP: 0033:0x7f472439c799 [ 1208.290921][T23028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1208.290937][T23028] RSP: 002b:00007f47251da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1208.290954][T23028] RAX: ffffffffffffffda RBX: 00007f4724616090 RCX: 00007f472439c799 [ 1208.290963][T23028] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1208.290974][T23028] RBP: 00007f47251da090 R08: 0000000000000000 R09: 0000000000000000 [ 1208.290983][T23028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1208.290992][T23028] R13: 00007f4724616128 R14: 00007f4724616090 R15: 00007ffde46d79e8 [ 1208.291016][T23028] [ 1208.655224][T23029] syzkaller0: entered promiscuous mode [ 1208.660871][T23029] syzkaller0: entered allmulticast mode [ 1209.318797][T19931] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1209.356684][T23034] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4159'. [ 1209.571354][T19931] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1209.592584][T19931] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1209.657190][T19931] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.694214][T19931] usb 9-1: config 0 descriptor?? [ 1209.802516][T23051] bond1: entered promiscuous mode [ 1209.843633][T23051] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1209.937071][T19931] usbhid 9-1:0.0: can't add hid device: -71 [ 1209.943027][T19931] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1209.988646][T19931] usb 9-1: USB disconnect, device number 14 [ 1210.746050][T23065] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1210.862759][T19931] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1211.033248][T19931] usb 9-1: Using ep0 maxpacket: 32 [ 1211.046752][T19931] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1211.090653][T19931] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1211.121215][T19931] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.196403][T19931] usb 9-1: config 0 descriptor?? [ 1211.215055][T19931] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1211.273792][T19931] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1211.745922][T14494] usb 9-1: USB disconnect, device number 15 [ 1211.773111][T14494] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 1211.927870][T23078] loop2: detected capacity change from 0 to 7 [ 1212.204785][T23078] Dev loop2: unable to read RDB block 7 [ 1212.303040][T23078] loop2: unable to read partition table [ 1212.335805][T23078] loop2: partition table beyond EOD, truncated [ 1212.371282][T23078] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 1213.363678][ T30] audit: type=1800 audit(2000000816.328:1653): pid=23087 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.4174" name="bus" dev="overlay" ino=775 res=0 errno=0 [ 1214.671629][ T30] audit: type=1800 audit(2000000817.709:1654): pid=23094 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.9.4175" name="bus" dev="overlay" ino=940 res=0 errno=0 [ 1214.759529][T23092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4177'. [ 1214.811950][T23091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4177'. [ 1214.985033][T23103] loop2: detected capacity change from 0 to 7 [ 1215.007316][T23103] loop2: [POWERTEC] p1 p2 p3 [ 1215.019181][T23103] loop2: p1 start 1852400175 is beyond EOD, truncated [ 1215.032744][T23103] loop2: p2 size 524288 extends beyond EOD, truncated [ 1215.048016][T23103] loop2: p3 start 1936093797 is beyond EOD, truncated [ 1215.175209][T16174] udevd[16174]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 1215.195455][T19932] hid-generic 0080:0005:FFFFFFFE.000A: item fetching failed at offset 0/2 [ 1215.221486][T19932] hid-generic 0080:0005:FFFFFFFE.000A: probe with driver hid-generic failed with error -22 [ 1215.313160][T23110] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 1215.576119][T23114] Cannot find add_set index 65532 as target [ 1216.256791][T23121] netlink: 'syz.0.4184': attribute type 3 has an invalid length. [ 1216.265085][T23121] netlink: 'syz.0.4184': attribute type 3 has an invalid length. [ 1216.273620][T23121] netlink: 'syz.0.4184': attribute type 3 has an invalid length. [ 1216.281758][T23121] netlink: 'syz.0.4184': attribute type 3 has an invalid length. [ 1216.289699][T23121] netlink: 'syz.0.4184': attribute type 3 has an invalid length. [ 1216.298246][T23121] netlink: 'syz.0.4184': attribute type 3 has an invalid length. [ 1216.312805][T23121] netlink: 'syz.0.4184': attribute type 3 has an invalid length. [ 1216.321037][T23121] netlink: 'syz.0.4184': attribute type 3 has an invalid length. [ 1216.328974][T23121] netlink: 'syz.0.4184': attribute type 3 has an invalid length. [ 1216.337057][T23121] netlink: 'syz.0.4184': attribute type 3 has an invalid length. [ 1216.819876][T19931] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1216.969700][T19931] usb 9-1: Using ep0 maxpacket: 16 [ 1216.979712][ T5820] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1216.988550][T19931] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1217.009012][T19931] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1217.042270][T19931] usb 9-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1217.059646][T19931] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.067703][T19931] usb 9-1: Product: syz [ 1217.095808][T19931] usb 9-1: Manufacturer: syz [ 1217.102935][T19931] usb 9-1: SerialNumber: syz [ 1217.190829][ T5820] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1217.209756][ T5820] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1217.275249][ T5820] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1217.340462][T19931] usb 9-1: Audio class v2/v3 interfaces need an interface association [ 1217.349797][T19931] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1217.357012][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.408789][ T5820] usb 2-1: config 0 descriptor?? [ 1218.452908][T19931] usb 9-1: 2:1 : can't get High Capability descriptor [ 1218.751906][T23124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1218.782613][T23124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1218.814567][T23124] sch_tbf: burst 0 is lower than device veth1 mtu (1514) ! [ 1218.832328][T19931] usb 9-1: USB disconnect, device number 16 [ 1219.132153][ T5820] hid-led 0003:27B8:01ED.000B: probe with driver hid-led failed with error -71 [ 1219.267720][T23138] netlink: 348 bytes leftover after parsing attributes in process `syz.6.4190'. [ 1219.444499][ T5820] usb 2-1: USB disconnect, device number 50 [ 1219.481418][T16174] udevd[16174]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1221.681719][T23187] netlink: 348 bytes leftover after parsing attributes in process `syz.1.4203'. [ 1221.803297][T23190] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1221.829623][T23191] fuse: Unknown parameter '0x00000000000000040000000000000000000000000000000000000000' [ 1224.265884][ T30] audit: type=1800 audit(2000000827.244:1655): pid=23213 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.9.4210" name="bus" dev="overlay" ino=995 res=0 errno=0 [ 1225.220319][ T30] audit: type=1800 audit(2000000828.024:1656): pid=23217 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.4209" name="bus" dev="overlay" ino=1026 res=0 errno=0 [ 1226.215346][T23241] dlm: no local IP address has been set [ 1226.220957][T23241] dlm: cannot start dlm midcomms -107 [ 1226.990372][T23254] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4222'. [ 1228.029612][ T30] audit: type=1800 audit(2000000831.446:1657): pid=23260 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.9.4224" name="bus" dev="overlay" ino=1015 res=0 errno=0 [ 1228.071451][T23259] FAULT_INJECTION: forcing a failure. [ 1228.071451][T23259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1228.166583][T23259] CPU: 1 UID: 0 PID: 23259 Comm: syz.8.4213 Tainted: G L syzkaller #0 PREEMPT(full) [ 1228.166613][T23259] Tainted: [L]=SOFTLOCKUP [ 1228.166619][T23259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1228.166627][T23259] Call Trace: [ 1228.166631][T23259] [ 1228.166636][T23259] dump_stack_lvl+0x100/0x190 [ 1228.166658][T23259] should_fail_ex.cold+0x5/0xa [ 1228.166673][T23259] _copy_from_user+0x2e/0xd0 [ 1228.166690][T23259] ip6_tnl_siocdevprivate+0x1bd/0x740 [ 1228.166705][T23259] ? __pfx_ip6_tnl_siocdevprivate+0x10/0x10 [ 1228.166717][T23259] ? avc_has_extended_perms+0x484/0x1080 [ 1228.166746][T23259] ? full_name_hash+0xbc/0x100 [ 1228.166759][T23259] ? netdev_name_node_lookup+0x107/0x150 [ 1228.166778][T23259] dev_ifsioc+0xc60/0x1f20 [ 1228.166790][T23259] ? __pfx_dev_ifsioc+0x10/0x10 [ 1228.166799][T23259] ? __pfx___mutex_lock+0x10/0x10 [ 1228.166817][T23259] ? dev_load+0x8e/0x240 [ 1228.166832][T23259] ? dev_load+0x8e/0x240 [ 1228.166851][T23259] dev_ioctl+0x70e/0x10e0 [ 1228.166862][T23259] sock_ioctl+0x494/0x6b0 [ 1228.166878][T23259] ? __pfx_sock_ioctl+0x10/0x10 [ 1228.166892][T23259] ? hook_file_ioctl_common+0x146/0x410 [ 1228.166911][T23259] ? selinux_file_ioctl+0x139/0x290 [ 1228.166924][T23259] ? selinux_file_ioctl+0xb4/0x290 [ 1228.166937][T23259] ? __pfx_sock_ioctl+0x10/0x10 [ 1228.166952][T23259] __x64_sys_ioctl+0x18e/0x210 [ 1228.166970][T23259] do_syscall_64+0x106/0xf80 [ 1228.166981][T23259] ? clear_bhb_loop+0x40/0x90 [ 1228.166994][T23259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.167006][T23259] RIP: 0033:0x7f782519c799 [ 1228.167015][T23259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1228.167026][T23259] RSP: 002b:00007f7826096028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1228.167037][T23259] RAX: ffffffffffffffda RBX: 00007f7825415fa0 RCX: 00007f782519c799 [ 1228.167043][T23259] RDX: 0000200000000340 RSI: 00000000000089f1 RDI: 0000000000000003 [ 1228.167050][T23259] RBP: 00007f7826096090 R08: 0000000000000000 R09: 0000000000000000 [ 1228.167057][T23259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1228.167063][T23259] R13: 00007f7825416038 R14: 00007f7825415fa0 R15: 00007ffc35817968 [ 1228.167077][T23259] [ 1228.814321][T23266] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4226'. [ 1228.906086][T23268] netlink: 148 bytes leftover after parsing attributes in process `syz.6.4228'. [ 1229.444031][T23281] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4231'. [ 1229.733304][T10902] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 1230.312583][T10902] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1230.341955][T10902] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.381750][T10902] usb 9-1: config 0 descriptor?? [ 1230.414663][T10902] cp210x 9-1:0.0: cp210x converter detected [ 1231.546703][T10902] usb 9-1: cp210x converter now attached to ttyUSB0 [ 1232.412291][T23293] overlayfs: failed to resolve './file1': -2 [ 1233.046792][ T5820] usb 9-1: USB disconnect, device number 17 [ 1233.089170][ T5820] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1233.097819][T23303] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:0 [ 1233.186492][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1233.647209][ T5820] cp210x 9-1:0.0: device disconnected [ 1233.828761][T23307] loop6: detected capacity change from 0 to 524287999 [ 1233.880171][T16174] buffer_io_error: 25 callbacks suppressed [ 1233.880183][T16174] Buffer I/O error on dev loop6, logical block 0, async page read [ 1233.907650][T16174] Buffer I/O error on dev loop6, logical block 0, async page read [ 1233.915939][T16174] Buffer I/O error on dev loop6, logical block 0, async page read [ 1234.085971][T16174] Buffer I/O error on dev loop6, logical block 0, async page read [ 1234.102233][T16174] Buffer I/O error on dev loop6, logical block 0, async page read [ 1234.111283][T16174] Buffer I/O error on dev loop6, logical block 0, async page read [ 1234.119134][T16174] Buffer I/O error on dev loop6, logical block 0, async page read [ 1234.121087][ T5820] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1234.127394][T16174] Buffer I/O error on dev loop6, logical block 0, async page read [ 1234.173280][T16174] ldm_validate_partition_table(): Disk read failed. [ 1234.204326][T16174] Buffer I/O error on dev loop6, logical block 0, async page read [ 1234.231689][T16174] Buffer I/O error on dev loop6, logical block 0, async page read [ 1234.247311][T16174] Dev loop6: unable to read RDB block 0 [ 1234.271951][T16174] loop6: unable to read partition table [ 1234.288219][T16174] ldm_validate_partition_table(): Disk read failed. [ 1234.301078][T16174] Dev loop6: unable to read RDB block 0 [ 1234.315444][T16174] loop6: unable to read partition table [ 1234.361307][ T5820] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1234.423910][T23307] ldm_validate_partition_table(): Disk read failed. [ 1234.537613][T23307] Dev loop6: unable to read RDB block 0 [ 1234.543238][ T5820] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.557568][ T5820] usb 9-1: Product: syz [ 1234.561957][T23307] loop6: unable to read partition table [ 1234.567911][ T5820] usb 9-1: Manufacturer: syz [ 1234.574097][T23307] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1234.584494][ T5820] usb 9-1: SerialNumber: syz [ 1234.602365][T23310] ldm_validate_partition_table(): Disk read failed. [ 1234.609140][T23310] Dev loop6: unable to read RDB block 0 [ 1234.619538][T23310] loop6: unable to read partition table [ 1234.634520][T23310] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1234.809847][ T5820] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1234.981160][ T5820] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 1235.032267][ T5820] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1235.082128][ T5820] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -32 [ 1235.118618][ T5820] usb 9-1: USB disconnect, device number 18 [ 1235.157480][T23331] validate_nla: 40 callbacks suppressed [ 1235.157499][T23331] netlink: 'syz.8.4245': attribute type 39 has an invalid length. [ 1235.258413][T23333] syzkaller0: entered promiscuous mode [ 1235.263959][T23333] syzkaller0: entered allmulticast mode [ 1235.281470][T23333] tipc: Enabled bearer , priority 0 [ 1235.736183][T23339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4246'. [ 1235.990504][T23338] overlayfs: failed to resolve './file1': -2 [ 1236.377342][ T5820] tipc: Node number set to 1820576281 [ 1236.917406][ T30] audit: type=1400 audit(2000000840.380:1658): avc: denied { read } for pid=23350 comm="syz.8.4251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1236.959462][T23328] tipc: Resetting bearer [ 1237.002356][T23328] tipc: Disabling bearer [ 1237.026588][T23351] 9p: Bad value for 'uname' [ 1237.208067][ T30] audit: type=1400 audit(2000000840.670:1659): avc: denied { accept } for pid=23355 comm="syz.9.4254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1237.222465][T23357] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4254'. [ 1237.307661][T23357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1237.372066][T23357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1237.415276][T23366] bond2: entered promiscuous mode [ 1237.421440][T23366] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1238.450247][T23392] zonefs (nullb0) ERROR: Not a zoned block device [ 1238.820419][T23393] syzkaller0: entered promiscuous mode [ 1238.837983][ T30] audit: type=1400 audit(2000000842.291:1660): avc: denied { bind } for pid=23394 comm="syz.0.4263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1238.858065][T23393] syzkaller0: entered allmulticast mode [ 1238.869532][ T30] audit: type=1400 audit(2000000842.291:1661): avc: denied { name_bind } for pid=23394 comm="syz.0.4263" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1238.892307][ T30] audit: type=1400 audit(2000000842.291:1662): avc: denied { node_bind } for pid=23394 comm="syz.0.4263" saddr=ffff:ffff:: src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1239.003143][T23386] input: syz0 as /devices/virtual/input/input41 [ 1239.080219][T23401] loop2: detected capacity change from 0 to 7 [ 1239.099627][T23393] tipc: Enabled bearer , priority 0 [ 1239.144262][T23401] Dev loop2: unable to read RDB block 7 [ 1239.195096][T23401] loop2: AHDI p1 p2 p3 [ 1239.239601][T23401] loop2: partition table partially beyond EOD, truncated [ 1239.246821][T23401] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1239.317898][T23401] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1239.637627][T23388] tipc: Resetting bearer [ 1239.799907][T23388] tipc: Disabling bearer [ 1240.121454][T23417] zonefs (nullb0) ERROR: Not a zoned block device [ 1241.412231][ T30] audit: type=1800 audit(2000000844.832:1663): pid=23427 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.4270" name="bus" dev="overlay" ino=1122 res=0 errno=0 [ 1241.843734][T23436] dlm: no local IP address has been set [ 1241.849713][T23436] dlm: cannot start dlm midcomms -107 [ 1242.456939][ T5820] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1242.620270][ T5820] usb 2-1: Using ep0 maxpacket: 32 [ 1242.631912][ T5820] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1242.648837][ T5820] usb 2-1: config 0 has no interface number 0 [ 1242.673921][ T5820] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1242.692710][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.710982][ T5820] usb 2-1: Product: syz [ 1243.272910][ T5820] usb 2-1: Manufacturer: syz [ 1243.279903][ T5820] usb 2-1: SerialNumber: syz [ 1243.305628][ T5820] usb 2-1: config 0 descriptor?? [ 1243.596896][T23466] dlm: no local IP address has been set [ 1243.602640][T23466] dlm: cannot start dlm midcomms -107 [ 1244.725027][T23476] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4284'. [ 1245.652159][ T30] audit: type=1800 audit(2000000849.045:1664): pid=23474 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.4285" name="bus" dev="overlay" ino=1220 res=0 errno=0 [ 1245.852209][T23485] loop2: detected capacity change from 0 to 7 [ 1245.860404][T18417] loop2: [POWERTEC] p1 p2 p3 [ 1245.866422][T18417] loop2: p1 start 1852400175 is beyond EOD, truncated [ 1245.873470][T18417] loop2: p2 size 524288 extends beyond EOD, truncated [ 1245.886198][T18417] loop2: p3 start 1936093797 is beyond EOD, truncated [ 1245.902974][T23485] loop2: [POWERTEC] p1 p2 p3 [ 1245.933875][ T5820] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 1245.975490][T23485] loop2: p1 start 1852400175 is beyond EOD, truncated [ 1245.976407][ T5820] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1246.004741][ T5820] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1246.017595][T23485] loop2: p2 size 524288 extends beyond EOD, truncated [ 1246.028025][T23485] loop2: p3 start 1936093797 is beyond EOD, truncated [ 1246.038529][ T5820] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 1246.068226][ T5820] usb 2-1: USB disconnect, device number 51 [ 1246.164940][T16174] udevd[16174]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 1246.308813][T16174] udevd[16174]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 1246.328672][T23504] syzkaller0: entered promiscuous mode [ 1246.360753][T23504] syzkaller0: entered allmulticast mode [ 1246.439460][T23504] tipc: Enabled bearer , priority 0 [ 1246.654391][T23503] tipc: Resetting bearer [ 1246.660267][ T5820] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1246.725729][T23503] tipc: Disabling bearer [ 1246.835165][ T5820] usb 2-1: Using ep0 maxpacket: 8 [ 1246.862346][ T5820] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1246.880646][ T5820] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1246.922440][ T5820] usb 2-1: New USB device found, idVendor=07c0, idProduct=1504, bcdDevice=30.22 [ 1246.942291][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.605765][ T30] audit: type=1800 audit(2000000851.066:1665): pid=23514 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.9.4297" name="bus" dev="overlay" ino=1106 res=0 errno=0 [ 1247.666745][ T5820] usb 2-1: config 0 descriptor?? [ 1247.677501][ T5820] iowarrior 2-1:0.0: no interrupt-out endpoint found [ 1247.881011][T19931] usb 2-1: USB disconnect, device number 52 [ 1247.956307][ T30] audit: type=1400 audit(2000000851.416:1666): avc: denied { read } for pid=23518 comm="syz.6.4286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1250.590623][ T30] audit: type=1400 audit(2000000854.057:1667): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=40010 daddr=10.128.1.19 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1250.701039][T23531] dlm: no local IP address has been set [ 1250.709826][T23531] dlm: cannot start dlm midcomms -107 [ 1250.710851][T23537] netlink: 'syz.8.4304': attribute type 39 has an invalid length. [ 1250.727002][T23535] netlink: 'syz.6.4303': attribute type 39 has an invalid length. [ 1251.068218][T23541] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4306'. [ 1251.089936][T23544] bond2: entered promiscuous mode [ 1251.095834][T23544] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1251.121450][T23541] tmpfs: Unknown parameter 'h‚Qï6Ò4͈' [ 1251.239426][T23551] fuse: Unknown parameter '0x00000000000000040000000000000000000000000000000000000000' [ 1253.048277][T19932] libceph: connect (1)[c::]:6789 error -101 [ 1253.067061][T19932] libceph: mon0 (1)[c::]:6789 connect error [ 1253.338231][T19931] libceph: connect (1)[c::]:6789 error -101 [ 1253.850409][T23576] syz.8.4315 (23576): drop_caches: 2 [ 1253.951703][T19931] libceph: mon0 (1)[c::]:6789 connect error [ 1253.988869][T23580] loop3: detected capacity change from 0 to 7 [ 1254.046814][T23580] Dev loop3: unable to read RDB block 7 [ 1254.113488][T23580] loop3: unable to read partition table [ 1254.143814][T23567] ceph: No mds server is up or the cluster is laggy [ 1254.155955][T23580] loop3: partition table beyond EOD, truncated [ 1254.257742][T23580] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1255.872851][T23599] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4323'. [ 1255.905193][ T30] audit: type=1400 audit(2000000859.380:1668): avc: denied { create } for pid=23596 comm="syz.0.4322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 1255.948508][T23602] FAULT_INJECTION: forcing a failure. [ 1255.948508][T23602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1255.958536][ T30] audit: type=1400 audit(2000000859.420:1669): avc: denied { getopt } for pid=23596 comm="syz.0.4322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1256.021572][T23602] CPU: 0 UID: 0 PID: 23602 Comm: syz.9.4324 Tainted: G L syzkaller #0 PREEMPT(full) [ 1256.021603][T23602] Tainted: [L]=SOFTLOCKUP [ 1256.021610][T23602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1256.021622][T23602] Call Trace: [ 1256.021628][T23602] [ 1256.021635][T23602] dump_stack_lvl+0x100/0x190 [ 1256.021670][T23602] should_fail_ex.cold+0x5/0xa [ 1256.021695][T23602] _copy_from_user+0x2e/0xd0 [ 1256.021723][T23602] kstrtouint_from_user+0xd6/0x1d0 [ 1256.021745][T23602] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1256.021765][T23602] ? __lock_acquire+0x4a5/0x2630 [ 1256.021797][T23602] ? lock_acquire+0x1cf/0x380 [ 1256.021831][T23602] proc_fail_nth_write+0x83/0x220 [ 1256.021856][T23602] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1256.021889][T23602] vfs_write+0x2aa/0x1070 [ 1256.021918][T23602] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1256.021946][T23602] ? __pfx_vfs_write+0x10/0x10 [ 1256.021971][T23602] ? __fget_files+0x215/0x3d0 [ 1256.021996][T23602] ? __fget_files+0x21f/0x3d0 [ 1256.022022][T23602] ksys_write+0x12a/0x250 [ 1256.022050][T23602] ? __pfx_ksys_write+0x10/0x10 [ 1256.022083][T23602] do_syscall_64+0x106/0xf80 [ 1256.022101][T23602] ? clear_bhb_loop+0x40/0x90 [ 1256.022124][T23602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.022142][T23602] RIP: 0033:0x7f472435cfce [ 1256.022157][T23602] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1256.022174][T23602] RSP: 002b:00007f47251fafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1256.022191][T23602] RAX: ffffffffffffffda RBX: 00007f47251fb6c0 RCX: 00007f472435cfce [ 1256.022202][T23602] RDX: 0000000000000001 RSI: 00007f47251fb0a0 RDI: 0000000000000004 [ 1256.022213][T23602] RBP: 00007f47251fb090 R08: 0000000000000000 R09: 0000000000000000 [ 1256.022223][T23602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1256.022234][T23602] R13: 00007f4724616038 R14: 00007f4724615fa0 R15: 00007ffde46d79e8 [ 1256.022260][T23602] [ 1256.241074][T23609] netlink: zone id is out of range [ 1256.246207][T23609] netlink: zone id is out of range [ 1256.251391][T23609] netlink: zone id is out of range [ 1256.256529][T23609] netlink: zone id is out of range [ 1256.261687][T23609] netlink: zone id is out of range [ 1256.266905][T23609] netlink: zone id is out of range [ 1256.272636][T23609] netlink: zone id is out of range [ 1256.277753][T23609] netlink: zone id is out of range [ 1256.283018][T23609] netlink: zone id is out of range [ 1256.288684][T23609] netlink: zone id is out of range [ 1256.854718][T23612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1256.927148][T23616] syzkaller0: entered promiscuous mode [ 1256.944506][T23616] syzkaller0: entered allmulticast mode [ 1256.996333][T23609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1257.035614][T23609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1257.386877][T23628] tipc: Enabled bearer , priority 0 [ 1257.401557][T23615] tipc: Resetting bearer [ 1257.456521][T23615] tipc: Disabling bearer [ 1257.533092][T23627] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4329'. [ 1257.549266][T23627] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4329'. [ 1257.832569][ T30] audit: type=1400 audit(2000000861.221:1670): avc: denied { write } for pid=23640 comm="syz.9.4334" name="usbmon3" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1257.869250][T14491] usb 2-1: new low-speed USB device number 53 using dummy_hcd [ 1258.118212][T14491] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1258.145393][T14491] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1258.276277][T14491] usb 2-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 1258.378199][T14491] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.458165][T14491] usb 2-1: config 0 descriptor?? [ 1258.599335][T23657] netlink: 'syz.0.4340': attribute type 39 has an invalid length. [ 1258.617329][ T30] audit: type=1400 audit(2000000862.081:1671): avc: denied { load_policy } for pid=23655 comm="syz.6.4339" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1258.640010][T23658] SELinux: policydb magic number 0x32923e81 does not match expected magic number 0xf97cff8c [ 1258.671009][T23658] SELinux: failed to load policy [ 1258.679000][T14491] usb 2-1: USB disconnect, device number 53 [ 1260.255181][T23666] syzkaller0: entered promiscuous mode [ 1260.306879][T23666] syzkaller0: entered allmulticast mode [ 1260.514596][T23666] tipc: Enabled bearer , priority 0 [ 1260.676233][T23659] tipc: Resetting bearer [ 1260.854188][T23659] tipc: Disabling bearer [ 1260.935732][T23693] binder: BINDER_SET_CONTEXT_MGR already set [ 1260.941933][T23693] binder: 23692:23693 ioctl 4018620d 200000000040 returned -16 [ 1261.133822][T23697] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:0 [ 1262.517611][T23703] loop6: detected capacity change from 0 to 524287999 [ 1262.554702][T23703] buffer_io_error: 56 callbacks suppressed [ 1262.554721][T23703] Buffer I/O error on dev loop6, logical block 0, async page read [ 1262.704051][T23718] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1262.743767][T23703] Buffer I/O error on dev loop6, logical block 0, async page read [ 1262.849285][T23719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4356'. [ 1262.867225][T23703] Buffer I/O error on dev loop6, logical block 0, async page read [ 1262.899107][T23719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4356'. [ 1262.929623][T23703] Buffer I/O error on dev loop6, logical block 0, async page read [ 1262.946198][T23703] Buffer I/O error on dev loop6, logical block 0, async page read [ 1262.981736][T23703] Buffer I/O error on dev loop6, logical block 0, async page read [ 1263.017681][T23703] Buffer I/O error on dev loop6, logical block 0, async page read [ 1263.026402][T23703] Buffer I/O error on dev loop6, logical block 0, async page read [ 1263.038229][T23703] ldm_validate_partition_table(): Disk read failed. [ 1263.057036][T23703] Buffer I/O error on dev loop6, logical block 0, async page read [ 1263.082709][T23703] Buffer I/O error on dev loop6, logical block 0, async page read [ 1263.092910][T23703] Dev loop6: unable to read RDB block 0 [ 1263.116759][T23703] loop6: unable to read partition table [ 1263.124194][T15780] ldm_validate_partition_table(): Disk read failed. [ 1263.131332][T15780] Dev loop6: unable to read RDB block 0 [ 1263.137802][T15780] loop6: unable to read partition table [ 1263.147793][T23703] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1263.158331][T23711] ldm_validate_partition_table(): Disk read failed. [ 1263.174115][T23711] Dev loop6: unable to read RDB block 0 [ 1263.182140][T23711] loop6: unable to read partition table [ 1263.203553][T23711] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1263.314458][T19932] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1263.453619][ T5179] ldm_validate_partition_table(): Disk read failed. [ 1263.472198][ T5179] Dev loop6: unable to read RDB block 0 [ 1263.486619][ T5179] loop6: unable to read partition table [ 1263.487820][T19932] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1263.519555][T19932] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1263.606414][T19932] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1263.644912][T19932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.757719][T23723] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1263.767708][T19932] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1263.854312][T23727] zonefs (nullb0) ERROR: Not a zoned block device [ 1264.185484][T14478] dvb-usb: did not find the firmware file 'dvb-usb-vp7045-01.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1264.216074][T14478] dvb_usb_vp7045 7-1:6.3: probe with driver dvb_usb_vp7045 failed with error -110 [ 1264.232381][T14478] dvb-usb: found a 'Twinhan USB2.0 DVB-T receiver (TwinhanDTV Alpha/MagicBox II)' in cold state, will try to load a firmware [ 1264.265861][T14478] usb 7-1: Direct firmware load for dvb-usb-vp7045-01.fw failed with error -2 [ 1264.332778][T14478] usb 7-1: Falling back to sysfs fallback for: dvb-usb-vp7045-01.fw [ 1264.421036][ T5820] usb 2-1: USB disconnect, device number 54 [ 1266.899487][T23741] fuse: Unknown parameter '0x00000000000000040000000000000000000000000000000000000000' [ 1268.794003][T19931] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1268.985115][T19931] usb 10-1: Using ep0 maxpacket: 32 [ 1268.991124][T19931] usb 10-1: no configurations [ 1268.996326][T19931] usb 10-1: can't read configurations, error -22 [ 1269.163936][T23774] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4373'. [ 1270.093492][T19931] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1271.399300][T19931] usb 10-1: Using ep0 maxpacket: 32 [ 1271.405259][T19931] usb 10-1: no configurations [ 1271.409970][T19931] usb 10-1: can't read configurations, error -22 [ 1271.418825][T19931] usb usb10-port1: attempt power cycle [ 1271.862821][T23791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4376'. [ 1271.878238][T23791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4376'. [ 1272.234385][T23798] tipc: Enabled bearer , priority 0 [ 1273.408104][ T30] audit: type=1800 audit(2000000876.368:1672): pid=23806 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.9.4379" name="bus" dev="overlay" ino=1195 res=0 errno=0 [ 1273.464563][T23786] tipc: Disabling bearer [ 1273.950661][T23809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1273.978199][T23809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1274.376545][T19931] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1275.078679][T19931] usb 9-1: Using ep0 maxpacket: 16 [ 1275.089418][T19931] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1275.119865][T19931] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1275.490902][T23831] netlink: 'syz.1.4386': attribute type 4 has an invalid length. [ 1275.500387][T19931] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 16384, setting to 1024 [ 1275.517432][T19931] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1275.540319][T23831] netlink: 'syz.1.4386': attribute type 4 has an invalid length. [ 1275.573432][T19931] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1275.607409][T19931] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1275.617553][T19931] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1275.627382][T19931] usb 9-1: Manufacturer: syz [ 1275.638671][T19931] usb 9-1: config 0 descriptor?? [ 1275.981732][T19931] rc_core: IR keymap rc-hauppauge not found [ 1275.993756][T19931] Registered IR keymap rc-empty [ 1275.996019][T23845] netlink: 148 bytes leftover after parsing attributes in process `syz.9.4391'. [ 1276.017526][T19931] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1276.050678][T19931] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1276.062931][T23847] af_packet: tpacket_rcv: packet too big, clamped from 3698 to 4294967272. macoff=96 [ 1276.083907][T19931] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1276.112140][T19931] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input42 [ 1276.226972][T19931] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1276.260897][T19931] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1276.282067][T23848] netlink: 'syz.9.4392': attribute type 1 has an invalid length. [ 1276.289825][T23848] netlink: 224 bytes leftover after parsing attributes in process `syz.9.4392'. [ 1276.320164][T19931] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1276.341068][T19931] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1276.360290][T19931] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1276.380199][T19931] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1276.403708][T19931] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1276.450847][T19931] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1276.471350][T19931] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1276.501597][T19931] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1276.527277][T19931] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1276.560026][T19931] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1276.603114][T19931] usb 9-1: USB disconnect, device number 19 [ 1277.128344][T23865] netlink: 'syz.6.4396': attribute type 3 has an invalid length. [ 1277.136433][T23865] netlink: 'syz.6.4396': attribute type 3 has an invalid length. [ 1277.155742][T23865] netlink: 'syz.6.4396': attribute type 3 has an invalid length. [ 1277.163998][T23865] netlink: 'syz.6.4396': attribute type 3 has an invalid length. [ 1277.172887][T23865] netlink: 'syz.6.4396': attribute type 3 has an invalid length. [ 1277.181479][T23865] netlink: 'syz.6.4396': attribute type 3 has an invalid length. [ 1277.189533][T23865] netlink: 'syz.6.4396': attribute type 3 has an invalid length. [ 1277.387752][T23855] ceph: No mds server is up or the cluster is laggy [ 1277.588009][T23876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4395'. [ 1277.659690][T23876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4395'. [ 1279.403123][T23900] fuse: Unknown parameter '0xffffffffffffffff' [ 1279.484061][T23903] syzkaller0: entered promiscuous mode [ 1279.509374][T23904] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4407'. [ 1279.572409][T23903] syzkaller0: entered allmulticast mode [ 1279.668085][T23903] tipc: Enabled bearer , priority 0 [ 1279.678621][T23902] tipc: Resetting bearer [ 1279.693706][T23902] tipc: Disabling bearer [ 1279.800782][T23909] xt_connbytes: Forcing CT accounting to be enabled [ 1279.828340][T23909] x_tables: ip_tables: sctp match: only valid for protocol 132 [ 1279.993360][ T5820] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1280.168141][ T5820] usb 9-1: device descriptor read/64, error -71 [ 1280.643182][T23917] validate_nla: 45 callbacks suppressed [ 1280.643196][T23917] netlink: 'syz.1.4412': attribute type 13 has an invalid length. [ 1280.827792][ T5820] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1280.967732][ T5820] usb 9-1: device descriptor read/64, error -71 [ 1281.077888][ T5820] usb usb9-port1: attempt power cycle [ 1282.587579][T23954] syzkaller0: entered promiscuous mode [ 1282.593198][T23954] syzkaller0: entered allmulticast mode [ 1282.854327][T23961] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4422'. [ 1282.888388][T23959] tipc: Enabled bearer , priority 0 [ 1284.353163][T23946] tipc: Resetting bearer [ 1284.403275][T23971] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1284.498856][T23946] tipc: Disabling bearer [ 1284.548232][T19931] tipc: Node number set to 3336622369 [ 1284.659875][T23976] netlink: 'syz.6.4426': attribute type 1 has an invalid length. [ 1285.260952][T23972] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4427'. [ 1285.277939][T23972] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4427'. [ 1285.372144][T23982] net_ratelimit: 44 callbacks suppressed [ 1285.372159][T23982] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1285.384509][T23982] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1285.430525][T23972] hsr_slave_1 (unregistering): left promiscuous mode [ 1286.515674][T14491] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1286.570488][T23993] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4432'. [ 1286.628474][T23996] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4432'. [ 1286.725464][T14491] usb 10-1: Using ep0 maxpacket: 16 [ 1286.742159][T14491] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1286.762237][T14491] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1286.776857][T14491] usb 10-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1286.806898][T14491] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.855337][T14491] usb 10-1: Product: å°ºèžã„µê‹‘éŠï ºç°–燖竟漱ફ黬ç»æ»§ [ 1286.978471][T14491] usb 10-1: Manufacturer: Щ [ 1286.989799][T14491] usb 10-1: SerialNumber: 艡é§è§§éž£ç°î•µï—¶ëˆ°ëƒ“綪鷭⑛⮪å§à¢®êœ¤é‚¦æ­´ä€¢í’©é‡‹é¥ºË·äƒ¿é©³ïƒã³ºï¯£ì—µë‘šâ‡£á·€æ®‹èª¡äŠ½î—­ë¿Šï “â¢ç±€ç…ªë´®ì¼¬ãŒ£ã¥Œé—¨﫤綺勢Ꞁ᡻ëç£å€Œâ®†J [ 1287.146477][T24007] netlink: 'syz.8.4436': attribute type 4 has an invalid length. [ 1287.157565][T24007] netlink: 'syz.8.4436': attribute type 4 has an invalid length. [ 1287.471098][T14491] usb 10-1: Audio class v2/v3 interfaces need an interface association [ 1287.570947][T14491] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1287.722287][T24009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1287.731212][T24009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1288.152258][T14491] usb 10-1: 2:1 : can't get High Capability descriptor [ 1288.436407][T24012] loop2: detected capacity change from 0 to 7 [ 1288.453927][T24012] loop2: [POWERTEC] p1 p2 p3 [ 1288.465448][T24012] loop2: p1 start 1852400175 is beyond EOD, truncated [ 1288.487915][T24012] loop2: p2 size 524288 extends beyond EOD, truncated [ 1288.509537][T24012] loop2: p3 start 1936093797 is beyond EOD, truncated [ 1288.646874][T16174] udevd[16174]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 1291.316045][T14079] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1291.332831][T14079] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1291.340997][T14079] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1291.351676][T14079] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1291.359522][T14079] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1292.369073][T24038] chnl_net:caif_netlink_parms(): no params data found [ 1292.373462][T24055] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4450'. [ 1292.643594][T24057] xt_connbytes: Forcing CT accounting to be enabled [ 1292.650627][T24057] x_tables: ip_tables: sctp match: only valid for protocol 132 [ 1293.028473][T10902] usb 10-1: USB disconnect, device number 23 [ 1293.167414][T24038] bridge0: port 1(bridge_slave_0) entered blocking state [ 1293.210287][T24038] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.255413][T24038] bridge_slave_0: entered allmulticast mode [ 1293.330993][T24038] bridge_slave_0: entered promiscuous mode [ 1293.357415][T24038] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.377755][T24038] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.396523][T24038] bridge_slave_1: entered allmulticast mode [ 1293.416838][T24038] bridge_slave_1: entered promiscuous mode [ 1293.431537][T14079] Bluetooth: hci3: command tx timeout [ 1293.482705][T24038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1293.507140][T24038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1293.561640][T14491] usb 9-1: new full-speed USB device number 23 using dummy_hcd [ 1293.571583][T24038] team0: Port device team_slave_0 added [ 1293.585209][T24038] team0: Port device team_slave_1 added [ 1293.661731][T24038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1293.668666][T24038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1293.703418][T24038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1293.751125][T24038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1293.769528][T24038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1293.837770][T14491] usb 9-1: config index 0 descriptor too short (expected 5668, got 36) [ 1293.850327][T14491] usb 9-1: config 3 has too many interfaces: 84, using maximum allowed: 32 [ 1294.048425][T14491] usb 9-1: config 3 has 1 interface, different from the descriptor's value: 84 [ 1294.073784][T24038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1294.087895][T14491] usb 9-1: config 3 has no interface number 0 [ 1294.097741][T14491] usb 9-1: config 3 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1294.116675][T14491] usb 9-1: config 3 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1294.147522][T24038] hsr_slave_0: entered promiscuous mode [ 1294.158929][T14491] usb 9-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1294.173257][T14491] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.183398][T24038] hsr_slave_1: entered promiscuous mode [ 1294.198266][T14491] usb 9-1: Product: syz [ 1294.203190][T24038] debugfs: 'hsr0' already exists in 'hsr' [ 1294.208899][T24038] Cannot create hsr debugfs directory [ 1294.214711][T14491] usb 9-1: Manufacturer: syz [ 1294.219283][T14491] usb 9-1: SerialNumber: syz [ 1294.265868][T24077] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1294.853592][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1294.887567][T24077] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4452'. [ 1294.992358][T14491] usb-storage 9-1:3.20: USB Mass Storage device detected [ 1295.021485][T14491] usb-storage 9-1:3.20: Quirks match for vid 04e6 pid 000b: 4 [ 1295.036791][T14491] scsi host1: usb-storage 9-1:3.20 [ 1295.057123][T14491] usb 9-1: USB disconnect, device number 23 [ 1295.196395][T24085] ceph: No mds server is up or the cluster is laggy [ 1295.510552][T14079] Bluetooth: hci3: command tx timeout [ 1296.537929][T24153] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1296.700407][T24156] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4461'. [ 1296.709299][T24156] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4461'. [ 1297.230768][ T5820] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 1297.278910][T24038] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1297.317531][T24038] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1297.353072][T24038] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1297.397736][ T5820] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1297.406932][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.435558][ T5820] usb 2-1: config 0 descriptor?? [ 1297.436837][T24038] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1297.453117][ T5820] cp210x 2-1:0.0: cp210x converter detected [ 1297.592257][T14079] Bluetooth: hci3: command tx timeout [ 1297.693917][T24038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1297.727478][T24038] 8021q: adding VLAN 0 to HW filter on device team0 [ 1297.742058][T17115] bridge0: port 1(bridge_slave_0) entered blocking state [ 1297.749261][T17115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1297.791756][T17115] bridge0: port 2(bridge_slave_1) entered blocking state [ 1297.798901][T17115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1297.898549][ T5820] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1298.045277][T24189] zonefs (nullb0) ERROR: Not a zoned block device [ 1298.565857][T24038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1298.573771][ T30] audit: type=1400 audit(2000000902.061:1673): avc: denied { ioctl } for pid=24195 comm="syz.8.4469" path="socket:[83733]" dev="sockfs" ino=83733 ioctlcmd=0x586d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1298.922238][ T30] audit: type=1400 audit(2000000902.401:1674): avc: denied { read } for pid=24203 comm="syz.9.4471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1299.411600][T10902] usb 2-1: USB disconnect, device number 55 [ 1299.557981][T10902] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1299.660575][T24224] tipc: Enabled bearer , priority 0 [ 1299.688441][T14079] Bluetooth: hci3: command tx timeout [ 1299.788471][T10902] cp210x 2-1:0.0: device disconnected [ 1299.790799][T24223] tipc: Disabling bearer [ 1299.837969][T24230] syz_tun: entered allmulticast mode [ 1299.946453][T24038] veth0_vlan: entered promiscuous mode [ 1299.996220][T24038] veth1_vlan: entered promiscuous mode [ 1300.077347][T24038] veth0_macvtap: entered promiscuous mode [ 1300.144274][T24038] veth1_macvtap: entered promiscuous mode [ 1300.145579][ T5820] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1300.197537][T24038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1300.221586][T24038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1300.274292][T17199] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.404414][ T5820] usb 9-1: Using ep0 maxpacket: 16 [ 1300.437197][ T5820] usb 9-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1300.675124][ T5820] usb 9-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1300.805973][ T5820] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1301.169192][ T5820] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.589538][ T5820] mcp2221 0003:04D8:00DD.000C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 1301.692593][T17199] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1301.709307][T17199] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1301.719855][T17199] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1301.912256][T17065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1301.929376][T17065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1302.123491][T24266] netlink: 'syz.1.4479': attribute type 21 has an invalid length. [ 1302.137372][T17135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1302.148265][T17135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1302.557957][T24275] bond1: option lp_interval: invalid value (0) [ 1302.564297][T24275] bond1: option lp_interval: allowed values 1 - 2147483647 [ 1302.579721][T24275] bond1 (unregistering): Released all slaves [ 1302.816716][ T5820] usb 9-1: reset high-speed USB device number 24 using dummy_hcd [ 1303.876577][T24298] overlayfs: failed to resolve './file1': -2 [ 1304.587846][T24305] dlm: no local IP address has been set [ 1304.593474][T24305] dlm: cannot start dlm midcomms -107 [ 1304.783626][T14494] usb 9-1: USB disconnect, device number 24 [ 1306.925503][ T5820] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1307.734946][ T5820] usb 5-1: Using ep0 maxpacket: 16 [ 1307.753595][ T5820] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1307.792690][ T5820] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1308.438104][ T5820] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1308.447415][ T5820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.325810][ T5820] mcp2221 0003:04D8:00DD.000D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 1310.622850][T14494] usb 5-1: reset high-speed USB device number 20 using dummy_hcd [ 1310.804739][T24376] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4498'. [ 1311.341892][T24381] overlayfs: failed to resolve './file1': -2 [ 1311.606754][T24379] dlm: no local IP address has been set [ 1311.612812][T24379] dlm: cannot start dlm midcomms -107 [ 1312.143141][ T5820] usb 5-1: USB disconnect, device number 20 [ 1312.155978][T24392] hpfs: Bad magic ... probably not HPFS [ 1312.584849][T24401] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4505'. [ 1314.274886][T24431] misc userio: Invalid payload size [ 1314.280304][T24431] misc userio: No port type given on /dev/userio [ 1316.215972][T24456] overlayfs: failed to resolve './file1': -2 [ 1317.287488][T24466] netlink: 'syz.6.4515': attribute type 3 has an invalid length. [ 1319.377001][T24465] netlink: 348 bytes leftover after parsing attributes in process `syz.9.4514'. [ 1319.567387][T24482] netlink: 'syz.8.4518': attribute type 4 has an invalid length. [ 1319.664433][T24482] netlink: 'syz.8.4518': attribute type 4 has an invalid length. [ 1322.217021][ T5822] Bluetooth: hci6: command 0x0406 tx timeout [ 1322.779460][T24536] overlayfs: failed to resolve './file1': -2 [ 1323.686700][T24540] FAULT_INJECTION: forcing a failure. [ 1323.686700][T24540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1323.699778][T24540] CPU: 0 UID: 0 PID: 24540 Comm: syz.8.4527 Tainted: G L syzkaller #0 PREEMPT(full) [ 1323.699796][T24540] Tainted: [L]=SOFTLOCKUP [ 1323.699800][T24540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1323.699807][T24540] Call Trace: [ 1323.699811][T24540] [ 1323.699816][T24540] dump_stack_lvl+0x100/0x190 [ 1323.699837][T24540] should_fail_ex.cold+0x5/0xa [ 1323.699852][T24540] strncpy_from_user+0x3b/0x2d0 [ 1323.699869][T24540] do_getname+0x78/0x390 [ 1323.699884][T24540] user_path_at+0x26/0x60 [ 1323.699895][T24540] __x64_sys_mount+0x1fb/0x310 [ 1323.699909][T24540] ? __pfx___x64_sys_mount+0x10/0x10 [ 1323.699927][T24540] do_syscall_64+0x106/0xf80 [ 1323.699939][T24540] ? clear_bhb_loop+0x40/0x90 [ 1323.699953][T24540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1323.699964][T24540] RIP: 0033:0x7f782519c799 [ 1323.699973][T24540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1323.699984][T24540] RSP: 002b:00007f7826096028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1323.699995][T24540] RAX: ffffffffffffffda RBX: 00007f7825415fa0 RCX: 00007f782519c799 [ 1323.700002][T24540] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 1323.700008][T24540] RBP: 00007f7826096090 R08: 0000200000000380 R09: 0000000000000000 [ 1323.700014][T24540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1323.700021][T24540] R13: 00007f7825416038 R14: 00007f7825415fa0 R15: 00007ffc35817968 [ 1323.700034][T24540] [ 1324.546161][T24549] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1325.337630][T14478] dvb-usb: did not find the firmware file 'dvb-usb-vp7045-01.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1325.358823][T14478] dvb_usb_vp7045 7-1:6.79: probe with driver dvb_usb_vp7045 failed with error -110 [ 1325.378235][T14478] dvb-usb: found a 'Twinhan USB2.0 DVB-T receiver (TwinhanDTV Alpha/MagicBox II)' in cold state, will try to load a firmware [ 1325.392060][T14478] usb 7-1: Direct firmware load for dvb-usb-vp7045-01.fw failed with error -2 [ 1325.402399][T14478] usb 7-1: Falling back to sysfs fallback for: dvb-usb-vp7045-01.fw [ 1326.873384][T24586] FAULT_INJECTION: forcing a failure. [ 1326.873384][T24586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1327.203201][T24586] CPU: 1 UID: 0 PID: 24586 Comm: syz.4.4536 Tainted: G L syzkaller #0 PREEMPT(full) [ 1327.203234][T24586] Tainted: [L]=SOFTLOCKUP [ 1327.203241][T24586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1327.203251][T24586] Call Trace: [ 1327.203257][T24586] [ 1327.203265][T24586] dump_stack_lvl+0x100/0x190 [ 1327.203299][T24586] should_fail_ex.cold+0x5/0xa [ 1327.203324][T24586] _copy_to_user+0x32/0xd0 [ 1327.203365][T24586] simple_read_from_buffer+0xcb/0x170 [ 1327.203402][T24586] proc_fail_nth_read+0x1af/0x230 [ 1327.203427][T24586] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1327.203453][T24586] ? rw_verify_area+0xce/0x6d0 [ 1327.203478][T24586] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1327.203502][T24586] vfs_read+0x1e4/0xb30 [ 1327.203531][T24586] ? __pfx_vfs_read+0x10/0x10 [ 1327.203564][T24586] ? __fget_files+0x21f/0x3d0 [ 1327.203590][T24586] ksys_read+0x12a/0x250 [ 1327.203616][T24586] ? __pfx_ksys_read+0x10/0x10 [ 1327.203649][T24586] do_syscall_64+0x106/0xf80 [ 1327.203669][T24586] ? clear_bhb_loop+0x40/0x90 [ 1327.203691][T24586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.203709][T24586] RIP: 0033:0x7fc02615cfce [ 1327.203724][T24586] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1327.203741][T24586] RSP: 002b:00007fc027063fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1327.203759][T24586] RAX: ffffffffffffffda RBX: 00007fc0270646c0 RCX: 00007fc02615cfce [ 1327.203771][T24586] RDX: 000000000000000f RSI: 00007fc0270640a0 RDI: 0000000000000004 [ 1327.203781][T24586] RBP: 00007fc027064090 R08: 0000000000000000 R09: 0000000000000000 [ 1327.203791][T24586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1327.203804][T24586] R13: 00007fc026416038 R14: 00007fc026415fa0 R15: 00007fff246837d8 [ 1327.203830][T24586] [ 1328.063672][T24589] 9p: Bad value for 'rfdno' [ 1328.152122][T24589] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1328.798859][T24596] overlayfs: failed to resolve './file1': -2 [ 1329.325861][T24608] syzkaller0: entered promiscuous mode [ 1329.331429][T24608] syzkaller0: entered allmulticast mode [ 1330.430326][T24608] tipc: Enabled bearer , priority 0 [ 1330.757438][T24604] tipc: Resetting bearer [ 1330.855785][T24604] tipc: Disabling bearer [ 1331.112948][ T5889] IPVS: starting estimator thread 0... [ 1331.212540][T24623] IPVS: using max 77 ests per chain, 184800 per kthread [ 1331.952296][T24634] netlink: 148 bytes leftover after parsing attributes in process `syz.9.4549'. [ 1332.358103][T24644] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(4) [ 1332.364620][T24644] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1332.393734][T24640] bond3: Removing last ns target with arp_interval on [ 1332.452283][T24644] vhci_hcd vhci_hcd.0: Device attached [ 1332.584694][T24654] netlink: zone id is out of range [ 1332.596555][T24654] netlink: zone id is out of range [ 1332.602768][T24654] netlink: zone id is out of range [ 1332.865290][T24655] overlayfs: failed to resolve './file1': -2 [ 1333.548434][T24645] vhci_hcd: connection closed [ 1333.557952][T17197] vhci_hcd vhci_hcd.9: stop threads [ 1333.570155][T17197] vhci_hcd vhci_hcd.9: release socket [ 1333.634807][T17197] vhci_hcd vhci_hcd.9: disconnect device [ 1333.651060][T24654] netlink: zone id is out of range [ 1333.775848][T24654] netlink: zone id is out of range [ 1333.780983][T24654] netlink: zone id is out of range [ 1333.811633][T24654] netlink: zone id is out of range [ 1333.816835][T24654] netlink: zone id is out of range [ 1333.816842][T24658] batadv_slave_0: entered promiscuous mode [ 1333.952912][T24654] netlink: zone id is out of range [ 1333.955222][T24658] batman_adv: batadv0: Adding interface: macvtap1 [ 1333.964552][T24658] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1333.980973][T24654] netlink: zone id is out of range [ 1334.022051][T24654] netlink: zone id is out of range [ 1334.036281][T24658] batman_adv: batadv0: Interface activated: macvtap1 [ 1334.055638][T24654] netlink: zone id is out of range [ 1334.071206][T24654] netlink: zone id is out of range [ 1335.280670][ T5889] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1335.473555][T24676] bond3: option lp_interval: invalid value (0) [ 1335.479750][T24676] bond3: option lp_interval: allowed values 1 - 2147483647 [ 1335.491110][ T5889] usb 10-1: Using ep0 maxpacket: 32 [ 1335.497975][ T5889] usb 10-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1335.512460][ T5889] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.538438][ T5889] usb 10-1: config 0 descriptor?? [ 1335.579305][T24676] bond3 (unregistering): Released all slaves [ 1335.590813][ T5889] as10x_usb: device has been detected [ 1335.600526][ T5889] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1335.642255][ T5889] usb 10-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1335.789768][ T5889] as10x_usb: error during firmware upload part1 [ 1335.791156][ T5889] Registered device nBox DVB-T Dongle [ 1335.799797][ T5889] usb 10-1: USB disconnect, device number 24 [ 1336.166776][ T5889] Unregistered device nBox DVB-T Dongle [ 1336.168432][T24691] as102_open: can't find device for minor 0 [ 1336.199291][ T5889] as10x_usb: device has been disconnected [ 1336.616513][T24701] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1336.663438][T24706] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4564'. [ 1336.666747][T24701] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1337.003329][T24706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1337.091531][T24706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1337.184967][T24706] bond0 (unregistering): Released all slaves [ 1337.299977][T24711] bond4: entered promiscuous mode [ 1337.305458][T24711] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1337.941806][T19932] syz1: Port: 1 Link DOWN [ 1338.368966][T14491] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1338.518875][T14491] usb 9-1: Using ep0 maxpacket: 16 [ 1338.520727][T14491] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1338.521614][T14491] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1338.523340][T14491] usb 9-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1338.523366][T14491] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.523387][T14491] usb 9-1: Product: syz [ 1338.523402][T14491] usb 9-1: Manufacturer: syz [ 1338.523417][T14491] usb 9-1: SerialNumber: syz [ 1338.618977][T19932] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 1339.559315][T14491] usb 9-1: Audio class v2/v3 interfaces need an interface association [ 1339.559641][T14491] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1339.596625][T14491] usb 9-1: 2:1 : can't get High Capability descriptor [ 1339.880831][T19932] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1339.880865][T19932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.887891][T19932] usb 2-1: config 0 descriptor?? [ 1339.892944][T19932] cp210x 2-1:0.0: cp210x converter detected [ 1340.783533][T19932] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1341.073741][T24755] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4580'. [ 1341.785130][T19931] usb 9-1: USB disconnect, device number 25 [ 1342.254067][T24761] overlayfs: failed to resolve './file1': -2 [ 1342.893729][T10902] usb 2-1: USB disconnect, device number 56 [ 1342.932315][T10902] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1343.525334][T10902] cp210x 2-1:0.0: device disconnected [ 1343.936205][T10902] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1343.936768][T24771] syz_tun: entered allmulticast mode [ 1344.128867][T10902] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1344.139732][T10902] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1344.157960][T10902] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1344.167632][T10902] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1344.175801][T10902] usb 2-1: Product: syz [ 1344.186201][T10902] usb 2-1: Manufacturer: syz [ 1344.192815][T10902] usb 2-1: SerialNumber: syz [ 1344.201018][T10902] usb 2-1: config 0 descriptor?? [ 1344.222027][T10902] usb 2-1: selecting invalid altsetting 0 [ 1344.415639][T24781] FAULT_INJECTION: forcing a failure. [ 1344.415639][T24781] name failslab, interval 1, probability 0, space 0, times 0 [ 1344.444228][T10902] usb 2-1: USB disconnect, device number 57 [ 1344.469333][T24781] CPU: 0 UID: 0 PID: 24781 Comm: syz.9.4589 Tainted: G L syzkaller #0 PREEMPT(full) [ 1344.469351][T24781] Tainted: [L]=SOFTLOCKUP [ 1344.469356][T24781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1344.469362][T24781] Call Trace: [ 1344.469366][T24781] [ 1344.469371][T24781] dump_stack_lvl+0x100/0x190 [ 1344.469392][T24781] should_fail_ex.cold+0x5/0xa [ 1344.469406][T24781] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 1344.469422][T24781] should_failslab+0xc2/0x120 [ 1344.469434][T24781] __kmalloc_noprof+0xe0/0x850 [ 1344.469452][T24781] genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 1344.469472][T24781] genl_family_rcv_msg_doit+0xc7/0x300 [ 1344.469489][T24781] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1344.469509][T24781] ? bpf_lsm_capable+0x9/0x10 [ 1344.469520][T24781] ? security_capable+0x80/0x260 [ 1344.469540][T24781] genl_rcv_msg+0x560/0x800 [ 1344.469557][T24781] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1344.469571][T24781] ? __pfx_netlbl_cipsov4_remove+0x10/0x10 [ 1344.469587][T24781] ? __lock_acquire+0x4a5/0x2630 [ 1344.469606][T24781] netlink_rcv_skb+0x159/0x420 [ 1344.469620][T24781] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1344.469635][T24781] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1344.469654][T24781] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1344.469669][T24781] genl_rcv+0x28/0x40 [ 1344.469682][T24781] netlink_unicast+0x5aa/0x870 [ 1344.469697][T24781] ? __pfx_netlink_unicast+0x10/0x10 [ 1344.469715][T24781] netlink_sendmsg+0x8b0/0xda0 [ 1344.469731][T24781] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1344.469743][T24781] ? __pfx___might_fault+0x10/0x10 [ 1344.469762][T24781] ____sys_sendmsg+0x9e1/0xb70 [ 1344.469776][T24781] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1344.469790][T24781] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1344.469811][T24781] ___sys_sendmsg+0x190/0x1e0 [ 1344.469826][T24781] ? __pfx____sys_sendmsg+0x10/0x10 [ 1344.469858][T24781] __sys_sendmsg+0x170/0x220 [ 1344.469870][T24781] ? __pfx___sys_sendmsg+0x10/0x10 [ 1344.469890][T24781] do_syscall_64+0x106/0xf80 [ 1344.469902][T24781] ? clear_bhb_loop+0x40/0x90 [ 1344.469915][T24781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1344.469925][T24781] RIP: 0033:0x7f472439c799 [ 1344.469935][T24781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1344.469946][T24781] RSP: 002b:00007f47251fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1344.469957][T24781] RAX: ffffffffffffffda RBX: 00007f4724615fa0 RCX: 00007f472439c799 [ 1344.469968][T24781] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 1344.469975][T24781] RBP: 00007f47251fb090 R08: 0000000000000000 R09: 0000000000000000 [ 1344.469981][T24781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1344.469987][T24781] R13: 00007f4724616038 R14: 00007f4724615fa0 R15: 00007ffde46d79e8 [ 1344.470001][T24781] [ 1347.505894][T24814] syzkaller0: entered promiscuous mode [ 1347.511425][T24814] syzkaller0: entered allmulticast mode [ 1347.571299][T24811] dlm: no local IP address has been set [ 1347.577434][T24811] dlm: cannot start dlm midcomms -107 [ 1347.869509][T24814] tipc: Enabled bearer , priority 0 [ 1348.274605][T24806] tipc: Resetting bearer [ 1348.321068][T24806] tipc: Disabling bearer [ 1348.494857][T24824] dlm: no local IP address has been set [ 1348.500484][T24824] dlm: cannot start dlm midcomms -107 [ 1351.193751][T24848] syz_tun: entered allmulticast mode [ 1351.231106][T24845] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1351.440441][T24857] dlm: no local IP address has been set [ 1351.446335][T24857] dlm: cannot start dlm midcomms -107 [ 1351.857278][T24864] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1351.903619][ T30] audit: type=1400 audit(2000000955.368:1675): avc: denied { read } for pid=24860 comm="syz.8.4616" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1354.726462][T24887] loop2: detected capacity change from 0 to 7 [ 1354.765606][T24887] loop2: [POWERTEC] p1 p2 p3 [ 1354.780913][T24887] loop2: p1 start 1852400175 is beyond EOD, truncated [ 1354.787916][T24887] loop2: p2 size 524288 extends beyond EOD, truncated [ 1354.982120][T24887] loop2: p3 start 1936093797 is beyond EOD, truncated [ 1355.559970][T16174] udevd[16174]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 1355.792077][T24899] dlm: no local IP address has been set [ 1355.797645][T24899] dlm: cannot start dlm midcomms -107 [ 1356.011234][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1356.289804][T24897] dlm: no local IP address has been set [ 1356.312165][T24897] dlm: cannot start dlm midcomms -107 [ 1356.388424][T24910] tipc: Enabled bearer , priority 0 [ 1356.480173][T24909] fuse: Unknown parameter '0x00000000000000040000000000000000000000000000000000000000' [ 1356.500709][T24908] ucma_write: process 111 (syz.4.4629) changed security contexts after opening file descriptor, this is not allowed. [ 1356.814103][T24894] tipc: Disabling bearer [ 1359.072123][T24961] dlm: no local IP address has been set [ 1359.077774][T24961] dlm: cannot start dlm midcomms -107 [ 1359.422086][T24968] tipc: Enabling of bearer rejected, failed to enable media [ 1359.548352][T19932] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 1359.708266][ T30] audit: type=1400 audit(2000000963.212:1676): avc: denied { bind } for pid=24971 comm="syz.6.4644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1359.788979][ T30] audit: type=1400 audit(2000000963.262:1677): avc: denied { ioctl } for pid=24971 comm="syz.6.4644" path="socket:[87268]" dev="sockfs" ino=87268 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1359.861852][T19932] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1359.887071][T19932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.924242][T19932] usb 5-1: config 0 descriptor?? [ 1359.965378][T19932] cp210x 5-1:0.0: cp210x converter detected [ 1360.693537][ T30] audit: type=1400 audit(2000000964.212:1678): avc: denied { mount } for pid=24987 comm="syz.1.4650" name="/" dev="ramfs" ino=87363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1360.772155][T19932] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1362.309975][ T5820] usb 5-1: USB disconnect, device number 21 [ 1363.358161][ T5820] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1364.027188][ T5820] cp210x 5-1:0.0: device disconnected [ 1364.050139][T25011] dlm: no local IP address has been set [ 1364.055750][T25011] dlm: cannot start dlm midcomms -107 [ 1365.545447][T10902] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1365.845453][T10902] usb 10-1: Using ep0 maxpacket: 32 [ 1365.864419][T10902] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 9 [ 1366.015876][T10902] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 8241, setting to 1024 [ 1366.996527][T10902] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1367.006454][T10902] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.024595][T10902] usb 10-1: Product: syz [ 1367.028869][T10902] usb 10-1: Manufacturer: syz [ 1367.033682][T10902] usb 10-1: SerialNumber: syz [ 1367.155484][T10902] usb 10-1: config 0 descriptor?? [ 1367.182747][T10902] usb 10-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1367.400258][T14491] usb 10-1: USB disconnect, device number 25 [ 1367.415237][T17425] usb 10-1: Failed to submit usb control message: -71 [ 1367.436839][T17425] usb 10-1: unable to send the bmi data to the device: -71 [ 1367.464453][T17425] usb 10-1: unable to get target info from device [ 1367.481836][T17425] usb 10-1: could not get target info (-71) [ 1367.494676][T17425] usb 10-1: could not probe fw (-71) [ 1367.733533][ T5820] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1368.055481][ T5820] usb 2-1: Using ep0 maxpacket: 32 [ 1368.310134][ T5820] usb 2-1: config 250 has an invalid interface number: 230 but max is 0 [ 1368.548900][ T5820] usb 2-1: config 250 has no interface number 0 [ 1368.611688][ T5820] usb 2-1: config 250 interface 230 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1368.629991][ T5820] usb 2-1: config 250 interface 230 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1368.685766][ T5820] usb 2-1: config 250 interface 230 has no altsetting 0 [ 1368.778010][T25061] IPv6: NLM_F_CREATE should be specified when creating new route [ 1368.867584][T25061] vlan2: entered allmulticast mode [ 1368.933817][T25061] hsr0: entered allmulticast mode [ 1368.952726][T25061] hsr_slave_0: entered allmulticast mode [ 1368.964051][ T5820] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 1369.016766][T25061] hsr_slave_1: entered allmulticast mode [ 1369.132897][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.243878][ T5820] usb 2-1: Product: syz [ 1369.275863][ T5820] usb 2-1: Manufacturer: syz [ 1369.327747][ T5820] usb 2-1: SerialNumber: syz [ 1369.674488][ T30] audit: type=1400 audit(2000000973.207:1679): avc: denied { getopt } for pid=25042 comm="syz.1.4664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1369.726835][ T5820] ums-usbat 2-1:250.230: USB Mass Storage device detected [ 1369.770936][ T5820] ums-usbat 2-1:250.230: Quirks match for vid 0781 pid 0005: 1 [ 1369.867713][ T5820] ums-usbat 2-1:250.230: probe with driver ums-usbat failed with error -5 [ 1370.125572][ T5820] usb 2-1: USB disconnect, device number 58 [ 1370.564314][T25072] dlm: no local IP address has been set [ 1370.569943][T25072] dlm: cannot start dlm midcomms -107 [ 1371.253295][T25077] dlm: no local IP address has been set [ 1371.258861][T25077] dlm: cannot start dlm midcomms -107 [ 1371.566494][T25081] bond5: entered promiscuous mode [ 1371.613128][ T5820] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1371.618106][T25081] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1371.772447][ T5820] usb 9-1: Using ep0 maxpacket: 16 [ 1371.877449][ T5820] usb 9-1: config 1 has an invalid interface number: 58 but max is 0 [ 1371.970057][ T5820] usb 9-1: config 1 has no interface number 0 [ 1371.985482][ T5820] usb 9-1: config 1 interface 58 altsetting 6 bulk endpoint 0x8 has invalid maxpacket 1024 [ 1372.085705][ T5820] usb 9-1: config 1 interface 58 altsetting 6 bulk endpoint 0xB has invalid maxpacket 64 [ 1372.224301][ T5820] usb 9-1: config 1 interface 58 has no altsetting 0 [ 1372.253891][ T5820] usb 9-1: New USB device found, idVendor=0bfd, idProduct=0126, bcdDevice=bd.e4 [ 1372.263178][ T5820] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.339889][T14079] Bluetooth: hci2: Invalid handle: 0x20c9 > 0x0eff [ 1372.697750][ T5820] usb 9-1: Product: syz [ 1372.713357][ T5820] usb 9-1: Manufacturer: syz [ 1372.721246][ T5820] usb 9-1: SerialNumber: syz [ 1372.730396][T25079] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1372.738265][T25079] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1372.961956][ T5820] kvaser_usb 9-1:1.58: error -ENODEV: Cannot get usb endpoint(s) [ 1373.011654][T10902] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1373.059645][ T5820] usb 9-1: USB disconnect, device number 26 [ 1373.241496][T10902] usb 2-1: Using ep0 maxpacket: 32 [ 1373.255713][T10902] usb 2-1: config 0 has an invalid interface number: 61 but max is 1 [ 1373.290039][T10902] usb 2-1: config 0 has no interface number 1 [ 1373.324154][T10902] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 1373.363102][T10902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.385934][T10902] usb 2-1: Product: syz [ 1373.397306][T10902] usb 2-1: Manufacturer: syz [ 1373.414270][T10902] usb 2-1: SerialNumber: syz [ 1373.438273][T10902] usb 2-1: config 0 descriptor?? [ 1373.545702][T25115] input: syz0 as /devices/virtual/input/input43 [ 1373.579358][T10902] viperboard 2-1:0.61: version 0.00 found at bus 002 address 059 [ 1373.611371][T19932] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1373.671751][T10902] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1373.689280][T25100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1373.701878][T10902] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1373.719386][T25100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1373.794368][T19932] usb 10-1: Using ep0 maxpacket: 16 [ 1374.030625][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 1374.085118][T10902] viperboard 2-1:0.0: version 0.00 found at bus 002 address 059 [ 1374.119678][T10902] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1374.129832][T19932] usb 10-1: config 128 has an invalid interface number: 73 but max is 0 [ 1374.158896][T19932] usb 10-1: config 128 has no interface number 0 [ 1374.165404][T10902] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 1374.177200][T19932] usb 10-1: config 128 interface 73 has no altsetting 0 [ 1374.205081][T19932] usb 10-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=30.f4 [ 1374.341232][T10902] usb 2-1: USB disconnect, device number 59 [ 1374.476197][T25125] dlm: no local IP address has been set [ 1374.495152][T19932] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.535822][T19932] usb 10-1: Product: syz [ 1374.548618][T25125] dlm: cannot start dlm midcomms -107 [ 1374.564853][T19932] usb 10-1: Manufacturer: syz [ 1374.578583][T19932] usb 10-1: SerialNumber: syz [ 1374.907414][T19932] imon_raw 10-1:128.73: IR endpoint missing [ 1374.937137][T19932] usb 10-1: USB disconnect, device number 26 [ 1375.721012][T25142] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4692'. [ 1375.791603][T25144] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4693'. [ 1376.050451][T25150] zonefs (nullb0) ERROR: Not a zoned block device [ 1376.827347][T25156] loop3: detected capacity change from 0 to 7 [ 1376.838851][T16174] Dev loop3: unable to read RDB block 7 [ 1376.845150][T16174] loop3: unable to read partition table [ 1376.853369][T16174] loop3: partition table beyond EOD, truncated [ 1376.869512][T25156] Dev loop3: unable to read RDB block 7 [ 1376.885205][T25156] loop3: unable to read partition table [ 1376.915014][T25156] loop3: partition table beyond EOD, truncated [ 1376.929719][T25156] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1377.033655][T25158] dlm: no local IP address has been set [ 1377.039355][T25158] dlm: cannot start dlm midcomms -107 [ 1377.788237][ T5820] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1378.672500][ T5820] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1378.722474][ T5820] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1378.769283][ T5820] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.789700][ T5820] usb 10-1: config 0 descriptor?? [ 1378.810752][ T5820] pwc: Askey VC010 type 2 USB webcam detected. [ 1379.244795][T25178] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1379.445195][ T5820] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1379.474442][ T5820] pwc: recv_control_msg error -32 req 02 val 2700 [ 1379.491370][ T5820] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1379.516110][ T5820] pwc: recv_control_msg error -32 req 04 val 1000 [ 1379.539923][ T5820] pwc: recv_control_msg error -32 req 04 val 1300 [ 1379.569058][ T5820] pwc: recv_control_msg error -32 req 04 val 1400 [ 1379.786701][T25162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1379.807320][T25162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1380.049140][ T5820] pwc: recv_control_msg error -71 req 02 val 2100 [ 1380.056779][ T5820] pwc: recv_control_msg error -71 req 04 val 1500 [ 1380.063940][ T5820] pwc: recv_control_msg error -71 req 02 val 2500 [ 1380.070933][ T5820] pwc: recv_control_msg error -71 req 02 val 2400 [ 1380.077771][ T5820] pwc: recv_control_msg error -71 req 02 val 2600 [ 1380.085556][ T5820] pwc: recv_control_msg error -71 req 02 val 2900 [ 1380.107772][ T5820] pwc: recv_control_msg error -71 req 02 val 2800 [ 1380.137557][ T5820] pwc: recv_control_msg error -71 req 04 val 1100 [ 1380.144480][ T5820] pwc: recv_control_msg error -71 req 04 val 1200 [ 1380.162059][ T5820] pwc: Registered as video103. [ 1380.188766][ T5820] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input44 [ 1380.373487][ T30] audit: type=1400 audit(2000000983.902:1680): avc: denied { mounton } for pid=25186 comm="syz.1.4706" path="/file0" dev="ramfs" ino=87668 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1380.401600][ T5820] usb 10-1: USB disconnect, device number 27 [ 1381.299974][ T30] audit: type=1400 audit(2000000984.822:1681): avc: denied { bind } for pid=25196 comm="syz.9.4709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1381.333338][ T30] audit: type=1400 audit(2000000984.822:1682): avc: denied { connect } for pid=25196 comm="syz.9.4709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1381.437476][T10902] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1381.708697][ T30] audit: type=1400 audit(2000000984.832:1683): avc: denied { bind } for pid=25196 comm="syz.9.4709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1381.755776][ T30] audit: type=1400 audit(2000000984.832:1684): avc: denied { listen } for pid=25196 comm="syz.9.4709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1381.810546][T10902] usb 5-1: Using ep0 maxpacket: 8 [ 1381.828439][T10902] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1381.937243][T10902] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1381.968146][T10902] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1381.978379][T10902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1381.987237][ T5820] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1381.995647][T10902] usb 5-1: SerialNumber: syz [ 1382.009790][T10902] usb 5-1: config 0 descriptor?? [ 1382.024546][T10902] hso 5-1:0.0: Can't find BULK IN endpoint [ 1382.177415][ T5820] usb 10-1: config index 0 descriptor too short (expected 8292, got 100) [ 1382.205017][ T5820] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1382.776839][ T5820] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1382.786806][ T5820] usb 10-1: config 1 has no interface number 0 [ 1382.807275][ T5820] usb 10-1: too many endpoints for config 1 interface 1 altsetting 0: 222, using maximum allowed: 30 [ 1382.856709][ T5820] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1382.898639][ T5820] usb 10-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 222 [ 1382.914528][ T5820] usb 10-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1382.922918][T25214] ptrace attach of "./syz-executor exec"[25216] was attempted by "./syz-executor exec"[25214] [ 1382.926534][ T5820] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=17.40 [ 1382.980391][T19932] usb 5-1: USB disconnect, device number 22 [ 1382.988125][ T5820] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.996313][ T5820] usb 10-1: Product: syz [ 1383.016797][ T5820] usb 10-1: Manufacturer: syz [ 1383.036867][ T5820] usb 10-1: SerialNumber: syz [ 1383.480034][T25224] loop2: detected capacity change from 0 to 7 [ 1383.519753][T25224] Dev loop2: unable to read RDB block 7 [ 1383.525359][T25224] loop2: AHDI p1 p2 p3 [ 1383.566452][T25224] loop2: partition table partially beyond EOD, truncated [ 1383.619998][T25224] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1383.676059][T25224] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1383.990236][ T5820] cdc_ncm 10-1:1.1: bind() failure [ 1383.998589][ T5820] usb 10-1: USB disconnect, device number 28 [ 1385.413314][T25255] /dev/nullb0: Can't open blockdev [ 1386.406426][T25264] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4732'. [ 1386.525234][T25265] netlink: 'syz.8.4730': attribute type 39 has an invalid length. [ 1386.576408][ T30] audit: type=1400 audit(2000000990.105:1685): avc: denied { getopt } for pid=25266 comm="syz.6.4734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1386.669397][T14478] dvb-usb: did not find the firmware file 'dvb-usb-vp7045-01.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1386.695426][ T5820] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1386.724797][T14478] dvb_usb_vp7045 7-1:6.18: probe with driver dvb_usb_vp7045 failed with error -110 [ 1386.764951][T14478] dvb-usb: found a 'Twinhan USB2.0 DVB-T receiver (TwinhanDTV Alpha/MagicBox II)' in cold state, will try to load a firmware [ 1386.802130][T14478] usb 7-1: Direct firmware load for dvb-usb-vp7045-01.fw failed with error -2 [ 1386.831312][T14478] usb 7-1: Falling back to sysfs fallback for: dvb-usb-vp7045-01.fw [ 1386.844804][ T5820] usb 2-1: device descriptor read/64, error -71 [ 1387.006664][ T30] audit: type=1400 audit(2000000990.535:1686): avc: denied { setattr } for pid=25268 comm="syz.8.4735" name="vcsa" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 1387.164366][ T5820] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1387.446701][T25275] /dev/nullb0: Can't open blockdev [ 1388.134059][ T5820] usb 2-1: device descriptor read/64, error -71 [ 1388.145079][T25281] pim6reg: entered allmulticast mode [ 1388.244186][ T5820] usb usb2-port1: attempt power cycle [ 1388.289288][T25283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4737'. [ 1388.617350][T25284] netlink: 220 bytes leftover after parsing attributes in process `syz.8.4739'. [ 1388.653884][ T5820] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1388.674697][ T5820] usb 2-1: device descriptor read/8, error -71 [ 1388.883718][T10902] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1388.923730][ T5820] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1388.954047][ T5820] usb 2-1: device descriptor read/8, error -71 [ 1389.043349][T10902] usb 9-1: Using ep0 maxpacket: 8 [ 1389.075553][ T5820] usb usb2-port1: unable to enumerate USB device [ 1389.325477][T10902] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1389.376409][T10902] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1389.403424][T10902] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1389.530595][T10902] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1389.553809][T10902] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1389.995072][T10902] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1390.093069][T10902] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.125135][T25301] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4742'. [ 1391.197335][T10902] usb 9-1: usb_control_msg returned -32 [ 1391.256345][T10902] usbtmc 9-1:16.0: can't read capabilities [ 1392.677821][T25323] loop2: detected capacity change from 0 to 7 [ 1392.718570][T25323] loop2: [POWERTEC] p1 p2 p3 [ 1392.740282][T19932] usb 9-1: USB disconnect, device number 27 [ 1392.747337][T25323] loop2: p1 start 1852400175 is beyond EOD, truncated [ 1392.787312][T25323] loop2: p2 size 524288 extends beyond EOD, truncated [ 1392.842997][T25323] loop2: p3 start 1936093797 is beyond EOD, truncated [ 1393.206595][T16174] udevd[16174]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 1393.434323][T25335] /dev/nullb0: Can't open blockdev [ 1394.734096][ T30] audit: type=1400 audit(2000000998.279:1687): avc: denied { listen } for pid=25342 comm="syz.1.4754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1395.011102][ T30] audit: type=1326 audit(2000000998.549:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25345 comm="syz.4.4756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02619c799 code=0x7ffc0000 [ 1395.090434][ T30] audit: type=1326 audit(2000000998.549:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25345 comm="syz.4.4756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02619c799 code=0x7ffc0000 [ 1395.207614][T25355] loop2: detected capacity change from 0 to 7 [ 1395.257660][T25358] binder: BINDER_SET_CONTEXT_MGR already set [ 1395.810377][T25355] Dev loop2: unable to read RDB block 7 [ 1395.816049][ T30] audit: type=1326 audit(2000000998.619:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25345 comm="syz.4.4756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc02619c799 code=0x7ffc0000 [ 1395.839807][T25358] binder: 25351:25358 ioctl 4018620d 200000004a80 returned -16 [ 1395.847583][T25355] loop2: AHDI p1 p2 p3 [ 1395.851949][ T30] audit: type=1326 audit(2000000998.619:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25345 comm="syz.4.4756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02619c799 code=0x7ffc0000 [ 1395.883860][T25366] binder: 25351:25366 ioctl c0306201 2000000004c0 returned -22 [ 1395.901352][T25355] loop2: partition table partially beyond EOD, truncated [ 1396.168536][ T30] audit: type=1326 audit(2000000998.619:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25345 comm="syz.4.4756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc02615cfce code=0x7ffc0000 [ 1396.170529][T25355] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1396.570741][T25374] FAULT_INJECTION: forcing a failure. [ 1396.570741][T25374] name failslab, interval 1, probability 0, space 0, times 0 [ 1396.583380][T25374] CPU: 0 UID: 0 PID: 25374 Comm: syz.9.4765 Tainted: G L syzkaller #0 PREEMPT(full) [ 1396.583399][T25374] Tainted: [L]=SOFTLOCKUP [ 1396.583403][T25374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1396.583410][T25374] Call Trace: [ 1396.583414][T25374] [ 1396.583418][T25374] dump_stack_lvl+0x100/0x190 [ 1396.583439][T25374] should_fail_ex.cold+0x5/0xa [ 1396.583454][T25374] should_failslab+0xc2/0x120 [ 1396.583465][T25374] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1396.583478][T25374] ? alloc_fs_context+0x57/0xf40 [ 1396.583494][T25374] alloc_fs_context+0x57/0xf40 [ 1396.583509][T25374] path_mount+0xdbd/0x23d0 [ 1396.583528][T25374] ? __pfx_path_mount+0x10/0x10 [ 1396.583540][T25374] ? lockdep_hardirqs_on+0x78/0x100 [ 1396.583555][T25374] ? putname+0xb1/0x110 [ 1396.583565][T25374] ? kmem_cache_free+0x124/0x6a0 [ 1396.583583][T25374] ? __x64_sys_mount+0x293/0x310 [ 1396.583601][T25374] __x64_sys_mount+0x293/0x310 [ 1396.583614][T25374] ? __pfx___x64_sys_mount+0x10/0x10 [ 1396.583632][T25374] do_syscall_64+0x106/0xf80 [ 1396.583643][T25374] ? clear_bhb_loop+0x40/0x90 [ 1396.583657][T25374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1396.583668][T25374] RIP: 0033:0x7f472439c799 [ 1396.583678][T25374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1396.583689][T25374] RSP: 002b:00007f47251fb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1396.583699][T25374] RAX: ffffffffffffffda RBX: 00007f4724615fa0 RCX: 00007f472439c799 [ 1396.583706][T25374] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 1396.583713][T25374] RBP: 00007f47251fb090 R08: 0000200000000380 R09: 0000000000000000 [ 1396.583719][T25374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1396.583725][T25374] R13: 00007f4724616038 R14: 00007f4724615fa0 R15: 00007ffde46d79e8 [ 1396.583738][T25374] [ 1397.109642][ T30] audit: type=1326 audit(2000000998.619:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25345 comm="syz.4.4756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02619c799 code=0x7ffc0000 [ 1397.149655][T25355] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1397.274182][ T30] audit: type=1326 audit(2000000998.619:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25345 comm="syz.4.4756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc02619c799 code=0x7ffc0000 [ 1397.380398][ T30] audit: type=1326 audit(2000000998.619:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25345 comm="syz.4.4756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02619c799 code=0x7ffc0000 [ 1397.460392][ T30] audit: type=1326 audit(2000000998.619:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25345 comm="syz.4.4756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fc02619c799 code=0x7ffc0000 [ 1397.560850][T25381] hpfs: Bad magic ... probably not HPFS [ 1398.242204][T25386] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4766'. [ 1398.623172][T25399] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4773'. [ 1399.057967][T25403] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=25403 comm=syz.1.4768 [ 1399.474093][T25407] FAULT_INJECTION: forcing a failure. [ 1399.474093][T25407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1399.517723][T25407] CPU: 1 UID: 0 PID: 25407 Comm: syz.1.4774 Tainted: G L syzkaller #0 PREEMPT(full) [ 1399.517753][T25407] Tainted: [L]=SOFTLOCKUP [ 1399.517760][T25407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1399.517770][T25407] Call Trace: [ 1399.517776][T25407] [ 1399.517783][T25407] dump_stack_lvl+0x100/0x190 [ 1399.517814][T25407] should_fail_ex.cold+0x5/0xa [ 1399.517839][T25407] _copy_to_user+0x32/0xd0 [ 1399.517865][T25407] simple_read_from_buffer+0xcb/0x170 [ 1399.517895][T25407] proc_fail_nth_read+0x1af/0x230 [ 1399.517919][T25407] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1399.517943][T25407] ? rw_verify_area+0xce/0x6d0 [ 1399.517968][T25407] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1399.517992][T25407] vfs_read+0x1e4/0xb30 [ 1399.518019][T25407] ? __pfx_vfs_read+0x10/0x10 [ 1399.518044][T25407] ? __fget_files+0x215/0x3d0 [ 1399.518065][T25407] ? __fget_files+0x21f/0x3d0 [ 1399.518090][T25407] ksys_read+0x12a/0x250 [ 1399.518116][T25407] ? __pfx_ksys_read+0x10/0x10 [ 1399.518150][T25407] do_syscall_64+0x106/0xf80 [ 1399.518169][T25407] ? clear_bhb_loop+0x40/0x90 [ 1399.518191][T25407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1399.518210][T25407] RIP: 0033:0x7fd53b35cfce [ 1399.518225][T25407] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1399.518243][T25407] RSP: 002b:00007fd53c31cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1399.518262][T25407] RAX: ffffffffffffffda RBX: 00007fd53c31d6c0 RCX: 00007fd53b35cfce [ 1399.518273][T25407] RDX: 000000000000000f RSI: 00007fd53c31d0a0 RDI: 0000000000000004 [ 1399.518283][T25407] RBP: 00007fd53c31d090 R08: 0000000000000000 R09: 0000000000000000 [ 1399.518292][T25407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1399.518302][T25407] R13: 00007fd53b616038 R14: 00007fd53b615fa0 R15: 00007fff5f00ac88 [ 1399.518326][T25407] [ 1400.127585][T25414] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4777'. [ 1400.171507][T25416] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4776'. [ 1400.207216][T25416] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4776'. [ 1400.229660][T25417] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4776'. [ 1401.547339][ T5820] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 1401.699299][ T5820] usb 5-1: config 3 has an invalid interface number: 3 but max is 1 [ 1401.708109][ T5820] usb 5-1: config 3 has an invalid interface number: 110 but max is 1 [ 1401.716327][ T5820] usb 5-1: config 3 has an invalid interface number: 50 but max is 1 [ 1401.737247][ T5820] usb 5-1: config 3 has 3 interfaces, different from the descriptor's value: 2 [ 1401.746223][ T5820] usb 5-1: config 3 has no interface number 0 [ 1401.767201][ T5820] usb 5-1: config 3 has no interface number 1 [ 1401.773347][ T5820] usb 5-1: config 3 has no interface number 2 [ 1401.782175][ T5820] usb 5-1: too many endpoints for config 3 interface 110 altsetting 235: 128, using maximum allowed: 30 [ 1401.793544][ T5820] usb 5-1: config 3 interface 110 altsetting 235 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 1401.808683][ T5820] usb 5-1: config 3 interface 3 has no altsetting 0 [ 1401.816339][ T5820] usb 5-1: config 3 interface 110 has no altsetting 0 [ 1401.823604][ T5820] usb 5-1: config 3 interface 50 has no altsetting 0 [ 1401.836321][ T5820] usb 5-1: New USB device found, idVendor=04da, idProduct=250d, bcdDevice=1d.43 [ 1401.855872][ T5820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.864992][ T5820] usb 5-1: Product: syz [ 1401.869628][ T5820] usb 5-1: Manufacturer: syz [ 1401.874224][ T5820] usb 5-1: SerialNumber: syz [ 1402.243744][ T5820] usb 5-1: USB disconnect, device number 23 [ 1402.290407][T25453] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 1402.747211][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 1402.747227][ T30] audit: type=1400 audit(2000001006.293:1730): avc: denied { listen } for pid=25457 comm="syz.8.4792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1403.106976][ T5822] Bluetooth: hci6: unknown advertising packet type: 0x75 [ 1403.107062][ T5822] Bluetooth: hci6: unknown advertising packet type: 0x6c [ 1403.116720][ T5822] Bluetooth: hci6: unknown advertising packet type: 0x20 [ 1403.124003][ T5822] Bluetooth: hci6: Malformed LE Event: 0x02 [ 1403.362813][T25466] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1404.628870][ T30] audit: type=1400 audit(2000001008.164:1731): avc: denied { shutdown } for pid=25480 comm="syz.6.4798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1405.266668][T25487] netlink: 'syz.4.4800': attribute type 39 has an invalid length. [ 1406.031327][T25498] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4803'. [ 1406.132305][ T30] audit: type=1400 audit(2000001009.675:1732): avc: denied { read } for pid=25497 comm="syz.4.4803" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1406.157432][T25498] virtio-fs: tag not found [ 1406.233681][ T30] audit: type=1400 audit(2000001009.675:1733): avc: denied { open } for pid=25497 comm="syz.4.4803" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1406.500760][T25504] FAULT_INJECTION: forcing a failure. [ 1406.500760][T25504] name failslab, interval 1, probability 0, space 0, times 0 [ 1406.513396][T25504] CPU: 0 UID: 0 PID: 25504 Comm: syz.1.4805 Tainted: G L syzkaller #0 PREEMPT(full) [ 1406.513414][T25504] Tainted: [L]=SOFTLOCKUP [ 1406.513417][T25504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1406.513424][T25504] Call Trace: [ 1406.513428][T25504] [ 1406.513433][T25504] dump_stack_lvl+0x100/0x190 [ 1406.513454][T25504] should_fail_ex.cold+0x5/0xa [ 1406.513468][T25504] should_failslab+0xc2/0x120 [ 1406.513484][T25504] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1406.513497][T25504] ? ovl_init_fs_context+0x52/0x5f0 [ 1406.513514][T25504] ovl_init_fs_context+0x52/0x5f0 [ 1406.513529][T25504] alloc_fs_context+0x60c/0xf40 [ 1406.513546][T25504] path_mount+0xdbd/0x23d0 [ 1406.513561][T25504] ? __pfx_path_mount+0x10/0x10 [ 1406.513573][T25504] ? lockdep_hardirqs_on+0x78/0x100 [ 1406.513587][T25504] ? putname+0xb1/0x110 [ 1406.513598][T25504] ? kmem_cache_free+0x124/0x6a0 [ 1406.513615][T25504] ? __x64_sys_mount+0x293/0x310 [ 1406.513628][T25504] __x64_sys_mount+0x293/0x310 [ 1406.513641][T25504] ? __pfx___x64_sys_mount+0x10/0x10 [ 1406.513658][T25504] do_syscall_64+0x106/0xf80 [ 1406.513670][T25504] ? clear_bhb_loop+0x40/0x90 [ 1406.513683][T25504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1406.513694][T25504] RIP: 0033:0x7fd53b39c799 [ 1406.513703][T25504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1406.513713][T25504] RSP: 002b:00007fd53c31d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1406.513724][T25504] RAX: ffffffffffffffda RBX: 00007fd53b615fa0 RCX: 00007fd53b39c799 [ 1406.513731][T25504] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 1406.513738][T25504] RBP: 00007fd53c31d090 R08: 0000200000000380 R09: 0000000000000000 [ 1406.513744][T25504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1406.513750][T25504] R13: 00007fd53b616038 R14: 00007fd53b615fa0 R15: 00007fff5f00ac88 [ 1406.513763][T25504] [ 1407.175206][ T30] audit: type=1400 audit(2000001009.775:1734): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.19 dest=35514 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1408.415003][T25521] comedi comedi2: comedi_parport: I/O port conflict (0xffffffffffffffff,3) [ 1408.675808][T25526] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4812'. [ 1409.407199][T25529] overlayfs: workdir and upperdir must be separate subtrees [ 1409.962110][T25538] syz_tun: entered allmulticast mode [ 1410.352939][T25450] usb 2-1: new low-speed USB device number 64 using dummy_hcd [ 1410.772206][T25450] usb 2-1: device descriptor read/64, error -71 [ 1411.072754][T25450] usb 2-1: new low-speed USB device number 65 using dummy_hcd [ 1411.242800][T14491] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1411.354033][T25450] usb 2-1: device descriptor read/64, error -71 [ 1411.472716][T25450] usb usb2-port1: attempt power cycle [ 1411.492329][T14491] usb 5-1: Using ep0 maxpacket: 16 [ 1411.537097][T14491] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1411.582323][T14491] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.611920][T14491] usb 5-1: Product: syz [ 1411.632503][T14491] usb 5-1: Manufacturer: syz [ 1411.649270][T14491] usb 5-1: SerialNumber: syz [ 1411.678493][T14491] usb 5-1: config 0 descriptor?? [ 1411.701928][T14491] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 1411.834020][T25563] hpfs: Bad magic ... probably not HPFS [ 1411.852415][T25450] usb 2-1: new low-speed USB device number 66 using dummy_hcd [ 1411.882585][T25450] usb 2-1: device descriptor read/8, error -71 [ 1412.314154][T25571] SET target dimension over the limit! [ 1412.359800][T25450] usb 2-1: new low-speed USB device number 67 using dummy_hcd [ 1412.442452][T25450] usb 2-1: device descriptor read/8, error -71 [ 1412.661998][T25450] usb usb2-port1: unable to enumerate USB device [ 1412.694579][T14491] usb 5-1: clie_3_5_startup: get config number failed: -71 [ 1412.719665][T14491] visor 5-1:0.0: probe with driver visor failed with error -71 [ 1412.744178][T25566] delete_channel: no stack [ 1412.770624][T14491] usb 5-1: USB disconnect, device number 24 [ 1413.022586][ T5820] usb 10-1: new full-speed USB device number 29 using dummy_hcd [ 1413.194541][ T5820] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1413.221473][ T5820] usb 10-1: not running at top speed; connect to a high speed hub [ 1413.299037][ T5820] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1413.527404][ T5820] usb 10-1: can't read configurations, error -61 [ 1413.860788][ T5820] usb 10-1: new full-speed USB device number 30 using dummy_hcd [ 1414.055443][ T5820] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1414.100747][ T5820] usb 10-1: not running at top speed; connect to a high speed hub [ 1414.256090][ T5820] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1414.264215][ T5820] usb 10-1: can't read configurations, error -61 [ 1414.272224][ T5820] usb usb10-port1: attempt power cycle [ 1415.272381][ T5822] Bluetooth: hci3: command 0x0406 tx timeout [ 1416.256514][T25601] sctp: [Deprecated]: syz.9.4832 (pid 25601) Use of int in max_burst socket option deprecated. [ 1416.256514][T25601] Use struct sctp_assoc_value instead [ 1416.501130][T19931] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1416.720594][T19931] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1416.742648][T19931] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1416.804921][T19931] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1416.825498][T19931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.849723][T19931] usb 5-1: Product: syz [ 1416.870221][T19931] usb 5-1: Manufacturer: syz [ 1416.874964][T19931] usb 5-1: SerialNumber: syz [ 1416.905444][T19931] cdc_mbim 5-1:1.0: skipping garbage [ 1417.111819][T25598] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1417.410042][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1417.990070][T25598] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1417.999146][T19931] cdc_mbim 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1418.006781][T19931] cdc_mbim 5-1:1.0: setting rx_max = 2048 [ 1418.252339][T19931] cdc_mbim 5-1:1.0: setting tx_max = 184 [ 1418.270743][T19931] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 1418.339236][T19931] wwan wwan0: port wwan0mbim0 attached [ 1418.387536][ T30] audit: type=1326 audit(2000001021.931:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25623 comm="syz.9.4834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472439c799 code=0x7ffc0000 [ 1418.399229][T19931] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 4e:f3:ca:1b:c6:4b [ 1418.593107][T19931] usb 5-1: USB disconnect, device number 25 [ 1418.609766][T19931] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 1418.624354][ T30] audit: type=1326 audit(2000001021.931:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25623 comm="syz.9.4834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472439c799 code=0x7ffc0000 [ 1418.710926][T25634] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4841'. [ 1418.728315][ T30] audit: type=1326 audit(2000001021.931:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25623 comm="syz.9.4834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f472439c799 code=0x7ffc0000 [ 1418.731176][T19931] wwan wwan0: port wwan0mbim0 disconnected [ 1418.922713][ T30] audit: type=1326 audit(2000001021.931:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25623 comm="syz.9.4834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472439c799 code=0x7ffc0000 [ 1418.976327][ T30] audit: type=1326 audit(2000001021.931:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25623 comm="syz.9.4834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472439c799 code=0x7ffc0000 [ 1419.528614][ T30] audit: type=1326 audit(2000001021.941:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25623 comm="syz.9.4834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f472439c799 code=0x7ffc0000 [ 1419.607926][ T30] audit: type=1326 audit(2000001021.941:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25623 comm="syz.9.4834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472439c799 code=0x7ffc0000 [ 1419.707287][T25641] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4843'. [ 1419.710210][ T30] audit: type=1326 audit(2000001021.941:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25623 comm="syz.9.4834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f472439c799 code=0x7ffc0000 [ 1419.948495][ T30] audit: type=1326 audit(2000001021.941:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25623 comm="syz.9.4834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472439c799 code=0x7ffc0000 [ 1419.974280][ T30] audit: type=1326 audit(2000001021.941:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25623 comm="syz.9.4834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472439c799 code=0x7ffc0000 [ 1420.062493][T25647] netlink: 'syz.1.4844': attribute type 39 has an invalid length. [ 1420.465184][T25657] netlink: 'syz.9.4849': attribute type 3 has an invalid length. [ 1420.473497][T25657] netlink: 'syz.9.4849': attribute type 3 has an invalid length. [ 1420.481680][T25657] netlink: 'syz.9.4849': attribute type 3 has an invalid length. [ 1420.490167][T25657] netlink: 'syz.9.4849': attribute type 3 has an invalid length. [ 1420.498391][T25657] netlink: 'syz.9.4849': attribute type 3 has an invalid length. [ 1420.506272][T25657] netlink: 'syz.9.4849': attribute type 3 has an invalid length. [ 1420.514265][T25657] netlink: 'syz.9.4849': attribute type 3 has an invalid length. [ 1420.522507][T25657] netlink: 'syz.9.4849': attribute type 3 has an invalid length. [ 1420.530727][T25657] netlink: 'syz.9.4849': attribute type 3 has an invalid length. [ 1421.039357][T25666] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1422.446912][T19931] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1422.596807][T19931] usb 10-1: Using ep0 maxpacket: 16 [ 1422.627411][T19931] usb 10-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1422.650847][T19931] usb 10-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1422.685816][T19931] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1422.715820][T19931] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.221918][T19931] mcp2221 0003:04D8:00DD.000E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.9-1/input0 [ 1424.407985][ T31] INFO: task syz.0.4390:23839 blocked for more than 143 seconds. [ 1424.417673][ T31] Tainted: G L syzkaller #0 [ 1424.424180][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1424.579999][ T31] task:syz.0.4390 state:D stack:27464 pid:23839 tgid:23838 ppid:19620 task_flags:0x400040 flags:0x00080002 [ 1424.592082][T19931] usb 10-1: reset high-speed USB device number 32 using dummy_hcd [ 1424.632112][ T31] Call Trace: [ 1424.921557][T25707] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1424.931778][ T31] [ 1424.939666][ T31] __schedule+0xfee/0x6120 [ 1424.950741][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1424.960631][ T31] ? __pfx___schedule+0x10/0x10 [ 1424.970530][ T31] ? find_held_lock+0x2b/0x80 [ 1424.980337][ T31] ? schedule+0x2bf/0x390 [ 1424.991053][ T31] schedule+0xdd/0x390 [ 1424.999524][ T31] schedule_preempt_disabled+0x13/0x30 [ 1425.011567][ T31] __mutex_lock+0xc9a/0x1b90 [ 1425.020643][ T31] ? do_raw_spin_lock+0x128/0x260 [ 1425.031769][ T31] ? usbdev_open+0x1b6/0x870 [ 1425.041904][ T31] ? klist_put+0xcb/0x1d0 [ 1425.082101][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1425.095583][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1425.109786][ T31] ? kobject_put+0xb9/0x640 [ 1425.166043][ T31] ? __pfx_device_match_devt+0x10/0x10 [ 1425.180451][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 1425.195983][ T31] ? usbdev_open+0x1b6/0x870 [ 1425.204020][ T31] usbdev_open+0x1b6/0x870 [ 1425.214043][ T31] ? kobject_get_unless_zero+0x156/0x200 [ 1425.225140][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 1425.235518][ T31] ? chrdev_open+0x10b/0x6a0 [ 1425.245626][ T31] ? chrdev_open+0x10b/0x6a0 [ 1425.255222][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 1425.265631][ T31] chrdev_open+0x234/0x6a0 [ 1425.322076][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1425.329741][ T31] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1425.345430][ T31] do_dentry_open+0x6d8/0x1660 [ 1425.391791][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1425.403605][ T31] vfs_open+0x82/0x3f0 [ 1425.412882][ T31] path_openat+0x208c/0x31a0 [ 1425.422739][ T31] ? __pfx_path_openat+0x10/0x10 [ 1425.433672][ T31] do_file_open+0x20e/0x430 [ 1425.452886][ T31] ? __pfx_do_file_open+0x10/0x10 [ 1425.463495][ T31] ? alloc_fd+0x476/0x790 [ 1425.473348][ T31] ? do_getname+0x191/0x390 [ 1425.482375][ T31] do_sys_openat2+0x10d/0x1e0 [ 1425.492184][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1425.501995][ T31] __x64_sys_openat+0x12d/0x210 [ 1425.512889][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 1425.523812][ T31] do_syscall_64+0x106/0xf80 [ 1425.529114][T25450] usb 10-1: USB disconnect, device number 32 [ 1425.545684][ T31] ? clear_bhb_loop+0x40/0x90 [ 1425.550390][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1425.565702][ T31] RIP: 0033:0x7f045215cfce [ 1425.571124][ T31] RSP: 002b:00007f04530c6b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1425.580800][ T31] RAX: ffffffffffffffda RBX: 00007f04530c76c0 RCX: 00007f045215cfce [ 1425.602099][ T31] RDX: 0000000000000000 RSI: 00007f04530c6c00 RDI: ffffffffffffff9c [ 1425.638932][ T31] RBP: 00007f04530c6c00 R08: 0000000000000000 R09: 0000000000000000 [ 1425.676408][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1425.684564][ T31] R13: 00007f0452416038 R14: 00007f0452415fa0 R15: 00007ffcd5b0cdc8 [ 1425.735248][ T31] [ 1425.745077][ T31] [ 1425.745077][ T31] Showing all locks held in the system: [ 1425.841529][ T31] 1 lock held by khungtaskd/31: [ 1425.858429][ T31] #0: ffffffff8e7e75e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1425.869238][ T31] 4 locks held by udevd/5179: [ 1425.873992][ T31] 2 locks held by getty/5566: [ 1425.879125][ T31] #0: ffff88803501e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1425.889231][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1425.899680][ T31] 6 locks held by kworker/0:7/14478: [ 1425.905009][ T31] #0: ffff88801f6b8948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1425.915982][ T31] #1: ffffc900094c7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1425.930256][ T31] #2: ffff88802b8f0198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 1425.939481][ T31] #3: ffff888053239198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 1425.948912][ T31] #4: ffff88805db78160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 1425.958281][ T31] #5: ffffffff8e691e70 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xab/0x250 [ 1425.969348][ T31] 4 locks held by udevd/16154: [ 1425.974113][ T31] #0: ffff88806d5d1668 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 1425.983029][ T31] #1: ffff88805e7f6888 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 1425.992457][ T31] #2: ffff888026f11d28 (kn->active#32){++++}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 1426.002076][ T31] #3: ffff888053239198 (&dev->mutex){....}-{4:4}, at: product_show+0x26/0xa0 [ 1426.011061][ T31] 3 locks held by kworker/u8:37/16989: [ 1426.016599][ T31] #0: ffff8880b843b1a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 1426.026541][ T31] #1: ffff8880b8424648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2c11/0x6120 [ 1426.035270][ T31] #2: ffff8880b8426358 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x124/0x1d0 [ 1426.044596][ T31] 1 lock held by syz.0.4390/23839: [ 1426.050078][ T31] #0: ffff88802b8f0198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x870 [ 1426.059119][ T31] 1 lock held by syz.6.4863/25710: [ 1426.064217][ T31] #0: ffff88802b8f0198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x870 [ 1426.073728][ T31] 1 lock held by syz.4.4864/25707: [ 1426.078943][ T31] #0: ffffffff8e7f30c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 1426.088955][ T31] [ 1426.091275][ T31] ============================================= [ 1426.091275][ T31] [ 1426.100703][ T31] NMI backtrace for cpu 1 [ 1426.100720][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1426.100744][ T31] Tainted: [L]=SOFTLOCKUP [ 1426.100750][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1426.100761][ T31] Call Trace: [ 1426.100767][ T31] [ 1426.100774][ T31] dump_stack_lvl+0x100/0x190 [ 1426.100806][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1426.100826][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1426.100855][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1426.100884][ T31] sys_info+0x141/0x190 [ 1426.100914][ T31] watchdog+0xd25/0x1050 [ 1426.100945][ T31] ? __pfx_watchdog+0x10/0x10 [ 1426.100969][ T31] ? __kthread_parkme+0x18c/0x230 [ 1426.100998][ T31] ? kthread+0x13a/0x450 [ 1426.101014][ T31] ? __pfx_watchdog+0x10/0x10 [ 1426.101036][ T31] kthread+0x370/0x450 [ 1426.101052][ T31] ? __pfx_kthread+0x10/0x10 [ 1426.101071][ T31] ret_from_fork+0x754/0xd80 [ 1426.101091][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1426.101111][ T31] ? __switch_to+0x7b4/0x1120 [ 1426.101133][ T31] ? __pfx_kthread+0x10/0x10 [ 1426.101151][ T31] ret_from_fork_asm+0x1a/0x30 [ 1426.101183][ T31] [ 1426.101190][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1426.227550][ C0] NMI backtrace for cpu 0 [ 1426.227566][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1426.227586][ C0] Tainted: [L]=SOFTLOCKUP [ 1426.227592][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1426.227600][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1426.227620][ C0] Code: e8 82 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 f1 1b 00 fb f4 fc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1426.227634][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000242 [ 1426.227647][ C0] RAX: 0000000004a1b067 RBX: ffffffff8e4975c0 RCX: ffffffff8b8f9c75 [ 1426.227657][ C0] RDX: 0000000000000000 RSI: ffffffff8de74cf8 RDI: ffffffff8c1afaa0 [ 1426.227666][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1017086795 [ 1426.227674][ C0] R10: ffff8880b8433cab R11: 0000000000000000 R12: fffffbfff1c92eb8 [ 1426.227683][ C0] R13: 0000000000000000 R14: ffffffff90d98310 R15: 0000000000000000 [ 1426.227693][ C0] FS: 0000000000000000(0000) GS:ffff888124347000(0000) knlGS:0000000000000000 [ 1426.227707][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1426.227716][ C0] CR2: 00007fc0263e6158 CR3: 0000000046c99000 CR4: 00000000003526f0 [ 1426.227725][ C0] Call Trace: [ 1426.227730][ C0] [ 1426.227735][ C0] default_idle+0x9/0x10 [ 1426.227751][ C0] default_idle_call+0x6c/0xb0 [ 1426.227767][ C0] do_idle+0x35b/0x4b0 [ 1426.227785][ C0] ? __pfx_do_idle+0x10/0x10 [ 1426.227805][ C0] cpu_startup_entry+0x4f/0x60 [ 1426.227821][ C0] rest_init+0x251/0x260 [ 1426.227838][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1426.227860][ C0] start_kernel+0x47f/0x480 [ 1426.227878][ C0] x86_64_start_reservations+0x24/0x30 [ 1426.227897][ C0] x86_64_start_kernel+0x12b/0x130 [ 1426.227915][ C0] common_startup_64+0x13e/0x148 [ 1426.227936][ C0] [ 1426.415224][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1426.422057][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1426.432706][ T31] Tainted: [L]=SOFTLOCKUP [ 1426.437002][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1426.447048][ T31] Call Trace: [ 1426.450300][ T31] [ 1426.453213][ T31] dump_stack_lvl+0x100/0x190 [ 1426.457884][ T31] vpanic+0x552/0x970 [ 1426.461847][ T31] ? __pfx_vpanic+0x10/0x10 [ 1426.466335][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1426.472480][ T31] panic+0xd1/0xe0 [ 1426.476179][ T31] ? __pfx_panic+0x10/0x10 [ 1426.480584][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1426.486714][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1426.492846][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1426.498992][ T31] ? watchdog.cold+0x198/0x1ca [ 1426.503740][ T31] ? watchdog+0xd35/0x1050 [ 1426.508142][ T31] watchdog.cold+0x1a9/0x1ca [ 1426.512721][ T31] ? __pfx_watchdog+0x10/0x10 [ 1426.517381][ T31] ? __kthread_parkme+0x18c/0x230 [ 1426.522393][ T31] ? kthread+0x13a/0x450 [ 1426.526612][ T31] ? __pfx_watchdog+0x10/0x10 [ 1426.531270][ T31] kthread+0x370/0x450 [ 1426.535318][ T31] ? __pfx_kthread+0x10/0x10 [ 1426.539893][ T31] ret_from_fork+0x754/0xd80 [ 1426.544462][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1426.549551][ T31] ? __switch_to+0x7b4/0x1120 [ 1426.554208][ T31] ? __pfx_kthread+0x10/0x10 [ 1426.558775][ T31] ret_from_fork_asm+0x1a/0x30 [ 1426.563528][ T31] [ 1426.566726][ T31] Kernel Offset: disabled [ 1426.571024][ T31] Rebooting in 86400 seconds..