last executing test programs: 22m39.198872936s ago: executing program 32 (id=321): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a0080f3ffffffffffffaaaaaaaaaa4686dd6b3dfc000000000000000000002801fc02000000000000000000000000000000000000000000000000000000000005"], 0x62) 22m6.571983001s ago: executing program 33 (id=586): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000300)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d7061746830") ioctl(r0, 0xc138fd09, &(0x7f0000000380)="0400000000000000000000009001000038010000010000000000000000000000000000000000001000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e20302031203120373a302031") 20m24.592476238s ago: executing program 34 (id=1424): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000300)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d7061746830") ioctl(r0, 0xc138fd09, &(0x7f0000000380)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f2030203120312072") 19m35.663820008s ago: executing program 35 (id=1888): mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x1c0) (async) pipe2$9p(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/scsi_host/host0/state\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='running', 0x7) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x10000, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c80"]) (async, rerun: 32) write$P9_RVERSION(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1500000065ffff0a4000000800395032303030"], 0x15) 17m25.259077161s ago: executing program 36 (id=3274): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000300)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d7061746830") ioctl(r0, 0xc138fd09, &(0x7f0000000380)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000000004000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e20302031203120373a302031") 15m29.444704138s ago: executing program 37 (id=4005): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000002340)=@filter={'filter\x00', 0xe, 0x2, 0x488, [0x0, 0x2000000090c0, 0x2000000094e8, 0x200000009518], 0x0, 0x0, &(0x7f00000090c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"]}, 0x500) 15m26.800933407s ago: executing program 38 (id=4023): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a1c000000000a0104000000000000000002000000080001006e61740040000000030a0104000000000000000002000000080001006e6174000800030073797a00080007006e61740014000400084101000000000308000200ffffff9c84000000060a0104000000000000000002000000080001006e6174000800020073797a00600004005c0001000b00010074617267657400004c00020009000100444e41540000000008000200000000023400030000"], 0x108}}, 0x0) 11m40.545831273s ago: executing program 39 (id=5580): pread64(0xffffffffffffffff, &(0x7f0000000400), 0xffffffde, 0x400000000000c8b) r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r0, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000780)=0x28000, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x4c, r5, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "000102030405060708090a0b0c0d0e0f"}]}, 0x4c}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r7) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/uevent_seqnum', 0x80, 0x28) openat2$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup\x00', &(0x7f0000000600)={0x220000, 0x0, 0x29}, 0x18) read$snapshot(r11, &(0x7f0000000580)=""/62, 0x3e) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r12, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x34, r13, 0x7, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x34}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd7000ffdbdf251e00000008000300", @ANYRES32=r10], 0x48}, 0x1, 0x0, 0x0, 0x24000851}, 0x890) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x20000814) 6m12.621434696s ago: executing program 40 (id=8037): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x4000000, 0x0, 0x8000}, 0x0) 5m32.34656886s ago: executing program 2 (id=8271): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000002900)=ANY=[@ANYBLOB="0e0200000200000005cd0000c6bf0000000000000000000000000000000000000000000000000a00000000000000000000001b00046e6f6465767b65766f6f7e0539c60005"], 0x20e) 5m32.264627933s ago: executing program 2 (id=8272): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000201016400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) 5m32.264510525s ago: executing program 2 (id=8273): r0 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000080)='\xf7iscard', &(0x7f0000000000)='\t', 0x1) 5m32.213203766s ago: executing program 2 (id=8274): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r0 = request_key(&(0x7f00000000c0)='.dead\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='/dev/nvram\x00', 0xfffffffffffffffd) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x32}, 0xfffffec0, r0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x21800, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x440, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0x76) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000340)=0x8) syz_open_dev$sndctrl(&(0x7f0000000600), 0x7, 0x10800) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000680), 0x480801, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000006c0)) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000380)={0x4, 0x400, 0x0, 0x7, 0x1, "95980ff20777a87b9fa601b531f34f59b8c163", 0x8, 0xe02c}) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x46, &(0x7f0000000180)=0x3fa, 0x4) r6 = getuid() fsetxattr$security_capability(r5, &(0x7f00000003c0), &(0x7f0000000400)=@v3={0x3000000, [{0xffff, 0xfffffffd}, {0x4, 0x1}], r6}, 0x18, 0x6) bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r7 = socket$inet6(0xa, 0x5, 0x4000000) setsockopt$sock_int(r7, 0x1, 0x4000000000000002, &(0x7f0000000200)=0x3fa, 0x4) bind$inet6(r7, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, 0x0) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0xa040, 0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x6000) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000540)='configfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r9, &(0x7f00000005c0)="24c30ae33238", 0x6) ioctl$KVM_CAP_SYNC_REGS(r8, 0x4068aea3, &(0x7f0000000040)) syz_clone3(&(0x7f00000007c0)={0xa0000000, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 5m32.14535482s ago: executing program 2 (id=8275): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400010000000009040040010300000009210100000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002212"], 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x2703) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9529000) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000002c0)={0x1, 0x1, 0x5, &(0x7f0000000140)={0x6, "b3d92cdddf96c20e90fa00008c0000c87fb1000000000001000000000000000300"}}) 5m31.743781755s ago: executing program 2 (id=8277): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000006b80), 0x2400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 39) 5m31.456454594s ago: executing program 41 (id=8277): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000006b80), 0x2400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (fail_nth: 39) 2m28.76005124s ago: executing program 8 (id=9592): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0x10, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0xc, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x10000000, 0x0, 0x1, 0xffff06bd, 0xfffffffd, 0x5, 0x1a, 0xf0, 0x10, 0x1, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0xffff00e7, 0x4, 0x3, 0x0, 0xffff8000, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x4, 0xfffffffd, 0x401, 0xedf4, 0x4, 0xe, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x5, 0xffff, 0x401, 0x7, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0xa00, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xf7, 0x101, 0x4, 0x0, 0xa, 0x1, 0x1fe, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff88, 0xe, 0xd, 0xf, 0xc, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10000, 0x9, 0xc6b, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x806, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0xffffffff, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x2, 0x8, 0xa, 0xfffffffa, 0xa7b1, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x8000, 0x0, 0x80002001, 0xc, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x3, 0xffff, 0x2, 0x10000089, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x0, 0x0, 0xf, 0xce5fb90f, 0x5, 0x4, 0x0, 0xf, 0x9, 0xfc, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x3, 0x4, 0x0, 0x8000, 0x40, 0xd3, 0x7, 0xffffffff, 0xb, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x40003d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x20000002, 0x49, 0x10, 0x400, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x4001, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x0, 0x3, 0x6, 0x3, 0x4, 0x5, 0xd58, 0x0, 0x6, 0x800, 0xffffffff, 0x1, 0x8001, 0xb, 0x0, 0x88d, 0x7fff, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000005, 0xb6, 0x100, 0x404, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0x5, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0x1, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x80000000, 0x40, 0x6, 0x792a3cec, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x10000000, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf4, 0x0, 0xfffff53d, 0xb, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x10000, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x202, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x20020, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb669, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0x5, 0x2, 0x7f, 0x6, 0xa, 0x40, 0x40000005, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0xb, 0x2, 0x7, 0x1, 0x5, 0x9, 0xfffffff7, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x7fff, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4008, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x1, 0x30, 0xb, 0x101, 0x3, 0xbb, 0x3, 0x7, 0x8, 0x8, 0x1, 0xfffffff5, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x3, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0xd, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x0, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000004, 0x3, 0xff, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x71a, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x2, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x9, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xffffffff, 0x7, 0x5, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfefffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x40000004, 0x4, 0x4, 0xff, 0xee, 0x2, 0x8000004, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x8000, 0x7, 0x4, 0x6330, 0xff, 0x6, 0x4ea, 0x1, 0xfff, 0x7, 0x6, 0x0, 0x6, 0x9, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62c8, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0xffffffde, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x402, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x7fffffff, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0x1ec, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0xd, 0xe, 0x7, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0xa, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x1, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, r0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffc, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0xff0f) (fail_nth: 24) 2m28.685829459s ago: executing program 8 (id=9593): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000002340)=@filter={'filter\x00', 0xe, 0x2, 0x488, [0x0, 0x2000000090c0, 0x2000000094e8, 0x200000009518], 0x0, 0x0, &(0x7f00000090c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"]}, 0x500) 2m28.632350656s ago: executing program 8 (id=9594): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000006, 0x14032, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0xa, 0x5) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8916, &(0x7f0000000480)={'bridge_slave_1\x00', @random="0200c100d8f1"}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000500)={&(0x7f0000000540)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000005c0)="96", 0x1}], 0x1}, 0x4048042) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000600)={'macsec0\x00', 0x102}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000640)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x401, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @rand_addr=0x64010102}}}, 0x118) setuid(0xee01) ioprio_set$pid(0x1, 0x0, 0x2000) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000340)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', &(0x7f0000000400), 0x800) sendto$inet(r1, 0x0, 0x5ee, 0x20008800, &(0x7f0000000380)={0x2, 0x4e20, @private=0x4a010100}, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r1) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="480000000308010800000000000000000200000434000480080001400000fffc0800014000000001080001400000000208000140000000090800014000000003000000000000000038dcf92cee435751bfe0d423d4ed5929b5932d5270491cb1183b6d6a9ff4970b45efe4879b59dafbb705551324e814546fd235e0e811d81fd0f4bab91ab1ebfd2c27511e25c6a9b86c00"/159], 0x48}, 0x1, 0x0, 0x0, 0x400c4}, 0x200c845) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) lsetxattr$security_evm(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00), &(0x7f0000000c40)=@sha1={0x1, "f83068c141148b9797e98039fc2af102e60b86e3"}, 0x15, 0x1) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000ffdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="2e003300d0000000ffffffffffff08021100000050505050505020000004250301640f3e010176"], 0x4c}, 0x1, 0x0, 0x0, 0x20028805}, 0x24000846) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000b80)={&(0x7f0000000780), 0xc, &(0x7f0000000b40)={&(0x7f0000000940)=ANY=[@ANYBLOB="c801051c", @ANYRES16=r9, @ANYBLOB="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"], 0x1c8}, 0x1, 0x0, 0x0, 0x8044}, 0x4) r10 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000c80), 0x103081, 0x0) write(r10, &(0x7f0000000cc0)="393424cdd8839bbce4f2b14d1e9c9fe2f5140ec1328ed03641671651ccfbd7afaf8dca9f500ff358e1f294c67a81c6c8fb08a45ef0796c7fa390b833a8b0f6b1fe3ee836b17444cc89f8cbfd00", 0x4d) 2m27.885185824s ago: executing program 8 (id=9598): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, &(0x7f0000000140)='grpquota') r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x66) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r1, 0x0, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) time(0x0) write$UHID_INPUT2(r0, &(0x7f00000001c0), 0x6) syz_usb_connect$uac3(0x3, 0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100300000010820582054000010203010902740003010f6003080b0002010130000904000000010130000a2401050a00e58a000009040100000102300009040101010102300006240290060f0a2525040000000a040009040200ffff0230000904020101"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) 2m25.187188047s ago: executing program 8 (id=9609): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)=@userptr={0x4, 0x0, 0x4, 0x200, 0x3ff, {0x0, 0x2710}, {0x5, 0x1, 0xf7, 0x97, 0x7f, 0x5e, "d1fe33c4"}, 0xffffffff, 0x2, {&(0x7f0000000040)}, 0xd}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x3, 0xffffffff, 0x4, {0x1, @pix={0x0, 0x100, 0x38414761, 0x8, 0x2, 0x4, 0x1, 0x9, 0x1, 0x7, 0x1, 0x5}}, 0x3ff}) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x208000, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300), 0x4680, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f00000015c0)) signalfd4(r0, &(0x7f0000001600)={[0xc]}, 0x8, 0x800) 2m22.666633957s ago: executing program 8 (id=9624): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000201016400000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) 2m22.225063708s ago: executing program 42 (id=9624): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000201016400000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) 2m22.01374105s ago: executing program 6 (id=9627): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0x10, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0xc, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x10000000, 0x0, 0x1, 0xffff06bd, 0xfffffffd, 0x5, 0x1a, 0xf0, 0x10, 0x1, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0xffff00e7, 0x4, 0x3, 0x0, 0xffff8000, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x4, 0xfffffffd, 0x401, 0xedf4, 0x4, 0xe, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x5, 0xffff, 0x401, 0x7, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0xa00, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xf7, 0x101, 0x4, 0x0, 0xa, 0x1, 0x1fe, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff88, 0xe, 0xd, 0xf, 0xc, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10000, 0x9, 0xc6b, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xffffeffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x806, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0x8, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0xffffffff, 0x1, 0x2, 0xffffffff, 0x4, 0xe5, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x2, 0x8, 0xa, 0xfffffffa, 0xa7b1, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x8000, 0x0, 0x80002001, 0xc, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x3, 0xffff, 0x2, 0x10000089, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x0, 0x0, 0xf, 0xce5fb90f, 0x5, 0x4, 0x0, 0xf, 0x9, 0xfc, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x3, 0x4, 0x0, 0x8000, 0x40, 0xd3, 0x7, 0xffffffff, 0xb, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x40003d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x20000002, 0x49, 0x10, 0x400, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x4001, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x0, 0x3, 0x6, 0x3, 0x4, 0x5, 0xd58, 0x0, 0x6, 0x800, 0xffffffff, 0x1, 0x8001, 0xb, 0x0, 0x88d, 0x7fff, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000005, 0xb6, 0x100, 0x404, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0x5, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0x1, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x80000000, 0x40, 0x6, 0x792a3cec, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x10000000, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf4, 0x0, 0xfffff53d, 0xb, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x10000, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x202, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x20020, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb669, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0x5, 0x2, 0x7f, 0x6, 0xa, 0x40, 0x40000005, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0xb, 0x2, 0x7, 0x1, 0x5, 0x9, 0xfffffff7, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x7fff, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4008, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x1, 0x30, 0xb, 0x101, 0x3, 0xbb, 0x3, 0x7, 0x8, 0x8, 0x1, 0xfffffff5, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x3, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0xd, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x0, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000004, 0x3, 0xff, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x71a, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x2, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x9, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xffffffff, 0x7, 0x5, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfefffffe, 0x924, 0x499, 0x5, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x40000004, 0x4, 0x4, 0xff, 0xee, 0x2, 0x8000004, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x8000, 0x7, 0x4, 0x6330, 0xff, 0x6, 0x4ea, 0x1, 0xfff, 0x7, 0x6, 0x0, 0x6, 0x9, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62c8, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0xffffffde, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x402, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x7fffffff, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0x1ec, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0xd, 0xe, 0x7, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0xa, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x1, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @private1, 0xffffffff}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000140)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000180)={0x0, 0x7, 0x1, "e1"}, 0x9) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffc, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0xff0f) 2m21.92211599s ago: executing program 6 (id=9628): openat$nullb(0xffffffffffffff9c, 0x0, 0x529c2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x143102) writev(r1, &(0x7f0000000380)=[{&(0x7f0000002400)="94", 0xf000}, {0x0}], 0x2) write$P9_RSTATu(r0, &(0x7f0000002900)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01], 0x20e) 2m20.958705403s ago: executing program 6 (id=9631): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r0, &(0x7f0000000000)="a800000040000100030000000000000003010000102700003200010000112207005566e3e4ad3edfe890118b5dc24954dfcbde11b778c0a80101c0a8010204d2162e000c20007465737400004c00020008e0fa00010000001000043b66778899aabb00112233445515c15d060006000800000010000700c0a80101c0a801021100400008000a0004d2162e08001600010000000600170000000022d6dff4256bbc85cbe228130500", 0xa8, 0x22044880, 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x50, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="3ceeddda40344471c76904f560947c4a2c893b5679f24a1ee102d5ae2a30e8664145321b2bec2a9fb60a5b8ee26d14f4630d0b06536807e3cde7a65b05348e78acdd370fba0a447c8e6b8dcbea1f25e0409f3b404e4f58cbe07794a36c691880353f50f619d8df65e63db21628693283591a4332f11a225e8b8853b297cd051c742abb2217421001adeddda36e636b79bbb68ef848de3a708ba0a45622abee70da39553636fee713306cd2e4c11abd5b6f96efeabc15f496f3d45c070c86de56b59872c5bfde6222c0661fda81483740413419bfc38a6afab163d7", @ANYRES8=r0], 0x0) syz_usb_ep_read(r1, 0x4, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r4, 0x3, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000140)={r4, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x10) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x1d, r4}, 0x10, &(0x7f0000000340)={&(0x7f0000000300)=@can={{0x3}, 0x8, 0x3, 0x0, 0x0, "8dfe6cd91cf9140b"}, 0x10}, 0x1, 0x0, 0x0, 0x50}, 0x8000) socket$inet(0x2, 0x6, 0xb) socket$igmp(0x2, 0x3, 0x2) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000500)="48000000140081fb7059ae08060c040002ff0f03900000000000000400006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a02000000461eb886a5e54f8f", 0x48}], 0x1}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) sysfs$3(0x3) 2m17.575314571s ago: executing program 6 (id=9644): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r1, &(0x7f00000001c0)={0x2020}, 0x2020) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000002200)='./proc\x00', &(0x7f0000002240)='proc\x00', 0x0, 0x0) mkdir(&(0x7f0000002280)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f00000022c0)='my_tracefs\x00', &(0x7f0000002300)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002340)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000002380)='\x00', 0x9801) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f0000002480)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000002500)=@newtaction={0x18, 0x32, 0x1, 0x4070bd28, 0x25dfdbfb, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x81c1}, 0x9080) move_mount(r3, &(0x7f00000023c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000002400)='./file0\x00', 0x0) umount2(&(0x7f0000002440)='./file0\x00', 0x9) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05002bbf70009cfdb7279c00000008000300", @ANYRES32=r5, @ANYBLOB="080005"], 0x24}}, 0x0) 2m17.396419992s ago: executing program 6 (id=9646): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffa4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) 2m16.976064449s ago: executing program 6 (id=9647): pipe(&(0x7f0000002680)={0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000040)='efs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fchdir(r0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c0000000f14100027bd7000ffdbdf250a00450069616f6962000000ce16408655bf007cf9b80f9883e2a3afe3838fcef7927696b8c8351dfca1a9ec81fafe4bf0a90d47dadc32d7a4e0ee2ba184e5eb1755903c6414f783f48723b98b183df55fd371d394c70193f70af5a8303283d5898db78023d11eeb010085257969732b68fb401e1d345c334485cffc6926e5dfb847"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x10}}], 0x30}, 0x40000081) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x2, 0xaaf, 0x0, 0x0, 0x1000, 0x6, r5, 0x0, 0xa1}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r7) syz_ublk_setup_queues(r2, r6, &(0x7f0000000340)={0x0, 0x7308, 0x10, 0x1, 0x353}, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe716, 0x0, 0x1000006, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7854, 0x8000, 0x1, 0x16a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7571, 0x8000, 0x4003bfff, 0x2b9, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6d33, 0x1000, 0x1, 0x236}}], 0x1, 0x0, 0x0) r8 = open(&(0x7f0000000200)='.\x00', 0x0, 0x244) r9 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r9, r9) setpgid(0x0, r9) openat$cgroup_int(r8, &(0x7f0000000100)='cpu.weight.nice\x00', 0x2, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x0, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs/binder0\x00', 0x800, 0x0) 2m16.772476373s ago: executing program 43 (id=9647): pipe(&(0x7f0000002680)={0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000040)='efs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fchdir(r0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c0000000f14100027bd7000ffdbdf250a00450069616f6962000000ce16408655bf007cf9b80f9883e2a3afe3838fcef7927696b8c8351dfca1a9ec81fafe4bf0a90d47dadc32d7a4e0ee2ba184e5eb1755903c6414f783f48723b98b183df55fd371d394c70193f70af5a8303283d5898db78023d11eeb010085257969732b68fb401e1d345c334485cffc6926e5dfb847"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x10}}], 0x30}, 0x40000081) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x2, 0xaaf, 0x0, 0x0, 0x1000, 0x6, r5, 0x0, 0xa1}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r7) syz_ublk_setup_queues(r2, r6, &(0x7f0000000340)={0x0, 0x7308, 0x10, 0x1, 0x353}, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe716, 0x0, 0x1000006, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7854, 0x8000, 0x1, 0x16a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7571, 0x8000, 0x4003bfff, 0x2b9, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6d33, 0x1000, 0x1, 0x236}}], 0x1, 0x0, 0x0) r8 = open(&(0x7f0000000200)='.\x00', 0x0, 0x244) r9 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r9, r9) setpgid(0x0, r9) openat$cgroup_int(r8, &(0x7f0000000100)='cpu.weight.nice\x00', 0x2, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x0, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs/binder0\x00', 0x800, 0x0) 1m41.979977501s ago: executing program 0 (id=9851): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000002340)=@filter={'filter\x00', 0xe, 0x2, 0x488, [0x0, 0x2000000090c0, 0x2000000094e8, 0x200000009518], 0x0, 0x0, &(0x7f00000090c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"]}, 0x500) 1m41.952007022s ago: executing program 0 (id=9852): r0 = syz_open_dev$loop(&(0x7f0000000680), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000fc0)={'#! ', './file0', [{0x20, '5\t+\x8c=\vw\xf7\x90\xc6\xf2\x9b\xf3\x0e\xc3YO\x02'}, {0x20, '+#'}, {0x20, 'x'}, {0x20, 'ipvlan1\x00'}, {0x20, 'ip6erspan0\x00L\xd9\x85\xa3\xbe\x8c\xb0\xccLu\x04:>\x87\xcb\xa9\xeaa\x87\xa9\xac\xfd\x85\x024\x00\x00\x00\x00\x00\x00\x00'}]}, 0x58) writev(r1, &(0x7f0000001040)=[{&(0x7f0000001100)="dcdc6a56c9f195ffc6f9a5edf89f1f20ec51bc49", 0x14}], 0x1) write$UHID_INPUT(r1, &(0x7f0000001140)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000002180)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000000000200", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) 1m41.743947466s ago: executing program 0 (id=9855): openat$nullb(0xffffffffffffff9c, 0x0, 0x529c2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x143102) writev(r1, &(0x7f0000000380)=[{&(0x7f0000002400)="94", 0xf000}, {0x0}], 0x2) write$P9_RSTATu(r0, &(0x7f0000002900)=ANY=[@ANYBLOB="0e0200000200000005cd000005bf000000000000000000000000000000ffffffffffffff94000000000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b92000000280070673effeb09b5351f5bde05400000000018789ba916638814e5708103b494e10000000000000000020008005500f8f669fb716dcf315ecaf385409ac65b9408678c2c3b9e1d52c36cde7ba4a400b4b0b4f174a666a8529a451b3407dbdab2884baf050000000000000047ec21cabff20f9c1cbe36f4fd1a4cc280e8e289da649a37002c016f6465762f6eb17b2300f9daa5ee23266ecf85fea65e42d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f51685f506ae894806878267d5a1298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d723859dba3f93aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9188549b1125d6c4c9b18c2fb56", @ANYRES32=0x0, @ANYRES32=0xee01], 0x20e) 1m41.072969618s ago: executing program 0 (id=9859): r0 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffa000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1f90, @empty}}, 0x24) r2 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r2, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1f90, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "01"}], 0x18}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fddbdf251b00000008009a"], 0x24}}, 0x40004) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x1}) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x30a) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rxrpc/conns\x00', 0x4000, 0x0) read(r7, &(0x7f0000000240), 0x1000) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040f0400010104"], 0x7) nanosleep(&(0x7f0000000440)={0x0, 0x5000000}, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) 1m40.272991139s ago: executing program 0 (id=9870): r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) openat(0xffffffffffffff9c, &(0x7f0000000000)='./sec/tomoyo/domain_policy\x00', 0x2, 0x28) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sec/tomoyo/domain_policy\x00', 0x2, 0x28) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r2, 0x0, 0x489, &(0x7f00000003c0)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f000601001500"/68, 0x44) (async) setsockopt(r2, 0x0, 0x489, &(0x7f00000003c0)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f000601001500"/68, 0x44) write(r1, &(0x7f0000000040)='select pid=1\nuse_group 0\nnetwork inet stream bind @grp1 --05535\n', 0x40) (async) write(r1, &(0x7f0000000040)='select pid=1\nuse_group 0\nnetwork inet stream bind @grp1 --05535\n', 0x40) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)={0xa, 0x806, 0x8, 0x2, 0x3, 0x40}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x7a, 0x889, {}, 0x1119dfc, 0xffffffff80000006, 0xcd41}}}, 0x90) mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, r0, 0x2000002, 0x8010, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/sys/net/core/rps_default_mask\x00', 0x2, 0x0) write(r5, &(0x7f0000000380)='1,0x40000', 0x9) syz_clone(0x280000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x280000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m39.788101733s ago: executing program 0 (id=9873): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) (async, rerun: 32) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x81c99, 0x0) (rerun: 32) 1m28.332000955s ago: executing program 1 (id=9954): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000002900)=ANY=[@ANYBLOB="0e0200000200000005cd0000c6bf000000000000000000000000000000000000000000000000fffe000000000000000000001b00046e6f6465767b65766f6f7e0539c60005"], 0x20e) 1m28.308896497s ago: executing program 1 (id=9955): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000060a010400000000000000000a0000010900010073797a310000000028000480240001800b0001006f626a726566000014000280080005400000000008000340000000130900020073797a32"], 0x84}, 0x1, 0x0, 0x13, 0x4044810}, 0x20040000) 1m28.246738365s ago: executing program 1 (id=9956): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x3, 0xffffffff, 0x4, {0x1, @pix={0x0, 0x100, 0x38414761, 0x8, 0x2, 0x4, 0x1, 0x9, 0x1, 0x7, 0x1, 0x5}}, 0x3ff}) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x208000, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300), 0x4680, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f00000015c0)) r2 = signalfd4(r0, &(0x7f0000001600)={[0xc]}, 0x8, 0x800) openat(r2, &(0x7f0000001640)='./file0\x00', 0x444201, 0xa9) 1m28.188973373s ago: executing program 1 (id=9957): setns(0xc9, 0x0) (async) r0 = socket(0x2a, 0x2, 0x9) bind$inet(r0, &(0x7f0000000140)={0x2a, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) (async) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000080)={0x0, @multicast1, @broadcast}, &(0x7f00000000c0)=0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x39}, r3}, 0xc) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="401300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m26.967180422s ago: executing program 1 (id=9967): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001380), 0x183000) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000001540)='./mysys\x00', &(0x7f0000001580)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./mysys/module/ueagle_atm/parameters/sync_wait\x00', 0x414801, 0x0) write(r1, &(0x7f0000001600)="4498d58f494d19b54558b0d496da7e2d701cea74d4bcbf8a19b78b9db4a932cc260e773e5205633c4ad1d06456952f58d72f86316539f08b04cde363c7723af7361687f70de667fd51d19224c57523754110da154b2345b05e9e3d615886cf868bc95b82db061328b0fdc2049d684263378d8ff70b128d5b6a5ffec4b41acafddb6ae2719399065a41aec3d42c", 0x8d) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000013c0)={0x7f, 0x6, 0xf}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)) io_setup(0x3ff, &(0x7f0000000040)=0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp6\x00') openat(r3, &(0x7f0000000200)='auth.unix.ip/channel\x00', 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000001440)='./debug\x00', &(0x7f0000001480)='debugfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./debug/mce/severities-coverage\x00', 0x1, 0x0) write(r5, 0x0, 0x0) r6 = dup(r4) write$UHID_INPUT(r6, &(0x7f0000000340)={0xc, {"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", 0x1000}}, 0x1006) io_submit(r2, 0x0, &(0x7f0000000100)) r7 = socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) r10 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_pidfd_open(r10, 0x0) setns(r11, 0x24020000) capset(&(0x7f00000016c0)={0x19980330}, &(0x7f0000001700)={0x2, 0x6, 0x1, 0xe12, 0x3, 0x3}) mount$cgroup(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000001780), 0x0, &(0x7f0000003840)={[{@nofavordynmods}], [{@appraise}, {@smackfsdef={'smackfsdef', 0x3d, 'sysfs\x00'}}, {@obj_role={'obj_role', 0x3d, 'j{\x88\x10'}}, {@seclabel}]}) ioctl$sock_inet_SIOCDARP(r7, 0x8953, &(0x7f00000002c0)={{0x2, 0x4e21, @private=0xa0100ff}, {0x6, @local}, 0x28, {0x2, 0x4e62, @empty}}) 1m26.48226751s ago: executing program 1 (id=9970): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0x85}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)=""/215, 0xd7}, {&(0x7f0000000500)=""/70, 0x46}, {&(0x7f0000000580)=""/188, 0xbc}, {&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/154, 0x9a}, {&(0x7f0000000780)=""/4085, 0xff5}, {&(0x7f0000001780)=""/220, 0xdc}, {&(0x7f0000001880)=""/106, 0x6a}], 0x8}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x7}], 0x5, 0x20, 0x0) recvmmsg(r0, &(0x7f0000001900)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x800008}, {{0x0, 0x0, 0x0}, 0x2}], 0x3, 0x100, 0x0) 1m24.433916302s ago: executing program 44 (id=9873): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) (async, rerun: 32) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x81c99, 0x0) (rerun: 32) 1m11.034919258s ago: executing program 45 (id=9970): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0x85}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)=""/215, 0xd7}, {&(0x7f0000000500)=""/70, 0x46}, {&(0x7f0000000580)=""/188, 0xbc}, {&(0x7f0000000680)=""/25, 0x19}, {&(0x7f00000006c0)=""/154, 0x9a}, {&(0x7f0000000780)=""/4085, 0xff5}, {&(0x7f0000001780)=""/220, 0xdc}, {&(0x7f0000001880)=""/106, 0x6a}], 0x8}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x7}], 0x5, 0x20, 0x0) recvmmsg(r0, &(0x7f0000001900)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x800008}, {{0x0, 0x0, 0x0}, 0x2}], 0x3, 0x100, 0x0) 31.978411994s ago: executing program 5 (id=10252): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x180, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000380], 0x700, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"]}, 0x1f8) 31.892149541s ago: executing program 5 (id=10253): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x21) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x2008, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./dev/kmsg\x00', 0x60000, 0x0) lseek(r0, 0x0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002dc0)={0x1, &(0x7f0000002e00)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) setns(0xc9, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000002e40)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000002e80)={&(0x7f0000002ec0)={0x2, 0x4e21, @private=0xa010103}, 0x10, 0x0, 0x0, &(0x7f0000002f00)=[@rdma_args={0x48, 0x114, 0x1, {{0x4, 0x400}, {&(0x7f0000002f80)=""/4096, 0x1000}, &(0x7f0000003f80)=[{&(0x7f0000003fc0)=""/22, 0x16}], 0x1, 0x61, 0x5}}], 0x48}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x4e20, @empty}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000002d00)={'syzkaller1\x00', 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000002d40)={'syzkaller1\x00', 0x1}) write$tun(r5, &(0x7f0000002d80)={@void, @val={0x1, 0x5, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x40, 0x11, 0x0, @dev={0xac, 0x14, 0x0, 0x2}, @local}, {0x1234, 0x4e20, 0x19, 0x0, @gue={{0x1, 0x0, 0x2, 0x2, 0x100, @void}, "d7364fd63af5655126a829d1ce"}}}}, 0x37) 31.658243022s ago: executing program 5 (id=10257): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffa4000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) 31.517817891s ago: executing program 5 (id=10259): r0 = syz_open_dev$video4linux(&(0x7f00000003c0), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000400)={0x980902, 0x10, @value=0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_IRQCHIP(r3, 0xae64, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0x1f, 0x0, &(0x7f0000000500)) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./dev/file0\x00', 0x1c10c1, 0x106) mkdirat(r5, &(0x7f0000000080)='./dev\x00', 0x191) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x2404c081, &(0x7f0000000280)={0xa, 0x2, 0xd, @loopback, 0x9}, 0x1c) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r3, 0xc0385720, &(0x7f0000000300)={0x1}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000140)={0x2, 0xffffffffffffffff, 0x400}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_AUTH_SUPPORTED(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000001c0)={0x2, 0x7727}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000240)=@assoc_id=r7, &(0x7f00000002c0)=0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='vegas', 0x5) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(r8, r8, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000440)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(0xffffffffffffffff, 0xc0186445, &(0x7f0000000480)={0x40, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r9, 0xc0106450, &(0x7f00000004c0)={r10, 0x0, 0x2}) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r11, 0x12) shutdown(r1, 0x1) 31.313964794s ago: executing program 5 (id=10260): openat$nullb(0xffffffffffffff9c, 0x0, 0x529c2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x143102) writev(r1, &(0x7f0000000380)=[{&(0x7f0000002400)="94", 0xf000}, {0x0}], 0x2) write$P9_RSTATu(r0, &(0x7f0000002900)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01], 0x20e) 30.725526007s ago: executing program 5 (id=10266): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="38010000100033062cbd700000000000fc020000000000000000000000000000ac1414aa0000000000000000000000000000000900000008000000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000000000000000000000001d00000000000700000000000000fcffffffffffffff00000000000000000900000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000100000000000002000000200000000000000048000200656362286369706865725f6e756c6c29"], 0x138}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) write(r1, 0x0, 0x0) 30.392687608s ago: executing program 46 (id=10266): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="38010000100033062cbd700000000000fc020000000000000000000000000000ac1414aa0000000000000000000000000000000900000008000000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000000000000000000000001d00000000000700000000000000fcffffffffffffff00000000000000000900000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000100000000000002000000200000000000000048000200656362286369706865725f6e756c6c29"], 0x138}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) write(r1, 0x0, 0x0) 18.43975908s ago: executing program 4 (id=10333): r0 = socket(0xf, 0x3, 0x20) recvmsg(r0, 0x0, 0x2000) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/comedi4\x00', 0xe2100, 0x0) ioctl$COMEDI_BUFCONFIG(r1, 0x8020640d, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x127200, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) ptrace$setregs(0xf, 0x0, 0x6000000000000000, &(0x7f0000000080)="18f74c501eade4973e7ca62e0ebf88bee307481204") (rerun: 32) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f00000005c0)=0xc) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xc}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r5, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x2, 0x5, 0x5591, 0xfffffff7}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x480c0) mmap$IORING_OFF_SQ_RING(0x0, 0xe, 0x2000007, 0x100010, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, 0x0) (rerun: 32) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) (async, rerun: 32) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0xbc9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000200)) (rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) (async, rerun: 64) r8 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) sendto$packet(r8, &(0x7f0000000340)="080211000000cbc2ed4000018848", 0xe, 0x0, &(0x7f0000000380)={0x11, 0x8, r7, 0x1, 0x3, 0x6, @random}, 0x14) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x20040845, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000040)) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r12, 0x5606, 0x0) connect$bt_rfcomm(r11, &(0x7f0000000280)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x77}, 0xa) 18.124065326s ago: executing program 4 (id=10336): syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) (async) r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5, &(0x7f0000000540)=ANY=[]) 15.064198476s ago: executing program 4 (id=10360): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000600)=0x7e) r1 = add_key$keyring(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000007c0)='asymmetric\x00', &(0x7f0000000800)=@keyring={'key_or_keyring:', r2}) add_key(&(0x7f0000000840)='asymmetric\x00', 0x0, &(0x7f0000000880)="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", 0x110, r1) write$tun(0xffffffffffffffff, &(0x7f0000000540)={@void, @void, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, 'Z\vB', 0x7a, 0x6, 0x0, @empty, @mcast1, {[@srh={0x2b, 0xa, 0x4, 0x5, 0x8c, 0x20, 0x3, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @mcast2, @local, @dev={0xfe, 0x80, '\x00', 0x1b}]}], @payload_direct={{{{0x22, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, 0x2, 0xe03, 0x0, 0x3, 0xc, 0x5, 0x3, 0x10, 0x7, 0x2, 0x4e22, 0x4e24}, 0x1, 0x2}}, [0x0, 0x0]}}}}}, 0xa2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0xfffffffc, 0xd}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r4, &(0x7f00000004c0)="306663353a313232373ad39d21f0c46170bdd2881c22c01272ced0f8b4dfab6252381d06cfe629282cfcc95ded3c80e612a2f967c32b2664c6c6ca9a825a4630d6f1f61a72c2f5ed7846257ceaa3c51eb08681eedf5990b60951dbe7", 0x5c) sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x23, 0xa01, 0xfffffffc, 0x0, {0x7}}, 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$F2FS_IOC_COMPRESS_FILE(r6, 0xf518, 0x0) write(r5, &(0x7f0000000640)="71b388f55e0c4882aad8393afeb6a42495a862e691b6b1decf5098f3bbe96f5596ffe9b122309ecb4ba74bbb095b26abd30d8a6441471602cbdd7b240c7ea46334b51e4d92c86013e603505c1f0dabd21120ad599dd0a7be87c08aea322d664aff496d7fa230d68367", 0x69) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000000)={0x0, 0x56595559, 0x1, @discrete={0x1, 0x9}}) 14.86516659s ago: executing program 4 (id=10363): ioctl$COMEDI_BUFCONFIG(0xffffffffffffffff, 0x8020640d, &(0x7f0000000000)={0x800, 0x1, 0x2, 0xffffffff}) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x1, 0x0, 0x0, 0x68c1, 0x5}) ioctl$COMEDI_POLL(r0, 0x640f) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0xfe, "5d8816803f600ed987c54c46ec8baa209a26042d9dd16dc9dbcd53df8c72b32110dbd38b2f7f6041dde5479ee34079dcda719d4064217ff80d4a3f03a0c0702f7ec6e02cc7611c523b817cbd277782a77a0be40eac4bba3bbe2256af7bccbfb15e1765aff5bc242f30f56328686e0fe4778fde80c52b6fb6fbcb7f4c2ca8ec088f04b7fba472081446104d5a431e2538a74a4416ca02e0132323c939ce0d76df158dc0ed37052d6d7e391db88882a3b8e50e78376e211fc80ad02d9c0c635bdd56909caa49e26f5aabfa0a9e1bdcabe4517a56afee468c192a444948161b6f2e0262652db59307873886042aebdd68183a4414ef6fe3f257649243fdc4cf"}, &(0x7f0000000280)=0x106) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value={r1, 0xff}, 0x8) ioctl(r0, 0x6a462295, &(0x7f0000000300)="6bdf852ef943ea473e4431b1c28e9696f368cfcb7f8b3c5eef6b92b56418d5c362f65ad4a87a7386e186e61b864fd9098965d15f5617d19c6d6243e544e3d06f0e2fdcd56d2c09c8fd7c537b006407e2bd2f4dc46a38975c5fcfe505d13023fb71a37d87aa8fe16e06eeacfb384cbbe07da62abba9148e81cf67f47e32cb6b328249db5a48bfbebd676b701dfba6ba8ac74ba59b248920892649eed9342eaf9f9edb15408d8c2bce56") ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000480)={0x17, 0x97, &(0x7f00000003c0)="eb94f129e1351bc09ff4cd94d3a0022df5bc495451f3152028b9bfa36cc66462cb52ef53d5c353fa8b325e027d64be1d0dd80409e0e5876fb0af027f48fdb5cb9e2559f0bec00ed30c23180cd64eef02a7afdfd3017e8ecc0344ee9ea0483481e751f4fad0ac916cde927d37ecc1c4a395758fa8c45bcc8f8355a34d85cb1ba8cf63d41dc9da5f4143313da86ed5c3f3109acaea596583"}) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0)={0x7c4, 0x6, 0x8, 0x7}) sendmsg$NFT_BATCH(r0, &(0x7f00000008c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELTABLE={0x30, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0xc8, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0xfff}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0x36, 0x7, 0x1, 0x0, "677c14c3fa5828f8b1982036ed41c0c5be12821854a88e78bad2ace50919277c7be98d680af14366cf1217746acbae8b015a"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2c}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x28d1ad1a0c05477b}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xcd}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x60}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x1007, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3a}]}, @NFT_MSG_DELRULE={0x1c0, 0x8, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_RULE_USERDATA={0xa2, 0x7, 0x1, 0x0, "909626a1eba188be9d818f3f2247df4ce17808f7c61d98239941b142729af7030df126ac62bb98a3def672696be8564439923f437cf5ad18a55d1fa929aae610fba2b31aa25f88f7df524d3fd0958e18c1dcf94d4a2aa1e1692a1bb3f8ed57d3674868fa34b97a0fb890b943237b5f845b0232464f2e1059bab6546f64002485274a9c3a60ef8fb401e60cc77c47729f5d6e0d22eeeef3ebf3eaf6f7531c"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_EXPRESSIONS={0xf4, 0x4, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_QUOTA_BYTES={0xc}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000001}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x81}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x1000}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x5c, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8}, @NFTA_LOG_PREFIX={0x5, 0x2, 0x1, 0x0, '\x00'}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x9c}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x200}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2e}, @NFTA_LOG_PREFIX={0x9, 0x2, 0x1, 0x0, '%/@!\x00'}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x5}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x4cbe}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0xdfc5}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELTABLE={0x34, 0x2, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x330}, 0x1, 0x0, 0x0, 0x400c4}, 0x800) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000900)={r1, 0x9, 0xbf64}, &(0x7f0000000940)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000980)={r2}, &(0x7f00000009c0)=0x8) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000b00)={&(0x7f0000000a40)=""/151, 0x97, 0xb623, 0x9}) bind$rds(r0, &(0x7f0000000b40)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000b80), 0x40040, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000bc0)={0x401, 0x200, 0x3, 0x8, r2}, &(0x7f0000000c00)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000c40)={r5, 0x6}, &(0x7f0000000c80)=0x8) ioctl$INCFS_IOC_PERMIT_FILL(r3, 0x40046721, &(0x7f0000000cc0)={r4}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000d00), 0x4000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f0000000d40)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000d80)={0x28, 0x4, r8, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5}) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000dc0), 0x10400, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r9, 0x3b66, 0x6) r10 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r10, 0x117, 0x5, 0x0, 0x2) syz_open_dev$loop(&(0x7f0000000e00), 0x8b, 0x189002) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000e40)={r6, 0x0, 0xd43, 0x7}, &(0x7f0000000e80)=0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f00), r0) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, r11, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x840) 14.715841426s ago: executing program 4 (id=10365): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x180, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000380], 0x700, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"]}, 0x1f8) 14.448104692s ago: executing program 4 (id=10366): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc_mnt\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc_mnt/kcore\x00', 0x0, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000180)=""/164, 0xa4}], 0x1) ioctl$TCSETS(r0, 0x4b52, &(0x7f0000000100)={0xfa, 0x0, 0x7, 0x2, 0x18, "88bd91aa90758062b5fffd9272e301aa98af75"}) 7.195230219s ago: executing program 3 (id=10414): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000002900)=ANY=[@ANYBLOB="0e0200000200000005cd0000c6bf0000000000000000000000000000000000000000000000000042000000000000000000001b00046e6f6465767b65766f6f7e0539c60005"], 0x20e) 7.070443603s ago: executing program 3 (id=10415): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x180, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000380], 0x700, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"]}, 0x1f8) 6.928126445s ago: executing program 3 (id=10416): syz_usb_connect(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002020000407b06032300080000000109022d0001010080000904000003ff00000009050102000200000009058202000200000009058303"], 0x0) (async) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000280)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36c") r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'veth0_macvtap\x00', 0x200}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000340)={'veth1_to_batadv\x00', @broadcast}) (async) write$tun(r1, &(0x7f0000000380)={@val={0x0, 0x8917}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x4000, 0x0, 0x11, 0x0, @multicast2, @multicast1}, {0x0, 0x17c1, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x4, 0x100, @void}}}}}}}}, 0x32) (async) syz_usb_connect$midi(0x3, 0xf8, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x0, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe6, 0x1, 0x1, 0xf, 0x20, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x8, 0x1, 0x3, 0x30, 0x8, [@ms_header={0x7, 0x24, 0x1, 0x5d24, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x7, 0x7}, @midi_out_jack={0xb, 0x24, 0x3, 0x3, 0xff, 0x2, [{0x0, 0x6}, {0x8, 0x9}], 0x1}, @midi_out_jack={0x15, 0x24, 0x3, 0x0, 0x67, 0x7, [{0x6, 0x2d}, {0x4, 0xf}, {0xa, 0xf}, {0x0, 0x82}, {0x8, 0xfd}, {0x4}, {0xf1, 0x9c}], 0x7}, @ms_header={0x7, 0x24, 0x1, 0x4, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x6, 0x7}], [{{0x9, 0x5, 0x1, 0x0, 0x400, 0x4, 0x51, 0x1, {0x6, 0x25, 0x1, 0x2, "629f"}}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0x5, 0x3, 0x1, {0x14, 0x25, 0x1, 0x10, "fb7a2bdd6c69b66eaf5a249c21f4a25e"}}}, {{0x9, 0x5, 0x6, 0x1, 0x200, 0xff, 0x8, 0xfc, {0x10, 0x25, 0x1, 0xc, "540d0c2d3e82e35bf7aee6ad"}}}, {{0x9, 0x5, 0x6, 0xcf77b88593b8a928, 0x10, 0x2, 0x3, 0x2, {0xa, 0x25, 0x1, 0x6, "44abd162539e"}}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x2, 0x4, 0x10, {0x7, 0x25, 0x1, 0x3, "7878b4"}}}, {{0x9, 0x5, 0xb, 0x18, 0x400, 0x7, 0x8, 0x8, {0x9, 0x25, 0x1, 0x5, "d1937fa2b7"}}}, {{0x9, 0x5, 0x5, 0x0, 0x420, 0x4, 0xa, 0x3, {0x7, 0x25, 0x1, 0x3, "e31714"}}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x9, 0x4, 0x5, {0x5, 0x25, 0x1, 0x1, 'l'}}}]}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x7, 0x9, 0x4, 0xff, 0x6}, 0x59, &(0x7f0000000180)={0x5, 0xf, 0x59, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xf, 0x7, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x52, "a069dd4ffdd1b3cb463427e6ea304479"}, @ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x4, 0xff00, 0x0, [0xff00, 0x30]}, @generic={0x22, 0x10, 0x2, "3c3ba73abdb340318f4f36ed540681f837e4a412cf0b4bfa3aa3cc7324eaec"}]}, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xe8f0}}]}) (async) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000440)=ANY=[@ANYBLOB="1201500200000040532b24004000010202010902690003012b4006080b020101032008090400000001012000092401008009090009090401000001022000090401010101022000090501091000320009082501023000010009040200000102200009040201010102"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) 5.465760461s ago: executing program 3 (id=10425): r0 = syz_open_dev$loop(&(0x7f0000000680), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000fc0)={'#! ', './file0', [{0x20, '5\t+\x8c=\vw\xf7\x90\xc6\xf2\x9b\xf3\x0e\xc3YO\x02'}, {0x20, '+#'}, {0x20, 'x'}, {0x20, 'ipvlan1\x00'}, {0x20, 'ip6erspan0\x00L\xd9\x85\xa3\xbe\x8c\xb0\xccLu\x04:>\x87\xcb\xa9\xeaa\x87\xa9\xac\xfd\x85\x024\x00\x00\x00\x00\x00\x00\x00'}]}, 0x58) writev(r1, &(0x7f0000001040)=[{&(0x7f0000001100)="dcdc6a56c9f195ffc6f9a5edf89f1f20ec51bc49", 0x14}], 0x1) write$UHID_INPUT(r1, &(0x7f0000001140)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000002180)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000000000000000000000004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) 5.091958638s ago: executing program 3 (id=10427): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="38010000100033062cbd700000000000fc020000000000000000000000000000ac1414aa0000000000000000000000000000000900000008000000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd320000000000000000000000001b0000000000000700000000000000fcffffffffffffff00000000000000000900000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000100000000000002000000200000000000000048000200656362286369706865725f6e756c6c29"], 0x138}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) write(r1, 0x0, 0x0) 4.888328994s ago: executing program 3 (id=10430): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000000314010000000000000010000900020073797a30000000000800410072786500140033006c6f00"/56], 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x18}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000007c0)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000800)={0x801, 0x10, 0x8, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000840)={0x0, 0x2}, 0x2d) sendto$inet6(r3, &(0x7f0000000880)="dc", 0x1, 0x44004, &(0x7f00000008c0)={0xa, 0x4e24, 0x7, @loopback, 0xc5f}, 0x1c) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="07042abd7000fcdbdf25070000000a0004007770616e3300000008000500020000000a0004007770616e33000000080001"], 0x70}, 0x1, 0x0, 0x0, 0x4048044}, 0x8000) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000201bd7000fedbdf25040000000c000600030000000b000000"], 0x20}, 0x1, 0x0, 0x0, 0xc800}, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = fsopen(&(0x7f0000000740)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, 0x0, 0x0, 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r6) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f0000000780), 0x0, 0xc0b41) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap$dontunmap(&(0x7f00005a4000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000125000/0x2000)=nil) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r10, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) sendmsg$NL802154_CMD_SET_TX_POWER(r4, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r5, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x8840) 4.067542775s ago: executing program 9 (id=10436): r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x0, 0xd, 0x2, 'Vx'}, 0x0, 0x0, 0x0, 0x0}) timer_create(0x6, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={&(0x7f00000001c0)="e949c3ac7b6cae990011f21e446f6c1f749fa3e57072e7a120ce8c844020f351ff3319440b8489a0ae8762a5cfce412a4d85420d169f2bbb4f7b55a60916f519ef4cbdbae618c8480af00d7cd5268896a92fd15bfe5404c3c0731628060b1e0cc42c72f5656d7e1f2b9ffff871d91bfe7df0ffed62e61062aaf7e36c5cc56cb47af89ffe0c6dad4a511cae", &(0x7f0000000280)="32d00409fbea062c9f19b47888aa3468331a1c10352e63072c38ac7aff87e285b80069375b29ce71b1bff0d056b4da332bd8efda82edb7fbfcf77152b1073f6ace"}}, &(0x7f0000000340)) syz_usb_control_io(r0, &(0x7f0000001680)={0x2c, &(0x7f0000001400)={0x40, 0xd, 0x9, {0x9, 0xf, "e6a410cb4a3b8a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000380)={0x14, &(0x7f0000000200)=ANY=[], 0x0}, 0x0) 3.347876274s ago: executing program 7 (id=10439): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1) recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)=""/181, 0xb5}, {&(0x7f00000005c0)=""/103, 0x67}, {&(0x7f0000000640)=""/4083, 0xff3}, {&(0x7f0000001640)=""/93, 0x5d}, {&(0x7f00000016c0)=""/209, 0xd1}, {&(0x7f00000017c0)=""/170, 0xaa}, {&(0x7f0000001880)=""/170, 0xaa}], 0x7}, 0x817}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}], 0x3, 0x100a0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x44000) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000001a80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001a40)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="04002abd7000fbdbdf2507000000317d1ee56f40cf973f3e3cc53d3696cfa1d1969362c383614e0d8b4ba48b664b15e62b5c00727a8b0b044963fb30f8abd2ec809593b55a0c91c637c2d86798e512d053fc"], 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x41) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@new_dev={0x4, 0xf39, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000200)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, 0x0, 0x1, &(0x7f0000000300)={0x2e, 0x5d, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r4, '\x00', {0xfff7, 0x4, 0x0, 0x0}}, 0x0) write(r3, &(0x7f0000000440)='3', 0x4e) 2.441953786s ago: executing program 7 (id=10440): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x21) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x2008, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./dev/kmsg\x00', 0x60000, 0x0) lseek(r0, 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) setns(0xc9, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002d00)={'syzkaller1\x00', 0x5001}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000002d40)={'syzkaller1\x00', 0x1}) write$tun(r1, &(0x7f0000002d80)={@void, @val={0x1, 0x5, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x40, 0x11, 0x0, @dev={0xac, 0x14, 0x0, 0x2}, @local}, {0x1234, 0x4e20, 0x19, 0x0, @gue={{0x1, 0x0, 0x2, 0x2, 0x100, @void}, "d7364fd63af5655126a829d1ce"}}}}, 0x37) 1.833893465s ago: executing program 7 (id=10441): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000300)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d7061746830") ioctl(r0, 0xc138fd09, &(0x7f0000000380)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000000000000006d70617468300000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e20302031203120373a302031") 1.687861956s ago: executing program 9 (id=10442): r0 = syz_open_dev$loop(&(0x7f0000000680), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000fc0)={'#! ', './file0', [{0x20, '5\t+\x8c=\vw\xf7\x90\xc6\xf2\x9b\xf3\x0e\xc3YO\x02'}, {0x20, '+#'}, {0x20, 'x'}, {0x20, 'ipvlan1\x00'}, {0x20, 'ip6erspan0\x00L\xd9\x85\xa3\xbe\x8c\xb0\xccLu\x04:>\x87\xcb\xa9\xeaa\x87\xa9\xac\xfd\x85\x024\x00\x00\x00\x00\x00\x00\x00'}]}, 0x58) writev(r1, &(0x7f0000001040)=[{&(0x7f0000001100)="dcdc6a56c9f195ffc6f9a5edf89f1f20ec51bc49", 0x14}], 0x1) write$UHID_INPUT(r1, &(0x7f0000001140)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000002180)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000000000000000000000000000000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) 1.505627219s ago: executing program 7 (id=10443): r0 = openat$kvm(0xffffff9c, &(0x7f0000000a80), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000ac0)={0x1}) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000b00)={0x8f, 0x0, 0xe}) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000380)={0x0, &(0x7f0000000000)=[@nested_create_vm={0x12d, 0x18, 0x2}, @nested_amd_clgi={0x17f, 0x10}, @wrmsr={0x65, 0x20, {0x2ea, 0xb62}}, @nested_load_syzos={0x136, 0x60, {0x2, 0x3a033c4e, [@wr_crn={0x67, 0x20, {0x3, 0x3}}, @wr_drn={0x68, 0x20, {0x7, 0x4}}]}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @host64=0x2c05, 0x8f, 0x8ed, 0x5}}, @in_dx={0x69, 0x20, {0x9032, 0x4}}, @nested_create_vm={0x12d, 0x18}, @in_dx={0x69, 0x20, {0xc4ed, 0x1}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x50, 0x9, 0x5, 0x6a7c}}, @wrmsr={0x65, 0x20, {0x9, 0x1}}, @nested_vmresume={0x130, 0x18, 0x2}, @in_dx={0x69, 0x20, {0x20dc, 0x1}}, @wrmsr={0x65, 0x20, {0x370, 0x9}}, @rdmsr={0x66, 0x18, {0x14a}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0xa8, 0x5ae06622, 0xf294, 0x7fffffff}}, @out_dx={0x6a, 0x28, {0x7e6}}, @in_dx={0x69, 0x20, {0xfacb, 0x3}}, @nested_amd_clgi={0x17f, 0x10}, @uexit={0x0, 0x18, 0x80}, @nested_amd_clgi={0x17f, 0x10}, @enable_nested={0x12c, 0x18}, @cpuid={0x64, 0x18, {0x5, 0x4}}, @out_dx={0x6a, 0x28, {0xfe9, 0x0, 0x678d9799}}, @wrmsr={0x65, 0x20, {0xc0011039, 0x7fffffff}}, @in_dx={0x69, 0x20, {0x6c73, 0x2}}], 0x350}) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f00000003c0)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000b80)={[{0x5, 0x6, 0x1, 0x2, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x7f, 0x4, 0xd, 0x20000004}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0x5, 0x4, 0x3}, {0x10001, 0x4, 0x9, 0x0, 0x0, 0x1d, 0x0, 0x10, 0x2, 0x0, 0x0, 0x40, 0x20000000000000}]}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000c00)={[0xf, 0x3e8, 0x4, 0x1000000000000002, 0x101fffffffffffe, 0x7fffffffffffffff, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0x4, 0x2000000000000003, 0x7f4], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.287930615s ago: executing program 9 (id=10444): openat$nullb(0xffffffffffffff9c, 0x0, 0x529c2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x143102) writev(r1, &(0x7f0000000380)=[{&(0x7f0000002400)="94", 0xf000}, {0x0}], 0x2) write$P9_RSTATu(r0, &(0x7f0000002900)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01], 0x20e) 919.896855ms ago: executing program 7 (id=10445): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="38010000100033062cbd700000000000fc020000000000000000000000000000ac1414aa0000000000000000000000000000000900000008000000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd320000000000000000000000001d0000000000000700000000000000fcffffffffffffff00000000000000000900000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000100000000000002000000200000000000000048000200656362286369706865725f6e756c6c29"], 0x138}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) write(r1, 0x0, 0x0) 714.800105ms ago: executing program 7 (id=10446): landlock_create_ruleset(0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001700)=ANY=[@ANYBLOB="78040000", @ANYRES16=0x0, @ANYBLOB="040025bd7000fedbdf250a000000940102808d00050025991772da0e82dfde53c936b50e24b99084741322ee45af11e8d36d240c875a11492fa2b1558a74de1dbb9a540cfc96e9a9b5e4d04f31a72e7128cf22c43915931e8eaa3d9d3a0e7aa09f6ceaf172e85a0967be5b2d68489f69222c5ba333f00e32b489128cb4bf5f535cd10124b055c33b055ebf9d8a38ff197102a69218992b6aa860249238c08a0000000800020003000000f5000400214ba81cf5fed33e4b990b87d8a05afc9b650320f06918c30504d42ea48b63bc0dc6822e52968a439a644663bcd8b2f7d60abc46992648bac600d9d89836a36303d002eb28e6f8fdf65a47cf8b7b0b9251163b9f37db173c6adfd530dac10a386453e9c0b0ba1562b01b0b46222aea49e037c039c63022f9b40559bd0778b5ea8d2f87ae3bf228e89c8de1a100c7744aff86e46b91225a9f2c78c8c9f58a63794fc3cae22f95954928b717927c34e18d8ad7fc0cf7167f9320fc1aa7ebdfaa125b224802ea1f4ec7f9b6e051723cf5fdea1399819beabc646410f3c2c1a7725e019ce4e71c8a91ad3363cf51ed399dd408000000680001801400020076657468315f746f5f6261746164760008000300010000000800030002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="704733c5e3c062d19c4c795d4cb9b713c74ca38f0c3807f7a9e89cddf2e658b144f3287e456466354e51fb9821336310c16008c346", @ANYRES32=0x0, @ANYBLOB="140002007767300000000000000000000000000014000200776732000000000000000000000000001c0001800800030001000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="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"], 0x478}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, &(0x7f00000005c0)="0f0171abc44119f3b34600c0fec421f8565d7fc4a2a1400066410f38823bc4e261968b0000c0fe0f070f8708000000d3c7440f540409", 0x36}], 0x1, 0x1f, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setns(0xc9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000680), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x0) clock_settime(0xfffffffb, &(0x7f0000000600)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f00000006c0)={0x8, {"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", 0x1000}}, 0xfffffe38) 404.47908ms ago: executing program 9 (id=10447): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x180, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000380], 0x700, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"]}, 0x1f8) 255.138472ms ago: executing program 9 (id=10448): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000060a010400000000000000000a0000010900010073797a310000000028000480240001800b0001006f626a726566000014000280080005400000000008000340000000130900020073797a32"], 0x84}, 0x1, 0x0, 0x200000000000000, 0x4044810}, 0x20040000) 0s ago: executing program 9 (id=10449): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x21) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x2008, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./dev/kmsg\x00', 0x60000, 0x0) lseek(r0, 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) setns(0xc9, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002d00)={'syzkaller1\x00', 0x5001}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000002d40)={'syzkaller1\x00', 0x1}) write$tun(r1, &(0x7f0000002d80)={@void, @val={0x1, 0x5, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x40, 0x11, 0x0, @dev={0xac, 0x14, 0x0, 0x2}, @local}, {0x1234, 0x4e20, 0x19, 0x0, @gue={{0x1, 0x0, 0x2, 0x2, 0x100, @void}, "d7364fd63af5655126a829d1ce"}}}}, 0x37) kernel console output (not intermixed with test programs): t_event_from_user+0x10/0x10 [ 1357.647983][T31366] evdev_write+0x2c7/0x4c0 [ 1357.648002][T31366] ? get_pid_task+0x20/0x1f0 [ 1357.648032][T31366] ? __pfx_evdev_write+0x10/0x10 [ 1357.648053][T31366] ? bpf_lsm_file_permission+0x9/0x20 [ 1357.648071][T31366] ? security_file_permission+0x75/0x260 [ 1357.648095][T31366] ? rw_verify_area+0x203/0x4c0 [ 1357.648125][T31366] ? __pfx_evdev_write+0x10/0x10 [ 1357.648143][T31366] vfs_write+0x296/0xba0 [ 1357.648179][T31366] ? __pfx_vfs_write+0x10/0x10 [ 1357.648209][T31366] ? __fget_files+0x2a/0x420 [ 1357.648233][T31366] ? __fget_files+0x3a2/0x420 [ 1357.648257][T31366] ? __fget_files+0x2a/0x420 [ 1357.648287][T31366] ? fdget+0x1ac/0x250 [ 1357.648318][T31366] ksys_write+0x150/0x270 [ 1357.648349][T31366] ? __pfx_ksys_write+0x10/0x10 [ 1357.648387][T31366] do_syscall_64+0x166/0x520 [ 1357.648412][T31366] ? trace_irq_disable+0x3b/0x140 [ 1357.648431][T31366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1357.648449][T31366] ? clear_bhb_loop+0x70/0xc0 [ 1357.648471][T31366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1357.648488][T31366] RIP: 0033:0x7f7a32d9e559 [ 1357.648505][T31366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1357.648521][T31366] RSP: 002b:00007f7a33cf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1357.648542][T31366] RAX: ffffffffffffffda RBX: 00007f7a33025fa0 RCX: 00007f7a32d9e559 [ 1357.648557][T31366] RDX: 000000000000ff0f RSI: 0000200000000040 RDI: 0000000000000004 [ 1357.648572][T31366] RBP: 00007f7a33cf7090 R08: 0000000000000000 R09: 0000000000000000 [ 1357.648584][T31366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1357.648596][T31366] R13: 00007f7a33026038 R14: 00007f7a33025fa0 R15: 00007ffe6c427838 [ 1357.648634][T31366] [ 1357.710154][ T9160] usb 6-1: Using ep0 maxpacket: 16 [ 1357.726431][ T9160] usb 6-1: New USB device found: idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 1357.752896][ T9160] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1357.936306][ T9160] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.936331][ T9160] usb 6-1: Product: syz [ 1357.936344][ T9160] usb 6-1: Manufacturer: syz [ 1357.936357][ T9160] usb 6-1: SerialNumber: syz [ 1357.962582][ T9160] usb 6-1: config 0 descriptor?? [ 1357.966985][ T9160] uvcvideo 6-1:0.0: probe with driver uvcvideo failed with error -22 [ 1357.984153][ T33] audit: type=1800 audit(1792242854.255:10934): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=731421 res=0 errno=-22 [ 1358.009733][ T33] audit: type=1800 audit(1792242854.265:10935): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=731453 res=0 errno=-22 [ 1358.009784][ T33] audit: type=1800 audit(1792242854.275:10936): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=731428 res=0 errno=-22 [ 1358.009822][ T33] audit: type=1800 audit(1792242854.275:10937): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=731429 res=0 errno=-22 [ 1358.010568][ T33] audit: type=1800 audit(1792242854.285:10938): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=731450 res=0 errno=-22 [ 1358.012060][ T33] audit: type=1800 audit(1792242854.285:10939): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=731451 res=0 errno=-22 [ 1358.177059][T31334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1358.177505][T31334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1358.204983][T31390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9816'. [ 1358.251860][ T5697] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1358.266931][ T9165] usb 6-1: USB disconnect, device number 83 [ 1358.379940][ T5697] usb 2-1: device descriptor read/64, error -71 [ 1358.620058][ T5697] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1358.750081][ T5697] usb 2-1: device descriptor read/64, error -71 [ 1358.859969][ T5697] usb usb2-port1: attempt power cycle [ 1359.199680][ T5697] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1359.199852][ T5710] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1359.220561][ T5697] usb 2-1: device descriptor read/8, error -71 [ 1359.352834][ T5710] usb 6-1: Using ep0 maxpacket: 32 [ 1359.354018][ T5710] usb 6-1: New USB device found: idVendor=8086, idProduct=0b63, bcdDevice=6a.32 [ 1359.359219][ T5710] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1359.365835][ T5710] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.365859][ T5710] usb 6-1: Product: syz [ 1359.365873][ T5710] usb 6-1: Manufacturer: syz [ 1359.365885][ T5710] usb 6-1: SerialNumber: syz [ 1359.373482][ T5710] usb 6-1: config 0 descriptor?? [ 1359.459739][ T5697] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1359.480802][ T5697] usb 2-1: device descriptor read/8, error -71 [ 1359.586427][T31467] FAULT_INJECTION: forcing a failure. [ 1359.586427][T31467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1359.586460][T31467] CPU: 1 UID: 0 PID: 31467 Comm: syz.0.9823 Tainted: G L syzkaller #0 PREEMPT(full) [ 1359.586483][T31467] Tainted: [L]=SOFTLOCKUP [ 1359.586489][T31467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1359.586499][T31467] Call Trace: [ 1359.586506][T31467] [ 1359.586515][T31467] dump_stack_lvl+0xe8/0x150 [ 1359.586543][T31467] should_fail_ex+0x3eb/0x540 [ 1359.586573][T31467] _copy_from_user+0x2d/0xb0 [ 1359.586597][T31467] input_event_from_user+0xb1/0x290 [ 1359.586620][T31467] ? __pfx_input_event_from_user+0x10/0x10 [ 1359.586650][T31467] evdev_write+0x2c7/0x4c0 [ 1359.586667][T31467] ? get_pid_task+0x20/0x1f0 [ 1359.586696][T31467] ? __pfx_evdev_write+0x10/0x10 [ 1359.586716][T31467] ? bpf_lsm_file_permission+0x9/0x20 [ 1359.586733][T31467] ? security_file_permission+0x75/0x260 [ 1359.586758][T31467] ? rw_verify_area+0x203/0x4c0 [ 1359.586787][T31467] ? __pfx_evdev_write+0x10/0x10 [ 1359.586805][T31467] vfs_write+0x296/0xba0 [ 1359.586837][T31467] ? __pfx_vfs_write+0x10/0x10 [ 1359.586866][T31467] ? __fget_files+0x2a/0x420 [ 1359.586890][T31467] ? __fget_files+0x3a2/0x420 [ 1359.586915][T31467] ? __fget_files+0x2a/0x420 [ 1359.586942][T31467] ? fdget+0x1ac/0x250 [ 1359.586972][T31467] ksys_write+0x150/0x270 [ 1359.587000][T31467] ? __pfx_ksys_write+0x10/0x10 [ 1359.587038][T31467] do_syscall_64+0x166/0x520 [ 1359.587061][T31467] ? trace_irq_disable+0x3b/0x140 [ 1359.587087][T31467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1359.587107][T31467] ? clear_bhb_loop+0x70/0xc0 [ 1359.587130][T31467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1359.587148][T31467] RIP: 0033:0x7f7a32d9e559 [ 1359.587166][T31467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1359.587182][T31467] RSP: 002b:00007f7a33cf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1359.587203][T31467] RAX: ffffffffffffffda RBX: 00007f7a33025fa0 RCX: 00007f7a32d9e559 [ 1359.587217][T31467] RDX: 000000000000ff0f RSI: 0000200000000040 RDI: 0000000000000004 [ 1359.587232][T31467] RBP: 00007f7a33cf7090 R08: 0000000000000000 R09: 0000000000000000 [ 1359.587243][T31467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1359.587254][T31467] R13: 00007f7a33026038 R14: 00007f7a33025fa0 R15: 00007ffe6c427838 [ 1359.587285][T31467] [ 1359.595256][ T5697] usb usb2-port1: unable to enumerate USB device [ 1359.615635][ T5710] ljca 6-1:0.0: bulk endpoints not found [ 1359.628256][ T5710] usb 6-1: USB disconnect, device number 84 [ 1360.535922][T31518] FAULT_INJECTION: forcing a failure. [ 1360.535922][T31518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1360.535955][T31518] CPU: 1 UID: 0 PID: 31518 Comm: syz.5.9833 Tainted: G L syzkaller #0 PREEMPT(full) [ 1360.535980][T31518] Tainted: [L]=SOFTLOCKUP [ 1360.535987][T31518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1360.535998][T31518] Call Trace: [ 1360.536005][T31518] [ 1360.536013][T31518] dump_stack_lvl+0xe8/0x150 [ 1360.536045][T31518] should_fail_ex+0x3eb/0x540 [ 1360.536072][T31518] _copy_from_user+0x2d/0xb0 [ 1360.536099][T31518] input_event_from_user+0xb1/0x290 [ 1360.536121][T31518] ? __pfx_input_event_from_user+0x10/0x10 [ 1360.536150][T31518] evdev_write+0x2c7/0x4c0 [ 1360.536168][T31518] ? get_pid_task+0x20/0x1f0 [ 1360.536200][T31518] ? __pfx_evdev_write+0x10/0x10 [ 1360.536221][T31518] ? bpf_lsm_file_permission+0x9/0x20 [ 1360.536239][T31518] ? security_file_permission+0x75/0x260 [ 1360.536263][T31518] ? rw_verify_area+0x203/0x4c0 [ 1360.536293][T31518] ? __pfx_evdev_write+0x10/0x10 [ 1360.536311][T31518] vfs_write+0x296/0xba0 [ 1360.536347][T31518] ? __pfx_vfs_write+0x10/0x10 [ 1360.536376][T31518] ? __fget_files+0x2a/0x420 [ 1360.536401][T31518] ? __fget_files+0x3a2/0x420 [ 1360.536426][T31518] ? __fget_files+0x2a/0x420 [ 1360.536456][T31518] ? fdget+0x1ac/0x250 [ 1360.536488][T31518] ksys_write+0x150/0x270 [ 1360.536518][T31518] ? __pfx_ksys_write+0x10/0x10 [ 1360.536565][T31518] do_syscall_64+0x166/0x520 [ 1360.536589][T31518] ? trace_irq_disable+0x3b/0x140 [ 1360.536609][T31518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1360.536627][T31518] ? clear_bhb_loop+0x70/0xc0 [ 1360.536650][T31518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1360.536668][T31518] RIP: 0033:0x7fb3ca99e559 [ 1360.536685][T31518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1360.536702][T31518] RSP: 002b:00007fb3cb825028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1360.536721][T31518] RAX: ffffffffffffffda RBX: 00007fb3cac25fa0 RCX: 00007fb3ca99e559 [ 1360.536734][T31518] RDX: 000000000000ff0f RSI: 0000200000000040 RDI: 0000000000000004 [ 1360.536747][T31518] RBP: 00007fb3cb825090 R08: 0000000000000000 R09: 0000000000000000 [ 1360.536759][T31518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1360.536770][T31518] R13: 00007fb3cac26038 R14: 00007fb3cac25fa0 R15: 00007ffd4bf3aa18 [ 1360.536802][T31518] [ 1360.756838][T31524] netlink: 128 bytes leftover after parsing attributes in process `syz.5.9834'. [ 1360.893895][T31529] FAULT_INJECTION: forcing a failure. [ 1360.893895][T31529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1360.893928][T31529] CPU: 1 UID: 0 PID: 31529 Comm: syz.5.9835 Tainted: G L syzkaller #0 PREEMPT(full) [ 1360.893953][T31529] Tainted: [L]=SOFTLOCKUP [ 1360.893960][T31529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1360.893972][T31529] Call Trace: [ 1360.893980][T31529] [ 1360.893988][T31529] dump_stack_lvl+0xe8/0x150 [ 1360.894018][T31529] should_fail_ex+0x3eb/0x540 [ 1360.894053][T31529] _copy_from_iter+0x1d3/0x1680 [ 1360.894078][T31529] ? sock_alloc_send_pskb+0xc87/0xd90 [ 1360.894116][T31529] ? __pfx__copy_from_iter+0x10/0x10 [ 1360.894145][T31529] ? __lock_acquire+0x747/0x2de0 [ 1360.894165][T31529] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1360.894196][T31529] skb_copy_datagram_from_iter+0xe6/0x720 [ 1360.894227][T31529] ? skb_put+0x112/0x210 [ 1360.894254][T31529] tun_get_user+0x14fd/0x4450 [ 1360.894298][T31529] ? aa_file_perm+0x18b/0x15f0 [ 1360.894331][T31529] ? aa_file_perm+0x4ed/0x15f0 [ 1360.894358][T31529] ? __pfx_tun_get_user+0x10/0x10 [ 1360.894387][T31529] ? __lock_acquire+0x747/0x2de0 [ 1360.894408][T31529] ? kstrtoull+0x137/0x1d0 [ 1360.894436][T31529] ? ref_tracker_alloc+0x172/0x530 [ 1360.894462][T31529] ? lock_acquire+0x115/0x350 [ 1360.894481][T31529] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1360.894518][T31529] ? lock_acquire+0x115/0x350 [ 1360.894536][T31529] ? tun_get+0x1c/0x2f0 [ 1360.894567][T31529] ? tun_get+0x1c/0x2f0 [ 1360.894591][T31529] ? tun_get+0x1c/0x2f0 [ 1360.894621][T31529] tun_chr_write_iter+0x113/0x200 [ 1360.894651][T31529] vfs_write+0x612/0xba0 [ 1360.894685][T31529] ? __pfx_vfs_write+0x10/0x10 [ 1360.894715][T31529] ? __fget_files+0x3a2/0x420 [ 1360.894741][T31529] ? __fget_files+0x2a/0x420 [ 1360.894770][T31529] ? fdget+0x1ac/0x250 [ 1360.894801][T31529] ksys_write+0x150/0x270 [ 1360.894829][T31529] ? __pfx_ksys_write+0x10/0x10 [ 1360.894864][T31529] do_syscall_64+0x166/0x520 [ 1360.894887][T31529] ? trace_irq_disable+0x3b/0x140 [ 1360.894906][T31529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1360.894922][T31529] ? clear_bhb_loop+0x70/0xc0 [ 1360.894945][T31529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1360.894961][T31529] RIP: 0033:0x7fb3ca99e559 [ 1360.894979][T31529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1360.894992][T31529] RSP: 002b:00007fb3cb825028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1360.895011][T31529] RAX: ffffffffffffffda RBX: 00007fb3cac25fa0 RCX: 00007fb3ca99e559 [ 1360.895025][T31529] RDX: 000000000000002a RSI: 0000200000000200 RDI: 0000000000000003 [ 1360.895036][T31529] RBP: 00007fb3cb825090 R08: 0000000000000000 R09: 0000000000000000 [ 1360.895047][T31529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1360.895057][T31529] R13: 00007fb3cac26038 R14: 00007fb3cac25fa0 R15: 00007ffd4bf3aa18 [ 1360.895084][T31529] [ 1361.469338][T18388] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1361.584364][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.620884][T18388] usb 2-1: New USB device found: idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1361.624346][T18388] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.624372][T18388] usb 2-1: Product: syz [ 1361.624386][T18388] usb 2-1: Manufacturer: syz [ 1361.624399][T18388] usb 2-1: SerialNumber: syz [ 1361.628127][T18388] usb 2-1: config 0 descriptor?? [ 1361.822240][T31578] FAULT_INJECTION: forcing a failure. [ 1361.822240][T31578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1361.822273][T31578] CPU: 0 UID: 0 PID: 31578 Comm: syz.7.9842 Tainted: G L syzkaller #0 PREEMPT(full) [ 1361.822307][T31578] Tainted: [L]=SOFTLOCKUP [ 1361.822315][T31578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1361.822327][T31578] Call Trace: [ 1361.822335][T31578] [ 1361.822344][T31578] dump_stack_lvl+0xe8/0x150 [ 1361.822373][T31578] should_fail_ex+0x3eb/0x540 [ 1361.822403][T31578] _copy_from_user+0x2d/0xb0 [ 1361.822431][T31578] input_event_from_user+0xb1/0x290 [ 1361.822452][T31578] ? __pfx_input_event_from_user+0x10/0x10 [ 1361.822485][T31578] evdev_write+0x2c7/0x4c0 [ 1361.822504][T31578] ? get_pid_task+0x20/0x1f0 [ 1361.822535][T31578] ? __pfx_evdev_write+0x10/0x10 [ 1361.822556][T31578] ? bpf_lsm_file_permission+0x9/0x20 [ 1361.822577][T31578] ? security_file_permission+0x75/0x260 [ 1361.822600][T31578] ? rw_verify_area+0x203/0x4c0 [ 1361.822627][T31578] ? __pfx_evdev_write+0x10/0x10 [ 1361.822645][T31578] vfs_write+0x296/0xba0 [ 1361.822681][T31578] ? __pfx_vfs_write+0x10/0x10 [ 1361.822710][T31578] ? __fget_files+0x2a/0x420 [ 1361.822735][T31578] ? __fget_files+0x3a2/0x420 [ 1361.822759][T31578] ? __fget_files+0x2a/0x420 [ 1361.822788][T31578] ? fdget+0x1ac/0x250 [ 1361.822821][T31578] ksys_write+0x150/0x270 [ 1361.822852][T31578] ? __pfx_ksys_write+0x10/0x10 [ 1361.822893][T31578] do_syscall_64+0x166/0x520 [ 1361.822917][T31578] ? trace_irq_disable+0x3b/0x140 [ 1361.822937][T31578] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1361.822956][T31578] ? clear_bhb_loop+0x70/0xc0 [ 1361.822980][T31578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1361.822999][T31578] RIP: 0033:0x7f369bb9e559 [ 1361.823017][T31578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1361.823034][T31578] RSP: 002b:00007f369ca0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1361.823054][T31578] RAX: ffffffffffffffda RBX: 00007f369be25fa0 RCX: 00007f369bb9e559 [ 1361.823069][T31578] RDX: 000000000000ff0f RSI: 0000200000000040 RDI: 0000000000000004 [ 1361.823081][T31578] RBP: 00007f369ca0d090 R08: 0000000000000000 R09: 0000000000000000 [ 1361.823093][T31578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1361.823102][T31578] R13: 00007f369be26038 R14: 00007f369be25fa0 R15: 00007ffc9c620858 [ 1361.823130][T31578] [ 1362.083293][T31581] netlink: 52 bytes leftover after parsing attributes in process `syz.7.9843'. [ 1362.083321][T31581] netlink: 52 bytes leftover after parsing attributes in process `syz.7.9843'. [ 1362.526769][T31596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1362.527232][T31596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1362.554048][T18388] usb 2-1: Firmware version (0.0) predates our first public release. [ 1362.554072][T18388] usb 2-1: Please update to version 0.2 or newer [ 1363.270370][ T5762] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1363.432656][ T5762] usb 6-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 1363.434063][ T5762] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1363.434090][ T5762] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1363.434135][ T5762] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1363.434175][ T5762] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.462025][ T5762] usb 6-1: config 0 descriptor?? [ 1363.486881][ T33] kauditd_printk_skb: 15 callbacks suppressed [ 1363.486898][ T33] audit: type=1800 audit(1792242859.755:10955): pid=24457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=731887 res=0 errno=-22 [ 1363.492810][ T33] audit: type=1800 audit(1792242859.765:10956): pid=24457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=731916 res=0 errno=-22 [ 1363.494212][ T33] audit: type=1800 audit(1792242859.765:10957): pid=24457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=731894 res=0 errno=-22 [ 1363.496575][ T33] audit: type=1800 audit(1792242859.765:10958): pid=24457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=731895 res=0 errno=-22 [ 1363.499502][ T33] audit: type=1800 audit(1792242859.775:10959): pid=24457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=731896 res=0 errno=-22 [ 1363.620094][ T33] audit: type=1800 audit(1792242859.895:10960): pid=24457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=731936 res=0 errno=-22 [ 1363.735556][ T33] audit: type=1800 audit(1792242860.005:10961): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=731749 res=0 errno=-22 [ 1363.735606][ T33] audit: type=1800 audit(1792242860.005:10962): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=731750 res=0 errno=-22 [ 1363.743172][ T33] audit: type=1800 audit(1792242860.015:10963): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=731729 res=0 errno=-22 [ 1363.746496][ T33] audit: type=1800 audit(1792242860.015:10964): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=731751 res=0 errno=-22 [ 1363.823592][ T5762] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1363.823625][ T5762] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1363.823689][ T5762] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1363.823713][ T5762] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1363.823736][ T5762] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1363.823759][ T5762] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1363.823783][ T5762] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1363.823807][ T5762] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1363.823831][ T5762] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1363.823856][ T5762] plantronics 0003:047F:FFFF.00C3: unknown main item tag 0x0 [ 1363.913006][ T5762] plantronics 0003:047F:FFFF.00C3: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1363.916559][T31644] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1364.093872][ T9161] usb 6-1: USB disconnect, device number 85 [ 1364.299887][ T5710] usb 2-1: USB disconnect, device number 58 [ 1364.792158][T31697] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9853'. [ 1364.818738][T31698] loop8: detected capacity change from 0 to 7 [ 1364.829612][T31698] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1364.829641][T31698] loop8: partition table partially beyond EOD, truncated [ 1364.829888][T31698] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 1364.834097][T31698] loop8: p2 start 121280928 is beyond EOD, truncated [ 1364.926689][T23585] udevd[23585]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1364.949425][ T5710] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1364.974731][T31710] random: crng reseeded on system resumption [ 1365.099396][ T5710] usb 2-1: Using ep0 maxpacket: 8 [ 1365.100456][ T5710] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a3, bcdDevice=0.40 [ 1365.108199][ T5710] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1365.108230][ T5710] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xC5, changing to 0x85 [ 1365.108255][ T5710] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1365.108275][ T5710] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1365.108298][ T5710] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1365.132056][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.132084][ T5710] usb 2-1: Product: syz [ 1365.132098][ T5710] usb 2-1: Manufacturer: syz [ 1365.132112][ T5710] usb 2-1: SerialNumber: syz [ 1365.144649][T31686] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1365.170147][ T5710] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 1365.175850][ T5710] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 1365.175932][ T5710] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 1365.385112][ T5710] usb 2-1: USB disconnect, device number 59 [ 1365.419960][T31726] kAFS: bad VL server IP address [ 1365.662219][T31739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9859'. [ 1366.018167][T31767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9863'. [ 1366.122584][T31771] loop8: detected capacity change from 0 to 7 [ 1366.132672][T31771] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1366.132701][T31771] loop8: partition table partially beyond EOD, truncated [ 1366.134419][T31771] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 1366.148396][T31771] loop8: p2 start 121280928 is beyond EOD, truncated [ 1366.276222][T23585] udevd[23585]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1366.454475][T31789] random: crng reseeded on system resumption [ 1368.515470][T31859] loop8: detected capacity change from 0 to 7 [ 1368.517507][T31861] random: crng reseeded on system resumption [ 1368.532149][T31859] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1368.532176][T31859] loop8: partition table partially beyond EOD, truncated [ 1368.532426][T31859] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 1368.537772][T31859] loop8: p2 start 121280928 is beyond EOD, truncated [ 1369.000717][T23585] udevd[23585]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1369.925334][ T33] kauditd_printk_skb: 17 callbacks suppressed [ 1369.925356][ T33] audit: type=1800 audit(1792242866.196:10982): pid=31894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.5.9890" name="/" dev="sysfs" ino=1 res=0 errno=-13 [ 1369.968141][ T33] audit: type=1800 audit(1792242866.236:10983): pid=31895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.9890" name="online" dev="sysfs" ino=1342 res=0 errno=-22 [ 1370.616875][T31928] random: crng reseeded on system resumption [ 1370.759858][ T33] audit: type=1804 audit(1792242867.026:10984): pid=31933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.9901" name="bus" dev="ramfs" ino=217788 res=1 errno=0 [ 1370.980303][ T33] audit: type=1804 audit(1792242867.236:10985): pid=31934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.9901" name="bus" dev="ramfs" ino=217788 res=1 errno=0 [ 1371.027529][T31939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9902'. [ 1371.358304][ T33] audit: type=1800 audit(1792242867.626:10986): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=732550 res=0 errno=-22 [ 1371.380785][ T33] audit: type=1326 audit(1792242867.656:10987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31944 comm="syz.7.9903" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f369bb9e559 code=0x0 [ 1371.415793][ T33] audit: type=1800 audit(1792242867.686:10988): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=732554 res=0 errno=-22 [ 1371.531742][ T33] audit: type=1800 audit(1792242867.806:10989): pid=5272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="tun_flags" dev="sysfs" ino=732582 res=0 errno=-22 [ 1371.963219][ T33] audit: type=1326 audit(1792242868.236:10990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31968 comm="syz.1.9907" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5eb59e559 code=0x7ffc0000 [ 1371.963369][ T33] audit: type=1326 audit(1792242868.236:10991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31968 comm="syz.1.9907" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5eb59e559 code=0x7ffc0000 [ 1373.637920][ T9165] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1373.789683][ T9165] usb 6-1: Using ep0 maxpacket: 16 [ 1373.790312][ T9165] usb 6-1: New USB device found: idVendor=046d, idProduct=c215, bcdDevice=0.00 [ 1373.791455][ T9165] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1373.791482][ T9165] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1373.791505][ T9165] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1373.791535][ T9165] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.796792][ T9165] usb 6-1: config 0 descriptor?? [ 1374.253161][ T9165] input: HID 046d:c215 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:046D:C215.00C4/input/input99 [ 1374.355001][ T9165] logitech 0003:046D:C215.00C4: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 046d:c215] on usb-dummy_hcd.5-1/input0 [ 1374.440217][T32025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1374.477533][T32025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1374.568988][ T9165] usb 6-1: USB disconnect, device number 86 [ 1374.624319][T32072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9920'. [ 1375.249886][T32103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9929'. [ 1375.318333][T22577] Bluetooth: hci0: link tx timeout [ 1375.318353][T22577] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1375.473028][T32110] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1375.477098][ T33] kauditd_printk_skb: 91 callbacks suppressed [ 1375.477114][ T33] audit: type=1800 audit(1792242871.747:11083): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=733004 res=0 errno=-22 [ 1376.130430][T32132] loop8: detected capacity change from 0 to 7 [ 1376.142892][T32132] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1376.142921][T32132] loop8: partition table partially beyond EOD, truncated [ 1376.143152][T32132] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 1376.145784][T32132] loop8: p2 start 121280928 is beyond EOD, truncated [ 1376.226793][T32141] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9932'. [ 1376.226816][T32141] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1376.266583][T23585] udevd[23585]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1376.515687][T22577] Bluetooth: hci0: link tx timeout [ 1376.515713][T22577] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1376.656615][T32162] nfs4: Unknown parameter '' [ 1376.659092][T32161] nfs4: Unknown parameter '' [ 1376.815211][T32170] loop8: detected capacity change from 0 to 7 [ 1376.821067][T32170] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1376.821907][T32170] loop8: partition table partially beyond EOD, truncated [ 1376.822180][T32170] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 1376.828497][T32170] loop8: p2 start 121280928 is beyond EOD, truncated [ 1376.897511][ T5710] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1376.905826][T23585] udevd[23585]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1376.972949][T32178] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.9941'. [ 1376.988376][ T33] audit: type=1800 audit(1792242873.267:11084): pid=32179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.9941" name="p_chmask" dev="configfs" ino=218894 res=0 errno=-22 [ 1377.050417][ T5710] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1377.050466][ T5710] usb 2-1: New USB device found: idVendor=0079, idProduct=0011, bcdDevice=0.40 [ 1377.051422][ T5710] usb 2-1: config 1 has an invalid descriptor of length 33, skipping remainder of the config [ 1377.051473][ T5710] usb 2-1: config 1 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1377.051498][ T5710] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1377.053487][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.053509][ T5710] usb 2-1: Product: syz [ 1377.053524][ T5710] usb 2-1: Manufacturer: syz [ 1377.053537][ T5710] usb 2-1: SerialNumber: syz [ 1377.070207][ T33] audit: type=1800 audit(1792242873.347:11085): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=733186 res=0 errno=-22 [ 1377.077005][ T33] audit: type=1800 audit(1792242873.347:11086): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=733218 res=0 errno=-22 [ 1377.086314][ T33] audit: type=1800 audit(1792242873.357:11087): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=733193 res=0 errno=-22 [ 1377.086361][ T33] audit: type=1800 audit(1792242873.357:11088): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=733194 res=0 errno=-22 [ 1377.323136][ T33] audit: type=1800 audit(1792242873.597:11089): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=733215 res=0 errno=-22 [ 1377.324295][ T33] audit: type=1800 audit(1792242873.597:11090): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=733216 res=0 errno=-22 [ 1377.337068][ T5710] usb 2-1: USB disconnect, device number 60 [ 1377.348522][ T33] audit: type=1800 audit(1792242873.627:11091): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=733281 res=0 errno=-22 [ 1377.350580][ T33] audit: type=1800 audit(1792242873.627:11092): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=733195 res=0 errno=-22 [ 1377.408634][T22577] Bluetooth: hci0: command 0x0406 tx timeout [ 1378.018774][T32220] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(200.0.0), cmd(14) [ 1378.737307][T30582] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1378.888090][T30582] usb 2-1: Using ep0 maxpacket: 8 [ 1378.891647][T30582] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1378.891698][T30582] usb 2-1: New USB device found: idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1378.893047][T30582] usb 2-1: config 4 interface 0 has no altsetting 0 [ 1378.898847][T30582] usb 2-1: string descriptor 0 read error: -22 [ 1378.899008][T30582] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1378.934443][T30582] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1378.945374][T30582] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1378.949250][T30582] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1378.949299][T30582] usb 2-1: media controller created [ 1379.011254][T30582] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1379.116883][T30582] zl10353_read_register: readreg error (reg=127, ret==0) [ 1379.259962][T30582] usb 2-1: USB disconnect, device number 61 [ 1379.454581][T32278] loop8: detected capacity change from 0 to 7 [ 1379.468725][T32278] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1379.468755][T32278] loop8: partition table partially beyond EOD, truncated [ 1379.469001][T32278] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 1379.472924][T32278] loop8: p2 start 121280928 is beyond EOD, truncated [ 1379.478158][T32281] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 1379.588974][T23585] udevd[23585]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1380.715139][ T33] kauditd_printk_skb: 15 callbacks suppressed [ 1380.715157][ T33] audit: type=1800 audit(1792242876.988:11108): pid=32316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.9973" name="protocol" dev="configfs" ino=219048 res=0 errno=-22 [ 1380.720385][ T33] audit: type=1800 audit(1792242876.998:11109): pid=32316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.9973" name="report_length" dev="configfs" ino=219049 res=0 errno=-22 [ 1381.258532][ T5762] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1381.407229][ T5762] usb 6-1: Using ep0 maxpacket: 8 [ 1381.409334][ T5762] usb 6-1: New USB device found: idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1381.411599][ T5762] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1381.414924][ T5762] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.414946][ T5762] usb 6-1: Product: syz [ 1381.414960][ T5762] usb 6-1: Manufacturer: syz [ 1381.414974][ T5762] usb 6-1: SerialNumber: syz [ 1381.466587][ T5762] usb 6-1: config 0 descriptor?? [ 1381.475495][ T33] audit: type=1800 audit(1792242877.748:11110): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=733735 res=0 errno=-22 [ 1381.499010][ T5762] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1381.504494][ T33] audit: type=1800 audit(1792242877.778:11111): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=733767 res=0 errno=-22 [ 1381.505623][ T33] audit: type=1800 audit(1792242877.778:11112): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=733742 res=0 errno=-22 [ 1381.512420][ T33] audit: type=1800 audit(1792242877.788:11113): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=733743 res=0 errno=-22 [ 1382.619436][ T33] audit: type=1800 audit(1792242878.888:11114): pid=24457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=733805 res=0 errno=-22 [ 1382.627086][T22577] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1382.665669][T22577] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1382.667786][ T33] audit: type=1800 audit(1792242878.938:11115): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=733816 res=0 errno=-22 [ 1382.674967][T22577] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1382.679498][T22577] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1382.680069][T22577] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1382.738434][ T33] audit: type=1800 audit(1792242879.018:11116): pid=24457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=733835 res=0 errno=-22 [ 1382.743718][ T33] audit: type=1800 audit(1792242879.018:11117): pid=23933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=733846 res=0 errno=-22 [ 1383.204373][T30582] infiniband s`z1: ib_query_port failed (-19) [ 1383.294949][T16917] smbdirect: ib_dev[s`z1] removed [ 1383.675474][ T1118] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1383.873315][ T1118] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1383.968557][T32354] rxe_eth0 speed is unknown, defaulting to 1000 [ 1384.050614][ T1118] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.259766][ T1118] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.614816][T32321] sctp: [Deprecated]: syz.5.9974 (pid 32321) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1384.614816][T32321] Use struct sctp_sack_info instead [ 1384.770470][T22577] Bluetooth: hci5: command tx timeout [ 1384.856829][ T5762] gspca_zc3xx: reg_r err -110 [ 1384.960756][ T1118] bridge_slave_1: left allmulticast mode [ 1384.960781][ T1118] bridge_slave_1: left promiscuous mode [ 1384.961015][ T1118] bridge0: port 2(bridge_slave_1) entered disabled state [ 1384.973211][ T1118] bridge_slave_0: left allmulticast mode [ 1384.973234][ T1118] bridge_slave_0: left promiscuous mode [ 1384.973429][ T1118] bridge0: port 1(bridge_slave_0) entered disabled state [ 1385.467891][ T5762] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1385.467983][ T5762] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1385.612016][ T1118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1385.627777][ T1118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1385.631467][ T1118] bond0 (unregistering): Released all slaves [ 1385.941256][ T10] usb 6-1: USB disconnect, device number 87 [ 1386.846746][T22577] Bluetooth: hci5: command tx timeout [ 1387.374058][ T5272] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1387.374823][T32354] bridge0: port 1(bridge_slave_0) entered blocking state [ 1387.374952][T32354] bridge0: port 1(bridge_slave_0) entered disabled state [ 1387.375087][T32354] bridge_slave_0: entered allmulticast mode [ 1387.411961][T32354] bridge_slave_0: entered promiscuous mode [ 1387.426380][T32354] bridge0: port 2(bridge_slave_1) entered blocking state [ 1387.426478][T32354] bridge0: port 2(bridge_slave_1) entered disabled state [ 1387.426625][T32354] bridge_slave_1: entered allmulticast mode [ 1387.434658][T32354] bridge_slave_1: entered promiscuous mode [ 1387.704059][T32354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1387.714513][T32354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1387.991251][T32354] team0: Port device team_slave_0 added [ 1388.021340][T32354] team0: Port device team_slave_1 added [ 1388.063373][ T1118] hsr_slave_0: left promiscuous mode [ 1388.064168][ T1118] hsr_slave_1: left promiscuous mode [ 1388.065152][ T1118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1388.065172][ T1118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1388.070568][ T1118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1388.070587][ T1118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1388.085437][ T1118] veth1_macvtap: left promiscuous mode [ 1388.085471][ T1118] veth0_macvtap: left promiscuous mode [ 1388.085591][ T1118] veth1_vlan: left promiscuous mode [ 1388.085654][ T1118] veth0_vlan: left promiscuous mode [ 1388.902677][ T1118] team0 (unregistering): Port device team_slave_1 removed [ 1388.926175][T22577] Bluetooth: hci5: command tx timeout [ 1388.944041][ T1118] team0 (unregistering): Port device team_slave_0 removed [ 1389.274013][ T5272] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1389.290077][T32354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1389.290094][T32354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1389.290118][T32354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1389.378664][T32354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1389.378680][T32354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1389.378699][T32354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1389.644217][T32354] hsr_slave_0: entered promiscuous mode [ 1389.645604][T32354] hsr_slave_1: entered promiscuous mode [ 1389.646702][T32354] debugfs: 'hsr0' already exists in 'hsr' [ 1389.646727][T32354] Cannot create hsr debugfs directory [ 1389.864939][ T1118] IPVS: stop unused estimator thread 0... [ 1390.016976][T32759] ubi0: attaching mtd0 [ 1390.070749][T32759] ubi0: scanning is finished [ 1390.070800][T32759] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1390.292802][ T33] kauditd_printk_skb: 25 callbacks suppressed [ 1390.292820][ T33] audit: type=1800 audit(1792242886.559:11143): pid=32354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24628 res=0 errno=-13 [ 1390.429933][T32759] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1390.832467][ T348] loop8: detected capacity change from 0 to 7 [ 1390.849569][ T348] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1390.849600][ T348] loop8: partition table partially beyond EOD, truncated [ 1390.849845][ T348] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 1390.854683][ T348] loop8: p2 start 121280928 is beyond EOD, truncated [ 1391.005938][T22577] Bluetooth: hci5: command tx timeout [ 1391.053554][T23585] udevd[23585]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1391.344324][ T5272] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1391.452734][ T9161] usb 6-1: new low-speed USB device number 88 using dummy_hcd [ 1391.499234][ T33] audit: type=1400 audit(1792242887.779:11144): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=378 comm="syz.7.10003" [ 1391.499726][ T379] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 1391.621094][ T9161] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1391.621146][ T9161] usb 6-1: New USB device found: idVendor=0525, idProduct=a4a3, bcdDevice=53.b2 [ 1391.626212][ T9161] usb 6-1: config 255 has an invalid interface number: 80 but max is 0 [ 1391.626237][ T9161] usb 6-1: config 255 has no interface number 0 [ 1391.626264][ T9161] usb 6-1: config 255 interface 80 has no altsetting 0 [ 1391.632321][ T9161] usb 6-1: string descriptor 0 read error: -22 [ 1391.632448][ T9161] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.644003][ T33] audit: type=1800 audit(1792242887.909:11145): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=746304 res=0 errno=-22 [ 1391.662784][ T9161] usbtest 6-1:255.80: Linux user mode ISO test driver [ 1391.662805][ T9161] usbtest 6-1:255.80: low-speed {control} tests [ 1391.673158][ T33] audit: type=1800 audit(1792242887.929:11146): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=746333 res=0 errno=-22 [ 1391.677400][ T33] audit: type=1800 audit(1792242887.949:11147): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=746311 res=0 errno=-22 [ 1391.706888][ T33] audit: type=1800 audit(1792242887.979:11148): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=746312 res=0 errno=-22 [ 1391.717884][ T33] audit: type=1800 audit(1792242887.989:11149): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=746313 res=0 errno=-22 [ 1391.736379][ T33] audit: type=1800 audit(1792242888.009:11150): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=746353 res=0 errno=-22 [ 1391.847853][ T9161] usb 6-1: USB disconnect, device number 88 [ 1392.138175][ T33] audit: type=1800 audit(1792242888.409:11151): pid=32354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=24627 res=0 errno=-13 [ 1392.156751][ T33] audit: type=1800 audit(1792242888.429:11152): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=746387 res=0 errno=-22 [ 1392.588415][ T5272] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1392.716069][T32354] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1392.733674][T32354] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1392.744186][T32354] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1392.758116][T32354] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1392.760453][T32354] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1392.780539][T32354] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1392.783431][T32354] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1392.818408][T32354] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1393.095363][T32354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1393.150087][T32354] 8021q: adding VLAN 0 to HW filter on device team0 [ 1393.173607][T26607] bridge0: port 1(bridge_slave_0) entered blocking state [ 1393.173713][T26607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1393.215308][T26607] bridge0: port 2(bridge_slave_1) entered blocking state [ 1393.215420][T26607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1393.861439][ T1118] nvmet: connect request for invalid subsystem testsubsys! [ 1393.865105][ T485] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 1394.381734][ T512] loop8: detected capacity change from 0 to 7 [ 1394.383553][ T512] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1394.383581][ T512] loop8: partition table partially beyond EOD, truncated [ 1394.383816][ T512] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 1394.390367][ T512] loop8: p2 start 121280928 is beyond EOD, truncated [ 1394.566296][T23585] udevd[23585]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1394.631386][T32354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1395.158836][T32354] veth0_vlan: entered promiscuous mode [ 1395.221184][T32354] veth1_vlan: entered promiscuous mode [ 1395.268710][T32354] veth0_macvtap: entered promiscuous mode [ 1395.283422][T32354] veth1_macvtap: entered promiscuous mode [ 1395.295547][ T554] netlink: 'syz.7.10025': attribute type 11 has an invalid length. [ 1395.320119][T32354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1395.342363][T32354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1395.423894][ T33] kauditd_printk_skb: 2 callbacks suppressed [ 1395.423912][ T33] audit: type=1800 audit(1792242891.689:11155): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=747056 res=0 errno=-22 [ 1395.623796][ T33] audit: type=1800 audit(1792242891.889:11156): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=747182 res=0 errno=-22 [ 1395.624385][T26626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1395.624402][T26626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1395.697856][T26626] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.705419][ T1118] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.705461][ T1118] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.705493][ T1118] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.834321][T26607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1395.834342][T26607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1395.921659][ T582] loop8: detected capacity change from 0 to 7 [ 1395.929542][ T582] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1395.929571][ T582] loop8: partition table partially beyond EOD, truncated [ 1395.929817][ T582] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 1395.937581][ T582] loop8: p2 start 121280928 is beyond EOD, truncated [ 1396.119651][T23585] udevd[23585]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1396.246129][ T33] audit: type=1800 audit(1792242892.519:11157): pid=24457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=747343 res=0 errno=-22 [ 1396.254243][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1396.294635][ T33] audit: type=1800 audit(1792242892.559:11158): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=747354 res=0 errno=-22 [ 1396.317941][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1396.320552][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1396.323166][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1396.324002][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1396.397161][ T33] audit: type=1800 audit(1792242892.659:11159): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=747373 res=0 errno=-22 [ 1396.404016][ T33] audit: type=1800 audit(1792242892.669:11160): pid=24457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=747384 res=0 errno=-22 [ 1396.466462][ T602] tmpfs: Bad value for 'nr_inodes' [ 1396.586503][ T609] random: crng reseeded on system resumption [ 1396.912110][ T621] dlm: no locking on control device [ 1396.979401][ T33] audit: type=1800 audit(1792242893.229:11161): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31456 res=0 errno=-22 [ 1397.130210][ T33] audit: type=1800 audit(1792242893.399:11162): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31479 res=0 errno=-22 [ 1397.839102][ T598] rxe_eth0 speed is unknown, defaulting to 1000 [ 1398.315008][ T10] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1398.445487][T22577] Bluetooth: hci1: command tx timeout [ 1398.467949][ T10] usb 6-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 1398.470901][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.470925][ T10] usb 6-1: Product: syz [ 1398.470940][ T10] usb 6-1: Manufacturer: syz [ 1398.470954][ T10] usb 6-1: SerialNumber: syz [ 1398.514414][ T33] audit: type=1800 audit(1792242894.790:11163): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=751813 res=0 errno=-22 [ 1398.550729][ T33] audit: type=1800 audit(1792242894.810:11164): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=751860 res=0 errno=-22 [ 1398.551820][ T5697] EXT4-fs warning: 22 callbacks suppressed [ 1398.551835][ T5697] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #312: comm kworker/0:4: No space for directory leaf checksum. Please run e2fsck -D. [ 1398.551874][ T5697] EXT4-fs error: 22 callbacks suppressed [ 1398.551884][ T5697] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #312: comm kworker/0:4: checksumming directory block 0 [ 1398.552059][ T5697] usb 6-1: loading /lib/firmware/ath9k_htc/htc_9271-1.4.0.fw failed with error -74 [ 1398.552095][ T5697] usb 6-1: Direct firmware load for ath9k_htc/htc_9271-1.4.0.fw failed with error -74 [ 1398.552113][ T5697] usb 6-1: Falling back to sysfs fallback for: ath9k_htc/htc_9271-1.4.0.fw [ 1399.155838][ T598] bridge0: port 1(bridge_slave_0) entered blocking state [ 1399.155936][ T598] bridge0: port 1(bridge_slave_0) entered disabled state [ 1399.156076][ T598] bridge_slave_0: entered allmulticast mode [ 1399.157650][ T598] bridge_slave_0: entered promiscuous mode [ 1399.172240][ T598] bridge0: port 2(bridge_slave_1) entered blocking state [ 1399.172341][ T598] bridge0: port 2(bridge_slave_1) entered disabled state [ 1399.172527][ T598] bridge_slave_1: entered allmulticast mode [ 1399.174188][ T598] bridge_slave_1: entered promiscuous mode [ 1399.229237][ T598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1399.233272][ T598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1399.294335][ T598] team0: Port device team_slave_0 added [ 1399.299189][ T598] team0: Port device team_slave_1 added [ 1399.348591][ T598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1399.348607][ T598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1399.348631][ T598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1399.352261][ T598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1399.352276][ T598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1399.352299][ T598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1399.421515][ T598] hsr_slave_0: entered promiscuous mode [ 1399.422566][ T598] hsr_slave_1: entered promiscuous mode [ 1399.423287][ T598] debugfs: 'hsr0' already exists in 'hsr' [ 1399.423306][ T598] Cannot create hsr debugfs directory [ 1400.054941][ T994] random: crng reseeded on system resumption [ 1400.525409][T22577] Bluetooth: hci1: command tx timeout [ 1400.854970][ T33] kauditd_printk_skb: 9 callbacks suppressed [ 1400.854988][ T33] audit: type=1800 audit(1792242897.130:11174): pid=598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=24627 res=0 errno=-13 [ 1400.857026][ T33] audit: type=1800 audit(1792242897.130:11175): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=759384 res=0 errno=-22 [ 1401.131105][ T9161] usb 6-1: USB disconnect, device number 89 [ 1401.193541][ T1045] jffs2: notice: (1045) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1401.300513][ T1050] random: crng reseeded on system resumption [ 1401.950934][ T33] audit: type=1800 audit(1792242898.220:11176): pid=1087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.10054" name="pm_wakeup_irq" dev="sysfs" ino=1417 res=0 errno=-61 [ 1401.961025][ T1087] netlink: 'syz.5.10054': attribute type 2 has an invalid length. [ 1402.046247][ T598] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1402.066337][ T598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1402.067731][ T598] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1402.078834][ T598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1402.085164][ T598] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1402.119786][ T598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1402.122475][ T598] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1402.155333][ T598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1402.435537][ T33] audit: type=1800 audit(1792242898.710:11177): pid=1116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.10059" name="multicast_to_unicast" dev="sysfs" ino=712566 res=0 errno=-22 [ 1402.488161][ T1116] vimc link validate: Scaler:src:16x16 (0x33424752, 12, 0, 4, 0) RGB/YUV Capture:snk:16x2160 (0x33424752, 8, 0, 0, 0) [ 1402.505024][ T33] audit: type=1800 audit(1792242898.760:11178): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=759854 res=0 errno=-22 [ 1402.513501][ T598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1402.592456][ T598] 8021q: adding VLAN 0 to HW filter on device team0 [ 1402.604696][T22577] Bluetooth: hci1: command tx timeout [ 1402.612107][T26596] bridge0: port 1(bridge_slave_0) entered blocking state [ 1402.612218][T26596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1402.656600][T26596] bridge0: port 2(bridge_slave_1) entered blocking state [ 1402.656708][T26596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1403.300571][ T598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1403.365938][ T598] veth0_vlan: entered promiscuous mode [ 1403.379533][ T598] veth1_vlan: entered promiscuous mode [ 1403.421536][ T598] veth0_macvtap: entered promiscuous mode [ 1403.427039][ T598] veth1_macvtap: entered promiscuous mode [ 1403.451773][ T598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1403.462874][ T598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1403.548905][T26623] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.551373][ T1118] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.551413][ T1118] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.551441][ T1118] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.586427][ T33] audit: type=1800 audit(1792242899.860:11179): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=759897 res=0 errno=-22 [ 1403.670269][T26607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1403.670289][T26607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1403.682805][ T33] audit: type=1800 audit(1792242899.950:11180): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=760023 res=0 errno=-22 [ 1403.752801][T26607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1403.752821][T26607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1403.848365][ T33] audit: type=1800 audit(1792242900.120:11181): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31406 res=0 errno=-22 [ 1403.850220][ T33] audit: type=1800 audit(1792242900.120:11182): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31429 res=0 errno=-22 [ 1404.084305][ T9165] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1404.234351][ T9165] usb 4-1: Using ep0 maxpacket: 8 [ 1404.239240][ T9165] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1404.239271][ T9165] usb 4-1: New USB device found: idVendor=2b73, idProduct=0013, bcdDevice=1.40 [ 1404.240302][ T9165] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1404.240324][ T9165] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1404.241239][ T9165] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 1404.241261][ T9165] usb 4-1: Manufacturer: syz [ 1404.250088][ T33] audit: type=1800 audit(1792242900.520:11183): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=760157 res=0 errno=-22 [ 1404.548630][ T9165] usb 4-1: 0:1 : does not exist [ 1404.632798][ T9165] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1404.647556][ T9165] usb 4-1: USB disconnect, device number 67 [ 1404.650279][T23585] udevd[23585]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1404.685531][T22577] Bluetooth: hci1: command tx timeout [ 1405.465789][ T10] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1405.547069][ T1275] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10066'. [ 1405.594142][ T10] usb 4-1: device descriptor read/64, error -71 [ 1405.617053][ T1284] usb usb8: usbfs: process 1284 (syz.7.10067) did not claim interface 0 before use [ 1405.837873][ T10] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1405.968505][ T10] usb 4-1: device descriptor read/64, error -71 [ 1406.009651][ T1310] loop8: detected capacity change from 0 to 7 [ 1406.026714][ T1310] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1406.026745][ T1310] loop8: partition table partially beyond EOD, truncated [ 1406.026997][ T1310] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 1406.037771][ T1310] loop8: p2 start 121280928 is beyond EOD, truncated [ 1406.075685][ T10] usb usb4-port1: attempt power cycle [ 1406.091107][ T1303] netlink: 92 bytes leftover after parsing attributes in process `syz.7.10069'. [ 1406.171026][T23585] udevd[23585]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1406.399344][ T1336] random: crng reseeded on system resumption [ 1406.414329][ T10] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1406.436835][ T10] usb 4-1: device descriptor read/8, error -71 [ 1406.767416][ T10] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1406.802929][ T10] usb 4-1: device descriptor read/8, error -71 [ 1406.934856][ T10] usb usb4-port1: unable to enumerate USB device [ 1407.144591][ T33] kauditd_printk_skb: 11 callbacks suppressed [ 1407.146295][ T33] audit: type=1800 audit(1792242903.421:11195): pid=1363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.10082" name="authorized_default" dev="sysfs" ino=26987 res=0 errno=-22 [ 1407.275124][ T33] audit: type=1800 audit(1792242903.551:11196): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=760438 res=0 errno=-22 [ 1407.295739][ T33] audit: type=1800 audit(1792242903.551:11197): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=760448 res=0 errno=-22 [ 1407.350374][ T1380] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10084'. [ 1407.350400][ T1380] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10084'. [ 1407.350417][ T1380] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 1407.758623][ T1407] random: crng reseeded on system resumption [ 1408.733350][ T1453] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10097'. [ 1409.309278][ T33] audit: type=1800 audit(1792242905.581:11198): pid=1492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.10104" name="resume_offset" dev="sysfs" ino=1436 res=0 errno=-22 [ 1409.753899][ T5710] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1409.904248][ T5710] usb 4-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 1409.905214][ T5710] usb 4-1: config index 0 descriptor too short (expected 65183, got 72) [ 1409.908194][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.908218][ T5710] usb 4-1: Product: syz [ 1409.908231][ T5710] usb 4-1: Manufacturer: syz [ 1409.908245][ T5710] usb 4-1: SerialNumber: syz [ 1409.952782][ T33] audit: type=1800 audit(1792242906.221:11199): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=760645 res=0 errno=-22 [ 1409.998931][ T33] audit: type=1800 audit(1792242906.271:11200): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=760677 res=0 errno=-22 [ 1409.999643][ T33] audit: type=1800 audit(1792242906.271:11201): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=760652 res=0 errno=-22 [ 1410.000270][ T33] audit: type=1800 audit(1792242906.271:11202): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=760653 res=0 errno=-22 [ 1410.034495][ T33] audit: type=1800 audit(1792242906.281:11203): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=760674 res=0 errno=-22 [ 1410.034546][ T33] audit: type=1800 audit(1792242906.291:11204): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=760675 res=0 errno=-22 [ 1412.012103][ T1597] loop8: detected capacity change from 0 to 7 [ 1412.018483][ T1597] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1412.018511][ T1597] loop8: partition table partially beyond EOD, truncated [ 1412.019996][ T1597] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 1412.022151][ T1597] loop8: p2 start 121280928 is beyond EOD, truncated [ 1412.113041][T23585] udevd[23585]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1412.170898][ T1604] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10111'. [ 1412.550835][ T1630] random: crng reseeded on system resumption [ 1412.553834][ T5762] usb 4-1: USB disconnect, device number 72 [ 1412.759405][ T1637] loop8: detected capacity change from 0 to 7 [ 1412.768803][ T1637] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1412.768831][ T1637] loop8: partition table partially beyond EOD, truncated [ 1412.769044][ T1637] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 1412.790058][ T1637] loop8: p2 start 121280928 is beyond EOD, truncated [ 1412.960278][T23585] udevd[23585]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1413.185157][ T1654] ./mnt: Can't lookup blockdev [ 1413.397916][ T33] kauditd_printk_skb: 3 callbacks suppressed [ 1413.397936][ T33] audit: type=1800 audit(1792242909.671:11208): pid=1672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.10131" name="multicast_to_unicast" dev="sysfs" ino=725536 res=0 errno=-22 [ 1413.402131][ T1672] vimc link validate: Scaler:src:16x16 (0x33424752, 12, 0, 4, 0) RGB/YUV Capture:snk:16x2160 (0x33424752, 8, 0, 0, 0) [ 1413.682699][ T1687] random: crng reseeded on system resumption [ 1413.740748][ T33] audit: type=1800 audit(1792242910.011:11209): pid=1689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.10138" name="drvctl" dev="sysfs" ino=41693 res=0 errno=-13 [ 1414.252157][ T33] audit: type=1800 audit(1792242910.521:11210): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=41685 res=0 errno=-22 [ 1414.420748][ T1706] random: crng reseeded on system resumption [ 1414.943879][ T33] audit: type=1800 audit(1792242911.222:11211): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=760918 res=0 errno=-22 [ 1414.950176][ T33] audit: type=1800 audit(1792242911.222:11212): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=760934 res=0 errno=-22 [ 1414.950764][ T33] audit: type=1800 audit(1792242911.222:11213): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=760937 res=0 errno=-22 [ 1414.951633][ T33] audit: type=1800 audit(1792242911.222:11214): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=760936 res=0 errno=-22 [ 1414.952192][ T33] audit: type=1800 audit(1792242911.222:11215): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=760935 res=0 errno=-22 [ 1414.965482][ T1689] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input102 [ 1414.973023][ T33] audit: type=1800 audit(1792242911.232:11216): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=760926 res=0 errno=-22 [ 1414.973077][ T33] audit: type=1800 audit(1792242911.232:11217): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=760929 res=0 errno=-22 [ 1414.985731][ T1689] input: failed to attach handler evdev to device input102, error: -4 [ 1416.383830][ T1744] autofs4:pid:1744:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.1280), cmd(0xc0189375) [ 1416.383864][ T1744] autofs4:pid:1744:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 1419.462335][ T1837] loop8: detected capacity change from 0 to 7 [ 1419.467588][ T1837] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1419.467618][ T1837] loop8: partition table partially beyond EOD, truncated [ 1419.467872][ T1837] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 1419.471200][ T1837] loop8: p2 start 121280928 is beyond EOD, truncated [ 1419.538743][T23585] udevd[23585]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1419.581170][ T1849] syzkaller1: entered promiscuous mode [ 1419.581193][ T1849] syzkaller1: entered allmulticast mode [ 1419.627626][ T1854] jffs2: notice: (1854) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1420.026935][ T1888] loop8: detected capacity change from 0 to 7 [ 1420.029798][ T1888] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1420.029826][ T1888] loop8: partition table partially beyond EOD, truncated [ 1420.030093][ T1888] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 1420.052628][ T1888] loop8: p2 start 121280928 is beyond EOD, truncated [ 1420.145730][T23585] udevd[23585]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1420.147068][ T33] kauditd_printk_skb: 7 callbacks suppressed [ 1420.147082][ T33] audit: type=1800 audit(1792242916.422:11225): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=761343 res=0 errno=-22 [ 1420.190736][ T33] audit: type=1800 audit(1792242916.462:11226): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=761353 res=0 errno=-22 [ 1420.224841][ T1899] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10174'. [ 1420.288895][ T1909] FAULT_INJECTION: forcing a failure. [ 1420.288895][ T1909] name failslab, interval 1, probability 0, space 10, times 0 [ 1420.288918][ T1909] CPU: 1 UID: 0 PID: 1909 Comm: syz.7.10176 Tainted: G L syzkaller #0 PREEMPT(full) [ 1420.288933][ T1909] Tainted: [L]=SOFTLOCKUP [ 1420.288937][ T1909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1420.288945][ T1909] Call Trace: [ 1420.288949][ T1909] [ 1420.288954][ T1909] dump_stack_lvl+0xe8/0x150 [ 1420.288973][ T1909] should_fail_ex+0x3eb/0x540 [ 1420.288997][ T1909] should_failslab+0xa8/0x100 [ 1420.289010][ T1909] __kmalloc_noprof+0xf9/0x710 [ 1420.289026][ T1909] ? security_sk_alloc+0x52/0x360 [ 1420.289096][ T1909] ? security_sk_alloc+0x52/0x360 [ 1420.289111][ T1909] security_sk_alloc+0x52/0x360 [ 1420.289124][ T1909] sk_prot_alloc+0x101/0x210 [ 1420.289138][ T1909] ? sk_alloc+0x27/0x390 [ 1420.289153][ T1909] sk_alloc+0x3a/0x390 [ 1420.289169][ T1909] __netlink_create+0x62/0x260 [ 1420.289217][ T1909] netlink_create+0x3ca/0x590 [ 1420.289231][ T1909] ? __pfx_rtnetlink_bind+0x10/0x10 [ 1420.289273][ T1909] __sock_create+0x4b5/0xac0 [ 1420.289290][ T1909] __sys_socket+0xd6/0x1b0 [ 1420.289318][ T1909] __x64_sys_socket+0x7a/0x90 [ 1420.289334][ T1909] do_syscall_64+0x166/0x520 [ 1420.289350][ T1909] ? trace_irq_disable+0x3b/0x140 [ 1420.289363][ T1909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1420.289379][ T1909] ? clear_bhb_loop+0x70/0xc0 [ 1420.289394][ T1909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1420.289405][ T1909] RIP: 0033:0x7f369bb9e559 [ 1420.289416][ T1909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1420.289426][ T1909] RSP: 002b:00007f369ca0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1420.289438][ T1909] RAX: ffffffffffffffda RBX: 00007f369be25fa0 RCX: 00007f369bb9e559 [ 1420.289450][ T1909] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 1420.289457][ T1909] RBP: 00007f369bc35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 1420.289466][ T1909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1420.289472][ T1909] R13: 00007f369be26038 R14: 00007f369be25fa0 R15: 00007ffc9c620858 [ 1420.289489][ T1909] [ 1420.290157][ T1909] CacheFiles: Failed to register: -95 [ 1423.006160][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.122011][ T1899] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1423.650646][ T2013] ubi0: attaching mtd0 [ 1423.687496][ T2013] ubi0: scanning is finished [ 1423.687545][ T2013] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1423.729639][ T2031] FAULT_INJECTION: forcing a failure. [ 1423.729639][ T2031] name failslab, interval 1, probability 0, space 10, times 0 [ 1423.729672][ T2031] CPU: 0 UID: 0 PID: 2031 Comm: syz.7.10187 Tainted: G L syzkaller #0 PREEMPT(full) [ 1423.729697][ T2031] Tainted: [L]=SOFTLOCKUP [ 1423.729705][ T2031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1423.729716][ T2031] Call Trace: [ 1423.729723][ T2031] [ 1423.729731][ T2031] dump_stack_lvl+0xe8/0x150 [ 1423.729761][ T2031] should_fail_ex+0x3eb/0x540 [ 1423.729792][ T2031] should_failslab+0xa8/0x100 [ 1423.729813][ T2031] ? do_getname+0x2e/0x250 [ 1423.729837][ T2031] kmem_cache_alloc_noprof+0x9c/0x600 [ 1423.729861][ T2031] ? do_futex+0x3e7/0x4e0 [ 1423.729886][ T2031] ? do_getname+0x2e/0x250 [ 1423.729915][ T2031] do_getname+0x2e/0x250 [ 1423.729935][ T2031] ? getname_flags+0x11/0x20 [ 1423.729961][ T2031] do_sys_openat2+0xce/0x200 [ 1423.729985][ T2031] ? __se_sys_futex+0x3a8/0x450 [ 1423.730009][ T2031] ? __pfx_do_sys_openat2+0x10/0x10 [ 1423.730038][ T2031] ? rcu_is_watching+0x16/0xb0 [ 1423.730064][ T2031] __x64_sys_openat+0x138/0x170 [ 1423.730092][ T2031] do_syscall_64+0x166/0x520 [ 1423.730116][ T2031] ? trace_irq_disable+0x3b/0x140 [ 1423.730136][ T2031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1423.730163][ T2031] ? clear_bhb_loop+0x70/0xc0 [ 1423.730187][ T2031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1423.730206][ T2031] RIP: 0033:0x7f369bb5ed8e [ 1423.730225][ T2031] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1423.730240][ T2031] RSP: 002b:00007f369c9a9b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1423.730261][ T2031] RAX: ffffffffffffffda RBX: 00007f369c9aa6c0 RCX: 00007f369bb5ed8e [ 1423.730275][ T2031] RDX: 0000000000000002 RSI: 00007f369c9a9c00 RDI: ffffffffffffff9c [ 1423.730289][ T2031] RBP: 00007f369c9a9c00 R08: 0000000000000000 R09: 0000000000000000 [ 1423.730301][ T2031] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1423.730313][ T2031] R13: 00007f369be26308 R14: 00007f369be26270 R15: 00007ffc9c620858 [ 1423.730344][ T2031] [ 1424.076497][ T2013] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1424.777774][ T2098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1424.780408][ T2098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1424.855154][ T2105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1424.856579][ T2105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1426.056727][ T33] audit: type=1800 audit(1792242922.333:11227): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15476 res=0 errno=-22 [ 1426.095564][ T2119] tmpfs: Unknown parameter '01777777777777777777777' [ 1426.191434][ T2126] loop8: detected capacity change from 0 to 7 [ 1426.203200][ T2126] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1426.203230][ T2126] loop8: partition table partially beyond EOD, truncated [ 1426.205092][ T2126] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 1426.209042][ T2126] loop8: p2 start 121280928 is beyond EOD, truncated [ 1426.277744][T23585] udevd[23585]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1426.669856][ T2160] CIFS mount error: No usable UNC path provided in device string! [ 1426.669856][ T2160] [ 1426.669879][ T2160] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1426.696172][ T33] audit: type=1800 audit(1792242922.973:11228): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=761646 res=0 errno=-22 [ 1426.698432][T30583] hid_parser_main: 5 callbacks suppressed [ 1426.698450][T30583] hid-generic 0000:0000:0000.00C5: unknown main item tag 0x0 [ 1426.700657][T30583] hid-generic 0000:0000:0000.00C5: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1426.751053][ T33] audit: type=1800 audit(1792242923.023:11229): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=761666 res=0 errno=-22 [ 1426.838749][ T33] audit: type=1800 audit(1792242923.113:11230): pid=2166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="fido_id" name="report_descriptor" dev="sysfs" ino=761648 res=0 errno=-22 [ 1427.689679][ T33] audit: type=1800 audit(1792242923.963:11231): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15107 res=0 errno=-22 [ 1427.711999][ T33] audit: type=1800 audit(1792242923.973:11232): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15107 res=0 errno=-22 [ 1427.980768][ T33] audit: type=1800 audit(1792242924.253:11233): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=761765 res=0 errno=-22 [ 1428.001536][ T33] audit: type=1800 audit(1792242924.263:11234): pid=24457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=761769 res=0 errno=-22 [ 1428.023072][ T33] audit: type=1800 audit(1792242924.283:11235): pid=5272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="tun_flags" dev="sysfs" ino=761797 res=0 errno=-22 [ 1428.128089][ T2249] random: crng reseeded on system resumption [ 1428.887058][ T33] audit: type=1800 audit(1792242925.163:11236): pid=2277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.10218" name="attach" dev="sysfs" ino=33002 res=0 errno=-13 [ 1428.889565][ T2277] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1428.889591][ T2277] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1428.928897][ T2277] vhci_hcd vhci_hcd.0: Device attached [ 1428.952532][ T2277] netlink: 'syz.5.10218': attribute type 4 has an invalid length. [ 1428.955754][ T2277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.958761][ T2279] vhci_hcd: connection closed [ 1428.959028][T16917] vhci_hcd vhci_hcd.5: stop threads [ 1428.959041][T16917] vhci_hcd vhci_hcd.5: release socket [ 1428.959057][T16917] vhci_hcd vhci_hcd.5: disconnect device [ 1429.872162][ T2323] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1429.872265][ T2323] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1429.874624][ T2323] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1429.904646][ T2323] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1429.904719][ T2323] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1429.936473][ T2323] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1429.936568][ T2323] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1429.943984][ T2323] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1429.966019][ T2323] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1429.966124][ T2323] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1429.970322][ T2323] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1430.607674][ T2381] random: crng reseeded on system resumption [ 1431.150635][ T2393] netlink: 'syz.7.10228': attribute type 10 has an invalid length. [ 1431.273545][ T2393] team0: Device gre0 is of different type [ 1431.568386][ T33] kauditd_printk_skb: 3 callbacks suppressed [ 1431.568403][ T33] audit: type=1800 audit(1792242927.844:11240): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=761938 res=0 errno=-22 [ 1431.605237][ T33] audit: type=1800 audit(1792242927.884:11241): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=761942 res=0 errno=-22 [ 1431.637449][ T33] audit: type=1800 audit(1792242927.914:11242): pid=5272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="tun_flags" dev="sysfs" ino=761970 res=0 errno=-22 [ 1431.797861][ T2441] random: crng reseeded on system resumption [ 1431.801490][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 1431.962440][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 1431.962532][ T54] Bluetooth: hci5: command 0x0c1a tx timeout [ 1432.041210][T22577] Bluetooth: hci1: command 0x0c1a tx timeout [ 1432.975899][ T33] audit: type=1800 audit(1792242929.254:11243): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=762108 res=0 errno=-22 [ 1432.980263][ T33] audit: type=1800 audit(1792242929.254:11244): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=762112 res=0 errno=-22 [ 1433.881900][T22577] Bluetooth: hci3: command 0x0c1a tx timeout [ 1434.040811][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 1434.040857][T22577] Bluetooth: hci5: command 0x0c1a tx timeout [ 1434.117193][ T2553] random: crng reseeded on system resumption [ 1434.121390][T22577] Bluetooth: hci1: command 0x0c1a tx timeout [ 1434.783401][ T33] audit: type=1800 audit(1792242931.064:11245): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=762270 res=0 errno=-22 [ 1434.808378][ T33] audit: type=1800 audit(1792242931.064:11246): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=762274 res=0 errno=-22 [ 1434.808429][ T33] audit: type=1800 audit(1792242931.064:11247): pid=5272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="tun_flags" dev="sysfs" ino=762302 res=0 errno=-22 [ 1434.884158][ T2584] drivers/android/binder/context.rs:113: 54 callbacks suppressed [ 1434.884228][ T2584] binder: BINDER_SET_CONTEXT_MGR already set [ 1434.884283][ T2584] binder: BINDER_SET_CONTEXT_MGR already set [ 1434.884327][ T2584] binder: BINDER_SET_CONTEXT_MGR already set [ 1434.884372][ T2584] binder: BINDER_SET_CONTEXT_MGR already set [ 1434.884416][ T2584] binder: BINDER_SET_CONTEXT_MGR already set [ 1434.884461][ T2584] binder: BINDER_SET_CONTEXT_MGR already set [ 1434.891110][ T2584] binder: BINDER_SET_CONTEXT_MGR already set [ 1434.891203][ T2584] binder: BINDER_SET_CONTEXT_MGR already set [ 1434.891288][ T2584] binder: BINDER_SET_CONTEXT_MGR already set [ 1434.891362][ T2584] binder: BINDER_SET_CONTEXT_MGR already set [ 1434.907494][ T2583] drivers/android/binder/thread.rs:1669: 23 callbacks suppressed [ 1434.907516][ T2583] binder: Write failure EINVAL in pid:375 [ 1435.273089][ T2602] netlink: 'syz.7.10258': attribute type 10 has an invalid length. [ 1435.273113][ T2602] netlink: 40 bytes leftover after parsing attributes in process `syz.7.10258'. [ 1435.274186][ T2602] dummy0: entered promiscuous mode [ 1435.274246][ T2602] dummy0: entered allmulticast mode [ 1435.283711][ T2602] bridge0: port 3(dummy0) entered blocking state [ 1435.283819][ T2602] bridge0: port 3(dummy0) entered disabled state [ 1435.289978][ T2602] bridge0: port 3(dummy0) entered blocking state [ 1435.290088][ T2602] bridge0: port 3(dummy0) entered forwarding state [ 1435.428278][ T2622] netlink: 'syz.7.10261': attribute type 10 has an invalid length. [ 1435.442303][ T2622] bridge0: port 3(dummy0) entered disabled state [ 1435.457424][ T2622] dummy0: left allmulticast mode [ 1435.457450][ T2622] dummy0: left promiscuous mode [ 1435.457711][ T2622] bridge0: port 3(dummy0) entered disabled state [ 1435.487459][ T2624] netlink: 'syz.7.10261': attribute type 10 has an invalid length. [ 1435.508647][ T2622] team0: Port device dummy0 added [ 1435.544462][ T2624] team0: Port device dummy0 removed [ 1435.864195][ T33] audit: type=1800 audit(1792242932.144:11248): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=762461 res=0 errno=-22 [ 1435.888835][ T33] audit: type=1800 audit(1792242932.144:11249): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=762465 res=0 errno=-22 [ 1436.121401][T22577] Bluetooth: hci5: command 0x0c1a tx timeout [ 1436.200693][T22577] Bluetooth: hci1: command 0x0c1a tx timeout [ 1436.242615][T26626] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1436.402527][T26626] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1436.512952][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1436.537011][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1436.540816][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1436.558713][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1436.559467][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1436.643451][T26626] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1436.670850][ T33] kauditd_printk_skb: 2 callbacks suppressed [ 1436.670869][ T33] audit: type=1800 audit(1792242932.944:11252): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=762584 res=0 errno=-22 [ 1436.670911][ T33] audit: type=1800 audit(1792242932.944:11253): pid=24457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=762595 res=0 errno=-22 [ 1436.783324][T26626] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1436.923696][ T33] audit: type=1800 audit(1792242933.204:11254): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=762607 res=0 errno=-22 [ 1436.951887][ T33] audit: type=1800 audit(1792242933.214:11255): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=762612 res=0 errno=-22 [ 1436.951937][ T33] audit: type=1800 audit(1792242933.214:11256): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=762616 res=0 errno=-22 [ 1436.953054][ T33] audit: type=1800 audit(1792242933.214:11257): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=762615 res=0 errno=-22 [ 1436.953097][ T33] audit: type=1800 audit(1792242933.214:11258): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=762618 res=0 errno=-22 [ 1436.975111][ T33] audit: type=1800 audit(1792242933.234:11259): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=762693 res=0 errno=-22 [ 1436.975160][ T33] audit: type=1800 audit(1792242933.234:11260): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=762698 res=0 errno=-22 [ 1436.975198][ T33] audit: type=1800 audit(1792242933.234:11261): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=762702 res=0 errno=-22 [ 1437.133625][T26626] bridge_slave_1: left allmulticast mode [ 1437.133650][T26626] bridge_slave_1: left promiscuous mode [ 1437.133856][T26626] bridge0: port 2(bridge_slave_1) entered disabled state [ 1437.139998][T26626] bridge_slave_0: left allmulticast mode [ 1437.140022][T26626] bridge_slave_0: left promiscuous mode [ 1437.140235][T26626] bridge0: port 1(bridge_slave_0) entered disabled state [ 1437.476028][T26626] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1437.492355][T26626] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1437.494560][T26626] bond0 (unregistering): Released all slaves [ 1437.526409][ T2694] rxe_eth0 speed is unknown, defaulting to 1000 [ 1437.937388][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1438.596105][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1438.680805][ T54] Bluetooth: hci2: command tx timeout [ 1438.958011][T26626] hsr_slave_0: left promiscuous mode [ 1438.961117][T26626] hsr_slave_1: left promiscuous mode [ 1438.962669][T26626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1438.962690][T26626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1438.994767][T26626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1438.994791][T26626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1439.025928][T26626] veth1_macvtap: left promiscuous mode [ 1439.025955][T26626] veth0_macvtap: left promiscuous mode [ 1439.026013][T26626] veth1_vlan: left promiscuous mode [ 1439.026051][T26626] veth0_vlan: left promiscuous mode [ 1439.376152][ T2911] random: crng reseeded on system resumption [ 1440.084212][T26626] team0 (unregistering): Port device team_slave_1 removed [ 1440.107634][T26626] team0 (unregistering): Port device team_slave_0 removed [ 1440.347068][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1440.461738][ T2694] bridge0: port 1(bridge_slave_0) entered blocking state [ 1440.461835][ T2694] bridge0: port 1(bridge_slave_0) entered disabled state [ 1440.461971][ T2694] bridge_slave_0: entered allmulticast mode [ 1440.465538][ T2694] bridge_slave_0: entered promiscuous mode [ 1440.501977][ T2694] bridge0: port 2(bridge_slave_1) entered blocking state [ 1440.502794][ T2694] bridge0: port 2(bridge_slave_1) entered disabled state [ 1440.502917][ T2694] bridge_slave_1: entered allmulticast mode [ 1440.530227][ T2694] bridge_slave_1: entered promiscuous mode [ 1440.572199][ T2694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1440.575152][ T2694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1440.642781][ T2694] team0: Port device team_slave_0 added [ 1440.645771][ T2694] team0: Port device team_slave_1 added [ 1440.686651][ T2694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1440.686668][ T2694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1440.686691][ T2694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1440.688518][ T2694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1440.688532][ T2694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1440.688553][ T2694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1440.715655][ T3006] loop8: detected capacity change from 0 to 7 [ 1440.719960][ T3006] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1440.719989][ T3006] loop8: partition table partially beyond EOD, truncated [ 1440.720222][ T3006] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 1440.743965][ T3006] loop8: p2 start 121280928 is beyond EOD, truncated [ 1440.802433][T22577] Bluetooth: hci2: command tx timeout [ 1440.842244][T23585] udevd[23585]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1441.085555][ T2694] hsr_slave_0: entered promiscuous mode [ 1441.086573][ T2694] hsr_slave_1: entered promiscuous mode [ 1441.091696][ T2694] debugfs: 'hsr0' already exists in 'hsr' [ 1441.091716][ T2694] Cannot create hsr debugfs directory [ 1441.407894][ T3081] nvme nvme0: failed to connect socket: -111 [ 1441.580554][ T5272] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1441.778068][T18388] kernel read not supported for file /newroot/157 (pid: 18388 comm: kworker/1:10) [ 1442.023382][ T3182] random: crng reseeded on system resumption [ 1442.565314][ T33] kauditd_printk_skb: 16 callbacks suppressed [ 1442.565333][ T33] audit: type=1800 audit(1792242938.845:11278): pid=2694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=24627 res=0 errno=-13 [ 1442.577477][ T33] audit: type=1800 audit(1792242938.855:11279): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=774814 res=0 errno=-22 [ 1442.794720][ T3216] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 1442.839781][T22577] Bluetooth: hci2: command tx timeout [ 1442.934845][ T2694] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1442.941883][ T2694] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1442.943430][ T2694] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1442.964635][ T2694] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1442.965448][ T2694] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1442.972469][ T2694] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1442.973316][ T2694] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1442.996042][ T2694] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1443.105738][ T2694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1443.127231][ T2694] 8021q: adding VLAN 0 to HW filter on device team0 [ 1443.138425][T26607] bridge0: port 1(bridge_slave_0) entered blocking state [ 1443.138529][T26607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1443.157441][T26607] bridge0: port 2(bridge_slave_1) entered blocking state [ 1443.157544][T26607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1443.854749][ T2694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1444.092542][ T3293] loop8: detected capacity change from 0 to 7 [ 1444.099761][ T3293] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1444.099791][ T3293] loop8: partition table partially beyond EOD, truncated [ 1444.100026][ T3293] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 1444.114113][ T3293] loop8: p2 start 121280928 is beyond EOD, truncated [ 1444.231672][T23585] udevd[23585]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1444.416954][ T2694] veth0_vlan: entered promiscuous mode [ 1444.435350][ T2694] veth1_vlan: entered promiscuous mode [ 1444.478620][ T2694] veth0_macvtap: entered promiscuous mode [ 1444.493793][ T2694] veth1_macvtap: entered promiscuous mode [ 1444.518694][ T2694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1444.535044][ T2694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1444.593026][T26596] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.598881][ T1118] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.601749][ T33] audit: type=1800 audit(1792242940.885:11280): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=775217 res=0 errno=-22 [ 1444.610509][T26624] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.611554][T26624] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.687883][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1444.687903][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1444.694106][ T33] audit: type=1800 audit(1792242940.975:11281): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=775343 res=0 errno=-22 [ 1444.780718][T26623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1444.780739][T26623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1444.919919][T22577] Bluetooth: hci2: command tx timeout [ 1445.132641][ T3349] random: crng reseeded on system resumption [ 1446.378829][ T3397] loop8: detected capacity change from 0 to 7 [ 1446.386563][ T3397] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1446.386587][ T3397] loop8: partition table partially beyond EOD, truncated [ 1446.387631][ T3397] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 1446.394666][ T3397] loop8: p2 start 121280928 is beyond EOD, truncated [ 1446.521563][T23585] udevd[23585]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1447.232320][ T3452] random: crng reseeded on system resumption [ 1448.527414][ T3501] loop8: detected capacity change from 0 to 7 [ 1448.542867][ T3501] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1448.542898][ T3501] loop8: partition table partially beyond EOD, truncated [ 1448.543128][ T3501] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 1448.559317][ T3508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1448.565915][ T3508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1448.569844][ T3501] loop8: p2 start 121280928 is beyond EOD, truncated [ 1448.637461][T23585] udevd[23585]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1448.770606][ T3508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1448.771471][ T3508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1448.889914][ T33] audit: type=1800 audit(1792242945.176:11282): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=775583 res=0 errno=-22 [ 1448.894935][ T33] audit: type=1800 audit(1792242945.176:11283): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=775587 res=0 errno=-22 [ 1449.394802][ T3567] random: crng reseeded on system resumption [ 1450.337316][ T33] audit: type=1800 audit(1792242946.616:11284): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=775668 res=0 errno=-22 [ 1450.365739][ T33] audit: type=1800 audit(1792242946.646:11285): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=775672 res=0 errno=-22 [ 1450.906749][ T3624] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10353'. [ 1450.960795][ T3624] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10353'. [ 1451.022768][ T3635] loop8: detected capacity change from 0 to 7 [ 1451.024402][ T3635] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1451.024431][ T3635] loop8: partition table partially beyond EOD, truncated [ 1451.025392][ T3635] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 1451.027737][ T3635] loop8: p2 start 121280928 is beyond EOD, truncated [ 1451.124282][T23585] udevd[23585]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1451.473777][ T33] audit: type=1800 audit(1792242947.756:11286): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=775780 res=0 errno=-22 [ 1451.476274][ T33] audit: type=1800 audit(1792242947.756:11287): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=775784 res=0 errno=-22 [ 1451.668253][ T3677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10360'. [ 1451.677860][ T33] audit: type=1800 audit(1792242947.946:11288): pid=3677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.10360" name="quirks" dev="sysfs" ino=59905 res=0 errno=-22 [ 1451.866967][ T33] audit: type=1800 audit(1792242948.146:11289): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16091 res=0 errno=-22 [ 1452.585879][ T33] audit: type=1800 audit(1792242948.866:11290): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=775857 res=0 errno=-22 [ 1452.613227][ T33] audit: type=1800 audit(1792242948.896:11291): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=775861 res=0 errno=-22 [ 1453.493511][ T3729] loop8: detected capacity change from 0 to 7 [ 1453.497561][ T3729] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1453.497591][ T3729] loop8: partition table partially beyond EOD, truncated [ 1453.497829][ T3729] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 1453.551554][ T3729] loop8: p2 start 121280928 is beyond EOD, truncated [ 1453.715993][T23585] udevd[23585]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1453.952290][ T3749] netlink: 'syz.9.10376': attribute type 17 has an invalid length. [ 1453.998062][ T33] audit: type=1800 audit(1792242950.276:11292): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31706 res=0 errno=-22 [ 1454.005922][ T33] audit: type=1800 audit(1792242950.286:11293): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31729 res=0 errno=-22 [ 1454.047723][ T33] audit: type=1800 audit(1792242950.326:11294): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=776130 res=0 errno=-22 [ 1454.070643][ T33] audit: type=1800 audit(1792242950.336:11295): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=776134 res=0 errno=-22 [ 1454.470800][ T3783] FAULT_INJECTION: forcing a failure. [ 1454.470800][ T3783] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1454.470835][ T3783] CPU: 1 UID: 0 PID: 3783 Comm: syz.9.10386 Tainted: G L syzkaller #0 PREEMPT(full) [ 1454.470862][ T3783] Tainted: [L]=SOFTLOCKUP [ 1454.470870][ T3783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1454.470881][ T3783] Call Trace: [ 1454.470890][ T3783] [ 1454.470899][ T3783] dump_stack_lvl+0xe8/0x150 [ 1454.470930][ T3783] should_fail_ex+0x3eb/0x540 [ 1454.470964][ T3783] prepare_alloc_pages+0x21e/0x5f0 [ 1454.470996][ T3783] __alloc_frozen_pages_noprof+0x17c/0x410 [ 1454.471026][ T3783] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1454.471052][ T3783] ? futex_unqueue+0x22/0x240 [ 1454.471079][ T3783] ? policy_nodemask+0x2cc/0x8e0 [ 1454.471102][ T3783] ? __lock_acquire+0x747/0x2de0 [ 1454.471124][ T3783] alloc_pages_mpol+0x21e/0x390 [ 1454.471150][ T3783] folio_alloc_mpol_noprof+0x39/0x160 [ 1454.471174][ T3783] vma_alloc_folio_noprof+0xe1/0x1e0 [ 1454.471198][ T3783] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1454.471234][ T3783] ? vma_has_anon_rmap+0xc9/0x270 [ 1454.471256][ T3783] do_pte_missing+0x16d4/0x3570 [ 1454.471299][ T3783] handle_mm_fault+0x1a2a/0x3540 [ 1454.471329][ T3783] ? handle_mm_fault+0xee/0x3540 [ 1454.471360][ T3783] ? __pfx_handle_mm_fault+0x10/0x10 [ 1454.471379][ T3783] ? lock_vma_under_rcu+0x45a/0x500 [ 1454.471400][ T3783] ? __pfx_do_futex+0x10/0x10 [ 1454.471447][ T3783] do_user_addr_fault+0xb35/0x1480 [ 1454.471486][ T3783] ? trace_page_fault_user+0x84/0x1e0 [ 1454.471515][ T3783] exc_page_fault+0x6a/0xc0 [ 1454.471542][ T3783] asm_exc_page_fault+0x26/0x30 [ 1454.471563][ T3783] RIP: 0033:0x7f4cc2c65de6 [ 1454.471582][ T3783] Code: fc ff ff 90 41 57 31 c0 41 56 49 89 fe 48 8d 3d cf 07 1d 00 41 55 49 89 d5 41 54 49 89 f4 48 89 d6 55 53 48 81 ec 88 20 00 00 <48> 89 0c 24 4c 89 44 24 08 e8 ac c7 fe ff 4d 85 ed 0f 84 2b 0a 00 [ 1454.471598][ T3783] RSP: 002b:00007f4cc3c68f60 EFLAGS: 00010206 [ 1454.471615][ T3783] RAX: 0000000000000000 RBX: 00007f4cc3025fa0 RCX: 0000000000000000 [ 1454.471628][ T3783] RDX: 00002000000003c0 RSI: 00002000000003c0 RDI: 00007f4cc2e3659f [ 1454.471642][ T3783] RBP: 00007f4cc2e35ab8 R08: 00007f4cc2c52930 R09: 0000000000000000 [ 1454.471656][ T3783] R10: 0000000000000000 R11: 00002000000003c0 R12: 0000000000000024 [ 1454.471668][ T3783] R13: 00002000000003c0 R14: 0000000000000000 R15: 00007fff09277f28 [ 1454.471698][ T3783] [ 1454.472021][ T3783] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1454.532043][ T3787] random: crng reseeded on system resumption [ 1454.938330][ T1232] usb 10-1: new high-speed USB device number 90 using dummy_hcd [ 1455.068380][ T1232] usb 10-1: device descriptor read/64, error -71 [ 1455.308737][ T1232] usb 10-1: new high-speed USB device number 91 using dummy_hcd [ 1455.392090][ T3802] overlayfs: failed to resolve 'lower2': -2 [ 1455.438270][ T1232] usb 10-1: device descriptor read/64, error -71 [ 1455.548742][ T1232] usb usb10-port1: attempt power cycle [ 1455.888268][ T1232] usb 10-1: new high-speed USB device number 92 using dummy_hcd [ 1455.908941][ T1232] usb 10-1: device descriptor read/8, error -71 [ 1456.059006][ T3821] loop8: detected capacity change from 0 to 7 [ 1456.062803][ T3821] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1456.062830][ T3821] loop8: partition table partially beyond EOD, truncated [ 1456.063016][ T3821] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 1456.073711][ T3821] loop8: p2 start 121280928 is beyond EOD, truncated [ 1456.151936][T23585] udevd[23585]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1456.171465][ T1232] usb 10-1: new high-speed USB device number 93 using dummy_hcd [ 1456.197858][ T1232] usb 10-1: device descriptor read/8, error -71 [ 1456.299290][ T1232] usb usb10-port1: unable to enumerate USB device [ 1458.056436][ T3885] random: crng reseeded on system resumption [ 1458.636924][ T3900] loop8: detected capacity change from 0 to 7 [ 1458.655186][ T3900] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1458.655217][ T3900] loop8: partition table partially beyond EOD, truncated [ 1458.655460][ T3900] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 1458.685583][ T3900] loop8: p2 start 121280928 is beyond EOD, truncated [ 1458.870667][T23585] udevd[23585]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1458.930751][ T5697] usb 6-1: ath9k_htc: Firmware - htc_9271.fw download failed [ 1458.935832][ T9161] usb 6-1: ath9k_htc: USB layer deinitialized [ 1458.951661][T30582] usb 4-1: ath9k_htc: Firmware - htc_9271.fw download failed [ 1458.962102][ T5762] usb 4-1: ath9k_htc: USB layer deinitialized [ 1459.890163][ T3962] veth1_to_batadv: entered promiscuous mode [ 1459.890184][ T3962] veth1_to_batadv: entered allmulticast mode [ 1459.893677][ T3967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1459.900590][ T3968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1459.901038][ T3968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1459.904078][ T3967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1460.078029][ T9161] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1460.104126][ T33] audit: type=1800 audit(1792242956.387:11296): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=776637 res=0 errno=-22 [ 1460.111554][ T33] audit: type=1800 audit(1792242956.397:11297): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=776641 res=0 errno=-22 [ 1460.249337][ T9161] usb 4-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=8.00 [ 1460.250464][ T9161] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1460.250491][ T9161] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1460.250526][ T9161] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1460.257301][ T33] audit: type=1800 audit(1792242956.537:11298): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=776714 res=0 errno=-22 [ 1460.269523][ T33] audit: type=1800 audit(1792242956.547:11299): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=776743 res=0 errno=-22 [ 1460.271192][ T33] audit: type=1800 audit(1792242956.547:11300): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=776721 res=0 errno=-22 [ 1460.290528][ T33] audit: type=1800 audit(1792242956.577:11301): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=776722 res=0 errno=-22 [ 1460.294119][ T9161] pl2303 4-1:1.0: pl2303 converter detected [ 1460.303808][ T33] audit: type=1800 audit(1792242956.587:11302): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=776723 res=0 errno=-22 [ 1460.321684][ T33] audit: type=1800 audit(1792242956.607:11303): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=776763 res=0 errno=-22 [ 1460.420860][ T9161] pl2303 4-1:1.0: pl2303_vendor_read - failed to read [8484]: -110 [ 1460.422071][ T9161] pl2303 4-1:1.0: pl2303_vendor_write - failed to write [0404]: -32 [ 1460.422555][ T9161] pl2303 4-1:1.0: pl2303_vendor_read - failed to read [8484]: -32 [ 1460.423024][ T9161] pl2303 4-1:1.0: pl2303_vendor_read - failed to read [8383]: -32 [ 1460.423371][ T9161] pl2303 4-1:1.0: pl2303_vendor_read - failed to read [8484]: -32 [ 1460.423764][ T9161] pl2303 4-1:1.0: pl2303_vendor_write - failed to write [0404]: -32 [ 1460.425077][ T9161] pl2303 4-1:1.0: pl2303_vendor_read - failed to read [8484]: -32 [ 1460.425422][ T9161] pl2303 4-1:1.0: pl2303_vendor_read - failed to read [8383]: -32 [ 1460.425770][ T9161] pl2303 4-1:1.0: pl2303_vendor_write - failed to write [0000]: -32 [ 1460.426170][ T9161] pl2303 4-1:1.0: pl2303_vendor_write - failed to write [0001]: -32 [ 1460.426537][ T9161] pl2303 4-1:1.0: pl2303_vendor_write - failed to write [0002]: -32 [ 1460.432511][ T33] audit: type=1800 audit(1792242956.717:11304): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=776779 res=0 errno=-22 [ 1460.439757][ T9161] usb 4-1: pl2303 converter now attached to ttyUSB0 [ 1460.448637][ T33] audit: type=1800 audit(1792242956.727:11305): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=776793 res=0 errno=-22 [ 1460.830010][ T4000] CIFS: enabling forcegid mount option implicitly because gid= option is specified [ 1460.830028][ T4000] CIFS mount error: No usable UNC path provided in device string! [ 1460.830028][ T4000] [ 1460.830116][ T4000] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1460.901753][ T4002] random: crng reseeded on system resumption [ 1461.326276][ T4005] loop8: detected capacity change from 0 to 7 [ 1461.337354][ T4005] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1461.337385][ T4005] loop8: partition table partially beyond EOD, truncated [ 1461.354939][ T4005] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 1461.392791][ T4005] loop8: p2 start 121280928 is beyond EOD, truncated [ 1461.487148][T23585] udevd[23585]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1461.823529][ T4032] lo speed is unknown, defaulting to 1000 [ 1461.851562][ T4032] lo speed is unknown, defaulting to 1000 [ 1461.861577][ T4032] lo speed is unknown, defaulting to 1000 [ 1461.871155][ T4037] smc: removing ib device rxe0 [ 1462.049835][ T4040] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10430'. [ 1462.136244][ T4039] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10430'. [ 1462.136346][ T4039] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10430'. [ 1462.136818][T26624] RDS/IB: rds_ib_setup_qp failed (-95) [ 1462.142048][ T1118] RDS/IB: rds_ib_setup_qp failed (-95) [ 1462.149494][T26626] RDS/IB: rds_ib_setup_qp failed (-95) [ 1462.182914][T26608] RDS/IB: rds_ib_setup_qp failed (-95) [ 1462.184102][T26626] RDS/IB: rds_ib_setup_qp failed (-95) [ 1462.208672][T26596] RDS/IB: rds_ib_setup_qp failed (-95) [ 1462.231290][T26596] RDS/IB: rds_ib_setup_qp failed (-95) [ 1462.257912][ T4044] netlink: 36 bytes leftover after parsing attributes in process `syz.7.10433'. [ 1462.258141][ T4045] netlink: 36 bytes leftover after parsing attributes in process `syz.7.10433'. [ 1462.259689][ T1118] RDS/IB: rds_ib_setup_qp failed (-95) [ 1462.270449][T26608] RDS/IB: rds_ib_setup_qp failed (-95) [ 1462.295644][T26608] RDS/IB: rds_ib_setup_qp failed (-95) [ 1462.319278][ T4044] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10433'. [ 1462.319306][ T4044] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10433'. [ 1462.362360][ T1118] RDS/IB: rds_ib_setup_qp failed (-95) [ 1462.400292][T26596] RDS/IB: rds_ib_setup_qp failed (-95) [ 1462.440899][ T9161] lo speed is unknown, defaulting to 1000 [ 1462.440968][ T4032] infiniband syz0: set active [ 1462.440982][ T4032] infiniband syz0: added lo [ 1462.489776][ T4032] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1462.489816][ T4032] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1462.489853][ T4032] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1462.614217][ T4037] smbdirect: ib_dev[rxe0] removed [ 1462.724141][ T4032] RDS/IB: syz0: added [ 1462.724236][ T4032] smc: adding ib device syz0 with port count 1 [ 1462.724266][ T4032] smc: ib device syz0 port 1 has no pnetid [ 1462.724342][ T9160] lo speed is unknown, defaulting to 1000 [ 1462.730058][ T4032] lo speed is unknown, defaulting to 1000 [ 1462.817463][ T5762] usb 10-1: new high-speed USB device number 94 using dummy_hcd [ 1462.968480][ T5762] usb 10-1: New USB device found: idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1462.970925][ T5762] usb 10-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1462.970972][ T5762] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1463.000433][ T5762] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1463.485583][ T4075] FAULT_INJECTION: forcing a failure. [ 1463.485583][ T4075] name failslab, interval 1, probability 0, space 10, times 0 [ 1463.485619][ T4075] CPU: 1 UID: 0 PID: 4075 Comm: syz.7.10439 Tainted: G L syzkaller #0 PREEMPT(full) [ 1463.485645][ T4075] Tainted: [L]=SOFTLOCKUP [ 1463.485652][ T4075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1463.485665][ T4075] Call Trace: [ 1463.485672][ T4075] [ 1463.485682][ T4075] dump_stack_lvl+0xe8/0x150 [ 1463.485712][ T4075] should_fail_ex+0x3eb/0x540 [ 1463.485745][ T4075] should_failslab+0xa8/0x100 [ 1463.485768][ T4075] __kmalloc_noprof+0xf9/0x710 [ 1463.485795][ T4075] ? __mutex_trylock_common+0x15f/0x270 [ 1463.485817][ T4075] ? io_cache_alloc_new+0x40/0x100 [ 1463.485917][ T4075] ? io_cache_alloc_new+0x40/0x100 [ 1463.485948][ T4075] io_cache_alloc_new+0x40/0x100 [ 1463.485976][ T4075] io_uring_cmd_prep+0x39a/0x600 [ 1463.486051][ T4075] io_submit_sqes+0xd6e/0x2500 [ 1463.486160][ T4075] __se_sys_io_uring_enter+0x35b/0x1bb0 [ 1463.486203][ T4075] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1463.486230][ T4075] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1463.486266][ T4075] ? rcu_is_watching+0x16/0xb0 [ 1463.486296][ T4075] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1463.486326][ T4075] do_syscall_64+0x166/0x520 [ 1463.486352][ T4075] ? trace_irq_disable+0x3b/0x140 [ 1463.486375][ T4075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.486394][ T4075] ? clear_bhb_loop+0x70/0xc0 [ 1463.486419][ T4075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.486439][ T4075] RIP: 0033:0x7f369bb9e559 [ 1463.486459][ T4075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1463.486476][ T4075] RSP: 002b:00007f369c9ebf38 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1463.486498][ T4075] RAX: ffffffffffffffda RBX: 0000200000000300 RCX: 00007f369bb9e559 [ 1463.486513][ T4075] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000008 [ 1463.486526][ T4075] RBP: 00000000000000f8 R08: 0000000000000000 R09: 0000000000000008 [ 1463.486539][ T4075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1463.486551][ T4075] R13: 0000000000000008 R14: 0000000000000f39 R15: 0000000000000000 [ 1463.486590][ T4075] [ 1464.057439][ T5762] stv0680 10-1:4.0: Could not get descriptor 0200 [ 1464.284438][ T5762] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1464.284465][ T5762] stv0680 10-1:4.0: last error: 9, command = 0xf [ 1464.316792][ T5762] usb 10-1: USB disconnect, device number 94 [ 1464.374038][T26626] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1464.374071][T26626] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1464.754845][T26626] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1464.754876][T26626] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1464.849713][ T4032] lo speed is unknown, defaulting to 1000 [ 1465.035102][T26626] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1465.035137][T26626] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1465.172586][ T4121] loop8: detected capacity change from 0 to 7 [ 1465.180083][ T4121] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1465.180114][ T4121] loop8: partition table partially beyond EOD, truncated [ 1465.180369][ T4121] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 1465.268823][T26626] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1465.268856][T26626] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1465.280492][ T4121] loop8: p2 start 121280928 is beyond EOD, truncated [ 1465.471391][T23585] udevd[23585]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1465.532063][ T4137] random: crng reseeded on system resumption [ 1466.481511][ T33] kauditd_printk_skb: 14 callbacks suppressed [ 1466.481532][ T33] audit: type=1800 audit(1792242962.758:11320): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=784661 res=0 errno=-22 [ 1466.520130][ T33] audit: type=1800 audit(1792242962.808:11321): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=784691 res=0 errno=-22 [ 1466.550145][ T33] audit: type=1800 audit(1792242962.838:11322): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=784695 res=0 errno=-22 [ 1466.578145][ T33] audit: type=1800 audit(1792242962.868:11323): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=784694 res=0 errno=-22 [ 1466.598666][ T33] audit: type=1800 audit(1792242962.878:11324): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=784697 res=0 errno=-22 [ 1466.704588][ T33] audit: type=1800 audit(1792242962.988:11325): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=785236 res=0 errno=-22 [ 1466.745476][ T33] audit: type=1800 audit(1792242963.028:11326): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=785241 res=0 errno=-22 [ 1466.757062][ T33] audit: type=1800 audit(1792242963.038:11327): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=785245 res=0 errno=-22 [ 1466.757114][ T33] audit: type=1800 audit(17 ** replaying previous printk message ** [ 1466.757114][ T33] audit: type=1800 audit(1792242963.038:11328): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=785244 res=0 errno=-22 [ 1466.784221][ T33] audit: type=1800 audit(1792242963.068:11329): pid=23585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=785247 res=0 errno=-22 [ 1466.794746][ T4150] [ 1466.841577][ T4150] ============================================ [ 1466.847729][ T4150] WARNING: possible recursive locking detected [ 1466.853906][ T4150] syzkaller #0 Tainted: G L [ 1466.859969][ T4150] -------------------------------------------- [ 1466.866212][ T4150] syz.7.10446/4150 is trying to acquire lock: [ 1466.872327][ T4150] ffff8880255407e8 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: blkdev_buffered_write+0xd7/0x160 [ 1466.883141][ T4150] [ 1466.883141][ T4150] but task is already holding lock: [ 1466.890508][ T4150] ffff8880255407e8 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: blkdev_write_iter+0x6c5/0x810 [ 1466.901045][ T4150] [ 1466.901045][ T4150] other info that might help us debug this: [ 1466.909116][ T4150] Possible unsafe locking scenario: [ 1466.909116][ T4150] [ 1466.916572][ T4150] CPU0 [ 1466.919852][ T4150] ---- [ 1466.923119][ T4150] lock(&sb->s_type->i_mutex_key#10); [ 1466.928571][ T4150] lock(&sb->s_type->i_mutex_key#10); [ 1466.934019][ T4150] [ 1466.934019][ T4150] *** DEADLOCK *** [ 1466.934019][ T4150] [ 1466.942151][ T4150] May be due to missing lock nesting notation [ 1466.942151][ T4150] [ 1466.950456][ T4150] locks held by syz.7.10446/4150: 1, last CPU#1: [ 1466.956766][ T4150] #0: ffff8880255407e8 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: blkdev_write_iter+0x6c5/0x810 [ 1466.967648][ T4150] [ 1466.967648][ T4150] stack backtrace: [ 1466.973523][ T4150] CPU: 1 UID: 0 PID: 4150 Comm: syz.7.10446 Tainted: G L syzkaller #0 PREEMPT(full) [ 1466.984527][ T4150] Tainted: [L]=SOFTLOCKUP [ 1466.988831][ T4150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1466.998876][ T4150] Call Trace: [ 1467.002150][ T4150] [ 1467.005079][ T4150] dump_stack_lvl+0xe8/0x150 [ 1467.009671][ T4150] print_deadlock_bug+0x27a/0x290 [ 1467.014699][ T4150] __lock_acquire+0x25db/0x2de0 [ 1467.019542][ T4150] ? __lock_acquire+0x747/0x2de0 [ 1467.024473][ T4150] lock_acquire+0x115/0x350 [ 1467.028961][ T4150] ? blkdev_buffered_write+0xd7/0x160 [ 1467.034325][ T4150] down_read+0x45/0x320 [ 1467.038481][ T4150] ? blkdev_buffered_write+0xd7/0x160 [ 1467.043861][ T4150] blkdev_buffered_write+0xd7/0x160 [ 1467.049077][ T4150] blkdev_write_iter+0x6d5/0x810 [ 1467.054030][ T4150] vfs_write+0x612/0xba0 [ 1467.058285][ T4150] ? __pfx_vfs_write+0x10/0x10 [ 1467.063062][ T4150] ? __fget_files+0x3a2/0x420 [ 1467.067753][ T4150] ? __fget_files+0x2a/0x420 [ 1467.072350][ T4150] ? fdget+0x1ac/0x250 [ 1467.076431][ T4150] ksys_write+0x150/0x270 [ 1467.080766][ T4150] ? __pfx_ksys_write+0x10/0x10 [ 1467.085631][ T4150] do_syscall_64+0x166/0x520 [ 1467.090226][ T4150] ? trace_irq_disable+0x3b/0x140 [ 1467.095264][ T4150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1467.101330][ T4150] ? clear_bhb_loop+0x70/0xc0 [ 1467.106015][ T4150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1467.111904][ T4150] RIP: 0033:0x7f369bb9e559 [ 1467.116316][ T4150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1467.135920][ T4150] RSP: 002b:00007f369c9ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1467.144334][ T4150] RAX: ffffffffffffffda RBX: 00007f369be26090 RCX: 00007f369bb9e559 [ 1467.152313][ T4150] RDX: 00000000fffffe38 RSI: 00002000000006c0 RDI: 0000000000000008 [ 1467.160281][ T4150] RBP: 00007f369bc35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 1467.168249][ T4150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1467.176206][ T4150] R13: 00007f369be26128 R14: 00007f369be26090 R15: 00007ffc9c620858 [ 1467.184177][ T4150] [ 1467.217755][ T4032] lo speed is unknown, defaulting to 1000 [ 1467.242252][T26626] bridge_slave_1: left allmulticast mode [ 1467.242274][T26626] bridge_slave_1: left promiscuous mode [ 1467.242416][T26626] bridge0: port 2(bridge_slave_1) entered disabled state [ 1467.312178][T26626] team0: left allmulticast mode [ 1467.312200][T26626] team_slave_0: left allmulticast mode [ 1467.312214][T26626] team_slave_1: left allmulticast mode [ 1467.563693][T26626] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1467.587189][T26626] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1467.592463][T26626] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1467.593494][T26626] bond0 (unregistering): Released all slaves [ 1467.923836][ T4032] lo speed is unknown, defaulting to 1000 [ 1468.315326][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1468.568424][ T4032] lo speed is unknown, defaulting to 1000 [ 1468.784377][ T4032] lo speed is unknown, defaulting to 1000 [ 1468.797249][ T5272] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1468.952911][ T4032] lo speed is unknown, defaulting to 1000 [ 1469.103188][ T4032] lo speed is unknown, defaulting to 1000 [ 1469.454067][ T5272] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1469.558857][T26626] hsr_slave_0: left promiscuous mode [ 1469.559280][T26626] hsr_slave_1: left promiscuous mode [ 1469.559741][T26626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1469.559756][T26626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1469.560399][T26626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1469.560416][T26626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1469.564918][T26626] veth1_macvtap: left promiscuous mode [ 1469.564945][T26626] veth0_macvtap: left promiscuous mode [ 1469.565008][T26626] veth1_vlan: left promiscuous mode [ 1469.565057][T26626] veth0_vlan: left promiscuous mode [ 1469.785589][T26626] team0 (unregistering): Port device team_slave_1 removed [ 1469.805646][T26626] team0 (unregistering): Port device team_slave_0 removed [ 1470.249360][ T5272] 8021q: adding VLAN 0 to HW filter on device eth8