last executing test programs: 10m20.739977772s ago: executing program 32 (id=5372): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5282e4e0bf3eaf55a60da25", 0xbf}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a0901e880", 0xf6}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd9f", 0x21}, {&(0x7f0000000c00)}], 0x2, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000e40)="c4ae7c0462b7d5d0f701a4979574ff8a5d74bf45c9e878972a42062f9b70e92f76ed2c49e2e8a043016efca580e1e24cbf53ef2fdb0d3810e8359c20b3938b1cb8574e51adc3cac209dd1c3b0fa44d9ca5ffbc", 0x53}, {&(0x7f0000000fc0)}], 0x2, 0x0, 0x0, 0x84090}], 0x3, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 10m15.968970358s ago: executing program 33 (id=5393): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 9m7.16639302s ago: executing program 3 (id=5731): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r2, 0xff, 0x1, 0x0, &(0x7f0000000080)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x7) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x20000, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0xc0044dff, &(0x7f0000004000)) 9m6.662030862s ago: executing program 3 (id=5732): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000500)=ANY=[@ANYBLOB="200d02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000000)={0x23, 0x20}, 0x10) (async) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r2, &(0x7f0000000000)={0x23, 0x20}, 0x10) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000300)={0x0, 0xd, 0x2, 'W@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000180)={0x40, 0x15, 0x2, '1]'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="000a02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x40, 0x12, 0x3, "00cca3"}, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a03000000e61d00000000070000000900010073797a3000000000a0000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d5c0012802c0001800a0001006c696d69740000001c0002800c00024000000000000010000c000140000000000000080000000000000001006c696d69740000001c0002800c000240000000000000d2360c000140000000000000000708000340000001"], 0xe8}, 0x1, 0x0, 0x0, 0x4010}, 0x20050800) 9m5.682487841s ago: executing program 3 (id=5738): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20000080) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f00000000c0)={0x7, 0x0}) 9m5.511137103s ago: executing program 3 (id=5739): r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x0, 0x0, 0xfffffffd, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x2a}}}}}) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002cc0)=@newtaction={0x48, 0x1e, 0x109, 0x100, 0x25dfdbff, {}, [{0x34, 0x1, [@m_ife={0x30, 0x7, 0x0, 0x0, {{0x8}, {0x4}, {0x6, 0x6, 'zW'}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x48}, 0x1, 0x2b1e}, 0x200408d4) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000000)=[@in_dx={0x69, 0x20, {0xc2f5, 0x4}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0xad, 0x6, 0x3ff}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @rdmsr={0x66, 0x18, {0xafa}}, @uexit={0x0, 0x18, 0xffffffffffffffaf}, @set_irq_handler={0xc8, 0x20, {0x92}}, @nested_load_code={0x12e, 0x59, {0x3, "f22ef2dd4d04c4e129fbc20f019f0000000065400f20a266baf80cb88e90be8aef66bafc0c66ed47bb0070000065460f01ca660fd6d566ba2100ec66ba400066ed"}}], 0x119}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'xfrm0\x00'}) readv(r0, &(0x7f0000000800)=[{&(0x7f0000000340)=""/48, 0x30}, {0x0, 0x30}], 0x2) 9m3.965156394s ago: executing program 3 (id=5742): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000000002, 0x180, 0x400000004, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f000001aa40)=""/102400, 0x19000) add_key(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0x1, 0xffffffffffffffff) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0x4, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0xfffffffffffffce8, 0xa]}}) write(r0, &(0x7f0000000200)="d7", 0x1) 9m3.698154221s ago: executing program 3 (id=5746): bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[], 0x48) 8m49.274696856s ago: executing program 34 (id=5749): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20000080) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f00000000c0)={0x7, 0x0}) 8m48.873997677s ago: executing program 35 (id=5746): bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[], 0x48) 7m44.101781193s ago: executing program 8 (id=5970): socket(0xb, 0x2, 0x0) r0 = getpgrp(0xffffffffffffffff) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(r0, 0x799d6f84f74d3824, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x400000000000009, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, 0x0, &(0x7f0000000080)=""/37, 0x0, 0xdddd0000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000340)) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz0\x00', 0x200002, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x5b, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f00000000c0)={0x22}) socket$inet6_sctp(0xa, 0x1, 0x84) 7m41.408779841s ago: executing program 8 (id=5981): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x2}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x3, [@func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0x6, 0x5}, {0xd, 0x1}, {0xf, 0x1}, {0x0, 0x2}, {0x8, 0x4}, {0x1, 0x4}, {0xb, 0x4}, {0x4, 0x3}, {0xa}]}, @func={0x9, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x2e]}}, &(0x7f0000000540)=""/9, 0x7b, 0x9, 0x1, 0x5}, 0x28) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 7m37.467375206s ago: executing program 8 (id=5990): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) write$tun(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="010086ddde00120000000000000063b9e7a900000001fc020000000000000000000000000001ff"], 0x36) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5282e4e0bf3eaf55a60da25", 0xbf}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a0901e880", 0xf6}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd9f0940cf59647c14b7e6f19ac068f3a0920aed0a27cdd22c711855b5fb9f81ba75787a21c891067a458e010b16fa7d60083b", 0x52}, {&(0x7f0000000c00)="11bc0436f24447912dce9afd07fe935ecc6bd5eda7c7802f23cc14c83af658aba7129a55512896099992c8d02253e12016902434d12855df0a9b30e55e8f6259b106445aab46f952998eb7f8da0bad476b3c282f94edbd9aec43c836f227ecbc81a2e8dffb14b537cab2cd95a1351f3cdc2b6343f3521eb5638b256c10f93d4465c51329e7aed07efa4bdabe7b511b77df3e3cba7eac72df9b66860cf3b41a664167c6975937e78a75aa6ca347638a9eb3", 0xb1}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4de1f6d804e2da914136a7a4b169f152ec6af9204c3465d58e410029e4f28574ebfef1ac2fc1d17d5133793c9e9fbe4889c2a1427cb84332f6d4dad0f47d084b27c6c5afe46d605c7c33fa61fee2bdf78c16167904fab9a81bbb8a0ee73a56e9a67549a2701def6cc0224db8d147e08f15ec7d", 0xde}], 0x3, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000e40)="c4ae7c0462b7d5d0f701a4979574ff8a5d74bf45c9e878972a42062f9b70e92f76ed2c49e2e8a04301", 0x29}, {&(0x7f0000000fc0)}], 0x2, 0x0, 0x0, 0x84090}], 0x3, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f406", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 7m37.096431994s ago: executing program 8 (id=5993): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x8235, 0x135202) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f0000000800)=[{0x7f, 0x1000, 0xa6, &(0x7f0000000140)="50cc0946f8e587a004a15c995024327e52cfb23bdcb029103845a80918a2b15023ba437a3cdf001ee2887d6701e6361bfa8be544c9851c1a468c08efba99a04ab2c63819fc7d9c6c70dae706f760b6d75a343d6b8bfe8ef66d69bd1d0c9b9ac1c99079b4d34ed364648f80b9908189eca96f44908a56e01b8c7e1c0ddedf9c257a338e7ab7e64ed6b686563588dc3f6362a009b62cae0693ff4c1cd987cdaf60c8447e8f797b"}, {0x0, 0x201, 0x24, &(0x7f0000000040)="6ee73b872ecc8bf3dcd5dd3252e015a655ac3529626767bc60ce110a66f2b3c35568587c"}, {0x3be, 0x1000, 0xa1, &(0x7f0000000280)="5f3ca264800f4c6bdeb0009ab7399c0891a1a737b8256928bf230f8fef2e5c3996eb9e1305204417e0c6a3232fa11268a1206d6c95d14876518cd7872d1e04eaa631f1cc90b3c151ac9a9c69196f96bdfeca6d61ba50e7bb1e7cbadfc51cfd6496ae59e0d3c4961eddb80823ee2223b151dec3dfc9355be81e689846fa1e9582e3e29b72f54d75ceeea97f1df5e15d27c9def8708674ae746fb6e270e9f8faa6aa"}, {0x8, 0x8400, 0xc7, &(0x7f0000000380)="8a2b3feabccc8b030192518ab28c1dfbb7ef1dad54f03c85c46641b32a1463aca3c8091dea248349894fe2cecc17f7b890bd154ab5a17527658d323b7c1c9f49acc2233c5bf0895a5eeb3c69f2c5ad207d48e0c10542c2163cef8eda87ae369146f3a4de13c1f5cddb97f05c953d297f1a40747c681afe19a38ac8e8a342d11422482eb638051a9531e954098b6e366bd17258353dd5941ce79b08d38d42d7a1b5baf8a50e52024ded9e9ce3ec042d68749ddb242279def712c55b032d790c90a312cc8624909f"}, {0x8, 0x1010, 0x56, &(0x7f0000000500)="33643d8cfb854cc21807b8492a897f3cd76ada8fcbc52e8c80ff93b9383cfe8a2f84039564f90d5595f5e4d76b2efeb041e6817dbeeae11744f10af68fff2047f81b4a3b08528ade76e569f1581339a517b9941d3d25"}, {0x101, 0x2000, 0x96, &(0x7f0000000580)="70593bc5e82ff0df4cdc09f20272d5d18801869efcf940860cf2d0693fe287a84bf8408949c15290b82d7ec5675cc490771f924d3c576aefff06d8971d6cf50b0e1c495a9a6cdf2e49e0751ecda5397bdea8fcc7426b0c49f43fbc6107748a4e38cb9b72c2469fbc96f2b05a2fa21343193a08f27a31b34d8755d580f595cf10ac56008e4b390206a2b58a606610f82eb717edcb3b71"}, {0x3ff, 0x3200, 0xe0, &(0x7f0000000640)="5b1d0b6f7dc815ff8469b453e694a2eed39468a5fd2c7f7f733b1e107418021b88941bb1ef45ccd1ecb3d39de08f1c21d3f23860419eb316722c10738ed6fa3fdc7bff2dd67a47d75345d3127076081b033f837315adabc6a33cc920f644c828f801f59371a25289e78358e151241de8a368cafd001173be532900fad2d797a55c863b9976c5f84d31c6ce85b8d16c57932814008d9a9509b6d086e1bad2cdd2ef8ed6fcb32159d2eacfc2d26d61855d91be1751fb9e1b04ec519dcaf8865e32820e28f1d22efad0de35d8838e4b70795f91c0e906e7f84dcae7470d4a3ee4eb"}, {0x1, 0x4000, 0x8d, &(0x7f0000000740)="cf8b59cd317b32405d6d4ff2e6d0a24f5c02589e0dc537131043d69d3aae3e350255d42232bfc029766e245286b7a1f182778ff301fddd43d851a2f8523330d5d01c2f949424bec3bbccf1618b17a93b70530fe5543dda6337fccf1b80500b8d502d2da41a07fbb2223d5fdf0c8efe9befb2df85ddcf4e38443a2bc536f6015cf5cef8acfb97598d7ef8e87ecc"}], 0x8}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xa5) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./bus\x00', 0x0, 0x1085408, 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./bus\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000002240), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 7m36.925482122s ago: executing program 8 (id=5995): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f0000000200)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff2500feff0000000085100000faffffff9500000000002000"], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x8}, 0x94) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080), 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001040)={0xc, {"a2e3ad9bed0d52f91b18090987f70e06d038e7ff7fc6e5539b5b43078b089b3b33366d090890e0878f0e1ac6e7049b3371959b719a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074c0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x3b3cc1e9e7df1ab7}}, 0x9b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 7m35.65490978s ago: executing program 8 (id=5999): linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x3000) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x80) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/time_for_children\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) connect$unix(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r0, 0x0, 0x0, 0x60010000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = fsopen(&(0x7f0000000240)='jfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) sendmsg$sock(r4, &(0x7f0000000980)={&(0x7f0000000240)=@nfc={0x27, 0x0, 0x1, 0x5}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000340)="9bc00151d087fc36e998e5beceec1acd96d2f53845eb17b98dca34531cd02c2acd", 0x21}, {&(0x7f00000003c0)="1b0a8159bde65bc35ac813a36d8599de331946797c289709db72a1842d7cd281db54a855fb1cb48646e9c3161b0d8cecd279b582a3d0cc837d38d30b12f2db2208335d6bba5cbf5e872c31346b7cc59544d8af7aa60659ccfbe8bccdfa11343b3a1e0f31636876a07794864991519f4409f2fb10f1fe4db9d77aa76bfa4e862bcc6239f64022f2064a1c6179eae4a3ec40a0546e1ec05c5ecdae3d6160c5e2ec6560ff27e56a0ab41f5cf2b0c3896ac5610fa3b52a1b2e007e1f9ba46ee2f18d619b9059e84ab186ef4736c3aadbcf5966d98b573513b7ce771ec672bf5696f8d19e113fbbec13e353a1d9", 0xeb}, {&(0x7f0000000500)="23ae2602f69fa4bfb134bf58e6c6c269553be47945c0e1c80b091cb6be7d3423e58a23d2f368d5de4c3c0e5eebf66a2e21dbbe11ed22863e19ca48557b5cf45f7128986b9b3c9d71337372bebb9372e81b5371ff52f72740a34f6649a3e412565ffcb2b792cb9105d6552490792ef28c0749eb236029ab6dde4a0ff8bb18451ebd69ac060cb4897298e2f077f33c203686f625161403b7873e68e709f4aa6eced191b312d8c578b97a4f4278efc9614e3a193107", 0xb4}, {&(0x7f00000005c0)="a975c83e94c19589edb2665195ea46", 0xf}, {&(0x7f0000000600)="d4d479310b3373444b917c90e3427aa3e18f3e0b9e569ebe794e1a12cc7bfc392356994976bd856dfafcbf35a72407d911e6660170ddbd2a61cd6318d563891205779a2b749f767b967572147565e1b43cd12d98df9899e4f4cb66cc97341f1ef96105958f1d747179351f36a0f885ce027b54037d4bf56568ab3fd8788d2385b9a82876171cf5b142b095a184d4833002608d8b52656720603e89b9dfc15b94c0209374701f65427a06341150b1ecc9301e3833e7b38c6b3b62", 0xba}, {&(0x7f00000006c0)="514376babcb17ce894179f98bd555c08d13ef9deccb38d0e4aac235870da98b8d4840abca0ba14069d49f1d9c4117e93223817027c74ac5b4627e37ff1e18201f1697571b1fb61bca6bd29ed8560c74eaf30fd32695bc3c35cd3b84d3d8c8d82e290347b5c37aa06edddc98bdc881152ef6e028340b812335a6171ad9b512d53678065a6bf24c86135c0aa8fc1cc8afd406e3e3162694beefe0a3cdda619273f9193e2325b6dd106c28a2746905cc0b4e1e5a50d4197c83f6bedcdd752c1776cb3af53462042c7c2d4e2ee3607bd7e9464a007d85b82645acc40a4d7", 0xdc}], 0x6, &(0x7f0000000880)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0xe4}}, @timestamping={{0x14, 0x1, 0x25, 0x82f}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}], 0xd8}, 0x24004445) sendmmsg$inet(r3, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) 7m34.953226412s ago: executing program 36 (id=5999): linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x3000) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x80) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/time_for_children\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) connect$unix(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r0, 0x0, 0x0, 0x60010000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = fsopen(&(0x7f0000000240)='jfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) sendmsg$sock(r4, &(0x7f0000000980)={&(0x7f0000000240)=@nfc={0x27, 0x0, 0x1, 0x5}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000340)="9bc00151d087fc36e998e5beceec1acd96d2f53845eb17b98dca34531cd02c2acd", 0x21}, {&(0x7f00000003c0)="1b0a8159bde65bc35ac813a36d8599de331946797c289709db72a1842d7cd281db54a855fb1cb48646e9c3161b0d8cecd279b582a3d0cc837d38d30b12f2db2208335d6bba5cbf5e872c31346b7cc59544d8af7aa60659ccfbe8bccdfa11343b3a1e0f31636876a07794864991519f4409f2fb10f1fe4db9d77aa76bfa4e862bcc6239f64022f2064a1c6179eae4a3ec40a0546e1ec05c5ecdae3d6160c5e2ec6560ff27e56a0ab41f5cf2b0c3896ac5610fa3b52a1b2e007e1f9ba46ee2f18d619b9059e84ab186ef4736c3aadbcf5966d98b573513b7ce771ec672bf5696f8d19e113fbbec13e353a1d9", 0xeb}, {&(0x7f0000000500)="23ae2602f69fa4bfb134bf58e6c6c269553be47945c0e1c80b091cb6be7d3423e58a23d2f368d5de4c3c0e5eebf66a2e21dbbe11ed22863e19ca48557b5cf45f7128986b9b3c9d71337372bebb9372e81b5371ff52f72740a34f6649a3e412565ffcb2b792cb9105d6552490792ef28c0749eb236029ab6dde4a0ff8bb18451ebd69ac060cb4897298e2f077f33c203686f625161403b7873e68e709f4aa6eced191b312d8c578b97a4f4278efc9614e3a193107", 0xb4}, {&(0x7f00000005c0)="a975c83e94c19589edb2665195ea46", 0xf}, {&(0x7f0000000600)="d4d479310b3373444b917c90e3427aa3e18f3e0b9e569ebe794e1a12cc7bfc392356994976bd856dfafcbf35a72407d911e6660170ddbd2a61cd6318d563891205779a2b749f767b967572147565e1b43cd12d98df9899e4f4cb66cc97341f1ef96105958f1d747179351f36a0f885ce027b54037d4bf56568ab3fd8788d2385b9a82876171cf5b142b095a184d4833002608d8b52656720603e89b9dfc15b94c0209374701f65427a06341150b1ecc9301e3833e7b38c6b3b62", 0xba}, {&(0x7f00000006c0)="514376babcb17ce894179f98bd555c08d13ef9deccb38d0e4aac235870da98b8d4840abca0ba14069d49f1d9c4117e93223817027c74ac5b4627e37ff1e18201f1697571b1fb61bca6bd29ed8560c74eaf30fd32695bc3c35cd3b84d3d8c8d82e290347b5c37aa06edddc98bdc881152ef6e028340b812335a6171ad9b512d53678065a6bf24c86135c0aa8fc1cc8afd406e3e3162694beefe0a3cdda619273f9193e2325b6dd106c28a2746905cc0b4e1e5a50d4197c83f6bedcdd752c1776cb3af53462042c7c2d4e2ee3607bd7e9464a007d85b82645acc40a4d7", 0xdc}], 0x6, &(0x7f0000000880)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0xe4}}, @timestamping={{0x14, 0x1, 0x25, 0x82f}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}], 0xd8}, 0x24004445) sendmmsg$inet(r3, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) 7m28.617664981s ago: executing program 1 (id=6018): syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) syz_emit_ethernet(0x68, &(0x7f0000005a40)=ANY=[@ANYBLOB="bbbbbbbbbbbb6076b5cad4f686dd6075e70000323a7320010000000000000000000000000000ff020000000000000000000000000001040090780000000060a3579e00002b00ff010000000000000000000000000001fe8000000000000000000000000000bb6be2"], 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x68, 0x5, 0xc000, 0x2000, &(0x7f0000218000/0x2000)=nil}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)={0xffffffffffffffff}) sendmmsg(r3, &(0x7f0000008dc0), 0x0, 0x4009811) socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) fanotify_init(0x200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r5, @ANYRESHEX=r6], 0x15) 7m28.292594588s ago: executing program 1 (id=6020): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0xb1, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000200)=ANY=[@ANYRESDEC=r4, @ANYRES32=r4, @ANYRES16=r3, @ANYRESDEC=r4], 0x0, 0x1, 0x0, 0x0, 0x40e00, 0x31, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x25) mmap(&(0x7f0000581000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x88802) r6 = syz_io_uring_setup(0x1000022f, &(0x7f0000000080)={0x0, 0x4225, 0x20, 0x7ffffffc, 0x167}, &(0x7f00000001c0), &(0x7f0000000040)) io_uring_enter(r6, 0x7a98, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 7m27.456203222s ago: executing program 1 (id=6021): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') r2 = open_tree(r1, &(0x7f0000000300)='./cgroup\x00', 0x89801) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x1, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x89101) move_mount(r2, 0x0, r4, 0x0, 0x46) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x3) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x6100204) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/19, 0x13}], 0x1, 0x6, 0x1) 7m26.10712292s ago: executing program 1 (id=6025): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) recvmsg(r0, &(0x7f0000003700)={0x0, 0x0, 0x0}, 0x40006100) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@func_proto, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x2, 0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x28) 7m25.124896495s ago: executing program 1 (id=6031): r0 = socket(0x10, 0x803, 0x0) pipe2$watch_queue(0x0, 0x80) r1 = mq_open(&(0x7f0000000080)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0xec}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) userfaultfd(0x80001) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[], 0x13c}}, 0x20040880) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x9c) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)=0x10) mq_timedsend(r1, 0x0, 0x3d, 0xbd, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x4}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8941}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 7m24.164976136s ago: executing program 1 (id=6032): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r0, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60) 7m9.61754115s ago: executing program 37 (id=6032): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r0, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60) 7m5.424846007s ago: executing program 7 (id=6082): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000280), 0x8, 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000009c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000019480)={{}, 0x0, 0x8, @inherit={0x58, &(0x7f0000000580)=ANY=[@ANYBLOB="01000000ea4f600014addba10b843f642a0000000840000000000000000000000000000000c18a000000000000080000000000000045feffffffffffff0200000000000000f9ffffffffffffff4c0b00000000eaffffff0100000000000700000000000000"]}, @devid=r2}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000340)={r2, 0x7, 0x0, [0x2, 0x3, 0x1d4, 0x4, 0x2cf], [0x1, 0x4, 0x9117, 0x80000000, 0x1, 0x0, 0xd653, 0x1, 0xff, 0xa0, 0x207, 0x70206342, 0x6b78, 0x101, 0x3, 0xd, 0x5, 0x0, 0x3, 0x0, 0x401, 0x1ff, 0x1, 0xf, 0x6, 0x6d6e, 0x1eb, 0x3, 0xb, 0x0, 0x80000001, 0x6, 0xc, 0x2, 0x1, 0x21, 0x1, 0x0, 0xb594, 0x4, 0xc000000000, 0x9, 0x3, 0x5b3, 0x5, 0x4094, 0xaf, 0x1c00, 0x1, 0xf, 0x8, 0x8, 0x8, 0x4, 0x8, 0x8000000000000001, 0x5, 0xffffffffffffffff, 0x2, 0x8, 0x5, 0x9, 0xc0b6, 0x7, 0x4, 0x7, 0xfffffffffffffc00, 0x46d, 0x7, 0x100000001, 0x0, 0x9, 0x2, 0x9, 0xfffffffffffeffff, 0x6, 0x80000000, 0xf5e, 0x9, 0x80000000, 0x8, 0x593d, 0xf7e8, 0x800, 0x3ff, 0x0, 0x3, 0x800000000000, 0x8, 0x80, 0xf, 0x8, 0x101, 0x6, 0x3, 0x9, 0x752, 0x4, 0x4b0, 0x5, 0x1, 0x5, 0x0, 0x100000000, 0x81, 0x80000000, 0x1ff, 0x8, 0x10001, 0x6, 0xffffffff, 0x7fff, 0x10001, 0x8, 0x1, 0x3, 0xfffffffffffffbff, 0x2800, 0x6, 0xc, 0x6]}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000007c0)={0x1, 0x2, 0x1, 0x0, 0x8}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100020008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000e00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="0e080040e0000000000000000000181100000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b509020000000000dbaaf8ff50000000bf8200000000000007080000f8ffffffbfa420000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) clock_gettime(0x0, &(0x7f0000000000)) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r8, 0x0) r9 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r9, &(0x7f0000000240)={0x10, 0x0, 0xfffffffe, 0x2fffffffd}, 0xc) close(r9) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@overlay={0x7, 0x1, 0x4, 0x4, 0x2, {0x77359400}, {0x1, 0x0, 0x2, 0x10, 0x80, 0x7, "3dfdc116"}, 0x5c, 0x3, {}, 0x5, 0x0, r8}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r9) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000180)=0x2) eventfd(0x1) ptrace$cont(0x7, 0x0, 0x5, 0x2) 7m4.441418907s ago: executing program 7 (id=6085): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x0, 0x11, 0x148, 0x0, 0x0, 0x418, 0x2a8, 0x2a8, 0x418, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x320, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x221, 0x0, [{}, {}, {0x0, 0x72, 0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4, 0xfe}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0x0, 0x0, 0xa}, {0x0, 0x7}, {}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {0xa4c, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x0, 0x0, 0x200}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}, {}, {}, {0x0, 0x4f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xf}, {}, {0x0, 0x2, 0x0, 0x9}]}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x6, 0xac}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@statistic={{0x38}, {0x1, 0x1, 0x0, 0xc473cee6, 0xfffffff8, {0x7}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000564404204e080110f933010203010902"], 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='lp', 0x2) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r2, 0x0) (async) mlock2(&(0x7f00008a4000/0x4000)=nil, 0x4000, 0x0) (async) mlock2(&(0x7f0000ac1000/0x3000)=nil, 0x3000, 0x0) (async) munlockall() (async) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0xa, &(0x7f0000000080), 0x4) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, 0x0, &(0x7f0000000300)='GPL\x00', 0x2, 0xa6, &(0x7f0000000140)=""/166, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r4 = getpid() (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 64) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 64) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) (async, rerun: 32) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (async, rerun: 32) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x60, 0x1403, 0x1, 0x70bd29, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wlan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c040}, 0x20000000) 7m3.361391564s ago: executing program 7 (id=6088): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) rt_sigprocmask(0x2, &(0x7f00000003c0)={[0xa]}, 0x0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=@deltaction={0x24, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x24}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000540)={0x9, 0xfb, 0x40, 0xec, 0x2, 0x4, 0x9, 0x40, 0x3, 0x2, 0x37, 0xb, 0xfd, 0xcc}, 0xe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2a020400) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000000090101000000000000000000000000100004800800014000000004240002000c0002800500010a0000000014000280080001000000000008000200ac1414000800"], 0x58}, 0x1, 0x0, 0x0, 0x20000090}, 0x48815) msgsnd(0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x2000, 0x0) msgrcv(0x0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000240)=""/235) socket$nl_generic(0x10, 0x3, 0x10) 6m59.644040175s ago: executing program 7 (id=6096): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x80b02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100020008b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x4d5, &(0x7f0000000480)={0x0, 0xfc1b, 0x80, 0x2, 0x1e}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x5, &(0x7f0000000040)=[{0x2f, 0x84, 0xfd, 0x4}, {0x5, 0x3, 0x2, 0x400}, {0x9, 0x63, 0xfc, 0xfffffff2}, {0xfffb, 0x5, 0x7, 0x6}, {0x1, 0xf, 0xfc}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd_index, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r1, 0x22d0, 0x20, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'macvlan0\x00'}) 6m59.45264944s ago: executing program 7 (id=6098): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r2, 0x500e, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32, @ANYRESDEC], 0x50) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0xbfdfffbc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x804, 0x0, 0x0, 0x7, 0x4, 0x2, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)=0x0) ptrace$setsig(0x4203, r7, 0x9, &(0x7f00000001c0)={0x19, 0x1, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000800000000000000080000008500000004000000950000000000000080b3efeb950ed5964253b2be90768a3029894f9b94dc680d2811b1f3a47cceb7b53d963953f77e882d0114b5731aa939c2f07d0c91fd8577ad28d4c327e3747c27c4bd25463f99ae00ff037ad75d1f9eeddec88e09304aed1228beecb807433b2dcdc46a4199ff1954f340120498451859b8acfac915c7f24223f43276c7ee9adb7d58096a6ff0b8e2c2"], &(0x7f0000000040)='syzkaller\x00', 0xc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) io_uring_enter(r3, 0x32d7, 0x0, 0x46, 0x0, 0x0) 6m58.475732463s ago: executing program 7 (id=6104): syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c2402000000030000000000092406000601000000092403000000000500092406050001", @ANYRESHEX], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r0) socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) read(r2, &(0x7f0000000900)=""/198, 0xc6) r3 = socket(0x40000000015, 0x5, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = fsopen(0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r6, 0x4b46, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000280)='port', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0x2, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r8, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r9}}, 0x30) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000340)={0x16, 0x98, 0xfa00, {&(0x7f00000008c0)={0xffffffffffffffff}, 0x4, r9, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0) ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r8, &(0x7f0000000800)={0x11, 0x10, 0xfa00, {&(0x7f00000007c0), r10}}, 0x18) syz_genetlink_get_family_id$nfc(&(0x7f00000019c0), r4) getsockopt(r3, 0x200000000114, 0x4, 0x0, &(0x7f00000014c0)) socket$kcm(0x29, 0x7, 0x0) 6m44.094393063s ago: executing program 38 (id=6104): syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c2402000000030000000000092406000601000000092403000000000500092406050001", @ANYRESHEX], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r0) socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) read(r2, &(0x7f0000000900)=""/198, 0xc6) r3 = socket(0x40000000015, 0x5, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = fsopen(0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r6, 0x4b46, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000280)='port', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0x2, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r8, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r9}}, 0x30) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000340)={0x16, 0x98, 0xfa00, {&(0x7f00000008c0)={0xffffffffffffffff}, 0x4, r9, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0) ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r8, &(0x7f0000000800)={0x11, 0x10, 0xfa00, {&(0x7f00000007c0), r10}}, 0x18) syz_genetlink_get_family_id$nfc(&(0x7f00000019c0), r4) getsockopt(r3, 0x200000000114, 0x4, 0x0, &(0x7f00000014c0)) socket$kcm(0x29, 0x7, 0x0) 6m6.175876152s ago: executing program 4 (id=6262): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) pipe2(&(0x7f0000000040), 0x0) socket$inet6(0xa, 0x3, 0x0) openat$audio1(0xffffffffffffff9c, 0x0, 0x88002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vcs(0xffffffffffffff9c, 0x0, 0x20802, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) clock_settime(0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) syz_open_dev$dri(0x0, 0xa, 0x88441) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x9, 0xc, 0x9, 0x7, 0x9, 0x8, 0x3, 0xb, 0xfffffffffffffffc, 0x2, 0x5, 0x7, 0x7, 0x3, 0x6}) clock_adjtime(0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000003e00290200000000fcdbdf250a00000008000000", @ANYRES32=0x0, @ANYBLOB="8293de740ad556f5554250d2ba0e0a3cab949e940dd3ab6acca894c521039856b4b14987591e2bee74d700"], 0x1c}}, 0x8000) 6m5.402301102s ago: executing program 4 (id=6265): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r1, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e640000"], 0x3c}}, 0x24000001) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_trace', 0x169a82, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0xc00, 0x11) sendfile(r6, r6, 0x0, 0x30) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r5], 0x50}}, 0x2) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="5000000010001fff00000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b008100697036746e6c00001800028014000300fc02000000000000000000000000000008000a00", @ANYRES32=r2, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 6m4.983486448s ago: executing program 4 (id=6266): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="f08011b066ba6100ed6665660f38807df266baa000b00cee0f09c4e2fd303500000000660fc7701ef2f7dfc4c3c97e41b27426660f388272d9", 0x39}], 0x1, 0x37, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x400c941) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x7, 0x0, 0x0) statfs(&(0x7f0000002540)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r4) creat(&(0x7f0000002cc0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xc0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m4.506056552s ago: executing program 4 (id=6270): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) open(&(0x7f0000001100)='./file1\x00', 0x6c842, 0x157) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f000013a000/0x3000)=nil, &(0x7f000002c000/0x2000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000025000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x122) 6m4.248946286s ago: executing program 4 (id=6273): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) 6m3.723769349s ago: executing program 4 (id=6277): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000000c0)={0x0, 0x1, 0x0, &(0x7f00000002c0)=""/70, 0x0, 0xfec00000}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000380)=""/83, 0x0, 0x3deedecdf0e08a08}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000940)={0x2, 0x0, [{0x5000, 0x9f, &(0x7f0000000400)=""/159}, {0xeeee8000, 0x37, &(0x7f0000000080)=""/55}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0xfffffffe) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000040)=0x4000000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@dfltgid}]}}) splice(r3, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c570820fae0900cd3292ea54c7beef915d564c90c2", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001300)=""/81, 0x51}], 0x1}, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRESDEC], 0x0) 5m49.059389404s ago: executing program 39 (id=6277): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000000c0)={0x0, 0x1, 0x0, &(0x7f00000002c0)=""/70, 0x0, 0xfec00000}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000380)=""/83, 0x0, 0x3deedecdf0e08a08}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000940)={0x2, 0x0, [{0x5000, 0x9f, &(0x7f0000000400)=""/159}, {0xeeee8000, 0x37, &(0x7f0000000080)=""/55}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0xfffffffe) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000040)=0x4000000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@dfltgid}]}}) splice(r3, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c570820fae0900cd3292ea54c7beef915d564c90c2", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001300)=""/81, 0x51}], 0x1}, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRESDEC], 0x0) 9.143862909s ago: executing program 9 (id=7588): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) sendmmsg$inet(r0, &(0x7f00000004c0)=[{{&(0x7f0000000640)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000240)="0f", 0x1}], 0x1}}], 0x1, 0x4000000) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r4, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r4, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) ioctl$sock_TIOCOUTQ(r6, 0x5411, &(0x7f0000000680)) bind$inet(r6, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r7, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) unshare(0x62040200) 7.302079806s ago: executing program 9 (id=7606): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@ipv4_delrule={0x40, 0x21, 0x4, 0x70bd26, 0x25dfdbfe, {0x2, 0x14, 0x20, 0x0, 0x3, 0x0, 0x0, 0x8, 0x14}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0xfffffffffffffe16, 0xd, 0x4}, @FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xb84}]}, 0x40}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000780)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30000000000800024000000003"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000100), &(0x7f0000000180)=0x10) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x4, 0x8001, 0x0, 0x3, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) setitimer(0x2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) close_range(r3, r3, 0x0) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r5, 0x40045b17, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1b, 0x0, &(0x7f0000000a00)="b44c806748f06309624431ed3373010001000000008c6390009c4e", 0x0, 0x405, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = syz_open_dev$sg(0x0, 0x6f5e, 0x0) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000040)=0x85) r7 = socket$kcm(0x10, 0x2, 0x10) syz_usb_connect(0x2, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb100000000102000905"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf8"], 0xe4}, 0x1, 0x0, 0x0, 0x4000081}, 0x20050840) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 4.915607734s ago: executing program 0 (id=7625): socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) rmdir(&(0x7f0000000000)='./file0\x00') 4.914597258s ago: executing program 2 (id=7626): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e22, 0x2, @remote, 0x5}, {0xa, 0x4e20, 0xdf, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1, {[0x3, 0x6, 0x3ff, 0x1, 0xa7c, 0x47, 0x4, 0x9]}}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4ea5, 0x5, @mcast1, 0x7}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x59a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 4.854852475s ago: executing program 2 (id=7627): syz_usb_connect(0x5, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x5f, 0x2a, 0xb4, 0x20, 0xc72, 0xd, 0x279b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0xa2, 0x92}}]}}]}}, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f00002e3000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f00000021c0)=[{0x4, 0xffffffff, 0x100000001}], 0x1, 0x821c3, 0x1e, 0x0, 0x4e, 0x20}) 4.35177159s ago: executing program 5 (id=7630): syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') ioctl$FE_GET_EVENT(r0, 0x80286f4e, 0x0) 4.222477354s ago: executing program 5 (id=7631): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0x40000039}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) r2 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0e, 0xffffffff}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000051c0)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x4c800) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x30048044}, 0x4006000) set_mempolicy(0x4005, &(0x7f0000000180)=0x1004, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r7, &(0x7f00000001c0)={0x0, 0xa6, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r8, 0x309, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000080) 4.217552168s ago: executing program 9 (id=7632): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0xc00000}, [@tmpl={0x84, 0x5, [{{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@local, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x2}]}]}, 0x13c}}, 0x0) 4.160223775s ago: executing program 9 (id=7633): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x2, r1, 0x0, &(0x7f0000000080)) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000080)=[r7, r7], 0x2, r5, r6, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xc154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 3.620280863s ago: executing program 6 (id=7636): r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) pwritev(r1, 0x0, 0x0, 0x2, 0xfffffff5) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket(0x10, 0x80002, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0xfffd, @local}}, 0x24) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_score_adj\x00') write$cgroup_int(r6, &(0x7f0000000140)=0x2, 0x12) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000100)=0x5) bind$rxrpc(r5, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @private=0xa010102}}, 0x24) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r7, 0x10f, 0x8a, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg$unix(r4, 0x0, 0x0, 0x26022, 0x0) r8 = syz_open_dev$dri(0x0, 0x0, 0x0) r9 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x1100, 0x402000}) 3.618808052s ago: executing program 0 (id=7637): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM(0x4e, 0x3, &(0x7f00002d6000/0x4000)=nil) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x21, 0x2, 0xa) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) r3 = syz_io_uring_setup(0xbdf, &(0x7f0000000000)={0x0, 0x6d0a, 0x80, 0xfffffffd, 0x40000331}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/222, 0xde}], 0x1}) io_uring_enter(r3, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 3.002303569s ago: executing program 5 (id=7638): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) close(r2) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) read(r4, &(0x7f0000000080)=""/77, 0xffffff0f) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, &(0x7f00000001c0)={[], 0xf000}, 0x0) 3.00196803s ago: executing program 2 (id=7639): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) 2.796386004s ago: executing program 2 (id=7640): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, 0x0) 2.583648714s ago: executing program 2 (id=7641): syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, &(0x7f00000000c0)={0x7, "90ba53ddd40afd0194c9c6a37c183952d9c82fbfc4bf10a678f09e8c4562ae29"}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(0x0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 2.343384528s ago: executing program 6 (id=7642): syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x300) 2.24511216s ago: executing program 2 (id=7643): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000021) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r3 = gettid() r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x60a3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x9, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0xfa, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0x0, 0xee}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0xa, "238c3919"}, @global=@item_012={0x1, 0x1, 0x8, "a7"}]}}, 0x0}, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_GET_FPU(r8, 0x81a0ae8c, &(0x7f0000000240)) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r5, 0xc0245720, &(0x7f0000000080)={0x1}) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) 2.173862538s ago: executing program 5 (id=7644): syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x2000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) write$qrtrtun(0xffffffffffffffff, 0x0, 0x0) eventfd(0x6) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) 1.763526525s ago: executing program 0 (id=7645): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0xa0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x69}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r6, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.76205878s ago: executing program 6 (id=7655): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM(0x4e, 0x3, &(0x7f00002d6000/0x4000)=nil) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x21, 0x2, 0xa) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) r3 = syz_io_uring_setup(0xbdf, &(0x7f0000000000)={0x0, 0x6d0a, 0x80, 0xfffffffd, 0x40000331}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/222, 0xde}], 0x1}) io_uring_enter(r3, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 1.436219804s ago: executing program 0 (id=7646): syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) r0 = syz_open_procfs(0x0, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000040)={0x25, &(0x7f00000000c0)=[{0x2c, '\x00', @st={0x4, [{0x1, @uvalue=0x401}, {0x1, @uvalue=0x6}, {0x1, @svalue=0x3}, {0x2, @svalue=0x9}]}, 0x7}]}) 1.166403826s ago: executing program 9 (id=7647): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xf}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000400)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 1.166222414s ago: executing program 0 (id=7648): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2) r1 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x10, 0xfffffffd, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r1, 0x7323, 0x0, 0x5, 0x0, 0x0) 970.046527ms ago: executing program 9 (id=7649): syz_usb_connect(0x6, 0x0, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x28041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa4"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 939.136083ms ago: executing program 5 (id=7650): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000000540)=[{&(0x7f00000000c0)='y', 0x1}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 641.941015ms ago: executing program 5 (id=7651): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ef62c0000040000010902240001"], 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$rds(0x15, 0x5, 0x0) socket(0x15, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00004d4000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000890000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc0}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r2], 0x50) io_uring_enter(r3, 0x2219, 0xcf74, 0x51, 0x0, 0x0) 590.587327ms ago: executing program 6 (id=7652): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003d40), 0x0, 0x885) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x27}, {[@timestamp={0x44, 0xc, 0x5, 0x3, 0x0, [0x10000, 0x400]}]}}, {{0x4e22, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x0, 0x0}, &(0x7f00000001c0)="4bcd18541371", 0x0, 0x0, 0x14, 0x0, 0x0}) 416.455947ms ago: executing program 6 (id=7653): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x0, r2}) mmap(&(0x7f0000001000/0x4000)=nil, 0x21000, 0x4, 0x11, 0xffffffffffffffff, 0x100000000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r3, 0x1000000, 0x0) 150.884936ms ago: executing program 6 (id=7654): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0xc17a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = syz_open_dev$video4linux(&(0x7f0000000580), 0x5, 0x40000) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000640)={0x4, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0}) r2 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0xfac7}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80) ioctl$SNDRV_PCM_IOCTL_UNLINK(r3, 0x4161, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=7656): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000400)={0x79, 0x0, 0x6af}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f00000000c0)) r3 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r5 = socket$packet(0x11, 0x3, 0x300) bind$packet(r5, &(0x7f0000000380)={0x11, 0x8, r4, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) kernel console output (not intermixed with test programs): 9.697:2232): avc: denied { read } for pid=30484 comm="syz.5.6751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1654.591985][T30485] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1654.620255][T23944] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1654.764210][T30483] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6745'. [ 1654.782141][T23944] usb 7-1: Using ep0 maxpacket: 8 [ 1654.788909][T23944] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1654.797289][T17263] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1654.799779][T23944] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1654.819727][T23944] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 34494, setting to 1024 [ 1654.838401][T23944] usb 7-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1654.855571][T23944] usb 7-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1654.863965][T23944] usb 7-1: Product: syz [ 1654.868608][T23944] usb 7-1: Manufacturer: syz [ 1654.873176][T23944] usb 7-1: SerialNumber: syz [ 1654.881574][T23944] usb 7-1: config 0 descriptor?? [ 1654.886984][T30477] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1654.939713][T23944] rc_core: IR keymap rc-imon-rsc not found [ 1654.945805][T23944] Registered IR keymap rc-empty [ 1654.952660][T23944] rc rc0: iMON Station as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1654.953698][T17263] usb 10-1: Using ep0 maxpacket: 32 [ 1654.964373][T23944] input: iMON Station as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input67 [ 1655.011243][T17263] usb 10-1: config 2 has an invalid interface number: 211 but max is 0 [ 1655.045155][T17263] usb 10-1: config 2 has no interface number 0 [ 1655.074457][T17263] usb 10-1: config 2 interface 211 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1655.121111][T17263] usb 10-1: New USB device found, idVendor=2040, idProduct=8268, bcdDevice=27.95 [ 1655.151684][T17263] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.180002][T23944] usb 7-1: USB disconnect, device number 38 [ 1655.196014][T17263] usb 10-1: Product: syz [ 1655.205727][T17263] usb 10-1: Manufacturer: syz [ 1655.210481][T17263] usb 10-1: SerialNumber: syz [ 1655.236183][T30493] trusted_key: encrypted_key: master key parameter 'deªó'fault' is invalid [ 1655.253931][T30493] netlink: 'syz.5.6753': attribute type 10 has an invalid length. [ 1655.261810][T30493] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6753'. [ 1655.271516][T30493] batman_adv: batadv0: Adding interface: vlan1 [ 1655.277679][T30493] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1655.302946][T30493] batman_adv: batadv0: Interface activated: vlan1 [ 1655.335081][T17263] em28xx 10-1:2.211: New device syz syz @ 480 Mbps (2040:8268, interface 211, class 211) [ 1655.353851][T17263] em28xx 10-1:2.211: Video interface 211 found: isoc [ 1655.508692][T30495] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1655.996373][T30509] fuse: Unknown parameter 'user_id00000000000000000000' [ 1656.649629][T17263] em28xx 10-1:2.211: unknown em28xx chip ID (0) [ 1656.739477][T17263] em28xx 10-1:2.211: reading from i2c device at 0xa0 failed (error=-5) [ 1656.781026][T17263] em28xx 10-1:2.211: board has no eeprom [ 1656.963552][T17263] em28xx 10-1:2.211: Identified as PCTV tripleStick (292e) (card=94) [ 1657.011766][T17263] em28xx 10-1:2.211: Currently, V4L2 is not supported on this model [ 1657.345561][T24426] em28xx 10-1:2.211: Binding DVB extension [ 1657.360351][T24426] em28xx 10-1:2.211: no endpoint for DVB mode and transfer type 0 [ 1657.399526][T24426] em28xx 10-1:2.211: failed to pre-allocate USB transfer buffers for DVB. [ 1657.449776][T24426] em28xx 10-1:2.211: Registering input extension [ 1657.521792][T23944] usb 10-1: USB disconnect, device number 20 [ 1657.529603][T23944] em28xx 10-1:2.211: Disconnecting em28xx [ 1657.544301][T23944] em28xx 10-1:2.211: Closing input extension [ 1657.603404][T23944] em28xx 10-1:2.211: Freeing device [ 1657.979468][T30540] tipc: Started in network mode [ 1657.987687][T30540] tipc: Node identity ac14140f, cluster identity 4711 [ 1657.997670][T30540] tipc: New replicast peer: 255.255.255.255 [ 1658.004531][T30540] tipc: Enabled bearer , priority 10 [ 1658.016088][ T30] audit: type=1400 audit(2000000873.308:2233): avc: denied { read } for pid=30539 comm="syz.2.6767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1658.077219][T17263] IPVS: starting estimator thread 0... [ 1658.182717][T30544] IPVS: using max 37 ests per chain, 88800 per kthread [ 1658.394959][T30550] fuse: Bad value for 'fd' [ 1658.579043][ T30] audit: type=1400 audit(2000000873.907:2234): avc: denied { read } for pid=30553 comm="syz.0.6772" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1658.603165][ T30] audit: type=1400 audit(2000000873.907:2235): avc: denied { open } for pid=30553 comm="syz.0.6772" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1658.631565][ T30] audit: type=1400 audit(2000000873.907:2236): avc: denied { ioctl } for pid=30553 comm="syz.0.6772" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1658.862706][T30562] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20001 [ 1659.008250][T24426] tipc: Node number set to 2886997007 [ 1659.019391][T30560] tipc: Cannot configure node identity twice [ 1659.509886][T30569] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6778'. [ 1659.543656][T30569] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2593 sclass=netlink_route_socket pid=30569 comm=syz.5.6778 [ 1659.557863][T30570] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6777'. [ 1659.568100][T30569] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1659.576351][T30569] IPv6: NLM_F_CREATE should be set when creating new route [ 1659.583744][T30569] IPv6: NLM_F_CREATE should be set when creating new route [ 1659.590956][T30569] IPv6: NLM_F_CREATE should be set when creating new route [ 1659.847108][T30581] program syz.2.6779 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1659.858535][ T30] audit: type=1400 audit(2000000875.219:2237): avc: denied { read } for pid=30575 comm="syz.2.6779" name="sg0" dev="devtmpfs" ino=785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1659.893894][ T30] audit: type=1400 audit(2000000875.219:2238): avc: denied { open } for pid=30575 comm="syz.2.6779" path="/dev/sg0" dev="devtmpfs" ino=785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1660.416594][ T30] audit: type=1400 audit(2000000875.828:2239): avc: denied { mounton } for pid=30583 comm="syz.6.6781" path="/275/file0" dev="tmpfs" ino=1509 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1660.511109][ T30] audit: type=1400 audit(2000000875.859:2240): avc: denied { mount } for pid=30583 comm="syz.6.6781" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1660.722400][T30589] fuse: Bad value for 'fd' [ 1662.327924][ T30] audit: type=1400 audit(2000000877.833:2241): avc: denied { unmount } for pid=24350 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1662.568662][T30622] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1663.983968][T30637] fuse: Bad value for 'fd' [ 1664.925380][T30648] program syz.9.6796 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1665.094314][ T7670] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 1665.236062][T30659] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19752 sclass=netlink_route_socket pid=30659 comm=syz.0.6800 [ 1665.464172][ T7670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1665.524176][ T7670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1665.561304][ T7670] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1665.603632][ T7670] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1665.629092][ T7670] usb 3-1: Manufacturer: syz [ 1665.652133][ T7670] usb 3-1: config 0 descriptor?? [ 1665.880147][T30670] fuse: Unknown parameter '0x0000000000000005' [ 1665.926271][ T30] audit: type=1400 audit(2000000881.612:2242): avc: denied { bind } for pid=30671 comm="syz.5.6806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1665.971563][ T30] audit: type=1400 audit(2000000881.665:2243): avc: denied { create } for pid=30673 comm="syz.6.6807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1666.057633][ T7670] usbhid 3-1:0.0: can't add hid device: -71 [ 1666.068251][ T7670] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1666.112039][ T7670] usb 3-1: USB disconnect, device number 34 [ 1666.122120][T30679] netlink: 'syz.9.6809': attribute type 1 has an invalid length. [ 1666.593608][T24426] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1667.005124][T24426] usb 7-1: config 127 has an invalid interface number: 124 but max is 0 [ 1667.015644][T24426] usb 7-1: config 127 has no interface number 0 [ 1667.021953][T24426] usb 7-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=1d.4f [ 1667.032028][T24426] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1667.557785][T24426] peak_usb 7-1:127.124: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 1667.580260][ T30] audit: type=1400 audit(2000000883.344:2244): avc: denied { read } for pid=5475 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1668.005059][ T30] audit: type=1400 audit(2000000883.806:2245): avc: denied { search } for pid=5475 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1668.026876][T24426] peak_usb 7-1:127.124 can0: sending command failure: -22 [ 1668.029735][ T30] audit: type=1400 audit(2000000883.806:2246): avc: denied { search } for pid=5475 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1668.052455][T24426] peak_usb 7-1:127.124 can0: sending command failure: -22 [ 1668.090366][T24426] peak_usb 7-1:127.124 can0: sending command failure: -22 [ 1668.109798][ T30] audit: type=1400 audit(2000000883.806:2247): avc: denied { search } for pid=5475 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1668.116388][T30706] fuse: Unknown parameter '0x0000000000000005' [ 1668.154159][ T30] audit: type=1400 audit(2000000883.806:2248): avc: denied { read } for pid=5475 comm="dhcpcd" name="n151" dev="tmpfs" ino=13732 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1668.205815][ T30] audit: type=1400 audit(2000000883.806:2249): avc: denied { open } for pid=5475 comm="dhcpcd" path="/run/udev/data/n151" dev="tmpfs" ino=13732 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1668.241831][T24426] peak_usb 7-1:127.124: probe with driver peak_usb failed with error -22 [ 1668.314136][ T30] audit: type=1400 audit(2000000883.806:2250): avc: denied { getattr } for pid=5475 comm="dhcpcd" path="/run/udev/data/n151" dev="tmpfs" ino=13732 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1668.405725][ T30] audit: type=1400 audit(2000000884.016:2251): avc: denied { connect } for pid=30673 comm="syz.6.6807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1668.574225][T30732] openvswitch: netlink: IP tunnel TTL not specified. [ 1669.448339][T24426] usb 7-1: USB disconnect, device number 39 [ 1669.513671][T30746] SELinux: Context system_u:object_r:systemd_unit_file_t:s0 is not valid (left unmapped). [ 1669.545494][T30746] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=30746 comm=syz.6.6823 [ 1670.222686][T30764] xt_hashlimit: size too large, truncated to 1048576 [ 1670.746875][T12930] usb 10-1: new full-speed USB device number 21 using dummy_hcd [ 1670.840111][T30778] fuse: Unknown parameter '0x0000000000000005' [ 1670.903066][T12930] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1670.931316][T12930] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1670.968316][T12930] usb 10-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1671.023324][T12930] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1671.144260][T12930] usb 10-1: config 0 descriptor?? [ 1671.230562][T30787] siw: device registration error -23 [ 1671.244526][T30787] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1671.676287][T24426] usb 10-1: USB disconnect, device number 21 [ 1672.271952][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 1672.271969][ T30] audit: type=1400 audit(2000000888.278:2273): avc: denied { ioctl } for pid=30797 comm="syz.2.6836" path="socket:[110900]" dev="sockfs" ino=110900 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1673.053925][T25367] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1673.072853][ T30] audit: type=1400 audit(2000000889.118:2274): avc: denied { create } for pid=30806 comm="syz.9.6839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1673.083774][T30810] fuse: Unknown parameter '0x0000000000000005' [ 1673.233136][T25367] usb 7-1: Using ep0 maxpacket: 32 [ 1673.241377][T25367] usb 7-1: config 0 has no interfaces? [ 1673.254347][T25367] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 1673.272047][T25367] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1673.292655][T25367] usb 7-1: Product: syz [ 1673.298176][T25367] usb 7-1: Manufacturer: syz [ 1673.308172][T25367] usb 7-1: SerialNumber: syz [ 1673.359203][T25367] usb 7-1: config 0 descriptor?? [ 1673.429408][T30818] team0: Port device vlan2 added [ 1673.672262][T12930] usb 7-1: USB disconnect, device number 40 [ 1675.139275][T30844] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6844'. [ 1675.150304][T30842] xt_hashlimit: size too large, truncated to 1048576 [ 1675.343851][T30848] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1675.351260][T30848] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1675.854304][T30855] fuse: Unknown parameter '0x0000000000000005' [ 1677.551021][T30880] siw: device registration error -23 [ 1678.500195][T30895] fuse: Unknown parameter '0x0000000000000005' [ 1678.651847][T30897] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1679.214379][T30902] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1679.458640][T30911] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1679.473424][T30913] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6868'. [ 1680.006844][ T30] audit: type=1400 audit(2000000896.404:2275): avc: denied { read write } for pid=30921 comm="syz.0.6870" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1680.037936][ T30] audit: type=1400 audit(2000000896.425:2276): avc: denied { open } for pid=30921 comm="syz.0.6870" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1680.085709][ T30] audit: type=1400 audit(2000000896.477:2277): avc: denied { write } for pid=30921 comm="syz.0.6870" name="sg0" dev="devtmpfs" ino=785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1680.405915][T23944] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1680.556627][T30935] input: syz0 as /devices/virtual/input/input69 [ 1680.969081][T23944] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 1680.978982][T23944] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 20423, setting to 1024 [ 1681.012167][T23944] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 1681.013546][T30936] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6871'. [ 1681.077746][T23944] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1681.097479][T23944] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1681.126463][T23944] usb 1-1: Manufacturer: syz [ 1681.146032][T23944] usb 1-1: config 0 descriptor?? [ 1681.230778][T30924] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1681.261336][T30943] fuse: Unknown parameter 'fd0x0000000000000005' [ 1681.306241][T23944] igorplugusb 1-1:0.0: endpoint incorrect [ 1681.897605][ T30] audit: type=1400 audit(2000000898.378:2278): avc: denied { getopt } for pid=30947 comm="syz.9.6877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1682.323078][T23944] usb 1-1: USB disconnect, device number 84 [ 1682.849522][ T30] audit: type=1400 audit(2000000899.385:2279): avc: denied { bind } for pid=30958 comm="syz.5.6881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1682.924865][T22784] Bluetooth: hci4: command 0x0406 tx timeout [ 1682.991881][ T30] audit: type=1400 audit(2000000899.385:2280): avc: denied { name_bind } for pid=30958 comm="syz.5.6881" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1683.014351][ T30] audit: type=1400 audit(2000000899.385:2281): avc: denied { node_bind } for pid=30958 comm="syz.5.6881" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1683.140420][T23944] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1683.675076][T23944] usb 3-1: Using ep0 maxpacket: 32 [ 1683.718616][T23944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1683.802824][T23944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1683.825563][T23944] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 1683.845608][T23944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1683.866125][T23944] usb 3-1: config 0 descriptor?? [ 1683.881577][T30979] fuse: Unknown parameter 'fd0x0000000000000005' [ 1684.214742][T30985] input: syz0 as /devices/virtual/input/input70 [ 1684.647761][T23944] corsair 0003:1B1C:1B34.000F: unknown main item tag 0x0 [ 1684.661111][T23944] corsair 0003:1B1C:1B34.000F: unknown main item tag 0x0 [ 1684.676884][T23944] corsair 0003:1B1C:1B34.000F: failed to start in urb: -90 [ 1684.697033][T23944] corsair 0003:1B1C:1B34.000F: hidraw0: USB HID v0.00 Device [HID 1b1c:1b34] on usb-dummy_hcd.2-1/input0 [ 1684.805511][T23944] usb 3-1: USB disconnect, device number 35 [ 1685.243824][ T30] audit: type=1326 audit(2000000901.894:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30992 comm="syz.2.6889" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f984b59aeb9 code=0x0 [ 1685.789036][T30987] fido_id[30987]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1686.593778][T31003] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6890'. [ 1686.787746][T23944] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1686.959362][T23944] usb 7-1: Using ep0 maxpacket: 32 [ 1686.966983][T23944] usb 7-1: config 2 has an invalid interface number: 211 but max is 0 [ 1686.978168][T23944] usb 7-1: config 2 has no interface number 0 [ 1686.993184][T23944] usb 7-1: config 2 interface 211 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1687.035513][T23944] usb 7-1: New USB device found, idVendor=2040, idProduct=8268, bcdDevice=27.95 [ 1687.055689][T23944] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1687.066964][T23944] usb 7-1: Product: syz [ 1687.075485][T23944] usb 7-1: Manufacturer: syz [ 1687.117123][T23944] usb 7-1: SerialNumber: syz [ 1687.136567][T23944] em28xx 7-1:2.211: New device syz syz @ 480 Mbps (2040:8268, interface 211, class 211) [ 1687.147146][T23944] em28xx 7-1:2.211: Video interface 211 found: isoc [ 1687.979382][ T30] audit: type=1400 audit(2000000904.771:2283): avc: denied { watch } for pid=31026 comm="syz.5.6898" path="/362" dev="tmpfs" ino=1909 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1688.016147][ T30] audit: type=1400 audit(2000000904.792:2284): avc: denied { watch watch_reads } for pid=31026 comm="syz.5.6898" path="/362/file1" dev="tmpfs" ino=1914 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1688.056891][ T30] audit: type=1400 audit(2000000904.792:2285): avc: denied { watch_reads } for pid=31026 comm="syz.5.6898" path="/362" dev="tmpfs" ino=1909 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1688.246263][T23944] em28xx 7-1:2.211: unknown em28xx chip ID (0) [ 1688.333927][T23944] em28xx 7-1:2.211: reading from i2c device at 0xa0 failed (error=-5) [ 1688.368336][T23944] em28xx 7-1:2.211: board has no eeprom [ 1688.417071][T31037] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31037 comm=syz.9.6903 [ 1688.445304][T23944] em28xx 7-1:2.211: Identified as PCTV tripleStick (292e) (card=94) [ 1688.483434][T23944] em28xx 7-1:2.211: Currently, V4L2 is not supported on this model [ 1688.533498][T12930] em28xx 7-1:2.211: Binding DVB extension [ 1688.548826][T12930] em28xx 7-1:2.211: no endpoint for DVB mode and transfer type 0 [ 1688.575488][T23944] usb 7-1: USB disconnect, device number 41 [ 1688.674065][T12930] em28xx 7-1:2.211: failed to pre-allocate USB transfer buffers for DVB. [ 1688.684154][T23944] em28xx 7-1:2.211: Disconnecting em28xx [ 1688.710258][T12930] em28xx 7-1:2.211: Registering input extension [ 1689.194520][T23944] em28xx 7-1:2.211: Closing input extension [ 1689.221552][T23944] em28xx 7-1:2.211: Freeing device [ 1689.381517][T31053] program syz.9.6907 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1689.483285][T25367] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1689.664741][T25367] usb 3-1: Using ep0 maxpacket: 32 [ 1689.973835][T25367] usb 3-1: config 2 has an invalid interface number: 211 but max is 0 [ 1690.000060][T25367] usb 3-1: config 2 has no interface number 0 [ 1690.024400][T25367] usb 3-1: config 2 interface 211 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1690.073327][T25367] usb 3-1: New USB device found, idVendor=2040, idProduct=8268, bcdDevice=27.95 [ 1690.127779][T25367] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1690.156880][T25367] usb 3-1: Product: syz [ 1690.172661][T25367] usb 3-1: Manufacturer: syz [ 1690.278165][T25367] usb 3-1: SerialNumber: syz [ 1690.311875][T25367] em28xx 3-1:2.211: New device syz syz @ 480 Mbps (2040:8268, interface 211, class 211) [ 1690.903018][T25367] em28xx 3-1:2.211: Video interface 211 found: isoc [ 1691.198068][ T30] audit: type=1400 audit(2000000908.141:2286): avc: denied { bind } for pid=31067 comm="syz.0.6912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1691.278403][ T30] audit: type=1400 audit(2000000908.172:2287): avc: denied { setopt } for pid=31067 comm="syz.0.6912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1691.422467][T25367] em28xx 3-1:2.211: unknown em28xx chip ID (0) [ 1691.472474][ T30] audit: type=1400 audit(2000000908.435:2288): avc: denied { open } for pid=31077 comm="syz.9.6914" path="/dev/ttyr6" dev="devtmpfs" ino=397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1691.504358][T31078] netlink: 'syz.9.6914': attribute type 10 has an invalid length. [ 1691.512439][T31078] bridge_slave_1: left allmulticast mode [ 1691.521505][T31078] bridge_slave_1: left promiscuous mode [ 1691.528539][T25367] em28xx 3-1:2.211: reading from i2c device at 0xa0 failed (error=-5) [ 1691.529535][T31078] bridge0: port 2(bridge_slave_1) entered disabled state [ 1691.568707][T25367] em28xx 3-1:2.211: board has no eeprom [ 1691.581677][T31078] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1691.665352][T25367] em28xx 3-1:2.211: Identified as PCTV tripleStick (292e) (card=94) [ 1691.667350][ T30] audit: type=1400 audit(2000000908.645:2289): avc: denied { mount } for pid=31075 comm="syz.0.6915" name="/" dev="autofs" ino=110423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1691.711431][T25367] em28xx 3-1:2.211: Currently, V4L2 is not supported on this model [ 1691.756447][T26218] em28xx 3-1:2.211: Binding DVB extension [ 1691.776677][T25367] usb 3-1: USB disconnect, device number 36 [ 1691.785478][T26218] em28xx 3-1:2.211: no endpoint for DVB mode and transfer type 0 [ 1691.806739][T25367] em28xx 3-1:2.211: Disconnecting em28xx [ 1691.821382][T26218] em28xx 3-1:2.211: failed to pre-allocate USB transfer buffers for DVB. [ 1691.877341][T26218] em28xx 3-1:2.211: Registering input extension [ 1691.994742][ T30] audit: type=1400 audit(2000000908.981:2290): avc: denied { read } for pid=31084 comm="syz.9.6916" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1692.175549][ T30] audit: type=1400 audit(2000000908.981:2291): avc: denied { open } for pid=31084 comm="syz.9.6916" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1692.302799][ T30] audit: type=1400 audit(2000000909.033:2292): avc: denied { append } for pid=31084 comm="syz.9.6916" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1692.370125][ T30] audit: type=1400 audit(2000000909.033:2293): avc: denied { ioctl } for pid=31084 comm="syz.9.6916" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1693.169922][T25367] em28xx 3-1:2.211: Closing input extension [ 1693.229015][T25367] em28xx 3-1:2.211: Freeing device [ 1694.083272][ T30] audit: type=1400 audit(2000000911.175:2294): avc: denied { write } for pid=31096 comm="syz.6.6919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1694.363402][ T30] audit: type=1400 audit(2000000911.469:2295): avc: denied { read } for pid=31100 comm="syz.9.6920" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1696.644368][T31128] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6925'. [ 1696.793542][T31130] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31130 comm=syz.6.6925 [ 1697.541533][T31125] program syz.9.6924 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1698.029640][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1698.029658][ T30] audit: type=1400 audit(2000000915.111:2299): avc: denied { create } for pid=31136 comm="syz.5.6927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1699.553953][T31146] FAULT_INJECTION: forcing a failure. [ 1699.553953][T31146] name failslab, interval 1, probability 0, space 0, times 0 [ 1699.571224][T31146] CPU: 1 UID: 0 PID: 31146 Comm: syz.6.6930 Tainted: G L syzkaller #0 PREEMPT(full) [ 1699.571254][T31146] Tainted: [L]=SOFTLOCKUP [ 1699.571260][T31146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1699.571270][T31146] Call Trace: [ 1699.571276][T31146] [ 1699.571283][T31146] dump_stack_lvl+0x100/0x190 [ 1699.571310][T31146] should_fail_ex.cold+0x5/0xa [ 1699.571326][T31146] ? sk_filter_trim_cap+0x571/0xde0 [ 1699.571352][T31146] should_failslab+0xc2/0x120 [ 1699.571374][T31146] kmem_cache_alloc_noprof+0x83/0x780 [ 1699.571394][T31146] ? skb_clone+0x190/0x400 [ 1699.571417][T31146] ? skb_clone+0x190/0x400 [ 1699.571434][T31146] skb_clone+0x190/0x400 [ 1699.571454][T31146] netlink_deliver_tap+0xaed/0xcc0 [ 1699.571480][T31146] netlink_dump+0x8ca/0xd30 [ 1699.571502][T31146] ? __pfx_netlink_dump+0x10/0x10 [ 1699.571523][T31146] ? kasan_quarantine_put+0x104/0x240 [ 1699.571558][T31146] ? kfree_skbmem+0x19a/0x210 [ 1699.571573][T31146] ? kfree_skbmem+0x19f/0x210 [ 1699.571590][T31146] netlink_recvmsg+0x7dc/0xa90 [ 1699.571613][T31146] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1699.571647][T31146] sock_recvmsg+0x1f9/0x250 [ 1699.571664][T31146] ____sys_recvmsg+0x218/0x6b0 [ 1699.571684][T31146] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1699.571708][T31146] ? __lock_acquire+0x4a5/0x2630 [ 1699.571732][T31146] ___sys_recvmsg+0x16a/0x1a0 [ 1699.571750][T31146] ? __pfx____sys_recvmsg+0x10/0x10 [ 1699.571772][T31146] ? find_held_lock+0x2b/0x80 [ 1699.571810][T31146] __sys_recvmsg+0x16d/0x220 [ 1699.571834][T31146] ? __pfx___sys_recvmsg+0x10/0x10 [ 1699.571876][T31146] do_syscall_64+0xc9/0xf80 [ 1699.571899][T31146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1699.571917][T31146] RIP: 0033:0x7f2a79b9aeb9 [ 1699.571932][T31146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1699.571950][T31146] RSP: 002b:00007f2a7a9e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1699.571968][T31146] RAX: ffffffffffffffda RBX: 00007f2a79e15fa0 RCX: 00007f2a79b9aeb9 [ 1699.571980][T31146] RDX: 0000000000000000 RSI: 0000200000001700 RDI: 0000000000000005 [ 1699.571989][T31146] RBP: 00007f2a7a9e4090 R08: 0000000000000000 R09: 0000000000000000 [ 1699.571999][T31146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1699.572008][T31146] R13: 00007f2a79e16038 R14: 00007f2a79e15fa0 R15: 00007fff71fd5c98 [ 1699.572033][T31146] [ 1700.039626][ T30] audit: type=1400 audit(2000000917.421:2300): avc: denied { remount } for pid=31155 comm="syz.9.6934" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1700.077718][T31156] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1700.255163][T31163] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1700.263798][T31163] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1700.276726][ T30] audit: type=1400 audit(2000000917.526:2301): avc: denied { ioctl } for pid=31155 comm="syz.9.6934" path="socket:[111520]" dev="sockfs" ino=111520 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1701.568833][ T30] audit: type=1400 audit(2000000919.027:2302): avc: denied { unmount } for pid=27737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1702.313029][T31187] lo speed is unknown, defaulting to 1000 [ 1702.741849][T31205] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6948'. [ 1702.869483][ T30] audit: type=1400 audit(2000000920.381:2303): avc: denied { write } for pid=31188 comm="syz.6.6944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1703.138755][ T30] audit: type=1400 audit(2000000920.686:2304): avc: denied { write } for pid=31214 comm="syz.9.6949" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1703.301751][T25367] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 1703.469190][T25367] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1703.484899][T25367] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1703.487919][T31227] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1703.501199][T31227] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1703.510533][T25367] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1703.520462][T17263] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1703.535549][T25367] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1703.576609][T25367] usb 3-1: config 0 descriptor?? [ 1703.978819][T17263] usb 10-1: Using ep0 maxpacket: 16 [ 1704.008980][T17263] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1704.476447][T17263] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1704.487041][T17263] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1704.500506][T17263] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1704.509683][T17263] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1704.521127][T17263] usb 10-1: config 0 descriptor?? [ 1704.633163][T23944] usb 3-1: USB disconnect, device number 37 [ 1704.698776][T31241] FAULT_INJECTION: forcing a failure. [ 1704.698776][T31241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1704.714881][T31241] CPU: 1 UID: 0 PID: 31241 Comm: syz.6.6957 Tainted: G L syzkaller #0 PREEMPT(full) [ 1704.714910][T31241] Tainted: [L]=SOFTLOCKUP [ 1704.714920][T31241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1704.714931][T31241] Call Trace: [ 1704.714937][T31241] [ 1704.714945][T31241] dump_stack_lvl+0x100/0x190 [ 1704.714974][T31241] should_fail_ex.cold+0x5/0xa [ 1704.714996][T31241] _copy_from_iter+0x1f4/0x1690 [ 1704.715022][T31241] ? __alloc_skb+0x220/0x410 [ 1704.715042][T31241] ? __alloc_skb+0x35d/0x410 [ 1704.715063][T31241] ? __pfx__copy_from_iter+0x10/0x10 [ 1704.715085][T31241] ? selinux_socket_getpeersec_dgram+0x1a4/0x380 [ 1704.715115][T31241] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 1704.715164][T31241] netlink_sendmsg+0x808/0xda0 [ 1704.715192][T31241] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1704.715214][T31241] ? __might_fault+0x90/0x140 [ 1704.715240][T31241] ____sys_sendmsg+0xa54/0xc30 [ 1704.715259][T31241] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1704.715287][T31241] ___sys_sendmsg+0x190/0x1e0 [ 1704.715307][T31241] ? __pfx____sys_sendmsg+0x10/0x10 [ 1704.715342][T31241] ? find_held_lock+0x2b/0x80 [ 1704.715381][T31241] __sys_sendmsg+0x170/0x220 [ 1704.715404][T31241] ? __pfx___sys_sendmsg+0x10/0x10 [ 1704.715441][T31241] do_syscall_64+0xc9/0xf80 [ 1704.715463][T31241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1704.715481][T31241] RIP: 0033:0x7f2a79b9aeb9 [ 1704.715496][T31241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1704.715513][T31241] RSP: 002b:00007f2a7a9e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1704.715531][T31241] RAX: ffffffffffffffda RBX: 00007f2a79e15fa0 RCX: 00007f2a79b9aeb9 [ 1704.715544][T31241] RDX: 0000000004008054 RSI: 0000200000000200 RDI: 0000000000000006 [ 1704.715555][T31241] RBP: 00007f2a7a9e4090 R08: 0000000000000000 R09: 0000000000000000 [ 1704.715566][T31241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1704.715577][T31241] R13: 00007f2a79e16038 R14: 00007f2a79e15fa0 R15: 00007fff71fd5c98 [ 1704.715601][T31241] [ 1705.219403][T17263] microsoft 0003:045E:07DA.0010: nested delimiters [ 1705.231644][T17263] microsoft 0003:045E:07DA.0010: item 0 4 2 10 parsing failed [ 1705.240153][T17263] microsoft 0003:045E:07DA.0010: parse failed [ 1705.246321][T17263] microsoft 0003:045E:07DA.0010: probe with driver microsoft failed with error -22 [ 1705.362312][T31256] ipvlan0: entered promiscuous mode [ 1705.367969][T31256] ipvlan0: entered allmulticast mode [ 1705.373553][T31256] veth0_vlan: entered allmulticast mode [ 1705.423752][T31256] tipc: Started in network mode [ 1705.428705][T31256] tipc: Node identity b66de7b5e3ed, cluster identity 4711 [ 1705.436359][T31256] tipc: Enabled bearer , priority 0 [ 1705.467230][ T30] audit: type=1400 audit(2000000922.995:2305): avc: denied { mount } for pid=31248 comm="syz.6.6959" name="/" dev="rpc_pipefs" ino=112695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1706.285657][T31248] tipc: Disabling bearer [ 1707.500118][T17263] usb 10-1: USB disconnect, device number 22 [ 1707.630556][ T30] audit: type=1400 audit(2000000925.389:2306): avc: denied { write } for pid=31265 comm="syz.6.6962" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1707.815211][ T30] audit: type=1400 audit(2000000925.567:2307): avc: denied { ioctl } for pid=31267 comm="syz.9.6964" path="socket:[111805]" dev="sockfs" ino=111805 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1708.172044][ T30] audit: type=1400 audit(2000000925.567:2308): avc: denied { connect } for pid=31267 comm="syz.9.6964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1708.236982][ T30] audit: type=1400 audit(2000000925.567:2309): avc: denied { write } for pid=31267 comm="syz.9.6964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1708.317546][ T30] audit: type=1400 audit(2000000926.124:2310): avc: denied { read } for pid=31276 comm="syz.5.6965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1709.645500][T31293] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6967'. [ 1710.279201][T31295] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6968'. [ 1710.288924][T17263] usb 7-1: new full-speed USB device number 42 using dummy_hcd [ 1710.582506][T17263] usb 7-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1710.656311][T17263] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1710.774249][T17263] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1710.905291][T17263] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1710.941832][T17263] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1710.951971][T17263] usb 7-1: SerialNumber: syz [ 1711.160617][T31304] !: renamed from dummy0 (while UP) [ 1711.170036][T31304] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6971'. [ 1711.183173][T26218] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1711.244180][T17263] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 1711.256777][T17263] usb 7-1: USB disconnect, device number 42 [ 1711.336307][T26218] usb 3-1: Using ep0 maxpacket: 32 [ 1711.342770][T26218] usb 3-1: config 2 has an invalid interface number: 211 but max is 0 [ 1711.351234][T26218] usb 3-1: config 2 has no interface number 0 [ 1711.357429][T26218] usb 3-1: config 2 interface 211 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1711.370361][T26218] usb 3-1: New USB device found, idVendor=2040, idProduct=8268, bcdDevice=27.95 [ 1711.379456][T26218] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1711.387585][T26218] usb 3-1: Product: syz [ 1711.391724][T26218] usb 3-1: Manufacturer: syz [ 1711.396605][T26218] usb 3-1: SerialNumber: syz [ 1711.406196][T26218] em28xx 3-1:2.211: New device syz syz @ 480 Mbps (2040:8268, interface 211, class 211) [ 1711.416418][T26218] em28xx 3-1:2.211: Video interface 211 found: isoc [ 1711.870002][T26218] em28xx 3-1:2.211: unknown em28xx chip ID (0) [ 1711.928390][T26218] em28xx 3-1:2.211: reading from i2c device at 0xa0 failed (error=-5) [ 1711.936663][T26218] em28xx 3-1:2.211: board has no eeprom [ 1711.992963][T26218] em28xx 3-1:2.211: Identified as PCTV tripleStick (292e) (card=94) [ 1712.000958][T26218] em28xx 3-1:2.211: Currently, V4L2 is not supported on this model [ 1712.009638][T25367] em28xx 3-1:2.211: Binding DVB extension [ 1712.015928][T25367] em28xx 3-1:2.211: no endpoint for DVB mode and transfer type 0 [ 1712.025519][T25367] em28xx 3-1:2.211: failed to pre-allocate USB transfer buffers for DVB. [ 1712.026649][T26218] usb 3-1: USB disconnect, device number 38 [ 1712.041524][T25367] em28xx 3-1:2.211: Registering input extension [ 1712.049326][T26218] em28xx 3-1:2.211: Disconnecting em28xx [ 1712.055114][T26218] em28xx 3-1:2.211: Closing input extension [ 1712.068145][T26218] em28xx 3-1:2.211: Freeing device [ 1766.583954][T25045] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1766.751794][T25045] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1766.773153][T25045] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1766.795458][T25045] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1766.839271][T25045] usb 3-1: Product: syz [ 1767.001730][T25045] usb 3-1: Manufacturer: syz [ 1767.033876][T25045] usb 3-1: SerialNumber: syz [ 1767.102068][T25045] usb 3-1: config 0 descriptor?? [ 1767.319119][T31356] skbuff: bad partial csum: csum=65506/2 headroom=168 headlen=65526 [ 1767.333163][ T30] audit: type=1400 audit(2000000988.062:2311): avc: denied { ioctl } for pid=31355 comm="syz.5.6984" path="socket:[112022]" dev="sockfs" ino=112022 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1767.431703][ T30] audit: type=1400 audit(2000000988.167:2312): avc: denied { write } for pid=31359 comm="syz.6.6985" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1767.494781][T31361] FAULT_INJECTION: forcing a failure. [ 1767.494781][T31361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1767.543334][T31361] CPU: 1 UID: 0 PID: 31361 Comm: syz.6.6985 Tainted: G L syzkaller #0 PREEMPT(full) [ 1767.543365][T31361] Tainted: [L]=SOFTLOCKUP [ 1767.543371][T31361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1767.543381][T31361] Call Trace: [ 1767.543388][T31361] [ 1767.543394][T31361] dump_stack_lvl+0x100/0x190 [ 1767.543424][T31361] should_fail_ex.cold+0x5/0xa [ 1767.543442][T31361] _copy_to_user+0x32/0xd0 [ 1767.543466][T31361] simple_read_from_buffer+0xcb/0x170 [ 1767.543486][T31361] proc_fail_nth_read+0x1af/0x230 [ 1767.543508][T31361] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1767.543531][T31361] ? rw_verify_area+0xce/0x6d0 [ 1767.543547][T31361] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1767.543567][T31361] vfs_read+0x1e4/0xb30 [ 1767.543588][T31361] ? __pfx_vfs_read+0x10/0x10 [ 1767.543604][T31361] ? find_held_lock+0x2b/0x80 [ 1767.543626][T31361] ? __fget_files+0x215/0x3d0 [ 1767.543652][T31361] ? __fget_files+0x21f/0x3d0 [ 1767.543677][T31361] ksys_read+0x12a/0x250 [ 1767.543693][T31361] ? __pfx_ksys_read+0x10/0x10 [ 1767.543712][T31361] ? fput+0x79/0x100 [ 1767.543737][T31361] do_syscall_64+0xc9/0xf80 [ 1767.543758][T31361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1767.543774][T31361] RIP: 0033:0x7f2a79b5b78e [ 1767.543788][T31361] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1767.543803][T31361] RSP: 002b:00007f2a7a9e3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1767.543820][T31361] RAX: ffffffffffffffda RBX: 00007f2a7a9e46c0 RCX: 00007f2a79b5b78e [ 1767.543831][T31361] RDX: 000000000000000f RSI: 00007f2a7a9e40a0 RDI: 0000000000000004 [ 1767.543840][T31361] RBP: 00007f2a7a9e4090 R08: 0000000000000000 R09: 0000000000000000 [ 1767.543850][T31361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1767.543860][T31361] R13: 00007f2a79e16038 R14: 00007f2a79e15fa0 R15: 00007fff71fd5c98 [ 1767.543884][T31361] [ 1768.069956][T12930] usb 7-1: new full-speed USB device number 43 using dummy_hcd [ 1768.092824][T25045] usb 3-1: USB disconnect, device number 39 [ 1768.228146][T12930] usb 7-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1768.279650][T12930] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1768.296669][T12930] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1768.328927][T12930] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1768.344865][T12930] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1768.346659][T31371] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6986'. [ 1768.388012][T12930] usb 7-1: SerialNumber: syz [ 1768.603287][T25045] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1768.652478][T31375] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6987'. [ 1768.741394][T25045] usb 10-1: device descriptor read/64, error -71 [ 1768.948074][T12930] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 1768.972090][T12930] usb 7-1: USB disconnect, device number 43 [ 1768.999296][T25045] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1769.146271][T25045] usb 10-1: device descriptor read/64, error -71 [ 1769.270918][T31382] binder: 31379:31382 ioctl c0306201 0 returned -14 [ 1769.282407][T31382] binder: BINDER_SET_CONTEXT_MGR already set [ 1769.288484][T31382] binder: 31379:31382 ioctl 4018620d 200000000040 returned -16 [ 1769.300345][ T30] audit: type=1400 audit(2000000990.088:2313): avc: denied { read } for pid=31379 comm="syz.2.6989" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1769.342149][ T30] audit: type=1400 audit(2000000990.088:2314): avc: denied { open } for pid=31379 comm="syz.2.6989" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1769.423396][ T30] audit: type=1400 audit(2000000990.099:2315): avc: denied { ioctl } for pid=31379 comm="syz.2.6989" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1769.478917][ T30] audit: type=1400 audit(2000000990.099:2316): avc: denied { set_context_mgr } for pid=31379 comm="syz.2.6989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1769.490523][T25045] usb usb10-port1: attempt power cycle [ 1769.527300][ T30] audit: type=1400 audit(2000000990.109:2317): avc: denied { write } for pid=31379 comm="syz.2.6989" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1769.625381][ T30] audit: type=1326 audit(2000000990.476:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31383 comm="syz.0.6990" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f34f1f9aeb9 code=0x0 [ 1769.692769][T31393] lo speed is unknown, defaulting to 1000 [ 1769.842956][T25045] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1769.947035][T25045] usb 10-1: device descriptor read/8, error -71 [ 1770.213991][T31407] siw: device registration error -23 [ 1770.233066][T31407] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1770.313654][T31407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=31407 comm=syz.6.6996 [ 1770.583940][T31409] program syz.2.6997 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1770.594163][T25045] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1770.614254][T25045] usb 10-1: device descriptor read/8, error -71 [ 1770.730694][T31412] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1771.277808][T25045] usb usb10-port1: unable to enumerate USB device [ 1771.602312][T31420] siw: device registration error -23 [ 1771.613472][T31420] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1771.630685][T31420] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=31420 comm=syz.6.7000 [ 1772.223155][T25045] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1772.442071][T25045] usb 10-1: Using ep0 maxpacket: 32 [ 1772.472974][T25045] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1772.515194][T25045] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1772.556645][T25045] usb 10-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1772.594346][T25045] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1772.608510][T25045] usb 10-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 1772.642345][T25045] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1772.668983][T25045] usb 10-1: config 0 descriptor?? [ 1772.926325][T31426] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7002'. [ 1773.092429][T25045] corsair-psu 0003:1B1C:1C09.0011: unknown main item tag 0x7 [ 1773.147135][T25045] corsair-psu 0003:1B1C:1C09.0011: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.9-1/input0 [ 1773.220043][T31431] SELinux: failed to load policy [ 1773.236356][ T30] audit: type=1400 audit(2000000994.256:2319): avc: denied { load_policy } for pid=31429 comm="syz.0.7003" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1773.261249][T25045] corsair-psu 0003:1B1C:1C09.0011: unable to initialize device (-38) [ 1773.317768][T25045] corsair-psu 0003:1B1C:1C09.0011: probe with driver corsair-psu failed with error -38 [ 1773.344544][ T30] audit: type=1400 audit(2000000994.371:2320): avc: denied { cmd } for pid=31429 comm="syz.0.7003" path="socket:[112109]" dev="sockfs" ino=112109 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1773.345972][T25045] usb 10-1: USB disconnect, device number 27 [ 1773.452513][ T30] audit: type=1400 audit(2000000994.371:2321): avc: denied { setopt } for pid=31429 comm="syz.0.7003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1773.728846][T23944] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 1773.816607][T31443] overlayfs: failed to clone upperpath [ 1773.894310][T23944] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1774.552527][ T30] audit: type=1400 audit(2000000995.558:2322): avc: denied { bind } for pid=31446 comm="syz.9.7008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1774.590140][T31447] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1774.645925][T23944] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1774.688370][T23944] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1774.735415][T31451] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1774.736571][T23944] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1774.806073][T23944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1774.814105][T23944] usb 3-1: SerialNumber: syz [ 1774.992637][T31460] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20001 [ 1775.036085][T31437] !: renamed from dummy0 (while UP) [ 1775.082040][T31437] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7004'. [ 1775.364669][T23944] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 1775.386900][T23944] usb 3-1: USB disconnect, device number 40 [ 1775.828158][ T30] audit: type=1400 audit(2000000996.996:2323): avc: denied { bind } for pid=31476 comm="syz.0.7018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1775.879400][T31472] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7016'. [ 1776.150996][T31486] syzkaller0: entered promiscuous mode [ 1776.156657][T31486] syzkaller0: entered allmulticast mode [ 1776.506332][T31491] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20001 [ 1778.143698][T31506] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1778.614737][T31511] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1779.642569][ T30] audit: type=1400 audit(2000001000.985:2324): avc: denied { create } for pid=31513 comm="syz.0.7025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1781.456124][T31540] lo speed is unknown, defaulting to 1000 [ 1782.535758][ T7670] usb 3-1: new low-speed USB device number 41 using dummy_hcd [ 1782.688957][ T7670] usb 3-1: device descriptor read/64, error -71 [ 1783.001929][ T7670] usb 3-1: new low-speed USB device number 42 using dummy_hcd [ 1783.615873][ T7670] usb 3-1: device descriptor read/64, error -71 [ 1783.639756][ T30] audit: type=1400 audit(2000001005.195:2325): avc: denied { bind } for pid=31565 comm="syz.9.7041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1783.664123][T31575] fuse: Unknown parameter 'gro' [ 1783.731168][ T7670] usb usb3-port1: attempt power cycle [ 1783.921008][T25045] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1784.339543][ T7670] usb 3-1: new low-speed USB device number 43 using dummy_hcd [ 1784.379607][ T7670] usb 3-1: device descriptor read/8, error -71 [ 1784.501707][T25045] usb 7-1: Using ep0 maxpacket: 16 [ 1784.520951][T25045] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1784.544282][T25045] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1785.061057][T31585] lo speed is unknown, defaulting to 1000 [ 1785.120928][T25045] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1785.153088][T25045] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1785.163786][ T7670] usb 3-1: new low-speed USB device number 44 using dummy_hcd [ 1785.185807][T25045] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1785.261800][T25045] usb 7-1: config 0 descriptor?? [ 1785.282390][ T7670] usb 3-1: device descriptor read/8, error -71 [ 1785.399343][ T7670] usb usb3-port1: unable to enumerate USB device [ 1785.662389][ T30] audit: type=1400 audit(2000001007.315:2326): avc: denied { create } for pid=31600 comm="syz.2.7051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1785.718272][ T30] audit: type=1400 audit(2000001007.357:2327): avc: denied { write } for pid=31600 comm="syz.2.7051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1785.750107][T25045] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0012/input/input74 [ 1785.809496][T25045] microsoft 0003:045E:07DA.0012: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 1785.963615][T25045] usb 7-1: USB disconnect, device number 44 [ 1786.588784][T31611] fuse: Unknown parameter 'gro' [ 1786.600897][ T30] audit: type=1400 audit(2000001008.302:2328): avc: denied { append } for pid=31610 comm="syz.9.7054" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1786.602752][T31606] fido_id[31606]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1787.005409][ T30] audit: type=1400 audit(2000001008.722:2329): avc: denied { sqpoll } for pid=31616 comm="syz.0.7056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1787.118511][T31617] syzkaller1: entered promiscuous mode [ 1787.124420][T31617] syzkaller1: entered allmulticast mode [ 1787.441066][T31637] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7062'. [ 1788.039046][T31646] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1788.807425][T17263] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1788.989757][T31658] overlayfs: failed to clone upperpath [ 1789.445756][T17263] usb 3-1: Using ep0 maxpacket: 32 [ 1789.455224][T17263] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1789.479376][T17263] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1789.498570][T17263] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1789.533868][T17263] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1789.540540][T17263] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 1789.551887][T17263] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1789.561374][T17263] usb 3-1: config 0 descriptor?? [ 1790.278059][T17263] corsair-psu 0003:1B1C:1C09.0013: unknown main item tag 0x7 [ 1790.308394][T17263] corsair-psu 0003:1B1C:1C09.0013: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.2-1/input0 [ 1790.446156][T17263] corsair-psu 0003:1B1C:1C09.0013: unable to initialize device (-38) [ 1790.696914][T17263] corsair-psu 0003:1B1C:1C09.0013: probe with driver corsair-psu failed with error -38 [ 1790.755335][T31669] syzkaller1: entered promiscuous mode [ 1790.760931][T31669] syzkaller1: entered allmulticast mode [ 1790.781151][T17263] usb 3-1: USB disconnect, device number 45 [ 1790.811813][T31675] fuse: Unknown parameter 'gro' [ 1791.312699][T31691] siw: device registration error -23 [ 1791.393851][T31691] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=31691 comm=syz.9.7075 [ 1791.741128][T17263] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1792.727667][T31713] lo speed is unknown, defaulting to 1000 [ 1793.853436][T31730] fuse: Unknown parameter 'gro' [ 1794.077488][T31724] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7086'. [ 1794.465649][T25045] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1794.741961][T31750] siw: device registration error -23 [ 1794.756778][T31750] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1794.775021][T31750] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=31750 comm=syz.2.7090 [ 1795.176553][ T30] audit: type=1400 audit(2000001017.288:2330): avc: denied { execute_no_trans } for pid=31748 comm="syz.5.7091" path="/415/file0" dev="tmpfs" ino=2200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1795.211356][ T30] audit: type=1400 audit(2000001017.299:2331): avc: denied { listen } for pid=31748 comm="syz.5.7091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1795.424065][T25045] usb 1-1: Using ep0 maxpacket: 32 [ 1795.478195][T25045] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1795.504795][ T30] audit: type=1400 audit(2000001017.645:2332): avc: denied { listen } for pid=31751 comm="syz.9.7092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1795.557259][T25045] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1796.102682][T25045] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1796.117203][T25045] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1796.124119][T25045] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 1796.151462][T25045] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1796.270490][T25045] usb 1-1: config 0 descriptor?? [ 1797.448553][ T30] audit: type=1400 audit(2000001019.619:2333): avc: denied { append } for pid=31779 comm="syz.6.7098" name="sg0" dev="devtmpfs" ino=785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1797.467321][T25045] corsair-psu 0003:1B1C:1C09.0014: unknown main item tag 0x7 [ 1797.532330][T25045] corsair-psu 0003:1B1C:1C09.0014: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.0-1/input0 [ 1797.646880][T25045] corsair-psu 0003:1B1C:1C09.0014: unable to initialize device (-38) [ 1797.659382][T25045] corsair-psu 0003:1B1C:1C09.0014: probe with driver corsair-psu failed with error -38 [ 1797.680063][T25045] usb 1-1: USB disconnect, device number 85 [ 1798.605663][ T30] audit: type=1400 audit(2000001020.900:2334): avc: denied { create } for pid=31811 comm="syz.6.7109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1798.629414][ T30] audit: type=1400 audit(2000001020.900:2335): avc: denied { write } for pid=31811 comm="syz.6.7109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1798.661830][T31803] syzkaller1: entered promiscuous mode [ 1798.667465][T31803] syzkaller1: entered allmulticast mode [ 1802.547782][T31838] syzkaller1: entered promiscuous mode [ 1802.553681][T31838] syzkaller1: entered allmulticast mode [ 1802.847949][ T7670] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1803.100337][ T7670] usb 3-1: Using ep0 maxpacket: 8 [ 1803.173849][ T7670] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1803.200231][ T7670] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1803.215805][ T7670] usb 3-1: config 0 has no interface number 0 [ 1803.224341][ T7670] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1803.233782][ T7670] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1803.241985][ T7670] usb 3-1: Product: syz [ 1803.246261][ T7670] usb 3-1: Manufacturer: syz [ 1803.429656][T31865] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1803.846523][ T7670] usb 3-1: SerialNumber: syz [ 1803.872807][ T7670] usb 3-1: config 0 descriptor?? [ 1803.881493][ T7670] uvcvideo 3-1:0.31: probe with driver uvcvideo failed with error -22 [ 1804.248240][T31870] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1804.943350][ T7670] usb 3-1: USB disconnect, device number 47 [ 1805.135214][T31880] rdma_op ffff88804c8891f0 conn xmit_rdma 0000000000000000 [ 1805.144047][ T30] audit: type=1400 audit(2000001027.765:2336): avc: denied { bind } for pid=31876 comm="syz.6.7129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1805.191909][ T30] audit: type=1400 audit(2000001027.765:2337): avc: denied { write } for pid=31876 comm="syz.6.7129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1805.306687][T31884] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20001 [ 1805.568335][ T30] audit: type=1400 audit(2000001028.206:2338): avc: denied { connect } for pid=31886 comm="syz.5.7126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1805.632147][T31897] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1806.610796][T24426] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1807.058502][T24426] usb 10-1: Using ep0 maxpacket: 32 [ 1807.071829][T24426] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1807.099954][T24426] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1807.159266][T24426] usb 10-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1807.549277][ T30] audit: type=1400 audit(2000001029.896:2339): avc: denied { ioctl } for pid=31924 comm="syz.2.7145" path="socket:[114139]" dev="sockfs" ino=114139 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1807.575423][T24426] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1807.582146][T24426] usb 10-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 1807.592003][T24426] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1807.626400][T24426] usb 10-1: config 0 descriptor?? [ 1808.043609][T31934] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20001 [ 1808.063358][T31929] syzkaller1: entered promiscuous mode [ 1808.068968][T31929] syzkaller1: entered allmulticast mode [ 1809.081027][T24426] corsair-psu 0003:1B1C:1C09.0015: unknown main item tag 0x7 [ 1809.170650][T24426] corsair-psu 0003:1B1C:1C09.0015: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.9-1/input0 [ 1809.252242][T24426] corsair-psu 0003:1B1C:1C09.0015: unable to initialize device (-38) [ 1809.273125][T24426] corsair-psu 0003:1B1C:1C09.0015: probe with driver corsair-psu failed with error -38 [ 1809.292036][T31947] fuse: Unknown parameter 'gro' [ 1809.435397][T31951] netlink: 168 bytes leftover after parsing attributes in process `syz.2.7151'. [ 1809.473866][T24426] usb 10-1: USB disconnect, device number 28 [ 1810.311538][T31944] fido_id[31944]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:1B1C:1C09.0015/report_descriptor': No such file or directory [ 1810.439056][ T30] audit: type=1400 audit(2000001033.319:2340): avc: denied { read write } for pid=31959 comm="syz.9.7155" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1810.497204][ T30] audit: type=1400 audit(2000001033.350:2341): avc: denied { open } for pid=31959 comm="syz.9.7155" path="/224/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1810.863114][T31984] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 1810.871829][T31984] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 1810.883837][T31984] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1810.916059][ T30] audit: type=1400 audit(2000001033.791:2342): avc: denied { firmware_load } for pid=31979 comm="syz.2.7161" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1812.265830][T31994] lo speed is unknown, defaulting to 1000 [ 1812.795468][ T30] audit: type=1400 audit(2000001035.807:2343): avc: denied { name_bind } for pid=32003 comm="syz.0.7166" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1812.871919][T32009] siw: device registration error -23 [ 1812.891718][T32009] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1812.916645][T32009] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=32009 comm=syz.2.7165 [ 1814.591958][T32037] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7178'. [ 1814.672173][T32038] fuse: Bad value for 'fd' [ 1814.927409][T32040] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1815.740791][T32044] fuse: Unknown parameter 'gro' [ 1815.924191][ T30] audit: type=1400 audit(2000001039.082:2344): avc: denied { create } for pid=32051 comm="syz.6.7182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1815.947879][ T30] audit: type=1400 audit(2000001039.114:2345): avc: denied { write } for pid=32051 comm="syz.6.7182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1815.997608][ T30] audit: type=1400 audit(2000001039.166:2346): avc: denied { mounton } for pid=32051 comm="syz.6.7182" path="/365/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 1817.462214][T32064] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1817.752238][T32072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7190'. [ 1817.884414][T32075] lo speed is unknown, defaulting to 1000 [ 1819.092900][T32083] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1821.352942][T32111] bridge0: port 1(bridge_slave_0) entered disabled state [ 1821.737934][ T30] audit: type=1400 audit(2000001045.140:2347): avc: denied { name_connect } for pid=32110 comm="syz.2.7198" dest=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1822.047211][ T30] audit: type=1400 audit(2000001045.234:2348): avc: denied { listen } for pid=32110 comm="syz.2.7198" lport=56936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1822.071110][ T30] audit: type=1400 audit(2000001045.245:2349): avc: denied { accept } for pid=32110 comm="syz.2.7198" lport=56936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1822.189280][T32111] bridge_slave_0 (unregistering): left allmulticast mode [ 1822.196884][T32111] bridge_slave_0 (unregistering): left promiscuous mode [ 1822.205358][T32111] bridge0: port 1(bridge_slave_0) entered disabled state [ 1822.588251][T32122] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1825.074483][T32137] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1827.033780][T32144] vivid-000: kernel_thread() failed [ 1828.419843][T32160] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7209'. [ 1829.091053][T32185] lo speed is unknown, defaulting to 1000 [ 1829.965237][T32197] syzkaller1: entered promiscuous mode [ 1829.970855][T32197] syzkaller1: entered allmulticast mode [ 1832.724959][T32219] serio: Serial port ttyS3 [ 1833.714051][T32223] syzkaller1: entered promiscuous mode [ 1833.719527][T32223] syzkaller1: entered allmulticast mode [ 1833.822966][ T30] audit: type=1400 audit(2000001057.874:2350): avc: denied { write } for pid=32229 comm="syz.9.7224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1835.569116][T32244] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1835.783599][T32242] lo speed is unknown, defaulting to 1000 [ 1837.631061][T32249] syzkaller0: entered promiscuous mode [ 1837.636816][T32249] syzkaller0: entered allmulticast mode [ 1837.675518][T32256] syzkaller1: entered promiscuous mode [ 1837.681004][T32256] syzkaller1: entered allmulticast mode [ 1838.035954][T32271] syzkaller0: entered promiscuous mode [ 1838.041463][T32271] syzkaller0: entered allmulticast mode [ 1839.607404][T25045] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1840.112664][T32284] siw: device registration error -23 [ 1840.133325][T32284] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=32284 comm=syz.9.7235 [ 1840.903578][T32287] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1841.237720][ T30] audit: type=1400 audit(2000001065.653:2351): avc: denied { read } for pid=32288 comm="syz.2.7236" path="socket:[115701]" dev="sockfs" ino=115701 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1841.245637][T25045] usb 7-1: Using ep0 maxpacket: 32 [ 1841.282577][T25045] usb 7-1: device descriptor read/all, error -71 [ 1841.589946][T32296] lo speed is unknown, defaulting to 1000 [ 1842.041247][ T30] audit: type=1400 audit(2000001066.503:2352): avc: denied { setopt } for pid=32288 comm="syz.2.7236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1842.116087][T12930] delete_channel: no stack [ 1842.454352][T32305] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1842.462702][T32305] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1842.553234][T32308] FAULT_INJECTION: forcing a failure. [ 1842.553234][T32308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1842.566423][T32308] CPU: 0 UID: 0 PID: 32308 Comm: syz.0.7240 Tainted: G L syzkaller #0 PREEMPT(full) [ 1842.566451][T32308] Tainted: [L]=SOFTLOCKUP [ 1842.566458][T32308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1842.566468][T32308] Call Trace: [ 1842.566475][T32308] [ 1842.566483][T32308] dump_stack_lvl+0x100/0x190 [ 1842.566511][T32308] should_fail_ex.cold+0x5/0xa [ 1842.566532][T32308] _copy_from_iter+0x1f4/0x1690 [ 1842.566559][T32308] ? __alloc_skb+0x220/0x410 [ 1842.566581][T32308] ? __alloc_skb+0x35d/0x410 [ 1842.566602][T32308] ? __pfx__copy_from_iter+0x10/0x10 [ 1842.566638][T32308] netlink_sendmsg+0x808/0xda0 [ 1842.566669][T32308] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1842.566704][T32308] ____sys_sendmsg+0xa54/0xc30 [ 1842.566723][T32308] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1842.566748][T32308] ? __lock_acquire+0x4a5/0x2630 [ 1842.566768][T32308] ___sys_sendmsg+0x190/0x1e0 [ 1842.566788][T32308] ? __pfx____sys_sendmsg+0x10/0x10 [ 1842.566818][T32308] ? find_held_lock+0x2b/0x80 [ 1842.566857][T32308] __sys_sendmsg+0x170/0x220 [ 1842.566885][T32308] ? __pfx___sys_sendmsg+0x10/0x10 [ 1842.566918][T32308] ? rcu_is_watching+0x12/0xc0 [ 1842.566947][T32308] do_syscall_64+0xc9/0xf80 [ 1842.566970][T32308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1842.566987][T32308] RIP: 0033:0x7f34f1f9aeb9 [ 1842.567002][T32308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1842.567019][T32308] RSP: 002b:00007f34f2e66028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1842.567036][T32308] RAX: ffffffffffffffda RBX: 00007f34f2216180 RCX: 00007f34f1f9aeb9 [ 1842.567049][T32308] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000007 [ 1842.567059][T32308] RBP: 00007f34f2e66090 R08: 0000000000000000 R09: 0000000000000000 [ 1842.567070][T32308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1842.567080][T32308] R13: 00007f34f2216218 R14: 00007f34f2216180 R15: 00007ffd11b27fb8 [ 1842.567105][T32308] [ 1843.221235][ T30] audit: type=1400 audit(2000001067.731:2353): avc: denied { bind } for pid=32319 comm="syz.0.7246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1844.116401][ T30] audit: type=1400 audit(2000001068.676:2354): avc: denied { ioctl } for pid=32326 comm="syz.6.7247" path="socket:[116828]" dev="sockfs" ino=116828 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1844.206973][T32340] netlink: 'syz.6.7247': attribute type 13 has an invalid length. [ 1844.833916][ T30] audit: type=1400 audit(2000001069.421:2355): avc: denied { bind } for pid=32319 comm="syz.0.7246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1844.906961][ T30] audit: type=1400 audit(2000001069.421:2356): avc: denied { node_bind } for pid=32319 comm="syz.0.7246" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1845.856844][ T7670] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1845.890628][T32365] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1845.898185][T32365] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1846.018457][ T7670] usb 10-1: Using ep0 maxpacket: 32 [ 1846.056309][ T7670] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1846.092057][ T7670] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1846.122904][ T7670] usb 10-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1846.163570][ T7670] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1846.180382][ T7670] usb 10-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 1846.193008][ T7670] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1846.241714][ T7670] usb 10-1: config 0 descriptor?? [ 1846.481906][T32355] lo speed is unknown, defaulting to 1000 [ 1847.012813][ T7670] corsair-psu 0003:1B1C:1C09.0016: unknown main item tag 0x7 [ 1847.050339][ T50] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1847.059969][T32373] vivid-000: kernel_thread() failed [ 1847.068578][T17264] kworker/1:9 (17264) used greatest stack depth: 18040 bytes left [ 1847.085851][ T50] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1847.095426][ T50] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1847.146908][ T7670] corsair-psu 0003:1B1C:1C09.0016: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.9-1/input0 [ 1847.248128][ T7670] corsair-psu 0003:1B1C:1C09.0016: unable to initialize device (-38) [ 1847.263860][ T50] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1847.310129][ T7670] corsair-psu 0003:1B1C:1C09.0016: probe with driver corsair-psu failed with error -38 [ 1847.356566][ T7670] usb 10-1: USB disconnect, device number 29 [ 1847.474805][T32382] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20001 [ 1847.701046][T32386] netlink: 'syz.2.7259': attribute type 13 has an invalid length. [ 1848.273213][T32394] fuse: Bad value for 'fd' [ 1848.561748][T32399] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1849.070833][T32386] bridge0: port 2(bridge_slave_1) entered disabled state [ 1849.892106][T32386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1849.963021][T32386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1850.438821][T32428] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7266'. [ 1850.480034][T32428] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7266'. [ 1850.968552][T32441] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20001 [ 1851.235172][T32415] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1851.247975][T24426] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 1851.261947][T32415] syzkaller0: entered promiscuous mode [ 1851.267856][T32415] syzkaller0: entered allmulticast mode [ 1851.274311][T15822] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1851.295452][T15822] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1851.476669][T24426] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1851.503687][T24426] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1852.038668][T24426] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1852.065980][T24426] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1852.080758][T24426] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1852.091190][T24426] usb 3-1: SerialNumber: syz [ 1852.252366][ T30] audit: type=1400 audit(2000001077.221:2357): avc: denied { write } for pid=32456 comm="syz.5.7277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1852.284834][ T30] audit: type=1400 audit(2000001077.253:2358): avc: denied { read } for pid=32456 comm="syz.5.7277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1854.220517][T32483] siw: device registration error -23 [ 1856.598818][T15822] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1856.607963][T15822] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1856.627319][T32485] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=32485 comm=syz.9.7280 [ 1856.750920][T24426] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 1857.031223][T32489] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1857.384846][T24426] usb 3-1: USB disconnect, device number 48 [ 1857.859374][T32493] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1858.260723][T12930] IPVS: starting estimator thread 0... [ 1858.352104][T32505] FAULT_INJECTION: forcing a failure. [ 1858.352104][T32505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1858.383598][T32501] IPVS: using max 43 ests per chain, 103200 per kthread [ 1858.444764][T32505] CPU: 0 UID: 0 PID: 32505 Comm: syz.0.7288 Tainted: G L syzkaller #0 PREEMPT(full) [ 1858.444796][T32505] Tainted: [L]=SOFTLOCKUP [ 1858.444802][T32505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1858.444814][T32505] Call Trace: [ 1858.444821][T32505] [ 1858.444829][T32505] dump_stack_lvl+0x100/0x190 [ 1858.444858][T32505] should_fail_ex.cold+0x5/0xa [ 1858.444879][T32505] _copy_from_user+0x2e/0xd0 [ 1858.444905][T32505] kstrtouint_from_user+0xd6/0x1d0 [ 1858.444924][T32505] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1858.444941][T32505] ? __lock_acquire+0x4a5/0x2630 [ 1858.444965][T32505] ? lock_acquire+0x17c/0x330 [ 1858.444989][T32505] proc_fail_nth_write+0x83/0x220 [ 1858.445016][T32505] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1858.445048][T32505] vfs_write+0x2aa/0x1070 [ 1858.445070][T32505] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1858.445097][T32505] ? __pfx_vfs_write+0x10/0x10 [ 1858.445114][T32505] ? find_held_lock+0x2b/0x80 [ 1858.445138][T32505] ? __fget_files+0x215/0x3d0 [ 1858.445164][T32505] ? __fget_files+0x21f/0x3d0 [ 1858.445192][T32505] ksys_write+0x12a/0x250 [ 1858.445212][T32505] ? __pfx_ksys_write+0x10/0x10 [ 1858.445239][T32505] do_syscall_64+0xc9/0xf80 [ 1858.445262][T32505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1858.445280][T32505] RIP: 0033:0x7f34f1f5b78e [ 1858.445296][T32505] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1858.445313][T32505] RSP: 002b:00007f34f2ea7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1858.445331][T32505] RAX: ffffffffffffffda RBX: 00007f34f2ea86c0 RCX: 00007f34f1f5b78e [ 1858.445343][T32505] RDX: 0000000000000001 RSI: 00007f34f2ea80a0 RDI: 0000000000000006 [ 1858.445354][T32505] RBP: 00007f34f2ea8090 R08: 0000000000000000 R09: 0000000000000000 [ 1858.445365][T32505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1858.445376][T32505] R13: 00007f34f2216038 R14: 00007f34f2215fa0 R15: 00007ffd11b27fb8 [ 1858.445402][T32505] [ 1858.919539][ T30] audit: type=1400 audit(2000001084.224:2359): avc: denied { wake_alarm } for pid=32499 comm="syz.9.7287" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1859.632689][T32519] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1861.029760][T32522] syzkaller1: entered promiscuous mode [ 1861.043655][T32522] syzkaller1: entered allmulticast mode [ 1861.332844][T32543] FAULT_INJECTION: forcing a failure. [ 1861.332844][T32543] name failslab, interval 1, probability 0, space 0, times 0 [ 1861.400042][T32547] siw: device registration error -23 [ 1861.417597][T32547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=32547 comm=syz.2.7292 [ 1861.725659][T32543] CPU: 0 UID: 0 PID: 32543 Comm: syz.9.7298 Tainted: G L syzkaller #0 PREEMPT(full) [ 1861.725688][T32543] Tainted: [L]=SOFTLOCKUP [ 1861.725694][T32543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1861.725703][T32543] Call Trace: [ 1861.725709][T32543] [ 1861.725717][T32543] dump_stack_lvl+0x100/0x190 [ 1861.725745][T32543] should_fail_ex.cold+0x5/0xa [ 1861.725763][T32543] should_failslab+0xc2/0x120 [ 1861.725785][T32543] ? tomoyo_encode2+0xfb/0x3c0 [ 1861.725802][T32543] __kmalloc_noprof+0xf6/0x9c0 [ 1861.725823][T32543] ? tomoyo_encode2+0xfb/0x3c0 [ 1861.725838][T32543] tomoyo_encode2+0xfb/0x3c0 [ 1861.725860][T32543] tomoyo_encode+0x29/0x50 [ 1861.725878][T32543] tomoyo_realpath_from_path+0x18c/0x690 [ 1861.725902][T32543] tomoyo_path_number_perm+0x23c/0x580 [ 1861.725927][T32543] ? tomoyo_path_number_perm+0x22e/0x580 [ 1861.725955][T32543] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1861.726005][T32543] ? find_held_lock+0x2b/0x80 [ 1861.726026][T32543] ? hook_file_ioctl_common+0x146/0x410 [ 1861.726047][T32543] ? __fget_files+0x215/0x3d0 [ 1861.726071][T32543] ? __fget_files+0x21f/0x3d0 [ 1861.726099][T32543] security_file_ioctl+0xd3/0x230 [ 1861.726118][T32543] __x64_sys_ioctl+0xb7/0x210 [ 1861.726136][T32543] do_syscall_64+0xc9/0xf80 [ 1861.726157][T32543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1861.726175][T32543] RIP: 0033:0x7f709c39aeb9 [ 1861.726188][T32543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1861.726204][T32543] RSP: 002b:00007f709d2d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1861.726221][T32543] RAX: ffffffffffffffda RBX: 00007f709c615fa0 RCX: 00007f709c39aeb9 [ 1861.726232][T32543] RDX: 0000000000000000 RSI: 0000000000005425 RDI: 0000000000000003 [ 1861.726241][T32543] RBP: 00007f709d2d9090 R08: 0000000000000000 R09: 0000000000000000 [ 1861.726251][T32543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1861.726260][T32543] R13: 00007f709c616038 R14: 00007f709c615fa0 R15: 00007fff8dd000b8 [ 1861.726282][T32543] [ 1861.938810][T32543] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1862.530026][T32553] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7300'. [ 1862.802453][T32561] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1863.326367][T12930] usb 10-1: new full-speed USB device number 30 using dummy_hcd [ 1863.499647][T32566] netlink: 'syz.6.7305': attribute type 4 has an invalid length. [ 1863.518297][T32566] netlink: 'syz.6.7305': attribute type 8 has an invalid length. [ 1863.555236][T32566] netlink: 212 bytes leftover after parsing attributes in process `syz.6.7305'. [ 1863.582351][T12930] usb 10-1: config 0 has an invalid interface number: 251 but max is 0 [ 1863.595307][T12930] usb 10-1: config 0 has no interface number 0 [ 1863.628880][T12930] usb 10-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1863.658083][T12930] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1863.697941][T12930] usb 10-1: Product: syz [ 1863.714278][T12930] usb 10-1: Manufacturer: syz [ 1863.731400][T12930] usb 10-1: SerialNumber: syz [ 1863.771478][T12930] usb 10-1: config 0 descriptor?? [ 1864.011146][T32567] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7301'. [ 1864.212186][T24426] libceph: connect (1)[c::]:6789 error -13 [ 1864.235638][T24426] libceph: mon0 (1)[c::]:6789 connect error [ 1864.285818][ T30] audit: type=1400 audit(2000001089.851:2360): avc: denied { mount } for pid=32579 comm="syz.5.7307" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1864.286102][T25367] lo speed is unknown, defaulting to 1000 [ 1864.407042][T12930] asix 10-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1864.421677][T12930] asix 10-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 1864.466170][T12930] asix 10-1:0.251: probe with driver asix failed with error -71 [ 1864.500293][T12930] usb 10-1: USB disconnect, device number 30 [ 1864.574113][T26218] libceph: connect (1)[c::]:6789 error -13 [ 1864.583101][T26218] libceph: mon0 (1)[c::]:6789 connect error [ 1864.823069][ T30] audit: type=1326 audit(2000001090.417:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32590 comm="syz.2.7311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984b59aeb9 code=0x7ffc0000 [ 1864.860063][ T30] audit: type=1326 audit(2000001090.417:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32590 comm="syz.2.7311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984b59aeb9 code=0x7ffc0000 [ 1864.883916][ T30] audit: type=1326 audit(2000001090.438:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32590 comm="syz.2.7311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f984b59aeb9 code=0x7ffc0000 [ 1864.916690][ T30] audit: type=1326 audit(2000001090.438:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32590 comm="syz.2.7311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984b59aeb9 code=0x7ffc0000 [ 1864.940975][ T30] audit: type=1326 audit(2000001090.438:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32590 comm="syz.2.7311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984b59aeb9 code=0x7ffc0000 [ 1864.966006][ T30] audit: type=1326 audit(2000001090.438:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32590 comm="syz.2.7311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f984b59aeb9 code=0x7ffc0000 [ 1864.991088][ T30] audit: type=1326 audit(2000001090.438:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32590 comm="syz.2.7311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984b59aeb9 code=0x7ffc0000 [ 1865.018295][T32580] ceph: No mds server is up or the cluster is laggy [ 1865.484306][T25367] libceph: connect (1)[c::]:6789 error -13 [ 1865.490417][T25367] libceph: mon0 (1)[c::]:6789 connect error [ 1865.559779][ T30] audit: type=1326 audit(2000001090.438:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32590 comm="syz.2.7311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984b59aeb9 code=0x7ffc0000 [ 1865.597619][ T30] audit: type=1326 audit(2000001090.449:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32590 comm="syz.2.7311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f984b59aeb9 code=0x7ffc0000 [ 1866.042960][T32611] overlayfs: missing 'lowerdir' [ 1866.508684][T25367] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1866.662145][T25367] usb 1-1: Using ep0 maxpacket: 8 [ 1866.682933][T25367] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1866.694212][T25367] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1866.707652][T25367] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1866.720581][T25367] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1866.739792][T25367] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1866.740177][T32638] : renamed from bond_slave_0 [ 1866.750544][T25367] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1866.767597][T25367] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1866.908163][T32641] nvme_fabrics: unknown parameter or missing value 'çd©ƒá:' in ctrl creation request [ 1866.931797][T25367] usb 1-1: config 0 descriptor?? [ 1866.940869][T32623] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1868.763182][T32623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1868.858974][T32623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1869.123171][T32646] Bluetooth: hci6: unexpected event 0x04 length: 3 < 10 [ 1869.134879][T32646] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 1869.142736][T32646] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 1869.149882][T32646] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 1869.158829][T32646] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 1869.165880][T32646] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 1869.172930][T32646] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 1869.187457][T32657] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=32657 comm=syz.9.7327 [ 1869.208458][T32646] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 1869.215892][T32646] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 1869.223243][T32646] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 1869.232582][T32646] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 1869.240364][T32646] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 1869.248150][T32646] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 1869.255328][T32646] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 1869.262410][T32646] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 1869.269562][T32646] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 1869.277021][T32646] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 1869.284144][T32646] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 1869.294132][T32646] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 1869.301702][T32646] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 1869.311152][T32646] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 1869.318818][T32646] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 1869.326884][T32646] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 1869.335339][T32646] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 1869.343818][T32646] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 1869.351119][T32646] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 1869.359740][T32646] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 1869.367127][T32646] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 1869.403552][T17800] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1869.513598][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 1869.513686][ T30] audit: type=1400 audit(2000001095.341:2414): avc: denied { mounton } for pid=32622 comm="syz.0.7319" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1869.580741][ T7670] usb 1-1: USB disconnect, device number 86 [ 1869.588168][T32660] netlink: 'syz.5.7330': attribute type 2 has an invalid length. [ 1869.598831][T32660] netlink: 'syz.5.7330': attribute type 2 has an invalid length. [ 1869.608626][T32660] netlink: 'syz.5.7330': attribute type 2 has an invalid length. [ 1869.616655][T32660] netlink: 'syz.5.7330': attribute type 2 has an invalid length. [ 1869.625108][T32660] netlink: 'syz.5.7330': attribute type 2 has an invalid length. [ 1870.332849][ T30] audit: type=1400 audit(2000001096.202:2415): avc: denied { connect } for pid=32675 comm="syz.5.7336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1870.490727][ T30] audit: type=1400 audit(2000001096.370:2416): avc: denied { append } for pid=32679 comm="syz.0.7337" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1870.563511][ T30] audit: type=1400 audit(2000001096.412:2417): avc: denied { create } for pid=32681 comm="syz.5.7338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1870.634259][ T30] audit: type=1400 audit(2000001096.412:2418): avc: denied { ioctl } for pid=32681 comm="syz.5.7338" path="socket:[117596]" dev="sockfs" ino=117596 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1871.043717][T32699] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7343'. [ 1871.422104][T32712] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7345'. [ 1871.450755][ T30] audit: type=1400 audit(2000001097.336:2419): avc: denied { execute } for pid=32708 comm="syz.5.7347" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=116437 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1871.743150][ T30] audit: type=1400 audit(2000001097.619:2420): avc: denied { getopt } for pid=32693 comm="syz.0.7343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1871.811900][T32706] IPVS: length: 149 != 8 [ 1871.997362][T32718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7348'. [ 1872.043607][T32718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7348'. [ 1872.055873][T32718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7348'. [ 1872.220198][ T30] audit: type=1400 audit(2000001098.186:2421): avc: denied { mount } for pid=32721 comm="syz.2.7349" name="/" dev="ramfs" ino=117687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1874.804533][ T30] audit: type=1400 audit(2000001100.894:2422): avc: denied { create } for pid=307 comm="syz.0.7367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1874.804951][T25045] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1875.023898][T25045] usb 3-1: Using ep0 maxpacket: 32 [ 1875.098545][T25045] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1875.110338][T25045] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1875.122940][T25045] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1875.141916][T25045] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1875.164505][T25045] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1875.192309][T25045] usb 3-1: Product: syz [ 1875.208119][T25045] usb 3-1: Manufacturer: syz [ 1875.225422][T25045] usb 3-1: SerialNumber: syz [ 1875.267662][T25045] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input75 [ 1875.518513][T25367] usb 3-1: USB disconnect, device number 49 [ 1875.548604][T25367] appletouch 3-1:1.0: input: appletouch disconnected [ 1875.765932][ T328] netlink: 388 bytes leftover after parsing attributes in process `syz.6.7371'. [ 1876.325081][ T341] syzkaller1: entered promiscuous mode [ 1876.345476][ T341] syzkaller1: entered allmulticast mode [ 1876.362767][ T341] PKCS7: Unknown OID: [5] (bad) [ 1876.368182][ T30] audit: type=1400 audit(2000001102.532:2423): avc: denied { write } for pid=340 comm="syz.6.7377" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1876.387315][ T341] PKCS7: Only support pkcs7_signedData type [ 1876.643373][T26218] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1876.692499][ T349] IPVS: length: 149 != 17667290688 [ 1876.837262][T26218] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1876.958307][T26218] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1876.978649][T26218] usb 7-1: Product: syz [ 1876.983074][T26218] usb 7-1: Manufacturer: syz [ 1876.987861][T26218] usb 7-1: SerialNumber: syz [ 1877.048906][T26218] usb 7-1: config 0 descriptor?? [ 1877.093525][T26218] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1877.127619][ T30] audit: type=1400 audit(2000001103.330:2424): avc: denied { ioctl } for pid=357 comm="syz.2.7383" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=116708 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1878.288493][ T30] audit: type=1400 audit(2000001104.548:2425): avc: denied { mount } for pid=340 comm="syz.6.7377" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1878.326688][T26218] usb 7-1: USB disconnect, device number 47 [ 1879.231245][ T416] random: crng reseeded on system resumption [ 1879.241020][ T30] audit: type=1400 audit(2000001105.535:2426): avc: denied { read write } for pid=397 comm="syz.2.7395" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1879.281745][ T30] audit: type=1400 audit(2000001105.545:2427): avc: denied { ioctl open } for pid=397 comm="syz.2.7395" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1879.654179][ T426] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1879.872519][T25045] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1879.923051][ T433] netlink: 'syz.5.7404': attribute type 13 has an invalid length. [ 1879.968430][ T433] netlink: 52 bytes leftover after parsing attributes in process `syz.5.7404'. [ 1880.119836][T25045] usb 3-1: Using ep0 maxpacket: 8 [ 1880.222841][T25045] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1880.264966][T25045] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1880.288917][T25045] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1880.338478][T25045] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1880.451309][T25045] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1880.528496][T25045] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1880.565768][T25045] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1880.814777][T25045] usb 3-1: GET_CAPABILITIES returned 0 [ 1880.832031][T25045] usbtmc 3-1:16.0: can't read capabilities [ 1881.118658][ T416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1881.206069][ T416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1881.224881][ T416] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.7395'. [ 1881.262809][ T30] audit: type=1400 audit(2000001107.676:2428): avc: denied { setopt } for pid=458 comm="syz.9.7411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1882.727078][T25045] usb 3-1: USB disconnect, device number 50 [ 1882.986723][ T30] audit: type=1400 audit(2000001109.482:2429): avc: denied { mount } for pid=484 comm="syz.5.7420" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1883.682645][ T30] audit: type=1400 audit(2000001110.217:2430): avc: denied { block_suspend } for pid=492 comm="syz.9.7422" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1883.874106][ T7670] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1884.046318][ T7670] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1884.071225][ T7670] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1884.081268][ T7670] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1884.092618][ T7670] usb 7-1: Product: syz [ 1884.100250][ T7670] usb 7-1: Manufacturer: syz [ 1884.112736][ T7670] usb 7-1: SerialNumber: syz [ 1884.175881][ T503] netlink: 'syz.0.7425': attribute type 15 has an invalid length. [ 1884.232654][ T503] netlink: 16174 bytes leftover after parsing attributes in process `syz.0.7425'. [ 1884.350035][ T7670] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 48 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1884.701933][ T30] audit: type=1400 audit(2000001111.277:2431): avc: denied { read write } for pid=496 comm="syz.6.7423" name="lp0" dev="devtmpfs" ino=4166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1884.764850][ T30] audit: type=1400 audit(2000001111.277:2432): avc: denied { open } for pid=496 comm="syz.6.7423" path="/dev/usb/lp0" dev="devtmpfs" ino=4166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1884.954768][ C0] usblp0: nonzero write bulk status received: -71 [ 1884.955031][T17263] usb 7-1: USB disconnect, device number 48 [ 1885.097818][ T510] usblp0: removed [ 1885.597295][ T30] audit: type=1400 audit(2000001112.232:2433): avc: denied { getopt } for pid=526 comm="syz.9.7432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1885.681711][ T530] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7433'. [ 1886.464981][ T543] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1887.163550][ T578] lo speed is unknown, defaulting to 1000 [ 1887.635479][T25045] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1887.799099][T25045] usb 1-1: Using ep0 maxpacket: 8 [ 1887.830674][T25045] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1887.866831][T25045] usb 1-1: config 179 has no interface number 0 [ 1887.879377][T25045] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1887.964637][T25045] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1888.047474][T25045] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1888.077390][T25045] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1888.157882][T25045] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1888.238734][T25045] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1888.277342][T25045] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1888.334014][ T586] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1888.757626][T25045] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input76 [ 1888.877318][ T30] audit: type=1400 audit(2000001115.676:2434): avc: denied { bind } for pid=600 comm="syz.2.7459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1889.436071][T25045] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1889.628105][T25045] usb 10-1: Using ep0 maxpacket: 8 [ 1889.644983][T25045] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1889.668467][T25045] usb 10-1: config 0 has an invalid interface number: 237 but max is 1 [ 1889.677042][T25045] usb 10-1: config 0 has an invalid interface number: 146 but max is 1 [ 1889.690102][T25045] usb 10-1: config 0 has no interface number 0 [ 1889.705683][T25045] usb 10-1: config 0 has no interface number 1 [ 1889.721740][T25045] usb 10-1: config 0 interface 237 has no altsetting 0 [ 1889.729019][T25045] usb 10-1: config 0 interface 146 has no altsetting 0 [ 1889.772408][T25045] usb 10-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=eb.3f [ 1889.786971][T25045] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1889.812504][T25045] usb 10-1: Product: syz [ 1889.821682][T25045] usb 10-1: Manufacturer: syz [ 1889.838129][T25045] usb 10-1: SerialNumber: syz [ 1889.895586][T25045] usb 10-1: config 0 descriptor?? [ 1890.222565][ T30] audit: type=1400 audit(2000001117.082:2435): avc: denied { map } for pid=621 comm="syz.5.7466" path="socket:[119239]" dev="sockfs" ino=119239 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1890.268562][ T622] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7466'. [ 1890.285565][ T622] netlink: 'syz.5.7466': attribute type 1 has an invalid length. [ 1890.309002][ T30] audit: type=1400 audit(2000001117.082:2436): avc: denied { read } for pid=621 comm="syz.5.7466" path="socket:[119239]" dev="sockfs" ino=119239 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1890.338358][ T622] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7466'. [ 1890.420359][ T30] audit: type=1326 audit(2000001117.135:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=610 comm="syz.9.7463" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f709c39aeb9 code=0x0 [ 1890.474021][ T630] ptrace attach of "./syz-executor exec"[24270] was attempted by ""[630] [ 1890.529863][ T631] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.7468'. [ 1891.322164][ T638] geneve2: entered promiscuous mode [ 1891.347962][ T50] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1891.384960][ T50] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1891.397322][ T50] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1891.416306][ T50] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1891.506495][T17263] usb 1-1: USB disconnect, device number 87 [ 1891.506499][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1891.927274][ T30] audit: type=1400 audit(2000001118.867:2438): avc: denied { shutdown } for pid=648 comm="syz.5.7476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1892.132542][T25045] usb 10-1: USB disconnect, device number 31 [ 1892.239191][ T668] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7478'. [ 1892.916455][ T30] audit: type=1400 audit(2000001119.917:2439): avc: denied { read write } for pid=676 comm="syz.2.7482" name="video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:systemd_unit_file_t:s0" [ 1892.991196][ T30] audit: type=1400 audit(2000001119.917:2440): avc: denied { open } for pid=676 comm="syz.2.7482" path="/dev/video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:systemd_unit_file_t:s0" [ 1893.122550][ T30] audit: type=1400 audit(2000001120.106:2441): avc: denied { map } for pid=685 comm="syz.9.7485" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1893.203292][ T30] audit: type=1400 audit(2000001120.106:2442): avc: denied { execute } for pid=685 comm="syz.9.7485" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1893.313632][ T30] audit: type=1400 audit(2000001120.305:2443): avc: denied { setopt } for pid=688 comm="syz.5.7486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1893.448661][ T699] tipc: Enabled bearer , priority 15 [ 1893.604444][ T706] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7492'. [ 1893.633350][ T706] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7492'. [ 1893.916274][ T30] audit: type=1400 audit(2000001120.967:2444): avc: denied { read write } for pid=716 comm="syz.9.7496" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1894.030837][ T30] audit: type=1400 audit(2000001120.967:2445): avc: denied { open } for pid=716 comm="syz.9.7496" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1894.211033][ T30] audit: type=1400 audit(2000001120.998:2446): avc: denied { ioctl } for pid=716 comm="syz.9.7496" path="/dev/ptyr6" dev="devtmpfs" ino=141 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1895.425153][ T30] audit: type=1326 audit(2000001122.541:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=740 comm="syz.6.7503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a79b9aeb9 code=0x7ffc0000 [ 1895.465492][T26218] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1895.540901][ T30] audit: type=1326 audit(2000001122.541:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=740 comm="syz.6.7503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a79b9aeb9 code=0x7ffc0000 [ 1895.589974][ T30] audit: type=1326 audit(2000001122.541:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=740 comm="syz.6.7503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2a79b9aeb9 code=0x7ffc0000 [ 1895.626596][ T30] audit: type=1326 audit(2000001122.541:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=740 comm="syz.6.7503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a79b9aeb9 code=0x7ffc0000 [ 1895.678042][T26218] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1895.701012][T26218] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1895.715525][ T30] audit: type=1326 audit(2000001122.541:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=740 comm="syz.6.7503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a79b9aeb9 code=0x7ffc0000 [ 1895.737943][T26218] usb 10-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 1895.774433][T26218] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1895.812343][T26218] usb 10-1: config 0 descriptor?? [ 1895.835746][ T30] audit: type=1326 audit(2000001122.541:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=740 comm="syz.6.7503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2a79b9aeb9 code=0x7ffc0000 [ 1896.012249][ T30] audit: type=1326 audit(2000001122.541:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=740 comm="syz.6.7503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a79b9aeb9 code=0x7ffc0000 [ 1896.298828][T26218] lenovo 0003:17EF:60A3.0017: unbalanced collection at end of report description [ 1896.336683][T26218] lenovo 0003:17EF:60A3.0017: hid_parse failed [ 1896.350599][T26218] lenovo 0003:17EF:60A3.0017: probe with driver lenovo failed with error -22 [ 1897.523839][ T7670] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 1897.720488][ T798] bond1: (slave netdevsim0): Enslaving as an active interface with a down link [ 1897.969720][ T7670] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1898.004576][ T7670] usb 3-1: not running at top speed; connect to a high speed hub [ 1898.061265][ T7670] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1898.091639][ T7670] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1898.139566][T26218] usb 10-1: USB disconnect, device number 32 [ 1898.187176][ T7670] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1898.217317][ T7670] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1898.250211][ T7670] usb 3-1: Product: syz [ 1898.261560][ T7670] usb 3-1: Manufacturer: syz [ 1898.283077][ T7670] usb 3-1: SerialNumber: syz [ 1898.322023][ T815] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns [ 1898.993180][ T824] netlink: 104 bytes leftover after parsing attributes in process `syz.6.7535'. [ 1899.281585][ T834] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1899.289913][ T834] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1899.405158][ T835] lo speed is unknown, defaulting to 1000 [ 1899.477113][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 1899.477130][ T30] audit: type=1400 audit(2000001126.804:2480): avc: denied { connect } for pid=831 comm="syz.9.7539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1901.206602][ T888] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7560'. [ 1901.487173][ T7670] usb 3-1: 0:2 : does not exist [ 1901.528437][ T7670] usb 3-1: USB disconnect, device number 51 [ 1902.753201][ T30] audit: type=1400 audit(2000001130.247:2481): avc: denied { append } for pid=949 comm="syz.6.7578" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1903.855073][ T977] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 1904.012876][ T982] netlink: 'syz.9.7588': attribute type 4 has an invalid length. [ 1904.595864][ T979] batman_adv: batadv0: Interface deactivated: vlan1 [ 1904.912743][ T979] batman_adv: batadv0: Removing interface: vlan1 [ 1905.020727][ T983] lo speed is unknown, defaulting to 1000 [ 1905.234550][ T30] audit: type=1400 audit(2000001132.840:2482): avc: denied { map } for pid=1005 comm="syz.6.7600" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1905.905580][T25045] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1905.945793][ T1040] random: crng reseeded on system resumption [ 1905.953470][ T30] audit: type=1400 audit(2000001133.596:2483): avc: denied { bind } for pid=1032 comm="syz.2.7609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1906.106498][T25045] usb 7-1: Using ep0 maxpacket: 32 [ 1906.125290][T25045] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1906.143943][T25045] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1906.168137][T25045] usb 7-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1906.181435][T25045] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1906.188189][T25045] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 1906.217466][T25045] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1906.249344][T25045] usb 7-1: config 0 descriptor?? [ 1906.258118][ T7670] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1906.489255][ T7670] usb 10-1: Using ep0 maxpacket: 8 [ 1906.533359][ T7670] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1906.587567][ T7670] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1906.634254][ T7670] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1906.676336][ T7670] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1906.701573][T25045] corsair-psu 0003:1B1C:1C09.0018: unknown main item tag 0x7 [ 1906.739203][ T7670] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1906.764759][T25045] corsair-psu 0003:1B1C:1C09.0018: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.6-1/input0 [ 1906.799501][ T7670] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1906.853535][ T7670] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1906.877147][T25045] corsair-psu 0003:1B1C:1C09.0018: unable to initialize device (-38) [ 1906.933925][ T30] audit: type=1326 audit(2000001134.614:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1062 comm="syz.0.7615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f1f9aeb9 code=0x7ffc0000 [ 1906.987957][T25045] corsair-psu 0003:1B1C:1C09.0018: probe with driver corsair-psu failed with error -38 [ 1907.014264][ T30] audit: type=1326 audit(2000001134.614:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1062 comm="syz.0.7615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f1f9aeb9 code=0x7ffc0000 [ 1907.042743][T25045] usb 7-1: USB disconnect, device number 49 [ 1907.126114][ T30] audit: type=1326 audit(2000001134.667:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1062 comm="syz.0.7615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34f1f9aeb9 code=0x7ffc0000 [ 1907.191809][ T7670] usb 10-1: GET_CAPABILITIES returned 0 [ 1907.202125][ T7670] usbtmc 10-1:16.0: can't read capabilities [ 1907.231415][ T30] audit: type=1326 audit(2000001134.667:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1062 comm="syz.0.7615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f1f9aeb9 code=0x7ffc0000 [ 1907.289758][ T30] audit: type=1326 audit(2000001134.667:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1062 comm="syz.0.7615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f1f9aeb9 code=0x7ffc0000 [ 1907.328559][ T30] audit: type=1326 audit(2000001134.688:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1062 comm="syz.0.7615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f34f1f9aeb9 code=0x7ffc0000 [ 1907.365968][ T30] audit: type=1326 audit(2000001134.855:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1062 comm="syz.0.7615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f1f9aeb9 code=0x7ffc0000 [ 1907.460962][ T30] audit: type=1326 audit(2000001134.855:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1062 comm="syz.0.7615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f1f9aeb9 code=0x7ffc0000 [ 1907.515378][ T1071] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1907.663049][ T1036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1907.681907][ T1036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1907.709842][ T1036] netlink: 212376 bytes leftover after parsing attributes in process `syz.9.7606'. [ 1908.181500][ T1071] geneve2: entered promiscuous mode [ 1908.191282][ T1071] geneve2: entered allmulticast mode [ 1908.346887][ T1104] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7624'. [ 1908.380424][ T1104] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7624'. [ 1908.411064][ T7670] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1908.553900][ T7670] usb 3-1: Using ep0 maxpacket: 32 [ 1908.562577][ T7670] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1908.576174][ T7670] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1908.585363][ T7670] usb 3-1: Product: syz [ 1908.589629][ T7670] usb 3-1: Manufacturer: syz [ 1908.596049][ T7670] usb 3-1: SerialNumber: syz [ 1908.606033][ T7670] usb 3-1: config 0 descriptor?? [ 1908.773910][T12930] usb 10-1: USB disconnect, device number 33 [ 1909.245404][ T7670] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1909.258852][T12930] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1909.273480][ T7670] peak_usb 3-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1909.403591][ T7670] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 1909.432344][T12930] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1909.449570][ T7670] usb 3-1: USB disconnect, device number 52 [ 1909.467749][T12930] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1909.493851][T12930] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1909.503632][T12930] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1909.514983][T12930] usb 10-1: Manufacturer: syz [ 1909.527485][T12930] usb 10-1: config 0 descriptor?? [ 1909.548739][T12930] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1911.249431][T12930] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1911.418605][T12930] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1911.443430][T12930] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1911.465499][T12930] usb 3-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 1911.497057][T12930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1911.531165][T12930] usb 3-1: config 0 descriptor?? [ 1911.787869][T17263] usb 10-1: USB disconnect, device number 34 [ 1911.962625][T12930] lenovo 0003:17EF:60A3.0019: unbalanced collection at end of report description [ 1912.003996][T12930] lenovo 0003:17EF:60A3.0019: hid_parse failed [ 1912.027671][T12930] lenovo 0003:17EF:60A3.0019: probe with driver lenovo failed with error -22 [ 1913.141231][T12930] ------------[ cut here ]------------ [ 1913.147538][T12930] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1913.154637][T12930] WARNING: drivers/gpu/drm/drm_vblank.c:1318 at drm_wait_one_vblank+0x2e6/0x5a0, CPU#0: kworker/0:8/12930 [ 1913.166075][T12930] Modules linked in: [ 1913.170491][T12930] CPU: 0 UID: 0 PID: 12930 Comm: kworker/0:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 1913.181537][T12930] Tainted: [L]=SOFTLOCKUP [ 1913.185889][T12930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1913.195974][T12930] Workqueue: events drm_fb_helper_damage_work [ 1913.202044][T12930] RIP: 0010:drm_wait_one_vblank+0x2ec/0x5a0 [ 1913.208075][T12930] Code: 4c 8b 6d 50 4d 85 ed 0f 84 36 02 00 00 e8 1c b1 77 fc 48 89 ef e8 b4 d2 8e 00 48 89 c6 48 8d 3d aa d9 32 0b 44 89 e1 4c 89 ea <67> 48 0f b9 3a e9 53 fe ff ff e8 f5 b0 77 fc 48 89 ef e8 3d 3e ea [ 1913.228328][T12930] RSP: 0018:ffffc90004f8fa10 EFLAGS: 00010293 [ 1913.234488][T12930] RAX: ffffffff8c2b97e0 RBX: ffff888025dbe000 RCX: 0000000000000000 [ 1913.242554][T12930] RDX: ffffffff8c298580 RSI: ffffffff8c2b97e0 RDI: ffffffff90c22440 [ 1913.250657][T12930] RBP: ffff888140f5d000 R08: 0000000000000005 R09: 0000000000000000 [ 1913.258670][T12930] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1913.266648][T12930] R13: ffffffff8c298580 R14: 1ffff920009f1f45 R15: 000000000001b580 [ 1913.274653][T12930] FS: 0000000000000000(0000) GS:ffff8881245d9000(0000) knlGS:0000000000000000 [ 1913.283600][T12930] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1913.290267][T12930] CR2: 0000200000277000 CR3: 000000005268a000 CR4: 00000000003526f0 [ 1913.298278][T12930] Call Trace: [ 1913.301540][T12930] [ 1913.304451][T12930] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 1913.310173][T12930] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1913.316244][T12930] ? lockdep_hardirqs_on+0x78/0x100 [ 1913.321436][T12930] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1913.327243][T12930] ? drm_vblank_get+0x14f/0x280 [ 1913.332153][T12930] drm_client_modeset_wait_for_vblank+0xef/0x120 [ 1913.338608][T12930] drm_fb_helper_damage_work+0x164/0x640 [ 1913.344222][T12930] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1913.350368][T12930] ? process_one_work+0x80b/0x1840 [ 1913.355478][T12930] ? rcu_is_watching+0x12/0xc0 [ 1913.360292][T12930] process_one_work+0x9c2/0x1840 [ 1913.365308][T12930] ? __pfx_process_one_work+0x10/0x10 [ 1913.370671][T12930] ? assign_work+0x19c/0x250 [ 1913.375295][T12930] worker_thread+0x5da/0xe40 [ 1913.379862][T12930] ? __pfx_worker_thread+0x10/0x10 [ 1913.384962][T12930] ? kthread+0x17d/0x730 [ 1913.389193][T12930] ? __pfx_worker_thread+0x10/0x10 [ 1913.394345][T12930] kthread+0x3b3/0x730 [ 1913.398401][T12930] ? __pfx_kthread+0x10/0x10 [ 1913.402981][T12930] ? ret_from_fork+0x79/0xaf0 [ 1913.407634][T12930] ? ret_from_fork+0x79/0xaf0 [ 1913.412302][T12930] ? rcu_is_watching+0x12/0xc0 [ 1913.417040][T12930] ? __pfx_kthread+0x10/0x10 [ 1913.421601][T12930] ret_from_fork+0x754/0xaf0 [ 1913.426345][T12930] ? __pfx_ret_from_fork+0x10/0x10 [ 1913.431594][T12930] ? __switch_to+0x7b9/0x10c0 [ 1913.436290][T12930] ? __pfx_kthread+0x10/0x10 [ 1913.440918][T12930] ret_from_fork_asm+0x1a/0x30 [ 1913.445669][T12930] [ 1913.448677][T12930] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1913.455934][T12930] CPU: 0 UID: 0 PID: 12930 Comm: kworker/0:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 1913.466927][T12930] Tainted: [L]=SOFTLOCKUP [ 1913.471223][T12930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1913.481250][T12930] Workqueue: events drm_fb_helper_damage_work [ 1913.487299][T12930] Call Trace: [ 1913.490555][T12930] [ 1913.493460][T12930] dump_stack_lvl+0x100/0x190 [ 1913.498113][T12930] vpanic+0x20d/0x630 [ 1913.502068][T12930] panic+0xd1/0xd1 [ 1913.505758][T12930] ? __pfx_panic+0x10/0x10 [ 1913.510149][T12930] ? check_panic_on_warn+0x1f/0x90 [ 1913.515236][T12930] check_panic_on_warn.cold+0x19/0x34 [ 1913.520581][T12930] ? drm_wait_one_vblank+0x2e6/0x5a0 [ 1913.525844][T12930] __warn.cold+0x191/0x2f8 [ 1913.530246][T12930] __report_bug+0x296/0x3d0 [ 1913.534721][T12930] ? drm_wait_one_vblank+0x2e6/0x5a0 [ 1913.539984][T12930] ? __pfx___report_bug+0x10/0x10 [ 1913.544978][T12930] ? lockdep_hardirqs_on+0x78/0x100 [ 1913.550166][T12930] report_bug_entry+0xe1/0x290 [ 1913.554902][T12930] ? drm_wait_one_vblank+0x2ec/0x5a0 [ 1913.560233][T12930] handle_bug+0x1c9/0x2a0 [ 1913.564542][T12930] exc_invalid_op+0x17/0x50 [ 1913.569040][T12930] asm_exc_invalid_op+0x1a/0x20 [ 1913.573865][T12930] RIP: 0010:drm_wait_one_vblank+0x2ec/0x5a0 [ 1913.579733][T12930] Code: 4c 8b 6d 50 4d 85 ed 0f 84 36 02 00 00 e8 1c b1 77 fc 48 89 ef e8 b4 d2 8e 00 48 89 c6 48 8d 3d aa d9 32 0b 44 89 e1 4c 89 ea <67> 48 0f b9 3a e9 53 fe ff ff e8 f5 b0 77 fc 48 89 ef e8 3d 3e ea [ 1913.599332][T12930] RSP: 0018:ffffc90004f8fa10 EFLAGS: 00010293 [ 1913.605368][T12930] RAX: ffffffff8c2b97e0 RBX: ffff888025dbe000 RCX: 0000000000000000 [ 1913.613333][T12930] RDX: ffffffff8c298580 RSI: ffffffff8c2b97e0 RDI: ffffffff90c22440 [ 1913.621273][T12930] RBP: ffff888140f5d000 R08: 0000000000000005 R09: 0000000000000000 [ 1913.629235][T12930] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1913.637181][T12930] R13: ffffffff8c298580 R14: 1ffff920009f1f45 R15: 000000000001b580 [ 1913.645135][T12930] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 1913.650751][T12930] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1913.656796][T12930] ? lockdep_hardirqs_on+0x78/0x100 [ 1913.662413][T12930] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1913.668190][T12930] ? drm_vblank_get+0x14f/0x280 [ 1913.673018][T12930] drm_client_modeset_wait_for_vblank+0xef/0x120 [ 1913.679339][T12930] drm_fb_helper_damage_work+0x164/0x640 [ 1913.684945][T12930] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1913.691069][T12930] ? process_one_work+0x80b/0x1840 [ 1913.696152][T12930] ? rcu_is_watching+0x12/0xc0 [ 1913.700909][T12930] process_one_work+0x9c2/0x1840 [ 1913.705826][T12930] ? __pfx_process_one_work+0x10/0x10 [ 1913.711173][T12930] ? assign_work+0x19c/0x250 [ 1913.715737][T12930] worker_thread+0x5da/0xe40 [ 1913.720306][T12930] ? __pfx_worker_thread+0x10/0x10 [ 1913.725397][T12930] ? kthread+0x17d/0x730 [ 1913.729611][T12930] ? __pfx_worker_thread+0x10/0x10 [ 1913.734707][T12930] kthread+0x3b3/0x730 [ 1913.738749][T12930] ? __pfx_kthread+0x10/0x10 [ 1913.743329][T12930] ? ret_from_fork+0x79/0xaf0 [ 1913.747979][T12930] ? ret_from_fork+0x79/0xaf0 [ 1913.752631][T12930] ? rcu_is_watching+0x12/0xc0 [ 1913.757369][T12930] ? __pfx_kthread+0x10/0x10 [ 1913.761934][T12930] ret_from_fork+0x754/0xaf0 [ 1913.766498][T12930] ? __pfx_ret_from_fork+0x10/0x10 [ 1913.771598][T12930] ? __switch_to+0x7b9/0x10c0 [ 1913.776251][T12930] ? __pfx_kthread+0x10/0x10 [ 1913.780815][T12930] ret_from_fork_asm+0x1a/0x30 [ 1913.785556][T12930] [ 1913.788861][T12930] Kernel Offset: disabled [ 1913.793164][T12930] Rebooting in 86400 seconds..