last executing test programs: 5m37.960411568s ago: executing program 4 (id=5): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0xfffffffffffffd35, 0x0}, 0x240088c0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r5, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r5, &(0x7f0000000040)='./file1\x00', r5, &(0x7f0000000180)='./bus\x00', 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') 5m36.886837395s ago: executing program 4 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newnexthop={0x1c, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r1, &(0x7f0000000240)={0x1000000, 0x0, 0x2, 0xffff, 0x3, "82b0cfc4337965941538be02000000000000000000007400a391793ba7f40000000000fdf700"/48}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file1/file0'}}, {@workdir={'workdir', 0x3d, './file1/file0'}}]}) 5m36.673970057s ago: executing program 4 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x7) ioctl$KVM_CAP_HYPERV_TLBFLUSH(r3, 0x4068aea3, &(0x7f00000001c0)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)=@null) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff02000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 5m35.80049574s ago: executing program 4 (id=10): r0 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f00000002c0)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000730000001801000020646c250000"], 0x0, 0x0, 0x0, 0x0, 0xc3100, 0x47, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf89}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file1/file0/file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 5m34.782937571s ago: executing program 4 (id=13): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f00000005c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x0, @local, 0x1}, r2}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x711, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}, {0xa, 0x4e20, 0x0, @loopback, 0x7}, r2, 0x3ff}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {r2, 0x5}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="8000000002000200080004000000000008001b"], 0x30}}, 0x0) 5m19.503640186s ago: executing program 32 (id=13): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f00000005c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x0, @local, 0x1}, r2}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x711, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}, {0xa, 0x4e20, 0x0, @loopback, 0x7}, r2, 0x3ff}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {r2, 0x5}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="8000000002000200080004000000000008001b"], 0x30}}, 0x0) 3m0.444560325s ago: executing program 3 (id=562): mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='minix\x00', 0x0, 0x0) (async) r0 = open(&(0x7f0000000000)='./file0\x00', 0x100, 0xa3) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000005a0077"], 0x1c}], 0x1}, 0x0) (async) r2 = socket(0x1e, 0x4, 0x0) r3 = dup(r2) syz_io_uring_setup(0x10e, &(0x7f0000001480)={0x0, 0x4008d2dc, 0x400, 0xfffffffd, 0xd6, 0x0, r0}, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async, rerun: 32) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r3, 0x0, 0x0, 0x0, 0x80000}) (async, rerun: 32) r6 = mmap$IORING_OFF_SQES(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x2000008, 0x110, r0, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x3, 0x7, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @local}, 0x0, 0x800}) 3m0.20665077s ago: executing program 3 (id=563): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000acd000/0x400000)=nil) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="12012000f1048108cd060202d4921f01000109021b1901000000f30904150001da0900000905", @ANYRES8], 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000280)=ANY=[], 0x8) (async) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000280)=@file={0x0, './file1\x00'}, 0x6e) (async) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) writev(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="f1", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) (async) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f00000000c0)=0x3f9, 0x4) (async) recvmmsg(r5, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000040), 0x4) (async) r7 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, &(0x7f0000000300)={0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="cc260000000000"], 0x0, 0x0}) (async) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwritev(r8, &(0x7f0000000840)=[{&(0x7f0000000380)='\f', 0x1}], 0x1, 0x5, 0xb2) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000200)=@can={{}, 0x3, 0x0, 0x4, 0x0, "000000cef4a89800"}, 0x10}, 0x2, 0x0, 0x0, 0x40080}, 0x4000855) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 2m58.178951161s ago: executing program 3 (id=571): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) (async) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f0000000300)={0x0, 0x0, 0x1, 0x3, {0x2, 0xffffffff, 0x8, 0x8}}) (async, rerun: 32) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000000)={0x0, 0x31}, 0x0, 0x0}) (async, rerun: 32) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000000)) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)) (async) pselect6(0x40, &(0x7f0000000080)={0x3, 0x5, 0xf, 0x5, 0x1000, 0x7, 0x0, 0x80}, &(0x7f00000000c0)={0x38, 0xd, 0xffff, 0x7, 0x3ff, 0x9, 0x2b27a4b1, 0x1}, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r7}, 0x18) (async) clock_getres(0x9, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 2m58.01655835s ago: executing program 3 (id=574): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 2m57.045955144s ago: executing program 3 (id=576): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0x6}, 0x18) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x82000) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e22}, 0x6e) listen(r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r6, r5, 0x0, 0x2000d) read$watch_queue(r6, &(0x7f0000000540)=""/4096, 0x1000) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netstat\x00') preadv(r7, &(0x7f0000000440)=[{&(0x7f00000041c0)=""/4087, 0xff7}], 0x1, 0x1e, 0x20704513) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x1004) 2m55.881041566s ago: executing program 3 (id=581): io_uring_setup(0x6001, &(0x7f0000000000)={0x0, 0xeec2, 0x800, 0x2, 0x107}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r3}, 0xc) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f00000000c0)={0x8}, 0x1) sendto$inet6(r4, &(0x7f0000000040)='l', 0x1, 0x8014, &(0x7f0000000100)={0xa, 0x4e23, 0x77, @loopback, 0x10000}, 0x1c) shutdown(r4, 0x1) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) 2m46.231245423s ago: executing program 1 (id=604): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff58}, 0x48) 2m45.567783411s ago: executing program 1 (id=606): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x7) process_vm_readv(r1, &(0x7f0000000500)=[{&(0x7f0000000000)=""/61, 0x3d}, {&(0x7f00000000c0)=""/117, 0x75}, {&(0x7f0000000240)=""/70, 0x46}, {0x0}], 0x4, &(0x7f0000000a00)=[{&(0x7f0000000580)=""/212, 0xd4}, {0x0}, {0x0}, {&(0x7f00000007c0)=""/222, 0xde}, {0x0}, {&(0x7f0000000980)=""/115, 0x73}], 0x6, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) 2m45.044391072s ago: executing program 1 (id=608): munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x25, &(0x7f0000000080), 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = getpgrp(0x0) sched_getparam(r6, 0x0) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r9, r8], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$DRM_IOCTL_MODE_GETENCODER(r10, 0xc01464a6, &(0x7f0000000180)={r11}) syz_pidfd_open(r6, 0x0) msync(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1) 2m44.055185913s ago: executing program 1 (id=610): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(0x0, r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m43.505083207s ago: executing program 1 (id=612): sched_setscheduler(0x0, 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x80042, 0x94) pwrite64(r5, &(0x7f00000000c0)='\"', 0x1, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000002c0)={0x0, &(0x7f0000000280), 0x0, r4}) ioctl$KVM_SET_XSAVE(r5, 0x5000aea5, &(0x7f0000000bc0)={[0x80000001, 0x5, 0x6, 0xc, 0x6, 0x3, 0x10000, 0x81, 0x6, 0x6d, 0x7, 0x84, 0x3, 0x4, 0x7, 0x10001, 0x6, 0x81, 0x2, 0x0, 0xd33a, 0xed3, 0x0, 0x30c5, 0x5, 0xcb, 0x1, 0x8e3, 0x1ff, 0x400, 0x0, 0x3, 0x2, 0x3d9, 0x3, 0x4, 0x5, 0x9, 0x0, 0xa, 0x3, 0x24, 0x6, 0x7, 0x1, 0x32c, 0x0, 0x7, 0x2, 0xfffff39f, 0x80000001, 0x2, 0x1, 0x4, 0xe, 0x9, 0x49e8, 0x6, 0x57af, 0x6, 0x6, 0x0, 0x8, 0x4, 0x5, 0x2, 0xfffffff9, 0x705, 0x80, 0x9, 0x0, 0x4, 0x704f3437, 0x7, 0x69, 0x81, 0xf, 0x7, 0x0, 0xe8, 0x6, 0xffffff80, 0x3, 0x3, 0x9, 0x0, 0xc328, 0xf, 0x9, 0x5, 0x5, 0x200, 0x2, 0x0, 0x0, 0x0, 0xffff, 0x1, 0x5, 0x309a68b8, 0xb447, 0x7, 0x0, 0x9, 0x7ff, 0xc, 0x2, 0x3b4, 0x7, 0xfffffffd, 0x5, 0xfffffffb, 0x1b2d, 0x5dc1, 0x1, 0x9, 0xffffffff, 0x7, 0x3, 0x8, 0xb, 0x8, 0x400, 0xfffffffc, 0x5, 0x5, 0x3, 0x8, 0x4, 0x2, 0x4, 0x5, 0x80, 0xc0000000, 0x3, 0x7, 0xd, 0xfffffff7, 0x7, 0x9, 0x9, 0x3, 0x80000000, 0x0, 0x199, 0xe2ba, 0x9, 0xca2, 0xc0, 0x3, 0xfffffff8, 0x5, 0xd, 0x0, 0x9, 0x7fff, 0x100, 0xe5, 0x80, 0x9, 0x6c8, 0x5, 0xffffff68, 0x400, 0xff, 0x2, 0x6, 0x4, 0x5, 0xfa91, 0x9, 0x85d, 0x8, 0x6, 0x6, 0x53e, 0xffff9bbc, 0x6, 0x0, 0x4, 0x100, 0x2, 0x200, 0x1, 0xfff, 0xf17, 0x19d, 0xc87, 0x800000d, 0x4, 0x8, 0xfffffff7, 0x1, 0x2, 0x5, 0x6, 0x6, 0x4, 0x6, 0xfffffff9, 0x6, 0x8, 0x1000, 0x0, 0x7410, 0x0, 0x0, 0xfffffffb, 0xfffff801, 0x7fffffff, 0xbd6, 0xfffffff7, 0x6, 0x3, 0x2, 0x5, 0x2, 0x8, 0x5, 0x2, 0x9, 0x3, 0x9a8, 0x3, 0x800, 0x7, 0x200, 0x1ff, 0x9, 0x80000000, 0xffffffff, 0x1, 0x3, 0x43, 0x0, 0xad, 0x90000000, 0x4, 0xfff, 0x8, 0x8, 0x5, 0xc2, 0x93f, 0x400, 0x5, 0xb, 0x45dc, 0x1, 0xf1d5, 0x11f8, 0x800, 0xffffffff, 0x99, 0x9645, 0x9, 0xd, 0x9, 0x8, 0xa, 0x5, 0x9, 0x4, 0x258, 0x7, 0x8, 0x6, 0x40, 0xf4, 0x2, 0x5, 0x2, 0x0, 0x5, 0xff, 0x151b, 0xe18, 0x9, 0xff67, 0x8, 0x2f, 0x7, 0x4ce20746, 0x8, 0x800, 0x3, 0x4, 0xd1d0, 0x7, 0x0, 0x6, 0x3, 0x1, 0xfc78, 0x9, 0x10001, 0x93a0, 0xfffffe00, 0x3, 0x7, 0x3, 0x2, 0x592d, 0x1, 0x6, 0x8, 0x1, 0x7, 0xa6f, 0x1, 0xf, 0x0, 0x0, 0x1, 0x1000, 0xfffffffd, 0x1fa4, 0xffff, 0x6, 0x9, 0x1, 0xee, 0x8, 0x1, 0x4, 0x8, 0x0, 0xcebe, 0x81, 0x3, 0x5, 0x2, 0x2, 0x3, 0x3, 0x1, 0x100, 0x9, 0xffffffff, 0x7fff, 0x2d7, 0x4, 0x0, 0xec, 0x4, 0x7, 0xfffffffe, 0x8, 0x800, 0x218a, 0x4, 0x8000, 0x5, 0x5, 0x4, 0xffffffff, 0x7fff, 0x3, 0xdd, 0x5, 0x10, 0x88d1, 0x4, 0x10001, 0x2, 0x80000001, 0x8001, 0x6, 0x4, 0xf8, 0x1, 0x9, 0x7, 0x101, 0x8, 0x7, 0xee0d, 0x1, 0x7, 0xd, 0x1, 0x0, 0x3, 0x8c2, 0xa864, 0x30, 0xf, 0xc96, 0x3, 0xf4ba, 0x9, 0x3, 0xfffffff9, 0x5c2d, 0x0, 0xfffffff7, 0xffffffff, 0xe, 0x2, 0x5, 0x7f, 0x1, 0x7, 0xe9, 0x1000, 0x8, 0x5, 0x3, 0x6, 0x2, 0x641, 0xfffffff8, 0x9, 0xfffffe01, 0x7fffffff, 0x1, 0xd, 0x0, 0x120, 0x57e4, 0x6, 0x97, 0xd7f4, 0x800, 0xfffffffb, 0x7fffffff, 0x0, 0x10, 0x6e, 0xf93e, 0x6, 0x6, 0x200, 0x18000000, 0x7, 0x9, 0x5, 0x708b, 0x4, 0x90, 0x8001, 0x9, 0x20f4, 0x79ba, 0x94, 0x100, 0x16, 0x2, 0x2, 0x800, 0x2, 0x3, 0x7, 0x6, 0x9, 0x0, 0x2, 0x7, 0x2, 0x0, 0xd73b, 0x2, 0x3, 0xffffffff, 0x5, 0xfffffffc, 0xbde, 0x4, 0x6, 0x6, 0x52da, 0xa201, 0x8, 0x3, 0x4, 0xc, 0xf1, 0x4, 0x800, 0x3, 0x1, 0x8, 0xf, 0x101, 0x3, 0x5, 0x2, 0x7fffffff, 0x8, 0x6, 0x7, 0x0, 0x7ff, 0xd9e5, 0x19317f36, 0x3, 0x839, 0x8, 0x165, 0xca5e, 0x4, 0x16ac, 0x9, 0xfffffff8, 0x9, 0x4, 0x3, 0x1, 0x3, 0xffff, 0x8000, 0xfffffffb, 0x2, 0x7f, 0xfffffff8, 0xb6, 0x4, 0x3ff, 0x1, 0x0, 0x5445, 0x3, 0x6, 0x1, 0x0, 0x5, 0x3ff, 0x1, 0x7, 0x7, 0x0, 0x6, 0x5, 0x3, 0x5, 0x1198b, 0xfffffffd, 0x4, 0x3f7c, 0x270d, 0x8000, 0xffff, 0x977, 0x6, 0x3, 0x8, 0x7fff, 0xa1e5, 0x0, 0xa5, 0x101, 0xffff7fff, 0x5, 0x7, 0x7, 0x9, 0x0, 0x5, 0x7f, 0x8, 0x0, 0xda, 0x9, 0x102a, 0x8001, 0x3, 0x1, 0x0, 0x8, 0x6, 0x10000, 0x9, 0x100, 0x9, 0x6, 0x4, 0x8, 0xfffff801, 0x1, 0x10001, 0x63a8, 0x0, 0x8, 0x7fff, 0x9, 0x6, 0x101, 0x3, 0xffffffff, 0x4, 0x0, 0x5, 0x2, 0x6d86, 0x100, 0x7fff, 0x2, 0x9, 0x63e, 0x2, 0x1000, 0x70000, 0x9, 0x1ff, 0x8, 0xcafb, 0xffff, 0x1, 0xfffffff9, 0xebc, 0x3ff, 0x40, 0x4, 0x40, 0x9, 0xfffffffc, 0xb6db, 0x3404, 0x1, 0x51f, 0x2, 0x9, 0xcf8c, 0x9, 0x1, 0x9, 0xf, 0x5, 0x2, 0x96, 0x8, 0x8, 0x609, 0x45, 0xa4, 0x9, 0x80000000, 0x23, 0x8, 0x58, 0xffff, 0x10001, 0x6, 0x6, 0x2c2, 0xe0, 0x32, 0x7fffffff, 0x2, 0xc, 0x6a43, 0x0, 0x80000000, 0x5, 0x996e, 0x1, 0xf7d, 0xba, 0x3, 0xdb, 0x7, 0x4, 0x6, 0x0, 0xfffffffa, 0x7, 0x1, 0x3, 0xeffffffa, 0x5, 0xa2, 0x6, 0x8, 0x401, 0x9, 0xc, 0x7, 0x7, 0x4, 0x8, 0x2, 0x7fffffff, 0x9, 0x6, 0x6, 0x8, 0x6, 0x7fff, 0x1, 0x0, 0xd, 0xd13, 0x33b0, 0xfffffffa, 0x9a5, 0x7, 0xfb9, 0x8, 0x4, 0x7, 0x566d, 0x5, 0x1, 0x0, 0xffff8001, 0x4, 0x6, 0x5, 0x5, 0x100, 0x30c, 0x1, 0x1, 0x5, 0x6a, 0x7f, 0x7, 0x10, 0x7, 0x1, 0x90, 0x1453, 0xfffffff9, 0x2, 0x6, 0x6, 0x7fff, 0x9, 0xb3, 0x4, 0x4, 0xfffffff9, 0x0, 0x3, 0x6, 0x4, 0x0, 0x2854, 0xfffffffb, 0xffffffa8, 0x401, 0x3, 0x3, 0x5, 0x8, 0x5, 0x7, 0x5, 0x4, 0xfffffeff, 0xf37, 0x4, 0x3, 0xfff, 0x6, 0xd95, 0x4, 0x0, 0x80000001, 0x1, 0x6, 0xffffffa2, 0xfffffc01, 0x7, 0x1, 0x3000, 0x2, 0x0, 0x5, 0x8001, 0x9, 0x6, 0xffff, 0x8, 0x1, 0xfff, 0x8, 0x5, 0x7, 0x4, 0x7, 0x0, 0xffffff9b, 0x75a57914, 0x0, 0x3, 0x5, 0x7, 0x401, 0xf, 0x1, 0xfffffffe, 0x6, 0x6, 0x2, 0x5dc, 0x62, 0x5, 0x2, 0xffff, 0x5, 0xfffffff8, 0x7, 0x7, 0x4, 0x7fffffff, 0x3, 0x3, 0xe, 0x0, 0x6, 0x10, 0x9, 0x6, 0x40, 0x8, 0x4, 0x7, 0x7f9, 0x3, 0x10001, 0x98, 0x0, 0x8, 0x65, 0x5, 0x6, 0xee, 0x10, 0x7, 0x7cf, 0x0, 0x6, 0x2, 0x2, 0x8, 0x6, 0x5, 0x8, 0x1000, 0x7fff, 0x9, 0x2, 0x4, 0x789f, 0xfffffffa, 0xe, 0x1, 0x9, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x7, 0xfffffffd, 0x5, 0x0, 0x8041, 0x8, 0x7fffffff, 0x9, 0x7, 0x8, 0xbec9, 0x1, 0x6, 0x6, 0xf, 0x22d, 0x3, 0x5, 0x1, 0x3ff, 0x5, 0x30, 0x1, 0x8, 0x8, 0xb, 0x9, 0x800, 0x9, 0x3, 0x2, 0x8, 0xf, 0x1, 0x6, 0x4c, 0x7, 0x4, 0xa, 0x1cb1, 0xce0, 0x6, 0xfffffffa, 0x1, 0x1000, 0x0, 0x400, 0x2, 0x5, 0x6, 0xbc3, 0x1, 0x9, 0x3ff, 0xd, 0x5, 0x401, 0x49, 0x8, 0x80000001, 0xfa2c, 0x6, 0xd3b1, 0x1, 0x0, 0x8001, 0x8, 0x1000, 0x1, 0x5, 0x4, 0x8, 0x3ff, 0x7f, 0xf6, 0x9, 0x8, 0x3e18, 0xffffffc0, 0xf, 0xb94b, 0x6, 0x40, 0x3, 0x2, 0x1688, 0x3, 0x5, 0x3, 0x7, 0x5, 0x7, 0x9, 0x2, 0xc000000, 0x7, 0x2, 0xfffffff7, 0xd5, 0x6, 0x3, 0x7, 0x6, 0x7, 0xa80d, 0x9, 0x3cb7, 0xfffffffc, 0x6, 0x4, 0x4, 0x3, 0xffffffff, 0x0, 0x0, 0x1, 0x101, 0x33be, 0x2, 0x7, 0x8, 0x7f, 0x0, 0xfffffff8, 0x2, 0x6, 0x7, 0x6939631c, 0xb, 0x1015, 0x80000000, 0x7, 0x5, 0x7, 0x6, 0x4, 0x7, 0x8001, 0xfffffff7, 0x8, 0xfff, 0x5, 0x4, 0x101, 0x80000001, 0x2, 0x7, 0x1ff, 0x7, 0x5, 0x8, 0xae, 0x7, 0x0, 0x8, 0x0, 0x8, 0xffffffff, 0x1000, 0x7, 0x375f, 0x68, 0x1, 0x0, 0x6, 0xed2, 0xffffff75, 0x7ff, 0x6, 0x7]}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000280), &(0x7f0000000300)=[0x0], &(0x7f0000000340)}) keyctl$setperm(0x5, r1, 0x200) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0000008f0c70bad100b313ffb7b8139db4d5765eed5055b91e8ae8fc8e71b3a0bb220a0f8d479f85114974c57252a572dce9800fe7284706872309cf9ba54a39711f70e13a0ecfcca6b2b984128e799220c0e4d3a6ae6fada122304f78f07a38b3d74c2a31996e5cdccc9b8a6d"]) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@filename='./bus\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x5000, 0x0) 2m40.481594173s ago: executing program 33 (id=581): io_uring_setup(0x6001, &(0x7f0000000000)={0x0, 0xeec2, 0x800, 0x2, 0x107}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r3}, 0xc) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f00000000c0)={0x8}, 0x1) sendto$inet6(r4, &(0x7f0000000040)='l', 0x1, 0x8014, &(0x7f0000000100)={0xa, 0x4e23, 0x77, @loopback, 0x10000}, 0x1c) shutdown(r4, 0x1) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) 2m38.187170047s ago: executing program 1 (id=631): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) sync() socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @loopback, 0x4e24, 0x1, 'none\x00', 0x1, 0x32bd, 0x9}, {@loopback, 0x4e22, 0x2, 0xfffffffe, 0x4, 0x12d5c}}, 0x44) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000036000/0x2000)=nil, &(0x7f0000594000/0x4000)=nil, &(0x7f0000f36000/0x2000)=nil, &(0x7f0000918000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000c12000/0x2000)=nil, &(0x7f000003f000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x30}, 0x68) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) r3 = io_uring_setup(0x27fc, &(0x7f0000000040)={0x0, 0xc8a0, 0x10000, 0x8, 0xbd}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) bind$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) listen(r2, 0x3) accept4(r2, 0x0, 0x0, 0x0) (async) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) (async) creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) 2m22.690455546s ago: executing program 34 (id=631): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) sync() socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @loopback, 0x4e24, 0x1, 'none\x00', 0x1, 0x32bd, 0x9}, {@loopback, 0x4e22, 0x2, 0xfffffffe, 0x4, 0x12d5c}}, 0x44) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000036000/0x2000)=nil, &(0x7f0000594000/0x4000)=nil, &(0x7f0000f36000/0x2000)=nil, &(0x7f0000918000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000c12000/0x2000)=nil, &(0x7f000003f000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x30}, 0x68) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) r3 = io_uring_setup(0x27fc, &(0x7f0000000040)={0x0, 0xc8a0, 0x10000, 0x8, 0xbd}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) bind$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) listen(r2, 0x3) accept4(r2, 0x0, 0x0, 0x0) (async) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) (async) creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) 6.515369932s ago: executing program 5 (id=1117): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) connect$netlink(r1, &(0x7f00000000c0)=@unspec, 0xc) 6.481270734s ago: executing program 6 (id=1118): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x8800) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="b702000000001700bfa300000000000007030000f0ffffff720af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee2922bd165a5a68488e010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7f22b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d74bf0a305790c9d644735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f535447cc0facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf00000048d2570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f09f4db033e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e7f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec50f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754d98b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8cf632c2604eab3a62a28611da1cae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412e1bdebae06edb51a134301b4627d4927287daf9dcae6720334862f3a18094f1edd9e3503379815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2f09e99f4ab5546ba1e5ad6a329f24e73a9c38eec34bd4dcc1609f6150e2de72f6599a2310c3841f4bb7f39cabc82c9fdfff5587ed4fa84090635fa3445c4cc54478b2f98320944ac7cb1c4e414556f7b0b763a00a84327cec7e11b3470f0384b27bbfdd8b2472497e7fe8c5df7e0a00641872472efa21c9ad3979e642dcc85c17ca8e084aa9689b83426e2fdaa01f500000000000000000000f9fd84fa991466ff749afe900d02281b2bb60d458340c4f68ec34835760ceca945bf181a000000c000000000b4a76515564ae189de7c1765f0ff68a0388ca8dd2aa831d0e01f0d7ce74401a58cef60e63e97a50c18de54121ce66380224ab7b9c0d4710f2347bad2c9b3e41cc738c1092728687f33e5cdb077223dc82c2137b4e3ba6791a2cd764e654f904c9505b7c5e3b2897072e747534952dcda50cde3e4deb6ebf85a04c3e415112b01eed6515c845a8a20519cd21787d560e9d8283fa8ff0c17b63ba06577c26678ff45420a1f85df47dbfc44e534f71aae5693fb5df61c5096219091ce0cd8e1e2e79bf9d37779e52007c66a00e6ded1499ed3892ed1544d1577906b52e16c734d4aec07dd15faa768c97298be87dd34ce704ffe3da8b46708cf972de4f31c0705ac933db80bdcfcb35c0d4620d4ec270ff7c9ce1b78994dd2b28b9d1c5c469d4c1a61781dce2f1b54d6138bd3f7df9e9ca613bec407c1b8d1bd0c7cb9d76eebf2f17c"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xc463f262, 0x10, &(0x7f0000000040)}, 0x48) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r2, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000bc0)={@local, @empty, @void, {@ipv6={0x86dd, @dccp_packet={0x6, 0x6, "ec4b23", 0x10, 0x21, 0x1, @dev={0xfe, 0x80, '\x00', 0x20}, @private2={0xfc, 0x2, '\x00', 0x1}, {[], {{0x4e20, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, "05c95d", 0x0, "c5263b"}}}}}}}, 0x0) sched_setattr(0x0, 0x0, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) io_setup(0x5, &(0x7f0000000200)) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x4442) getpid() openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, &(0x7f0000001dc0)={0x8, 0x72, 0x80000}, 0x20) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') getdents64(r5, &(0x7f0000002f40)=""/4098, 0x1002) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @random="ad446050e878"}, 0x14) 6.304438946s ago: executing program 5 (id=1119): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x3, 0x0, 0x0) ioctl$PIO_SCRNMAP(r4, 0x4b52, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000010280)={0x0, 0x9, 0x0, 0x5}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000340)={@broadcast, @multicast, @val={@void}, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @broadcast, {[@timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}]}}}}}}, 0x0) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) sendmmsg$inet6(r5, &(0x7f0000003440)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="ae5d41c61790a7c951eea7fc6ba3ee9d3dba25663da55fbed0fd56edb7dd618d247b282ba97dd6ea6877733ca435d40279b0b7f746d77510f0525605e699476c87047b087ab1f478da0154f354682190c07d099836a2b4118f01a641b34a7338a90ea530c280880d21723d9e8733369289c81199ec5b434e757003c5b64aa964decc7df5e603ec36345d06a6a8b6f323273bac67f8e79b39c7eee7020457f97d82facc46bbae70657726cbce4ce5e56369dc693a7d683f58fbd5ce6cb2eae2a157cee32e34b37f85531810", 0xcb}, {&(0x7f0000000580)="2b64e4704d71b95b130b495a40b5c5c5676b1e03f564bbd2b1e9cc81dd8946006f243e4308b046623697ebe9a1b64d504409f482d4ef8592fac1ee7261bea618db3391e0cdc48959c52fc1b8cf2b0bffadc53da59bceb83a644a068323d7fca246aa4de53a23296398f0a224b0fb3319b0eae7b04e0e61510dae1063bc2f629a6c3707ee0aa7e075bbc455e816831ec8a7a94843fe9fdd189ff179a8e9956763b92cdff0da48d7747fa6362d7f1508f9483ea815fe11f8e2def12f11cf86a36507465713763d78d50231e3e9c40bb8ed00", 0xd1}, {&(0x7f0000000480)="230d0d2c0890639b63de67b2d8caf06173e6fae6431acee4cd1b4d56cfe5f40e0f7436b869421d4764d369fbc9728ab87bd29693b60367ab58c1a1739d5aafa1363ad0480de95ac263ec7d9d00e2497dfbd307e7f7e1cf9ac9ae939c19a43a6cf8b8471a720f07b95480a081025883a05a3fb5a5ae7a2f393aaacb765e6de919016f76b96a7edd98b652a8b8e3", 0x8d}], 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000002900000000"], 0x18}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x7ed, @loopback, 0x7fffffff}, 0x1c, &(0x7f0000001980)=[{&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="6b536245586dd48a4082ebe59055a2c2a6", 0x11}, {&(0x7f00000016c0)="c38c992a2e14bfd21cb55a4e633d2bf9e285d3e7877b9e0d69c0bd7f557b990c89d551f826698365761e498ddfd52a2965dded2ebf9999e47e42823211732888b9360501e99f2613b995063e956ed830b0fc4932d1233cfd1fbe37b3e4c7448f0c866aaaa6f05bfc869121177a6967defb35f585adf31aec1c9df66ee92f1a245627ccecf86fbc26bb380a949642b6177a392446764d809af3eedd1977b26e31a659cb94216e4ee618ad4bb44596074044b47c24bd32704ef50d29c7eb8f81722ec1c957032df41d184a54344e26e975e95a8cf409edda5ccd82adb61b8d4203228d8473940f3353670bd55bca2998b7", 0xf0}, {&(0x7f00000031c0)="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", 0x15f}, {&(0x7f00000018c0)="d2099f996fc41ec17634d115bb722047bf59fd1f87972a1ab103c14e69b9ffb982ff40333000ab5560536e182b2c1de5f0b8d6ffbf3181cfe61a9699800f0523774245432b2c375645c0b5e1ec2c6e03a8a9821f2ac6e289a6b13e800d69676157aa4e24ec8623435bc0e4e4da39b6c5e3d9b1538417f317416a92bafd0cc7c301838cbf5f62a7af5f647d8b5efaf2728fbc8b7e1d18c67cd3b86169b63942a393513b3bf38108c6ea4ab640a7", 0xad}], 0x5, &(0x7f0000001a00)=ANY=[@ANYBLOB="7800000000000000290000003900000084139d6de710d8f6e90c00f3ea00000000000000000000000000ffffe0000002fc01000000000000000000000000000000000000000000000000ffffe0000001fc00000000000000000000000000001e0101fe80000000000000000000000000002a1400000000000000290000004300000008000000000000001400000000000000290000000800"/168], 0xa8}}, {{&(0x7f0000001ac0)={0xa, 0x4e23, 0x240, @remote, 0x3}, 0x1c, &(0x7f0000001c40)=[{&(0x7f0000001b00)="9e9dc007beaa", 0x6}, {&(0x7f0000001b40)="e917abc2b364fc3b7dba52f8e52027dbcbaddeea2c2e7b4b564461241ec3a0b488bc3f15a2073f7caddfed9a8d4e5194d1b127c21228b1fcb6da525f809f611b1b800b85e4552da3e7cde6aa88520388888d0d49dd6c8d88ea4df0b3682184b8ac18fa5245e73e1e28fbbbab68d05796efbdcab118ca9f4e4dbda96db5cd15d34eafa5996f4c3818e0aa185f108ba9e872688abe23196777bbd579a68727e8286f5c05a9abd8fed4b87fd2c3f514072d5b7ccbf6d82c632f24ac67c8efe1ae0f6687", 0xc2}], 0x2}}, {{&(0x7f0000001c80)={0xa, 0x4e20, 0x10000, @empty, 0x800}, 0x1c, &(0x7f0000003140)=[{&(0x7f0000001cc0)="cfe4912a66eff9e6bbcbb76f48bbdca1b99d74cc116510ca583e3f7df6bf38e94f4835170d3626d2a3f1c2fa8d75b329e5196673cf92dbb76611ddaff981114bb195dd312c1dc6ee6fda8e342a0220e078cfc8e778661e5e2b825e4be1d657692354bc6009d06fe4325096259e7120f7d43331d6f22bcda3af2bc36e6411c43956c5d7f2460d02606bcdbc1a4e9b09c875f2d1d745183735a0141ee82c3d7a4eebed3070ccd0d5900de59178e9e1c3fb8dcab53adc149d17f5bb370a71fae9b73ce7687fd1f2207ac4b69ca75b9de9e2e7cc0d4a95bc6e8eb2af273d97c5db377e99e8598892badaaff0ef840f0e784f462b9bc5", 0xf4}, {&(0x7f0000001dc0)="b749868485abb79840f02a78380d81ef394c2a0547f0efa3de3f8524387eff67a82fe37e7fd84c7fb33c559b8a288d24080a410bc2ce3070116e75c979842f9fd486a081d6b2576839cbac3e7464657429b1eed372fb25ccc7a8b1ec0fb1d0b2c97c9b3240cf375e54adc09420fc4b096140953a8d687eb3042211cf965e92207683d0119ee448a88eb9be4adc99a590c9df2de515664a31eb152272b5dd73", 0x9f}, {&(0x7f0000001e80)="c2111d3e6d5fa97cfdaf10ede71f77b14ef30b82b98ccce3bc9e5732dff8868cc4bfe4d76a802516a94bc0bfc06acabbdc881db5fa4dec3fc57475c9ae5ead03ae038c5bc4be6e9b93e4079cdaa4acaddbaae3e8009632ce6e56b20aa05d5928fcad98f1c5db8e2294db415ef1a5d7cf2a309de5bb434128629203f7319a56b108007fee78168b06aee12ae229d8667de8635043ce6086e198d1678100b988382fee728bbd121e20d5fc30a6", 0xac}, {&(0x7f0000001f40)="dbee3373f21f9031494d807dc00b6164f4055dba50ef199bac39dc53ffaab76d95340b7afcabd918f2228ca5860d1562a07f13304da168024c5828dccd8464c36745ca9f1397728ea72031196f745cf7dabddcdf967795e381f2539fd2a362ab583af73c1f5f4ed77845e427770c464bf91099d5e1da22af209f1ca827a2c42ad623ea5e55f861545847803dec8c6419f57e4bed2f7a33a4b216", 0x9a}, {&(0x7f0000002000)="cb0ec97bbfc85228648d33606c6b2a1fd30f44c1cbc3d720624f8120fede2383df306b3eb9749779b5c06959d7cfb756fc099b930635a298ce727f2891e263f517ac5f0c4db05c1cd85bfe5713f877e751b88b15a525fb161e05df1fcaf15afa3bda687827b4fd81030c594abb9a7e8a466306205f73de2b8a5f805bc1868efeaf45", 0x82}, {&(0x7f00000020c0)="4d4eaaf3cd5821d0725b526653e75113b3e4c77b5f166d8eadb533aa161fa3ab42e161bdb2d77716d2ad0b6c59eb64e91c7df67cd13e3ae695967fe49e0ee6ae30d804623f3e946d02056f846ddf468b7ac6747db4fb980d65e072806e86e1339d025494de45c0ef357a3a471947fae8c1cea7fd861a13a32419e27d564446db93b138606649c724cb942ebe4aba8b8ddc07bf870e0a30107d59113f4ac192b4d64591ac2f323dbe5511037b65bd30fe9d4c01fadbd712a4988e77c0c7c4781c24ea9ce5bbb2459c06ab1253c5af0d10da0b20db46f6923c1b95528bfe6566c0880dfbac51d34d767cfcfb5895026526c0a6c35d912fed25fcf96f301e323051fd589a6ecc88e3edc47dbf9906f7b68f793bc6c17fd40703fb55852bcdd1cfb564f7b2270141af3ef52fb5ec334e4f921ecd9f74dbd3ac74477859c80634d9975c0e9c86ad1a8bbb6455a2e0489313446980c71efeeb7871c001b027f20313520677714d96a61e24b2ebee88e20e06f464eba3bd972b9ee9cc03ff9f0b818cc587d4661a8b2e3b44bd948e3f75300123ba2a29cd43e73b1ac49e389069a3f582c9fc660d5e874f1438f465588a43d22c8ab820b35b50d159677db4c7a63ce01a5cf345624f331f93e1841bdcdabd42c3095364d08a6dc8fc588977211c406fd6630270ad0ea763fe663a6862cfbf302997a9704a2d71d12c9a00db2cc4d4bcdabd395b84c6ea07bcdc52f578cbb13965f495270deef419c651b9956cf8134466eb961322bfd7e7007ae2a63eb6e376f5b07a16b806210ba099ef6b9055ac7603909fd1accd258f46f2d1bfbcce27944d768799fc0708dc11496305e88fd78d61921474957720bceacc1368040e4416c636cdf2d1640334cbdae69605a886ba48d6c6a856940e417096d76f588a6f6ba9427e503758c515d1db3c782d4d5bdf31fbbf8d680cd8543e203422a56fb02e70483e7a1a09f694b5f5ab75d3de6b776f2ede4dfef91c4007d4a2c4ce0fa125a2e804f0cc7d62d743acc40271202198d67541b4ca19519293918648c1dca7cd4cdd228a7eb83fb7e0577879b2236274076f2855a07c6a30273e9d7b41e9f4d35a27be34365bd98f9f4b5413bc3d44cd5e50917be2bf33912071630d5a1b06231e720c715a1852130395cc6da4a31ca3fe02ac26678b5498889d94470093bad236a953fc63dcbb4a8c3f6201ddeffe7991a511f66585ebf5a08f09fc0bdf4567069c59d5f3697e23b83f523e35d5def97bbee9f5f413134229fb8fd3c953f719d816763b842a408288e9ef9f768d6407c7b7df05fe52e38179267e1dc1c0619f48b1c3dd8b54844a153fd05b15a8820335e7ba8c10c1281b47a1e43358e1e560dc5bd29ce42997050c0ad442d04f9c66ad764e1e7cfab9a794d73b0477a2214553009f0ff8b2556c5632c917b264d12a97484430e8050854efd5bcd004f6f58efec08fdcb1f04ec497a4f264227eca0e304d6c21836a7a6c70246730ee798008d7b2b4610550872fe9aae984299b8bdc8721e2ba80017c507a3dfd2e3d64d4463ba773f654d95d81328879c00bd55095907005d7c34ee37827de34dbcd8e29646d26cd1ee45a9eb1475a2576f51e23ac529cb07c95cb517f9e9ae690f4184bd3aaf5d4a1fb161eb4db1966202875c9faa978e82308aab9877559a8ac6e9e21b17d4f51dc0d062ef5cadc2b66ac994dc2325d265854ac116e1629a8d56a59bf493902da8cf014f5f4f52d37e9dbdf9c2e37a2032830f36a089be47a2dcd3fbb45a92bc7867642108a83d0506851d3825340128d081bd106938d8a546f8663934172d5c25e3adf9abd4a9b4b8faf706d65bddd0e8dd6cd3055993a69c174c3a36cf6343e389ee541be193526d9510f12577d19677f7b57e21bc170f3ab60d168d7baa9ab6072bfb95ca7f2b7b052a0d8dcb564fd1372bf0984bfcf04baaaffa8aabc4fa43c339cdd82c47bf2f118115c88b4fea2b0de17ebbf23aa678092fc42421f5e0e0a94e7de54146b088a3411bc4ad6561c3c2c50aea7516f6166b3e34800a4fc744bffc4f545c6d85b869c6c17b3578f45b661f8fcce84d4d93745f200535f8c321ac2d3cfc9ae6967ddaa48533b0823f7ce9f03561fef8500013dd3f87444addd88527176f3f18b84f1ba314683fc8931c5d85ac389b001ee1228b373cb0504f0195c9f1b1cd35ee669170966c8292d61d31f62fbe15e2fcea47194d149c08f79f3b76ed33c606e7c3911102a51e34552ba33588dd69555399e7c735565571d285f31d1c4394e8a87a50f32fcff1ffeda94667a14a93263c3bba6482fd79d4541af04c183a129b2342639740ed8f8287028a6ad094ea62bace06a981a333a6960a8006647d56a0c2f911b1dd8c96301188e0c10375991129a45ef0857f7f24a4d71158ad1e030ca306d3b0378d870a9d4379ae23c1c24fbb32815c6d184da24ae2a1000a94329a94bcf56699f53f00f08c7e513526d6394f95cf6f51cfd30dcc4f3e4beb7323855a6297607cea1ec2cd1e6330cf8ec4d9a38f28fdce2c4d24e663ecc064f8e66dc679aab7575a6282b5c45c66d0e32457b3351c3d753a0cb03b951e71556f10e9618aa830dc208ecc4b8aae621766e20db9b4978cc55d47daacbc9fc43e210a7e6bd8b72fec69578e5254430386552c4a2f90d09a3746fd4e25d147400375f447df3732c13aeecb4abd3177d34171ddb9273a8eadde1040c36610f0ee86c2383cd04fdf07def984ca1e8dcffe38208455db7906383f493730e628b4ec56dde4c49c2ece5c7e50d5cf05ec0301e0e90b03485da6de4ae352715e508d47765009816edcc3a714e85827cd48c41fcc0ccee912addcb98abbeb2ff1a9dafc46767d96b1f2d6eb240f2544d18f144936509a29abb590dbe07729e6178d0ab2851bfc4a820d45fa6903a531804c736c8d5d4623f14ac8dacc9d5325a451f189536bc9bad59dd9916125bc3c3d259553e3445770f97567d7c8207b6ca4d0b1c5d1568faa5cc567abf4f525dae70a324bfcd931195f8e63ee5c9cb9a69ff82e44b5539b0ab0c1117706b9d9c36b57d776fe2968e13226507fd5d6f7c2e9e8a855071778b57cc84b8142ec4495ff194679bbe0178bc6b817145e347b575011aadc41cd093cc03c7c25f8314914ea3c905636ea04210046935149e82529d9f6281b4bf3843e45bbe4e7bbca65d983d8cb5dec50c2c45f7576454a588efe324d5f289d22ad91d2345faa4620fbfcb8e27aee71df97973b10e36c5aa333da1bf2d7b157496d3d207f75d8697781c739912b3e84575bb77d1359a302a6a5f014315c8e00cfe7ead0f6a162c00bae53b222a326b039a51940a4fd3b613433788b7b7170d706d9a1d390e5d4b1d6f3487b080171549620232975b335d8322a0c3ed3caa744d34707930a45cb48bf1f7f7aec5eff27d9bb4e3fccfe96a1037a156889c92cd61f12da7bda572ca05493334d985acfcbf925327a044500de8ab6e1529eed849ab66e83547de7f37db5b2ddaba31531316e1738cda0c6a37ce57f6ee6317ca3dc2b31e3683307de301532e25b41c9698d29acab68d459b3080c9ddbea74b75210148d93142e7d454ecf12ad8bf24b87592178791ae86c9ee37d61e2256dcec1cc66a433c6096d51cd206239b61ef4c8aa624ca58ac75db0cbbbe8d027b6e8a19e9de8ca8430ca6e9b6ade6348e851289adfa90a88adb02c1eab2ba00d8d2ee9ad3dd0670c2780114a968915079fb4a7d161207567746cd65bebcd1ac585ca869d40d0b2307f601c397d73aa58b23057f49b0748426bd502689bd4c3c16c75b26af19480dc196e5fcc5d4fa73afdddbc713d900c5fd3b22f5d1bb13803ff5e2c165b9371f7e1b04a060455adfb94eaea6ddbcfbe11c86c3480375c52d5c9e7da94cc78c7f9ef27cd6d46a8eac6bda87acd450c6409b8a2eda537d81ccb03a6d07105df2963b4659c9f4ca29cf530fe63423790545b2b42db89ca2672bf26de8d54525e48b5871e54c03c824c1eb5b405bbc087a47a695ab749f24a3c2fde2a40cc2e9092617fbf098b21956ca8e314c502515238300a8614b71a5910b09800ee4b38618b3ee857f65d0aa7d482786b90c944c50b77ff93dac47e609507ef510bf13eae50f4ed5cc64ddda306abf0c44eede9085dc58a2272c2df7d97eba5404117ec75e83ee3ce950e06ef86f6748335fc100ad535d944cf93ffd5db12bc7eb4b34aef739d35b8740640543c401570b2b2468ecce7ab17888c20009471b63c2fbda4d352c85783a4e3afa6c74f34c91fb4401aa884f875c8d0d76c11649fea8e89d01f783e60e55332486b15b525c372c9a638592db8b54427563df52bd2b59929a0caf4c2331eb0814c97c215d4680ffb6b8b2bf97c3a8b3a4f9b787d8b599020eda3ffd782379adc7cd4a58df947a76a78da0976bb22b716190d7fe1604534d98fe46666bd5fd4d3d9c7d502fc2f6a1fc3b18c739b774b73beeccd42513a27f76d789b04e541510b26a816a40ca80b7e3de4391842ae188226bdcabd84a252dcc6a38c9e9ff8bddda142b6703cdddb10c0f70e95ef1fdd4039a6ed14155e2063cc77170cb5ea9f561d14dd6ac7544025e3c046e80a1c045fc36b29b20aac0e0392f8bf4c57c74105ffda5946a20e30bac4ed15ce9d69ec40c8737823b4f7340148d0f6c1f3583216208e970f424c5bbc29ec6f5bf080326ef3807f151341e9ce6d18203ade02cb488cf4298a06bd1364f96edccd2e77aef7ed9f7d9c0daefcdc6433850b114997d1e32a623615f626d52d41bda88a6fecc2a499afb924d9c8bd49924dbddc57c1f3b8a5f2a0dfc3877c79d44f91a988d99efa5c870be18973bc6e0c671381f0477805fafb830656f5f88f01f3045fac9b434552d7e4de4d742a1ed045a8d75c294a179356bdc259a4a42f0ee38714a4bfd836b1f34e811b1903825c25f6ede56ce7e81e39658fb6277538c7ff069090af0db6b21cbccbd3458ed434b52434d059e202ca072a765989e70be0ce396eca9a207387b60e86f3262d30bd1bf98d3277f3205f79ecb6eae3441c2e06c016b2fc31ebfb91437e070f969b9d89a504648682c32fc08485c604204d3a0fdb42668eeb491165efc6367ac8385c273440d35b5e9eb4dea2551d634ce71cc87d70da1a7f3e048ef210948ff6e4a5801e8ddda2353dca4ec58ca7a36ee592b00673107f1831bdd1c56668ed38377ea682b06a1a1636cc625b73f184ef378a05e34e0d3a87037e6886ec9677d3ac7ee9854bfa790817fad0d13c85a7ed04184700db8e7242479774c6f307333498956590e6e98899901bc4ff7deb2adcc50ecfc16e29591bd4b5508a9fb7ad84edc3dcd457e19bd5a5cd562964c74183630d5d07d25d52809fcd879bccd926509a987f5e322ca84b7329f7e2dc6203f7144f430b095a72a1aa1d639f3ae74ebfcb232accbaa6091946c96668a7ce2ce366e27583c118c459fdfce1db2083c997290c7657a2936c7eb5a26817edf6f13fa54e1ac49e3d1423c206d89399892eac1ddddebbd5b2f04afdd503d13e7c50a9e353f1709ec04c95b5acdf52176676107715dd9e093e590c1c5b37e88289cde697143bc4fa6f51f7a5a458700a70cde922cc95172ce5df2db165b48e7d036ba5255a1763f528cd1d91b7a405aaf532e17f51c61368ad822af84a48449a8a73ad18d8370f29b08872e62727a688e19798e92c1241b1b5a15f16d04866d195a02c96d0d83c80e324e1287db23466d8f16063b8b62463fb976a23f68", 0x1000}, {&(0x7f00000030c0)="17d555f8e1f93f2f1f4ef0d7678790df57586433a3630e076426acfd372e345625c8787ba39cb5d69a3bfcb6386224bfd4cf1281c16ba641b0ac713f5176824ba7ac577e745e5223cc3e0067bb0ff0b142431fcc1479", 0x56}], 0x7, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], 0x260}}], 0x4, 0x4000040) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) getsockopt$inet6_tcp_buf(r6, 0x6, 0xb, 0x0, &(0x7f0000000080)) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_CLEAR_HALT(r7, 0x80045515, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="02aaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a00142c00fe8000000000000000000000000000000000000000000000aa2c", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) 5.388203639s ago: executing program 0 (id=1121): r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r0, 0x3048b000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0xd, 0x80000000, 0x9, 0x10, 0xfffffffa}]}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='kfree\x00', r5, 0x0, 0x2144}, 0x18) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="7a0a00ffe1ff0000711000030000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0xffffffffffffff3c, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="9691c1d88e297aeaa82c2e9971c65fdd1aced1461c82000133c90b8a588e0a9c9d265f59b87a7fb4d0920617a175989f8405b2950ca5bdc75f795a0d97d2624945c811ac0db203691f8f02be63421fe3bd35fac6957647510d6a22dcd8794645ca", @ANYRES16=r6, @ANYBLOB='ya \x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00'], 0x14}}, 0x0) 5.249466497s ago: executing program 5 (id=1122): socket(0xf, 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000f3ff00000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.189744758s ago: executing program 2 (id=1123): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) creat(0x0, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 64) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) (async) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0585605, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) (rerun: 64) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x38, r4, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x4d}, @void, @val={0xc, 0x99, {0xa0c, 0x14}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x38}}, 0x814) (async, rerun: 32) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (rerun: 32) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) sendmsg(r2, 0x0, 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r9 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) poll(&(0x7f00000000c0)=[{r9, 0xe7d4c009da6c19a5}, {r9, 0x201}], 0x2, 0x4) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000060027000000000008000a00a8"], 0x6c}}, 0x0) (async) r10 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r10, &(0x7f0000000140), 0x4924b68, 0x0) 5.08346204s ago: executing program 0 (id=1124): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0xffef}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}]}}}]}, 0x3c}}, 0x5821c98b097a09f2) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) pipe2$watch_queue(&(0x7f0000000100), 0x80) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000000)) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000900)={0x44, &(0x7f0000000440)=ANY=[@ANYBLOB="20090100000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.065901063s ago: executing program 5 (id=1125): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x36, 0xa9, 0xf7, 0x8, 0x471, 0x602, 0xf656, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x6e, 0x82, 0x0, 0x7f, 0xdf, 0xaf}}]}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x1, 0x1, 0x8, 0x90, 0x6, [{{0x9, 0x4, 0x0, 0x3e, 0x3, 0x2, 0x6, 0x0, 0x9, {{0x6, 0x24, 0x6, 0x0, 0x0, "90"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3c78b8e8, 0xfca, 0xff80, 0x1}, [@dmm={0x7, 0x24, 0x14, 0x4, 0xfffe}, @acm={0x4}, @mdlm={0x15, 0x24, 0x12, 0x4}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x7, 0x1, 0x17}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xf, 0x5, 0x3}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x8, 0x7, 0x6d, 0x40, 0x3}, 0x48, &(0x7f0000000100)={0x5, 0xf, 0x48, 0x4, [@generic={0x14, 0x10, 0xa, "d6bc8126455b9c36407171c7ae5f57ed58"}, @ss_container_id={0x14, 0x10, 0x4, 0x11, "a448a1c3afd2c6e5b59b5238f73f5fb3"}, @ss_container_id={0x14, 0x10, 0x4, 0x5e, "7ecab0dc1a12fc167b465a44d9aa23a8"}, @ext_cap={0x7, 0x10, 0x2, 0x3ad6ad2b81d5e27c, 0x5, 0x8, 0x5}]}, 0x6, [{0xf7, &(0x7f0000000180)=@string={0xf7, 0x3, "50d01185fdb56a6822a60a8ef11fbf158b2596d85368d48dbeb79f1b84447a53fa148a7d5e90538889323444f1bd12d4925a3c4f789f854efaa6efad2c7bf733ef5730788b06d0bfdff2f02a3dd2564aa5cf1cd4f7e38420be214e65884095a614517ba5cd2867e4a2b602980d0a1dbf96d8d2093da25398fecceb49955bfdafda540fc62cbabef01cd5d58c4608e481a5786182b5c5283d098a318315ff60c5b36e8cf86fbbf6cfe896e6b537d9fbf833963e13fd9b4725d9976915f1366c478ade1361f52f6f2abdcc1f923804250cd5a7ac7cdd65e41653bb8cd70c7a3f30407d1292a011a49dfe93310735e88a1b8f75d77013"}}, {0xba, &(0x7f0000000280)=@string={0xba, 0x3, "59454ef232e2e63f0b3120115247c4f43ee2f7cc6aef981b3437ca3388a9ac2abf99288b0a623be239a4ebe726ded440c4b53683c0868816585247309f18485f1bc29e7810ea57aa87f460aaa74f2b3c99eee26f4a845a3511cb226925b4940880e61df50fb70b0b73dd8d68d8bcf5455f5840099d25f66e1cad2abe8551744d470cc782f74367c2f1643ad51d03b8b91c102cb6b0a176e56f88d9e29b7a7e406f3b3408b5ce2b2dc950427da7c57733ca7b57fc64c51168"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x180c}}, {0x25, &(0x7f0000000380)=@string={0x25, 0x3, "af09a8ca3db112bd106812f11af1174989c7b248af2198eb166784e2af13748ae9affe"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x180c}}, {0xc6, &(0x7f0000000400)=@string={0xc6, 0x3, "a0bf08bd1334a7f4a5a6cb109b0fae93afaf76be479db6bb330c4ac965cf3a5cb89c3b4a883ce3bc68308f0b80fec17de32a998f1ac15e01e9d21c6b80e80cde6b3f8fb84aef00933f64df66f08eb15ad6b14cfe06e1cdef0275f0dd7043b19a1ce837bd22eba3caf8d796fa71a3f18adf16751e9a556cba0e818cd1485a9e967205dd0b9adda1e3c74562f596739561e39cba5c983980ec7a3d7e460e84a99239cad956899ea4126a03bf2317aaa866498c23ea9ff9a65dfa8faaa17b6d6f6bad0e8a52"}}]}) 4.733984451s ago: executing program 6 (id=1126): r0 = socket$l2tp(0x2, 0x2, 0x73) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x3, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000e700000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r3, &(0x7f0000000080)=[{0x31, 0x8, 0x0, 0xfd, @time={0x5, 0x1}, {0x8}, {0xe}, @connect={{}, {0x1}}}], 0x1c) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) getsockname$l2tp(r0, 0x0, &(0x7f0000000300)) 4.613798382s ago: executing program 6 (id=1127): sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be12020506050e0204094300090007000c", 0x23, 0x0, 0x0, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x1000, @dev={0xfe, 0x80, '\x00', 0x4}, 0x9}, 0x1c) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10a, 0x10a, 0x6, [@ptr={0xe, 0x0, 0x0, 0x2, 0x2}, @float={0x5, 0x0, 0x0, 0x10, 0x8}, @type_tag={0x10, 0x0, 0x0, 0x12, 0x3}, @const={0x7, 0x0, 0x0, 0xa, 0x1}, @struct={0x9, 0x6, 0x0, 0x4, 0x0, 0x3, [{0x10, 0x3, 0x8}, {0xf, 0x0, 0xdf0e}, {0xd, 0x1, 0xfff}, {0x2, 0x3, 0x3}, {0x10, 0x4, 0x7}, {0x4, 0x3, 0x6}]}, @datasec={0x6, 0x1, 0x0, 0xf, 0x1, [{0x3, 0x4f, 0x5}], '\x00'}, @typedef={0x2, 0x0, 0x0, 0x8, 0x1}, @datasec={0xe, 0x6, 0x0, 0xf, 0x1, [{0x2, 0xfffffff4, 0x8}, {0x3, 0xa42f, 0x5}, {0x2, 0x101, 0x7ff}, {0x5, 0x80000001, 0x80000000}, {0x4, 0x8, 0x7}, {0x5, 0x15, 0x7ff}], "cc"}, @ptr={0x6, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x49, 0x30, 0x5f, 0xbddc0d56e05d2ad9]}}, &(0x7f00000001c0)=""/74, 0x12a, 0x4a, 0x0, 0x1, 0x10000}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', r1, r2, 0x0, 0x5, 0x1}, 0x50) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000240)) (async) timer_create(0xfffffffffffffff8, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000001100)={{0x0, 0x3938700}}, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x10000, 0x10, 0x80, 0x8000, 0x0, [{0xb, 0x13, 0x4, '\x00', 0x6}, {0x6, 0x9, 0x8}, {0x10, 0x9, 0xfd, '\x00', 0x4}, {0x72, 0x9d, 0x2, '\x00', 0xff}, {0x0, 0xf0, 0x9f, '\x00', 0x3}, {0x7, 0x9, 0x5, '\x00', 0x68}, {0xf6, 0x4, 0x6, '\x00', 0x9}, {0x6, 0xff, 0x3, '\x00', 0x1}, {0x10, 0x3, 0x7, '\x00', 0x3}, {0xff, 0xd1, 0x2, '\x00', 0x2}, {0x8, 0x6, 0x40, '\x00', 0x5}, {0x6, 0x2, 0x7, '\x00', 0x1}, {0x2, 0x9, 0x9, '\x00', 0x1}, {0x0, 0x4, 0x2, '\x00', 0x7}, {0x7, 0x0, 0x3, '\x00', 0x8}, {0xf8, 0x4, 0x0, '\x00', 0x5}, {0x4, 0x1, 0xfd, '\x00', 0x5}, {0xfa, 0x4, 0x6, '\x00', 0x9}, {0x61, 0x8, 0xf1}, {0x69, 0x87, 0x8, '\x00', 0x2}, {0x8, 0x2, 0xe0, '\x00', 0xa}, {0x4, 0x31}, {0x6, 0x4, 0x0, '\x00', 0x80}, {0x3d, 0xb, 0x7, '\x00', 0x80}]}}) (async) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) setrlimit(0x0, &(0x7f00000000c0)={0xffffffff, 0xffffffffffffffff}) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000340)=ANY=[@ANYBLOB='0'], 0x30}], 0x1}, 0x0) (async) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_CHANINFO(r6, 0x80306403, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f000003c180)}) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000400)=ANY=[], 0x0) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a00)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010102, @in6=@private1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private0, 0x0, 0x6c}, @in6=@remote, {0x0, 0x40, 0x0, 0x0, 0x80000008, 0x1f6}, {}, {}, 0x0, 0x3505, 0xa, 0x1, 0x0, 0x2c}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}, 0xfffffffffffffd2c}}]}, 0x138}}, 0x0) (async) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 4.385454647s ago: executing program 2 (id=1128): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, 0x1411, 0x1, 0x8070bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040084}, 0x40) 3.659855481s ago: executing program 7 (id=1129): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) connect$netlink(r1, &(0x7f00000000c0)=@unspec, 0xc) 3.513883977s ago: executing program 0 (id=1130): socket$key(0xf, 0x3, 0x2) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) unshare(0x22020600) (async, rerun: 32) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async, rerun: 32) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) (async, rerun: 64) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "345aa3593519c7e1", "e8a1056a7c356ba2b862ef93136b1587", "28bc90f4", "790f59276094db31"}, 0x28) (async, rerun: 64) sendto$inet6(r5, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) write$binfmt_aout(r5, 0x0, 0xfdef) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f0000000400)}, 0x10) (async) sendto$inet6(r5, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a", 0xf, 0x8040, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0x40045542, &(0x7f0000000300)=0x1) write$binfmt_elf64(r5, 0x0, 0x78) (async) sendto$inet6(r5, &(0x7f0000000100)="cb965843c27e8d8771dcf31de97bd754cb5c740a6ed126", 0x17, 0x48c5, &(0x7f00000001c0)={0xa, 0x4e21, 0x4, @mcast2, 0x8}, 0x1c) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 3.401279823s ago: executing program 7 (id=1131): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000000, &(0x7f0000000180)=0x1, 0x4) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000100)={0x28, 0x7, r2, 0x0, &(0x7f0000ff0000/0x10000)=nil, 0x10000}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000100)={0x28, 0x7, r2, 0x0, &(0x7f0000ff0000/0x10000)=nil, 0x10000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r2}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff}) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, &(0x7f0000001400)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}) (async) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, &(0x7f0000001400)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, &(0x7f0000000200)={0x48, 0x8, r3, 0x0, 0x0, 0x1, &(0x7f0000000040)='?', 0x5}) 3.30300933s ago: executing program 7 (id=1132): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f00000005c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x0, @local, 0x1}, r2}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x711, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}, {0xa, 0x4e20, 0x0, @loopback, 0x7}, r2, 0x3ff}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {r2, 0x5}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="8000000002000200080004000000000008001b"], 0x30}}, 0x0) 3.206008385s ago: executing program 0 (id=1133): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRESDEC], 0x14}, 0x1, 0x8000000000000, 0x0, 0x8040}, 0x8004) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='p\x00@\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fedbdf250900000008000500be0000001400038005000800ff000000080001"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x5) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1b, 0x55, 0x8, 0x0, 0x0, {0xa}, [@typed={0xc, 0x68, 0x0, 0x0, @u64=0xd}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000c0}, 0x40010) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB="ebd4d60dabb51cc42895db9ddbc7027ec4e235eac6c0831f27d73f10852953d0dc3afe2f91bd0c5e3fe893fe3014c15b07d3730204577e731a009de758d7c9ed349a3d2894ddf15a7c975ea19d7d9d04fa77a263ff8f20670e7bee5b68b6e7e119b38c36e69b7f85ac1a9cb306af849adbd90dce75f9750a5180382c2a5b5493926fe299", @ANYBLOB="010027bd70000000000067db000008000334", @ANYRES32=0x0, @ANYRESDEC], 0x34}, 0x1, 0x0, 0x0, 0x4840}, 0x8080) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c81, 0xffffffffffffffb6) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r6, 0x5608, 0x3) r7 = socket(0x28, 0x5, 0x0) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0x8) r9 = accept4(r8, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) setrlimit(0x8, 0x0) listen(r7, 0x8b) 3.202032521s ago: executing program 2 (id=1134): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x1, 0x0, {0xa, 0x4e23, 0x3, @private1, 0x7}}}, 0x26) 2.78017446s ago: executing program 7 (id=1135): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x103, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @host}, 0x10, 0x800) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r5 = io_uring_setup(0x79bf, &(0x7f0000000180)={0x0, 0x0, 0x10000, 0x0, 0x386}) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000080), 0x10) listen(r6, 0x0) accept4$llc(r6, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r4, 0x0, 0x1) fchdir(r7) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') r9 = fanotify_init(0x1, 0x40000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) connect$inet(0xffffffffffffffff, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x5e3, 0x0) r10 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x50) syz_emit_ethernet(0x3e, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60f6c5730008000000000000000000000000000000000000fe8000000000000000000000200000000000010400000060"], 0x0) readv(r9, 0x0, 0x0) fanotify_mark(r9, 0x1, 0x40001019, r10, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.314009414s ago: executing program 7 (id=1136): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x8800) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="b702000000001700bfa300000000000007030000f0ffffff720af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee2922bd165a5a68488e010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7f22b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d74bf0a305790c9d644735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f535447cc0facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf00000048d2570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f09f4db033e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e7f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec50f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754d98b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8cf632c2604eab3a62a28611da1cae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412e1bdebae06edb51a134301b4627d4927287daf9dcae6720334862f3a18094f1edd9e3503379815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2f09e99f4ab5546ba1e5ad6a329f24e73a9c38eec34bd4dcc1609f6150e2de72f6599a2310c3841f4bb7f39cabc82c9fdfff5587ed4fa84090635fa3445c4cc54478b2f98320944ac7cb1c4e414556f7b0b763a00a84327cec7e11b3470f0384b27bbfdd8b2472497e7fe8c5df7e0a00641872472efa21c9ad3979e642dcc85c17ca8e084aa9689b83426e2fdaa01f500000000000000000000f9fd84fa991466ff749afe900d02281b2bb60d458340c4f68ec34835760ceca945bf181a000000c000000000b4a76515564ae189de7c1765f0ff68a0388ca8dd2aa831d0e01f0d7ce74401a58cef60e63e97a50c18de54121ce66380224ab7b9c0d4710f2347bad2c9b3e41cc738c1092728687f33e5cdb077223dc82c2137b4e3ba6791a2cd764e654f904c9505b7c5e3b2897072e747534952dcda50cde3e4deb6ebf85a04c3e415112b01eed6515c845a8a20519cd21787d560e9d8283fa8ff0c17b63ba06577c26678ff45420a1f85df47dbfc44e534f71aae5693fb5df61c5096219091ce0cd8e1e2e79bf9d37779e52007c66a00e6ded1499ed3892ed1544d1577906b52e16c734d4aec07dd15faa768c97298be87dd34ce704ffe3da8b46708cf972de4f31c0705ac933db80bdcfcb35c0d4620d4ec270ff7c9ce1b78994dd2b28b9d1c5c469d4c1a61781dce2f1b54d6138bd3f7df9e9ca613bec407c1b8d1bd0c7cb9d76eebf2f17c"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xc463f262, 0x10, &(0x7f0000000040)}, 0x48) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r2, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000bc0)={@local, @empty, @void, {@ipv6={0x86dd, @dccp_packet={0x6, 0x6, "ec4b23", 0x10, 0x21, 0x1, @dev={0xfe, 0x80, '\x00', 0x20}, @private2={0xfc, 0x2, '\x00', 0x1}, {[], {{0x4e20, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, "05c95d", 0x0, "c5263b"}}}}}}}, 0x0) sched_setattr(0x0, 0x0, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) io_setup(0x5, &(0x7f0000000200)) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x4442) getpid() openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, &(0x7f0000001dc0)={0x8, 0x72, 0x80000}, 0x20) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') getdents64(r5, &(0x7f0000002f40)=""/4098, 0x1002) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000c40)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @random="ad446050e878"}, 0x14) 2.298262739s ago: executing program 0 (id=1137): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) epoll_create(0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r4}, 0x10) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='Rm\t\x00\x00\x00s=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="2c63616368657461673d14e2c311e2cb86c82d4873c6af6ddc7bde3c511a1315e4f85948a98ae388123b56361ed3cc4c3e5523eb70372d9fb8f341b24358d32f2fdd32382b9d53229b6d19d04b3461e6fbdbf7e44bb5c8945f07e63191e43c40c3372b9cb2e8453d54d5b127c3770c27d497f8bae8a00a8dc7c97fa81d88a317caa5657f596a825ae94ba0545c87758c6f4c077cc8665e0104e48e0ffe16a747d4a1efc5a76b1d45b09d2169995c5e5c5d473f452bcd7df769e2a28d4557abdc8ce959b1c8c49721bcf4efc90376f320b2c5d5f024a04b4435f49ce10dc4a0d127ad43b75a0c5b74d1ad596b90763c69649202169de1726d6b5590993406e55c80fb2c00"]) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001200050100000000fedbdf25050019000000000a0101020000000000000000000000000a000609"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20040810) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, 0x0) syz_open_dev$usbfs(0x0, 0x75, 0x40082) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000300)={{@host, 0xd}, 0x1}) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') read$FUSE(r8, &(0x7f00000024c0)={0x2020}, 0x2020) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102387, 0x18ff3, 0x10000a) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000002280)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000200000008000000000000100800000008000000000000110200000004000000000021ef00245bfc71de7e3d8fb591616fa08927696ec707d84007d4f4d97be09579837930a4d6336b88d74d5c0ad4ffc8cfc5dc5410465423e85948bc9d250d70fb37d14919fc80252c450546751be32a16a3361c94e37d5917f2ee158edd8195232f3d865a6d8da55c653142bba475b69543c22cf6195fdccd9c0152ab6d4353dcbebf3e9dd1ad3c597a1afa7913596cf4"], 0x0, 0x36, 0x0, 0x1, 0x1}, 0x28) setitimer(0x2, &(0x7f0000000340)={{0x77359400}, {0x7fffffffffffffff}}, 0x0) 2.013080208s ago: executing program 2 (id=1138): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000180)) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r3, 0x10c, 0x2, &(0x7f0000000000)=0xfffffffc, 0x4) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000640)={0x0, 0x0}) sched_setaffinity(r8, 0x8, &(0x7f0000000680)=0x5) write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r9 = dup(r7) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) r10 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r10, &(0x7f0000000080)={0x2, 0x1, @empty}, 0x10) getsockname$l2tp(r10, 0x0, &(0x7f0000000300)) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="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", 0xfb, 0x80, &(0x7f00000001c0)={0x2, 0x4e23, @empty}, 0x10) setsockopt$IP_VS_SO_SET_EDITDEST(r10, 0x0, 0x489, &(0x7f0000000000)={{0x0, @multicast1, 0x4e23, 0x2, 'sh\x00', 0x11, 0x81, 0x6a}, {@private=0xa010101, 0x4e24, 0x1, 0x0, 0x0, 0xc8}}, 0x44) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r13, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xa090120}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="00082cbd7000fddbdf2500000000080018000000000014002000000000009cad8c601f313b27a507000000000000000000000000060001000b0000000c001600ff7f000000000000060003000500000001001200f600000005001300bf00000008001800ac14143d806420afcfb015d2b7f297dcba41051cd6c831883d5e096fb8974ae5a9b70888c23b7f7a2c8d739941cbbb7b7a596e20726b9cff39947b"], 0x64}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) 1.889908788s ago: executing program 5 (id=1139): socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) socket(0x10, 0x803, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) (async) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000bd3000/0x2000)=nil}) (async, rerun: 32) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (rerun: 32) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4048aecb, &(0x7f0000000080)) 1.621787158s ago: executing program 2 (id=1140): r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x803, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000ffef00000100000000000001"], 0x0, 0x4e, 0x0, 0x2}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000f70000000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="010000000100"/28], 0x50) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r8 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r7, {r8}}, './file1\x00'}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="c00000001000010025bd7000f9dbdf2500000000", @ANYRES32, @ANYBLOB="3809040003000000a00016803c0001800c00040009000000000040020c000400ffffff7f"], 0xc0}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_emit_vhci(0x0, 0x0) 1.585591076s ago: executing program 6 (id=1141): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) connect$netlink(r1, &(0x7f00000000c0)=@unspec, 0xc) 1.43313946s ago: executing program 6 (id=1142): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000080), 0x4) r1 = socket$caif_seqpacket(0x25, 0x5, 0x5) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fedbdf254a0000000eb9f79656657464657673696d0000d6821b26006e65746465f673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000080) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x2d, &(0x7f0000000000)=0x92d2, 0x4) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000540), 0x86c02, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi5\x00', 0x70000, 0x0) ioctl$COMEDI_SETWSUBD(r6, 0x6411) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x20400) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000001740)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f0000001780)={0x1d, r8}, 0x10) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r7, 0xc01864b0, &(0x7f0000000740)={0x0, 0x0, 0xc, 0x0, 0x8}) ioprio_get$pid(0x2, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000580), 0x7fffffff, 0x2) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000040)) r10 = shmget$private(0x0, 0x1000, 0xa48, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_UNLOCK(r10, 0xc) ioctl$vim2m_VIDIOC_ENUM_FMT(r9, 0xc0405602, &(0x7f0000000240)={0x8, 0x1, 0x0, "f85a03f0521a2f0000000000000000000000000000000000ffff00", 0x36314d59}) recvmmsg(r1, &(0x7f00000016c0)=[{{&(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}], 0x1, &(0x7f0000000140)=""/87, 0x57}, 0x4}, {{&(0x7f00000001c0)=@nl=@proc, 0x80, &(0x7f0000000480)=[{&(0x7f0000000240)=""/141, 0x8d}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/16, 0x10}], 0x5, &(0x7f00000015c0)=""/221, 0xdd}}], 0x2, 0x12140, &(0x7f0000000500)={0x0, 0x989680}) 516.641146ms ago: executing program 6 (id=1143): r0 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x9, @loopback, 0x4}, 0x1c, &(0x7f0000000380)}, 0x4048043) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x7f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, 0x0) read$FUSE(r2, &(0x7f0000002940)={0x2020}, 0xfffffffffffffcc5) timer_create(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) mount(&(0x7f0000000400)=@nullb, &(0x7f0000000040)='./file0\x00', 0x0, 0x281847e, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x3, 0x3, 0x5, 0x2f, 0x7, 0x7, 0x5, 0xffe, 0x1, 0x0, 0x1, 0x1003, 0x6, 0xffff, 0xffff, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x3, 0x10, 0x0, 0x8, 0xe2df, 0x746f, 0x8, 0x5, 0x3, 0x1, 0x4, 0x8049]}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x50}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41310, 0x49400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 298.13689ms ago: executing program 2 (id=1144): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, 0x1411, 0x1, 0x8070bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040084}, 0x40) 125.960684ms ago: executing program 0 (id=1145): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f00000005c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x0, @local, 0x1}, r2}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x711, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}, {0xa, 0x4e20, 0x0, @loopback, 0x7}, r2, 0x3ff}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {r2, 0x5}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="8000000002000200080004000000000008001b"], 0x30}}, 0x0) 20.476438ms ago: executing program 5 (id=1146): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b000)=""/102400, 0x19000) (async) r2 = getpid() r3 = io_uring_setup(0x30a3, &(0x7f0000000000)={0x0, 0x9dd9, 0x4000, 0x2, 0xa2}) (async, rerun: 32) r4 = syz_pidfd_open(r2, 0x0) (rerun: 32) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async, rerun: 32) r6 = socket$rds(0x15, 0x5, 0x0) (rerun: 32) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) sendmsg$rds(r6, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f00000009c0)=""/4078, 0xfee}], 0x1}, 0x0) (async) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async, rerun: 64) sendmsg$xdp(r5, &(0x7f0000000180)={0x0, 0xfffffffffffffe6c, 0x0, 0x49, 0x0, 0x0, 0x20040800}, 0x4000800) (async, rerun: 64) open_by_handle_at(r4, 0x0, 0x56100) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) (async) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') (async, rerun: 32) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (rerun: 32) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1b) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000036000/0x18000)=nil, 0x0, 0x0, 0x49, 0x0, 0x0) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r8, 0x118, 0x1, &(0x7f0000000080)=0x10003a4, 0x4) (async) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]}) (async, rerun: 32) add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) (rerun: 32) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x20000810}, 0x4000004) (async) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000019c0)=ANY=[@ANYRES16=0x0, @ANYRES16=r4, @ANYRESHEX=r3, @ANYRES8=r6, @ANYBLOB="5fd5ef2e0d19f83020b2fdb6b0540088d7e16f8aa01d025257ae67054dc9356334812cde93fa259d90d8ce4a0b577f7f0e6ae3fd6a059df74d76756a156e19183152f88ab7079042388333ef1403a7ee04d6cfea83bbf504eeed9ef30fe110465745564aa2032168dd3b9070b427d34633a71802e1837f9e2dd0e9e432652d709162", @ANYBLOB="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", @ANYRESDEC=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2404c004}, 0x28000010) 0s ago: executing program 7 (id=1147): inotify_init() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x7c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x400c0}, 0x801) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000040)=0x2cd, 0x4) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r6 = dup2(r5, r5) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r7, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRESOCT=r5, @ANYRES32=r8, @ANYRESDEC=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4044041}, 0x20000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2699493cdc459a9bafd5f54c0f7e8fe01c00000018b3afda155c02b52a00245b385c43206aac4e82616d00001dc4fd9902000004000000061072dc6a"], 0x1c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r11, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}, 0xd0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080), 0x3, 0x200) kernel console output (not intermixed with test programs): [ 260.467995][ T8827] aio_ao12_4 [ 260.494998][ T8827] comedi: valid board names for fl512 driver are: [ 260.542759][ T8850] can0: slcan on ttyS3. [ 260.550264][ T8827] fl512 [ 260.562405][ T8827] comedi: valid board names for dmm32at driver are: [ 260.604544][ T8827] dmm32at [ 260.643998][ T8827] comedi: valid board names for dt282x driver are: [ 260.680228][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 260.690299][ T8827] dt2821 [ 260.715396][ T8827] dt2821-f [ 260.718578][ T8827] dt2821-g [ 260.800387][ T8827] dt2823 [ 260.997688][ T8827] dt2824-pgh [ 261.077545][ T8827] dt2824-pgl [ 261.369334][ T24] usb 7-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 261.372071][ T5169] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 261.378653][ T5848] Bluetooth: hci0: command 0x1407 tx timeout [ 261.378745][ T8827] dt2825 [ 261.378760][ T8827] dt2827 [ 261.378766][ T8827] dt2828 [ 261.378772][ T8827] dt2829 [ 261.378779][ T8827] dt21-ez [ 261.378785][ T8827] dt23-ez [ 261.378791][ T8827] dt24-ez [ 261.378798][ T8827] dt24-ez-pgl [ 261.378805][ T8827] comedi: valid board names for dt2817 driver are: [ 261.378814][ T8827] dt2817 [ 261.378820][ T8827] comedi: valid board names for dt2815 driver are: [ 261.378828][ T8827] dt2815 [ 261.378834][ T8827] comedi: valid board names for dt2814 driver are: [ 261.378842][ T8827] dt2814 [ 261.378848][ T8827] comedi: valid board names for dt2811 driver are: [ 261.378855][ T8827] dt2811-pgh [ 261.458269][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.486638][ T24] usb 7-1: Product: syz [ 261.490343][ T8827] dt2811-pgl [ 261.500310][ T24] usb 7-1: Manufacturer: syz [ 261.506593][ T24] usb 7-1: SerialNumber: syz [ 261.511330][ T8827] comedi: valid board names for dt2801 driver are: [ 261.531124][ T24] usb 7-1: config 0 descriptor?? [ 261.553136][ T24] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 261.694757][ T8827] dt2801 [ 261.804547][ T8827] comedi: valid board names for das6402 driver are: [ 261.833300][ T5848] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 261.859810][ T8827] das6402-12 [ 261.864690][ T5848] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 261.866007][ T8827] das6402-16 [ 261.880651][ T5848] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 261.920888][ T5848] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 261.929765][ T5848] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 262.014610][ T8827] comedi: valid board names for das1800 driver are: [ 262.069812][ T8827] das-1701st [ 262.074749][ T8827] das-1701st-da [ 262.098623][ T8827] das-1702st [ 262.130569][ T8827] das-1702st-da [ 262.134154][ T8827] das-1702hr [ 262.137425][ T8827] das-1702hr-da [ 262.193203][ T8835] can0 (unregistered): slcan off ttyS3. [ 262.225000][ T8827] das-1701ao [ 262.239202][ T8827] das-1702ao [ 262.244214][ T8827] das-1801st [ 262.247548][ T8827] das-1801st-da [ 262.255715][ T8827] das-1802st [ 262.259070][ T8827] das-1802st-da [ 262.275116][ T8827] das-1802hr [ 262.284278][ T8827] das-1802hr-da [ 262.291709][ T8827] das-1801hc [ 262.299372][ T8827] das-1802hc [ 262.317284][ T8827] das-1801ao [ 262.327667][ T8827] das-1802ao [ 262.354402][ T8860] lo speed is unknown, defaulting to 1000 [ 262.373638][ T8827] comedi: valid board names for das800 driver are: [ 262.391517][ T8827] das-800 [ 262.400549][ T8827] cio-das800 [ 262.406141][ T8827] das-801 [ 262.427428][ T8827] cio-das801 [ 262.440439][ T8827] das-802 [ 262.450324][ T8827] cio-das802 [ 262.463858][ T8827] cio-das802/16 [ 262.468589][ T8827] comedi: valid board names for isa-das08 driver are: [ 262.530800][ T8827] isa-das08 [ 262.535511][ T8827] das08-pgm [ 262.548886][ T8827] das08-pgh [ 262.566875][ T8827] das08-pgl [ 262.580755][ T8827] das08-aoh [ 262.586814][ T8827] das08-aol [ 262.630830][ T8827] das08-aom [ 262.689423][ T8827] das08/jr-ao [ 262.777560][ T8827] das08jr-16-ao [ 262.788508][ T8827] pc104-das08 [ 262.853978][ T8827] das08jr/16 [ 262.857311][ T8827] comedi: valid board names for das16m1 driver are: [ 262.883892][ T8827] das16m1 [ 262.886963][ T8827] comedi: valid board names for dac02 driver are: [ 262.895898][ T8827] dac02 [ 262.900430][ T8827] comedi: valid board names for rti802 driver are: [ 262.906960][ T8827] rti802 [ 262.920213][ T8827] comedi: valid board names for rti800 driver are: [ 262.940378][ T8827] rti800 [ 262.989328][ T8827] rti815 [ 263.002034][ T8827] comedi: valid board names for pcm3724 driver are: [ 263.018669][ T8827] pcm3724 [ 263.040342][ T8827] comedi: valid board names for pcl818 driver are: [ 263.063787][ T8860] chnl_net:caif_netlink_parms(): no params data found [ 263.077374][ T8827] pcl818l [ 263.082060][ T8827] pcl818h [ 263.085087][ T8827] pcl818hd [ 263.088204][ T8827] pcl818hg [ 263.093567][ T8827] pcl818 [ 263.096738][ T8827] pcl718 [ 263.099726][ T8827] pcm3718 [ 263.102972][ T8827] comedi: valid board names for pcl816 driver are: [ 263.109465][ T8827] pcl816 [ 263.112887][ T8827] pcl814b [ 263.115907][ T8827] comedi: valid board names for pcl812 driver are: [ 263.122468][ T8827] pcl812 [ 263.125750][ T8827] pcl812pg [ 263.129228][ T8827] acl8112pg [ 263.140494][ T8827] acl8112dg [ 263.144165][ T8827] acl8112hg [ 263.147803][ T8827] a821pgl [ 263.153298][ T8827] a821pglnda [ 263.156846][ T8827] a821pgh [ 263.160218][ T8827] a822pgl [ 263.160280][ T8846] netlink: 36 bytes leftover after parsing attributes in process `syz.6.666'. [ 263.163233][ T8827] a822pgh [ 263.163242][ T8827] a823pgl [ 263.163247][ T8827] a823pgh [ 263.163252][ T8827] pcl813 [ 263.163259][ T8827] pcl813b [ 263.163264][ T8827] acl8113 [ 263.163270][ T8827] iso813 [ 263.163276][ T8827] acl8216 [ 263.163282][ T8827] a826pg [ 263.163289][ T8827] comedi: valid board names for pcl730 driver are: [ 263.206153][ T8871] FAULT_INJECTION: forcing a failure. [ 263.206153][ T8871] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 263.220652][ T8871] CPU: 0 UID: 0 PID: 8871 Comm: syz.2.670 Not tainted syzkaller #0 PREEMPT(full) [ 263.220677][ T8871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 263.220683][ T8871] Call Trace: [ 263.220687][ T8871] [ 263.220691][ T8871] dump_stack_lvl+0x16c/0x1f0 [ 263.220716][ T8871] should_fail_ex+0x512/0x640 [ 263.220740][ T8871] _copy_from_user+0x2e/0xd0 [ 263.220758][ T8871] kstrtouint_from_user+0xd6/0x1d0 [ 263.220769][ T8871] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 263.220780][ T8871] ? __lock_acquire+0xb97/0x1ce0 [ 263.220803][ T8871] proc_fail_nth_write+0x83/0x220 [ 263.220816][ T8871] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 263.220832][ T8871] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 263.220843][ T8871] vfs_write+0x29d/0x11d0 [ 263.220863][ T8871] ? __pfx___mutex_lock+0x10/0x10 [ 263.220884][ T8871] ? __pfx_vfs_write+0x10/0x10 [ 263.220903][ T8871] ? __fget_files+0x20e/0x3c0 [ 263.220918][ T8871] ksys_write+0x12a/0x250 [ 263.220928][ T8871] ? __pfx_ksys_write+0x10/0x10 [ 263.220939][ T8871] ? fdget+0x187/0x210 [ 263.220952][ T8871] do_syscall_64+0xcd/0x4c0 [ 263.220967][ T8871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.220978][ T8871] RIP: 0033:0x7f9fc5d8d65f [ 263.220986][ T8871] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 263.221000][ T8871] RSP: 002b:00007f9fc6b7d030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 263.221017][ T8871] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9fc5d8d65f [ 263.221027][ T8871] RDX: 0000000000000001 RSI: 00007f9fc6b7d0a0 RDI: 0000000000000004 [ 263.221035][ T8871] RBP: 00007f9fc6b7d090 R08: 0000000000000000 R09: 0000000000000000 [ 263.221044][ T8871] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 263.221053][ T8871] R13: 00007f9fc5fd6128 R14: 00007f9fc5fd6090 R15: 00007ffe9836ac68 [ 263.221069][ T8871] [ 263.221507][ T8827] pcl730 [ 263.324846][ T24] gspca_sonixj: reg_w1 err -71 [ 263.325582][ T8827] iso730 [ 263.331408][ T24] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 263.357657][ T8827] acl7130 [ 263.366883][ T24] usb 7-1: USB disconnect, device number 3 [ 263.428467][ T8827] pcm3730 [ 263.452980][ T8827] pcl725 [ 263.455957][ T8827] p8r8dio [ 263.467551][ T8827] acl7225b [ 263.471188][ T8827] p16r16dio [ 263.474419][ T8827] pcl733 [ 263.477625][ T8827] pcl734 [ 263.478795][ T8860] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.488071][ T8860] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.496978][ T8827] opmm-1616-xt [ 263.500678][ T8860] bridge_slave_0: entered allmulticast mode [ 263.501880][ T8860] bridge_slave_0: entered promiscuous mode [ 263.514546][ T8827] pearl-mm-p [ 263.515274][ T8860] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.524984][ T8860] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.528005][ T8827] ir104-pbf [ 263.532223][ T8860] bridge_slave_1: entered allmulticast mode [ 263.533374][ T8860] bridge_slave_1: entered promiscuous mode [ 263.542410][ T8827] comedi: valid board names for pcl726 driver are: [ 263.564140][ T8827] pcl726 [ 263.567113][ T8827] pcl727 [ 263.571643][ T8827] pcl728 [ 263.574697][ T8827] acl6126 [ 263.577716][ T8827] acl6128 [ 263.580824][ T8827] comedi: valid board names for pcl724 driver are: [ 263.590790][ T8827] pcl724 [ 263.593748][ T8827] pcl722 [ 263.596673][ T8827] pcl731 [ 263.599713][ T8827] acl7122 [ 263.603103][ T8827] acl7124 [ 263.605935][ T8860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.606118][ T8827] pet48dio [ 263.619354][ T8827] pcmio48 [ 263.622507][ T8827] onyx-mm-dio [ 263.625899][ T8827] comedi: valid board names for pcl711 driver are: [ 263.629061][ T8860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.632641][ T8827] pcl711 [ 263.632652][ T8827] pcl711b [ 263.632658][ T8827] acl8112hg [ 263.632664][ T8827] acl8112dg [ 263.632670][ T8827] comedi: valid board names for amplc_pc263 driver are: [ 263.632679][ T8827] pc263 [ 263.664245][ T8827] comedi: valid board names for amplc_pc236 driver are: [ 263.672250][ T8827] pc36at [ 263.675186][ T8827] comedi: valid board names for amplc_dio200 driver are: [ 263.682284][ T8827] pc212e [ 263.685218][ T8827] pc214e [ 263.688140][ T8827] pc215e [ 263.691145][ T8827] pc218e [ 263.694084][ T8827] pc272e [ 263.697015][ T8827] comedi: valid board names for comedi_parport driver are: [ 263.699339][ T8860] team0: Port device team_slave_0 added [ 263.704253][ T8827] comedi_parport [ 263.704263][ T8827] comedi: valid board names for comedi_test driver are: [ 263.704271][ T8827] comedi_test [ 263.704277][ T8827] comedi: valid board names for comedi_bond driver are: [ 263.704285][ T8827] comedi_bond [ 263.745901][ T8860] team0: Port device team_slave_1 added [ 264.010481][ T5169] Bluetooth: hci6: command tx timeout [ 264.011456][ T8860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.047545][ T8860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.393572][ T8860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.513150][ T8860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.542390][ T1204] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 264.615175][ T8860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.853588][ T8860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.950411][ T1204] usb 6-1: Using ep0 maxpacket: 16 [ 264.957971][ T1204] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.968284][ T1204] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 265.406151][ T30] audit: type=1400 audit(1757502797.126:683): avc: denied { map } for pid=8893 comm="syz.6.676" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 265.591192][ T30] audit: type=1400 audit(1757502797.126:684): avc: denied { execute } for pid=8893 comm="syz.6.676" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 265.614988][ C1] vkms_vblank_simulate: vblank timer overrun [ 265.720966][ T1204] usb 6-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 265.750203][ T1204] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.758223][ T1204] usb 6-1: Product: syz [ 265.778078][ T30] audit: type=1400 audit(1757502797.186:685): avc: denied { create } for pid=8893 comm="syz.6.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 265.823806][ T1204] usb 6-1: Manufacturer: syz [ 265.843383][ T8860] hsr_slave_0: entered promiscuous mode [ 265.849513][ T1204] usb 6-1: SerialNumber: syz [ 265.855552][ T8860] hsr_slave_1: entered promiscuous mode [ 266.059310][ T8910] capability: warning: `syz.0.679' uses 32-bit capabilities (legacy support in use) [ 266.092180][ T1204] usb 6-1: config 0 descriptor?? [ 266.115907][ T5169] Bluetooth: hci6: command tx timeout [ 266.115937][ T30] audit: type=1400 audit(1757502797.376:686): avc: denied { read } for pid=8900 comm="syz.0.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 266.154032][ T1204] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 266.160360][ T1204] gspca_stv06xx: st6422 sensor detected [ 266.168912][ T8909] netlink: 104 bytes leftover after parsing attributes in process `syz.0.679'. [ 266.189304][ T8860] debugfs: 'hsr0' already exists in 'hsr' [ 266.209307][ T8860] Cannot create hsr debugfs directory [ 266.957641][ T8917] lo speed is unknown, defaulting to 1000 [ 267.073379][ T8860] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 267.150678][ T8860] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 267.214976][ T8860] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 267.353929][ T8860] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 267.385024][ T8929] netlink: 28 bytes leftover after parsing attributes in process `syz.2.686'. [ 267.394293][ T8929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.686'. [ 267.411382][ T30] audit: type=1400 audit(1757502799.176:687): avc: denied { ioctl } for pid=8925 comm="syz.2.686" path="socket:[22784]" dev="sockfs" ino=22784 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 268.168994][ T8945] netlink: 'syz.2.688': attribute type 10 has an invalid length. [ 268.180263][ T5169] Bluetooth: hci6: command tx timeout [ 268.187077][ T30] audit: type=1400 audit(1757502799.946:688): avc: denied { create } for pid=8939 comm="syz.2.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 268.249467][ T8948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.688'. [ 268.299404][ T1204] STV06xx 6-1:0.0: probe with driver STV06xx failed with error -71 [ 268.315069][ T30] audit: type=1400 audit(1757502799.946:689): avc: denied { ioctl } for pid=8939 comm="syz.2.688" path="socket:[21777]" dev="sockfs" ino=21777 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 268.321052][ T1204] usb 6-1: USB disconnect, device number 16 [ 268.356635][ T8945] batman_adv: batadv0: Adding interface: team0 [ 268.367938][ T8945] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.372201][ T30] audit: type=1400 audit(1757502800.036:690): avc: denied { create } for pid=8939 comm="syz.2.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 268.414489][ T8945] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 268.707095][ T8956] comedi comedi0: Minor 3 specified more than once! [ 269.853217][ T30] audit: type=1400 audit(1757502801.646:691): avc: denied { getopt } for pid=8963 comm="syz.5.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 269.854633][ T8951] lo speed is unknown, defaulting to 1000 [ 269.893921][ T8860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.949712][ T30] audit: type=1400 audit(1757502801.676:692): avc: denied { ioctl } for pid=8963 comm="syz.5.693" path="socket:[21830]" dev="sockfs" ino=21830 ioctlcmd=0x4c02 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 269.992941][ T8860] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.137182][ T2993] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.144338][ T2993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.260433][ T5169] Bluetooth: hci6: command tx timeout [ 270.476094][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 270.476176][ T30] audit: type=1400 audit(1757502802.266:696): avc: denied { getopt } for pid=8970 comm="syz.5.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 270.665664][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.670430][ T30] audit: type=1400 audit(1757502802.416:697): avc: denied { mounton } for pid=8970 comm="syz.5.696" path="/syzcgroup/net/syz5/cgroup.procs" dev="cgroup" ino=321 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 270.672790][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.697071][ C1] vkms_vblank_simulate: vblank timer overrun [ 270.741324][ T30] audit: type=1400 audit(1757502802.526:698): avc: denied { setopt } for pid=8972 comm="syz.6.695" laddr=::ffff:172.20.20.10 lport=45150 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 271.762388][ T8995] FAULT_INJECTION: forcing a failure. [ 271.762388][ T8995] name failslab, interval 1, probability 0, space 0, times 1 [ 271.775186][ T8995] CPU: 1 UID: 0 PID: 8995 Comm: syz.0.699 Not tainted syzkaller #0 PREEMPT(full) [ 271.775208][ T8995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 271.775218][ T8995] Call Trace: [ 271.775223][ T8995] [ 271.775230][ T8995] dump_stack_lvl+0x16c/0x1f0 [ 271.775256][ T8995] should_fail_ex+0x512/0x640 [ 271.775278][ T8995] ? fs_reclaim_acquire+0xae/0x150 [ 271.775302][ T8995] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 271.775327][ T8995] should_failslab+0xc2/0x120 [ 271.775347][ T8995] __kmalloc_noprof+0xd2/0x510 [ 271.775370][ T8995] tomoyo_realpath_from_path+0xc2/0x6e0 [ 271.775398][ T8995] ? tomoyo_profile+0x47/0x60 [ 271.775418][ T8995] tomoyo_path_number_perm+0x245/0x580 [ 271.775438][ T8995] ? tomoyo_path_number_perm+0x237/0x580 [ 271.775462][ T8995] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 271.775518][ T8995] ? hook_file_ioctl_common+0x145/0x410 [ 271.775538][ T8995] ? __rcu_read_unlock+0x2bc/0x550 [ 271.775558][ T8995] ? __fget_files+0x20e/0x3c0 [ 271.775581][ T8995] security_file_ioctl+0x9b/0x240 [ 271.775607][ T8995] __x64_sys_ioctl+0xb7/0x210 [ 271.775635][ T8995] do_syscall_64+0xcd/0x4c0 [ 271.775659][ T8995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.775677][ T8995] RIP: 0033:0x7fa819d8eba9 [ 271.775691][ T8995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.775707][ T8995] RSP: 002b:00007fa81ac6b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 271.775723][ T8995] RAX: ffffffffffffffda RBX: 00007fa819fd6180 RCX: 00007fa819d8eba9 [ 271.775734][ T8995] RDX: 0000200000000400 RSI: 00000000c008561c RDI: 000000000000000c [ 271.775745][ T8995] RBP: 00007fa81ac6b090 R08: 0000000000000000 R09: 0000000000000000 [ 271.775755][ T8995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.775765][ T8995] R13: 00007fa819fd6218 R14: 00007fa819fd6180 R15: 00007fff2bdfd128 [ 271.775790][ T8995] [ 271.775813][ T8995] ERROR: Out of memory at tomoyo_realpath_from_path. [ 272.290775][ T8860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.129653][ T9005] lo speed is unknown, defaulting to 1000 [ 273.462418][ T9013] comedi comedi0: Minor 3 specified more than once! [ 274.053204][ T8860] veth0_vlan: entered promiscuous mode [ 274.075308][ T8860] veth1_vlan: entered promiscuous mode [ 274.685353][ T8860] veth0_macvtap: entered promiscuous mode [ 274.703006][ T8860] veth1_macvtap: entered promiscuous mode [ 274.763245][ T8860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.859462][ T8860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.905261][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.936054][ T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.963822][ T36] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.596926][ T36] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.784899][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.926625][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.959972][ T30] audit: type=1326 audit(1757502807.746:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9040 comm="syz.2.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc5d8eba9 code=0x7ffc0000 [ 276.018566][ T30] audit: type=1326 audit(1757502807.746:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9040 comm="syz.2.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc5d8eba9 code=0x7ffc0000 [ 276.049086][ T30] audit: type=1326 audit(1757502807.786:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9040 comm="syz.2.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9fc5d8eba9 code=0x7ffc0000 [ 276.076426][ T9043] overlayfs: failed to resolve './file1': -2 [ 276.154140][ T30] audit: type=1326 audit(1757502807.786:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9040 comm="syz.2.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc5d8eba9 code=0x7ffc0000 [ 276.188777][ T30] audit: type=1326 audit(1757502807.786:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9040 comm="syz.2.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc5d8eba9 code=0x7ffc0000 [ 276.196541][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.237182][ T30] audit: type=1326 audit(1757502807.786:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9040 comm="syz.2.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9fc5d8eba9 code=0x7ffc0000 [ 276.278530][ T30] audit: type=1326 audit(1757502807.786:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9040 comm="syz.2.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc5d8eba9 code=0x7ffc0000 [ 276.312704][ T30] audit: type=1326 audit(1757502807.786:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9040 comm="syz.2.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc5d8eba9 code=0x7ffc0000 [ 276.314358][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.336888][ T9042] overlay: ./file1 is not a directory [ 276.357683][ T30] audit: type=1326 audit(1757502807.786:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9040 comm="syz.2.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f9fc5d8eba9 code=0x7ffc0000 [ 276.402848][ T30] audit: type=1326 audit(1757502807.786:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9040 comm="syz.2.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc5d8eba9 code=0x7ffc0000 [ 276.716107][ T9055] 9pnet_virtio: no channels available for device syz [ 276.900301][ T5904] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 277.482570][ T5904] usb 8-1: device descriptor read/64, error -71 [ 277.586315][ T9066] overlayfs: failed to resolve './file1/file0': -2 [ 277.875021][ T5904] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 278.850276][ T5904] usb 8-1: device descriptor read/64, error -71 [ 278.906024][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.5.716'. [ 278.960434][ T5904] usb usb8-port1: attempt power cycle [ 279.093210][ T9081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.718'. [ 279.342187][ T5904] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 279.382160][ T5904] usb 8-1: device descriptor read/8, error -71 [ 279.630346][ T5904] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 279.729358][ T5904] usb 8-1: device descriptor read/8, error -71 [ 280.140750][ T5904] usb usb8-port1: unable to enumerate USB device [ 281.782902][ T48] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.798806][ T48] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.807673][ T48] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.819074][ T48] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.924688][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 281.924704][ T30] audit: type=1400 audit(1757502813.714:763): avc: denied { unmount } for pid=5855 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 281.970212][ T5904] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 282.002816][ T9120] block nbd0: Attempted send on invalid socket [ 282.010515][ T9120] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 282.020006][ T9120] block nbd0: Attempted send on invalid socket [ 282.026867][ T9120] I/O error, dev nbd0, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 282.036320][ T9120] Mount JFS Failure: -5 [ 282.132620][ T5904] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 282.150407][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.203331][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 282.248618][ T5904] usb 3-1: config 0 descriptor?? [ 282.640233][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 282.646726][ T24] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 282.658671][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 282.700179][ T24] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 282.765940][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 283.121031][ T24] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 283.138475][ T24] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 283.147659][ T9130] netlink: 148 bytes leftover after parsing attributes in process `syz.5.731'. [ 283.174326][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.192538][ T30] audit: type=1400 audit(1757502814.974:764): avc: denied { create } for pid=9128 comm="syz.0.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 283.559690][ T9134] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 283.735538][ T24] usb 7-1: GET_CAPABILITIES returned 0 [ 283.745357][ T24] usbtmc 7-1:16.0: can't read capabilities [ 283.783269][ T30] audit: type=1400 audit(1757502814.974:765): avc: denied { setopt } for pid=9128 comm="syz.0.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 283.878352][ T30] audit: type=1400 audit(1757502815.634:766): avc: denied { map } for pid=9135 comm="syz.5.733" path="/dev/comedi0" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 283.923551][ T30] audit: type=1400 audit(1757502815.634:767): avc: denied { execute } for pid=9135 comm="syz.5.733" path="/dev/comedi0" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 284.008612][ T1204] usb 7-1: USB disconnect, device number 4 [ 284.045527][ T30] audit: type=1400 audit(1757502815.784:768): avc: denied { getopt } for pid=9117 comm="syz.6.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 284.443977][ T5904] pegasus 3-1:0.0: can't reset MAC [ 284.449453][ T5904] pegasus 3-1:0.0: probe with driver pegasus failed with error -5 [ 284.469159][ T5904] usb 3-1: USB disconnect, device number 18 [ 284.504890][ T30] audit: type=1400 audit(1757502816.294:769): avc: denied { append } for pid=9142 comm="syz.0.735" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 284.527496][ C1] vkms_vblank_simulate: vblank timer overrun [ 284.833771][ T9151] comedi comedi0: Minor 3 specified more than once! [ 285.938015][ T5847] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 286.198909][ T30] audit: type=1400 audit(1757502817.964:770): avc: denied { watch } for pid=9164 comm="syz.5.741" path="/119/bus/file1" dev="overlay" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 286.225104][ T30] audit: type=1400 audit(1757502817.964:771): avc: denied { watch_sb watch_reads } for pid=9164 comm="syz.5.741" path="/119/bus/file1" dev="overlay" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 286.286639][ T9170] block nbd6: Attempted send on invalid socket [ 286.340655][ T9170] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 286.929971][ T5847] usb 8-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 287.009732][ T5847] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.170357][ T9170] block nbd6: Attempted send on invalid socket [ 287.176686][ T9170] I/O error, dev nbd6, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 287.186092][ T9170] Mount JFS Failure: -5 [ 287.201483][ T5847] usb 8-1: config 0 descriptor?? [ 288.239920][ T5847] pegasus 8-1:0.0: probe with driver pegasus failed with error -71 [ 288.256760][ T30] audit: type=1400 audit(1757502820.044:772): avc: denied { bind } for pid=9181 comm="syz.2.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 288.280502][ T5847] usb 8-1: USB disconnect, device number 6 [ 288.356467][ T30] audit: type=1400 audit(1757502820.044:773): avc: denied { append } for pid=9181 comm="syz.2.745" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 289.239084][ T30] audit: type=1400 audit(1757502820.874:774): avc: denied { unmount } for pid=5842 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 289.430178][ T5847] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 289.500441][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 289.528879][ T9203] comedi comedi0: Minor 3 specified more than once! [ 289.603103][ T5847] usb 1-1: Using ep0 maxpacket: 32 [ 289.614496][ T5847] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 289.627977][ T5847] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.690221][ T5904] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 289.742930][ T5847] usb 1-1: config 0 has no interface number 0 [ 289.749144][ T5847] usb 1-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 289.763178][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 289.768364][ T5847] usb 1-1: config 0 interface 196 has no altsetting 0 [ 289.782727][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 289.831611][ T9] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 290.310228][ T5904] usb 7-1: device descriptor read/64, error -71 [ 290.441101][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.519346][ T9] usb 3-1: config 0 descriptor?? [ 290.580904][ T5847] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 290.590003][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.658164][ T5847] usb 1-1: Product: syz [ 290.660191][ T5904] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 290.662564][ T5847] usb 1-1: Manufacturer: syz [ 290.721206][ T5847] usb 1-1: SerialNumber: syz [ 290.859673][ T9] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 290.871382][ T5847] usb 1-1: config 0 descriptor?? [ 290.893015][ T5847] ipheth 1-1:0.196: Unable to find endpoints [ 291.364668][ T5904] usb 7-1: device descriptor read/64, error -71 [ 291.396789][ T3848] usb 3-1: USB disconnect, device number 19 [ 291.457414][ T30] audit: type=1400 audit(1757502823.244:775): avc: denied { setcheckreqprot } for pid=9218 comm="syz.7.756" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 291.483484][ T5904] usb usb7-port1: attempt power cycle [ 292.360309][ T5904] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 292.467856][ T9231] FAULT_INJECTION: forcing a failure. [ 292.467856][ T9231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.481120][ T9231] CPU: 1 UID: 0 PID: 9231 Comm: syz.5.758 Not tainted syzkaller #0 PREEMPT(full) [ 292.481144][ T9231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 292.481153][ T9231] Call Trace: [ 292.481159][ T9231] [ 292.481165][ T9231] dump_stack_lvl+0x16c/0x1f0 [ 292.481192][ T9231] should_fail_ex+0x512/0x640 [ 292.481218][ T9231] _copy_from_user+0x2e/0xd0 [ 292.481245][ T9231] move_addr_to_kernel+0x65/0x170 [ 292.481274][ T9231] __sys_connect+0xb1/0x160 [ 292.481291][ T9231] ? __pfx___sys_connect+0x10/0x10 [ 292.481318][ T9231] ? __pfx_ksys_write+0x10/0x10 [ 292.481343][ T9231] __x64_sys_connect+0x72/0xb0 [ 292.481360][ T9231] ? lockdep_hardirqs_on+0x7c/0x110 [ 292.481381][ T9231] do_syscall_64+0xcd/0x4c0 [ 292.481410][ T9231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.481427][ T9231] RIP: 0033:0x7fc6f618eba9 [ 292.481442][ T9231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.481459][ T9231] RSP: 002b:00007fc6f7027038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 292.481475][ T9231] RAX: ffffffffffffffda RBX: 00007fc6f63d6090 RCX: 00007fc6f618eba9 [ 292.481486][ T9231] RDX: 0000000000000048 RSI: 0000200000000100 RDI: 000000000000000b [ 292.481496][ T9231] RBP: 00007fc6f7027090 R08: 0000000000000000 R09: 0000000000000000 [ 292.481506][ T9231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.481515][ T9231] R13: 00007fc6f63d6128 R14: 00007fc6f63d6090 R15: 00007ffc30e58958 [ 292.481539][ T9231] [ 292.748837][ T5904] usb 7-1: device descriptor read/8, error -71 [ 293.260796][ T9241] netlink: 8 bytes leftover after parsing attributes in process `syz.6.761'. [ 293.438698][ T9248] comedi comedi0: Minor 3 specified more than once! [ 293.559633][ T3848] usb 1-1: USB disconnect, device number 16 [ 293.932170][ T9254] lo speed is unknown, defaulting to 1000 [ 294.075765][ T9257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.765'. [ 294.095421][ T9257] comedi: valid board names for 8255 driver are: [ 294.095437][ T9257] 8255 [ 294.095443][ T9257] comedi: valid board names for vmk80xx driver are: [ 294.095452][ T9257] vmk80xx [ 294.095459][ T9257] comedi: valid board names for usbduxsigma driver are: [ 294.095467][ T9257] usbduxsigma [ 294.095474][ T9257] comedi: valid board names for usbduxfast driver are: [ 294.095482][ T9257] usbduxfast [ 294.095488][ T9257] comedi: valid board names for usbdux driver are: [ 294.095496][ T9257] usbdux [ 294.095502][ T9257] comedi: valid board names for ni6501 driver are: [ 294.095510][ T9257] ni6501 [ 294.095516][ T9257] comedi: valid board names for dt9812 driver are: [ 294.095524][ T9257] dt9812 [ 294.095530][ T9257] comedi: valid board names for ni_labpc_cs driver are: [ 294.095538][ T9257] ni_labpc_cs [ 294.095545][ T9257] comedi: valid board names for ni_daq_700 driver are: [ 294.095553][ T9257] ni_daq_700 [ 294.095560][ T9257] comedi: valid board names for labpc_pci driver are: [ 294.095567][ T9257] labpc_pci [ 294.095574][ T9257] comedi: valid board names for adl_pci9118 driver are: [ 294.095583][ T9257] pci9118dg [ 294.095589][ T9257] pci9118hg [ 294.095595][ T9257] pci9118hr [ 294.095601][ T9257] comedi: valid board names for 8255_pci driver are: [ 294.095610][ T9257] 8255_pci [ 294.095616][ T9257] comedi: valid board names for s526 driver are: [ 294.095624][ T9257] s526 [ 294.095631][ T9257] comedi: valid board names for multiq3 driver are: [ 294.095639][ T9257] multiq3 [ 294.095645][ T9257] comedi: valid board names for pcmuio driver are: [ 294.095653][ T9257] pcmuio48 [ 294.095659][ T9257] pcmuio96 [ 294.095666][ T9257] comedi: valid board names for pcmmio driver are: [ 294.095674][ T9257] pcmmio [ 294.095680][ T9257] comedi: valid board names for pcmda12 driver are: [ 294.095688][ T9257] pcmda12 [ 294.095693][ T9257] comedi: valid board names for pcmad driver are: [ 294.095701][ T9257] pcmad12 [ 294.095708][ T9257] pcmad16 [ 294.095714][ T9257] comedi: valid board names for ni_labpc driver are: [ 294.095722][ T9257] lab-pc-1200 [ 294.095729][ T9257] lab-pc-1200ai [ 294.095735][ T9257] lab-pc+ [ 294.095741][ T9257] comedi: valid board names for atmio16 driver are: [ 294.095749][ T9257] atmio16 [ 294.095755][ T9257] atmio16d [ 294.095762][ T9257] comedi: valid board names for ni_at_ao driver are: [ 294.095770][ T9257] at-ao-6 [ 294.095776][ T9257] at-ao-10 [ 294.095782][ T9257] comedi: valid board names for ni_at_a2150 driver are: [ 294.095791][ T9257] ni_at_a2150 [ 294.095797][ T9257] comedi: valid board names for adq12b driver are: [ 294.095805][ T9257] adq12b [ 294.095811][ T9257] comedi: valid board names for mpc624 driver are: [ 294.095819][ T9257] mpc624 [ 294.095826][ T9257] comedi: valid board names for c6xdigio driver are: [ 294.095834][ T9257] c6xdigio [ 294.095840][ T9257] comedi: valid board names for aio_iiro_16 driver are: [ 294.095848][ T9257] aio_iiro_16 [ 294.095855][ T9257] comedi: valid board names for aio_aio12_8 driver are: [ 294.095863][ T9257] aio_aio12_8 [ 294.095869][ T9257] aio_ai12_8 [ 294.095875][ T9257] aio_ao12_4 [ 294.095882][ T9257] comedi: valid board names for fl512 driver are: [ 294.095890][ T9257] fl512 [ 294.095896][ T9257] comedi: valid board names for dmm32at driver are: [ 294.095904][ T9257] dmm32at [ 294.095910][ T9257] comedi: valid board names for dt282x driver are: [ 294.095918][ T9257] dt2821 [ 294.095925][ T9257] dt2821-f [ 294.095931][ T9257] dt2821-g [ 294.095937][ T9257] dt2823 [ 294.095943][ T9257] dt2824-pgh [ 294.095949][ T9257] dt2824-pgl [ 294.095956][ T9257] dt2825 [ 294.095962][ T9257] dt2827 [ 294.095968][ T9257] dt2828 [ 294.095974][ T9257] dt2829 [ 294.095981][ T9257] dt21-ez [ 294.095986][ T9257] dt23-ez [ 294.095993][ T9257] dt24-ez [ 294.095999][ T9257] dt24-ez-pgl [ 294.096006][ T9257] comedi: valid board names for dt2817 driver are: [ 294.096014][ T9257] dt2817 [ 294.096020][ T9257] comedi: valid board names for dt2815 driver are: [ 294.096027][ T9257] dt2815 [ 294.096034][ T9257] comedi: valid board names for dt2814 driver are: [ 294.096042][ T9257] dt2814 [ 294.096069][ T9257] comedi: valid board names for dt2811 driver are: [ 294.096078][ T9257] dt2811-pgh [ 294.096085][ T9257] dt2811-pgl [ 294.096091][ T9257] comedi: valid board names for dt2801 driver are: [ 294.096099][ T9257] dt2801 [ 294.096105][ T9257] comedi: valid board names for das6402 driver are: [ 294.096113][ T9257] das6402-12 [ 294.096125][ T9257] das6402-16 [ 294.096132][ T9257] comedi: valid board names for das1800 driver are: [ 294.096140][ T9257] das-1701st [ 294.096146][ T9257] das-1701st-da [ 294.096153][ T9257] das-1702st [ 294.096159][ T9257] das-1702st-da [ 294.096166][ T9257] das-1702hr [ 294.096172][ T9257] das-1702hr-da [ 294.096179][ T9257] das-1701ao [ 294.096185][ T9257] das-1702ao [ 294.096192][ T9257] das-1801st [ 294.096199][ T9257] das-1801st-da [ 294.096205][ T9257] das-1802st [ 294.096212][ T9257] das-1802st-da [ 294.096219][ T9257] das-1802hr [ 294.096225][ T9257] das-1802hr-da [ 294.096232][ T9257] das-1801hc [ 294.096239][ T9257] das-1802hc [ 294.096246][ T9257] das-1801ao [ 294.096252][ T9257] das-1802ao [ 294.096259][ T9257] comedi: valid board names for das800 driver are: [ 294.096267][ T9257] das-800 [ 294.096273][ T9257] cio-das800 [ 294.096281][ T9257] das-801 [ 294.096288][ T9257] cio-das801 [ 294.096294][ T9257] das-802 [ 294.096301][ T9257] cio-das802 [ 294.096307][ T9257] cio-das802/16 [ 294.096314][ T9257] comedi: valid board names for isa-das08 driver are: [ 294.096322][ T9257] isa-das08 [ 294.096329][ T9257] das08-pgm [ 294.096335][ T9257] das08-pgh [ 294.096342][ T9257] das08-pgl [ 294.096349][ T9257] das08-aoh [ 294.096355][ T9257] das08-aol [ 294.096361][ T9257] das08-aom [ 294.096368][ T9257] das08/jr-ao [ 294.096374][ T9257] das08jr-16-ao [ 294.096380][ T9257] pc104-das08 [ 294.096386][ T9257] das08jr/16 [ 294.096394][ T9257] comedi: valid board names for das16m1 driver are: [ 294.096402][ T9257] das16m1 [ 294.096408][ T9257] comedi: valid board names for dac02 driver are: [ 294.096416][ T9257] dac02 [ 294.096422][ T9257] comedi: valid board names for rti802 driver are: [ 294.096430][ T9257] rti802 [ 294.096437][ T9257] comedi: valid board names for rti800 driver are: [ 294.096445][ T9257] rti800 [ 294.096451][ T9257] rti815 [ 294.096457][ T9257] comedi: valid board names for pcm3724 driver are: [ 294.096466][ T9257] pcm3724 [ 294.096472][ T9257] comedi: valid board names for pcl818 driver are: [ 294.096480][ T9257] pcl818l [ 294.096486][ T9257] pcl818h [ 294.096493][ T9257] pcl818hd [ 294.096499][ T9257] pcl818hg [ 294.096506][ T9257] pcl818 [ 294.096512][ T9257] pcl718 [ 294.096518][ T9257] pcm3718 [ 294.096524][ T9257] comedi: valid board names for pcl816 driver are: [ 294.096532][ T9257] pcl816 [ 294.096538][ T9257] pcl814b [ 294.096545][ T9257] comedi: valid board names for pcl812 driver are: [ 294.096553][ T9257] pcl812 [ 294.096559][ T9257] pcl812pg [ 294.096566][ T9257] acl8112pg [ 294.096572][ T9257] acl8112dg [ 294.096578][ T9257] acl8112hg [ 294.096585][ T9257] a821pgl [ 294.096591][ T9257] a821pglnda [ 294.096598][ T9257] a821pgh [ 294.096604][ T9257] a822pgl [ 294.096610][ T9257] a822pgh [ 294.096617][ T9257] a823pgl [ 294.096623][ T9257] a823pgh [ 294.096629][ T9257] pcl813 [ 294.096635][ T9257] pcl813b [ 294.096642][ T9257] acl8113 [ 294.096648][ T9257] iso813 [ 294.096654][ T9257] acl8216 [ 294.096660][ T9257] a826pg [ 294.096666][ T9257] comedi: valid board names for pcl730 driver are: [ 294.096674][ T9257] pcl730 [ 294.096681][ T9257] iso730 [ 294.096687][ T9257] acl7130 [ 294.096693][ T9257] pcm3730 [ 294.096699][ T9257] pcl725 [ 294.096705][ T9257] p8r8dio [ 294.096712][ T9257] acl7225b [ 294.096718][ T9257] p16r16dio [ 294.096725][ T9257] pcl733 [ 294.096731][ T9257] pcl734 [ 294.096737][ T9257] opmm-1616-xt [ 294.096744][ T9257] pearl-mm-p [ 294.096750][ T9257] ir104-pbf [ 294.096757][ T9257] comedi: valid board names for pcl726 driver are: [ 294.096765][ T9257] pcl726 [ 294.096771][ T9257] pcl727 [ 294.096778][ T9257] pcl728 [ 294.096784][ T9257] acl6126 [ 294.096790][ T9257] acl6128 [ 294.096797][ T9257] comedi: valid board names for pcl724 driver are: [ 294.096804][ T9257] pcl724 [ 294.096811][ T9257] pcl722 [ 294.096817][ T9257] pcl731 [ 294.096823][ T9257] acl7122 [ 294.096830][ T9257] acl7124 [ 294.096836][ T9257] pet48dio [ 294.096843][ T9257] pcmio48 [ 294.096849][ T9257] onyx-mm-dio [ 294.096856][ T9257] comedi: valid board names for pcl711 driver are: [ 294.096864][ T9257] pcl711 [ 294.096870][ T9257] pcl711b [ 294.096876][ T9257] acl8112hg [ 294.096882][ T9257] acl8112dg [ 294.096889][ T9257] comedi: valid board names for amplc_pc263 driver are: [ 294.096898][ T9257] pc263 [ 294.096904][ T9257] comedi: valid board names for amplc_pc236 driver are: [ 294.096912][ T9257] pc36at [ 294.096919][ T9257] comedi: valid board names for amplc_dio200 driver are: [ 294.096927][ T9257] pc212e [ 294.096934][ T9257] pc214e [ 294.096940][ T9257] pc215e [ 294.096946][ T9257] pc218e [ 294.096952][ T9257] pc272e [ 294.096959][ T9257] comedi: valid board names for comedi_parport driver are: [ 294.096967][ T9257] comedi_parport [ 294.096974][ T9257] comedi: valid board names for comedi_test driver are: [ 294.096983][ T9257] comedi_test [ 294.096990][ T9257] comedi: valid board names for comedi_bond driver are: [ 294.096998][ T9257] comedi_bond [ 294.872704][ T9269] comedi comedi0: Minor 3 specified more than once! [ 295.786544][ T3848] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 295.935245][ T3848] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 295.935274][ T3848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.935291][ T3848] usb 1-1: Product: syz [ 295.935305][ T3848] usb 1-1: Manufacturer: syz [ 295.935318][ T3848] usb 1-1: SerialNumber: syz [ 296.995888][ T9293] FAULT_INJECTION: forcing a failure. [ 296.995888][ T9293] name failslab, interval 1, probability 0, space 0, times 0 [ 296.996024][ T9293] CPU: 1 UID: 0 PID: 9293 Comm: syz.5.775 Not tainted syzkaller #0 PREEMPT(full) [ 296.996045][ T9293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 296.996056][ T9293] Call Trace: [ 296.996061][ T9293] [ 296.996068][ T9293] dump_stack_lvl+0x16c/0x1f0 [ 296.996098][ T9293] should_fail_ex+0x512/0x640 [ 296.996119][ T9293] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 296.996148][ T9293] should_failslab+0xc2/0x120 [ 296.996168][ T9293] __kmalloc_cache_noprof+0x6a/0x3e0 [ 296.996203][ T9293] ? ax25_connect+0x3f2/0x1350 [ 296.996223][ T9293] ax25_connect+0x3f2/0x1350 [ 296.996243][ T9293] ? find_held_lock+0x2b/0x80 [ 296.996266][ T9293] ? __pfx_ax25_connect+0x10/0x10 [ 296.996281][ T9293] ? rcu_is_watching+0x12/0xc0 [ 296.996302][ T9293] ? __local_bh_enable_ip+0xa4/0x120 [ 296.996324][ T9293] ? lockdep_hardirqs_on+0x7c/0x110 [ 296.996345][ T9293] ? selinux_netlbl_socket_connect+0x30/0x40 [ 296.996374][ T9293] ? __local_bh_enable_ip+0xa4/0x120 [ 296.996396][ T9293] ? selinux_netlbl_socket_connect+0x30/0x40 [ 296.996421][ T9293] ? selinux_socket_connect+0x6b/0x80 [ 296.996453][ T9293] ? __pfx_ax25_connect+0x10/0x10 [ 296.996467][ T9293] __sys_connect_file+0x141/0x1a0 [ 296.996489][ T9293] __sys_connect+0x13b/0x160 [ 296.996506][ T9293] ? __pfx___sys_connect+0x10/0x10 [ 296.996541][ T9293] __x64_sys_connect+0x72/0xb0 [ 296.996557][ T9293] ? lockdep_hardirqs_on+0x7c/0x110 [ 296.996577][ T9293] do_syscall_64+0xcd/0x4c0 [ 296.996601][ T9293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.996618][ T9293] RIP: 0033:0x7fc6f618eba9 [ 296.996633][ T9293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.996650][ T9293] RSP: 002b:00007fc6f7006038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 296.996667][ T9293] RAX: ffffffffffffffda RBX: 00007fc6f63d6180 RCX: 00007fc6f618eba9 [ 296.996678][ T9293] RDX: 0000000000000048 RSI: 0000200000000100 RDI: 000000000000000b [ 296.996688][ T9293] RBP: 00007fc6f7006090 R08: 0000000000000000 R09: 0000000000000000 [ 296.996698][ T9293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.996707][ T9293] R13: 00007fc6f63d6218 R14: 00007fc6f63d6180 R15: 00007ffc30e58958 [ 296.996731][ T9293] [ 297.693378][ T3848] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 298.034551][ T9289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.598005][ T9289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.653176][ T9304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.779'. [ 298.662355][ T9304] netlink: 'syz.2.779': attribute type 18 has an invalid length. [ 298.752478][ T9307] input: syz1 as /devices/virtual/input/input17 [ 298.757800][ T9304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.779'. [ 298.767952][ T48] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.771707][ T9304] netlink: 'syz.2.779': attribute type 18 has an invalid length. [ 298.830196][ T48] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.839123][ T48] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.854384][ T48] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.044087][ T3848] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001000. ret = -EPROTO [ 299.080635][ T3848] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 299.115039][ T3848] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 299.125310][ T3848] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 299.143130][ T3848] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 299.180522][ T3848] usb 1-1: USB disconnect, device number 17 [ 300.110299][ T9] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 300.491379][ T9325] block nbd5: Attempted send on invalid socket [ 300.502096][ T9325] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 300.525911][ T9325] block nbd5: Attempted send on invalid socket [ 300.557597][ T9325] I/O error, dev nbd5, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 300.645121][ T9328] 9pnet: Could not find request transport: fr [ 300.691001][ T9325] Mount JFS Failure: -5 [ 300.789008][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 301.324534][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 301.567314][ T9] usb 3-1: config 7 has an invalid interface number: 199 but max is 0 [ 301.576903][ T9] usb 3-1: config 7 has no interface number 0 [ 301.590204][ T9] usb 3-1: config 7 interface 199 altsetting 50 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 301.608614][ T9] usb 3-1: config 7 interface 199 has no altsetting 0 [ 301.752004][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=8281, bcdDevice=25.55 [ 301.766493][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.774728][ T9] usb 3-1: Product: syz [ 301.778934][ T9] usb 3-1: Manufacturer: syz [ 301.785459][ T9] usb 3-1: SerialNumber: syz [ 301.801379][ T9315] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 301.843788][ T9343] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 301.972864][ T9343] netdevsim netdevsim6: Falling back to sysfs fallback for: ./file0 [ 301.980227][ T30] audit: type=1400 audit(1757502833.744:776): avc: denied { firmware_load } for pid=9342 comm="syz.6.787" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 302.087991][ T9] usb 3-1: USB disconnect, device number 20 [ 302.114624][ T9353] comedi comedi0: Minor 3 specified more than once! [ 302.178137][ T30] audit: type=1400 audit(1757502833.964:777): avc: denied { ioctl } for pid=9355 comm="syz.7.791" path="/dev/ptyr2" dev="devtmpfs" ino=137 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 303.452920][ T9373] comedi comedi0: Minor 3 specified more than once! [ 304.258708][ T9376] hfsplus: unable to find HFS+ superblock [ 304.267880][ T9376] netlink: 64 bytes leftover after parsing attributes in process `syz.5.796'. [ 306.247503][ T9393] block nbd6: Attempted send on invalid socket [ 306.320455][ T9393] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 306.329926][ T9393] block nbd6: Attempted send on invalid socket [ 306.390187][ T9393] I/O error, dev nbd6, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 306.411145][ T9393] Mount JFS Failure: -5 [ 307.123817][ T30] audit: type=1400 audit(1757502838.894:778): avc: denied { read write } for pid=9405 comm="syz.7.804" name="binder0" dev="binder" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 307.625666][ T9410] lo speed is unknown, defaulting to 1000 [ 307.930672][ T30] audit: type=1400 audit(1757502838.894:779): avc: denied { open } for pid=9405 comm="syz.7.804" path="/dev/binderfs/binder0" dev="binder" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 307.988903][ T30] audit: type=1400 audit(1757502838.894:780): avc: denied { ioctl } for pid=9405 comm="syz.7.804" path="/dev/binderfs/binder0" dev="binder" ino=25 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 308.221602][ T30] audit: type=1400 audit(1757502838.894:781): avc: denied { set_context_mgr } for pid=9405 comm="syz.7.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 308.241261][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.684832][ T9422] comedi comedi0: Minor 3 specified more than once! [ 309.150832][ T9419] binder: 9405:9419 ioctl c0306201 2000000001c0 returned -14 [ 309.534409][ T9419] qrtr: Invalid version 0 [ 309.800252][ T5904] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 309.975119][ T5904] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 310.009545][ T5904] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.066344][ T5904] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 310.080312][ T30] audit: type=1400 audit(1757502841.854:782): avc: denied { create } for pid=9440 comm="syz.5.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 310.099868][ C1] vkms_vblank_simulate: vblank timer overrun [ 310.133694][ T5904] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 310.167908][ T5904] usb 3-1: Manufacturer: syz [ 310.247585][ T5904] usb 3-1: config 0 descriptor?? [ 310.263018][ T5904] igorplugusb 3-1:0.0: incorrect number of endpoints [ 310.716356][ T9428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.731914][ T30] audit: type=1400 audit(1757502842.524:783): avc: denied { connect } for pid=9440 comm="syz.5.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 310.732240][ T9441] netlink: 12 bytes leftover after parsing attributes in process `syz.5.813'. [ 310.785802][ T9428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.800439][ T9441] netlink: 12 bytes leftover after parsing attributes in process `syz.5.813'. [ 310.818505][ T24] usb 3-1: USB disconnect, device number 21 [ 310.826998][ T30] audit: type=1400 audit(1757502842.604:784): avc: denied { write } for pid=9440 comm="syz.5.813" path="socket:[23975]" dev="sockfs" ino=23975 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 310.850396][ C1] vkms_vblank_simulate: vblank timer overrun [ 311.428856][ T30] audit: type=1400 audit(1757502843.214:785): avc: denied { write } for pid=9457 comm="syz.2.818" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 311.433719][ T9460] comedi comedi0: Minor 3 specified more than once! [ 311.447775][ C1] vkms_vblank_simulate: vblank timer overrun [ 311.466332][ T9462] block nbd7: Attempted send on invalid socket [ 311.477952][ T9458] hugetlbfs: syz.2.818 (9458): Using mlock ulimits for SHM_HUGETLB is obsolete [ 311.499431][ T9462] I/O error, dev nbd7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 311.514901][ T30] audit: type=1400 audit(1757502843.244:786): avc: denied { connect } for pid=9457 comm="syz.2.818" laddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 311.547519][ T9462] block nbd7: Attempted send on invalid socket [ 311.554234][ T9462] I/O error, dev nbd7, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 311.567903][ T9462] Mount JFS Failure: -5 [ 311.780421][ T3848] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 311.920232][ T9] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 312.000829][ T3848] usb 7-1: Using ep0 maxpacket: 16 [ 312.020462][ T3848] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 312.045164][ T3848] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 312.075733][ T3848] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 312.096607][ T9] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 312.111956][ T9] usb 1-1: config 0 has no interface number 0 [ 312.112327][ T3848] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 312.141451][ T9] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 312.149968][ T3848] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.172943][ T9] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 312.191393][ T3848] usb 7-1: Product: syz [ 312.196010][ T9] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 312.206182][ T3848] usb 7-1: Manufacturer: syz [ 312.213115][ T9] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 312.227085][ T3848] usb 7-1: SerialNumber: syz [ 312.227144][ T9] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 312.249129][ T9] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 312.268457][ T9] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 312.277728][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.295662][ T9] usb 1-1: config 0 descriptor?? [ 312.311354][ T9468] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 312.318852][ T9468] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 312.331453][ T9] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 312.383635][ T9471] fuse: Unknown parameter 'ïg™Æ0x0000000000000003' [ 312.549603][ T78] usb 1-1: USB disconnect, device number 18 [ 312.566496][ T78] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 312.592345][ T9480] bridge0: entered promiscuous mode [ 312.598311][ T9480] macvlan2: entered promiscuous mode [ 312.657173][ T9464] comedi comedi0: Minor 3 specified more than once! [ 312.670767][ T3848] usb 7-1: 0:2 : does not exist [ 312.683881][ T3848] usb 7-1: USB disconnect, device number 9 [ 313.082227][ T9483] netlink: 28 bytes leftover after parsing attributes in process `syz.0.826'. [ 313.317852][ T9487] ubi31: attaching mtd0 [ 313.335207][ T9487] ubi31: scanning is finished [ 313.339950][ T9487] ubi31: empty MTD device detected [ 313.747846][ T9487] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 313.755508][ T9487] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 313.763029][ T9487] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 313.770420][ T9487] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 313.777916][ T9487] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 313.784939][ T9487] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 313.793053][ T9487] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 972680214 [ 313.803066][ T9487] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 313.814074][ T9490] ubi31: background thread "ubi_bgt31d" started, PID 9490 [ 314.944282][ T9499] syz.6.827 (9499): drop_caches: 2 [ 315.747028][ T9516] netlink: 'syz.5.833': attribute type 6 has an invalid length. [ 316.030197][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 316.298515][ T9] usb 3-1: config 0 has an invalid interface number: 91 but max is 0 [ 316.603980][ T9] usb 3-1: config 0 has no interface number 0 [ 316.740867][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.797871][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=a9d2, bcdDevice=95.16 [ 316.811109][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.819313][ T9] usb 3-1: Product: syz [ 316.823936][ T9] usb 3-1: Manufacturer: syz [ 316.833396][ T9] usb 3-1: SerialNumber: syz [ 316.841329][ T9] usb 3-1: config 0 descriptor?? [ 317.060342][ T78] usb 3-1: USB disconnect, device number 22 [ 317.400609][ T9551] netlink: 48 bytes leftover after parsing attributes in process `syz.5.840'. [ 317.409614][ T9551] netlink: 48 bytes leftover after parsing attributes in process `syz.5.840'. [ 317.418741][ T9551] netlink: 12 bytes leftover after parsing attributes in process `syz.5.840'. [ 317.428535][ T9551] netlink: 44 bytes leftover after parsing attributes in process `syz.5.840'. [ 317.571438][ T3848] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 317.634589][ T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 317.731653][ T3848] usb 8-1: Using ep0 maxpacket: 32 [ 317.753275][ T3848] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 317.771727][ T9] usb 7-1: device descriptor read/64, error -71 [ 317.790281][ T3848] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.791165][ T9554] binder: 9553:9554 ioctl c0306201 2000000001c0 returned -22 [ 317.812442][ T3848] usb 8-1: config 0 descriptor?? [ 317.830884][ T9556] comedi comedi0: Minor 3 specified more than once! [ 318.020198][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 318.199390][ T9560] binder: 9553:9560 ioctl 89e5 200000000240 returned -22 [ 318.610167][ T9] usb 7-1: device descriptor read/64, error -71 [ 318.616833][ T3848] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 318.737757][ T3848] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 318.754469][ T3848] dib0700: firmware download failed at 7 with -22 [ 318.777369][ T3848] usb 8-1: USB disconnect, device number 7 [ 318.924949][ T9] usb usb7-port1: attempt power cycle [ 319.288987][ T9] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 319.296764][ T9573] block nbd7: Attempted send on invalid socket [ 319.296807][ T9573] I/O error, dev nbd7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 319.296974][ T9573] block nbd7: Attempted send on invalid socket [ 319.296988][ T9573] I/O error, dev nbd7, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 319.297056][ T9573] Mount JFS Failure: -5 [ 319.563555][ T9577] 9pnet_fd: Insufficient options for proto=fd [ 320.400426][ T9] usb 7-1: device descriptor read/8, error -71 [ 320.800653][ T30] audit: type=1400 audit(1757502852.574:787): avc: denied { map } for pid=9591 comm="syz.7.855" path="socket:[24198]" dev="sockfs" ino=24198 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 320.946600][ T30] audit: type=1400 audit(1757502852.574:788): avc: denied { read } for pid=9591 comm="syz.7.855" path="socket:[24198]" dev="sockfs" ino=24198 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 320.969813][ C1] vkms_vblank_simulate: vblank timer overrun [ 321.242369][ T9602] block nbd0: Attempted send on invalid socket [ 321.258955][ T9602] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 321.280514][ T9602] block nbd0: Attempted send on invalid socket [ 321.286723][ T9602] I/O error, dev nbd0, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 321.313422][ T9602] Mount JFS Failure: -5 [ 322.560775][ T9619] block nbd0: Attempted send on invalid socket [ 322.567019][ T9619] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 322.736459][ T9619] block nbd0: Attempted send on invalid socket [ 322.829652][ T9623] comedi comedi0: Minor 3 specified more than once! [ 323.442883][ T9627] netlink: 28 bytes leftover after parsing attributes in process `syz.2.863'. [ 323.479810][ T9619] I/O error, dev nbd0, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.495664][ T9627] netlink: 28 bytes leftover after parsing attributes in process `syz.2.863'. [ 323.538632][ T9619] Mount JFS Failure: -5 [ 324.063239][ T9640] 9pnet_fd: Insufficient options for proto=fd [ 324.105490][ T9637] 9pnet_fd: Insufficient options for proto=fd [ 324.742894][ T5919] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 325.416780][ T5919] usb 7-1: device descriptor read/64, error -71 [ 325.680266][ T5919] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 325.822516][ T5919] usb 7-1: device descriptor read/64, error -71 [ 325.945589][ T5919] usb usb7-port1: attempt power cycle [ 325.957726][ T9666] lo speed is unknown, defaulting to 1000 [ 326.366424][ T30] audit: type=1400 audit(1757502858.154:789): avc: denied { map } for pid=9673 comm="syz.7.872" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 326.410149][ T5919] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 326.458328][ T9676] nfs: Unknown parameter './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 326.575074][ T9677] overlayfs: overlapping lowerdir path [ 326.777678][ T30] audit: type=1400 audit(1757502858.564:790): avc: denied { mount } for pid=9670 comm="syz.2.873" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 326.836819][ T5919] usb 7-1: device descriptor read/8, error -71 [ 327.061255][ T9683] netlink: ct family unspecified [ 327.066303][ T9683] openvswitch: netlink: Actions may not be safe on all matching packets [ 327.080180][ T5919] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 327.869773][ T30] audit: type=1400 audit(1757502859.654:791): avc: denied { map } for pid=9689 comm="syz.2.877" path="socket:[24393]" dev="sockfs" ino=24393 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 327.950583][ T5919] usb 7-1: device descriptor read/8, error -71 [ 327.973485][ T9698] block nbd6: Attempted send on invalid socket [ 327.980769][ T9698] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 328.110575][ T5919] usb usb7-port1: unable to enumerate USB device [ 328.180069][ T9698] block nbd6: Attempted send on invalid socket [ 328.236488][ T9698] I/O error, dev nbd6, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 328.270555][ T3848] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 328.276948][ T9698] Mount JFS Failure: -5 [ 328.440410][ T78] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 328.538007][ T3848] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 328.610511][ T78] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.660219][ T3848] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 328.680148][ T78] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.790187][ T3848] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 328.809817][ T78] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 328.825962][ T3848] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.259556][ T78] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.281306][ T9681] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 329.290069][ T3848] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 329.319563][ T78] usb 3-1: config 0 descriptor?? [ 329.416077][ T9716] netlink: 'syz.0.883': attribute type 10 has an invalid length. [ 329.424979][ T9716] netlink: 40 bytes leftover after parsing attributes in process `syz.0.883'. [ 329.441374][ T9716] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 329.488527][ T30] audit: type=1400 audit(1757502861.274:792): avc: denied { getopt } for pid=9715 comm="syz.0.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 329.598667][ T3848] usb 8-1: USB disconnect, device number 8 [ 329.800825][ T78] pyra 0003:1E7D:2CF6.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 330.494228][ T9737] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 330.571503][ T78] pyra 0003:1E7D:2CF6.0006: couldn't init struct pyra_device [ 330.579077][ T78] pyra 0003:1E7D:2CF6.0006: couldn't install mouse [ 330.587136][ T78] pyra 0003:1E7D:2CF6.0006: probe with driver pyra failed with error -71 [ 330.643376][ T78] usb 3-1: USB disconnect, device number 23 [ 331.617360][ T5847] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 332.120234][ T30] audit: type=1400 audit(1757502863.524:793): avc: denied { read } for pid=9760 comm="syz.2.894" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 332.230576][ T5847] usb 7-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 332.243051][ T30] audit: type=1400 audit(1757502863.524:794): avc: denied { open } for pid=9760 comm="syz.2.894" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 332.260221][ T5847] usb 7-1: config 0 interface 0 has no altsetting 0 [ 332.288197][ T5847] usb 7-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 332.307536][ T5847] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.336401][ T5847] usb 7-1: config 0 descriptor?? [ 332.390229][ T78] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 332.550175][ T78] usb 3-1: Using ep0 maxpacket: 16 [ 332.715933][ T78] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 332.986081][ T9775] comedi comedi0: Minor 3 specified more than once! [ 333.647362][ T78] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice=5f.00 [ 333.670170][ T78] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.670398][ T5847] betop 0003:20BC:5500.0007: hidraw0: USB HID v1.01 Device [HID 20bc:5500] on usb-dummy_hcd.6-1/input0 [ 333.689062][ T78] usb 3-1: config 0 descriptor?? [ 333.759118][ T5847] betop 0003:20BC:5500.0007: no inputs found [ 333.769677][ T78] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input18 [ 334.039208][ T5847] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 334.098618][ T30] audit: type=1400 audit(1757502865.824:795): avc: denied { shutdown } for pid=9756 comm="syz.6.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 334.135609][ T9786] netlink: 4 bytes leftover after parsing attributes in process `syz.7.898'. [ 334.335093][ T5847] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 334.346548][ T5847] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 334.644361][ T5847] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 334.824005][ T5847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.934278][ T9778] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 334.949684][ T5847] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 335.000411][ T5203] bcm5974 3-1:0.0: could not read from device [ 335.008598][ T5203] bcm5974 3-1:0.0: could not read from device [ 335.018705][ T78] bcm5974 3-1:0.0: could not read from device [ 335.133822][ T78] input: failed to attach handler mousedev to device input18, error: -5 [ 335.157452][ T5203] bcm5974 3-1:0.0: could not read from device [ 335.195830][ T78] usb 3-1: USB disconnect, device number 24 [ 335.209360][ T5847] usb 1-1: USB disconnect, device number 19 [ 335.414549][ T5203] bcm5974 3-1:0.0: could not read from device [ 335.617095][ T9802] comedi comedi0: Minor 3 specified more than once! [ 335.659105][ T9804] netlink: 'syz.2.902': attribute type 23 has an invalid length. [ 336.005182][ T5848] Bluetooth: hci6: command 0x0405 tx timeout [ 336.137416][ T78] usb 7-1: USB disconnect, device number 18 [ 336.195199][ T9810] comedi comedi0: aio_iiro_16: I/O port conflict (0x1,8) [ 336.236530][ T9812] lo speed is unknown, defaulting to 1000 [ 336.263496][ T9813] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 336.270048][ T9813] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 336.292151][ T9813] vhci_hcd vhci_hcd.0: Device attached [ 336.540960][ T5904] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 336.600341][ T78] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 336.762827][ T9831] netlink: 8 bytes leftover after parsing attributes in process `syz.7.908'. [ 336.914683][ T30] audit: type=1400 audit(1757502868.704:796): avc: denied { setopt } for pid=9836 comm="syz.0.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 337.025543][ T24] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 337.130180][ T78] usb 7-1: Using ep0 maxpacket: 16 [ 337.136706][ T78] usb 7-1: config 0 has no interfaces? [ 337.144427][ T78] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 337.170139][ T78] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.181160][ T78] usb 7-1: config 0 descriptor?? [ 337.260213][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 337.316580][ T9842] comedi comedi0: Minor 3 specified more than once! [ 337.452407][ T24] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 337.483963][ T24] usb 3-1: config 179 has no interface number 0 [ 337.495744][ T9813] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(7) [ 337.502294][ T9813] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 337.502949][ T24] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 337.663656][ T9813] vhci_hcd vhci_hcd.0: Device attached [ 337.685069][ T9813] netlink: 20 bytes leftover after parsing attributes in process `syz.6.905'. [ 337.687937][ T24] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 337.713513][ T24] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 337.724793][ T24] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 337.736410][ T24] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 337.749900][ T5904] usb 45-1: device descriptor read/64, error -71 [ 337.756928][ T24] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 337.766534][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.853832][ T9820] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 338.000202][ T5904] usb 45-1: new low-speed USB device number 3 using vhci_hcd [ 338.170228][ T30] audit: type=1400 audit(1757502869.944:797): avc: denied { create } for pid=9855 comm="syz.0.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 338.294929][ T78] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input19 [ 338.308764][ T9859] netlink: 'syz.0.914': attribute type 4 has an invalid length. [ 338.587713][ T78] usb 3-1: USB disconnect, device number 25 [ 338.593801][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 338.593849][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 338.615558][ T9843] syz.7.911 (9843): drop_caches: 2 [ 338.690223][ T5847] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 338.840319][ T5847] usb 1-1: Using ep0 maxpacket: 32 [ 338.890231][ T5847] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 338.898559][ T5847] usb 1-1: config 0 has no interface number 0 [ 338.905634][ T5847] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 338.926409][ T5847] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 338.936894][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.948897][ T5847] usb 1-1: Product: syz [ 338.953751][ T5847] usb 1-1: Manufacturer: syz [ 338.958428][ T5847] usb 1-1: SerialNumber: syz [ 338.969623][ T5847] usb 1-1: config 0 descriptor?? [ 338.978710][ T5847] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 338.993476][ T5847] em28xx 1-1:0.132: Video interface 132 found: [ 339.246233][ T9871] lo speed is unknown, defaulting to 1000 [ 339.772133][ T9814] vhci_hcd: connection closed [ 339.772905][ T9850] vhci_hcd: connection closed [ 339.790499][ T77] vhci_hcd: stop threads [ 339.822851][ T78] usb 7-1: USB disconnect, device number 19 [ 339.878033][ T77] vhci_hcd: release socket [ 339.967079][ T77] vhci_hcd: disconnect device [ 340.082333][ T77] vhci_hcd: stop threads [ 340.128004][ T77] vhci_hcd: release socket [ 340.435237][ T77] vhci_hcd: disconnect device [ 340.930214][ T78] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 341.114437][ T78] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 341.136318][ T5847] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 341.163370][ T9892] comedi comedi0: Minor 3 specified more than once! [ 341.297714][ T78] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 341.308132][ T78] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 341.317319][ T78] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.331973][ T9883] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 341.357417][ T78] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 341.792501][ T5919] usb 8-1: USB disconnect, device number 9 [ 342.080415][ T5847] em28xx 1-1:0.132: failed to read eeprom (err=-110) [ 342.090469][ T5847] em28xx 1-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 342.220895][ T9910] comedi comedi0: comedi_config --init_data is deprecated [ 343.564820][ T5904] vhci_hcd: vhci_device speed not set [ 343.606435][ T9924] lo speed is unknown, defaulting to 1000 [ 343.650187][ T5847] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 343.667769][ T5847] em28xx 1-1:0.132: analog set to bulk mode. [ 343.697277][ T9] em28xx 1-1:0.132: Registering V4L2 extension [ 343.853019][ T3848] usb 1-1: USB disconnect, device number 20 [ 343.883455][ T3848] em28xx 1-1:0.132: Disconnecting em28xx [ 344.195069][ T9] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 344.240975][ T9] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 344.273373][ T9] em28xx 1-1:0.132: No AC97 audio processor [ 344.332710][ T9] usb 1-1: Decoder not found [ 344.380211][ T9] em28xx 1-1:0.132: failed to create media graph [ 344.403857][ T9] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 344.434084][ T9940] netlink: 'syz.0.934': attribute type 2 has an invalid length. [ 344.510874][ T9] em28xx 1-1:0.132: Remote control support is not available for this card. [ 344.724421][ T3848] em28xx 1-1:0.132: Closing input extension [ 344.788522][ T3848] em28xx 1-1:0.132: Freeing device [ 345.998127][ T9959] sp0: Synchronizing with TNC [ 346.011996][ T30] audit: type=1400 audit(1757502877.804:798): avc: denied { map } for pid=9956 comm="syz.2.940" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 346.035372][ C0] vkms_vblank_simulate: vblank timer overrun [ 346.050183][ T30] audit: type=1400 audit(1757502877.814:799): avc: denied { write execute } for pid=9956 comm="syz.2.940" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 346.324370][ T30] audit: type=1326 audit(1757502878.114:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9964 comm="syz.7.942" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f067318eba9 code=0x0 [ 346.455340][ T9969] netlink: 104 bytes leftover after parsing attributes in process `syz.6.941'. [ 346.475320][ T9959] netlink: 'syz.2.940': attribute type 10 has an invalid length. [ 346.504457][ T9959] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.512005][ T9959] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.843901][ T3848] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 346.858003][ T9959] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.865192][ T9959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.873681][ T9959] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.880867][ T9959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.921586][ T9959] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 347.001639][ T3848] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 347.017331][ T3848] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 347.036548][ T3848] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 347.045876][ T3848] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.187912][ T9968] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 347.208008][ T3848] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 347.328152][ T9980] lo speed is unknown, defaulting to 1000 [ 347.583247][ T5919] usb 8-1: USB disconnect, device number 10 [ 347.792521][ T5904] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 348.124033][ T5904] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 348.140249][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.148441][ T5904] usb 1-1: Product: syz [ 348.153382][ T5904] usb 1-1: Manufacturer: syz [ 348.158047][ T5904] usb 1-1: SerialNumber: syz [ 348.691037][ T9996] netlink: 'syz.0.944': attribute type 1 has an invalid length. [ 349.285558][ T5904] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 349.432067][T10002] comedi comedi0: Minor 3 specified more than once! [ 350.011930][ T5904] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 350.069344][ T5904] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 350.124794][ T5904] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 350.139869][ T5904] usb 1-1: USB disconnect, device number 21 [ 350.309293][ T30] audit: type=1400 audit(1757502882.094:801): avc: denied { watch watch_reads } for pid=10009 comm="syz.5.953" path="/167" dev="tmpfs" ino=899 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 350.864116][ T30] audit: type=1400 audit(1757502882.654:802): avc: denied { setopt } for pid=10017 comm="syz.0.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 351.330470][ T5847] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 351.675535][ T5847] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 351.686748][ T5847] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 96, setting to 64 [ 351.697526][ T5847] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 352.012172][ T5847] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 352.028887][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 352.202471][ T5847] usb 3-1: SerialNumber: syz [ 352.410678][T10021] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 352.521926][ T5847] hub 3-1:1.0: bad descriptor, ignoring hub [ 352.578316][ T5847] hub 3-1:1.0: probe with driver hub failed with error -5 [ 353.230859][T10021] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 353.328373][T10048] comedi comedi0: Minor 3 specified more than once! [ 353.458268][T10021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.591156][T10021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.620052][ T5847] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 354.095613][T10058] comedi comedi0: Minor 3 specified more than once! [ 354.583563][ T5847] usb 3-1: USB disconnect, device number 26 [ 355.054900][T10076] overlay: ./file1 is not a directory [ 355.165783][T10078] netlink: 8 bytes leftover after parsing attributes in process `syz.7.973'. [ 355.180161][ T30] audit: type=1400 audit(1757502886.954:803): avc: denied { nlmsg_read } for pid=10077 comm="syz.7.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 355.227719][T10080] netlink: 'syz.7.973': attribute type 3 has an invalid length. [ 355.236378][T10080] netlink: 'syz.7.973': attribute type 3 has an invalid length. [ 355.282981][T10086] comedi comedi0: Minor 3 specified more than once! [ 355.371117][T10087] comedi comedi0: Minor 3 specified more than once! [ 355.659482][T10092] SELinux: policydb version 116099876 does not match my version range 15-35 [ 355.659576][ T30] audit: type=1400 audit(1757502887.444:804): avc: denied { load_policy } for pid=10091 comm="syz.0.975" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 355.710345][T10093] SELinux: Context system_u:object_r:default_t:s0 is not valid (left unmapped). [ 355.735391][ T30] audit: type=1400 audit(1757502887.494:805): avc: denied { write } for pid=10091 comm="syz.0.975" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 355.759066][T10092] SELinux: failed to load policy [ 355.771434][T10092] SELinux: policydb version 1209483398 does not match my version range 15-35 [ 355.781564][T10092] SELinux: failed to load policy [ 355.825917][ T30] audit: type=1400 audit(1757502887.574:806): avc: denied { relabelto } for pid=10091 comm="syz.0.975" name="file0" dev="tmpfs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:default_t:s0" [ 355.967629][ T30] audit: type=1400 audit(1757502887.574:807): avc: denied { associate } for pid=10091 comm="syz.0.975" name="file0" dev="tmpfs" ino=1105 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:default_t:s0" [ 356.031562][T10100] netlink: 20 bytes leftover after parsing attributes in process `syz.0.976'. [ 356.118043][T10100] geneve2: entered allmulticast mode [ 356.137769][T10106] netlink: 87 bytes leftover after parsing attributes in process `syz.0.976'. [ 356.195561][ T30] audit: type=1400 audit(1757502887.924:808): avc: denied { ioctl } for pid=10095 comm="syz.0.976" path="socket:[26461]" dev="sockfs" ino=26461 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 357.330394][T10119] block nbd7: Attempted send on invalid socket [ 357.337444][T10119] I/O error, dev nbd7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 357.358470][T10119] block nbd7: Attempted send on invalid socket [ 357.367382][T10119] I/O error, dev nbd7, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 357.386346][T10119] Mount JFS Failure: -5 [ 358.803376][T10137] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 360.015078][ T30] audit: type=1400 audit(1757502891.774:809): avc: denied { bind } for pid=10148 comm="syz.0.992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 360.125923][T10157] netlink: 36 bytes leftover after parsing attributes in process `syz.6.990'. [ 360.430439][ T30] audit: type=1400 audit(1757502891.774:810): avc: denied { name_bind } for pid=10148 comm="syz.0.992" src=8194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 360.453911][ T30] audit: type=1400 audit(1757502891.794:811): avc: denied { node_bind } for pid=10148 comm="syz.0.992" src=8194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 360.934678][T10163] input: syz1 as /devices/virtual/input/input20 [ 360.970824][ T30] audit: type=1400 audit(1757502892.744:812): avc: denied { ioctl } for pid=10158 comm="syz.7.993" path="socket:[27649]" dev="sockfs" ino=27649 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 361.847664][T10185] comedi comedi0: Minor 3 specified more than once! [ 361.900614][ T5847] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 362.050398][ T5847] usb 3-1: Using ep0 maxpacket: 8 [ 362.132345][ T5847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 362.751572][ T5847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 362.770545][ T78] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 362.787983][ T5847] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 362.808105][ T5847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 362.840137][ T5847] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 362.881740][ T5847] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 362.926162][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.952333][ T5847] usb 3-1: config 0 descriptor?? [ 362.968739][T10175] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 363.011814][ T78] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 363.059168][ T78] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 363.090520][ T78] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 363.101681][ T78] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 363.109688][ T78] usb 7-1: SerialNumber: syz [ 363.182222][T10175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.307206][T10175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.317310][ T78] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 363.330599][ T78] usb-storage 7-1:1.0: USB Mass Storage device detected [ 363.824110][ T78] usb-storage 7-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 363.845726][ T78] scsi host1: usb-storage 7-1:1.0 [ 365.052417][ T5848] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 365.531143][ T5847] usb 3-1: USB disconnect, device number 27 [ 366.197966][T10218] block nbd7: Attempted send on invalid socket [ 366.265031][T10218] I/O error, dev nbd7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 366.312223][T10218] block nbd7: Attempted send on invalid socket [ 366.318618][T10218] I/O error, dev nbd7, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 366.329172][T10218] Mount JFS Failure: -5 [ 366.527903][ T5904] usb 7-1: USB disconnect, device number 20 [ 366.725924][T10221] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=10221 comm=syz.2.1006 [ 366.867441][T10221] netlink: 'syz.2.1006': attribute type 1 has an invalid length. [ 366.878059][T10228] comedi comedi0: Minor 3 specified more than once! [ 367.435228][T10221] 8021q: adding VLAN 0 to HW filter on device bond2 [ 367.726920][ T30] audit: type=1326 audit(1757502899.514:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10237 comm="syz.2.1012" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9fc5d8eba9 code=0x0 [ 368.077671][T10240] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1009'. [ 368.090508][ T5169] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 368.158991][T10246] !: renamed from dummy0 (while UP) [ 368.183238][T10246] comedi comedi0: Minor 3 specified more than once! [ 368.210153][ T5919] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 368.843353][ T5919] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 368.895711][ T5919] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 368.967836][ T5919] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 369.106643][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.120193][ T5904] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 369.142752][T10257] binder: 10256:10257 ioctl c0306201 0 returned -14 [ 369.149738][T10243] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 369.472579][ T5919] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 369.532441][ T5904] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 369.561606][ T5919] usb 3-1: USB disconnect, device number 28 [ 369.579110][ T5904] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 369.610038][ T5904] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 369.625778][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 369.649908][ T5904] usb 1-1: SerialNumber: syz [ 369.787521][T10260] lo speed is unknown, defaulting to 1000 [ 369.824242][ T30] audit: type=1400 audit(1757502901.614:814): avc: denied { ioctl } for pid=10264 comm="syz.5.1019" path="socket:[28758]" dev="sockfs" ino=28758 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 369.848874][ C0] vkms_vblank_simulate: vblank timer overrun [ 369.878277][ T5904] usb 1-1: 0:2 : does not exist [ 370.029351][ T5169] Bluetooth: hci0: command 0x1407 tx timeout [ 370.406631][ T5904] usb 1-1: USB disconnect, device number 22 [ 370.478865][ T30] audit: type=1400 audit(1757502902.264:815): avc: denied { write } for pid=10264 comm="syz.5.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 370.663039][T10275] block nbd7: Attempted send on invalid socket [ 370.669568][T10275] I/O error, dev nbd7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 370.697243][T10275] block nbd7: Attempted send on invalid socket [ 370.699670][T10263] FAULT_INJECTION: forcing a failure. [ 370.699670][T10263] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.703767][T10275] I/O error, dev nbd7, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 370.734819][T10263] CPU: 0 UID: 0 PID: 10263 Comm: syz.6.1017 Not tainted syzkaller #0 PREEMPT(full) [ 370.734845][T10263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 370.734855][T10263] Call Trace: [ 370.734861][T10263] [ 370.734868][T10263] dump_stack_lvl+0x16c/0x1f0 [ 370.734894][T10263] should_fail_ex+0x512/0x640 [ 370.734920][T10263] _copy_from_user+0x2e/0xd0 [ 370.734945][T10263] move_addr_to_kernel+0x65/0x170 [ 370.734973][T10263] __sys_connect+0xb1/0x160 [ 370.734991][T10263] ? __pfx___sys_connect+0x10/0x10 [ 370.735020][T10263] ? __pfx_ksys_write+0x10/0x10 [ 370.735043][T10263] __x64_sys_connect+0x72/0xb0 [ 370.735059][T10263] ? lockdep_hardirqs_on+0x7c/0x110 [ 370.735078][T10263] do_syscall_64+0xcd/0x4c0 [ 370.735101][T10263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.735118][T10263] RIP: 0033:0x7fea6258eba9 [ 370.735132][T10263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.735148][T10263] RSP: 002b:00007fea6349e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 370.735164][T10263] RAX: ffffffffffffffda RBX: 00007fea627d6090 RCX: 00007fea6258eba9 [ 370.735174][T10263] RDX: 000000000000003a RSI: 00002000000000c0 RDI: 0000000000000006 [ 370.735183][T10263] RBP: 00007fea6349e090 R08: 0000000000000000 R09: 0000000000000000 [ 370.735193][T10263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.735202][T10263] R13: 00007fea627d6128 R14: 00007fea627d6090 R15: 00007ffc15995e08 [ 370.735225][T10263] [ 370.894134][ C0] vkms_vblank_simulate: vblank timer overrun [ 370.971875][T10275] Mount JFS Failure: -5 [ 371.444084][T10284] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10284 comm=syz.5.1024 [ 371.483086][ T1204] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 371.671408][ T1204] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 371.686651][ T1204] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.724357][ T1204] usb 3-1: Product: syz [ 371.728735][ T1204] usb 3-1: Manufacturer: syz [ 371.738876][ T1204] usb 3-1: SerialNumber: syz [ 371.802863][T10301] block nbd0: not configured, cannot reconfigure [ 372.283171][T10314] lo speed is unknown, defaulting to 1000 [ 372.611944][ T30] audit: type=1400 audit(1757502904.404:816): avc: denied { map } for pid=10318 comm="syz.0.1033" path="pipe:[28804]" dev="pipefs" ino=28804 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 372.701940][T10315] FAULT_INJECTION: forcing a failure. [ 372.701940][T10315] name failslab, interval 1, probability 0, space 0, times 0 [ 372.718050][T10315] CPU: 0 UID: 0 PID: 10315 Comm: syz.6.1032 Not tainted syzkaller #0 PREEMPT(full) [ 372.718078][T10315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 372.718088][T10315] Call Trace: [ 372.718095][T10315] [ 372.718101][T10315] dump_stack_lvl+0x16c/0x1f0 [ 372.718127][T10315] should_fail_ex+0x512/0x640 [ 372.718148][T10315] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 372.718176][T10315] should_failslab+0xc2/0x120 [ 372.718195][T10315] __kmalloc_cache_noprof+0x6a/0x3e0 [ 372.718221][T10315] ? l2tp_tunnel_get+0x226/0x480 [ 372.718244][T10315] ? l2tp_tunnel_create+0x96/0x460 [ 372.718268][T10315] l2tp_tunnel_create+0x96/0x460 [ 372.718293][T10315] pppol2tp_tunnel_get.constprop.0+0x358/0x540 [ 372.718322][T10315] ? __pfx_pppol2tp_tunnel_get.constprop.0+0x10/0x10 [ 372.718350][T10315] ? __lock_acquire+0xb97/0x1ce0 [ 372.718387][T10315] pppol2tp_connect+0xb1b/0x1ce0 [ 372.718411][T10315] ? release_sock+0x21/0x220 [ 372.718433][T10315] ? do_raw_spin_lock+0x12c/0x2b0 [ 372.718452][T10315] ? __pfx_pppol2tp_connect+0x10/0x10 [ 372.718475][T10315] ? __print_lock_name+0xc0/0xe0 [ 372.718496][T10315] ? selinux_netlbl_socket_connect+0x30/0x40 [ 372.718521][T10315] ? rcu_is_watching+0x12/0xc0 [ 372.718542][T10315] ? __local_bh_enable_ip+0xa4/0x120 [ 372.718567][T10315] ? selinux_netlbl_socket_connect+0x30/0x40 [ 372.718592][T10315] ? selinux_socket_connect+0x6b/0x80 [ 372.718617][T10315] ? __pfx_pppol2tp_connect+0x10/0x10 [ 372.718639][T10315] __sys_connect_file+0x141/0x1a0 [ 372.718668][T10315] __sys_connect+0x13b/0x160 [ 372.718683][T10315] ? __pfx___sys_connect+0x10/0x10 [ 372.718707][T10315] ? __pfx_ksys_write+0x10/0x10 [ 372.718728][T10315] __x64_sys_connect+0x72/0xb0 [ 372.718744][T10315] ? lockdep_hardirqs_on+0x7c/0x110 [ 372.718765][T10315] do_syscall_64+0xcd/0x4c0 [ 372.718787][T10315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.718804][T10315] RIP: 0033:0x7fea6258eba9 [ 372.718818][T10315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.718833][T10315] RSP: 002b:00007fea6349e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 372.718850][T10315] RAX: ffffffffffffffda RBX: 00007fea627d6090 RCX: 00007fea6258eba9 [ 372.718861][T10315] RDX: 000000000000003a RSI: 00002000000000c0 RDI: 0000000000000006 [ 372.718871][T10315] RBP: 00007fea6349e090 R08: 0000000000000000 R09: 0000000000000000 [ 372.718881][T10315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.718891][T10315] R13: 00007fea627d6128 R14: 00007fea627d6090 R15: 00007ffc15995e08 [ 372.718913][T10315] [ 372.974585][ C0] vkms_vblank_simulate: vblank timer overrun [ 373.850162][ T1204] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 373.904236][ T1204] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 373.980744][T10332] veth0_vlan: entered allmulticast mode [ 374.085772][ T30] audit: type=1400 audit(1757502905.814:817): avc: denied { read write } for pid=10331 comm="syz.6.1036" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 374.129967][ T30] audit: type=1400 audit(1757502905.814:818): avc: denied { open } for pid=10331 comm="syz.6.1036" path="/71/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 374.211735][ T1204] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 374.239089][ T1204] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 374.259126][ T1204] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 374.333985][ T1204] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 374.373878][ T1204] usb 3-1: USB disconnect, device number 29 [ 374.975497][ T30] audit: type=1400 audit(1757502906.764:819): avc: denied { setopt } for pid=10347 comm="syz.7.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 375.738755][T10364] comedi comedi0: Minor 3 specified more than once! [ 376.112321][T10371] overlay: filesystem on ./bus not supported as upperdir [ 376.705160][T10382] block nbd7: Attempted send on invalid socket [ 376.714965][T10382] I/O error, dev nbd7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 376.877741][T10382] block nbd7: Attempted send on invalid socket [ 376.950948][T10382] I/O error, dev nbd7, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.171122][T10382] Mount JFS Failure: -5 [ 378.110132][ T9] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 378.188415][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.303797][ T9] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 378.313947][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.410173][ T9] usb 8-1: Product: syz [ 378.427930][T10413] netlink: 216 bytes leftover after parsing attributes in process `syz.5.1060'. [ 378.437134][T10413] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1060'. [ 378.526570][ T9] usb 8-1: Manufacturer: syz [ 378.533362][ T9] usb 8-1: SerialNumber: syz [ 378.629334][T10411] mkiss: ax0: crc mode is auto. [ 378.968982][ T9] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 379.006382][ T9] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 379.096217][ T9] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 379.146344][ T9] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 379.290824][ T9] usb 8-1: USB disconnect, device number 11 [ 379.444882][T10416] netlink: 'syz.6.1061': attribute type 10 has an invalid length. [ 379.463695][T10416] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 379.473594][T10415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 380.122416][T10426] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 380.159035][T10426] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1064'. [ 381.550779][T10432] block nbd6: Attempted send on invalid socket [ 381.621232][T10432] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 381.722689][ T30] audit: type=1400 audit(1757502913.514:820): avc: denied { read write } for pid=10439 comm="syz.2.1069" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 381.724522][T10432] block nbd6: Attempted send on invalid socket [ 381.759140][ T30] audit: type=1400 audit(1757502913.514:821): avc: denied { open } for pid=10439 comm="syz.2.1069" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 381.809857][T10443] comedi comedi0: Minor 3 specified more than once! [ 381.899244][T10432] I/O error, dev nbd6, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 381.929317][T10440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.943755][T10440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.953053][T10432] Mount JFS Failure: -5 [ 382.020298][ T5919] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 382.027926][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 382.182732][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 382.190252][ T5919] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 382.227070][ T9] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 382.243589][ T5919] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 382.267461][ T9] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 382.574629][ T5919] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 382.605365][ T9] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 382.618180][ T5919] usb 3-1: config 1 has no interface number 1 [ 382.626373][ T9] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 382.635218][ T5919] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 382.667742][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 382.697591][ T9] usb 1-1: config 0 has no interface number 0 [ 382.709610][ T5919] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 382.729941][ T9] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 382.746946][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.755380][ T9] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 382.785043][ T5919] usb 3-1: Product: syz [ 382.791835][ T5919] usb 3-1: Manufacturer: syz [ 382.805775][ T5919] usb 3-1: SerialNumber: syz [ 382.811023][ T9] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 382.830341][ T30] audit: type=1400 audit(1757502914.614:822): avc: denied { ioctl } for pid=10458 comm="syz.7.1073" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 382.832399][ T9] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 382.872018][ T9] usb 1-1: config 0 interface 125 has no altsetting 0 [ 382.879351][ T9] usb 1-1: config 0 interface 125 has no altsetting 2 [ 383.095718][ T9] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 383.109925][ T5919] usb 3-1: USB disconnect, device number 30 [ 383.116184][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.136563][ T9] usb 1-1: Product: syz [ 383.140959][ T9] usb 1-1: Manufacturer: syz [ 383.168911][ T9] usb 1-1: SerialNumber: syz [ 383.196093][ T9] usb 1-1: config 0 descriptor?? [ 383.245981][ T9] usb 1-1: selecting invalid altsetting 2 [ 383.520223][ T24] Process accounting resumed [ 384.026049][ T30] audit: type=1400 audit(1757502915.814:823): avc: denied { ioctl } for pid=10477 comm="syz.6.1077" path="socket:[28335]" dev="sockfs" ino=28335 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 384.133826][T10478] netlink: 'syz.6.1077': attribute type 10 has an invalid length. [ 384.246724][T10436] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1067'. [ 384.468836][ C0] usb 1-1: async_complete: urb error -71 [ 384.486449][ T9] get_1284_register: usb error -71 [ 384.516802][ T9] uss720 1-1:0.125: probe with driver uss720 failed with error -71 [ 385.510109][ T5169] Bluetooth: hci6: command 0x0405 tx timeout [ 385.762890][ T9] usb 1-1: USB disconnect, device number 23 [ 385.790155][ T30] audit: type=1400 audit(1757502917.334:824): avc: denied { mounton } for pid=10479 comm="syz.2.1078" path="/242/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 385.956488][T10491] comedi comedi0: comedi_config --init_data is deprecated [ 386.603108][ T30] audit: type=1400 audit(1757502918.024:825): avc: denied { bind } for pid=10492 comm="syz.6.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 386.643280][ T30] audit: type=1400 audit(1757502918.024:826): avc: denied { write } for pid=10492 comm="syz.6.1081" path="socket:[29089]" dev="sockfs" ino=29089 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 386.729054][T10501] ALSA: mixer_oss: invalid OSS volume '0x00000000000000080x0000000000' [ 386.783589][T10482] overlay: ./file0 is not a directory [ 386.790392][ T30] audit: type=1400 audit(1757502918.564:827): avc: denied { mount } for pid=10479 comm="syz.2.1078" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 388.467355][T10524] comedi comedi0: Minor 3 specified more than once! [ 388.636418][T10526] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 388.650631][T10498] Bluetooth: hci6: command 0x0405 tx timeout [ 388.663212][T10526] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 389.457717][T10535] block nbd0: Attempted send on invalid socket [ 389.495855][T10535] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 389.508157][T10535] block nbd0: Attempted send on invalid socket [ 389.523106][T10535] I/O error, dev nbd0, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 389.536381][T10535] Mount JFS Failure: -5 [ 389.544521][T10538] lo speed is unknown, defaulting to 1000 [ 389.935427][T10542] lo speed is unknown, defaulting to 1000 [ 390.343905][T10553] comedi comedi0: comedi_config --init_data is deprecated [ 391.150147][ T5919] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 391.206147][ T30] audit: type=1400 audit(1757502922.974:828): avc: denied { write } for pid=10564 comm="syz.6.1099" name="mouse0" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 391.372024][ T5919] usb 1-1: too many configurations: 252, using maximum allowed: 8 [ 392.328457][T10568] netlink: zone id is out of range [ 392.336545][ T30] audit: type=1400 audit(1757502923.194:829): avc: denied { block_suspend } for pid=10567 comm="syz.2.1100" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 392.336890][T10568] netlink: zone id is out of range [ 392.363970][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.376215][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.387816][T10568] netlink: zone id is out of range [ 392.394017][T10568] netlink: zone id is out of range [ 392.399579][T10568] netlink: zone id is out of range [ 392.405495][T10568] netlink: zone id is out of range [ 392.411237][T10568] netlink: zone id is out of range [ 392.417745][T10568] netlink: zone id is out of range [ 392.418090][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.440497][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.460302][T10568] netlink: zone id is out of range [ 392.466992][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.470481][T10568] netlink: zone id is out of range [ 392.478079][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.508568][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.520936][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.542318][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.553896][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.592144][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.623220][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.654536][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.667814][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.679933][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.691330][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.702289][ T5919] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 392.711019][T10573] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1101'. [ 392.741567][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.772215][ T5919] usb 1-1: config 0 descriptor?? [ 393.010492][ T24] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 393.170367][ T24] usb 8-1: device descriptor read/64, error -71 [ 393.202318][ T5919] usbhid 1-1:0.0: can't add hid device: -71 [ 393.212388][ T5919] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 393.244383][ T5919] usb 1-1: USB disconnect, device number 24 [ 393.439531][ T24] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 393.760380][ T24] usb 8-1: device descriptor read/64, error -71 [ 393.821937][T10586] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=39 sclass=netlink_audit_socket pid=10586 comm=syz.5.1104 [ 393.834554][T10586] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=18 sclass=netlink_audit_socket pid=10586 comm=syz.5.1104 [ 393.847122][T10586] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=10586 comm=syz.5.1104 [ 393.860088][T10586] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=54 sclass=netlink_audit_socket pid=10586 comm=syz.5.1104 [ 393.872650][T10586] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=40 sclass=netlink_audit_socket pid=10586 comm=syz.5.1104 [ 393.913158][ T24] usb usb8-port1: attempt power cycle [ 394.182222][T10583] binder: 10581:10583 unknown command 0 [ 394.187987][T10583] binder: 10581:10583 ioctl c0306201 200000000180 returned -22 [ 394.197335][T10582] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1105'. [ 394.206557][ T30] audit: type=1400 audit(1757502925.994:830): avc: denied { map } for pid=10581 comm="syz.6.1105" path="/dev/binderfs/binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 394.231630][T10583] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1105'. [ 394.330017][ T24] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 394.365013][ T24] usb 8-1: device descriptor read/8, error -71 [ 394.650440][ T24] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 394.915543][ T30] audit: type=1400 audit(1757502926.464:831): avc: denied { connect } for pid=10591 comm="syz.0.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 395.226512][ T24] usb 8-1: device descriptor read/8, error -71 [ 395.351169][ T24] usb usb8-port1: unable to enumerate USB device [ 395.420353][ T5904] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 395.593577][ T5904] usb 3-1: Using ep0 maxpacket: 16 [ 395.619777][ T5904] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 395.640128][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 395.665647][ T5904] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 395.684495][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.694163][ T5904] usb 3-1: Product: syz [ 395.704603][ T5904] usb 3-1: Manufacturer: syz [ 395.709276][ T5904] usb 3-1: SerialNumber: syz [ 395.716102][ T5904] usb 3-1: config 0 descriptor?? [ 395.732898][ T5904] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 395.748225][ T5904] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 396.422009][ T5904] em28xx 3-1:0.0: chip ID is em28178 [ 396.600185][ T9] usb 3-1: USB disconnect, device number 31 [ 396.636497][ T9] em28xx 3-1:0.0: Disconnecting em28xx [ 396.649542][ T9] em28xx 3-1:0.0: Freeing device [ 397.300620][ T30] audit: type=1400 audit(1757502929.054:832): avc: denied { read } for pid=10633 comm="syz.5.1119" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 397.841315][T10654] bond1: entered promiscuous mode [ 397.856807][T10654] bond1: entered allmulticast mode [ 397.903316][T10654] 8021q: adding VLAN 0 to HW filter on device bond1 [ 398.070186][ T5904] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 398.231783][ T5904] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 398.241012][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.270153][ T5904] usb 1-1: config 0 descriptor?? [ 398.283711][ T5904] cp210x 1-1:0.0: cp210x converter detected [ 398.440325][ T5966] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 398.601828][ T5966] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 398.610570][ T5966] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 398.621146][ T5966] usb 7-1: config 220 has no interface number 2 [ 398.627457][ T5966] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 398.641396][ T5966] usb 7-1: config 220 interface 0 has no altsetting 0 [ 398.648214][ T5966] usb 7-1: config 220 interface 76 has no altsetting 0 [ 398.659626][ T5966] usb 7-1: config 220 interface 1 has no altsetting 0 [ 398.669031][ T5966] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 398.678640][ T5966] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.686805][ T5966] usb 7-1: Product: syz [ 398.696055][ T5904] usb 1-1: cp210x converter now attached to ttyUSB0 [ 398.703024][ T5966] usb 7-1: Manufacturer: syz [ 398.709081][ T5966] usb 7-1: SerialNumber: syz [ 398.714300][ T5904] usb 1-1: USB disconnect, device number 25 [ 398.726115][ T5904] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 398.735984][ T5904] cp210x 1-1:0.0: device disconnected [ 399.649373][T10686] lo speed is unknown, defaulting to 1000 [ 399.786906][T10688] deleting an unspecified loop device is not supported. [ 400.032579][ T30] audit: type=1400 audit(1757502931.824:833): avc: denied { listen } for pid=10692 comm="syz.7.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 400.053085][ T30] audit: type=1400 audit(1757502931.824:834): avc: denied { accept } for pid=10692 comm="syz.7.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 400.094094][ T30] audit: type=1400 audit(1757502931.884:835): avc: denied { mount } for pid=10692 comm="syz.7.1135" name="/" dev="configfs" ino=1122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 400.117048][ T30] audit: type=1400 audit(1757502931.884:836): avc: denied { search } for pid=10692 comm="syz.7.1135" name="/" dev="configfs" ino=1122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 400.139427][ T30] audit: type=1400 audit(1757502931.884:837): avc: denied { search } for pid=10692 comm="syz.7.1135" name="/" dev="configfs" ino=1122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 400.162042][ T30] audit: type=1400 audit(1757502931.894:838): avc: denied { search } for pid=10692 comm="syz.7.1135" name="/" dev="configfs" ino=1122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 400.184965][ T30] audit: type=1400 audit(1757502931.894:839): avc: denied { search } for pid=10692 comm="syz.7.1135" name="/" dev="configfs" ino=1122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 400.208305][ T30] audit: type=1400 audit(1757502931.894:840): avc: denied { search } for pid=10692 comm="syz.7.1135" name="/" dev="configfs" ino=1122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 400.231001][ T30] audit: type=1326 audit(1757502931.894:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10692 comm="syz.7.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067318eba9 code=0x7ffc0000 [ 400.254629][ C0] vkms_vblank_simulate: vblank timer overrun [ 400.261886][ T30] audit: type=1326 audit(1757502931.894:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10692 comm="syz.7.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f067318eba9 code=0x7ffc0000 [ 400.715442][T10704] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1137'. [ 400.875936][T10708] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20003 [ 401.170821][ T5966] usb 7-1: selecting invalid altsetting 0 [ 401.200452][ T5966] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 401.375423][ T5966] usb 7-1: No valid video chain found. [ 401.505358][T10722] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1142'. [ 401.633137][ T5966] usb 7-1: selecting invalid altsetting 0 [ 401.638907][ T5966] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 402.081657][ T5966] usb 7-1: USB disconnect, device number 21 [ 402.585137][T10734] comedi comedi0: Minor 3 specified more than once! [ 403.772716][ T31] INFO: task syz.1.631:8683 blocked for more than 143 seconds. [ 403.870079][ T31] Not tainted syzkaller #0 [ 403.875097][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 403.934658][ T31] task:syz.1.631 state:D stack:29112 pid:8683 tgid:8681 ppid:5844 task_flags:0x400040 flags:0x00004004 [ 403.963264][ T31] Call Trace: [ 403.968831][ T31] [ 403.980155][ T31] __schedule+0x1190/0x5de0 [ 403.992372][ T31] ? __lock_acquire+0xb97/0x1ce0 [ 404.003616][ T31] ? __pfx___schedule+0x10/0x10 [ 404.025854][ T31] ? find_held_lock+0x2b/0x80 [ 404.040084][ T31] ? schedule+0x2d7/0x3a0 [ 404.052185][ T31] schedule+0xe7/0x3a0 [ 404.065813][ T31] super_lock+0x2c0/0x3f0 [ 404.073871][ T31] ? __pfx_super_lock+0x10/0x10 [ 404.083203][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 404.095214][ T31] ? __iterate_supers+0x1b6/0x360 [ 404.103642][ T31] __iterate_supers+0x1e0/0x360 [ 404.114029][ T31] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 404.125117][ T31] ksys_sync+0x89/0x150 [ 404.133722][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 404.142955][ T31] ? do_user_addr_fault+0x843/0x1370 [ 404.153820][ T31] ? rcu_is_watching+0x12/0xc0 [ 404.165217][ T31] ? do_syscall_64+0x91/0x4c0 [ 404.175474][ T31] __do_sys_sync+0xe/0x20 [ 404.184313][ T31] do_syscall_64+0xcd/0x4c0 [ 404.197213][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.214086][ T31] RIP: 0033:0x7fe5b678eba9 [ 404.226016][ T31] RSP: 002b:00007fe5b75c6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 404.241324][ T31] RAX: ffffffffffffffda RBX: 00007fe5b69d6090 RCX: 00007fe5b678eba9 [ 404.249606][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 404.258394][ T31] RBP: 00007fe5b69d6090 R08: 0000000000000000 R09: 0000000000000000 [ 404.267949][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.290161][ T31] R13: 00007fe5b69d6128 R14: 00007fe5b69d6090 R15: 00007fffd7afa4a8 [ 404.309201][ T31] [ 404.316963][ T31] [ 404.316963][ T31] Showing all locks held in the system: [ 404.340102][ T31] 1 lock held by khungtaskd/31: [ 404.350121][ T31] #0: ffffffff8e5c1260 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 404.370935][ T31] 2 locks held by kworker/u8:6/3508: [ 404.382853][ T31] #0: ffff888020bd2148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 404.404464][ T31] #1: ffffc9000cfb7d10 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 404.428484][ T31] 2 locks held by getty/5609: [ 404.457867][ T31] #0: ffff8880316f20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 404.478733][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 404.498884][ T31] 1 lock held by syz-executor/5842: [ 404.508683][ T31] #0: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 404.518838][ T31] 1 lock held by syz.3.581/8479: [ 404.524966][ T31] #0: ffff888025e8e0e0 (&type->s_umount_key#66/1){+.+.}-{4:4}, at: alloc_super+0x235/0xbd0 [ 404.536223][ T31] [ 404.538562][ T31] ============================================= [ 404.538562][ T31] [ 404.547140][ T31] NMI backtrace for cpu 0 [ 404.547151][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 404.547163][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 404.547172][ T31] Call Trace: [ 404.547177][ T31] [ 404.547185][ T31] dump_stack_lvl+0x116/0x1f0 [ 404.547211][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 404.547228][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 404.547246][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 404.547258][ T31] watchdog+0xf0e/0x1260 [ 404.547272][ T31] ? __pfx_watchdog+0x10/0x10 [ 404.547282][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 404.547296][ T31] ? __kthread_parkme+0x19e/0x250 [ 404.547312][ T31] ? __pfx_watchdog+0x10/0x10 [ 404.547323][ T31] kthread+0x3c2/0x780 [ 404.547333][ T31] ? __pfx_kthread+0x10/0x10 [ 404.547344][ T31] ? rcu_is_watching+0x12/0xc0 [ 404.547357][ T31] ? __pfx_kthread+0x10/0x10 [ 404.547367][ T31] ret_from_fork+0x5d4/0x6f0 [ 404.547376][ T31] ? __pfx_kthread+0x10/0x10 [ 404.547386][ T31] ret_from_fork_asm+0x1a/0x30 [ 404.547404][ T31] [ 404.547408][ T31] Sending NMI from CPU 0 to CPUs 1: [ 404.663323][ C1] NMI backtrace for cpu 1 [ 404.663338][ C1] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 404.663353][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 404.663361][ C1] Workqueue: bat_events batadv_nc_worker [ 404.663379][ C1] RIP: 0010:hlock_class+0x13/0x70 [ 404.663396][ C1] Code: 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f b7 47 20 66 25 ff 1f 0f b7 c0 48 0f a3 05 0d 1f 46 14 <73> 15 48 8d 04 80 48 8d 04 80 48 8d 04 c5 60 79 dd 95 c3 cc cc cc [ 404.663408][ C1] RSP: 0018:ffffc90000ac7968 EFLAGS: 00000003 [ 404.663417][ C1] RAX: 0000000000000007 RBX: ffff888140ac2f30 RCX: 0000000000020000 [ 404.663426][ C1] RDX: 0000000000000007 RSI: 0000000000000000 RDI: ffff888140ac2f80 [ 404.663433][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 404.663440][ C1] R10: 0000000000000050 R11: 0000000000000001 R12: ffff888140ac2f80 [ 404.663447][ C1] R13: ffff888140ac2440 R14: 0000000000000000 R15: ffffffff8e5c1260 [ 404.663456][ C1] FS: 0000000000000000(0000) GS:ffff8881247b5000(0000) knlGS:0000000000000000 [ 404.663469][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 404.663477][ C1] CR2: 000055555ea8b5c8 CR3: 000000007f505000 CR4: 00000000003526f0 [ 404.663485][ C1] Call Trace: [ 404.663489][ C1] [ 404.663494][ C1] __lock_acquire+0x218/0x1ce0 [ 404.663516][ C1] lock_acquire+0x179/0x350 [ 404.663539][ C1] ? batadv_nc_process_nc_paths.part.0+0xd3/0x3e0 [ 404.663554][ C1] ? batadv_nc_process_nc_paths.part.0+0x215/0x3e0 [ 404.663569][ C1] ? __pfx_batadv_nc_fwd_flush+0x10/0x10 [ 404.663581][ C1] batadv_nc_process_nc_paths.part.0+0xe4/0x3e0 [ 404.663595][ C1] ? batadv_nc_process_nc_paths.part.0+0xd3/0x3e0 [ 404.663611][ C1] batadv_nc_worker+0xcd3/0x1030 [ 404.663624][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 404.663640][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 404.663655][ C1] ? rcu_is_watching+0x12/0xc0 [ 404.663671][ C1] process_one_work+0x9cc/0x1b70 [ 404.663687][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 404.663700][ C1] ? __pfx_process_one_work+0x10/0x10 [ 404.663715][ C1] ? assign_work+0x1a0/0x250 [ 404.663728][ C1] worker_thread+0x6c8/0xf10 [ 404.663744][ C1] ? __pfx_worker_thread+0x10/0x10 [ 404.663757][ C1] kthread+0x3c2/0x780 [ 404.663769][ C1] ? __pfx_kthread+0x10/0x10 [ 404.663781][ C1] ? rcu_is_watching+0x12/0xc0 [ 404.663795][ C1] ? __pfx_kthread+0x10/0x10 [ 404.663807][ C1] ret_from_fork+0x5d4/0x6f0 [ 404.663820][ C1] ? __pfx_kthread+0x10/0x10 [ 404.663831][ C1] ret_from_fork_asm+0x1a/0x30 [ 404.663850][ C1] [ 404.664475][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 404.925583][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 404.934671][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 404.944703][ T31] Call Trace: [ 404.947960][ T31] [ 404.950871][ T31] dump_stack_lvl+0x3d/0x1f0 [ 404.955448][ T31] vpanic+0x6e8/0x7a0 [ 404.959415][ T31] ? __pfx_vpanic+0x10/0x10 [ 404.963904][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 404.969784][ T31] panic+0xca/0xd0 [ 404.973491][ T31] ? __pfx_panic+0x10/0x10 [ 404.977892][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 404.983248][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 404.989379][ T31] ? watchdog+0xd78/0x1260 [ 404.993775][ T31] ? watchdog+0xd6b/0x1260 [ 404.998174][ T31] watchdog+0xd89/0x1260 [ 405.002398][ T31] ? __pfx_watchdog+0x10/0x10 [ 405.007053][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 405.012235][ T31] ? __kthread_parkme+0x19e/0x250 [ 405.017243][ T31] ? __pfx_watchdog+0x10/0x10 [ 405.021897][ T31] kthread+0x3c2/0x780 [ 405.025944][ T31] ? __pfx_kthread+0x10/0x10 [ 405.030512][ T31] ? rcu_is_watching+0x12/0xc0 [ 405.035258][ T31] ? __pfx_kthread+0x10/0x10 [ 405.039824][ T31] ret_from_fork+0x5d4/0x6f0 [ 405.044390][ T31] ? __pfx_kthread+0x10/0x10 [ 405.048958][ T31] ret_from_fork_asm+0x1a/0x30 [ 405.053715][ T31] [ 405.056910][ T31] Kernel Offset: disabled [ 405.061208][ T31] Rebooting in 86400 seconds..