last executing test programs: 20m24.865990364s ago: executing program 0 (id=2425): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 20m17.511917755s ago: executing program 0 (id=2484): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x10, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0x1000003, 0x4000c2, 0x0, r1}, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x18f4, &(0x7f0000000200)={0x0, 0x2be2, 0x2, 0x1, 0x144}, 0x0, 0x0) socket(0x21, 0x2, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0x77cf, 0x0, 0x0, 0x0) 20m16.880039231s ago: executing program 0 (id=2488): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d893010203010902120001"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x18, &(0x7f0000000240)={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0}) 20m13.893027129s ago: executing program 0 (id=2515): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xde193344a1e0cec0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./cgroup\x00', 0x0, 0x101015, 0x0) mount$9p_unix(&(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000200)='./cgroup\x00', 0x0, 0x1000, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 20m13.676108466s ago: executing program 0 (id=2516): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000008c0), &(0x7f0000000340)=0x8) 20m13.084433155s ago: executing program 0 (id=2523): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000400)={&(0x7f0000000000)=[{0x4, 0x8c01, 0x45, &(0x7f00000007c0)="253ae1ff09423e082b90f4bf0aa5025a01c8d0fae52c8745ffb6c9b07820ba0a7da757dc4f648ed7aed50713c965c3403169b921fe2c0b9370e56e21421bd29fcb0c911af3"}], 0x1}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x2000c001) 20m12.574003046s ago: executing program 32 (id=2523): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000400)={&(0x7f0000000000)=[{0x4, 0x8c01, 0x45, &(0x7f00000007c0)="253ae1ff09423e082b90f4bf0aa5025a01c8d0fae52c8745ffb6c9b07820ba0a7da757dc4f648ed7aed50713c965c3403169b921fe2c0b9370e56e21421bd29fcb0c911af3"}], 0x1}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x2000c001) 9m10.248877075s ago: executing program 5 (id=4860): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x1f00, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 9m9.105972839s ago: executing program 5 (id=4861): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x6, 0x40, 0x9e5, 0x8000, 0x60ce, 0xd, 0x2, {0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x8001, 0xc3, 0x32, 0x0, 0x2}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket(0x15, 0x5, 0x0) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r4, &(0x7f000001aa40)=""/102392, 0x18ff8) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r6, 0x1}}, 0x18) writev(0xffffffffffffffff, &(0x7f0000000000), 0x28) socket$kcm(0x2, 0x0, 0x2) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x4b34, 0x3bf) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x24040808) socket$nl_netfilter(0x10, 0x3, 0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9m7.347619387s ago: executing program 5 (id=4867): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040040}, 0x810) 9m7.266731069s ago: executing program 5 (id=4868): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = socket$netlink(0x10, 0x3, 0xe) writev(r2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r4, &(0x7f0000000100)={{0x3, @default, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendmsg$key(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x68}}, 0xc0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(r6, r6, r6) setpgid(r5, 0x0) setpgid(0x0, r5) r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x5000, 0x25000, 0xb, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x1, 0x2, 0x0, 0x4, 0x1, 0x81, 0x0, 0xc4, 0x5}, {0x50000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0xdddd0000, 0xeeee0000, 0xb, 0x0, 0x3, 0x1, 0x1, 0x4, 0x4, 0x90, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0xff, 0x3, 0x4, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0x4000, 0x8000000, 0xf, 0x5, 0x28, 0x94, 0xa, 0x0, 0x54, 0x1, 0xff, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x9}, 0x60050000, 0x0, 0xffff1000, 0x200300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x4000000000006, 0xc5]}) r9 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000300)={0x0, &(0x7f0000000440)=[@nested_amd_invlpga={0x17d, 0x20, {0x6000, 0x3723}}, @nested_load_syzos={0x136, 0xd5, {0x1, 0x5, [@wr_drn={0x68, 0x20, {0x7, 0xad2}}, @wrmsr={0x65, 0x20, {0x85b, 0x10}}, @nested_load_code={0x12e, 0x5d, {0x1, "400f01c4f343abb805000000b91d12fd2a0f01d9b9f50900000f3266410f6958b20f799900080000c483fd090d00000000053666410f3880378f4a90120ac8a0f7f1260f08"}}, @rdmsr={0x66, 0x18, {0x356}}]}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_stgi={0x17e, 0x10}], 0x115}) syz_kvm_setup_cpu$x86(r7, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000580)="64660f380b42c70f79d1b9800000c00f3235004000000f3066baa00066ed0f01ca0f01df0f20c035000001000f22c0c74424007d9e0000c74424020a000000c7442406000000000f011c240ff6e2b8010000000f01c1", 0x56}], 0x1, 0x25, 0x0, 0x0) 9m6.829467058s ago: executing program 5 (id=4873): socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1e, 0x4, @thr={&(0x7f0000000100)="ea9a7c3355071cf01c0f2984d85faa4ebc917628834936bddd4288d6a7e8490d84fc4a84139bf7ed2b35ff37be70c18150a51925e763a7326e1493", &(0x7f00000003c0)="b80f3f5554a73e06fb2c27e338045804833ce1c7ef939dc8aa3a56c7ed74de25368af7adde8f88658616fa1bba77f42dc510cc2b827121feeaf3909ad7247b8b506926aa7a88e88dcebab46d19"}}, &(0x7f00000000c0)) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) socket(0xa, 0x5, 0x0) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0x4001, 0x7ad281) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000040)={0x0, 0x2, 0x5, 0xffffffffffffffff}) r2 = getpgrp(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_io_uring_setup(0x49a, 0x0, 0x0, &(0x7f00000006c0)) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48}) r5 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x80003125, 0x3cd0, 0x4004, 0x181}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x20, &(0x7f0000000000)=[r5], 0x1) ioctl$COMEDI_LOCK(0xffffffffffffffff, 0x6405) getpgid(r2) 9m5.864232032s ago: executing program 5 (id=4876): r0 = socket$kcm(0x10, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r3, 0x611, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x0, 0x6, @l2={'eth', 0x3a, 'vlan1\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x60000000) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="540000001200010300000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000026334cad815f27b43a48793013"], 0x54}}, 0x0) getresuid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000400)) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2004c840) 9m5.587015646s ago: executing program 33 (id=4876): r0 = socket$kcm(0x10, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r3, 0x611, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x0, 0x6, @l2={'eth', 0x3a, 'vlan1\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x60000000) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="540000001200010300000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000026334cad815f27b43a48793013"], 0x54}}, 0x0) getresuid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000400)) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2004c840) 6m14.933042814s ago: executing program 4 (id=5562): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r1, 0x4b63, 0x4) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000fffd29bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000223803001c0012800c0001006d6163766c616e000c000280080009000800ffef0800", @ANYRES32=r0], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20040040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGABS0(r5, 0x80184540, &(0x7f00000009c0)=""/4096) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x600008d0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="600000000206010800000000000000000a0000000900020073797a320000000005000400000000001400078005001500040000000800114000000000050005000a00000014000300686173683a69702c706f72742c6970000500010007"], 0x60}}, 0x84000) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@private1, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x10, 0x9}, {0x0, 0x1}, 0x4, 0x0, 0x1, 0x0, 0x2}, {{@in=@rand_addr=0x64010102, 0x24d2, 0x33}, 0x0, @in=@loopback, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9}}, 0xe8) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x1c) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0x2, &(0x7f00000005c0)=0x8, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x8880}, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x8, 0x80) r9 = openat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x200000, 0x0, 0x8}, 0x18) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r9, 0x40786e88, &(0x7f0000000540)={{&(0x7f0000000280)=[{0x3ff, 0x401, 0xf, {0xfffffffffffffffe, 0xfff}, 0x6, 0x6, 0xc}, {0x4, 0x6, 0x1, {0x8, 0x5}, 0x2, 0xed20, 0xc83c}, {0x4, 0x1, 0x81, {0x2, 0x8}, 0x1, 0x5, 0x7}, {0x100000000, 0x3, 0xffffffffffff547b, {0x0, 0x1}, 0x91d, 0x4, 0x7ff}, {0xc, 0x5161d793, 0xffffffff, {0x7, 0x6}, 0x401, 0x0, 0x43}], 0x5, 0x40, 0x3, 0x9}, {&(0x7f00000003c0)=[{0x2, 0x9e}, {0x7}], 0x2, 0x10, 0x7ff}, {&(0x7f0000000400)=[0x3, 0x7, 0x4, 0x6, 0x3, 0x5, 0x8], 0x7, 0x8, 0xab0, 0xfffffffffffffff6}, {&(0x7f00000004c0)=[{0x700000000000000, 0x8, 0xfffffffffffffffa, 0x10000, 0xfffffffd}, {0x0, 0xfffffffffffff000, 0x8, 0x1f2d, 0x2}], 0x2, 0x28, 0x3, 0x1}, {&(0x7f0000000440)=[0x9, 0x5, 0x800, 0x6, 0x2, 0xffff], 0x6, 0x8, 0x4, 0x7}}) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) 6m9.288986765s ago: executing program 4 (id=5580): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000140)={0xffffffffffffffff, 0x3ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r2 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f810801177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x25]}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(&(0x7f0000000000)={0x170e4000, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r6 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000006780)={0x0, 0x0, &(0x7f0000006740)={&(0x7f0000000640)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="010029000000fedbdf252500000005002b00020000000a0001007770"], 0x30}, 0x1, 0x0, 0x0, 0x4008004}, 0x48000) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r6, 0x0, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000040)={[{0x2b, 'rdma'}, {0x2b, 'cpuset'}]}, 0xe) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0185879, &(0x7f00000004c0)={0x0, 0xffffffffffffffff, 0x400000, 0x2, 0x0, 0x0, 0x2401}) 6m8.006362626s ago: executing program 4 (id=5583): prctl$PR_SET_MM(0x35, 0x6, &(0x7f0000f77000/0x4000)=nil) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) close(r3) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r5 = socket$kcm(0x1e, 0x5, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000b240)=[{{&(0x7f00000010c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001180)=[{&(0x7f0000001140)="309b66fcf4c859d9786972863c3192fa267be11fade3cba6a4d5c9c0dfc2e03bb3159500bf0592afa0e9d8c353d283", 0x2f}], 0x1, &(0x7f0000001380)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r5, @ANYRES32, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000003e4faf658995a1dbbcc705c5297e071209aad6bf8ef5156b73cc0fede45de09e534bcb4ed956a55d36af2651f39b9d23966300ac9360662b0c7a9d36db2a1ecf08617ba28af83c724529513f1902a4f641e0fc1ef81398f1adc001e8db8cf31e85a113ec661590b544c9b77b7b3e6f34233b11d0d5b1e53a9bc680c369f8aee49b07c1e026658c8734b360a45c2d4a77d907f5e5668d8ed3bff7ccbee4e9183d0af6da965f95488215f5a677d002000000000000005cab8800"/203], 0xe0, 0x800}}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000001700)="59a29eb3bf6c0486022fa4f03369233e2ee154758b867b257ef88eeda389062eeccafb85cccb738a795797efb5eedec8198c8227bcefd8e1f941ad6881bd4684f224910b0b85c523c071bf41c1900b73b3b44cde6118458af42938c73a77bc7f9efe224855a706fbb2ec88327280a4441bc6a51fd0df9b3f62dd626664b91dcd3c5c3cad81f021a22f5158e7afcf27c79aeaba68f76ac9efba2c2a70a8b578c1630083d829b1be84b4f1b29b5841b01aa23b558e132fef56ec", 0xb9}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000028c0)="2c899af289605c1a9d979ca1595fabb7714be0645559376da513973640fbd68e00d1f17f82ca549f61d78aae1e5a4164a0d18a87fb499834b698aa26f820b718f74028d9fa3cf0b884068a00617d58b5c6602b24f0ef2c3db0c1d205fdd2605c0884e7d9e59e03b8f336db576724da4f26b897e1d05a323c9958d7ed6600ee73f2c032e160e9e16f75f404dba764ffc30295ab13d3f2ff2e7294048b38201e0352c2775b9114604f5d7b12f1f29285d5d95c8a3ffec518ef02140631fc208a54a9c6d4a2c16cd22b503f203a2f37346e78700262544acfc137999ae1520994ad761cf094f6a34946326e2d00", 0xec}, {&(0x7f00000029c0)="d8f1f55eba23d2c5c7354d0a0ce7fd5f7d4b2de6da3eaa8634df1963364676bf573d1d36d47f229f1c5c8c76230e39ebb9fa13ca3459396fa9493b63cb8560fe27551f74d30fcb1532770f94955dc3", 0x4f}, {&(0x7f0000002a40)}], 0x5, &(0x7f0000002c40)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20, 0x1000}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {{&(0x7f0000004fc0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000005400)=[{0x0}, {&(0x7f00000050c0)="67f84a2912c8ef700847d18d94941308d20f179a696530944d29b5cc43a52c44e9125f1bc88beea993f953ba19add2cc1b6ecc372da23ddf79b622b6cda12067ea37fa15bd824d5cbc625f3d71ba6485d4acf9755e0c385359f955f7165786e0f320394503761c534c4ea2", 0x6b}, {&(0x7f0000005140)="c5af7d0d6ab3fce5ee21362f633ee0800c5403b2ae2c8b32d021ea12f9a98b2d0ebc0f9f6cd7f39052ea189026e1ca63f634028e440d651bc8bc6d74008dbd7df8d63b668b01dfe134d69f", 0x4b}, {&(0x7f00000051c0)="5c341cd106dfc1615dcd897b8b265d1f6c65f3ed2e4d23e5e411f483d44fdbb177da11e8e453edc9fb7116233fa37eb55eab331197677bbc2074834fabb136ee9a235f3fd83ee78677039cdb902b9a0b222de7874e7ef1257acbba9cc3ca84929a467947ce939c6b25f067eaa9a8bc4a13", 0x71}, {&(0x7f0000005240)="cb7e0aafe48f96a24aa437b0e5aba4d7ea75d22e85a2f78ec2f7604cb65c48ec6a8288482e7627970f4395de72a045174a63c26e15effc3d29e89220d237874ef7a05ad1d1e9a05fe180b5f09c9318dedad64ea4cf48f5ebb422e1708ff428eafa9851001e9ceb86e83b99c9ab1e69335244fdc75f5b7b507fd0bba30c527c267ce4949b51c35c02fa6723b5941a", 0x8e}, {&(0x7f0000005300)="7d3430d2a1ac9bf470b79d2a4791752c906ad8f6459dae66f0fdd3bebd5de2363e9c89715cd69a6bd0189f2ded169a0aeff3716103bb4690480f06fb350c866113045514a15fe3c2fdf617e7bd1c256f8de00c0e2d6bcceb93d6a3b9a3140c6d24e7c0b340600b7c4de412530b3542f923a529be5226b4c0c82658613883da250965c5366c6819a636eba36f199bbdc68630b9686256a82a76b8b1e7d3c7afe5b4ac9a101de630dee1d12a7285a9172761fd2cd345844a66dfb4d6c5fe7c706056bc225dc0933359343bce9d6f5f344da70e7c470c286ea2", 0xd8}], 0x6, &(0x7f0000005680), 0x0, 0x4008000}}, {{&(0x7f0000005780)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000006f00)=[{&(0x7f0000005800)="376193fb3f684d4788c12eb18874291393c68fbe9673bdf8d21b0879361f341c8618ffcd455494d438e2bdde3c3eaa8b3d15995acd414d3f07eb662cb148191aca37c1d468c5bf521cd368ceaae91cf6289a4bba7922de6d520a613b8d48f384c82448cf0de5b7c16c3ca55cba9dfab7df7d4a0f466adf836e9b1509467706863d37ca944d", 0x85}, {&(0x7f00000058c0)="459ac826bc2d1c257cf02bbd34f821da2adecc6cb22c9383d10a86817e9a0bc70443418e0dc1", 0x26}, {0x0}, {&(0x7f0000005bc0)="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", 0x1000}, {&(0x7f0000006bc0)="4155bd0eba0f8051f475cd3a289d113bb4980c810ec593d0510f82066aa70edcb20feb16edb3ebd35247caef76f648cc366fe0150e7c25d8c4d701e30c79bf14ce49bd8678271ab636c7d24b5b6ebee781d55ea896426199c88b6cad4376bb403c6e9138b5086af68f8d342c30fa5bf10adebfb5c8f3b9f70b45420f4252f665d245ff0a18f663aa3f00", 0x8a}, {&(0x7f0000006c80)="12b70a8c9bf7c66bfac6b59a690d151d7fff0693516d8171164f7ad3242871d9c4655f887359e55416bde7e679828deb40784d83fad9e755ece747cf25ad6a988974f1608e15ed3087773a4d19c88745b7616091335d563116906f2b5f71919cea5ab994f133666aff5b19b16dcd981aee0ed76e49a24ad97db609571fa3e71e94a97c3a1f79a67e1887a21424dc0872ab98e7a0777ea912dd24e2cf1821b34651464957fe27f45ca0e93ac9bf9ea4ca18a3063564bbc798dc5dc78ca14a869cfd371e99591e5f15b356b12c023fe7539255dc70b3f1b642c3f85f7ce6bc1f25cd28ee95940ad2880f", 0xe9}, {&(0x7f0000006d80)="2dfab9f7ae3237e145875cab8525a38416d20c6abede50d077dd887b604a51de3ab6", 0x22}], 0x7, &(0x7f00000011c0)=ANY=[@ANYBLOB="3400000000000000000000c833eb48bfa978d23eec2c1e750b9d03942573908d445e5e10b93a343a42cbdbaea32d11cacb3ad1ce9945c62e5e7b4848f536d3e57b6166acc0ef7cae143a3f69008acf576e31430044e227bdd9007f8241e9f8ac31ae016ce067a4c6b56ecf4654c7e92c3881935d6b82dc7f31c6c574d72e2e38f25a6d122351dd0f72c3968a3196b86346185c", @ANYRES32, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32, @ANYRES32=r3, @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}, {{&(0x7f0000007280)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000074c0), 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r5, @ANYBLOB="3c0af8e3153941b9a6000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x90, 0x50}}, {{&(0x7f0000007640)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000008c00)=[{&(0x7f00000076c0)}, {&(0x7f0000007700)="99732f295e5f7a17e82fcdbce33e3127a32270088fe85b47a044eadd36334ddcf38209f6b350b2ded50faf63b824763e88d862acfb781e0d48bbee00fc8d6ddc82e1fb5d06bfabfd851d1d7a621c26b406de67f6282775186dc8f4aba9b63276321a7e75f076656b57bf4cbc096c4bea4c1aa81f", 0x74}, {&(0x7f0000007800)="d858d54620857ace67617139bc263315c0aac4cf5ff1b19b1107d4941570eb78132cb295ddc461ff6da04206c2a11713762e32536e3f329e0bb4a458f2221d4ad9bfed0b7b513641576f38784531d17278ea4c5b3e58c068bb936e1a017899a4f7ac46f1f4b7041aef0d6fff74618b977c946a15553e7b8fa4498ae9f1dda93d8c861fbe85a731260a1421dc215329f8a1c43c999f50d48ee406823e4f302a610b69b4b85c55696598232409bcb1f9c030637c737c867fe412d4ef246f8931586f3387841864691b1eb11f93cc89748f9225524615de12", 0xd7}, {&(0x7f0000007900)="d8cd93e6ed13e0080d3078024b44b5f4dae83df799f4a9160def96112674bd7bae89b93a3847e2878290ae810800d440a7480b4d5886f2496ad10a6325411399f43f161e1d4544", 0x47}, {&(0x7f0000007980)="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", 0xffe}, {&(0x7f0000008980)="e2fd7dcd3a3322e86f67bc66a9a1d85359c83d3be1410a09c6fec2ed3d7cf56154a747c113e6788565d905eed098e1eaf6837c9f789de8fb9a0ff97a82abaed10c31c97106a38fa70a84f2f67a82973f3d1691c394e3241c8609237efa567f20aecbbc26bc89d2abf02a5128246bff4c8857822f5f045da97f24e327432ee8030bb384fbe571bb48e2094f03d22708783e135778442d4a7b513c4985", 0x9c}, {&(0x7f0000008a40)="0cd5636844789d3d738f9ae0ac487313583bc07a2f022984e07cbb107e847e88580c8e3cca35d7e05deee29984e308d0f7362101f41413c7a49710e829989693ac5b51098e0fb5488eb7df510de88f502fe705762b", 0x55}, {&(0x7f0000008ac0)="1f323fd562909053f884d6f0c02972bfed86f1dd32dda36cfd23cdc68e6e225ace46d8a4d4bd21a6aed065289fb32b32ffa675ac031e29ba5be27efee4f25655cdb192ea373a2dc73bed960b85cf565adcb819", 0x53}, {&(0x7f0000008b80)}], 0x9, &(0x7f000000b180)=ANY=[@ANYBLOB="180000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES8=r2, @ANYRES32, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r5, @ANYRES32=r2, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r5, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x48801}}], 0x7, 0x4000) r6 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r6, 0x84, 0x84, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) sendmsg$kcm(r5, &(0x7f0000000580)={&(0x7f0000000300)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x4, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x220}, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) capset(0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(&(0x7f00000001c0)={0x20071026, r1}, &(0x7f0000000280)={0x0, 0x9, 0x3, 0x0, 0x4, 0x3}) r7 = socket$qrtr(0x2a, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000004000071efeffffff00000000017c0000040042801400018010000400cab1893a20b8d2a93521800a04000280141511b5250edf7fed8a42dd8103d02b0e42800c3c9ed0177a7ebc4675544401f81bfb004ad7fbc3a82b84720e6654737ec5ae7908c2761c1db2c622ba62a5a3f015896d9f03756a6c71304e4b3ddea352da5e875d91d63a00521891a45ef4d5d16aa6adf58d174977ca0589d3da2bb1eadb663247"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) connect$qrtr(r7, &(0x7f0000000040)={0x2a, 0x0, 0xfffffffe}, 0xc) 6m6.915080037s ago: executing program 4 (id=5585): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) (fail_nth: 6) 6m5.999868486s ago: executing program 4 (id=5587): syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x400, @empty, 0x100001}, 0x1c) r1 = socket(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a88848b96648e582006e9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x7fffffff}, @TCA_FQ_CODEL_ECN={0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f00004e220000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 6m3.95580004s ago: executing program 4 (id=5593): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) r2 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x203bce, 0x10100, 0x3, 0x100}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)='=', 0x1}], 0x1}, 0x4000000) syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r6, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000800)=""/189, 0xbd}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r2, 0x46f3, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x8, 0x10001, 0x35d}, &(0x7f00000002c0), &(0x7f0000ff4000)) close_range(r1, r1, 0x0) 6m3.23780497s ago: executing program 34 (id=5593): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) r2 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x203bce, 0x10100, 0x3, 0x100}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)='=', 0x1}], 0x1}, 0x4000000) syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r6, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000800)=""/189, 0xbd}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r2, 0x46f3, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x8, 0x10001, 0x35d}, &(0x7f00000002c0), &(0x7f0000ff4000)) close_range(r1, r1, 0x0) 2m40.263479104s ago: executing program 2 (id=6207): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000080)) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x2, {0x2, 0x0, 0x0, 0x3, 0x4000, 0x265, {0x3, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x6a4, 0x0, 0x81}]}) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r11, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r11, 0xc0405610, &(0x7f0000000180)={0x2, 0x7, 0x10000, 0x4000}) r12 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r12, {0x2, 0x3, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGMRU(r10, 0x80047453, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m38.448388387s ago: executing program 2 (id=6212): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000800) 2m38.250669249s ago: executing program 2 (id=6215): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x2, 0x0, 0x7d, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001cc0)=""/252, 0xfc}], 0x1}}], 0x3, 0x400000a0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x8000000000000003, {}, 0xfd}, 0x18) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x1000, 0x2, 0x1f8}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e2, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) writev(r1, &(0x7f00000006c0)=[{&(0x7f00000005c0)="294a6dda96f5ee5fde265a925f", 0xd}, {0x0}], 0x2) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r1, 0x0, 0x0, 0x5d, 0x20000000, 0x1}) io_uring_enter(r3, 0x47b7, 0x0, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r6, 0x8008976) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, 0x0, 0x0) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x1000, &(0x7f0000000000)="d644bbd4baa9857bbd13c2d6f77cfe705cdafb4d7a81265a4baff3a28cbef9787657b2a75cf50eb7edb85e683f117f92d633ddea7d4034bb45c2c2d4947e8ed034643591180526b1684093105fd32056ada5047b53ba6fdf6756af84b2ca20e30d292e879fbd754b870ff8c7207d735940a032071a97f29a8d9cbc730ddc04e20d12e4dcc5b4b0fe1ce00ac1228eefd0997a02b1771eb36597973976eaaa01575775c1911aded8f33933a8c7f667e39be46136d5", 0xb4, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)="028b33123b80f8a1826aa2f9b589d882db0ef221101ce81ec8c360bb6b6382582daf764cf4c712673b16") ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) 2m35.000260212s ago: executing program 2 (id=6223): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x11c) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400000000000000", @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4) socket$inet6(0xa, 0x800000000000002, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000001c0)) listxattr(0x0, 0x0, 0x0) 2m33.872571464s ago: executing program 2 (id=6227): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f00000000c0)=0x5) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) connect$nfc_raw(r1, &(0x7f0000000240)={0x27, r3, 0x0, 0x4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES64=0xffffffffffffffff, @ANYRES8=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010046"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000010001fff03000000fdfffeff00000000", @ANYRES32=0x0, @ANYRESDEC=r4, @ANYRES32=r2, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) 2m33.572953876s ago: executing program 2 (id=6228): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0d00000006000000040000000100000000000000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000fd0000000000000000000000000000ada2e27386d4cc00"/35], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113f0000000000851000000200000085000000760000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r3 = socket(0x2, 0x3, 0xff) close_range(r3, 0xffffffffffffffff, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) rt_sigtimedwait(&(0x7f00000000c0)={[0xe]}, 0x0, 0x0, 0x8) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r4, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0x40014) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB], 0x64}}, 0x0) read(0xffffffffffffffff, &(0x7f0000000100)=""/114, 0x72) r6 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) bind$packet(r6, 0x0, 0x0) 2m19.228926042s ago: executing program 35 (id=6228): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0d00000006000000040000000100000000000000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000fd0000000000000000000000000000ada2e27386d4cc00"/35], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113f0000000000851000000200000085000000760000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r3 = socket(0x2, 0x3, 0xff) close_range(r3, 0xffffffffffffffff, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) rt_sigtimedwait(&(0x7f00000000c0)={[0xe]}, 0x0, 0x0, 0x8) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r4, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0x40014) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB], 0x64}}, 0x0) read(0xffffffffffffffff, &(0x7f0000000100)=""/114, 0x72) r6 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) bind$packet(r6, 0x0, 0x0) 13.6016964s ago: executing program 8 (id=6627): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000fc0)='net/packet\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x4c0f, 0x400, 0x3, 0x288}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r6, 0x0, &(0x7f0000001780)=""/4096}, 0x20) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000200)=""/109, 0x6d}], 0x1, 0x40, 0x3) ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x88831, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r0, 0x2000, 0x0) 12.94058687s ago: executing program 6 (id=6630): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r1 = syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0x7af1, 0x80, 0x3, 0x3da}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4007, @fd_index, 0x400000080001001, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001aa40)=""/102392, 0x18ff8) io_uring_enter(r1, 0x47f3, 0xfbfffffe, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 12.44013565s ago: executing program 6 (id=6632): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000080000000800000008"], 0x48) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="58000200f9f880591335178a3140020adb15cdad5fc7a55255de451270b2e43a3771936cabfeae16a125a24f9b21af8517a319ac122d7c6cba70ac245302124741c8a6942fc040a07bde9a95b2990053c01bbb12ee43ab8215f50ba603ee12a2a4e0afe7f2f2f7396c9a37c0820e5bc6a662a99e8c44d4bd552d4bea982e7601dfafe81c95ceb8cda240", @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf2508000000380002803400038030000180080001000f0000000800010001000000050002000000000008000100050000000400030008000100010000000c00018008000100", @ANYRES32=0x0, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x200468c0}, 0x10004000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) r5 = gettid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x0, 0x0) sched_setaffinity(0x0, 0xc67e7be33bfcd098, &(0x7f0000000180)=0x400000bce) r9 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r9, &(0x7f0000032680)=""/102400, 0x19000) fanotify_mark(0xffffffffffffffff, 0x1, 0x8, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/116, 0x74, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x3, &(0x7f0000000000)=[{0x14, 0xfc}, {0x2c}, {0x6}]}) mmap$dsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000006, 0x87013, r7, 0x0) ioctl$SNDCTL_SEQ_SYNC(r7, 0x5101) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c000008000100", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xe, 0x0, &(0x7f00000000c0)="279a004c6588d5d6dc03d5cc2a00", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 12.001758921s ago: executing program 8 (id=6633): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4007, @fd_index, 0x400000080001001, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102392, 0x18ff8) io_uring_enter(0xffffffffffffffff, 0x47f3, 0xfbfffffe, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 10.869635056s ago: executing program 8 (id=6635): syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="1201000300000020b804020500000000000000000000000100807f0904000000637b9707010000090501020000"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) renameat(r2, &(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='\x00') close(r2) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f00000000c0)={0x1, 0x6, 0xe2, &(0x7f0000000500)=""/226}) sendto(r5, &(0x7f0000000200)='9', 0x1, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f0000004600)}}, {{0x0, 0x0, &(0x7f0000005c40)=[{0x0}], 0x1}}], 0x2, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700}) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000100)={'wlan1\x00', @random="0100008dffff"}) ioctl$SIOCSIFHWADDR(r2, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r6, 0x40044590, 0x0) unshare(0x62000280) r7 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[], 0x0) mount$9p_tcp(&(0x7f0000000240), &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0x21f090, &(0x7f00000007c0)=ANY=[@ANYBLOB="7472616e733d7463400000000000000078303030303030303030303030667363616368652c63616368653d7265616461686561642c667363616368652c616669643d3078303030f73030303030303030342c616669243d3078303030303030303030303030303030372c616e616d653d706f72742c00a13440d2eec939e0de2e7db5839f14ede4b2a0b082795d440b07e7a7822ac15d7b44384021d90bbca03e9cc5beb31d3a888f0e586ae707c87e3399a4437af076cd3049df2ca11f7cc37e56cb9e01d3c385af970e12422d9f71b0a7846e9937fabdd6590d38358ffb18071df091074f52cc1c53de4f6e32223cfa5f52ff4473b80101ffd7e9b47c992d6daa7ef09d62fc2ddea2f6e61278b2e88752bc9ec8ce71b1cf76c855367ccdb64bb265032dfd9121c1a43794d3158ac05f26182e289762ea0cd8f7c763db892753e6b35df2a11038695912e0fa0355533e91d21e702005d5bf789c80ea86dd5f56128eb71b7e8505ca000000", @ANYBLOB="5f6504e9e65730092ce8721a798e9541c2629f34d2a318348e5c8875cf6ae8ade1359a0d1e428b595553b031", @ANYRESOCT=r7, @ANYRESHEX=r3]) socket$alg(0x26, 0x5, 0x0) 10.515227207s ago: executing program 6 (id=6639): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x8000036, r0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) (async) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x0) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000100)={0x2, 0x2, &(0x7f0000000040)="25b6"}) (async) chown(&(0x7f00000040c0)='./file0\x00', 0x0, 0x0) (async) r5 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[0x0, 0x0], 0x2}) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) close_range(r5, 0xffffffffffffffff, 0x0) (async) fanotify_mark(r1, 0x441, 0x102b, r0, 0x0) (async) r7 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f00000005c0)={0xa, 0x100, 0x3, {0x7, 0x1000, 0x4, 0xffffffff}}) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) 8.632367258s ago: executing program 7 (id=6642): socket$l2tp(0x2, 0x2, 0x73) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000200)) socket$unix(0x1, 0x1, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0xca352c92cb699c71, 0xffffffffffffffff, 0xd0a55000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x10, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102384, 0x18ff0) socket(0x9, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006506010100000000000000000100000005000100070000000900020073797a31000000000c00076808001300000000000500"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r3 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890c, &(0x7f0000000000)) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r6 = fspick(r5, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r7, 0x84, 0xb, 0x0, &(0x7f0000000140)) 8.025577985s ago: executing program 7 (id=6643): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x0, @fd=r0, 0x1, 0x0, 0x0, 0x12}) io_uring_enter(r1, 0x1697, 0xb05c, 0xe, 0x0, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x12, 0x0, 0x0) gettid() syz_emit_ethernet(0x72, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c200000e0180c200000f86dd61002724003c3aff00000000000000000000000000000000ff02800000000000000000000000000101049078000000006d3103000f4e000120010000000000000000000000000001fc0100000000000000000000000000003a000c08680000000d000000"], 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) socket(0x10, 0x80002, 0x0) 7.960032717s ago: executing program 6 (id=6644): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000000)=0x573b, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (fail_nth: 1) 7.265182443s ago: executing program 1 (id=6645): prctl$PR_SET_MM(0x35, 0x6, &(0x7f0000f77000/0x4000)=nil) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) close(r3) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r5 = socket$kcm(0x1e, 0x5, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000b240)=[{{&(0x7f00000010c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001180)=[{&(0x7f0000001140)="309b66fcf4c859d9786972863c3192fa267be11fade3cba6a4d5c9c0dfc2e03bb3159500bf0592afa0e9d8c353d283", 0x2f}], 0x1, &(0x7f0000001380)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r5, @ANYRES32, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000003e4faf658995a1dbbcc705c5297e071209aad6bf8ef5156b73cc0fede45de09e534bcb4ed956a55d36af2651f39b9d23966300ac9360662b0c7a9d36db2a1ecf08617ba28af83c724529513f1902a4f641e0fc1ef81398f1adc001e8db8cf31e85a113ec661590b544c9b77b7b3e6f34233b11d0d5b1e53a9bc680c369f8aee49b07c1e026658c8734b360a45c2d4a77d907f5e5668d8ed3bff7ccbee4e9183d0af6da965f95488215f5a677d002000000000000005cab8800"/203], 0xe0, 0x800}}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000001700)="59a29eb3bf6c0486022fa4f03369233e2ee154758b867b257ef88eeda389062eeccafb85cccb738a795797efb5eedec8198c8227bcefd8e1f941ad6881bd4684f224910b0b85c523c071bf41c1900b73b3b44cde6118458af42938c73a77bc7f9efe224855a706fbb2ec88327280a4441bc6a51fd0df9b3f62dd626664b91dcd3c5c3cad81f021a22f5158e7afcf27c79aeaba68f76ac9efba2c2a70a8b578c1630083d829b1be84b4f1b29b5841b01aa23b558e132fef56ec", 0xb9}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000028c0)="2c899af289605c1a9d979ca1595fabb7714be0645559376da513973640fbd68e00d1f17f82ca549f61d78aae1e5a4164a0d18a87fb499834b698aa26f820b718f74028d9fa3cf0b884068a00617d58b5c6602b24f0ef2c3db0c1d205fdd2605c0884e7d9e59e03b8f336db576724da4f26b897e1d05a323c9958d7ed6600ee73f2c032e160e9e16f75f404dba764ffc30295ab13d3f2ff2e7294048b38201e0352c2775b9114604f5d7b12f1f29285d5d95c8a3ffec518ef02140631fc208a54a9c6d4a2c16cd22b503f203a2f37346e78700262544acfc137999ae1520994ad761cf094f6a34946326e2d00", 0xec}, {&(0x7f00000029c0)="d8f1f55eba23d2c5c7354d0a0ce7fd5f7d4b2de6da3eaa8634df1963364676bf573d1d36d47f229f1c5c8c76230e39ebb9fa13ca3459396fa9493b63cb8560fe27551f74d30fcb1532770f94955dc3", 0x4f}, {&(0x7f0000002a40)}], 0x5, &(0x7f0000002c40)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20, 0x1000}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {{&(0x7f0000004fc0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000005400)=[{0x0}, {&(0x7f00000050c0)="67f84a2912c8ef700847d18d94941308d20f179a696530944d29b5cc43a52c44e9125f1bc88beea993f953ba19add2cc1b6ecc372da23ddf79b622b6cda12067ea37fa15bd824d5cbc625f3d71ba6485d4acf9755e0c385359f955f7165786e0f320394503761c534c4ea2", 0x6b}, {&(0x7f0000005140)="c5af7d0d6ab3fce5ee21362f633ee0800c5403b2ae2c8b32d021ea12f9a98b2d0ebc0f9f6cd7f39052ea189026e1ca63f634028e440d651bc8bc6d74008dbd7df8d63b668b01dfe134d69f", 0x4b}, {&(0x7f00000051c0)="5c341cd106dfc1615dcd897b8b265d1f6c65f3ed2e4d23e5e411f483d44fdbb177da11e8e453edc9fb7116233fa37eb55eab331197677bbc2074834fabb136ee9a235f3fd83ee78677039cdb902b9a0b222de7874e7ef1257acbba9cc3ca84929a467947ce939c6b25f067eaa9a8bc4a13", 0x71}, {&(0x7f0000005240)="cb7e0aafe48f96a24aa437b0e5aba4d7ea75d22e85a2f78ec2f7604cb65c48ec6a8288482e7627970f4395de72a045174a63c26e15effc3d29e89220d237874ef7a05ad1d1e9a05fe180b5f09c9318dedad64ea4cf48f5ebb422e1708ff428eafa9851001e9ceb86e83b99c9ab1e69335244fdc75f5b7b507fd0bba30c527c267ce4949b51c35c02fa6723b5941a", 0x8e}, {&(0x7f0000005300)="7d3430d2a1ac9bf470b79d2a4791752c906ad8f6459dae66f0fdd3bebd5de2363e9c89715cd69a6bd0189f2ded169a0aeff3716103bb4690480f06fb350c866113045514a15fe3c2fdf617e7bd1c256f8de00c0e2d6bcceb93d6a3b9a3140c6d24e7c0b340600b7c4de412530b3542f923a529be5226b4c0c82658613883da250965c5366c6819a636eba36f199bbdc68630b9686256a82a76b8b1e7d3c7afe5b4ac9a101de630dee1d12a7285a9172761fd2cd345844a66dfb4d6c5fe7c706056bc225dc0933359343bce9d6f5f344da70e7c470c286ea2", 0xd8}], 0x6, &(0x7f0000005680), 0x0, 0x4008000}}, {{&(0x7f0000005780)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000006f00)=[{&(0x7f0000005800)="376193fb3f684d4788c12eb18874291393c68fbe9673bdf8d21b0879361f341c8618ffcd455494d438e2bdde3c3eaa8b3d15995acd414d3f07eb662cb148191aca37c1d468c5bf521cd368ceaae91cf6289a4bba7922de6d520a613b8d48f384c82448cf0de5b7c16c3ca55cba9dfab7df7d4a0f466adf836e9b1509467706863d37ca944d", 0x85}, {&(0x7f00000058c0)="459ac826bc2d1c257cf02bbd34f821da2adecc6cb22c9383d10a86817e9a0bc70443418e0dc1", 0x26}, {0x0}, {&(0x7f0000005bc0)="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", 0x1000}, {&(0x7f0000006bc0)="4155bd0eba0f8051f475cd3a289d113bb4980c810ec593d0510f82066aa70edcb20feb16edb3ebd35247caef76f648cc366fe0150e7c25d8c4d701e30c79bf14ce49bd8678271ab636c7d24b5b6ebee781d55ea896426199c88b6cad4376bb403c6e9138b5086af68f8d342c30fa5bf10adebfb5c8f3b9f70b45420f4252f665d245ff0a18f663aa3f00", 0x8a}, {&(0x7f0000006c80)="12b70a8c9bf7c66bfac6b59a690d151d7fff0693516d8171164f7ad3242871d9c4655f887359e55416bde7e679828deb40784d83fad9e755ece747cf25ad6a988974f1608e15ed3087773a4d19c88745b7616091335d563116906f2b5f71919cea5ab994f133666aff5b19b16dcd981aee0ed76e49a24ad97db609571fa3e71e94a97c3a1f79a67e1887a21424dc0872ab98e7a0777ea912dd24e2cf1821b34651464957fe27f45ca0e93ac9bf9ea4ca18a3063564bbc798dc5dc78ca14a869cfd371e99591e5f15b356b12c023fe7539255dc70b3f1b642c3f85f7ce6bc1f25cd28ee95940ad2880f", 0xe9}, {&(0x7f0000006d80)="2dfab9f7ae3237e145875cab8525a38416d20c6abede50d077dd887b604a51de3ab6", 0x22}], 0x7, &(0x7f00000011c0)=ANY=[@ANYBLOB="3400000000000000000000c833eb48bfa978d23eec2c1e750b9d03942573908d445e5e10b93a343a42cbdbaea32d11cacb3ad1ce9945c62e5e7b4848f536d3e57b6166acc0ef7cae143a3f69008acf576e31430044e227bdd9007f8241e9f8ac31ae016ce067a4c6b56ecf4654c7e92c3881935d6b82dc7f31c6c574d72e2e38f25a6d122351dd0f72c3968a3196b86346185c", @ANYRES32, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32, @ANYRES32=r3, @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x800}}, {{&(0x7f0000007280)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000074c0), 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r5, @ANYBLOB="3c0af8e3153941b9a6000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x90, 0x50}}, {{&(0x7f0000007640)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000008c00)=[{&(0x7f00000076c0)}, {&(0x7f0000007700)="99732f295e5f7a17e82fcdbce33e3127a32270088fe85b47a044eadd36334ddcf38209f6b350b2ded50faf63b824763e88d862acfb781e0d48bbee00fc8d6ddc82e1fb5d06bfabfd851d1d7a621c26b406de67f6282775186dc8f4aba9b63276321a7e75f076656b57bf4cbc096c4bea4c1aa81f", 0x74}, {&(0x7f0000007800)="d858d54620857ace67617139bc263315c0aac4cf5ff1b19b1107d4941570eb78132cb295ddc461ff6da04206c2a11713762e32536e3f329e0bb4a458f2221d4ad9bfed0b7b513641576f38784531d17278ea4c5b3e58c068bb936e1a017899a4f7ac46f1f4b7041aef0d6fff74618b977c946a15553e7b8fa4498ae9f1dda93d8c861fbe85a731260a1421dc215329f8a1c43c999f50d48ee406823e4f302a610b69b4b85c55696598232409bcb1f9c030637c737c867fe412d4ef246f8931586f3387841864691b1eb11f93cc89748f9225524615de12", 0xd7}, {&(0x7f0000007900)}, {&(0x7f0000007980)="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", 0xfff}, {&(0x7f0000008980)="e2fd7dcd3a3322e86f67bc66a9a1d85359c83d3be1410a09c6fec2ed3d7cf56154a747c113e6788565d905eed098e1eaf6837c9f789de8fb9a0ff97a82abaed10c31c97106a38fa70a84f2f67a82973f3d1691c394e3241c8609237efa567f20aecbbc26bc89d2abf02a5128246bff4c8857822f5f045da97f24e327432ee8030bb384fbe571bb48e2094f03d22708783e135778442d4a7b513c4985", 0x9c}, {&(0x7f0000008a40)="0cd5636844789d3d738f9ae0ac487313583bc07a2f022984e07cbb107e847e88580c8e3cca35d7e05deee29984e308d0f7362101f41413c7a49710e829989693ac5b51098e0fb5488eb7df510de88f502fe705762b", 0x55}, {&(0x7f0000008ac0)="1f323fd562909053f884d6f0c02972bfed86f1dd32dda36cfd23cdc68e6e225ace46d8a4d4bd21a6aed065289fb32b32ffa675ac031e29ba5be27efee4f25655cdb192ea373a2dc73bed960b85cf565adcb819", 0x53}, {&(0x7f0000008b80)}], 0x9, 0x0, 0xa8, 0x48801}}], 0x7, 0x4000) r6 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r6, 0x84, 0x84, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) sendmsg$kcm(r5, &(0x7f0000000580)={&(0x7f0000000300)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x4, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x220}, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) capset(0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(&(0x7f00000001c0)={0x20071026, r1}, &(0x7f0000000280)={0x0, 0x9, 0x3, 0x0, 0x4, 0x3}) r7 = socket$qrtr(0x2a, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000004000071efeffffff00000000017c0000040042801400018010000400cab1893a20b8d2a93521800a04000280141511b5250edf7fed8a42dd8103d02b0e42800c3c9ed0177a7ebc4675544401f81bfb004ad7fbc3a82b84720e6654737ec5ae7908c2761c1db2c622ba62a5a3f015896d9f03756a6c71304e4b3ddea352da5e875d91d63a00521891a45ef4d5d16aa6adf58d174977ca0589d3da2bb1eadb663247"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) connect$qrtr(r7, &(0x7f0000000040)={0x2a, 0x0, 0xfffffffe}, 0xc) 6.980241775s ago: executing program 3 (id=6647): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) close(0x3) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000580)={0x1, 0x7, 0x1, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) 6.282672215s ago: executing program 7 (id=6648): syz_emit_ethernet(0x7c, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000200)=0xb) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x404000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r7, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc006}, 0x0) 5.945853904s ago: executing program 7 (id=6649): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000a00)=[{{&(0x7f0000000180)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000040), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000efff18000000000000000100160001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r1, @ANYRESHEX=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32, @ANYRES32=r1], 0x108, 0x20000010}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYBLOB="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", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000ffffb703000008000000b70400000000000085000000010000009559b4703cc9e322c15921f7a834ceb48776cdef70fe8c5ff1"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500eeff0000000085504df25f27dc4f63e7b48757451cc0fd6457f001e7acfab1bd26c519172edeab3592636e98995ee4b78ef19f55af06dc19f60864c918ee63984571ba721ed6a98a05e03bd2da0180540676e498876ab22ed412d80e3a73a36b5151b0fa3b89aae7a4d91dbe3ce9dbb8f58071e59b09e4a8e1c1dd0751e5cdb991efe181669494a24314822a7a60490dc58667e6a442f67feda14beb693e25b98721a10d6949c622ffe1716e699df6b7ddf75b66ae56fc981b"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) dup(r4) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000009c0)=[{{&(0x7f00000004c0)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000540)=""/134, 0x86}, {&(0x7f0000000800)=""/251, 0xfb}, {&(0x7f0000000900)=""/98, 0x62}, {&(0x7f0000000980)=""/17, 0x11}, {&(0x7f0000000c80)=""/225, 0xe1}], 0x5, &(0x7f0000000e00)=""/231, 0xe7}, 0x8}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x1a, 0x0, 0x0) 5.891394533s ago: executing program 1 (id=6650): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0xe, 0xc0000000, 0x3, {0x0, @pix_mp={0x1ff, 0x9, 0x42303159, 0x2, 0x17, [{0x5, 0x6}, {0x4, 0x3}, {0x8, 0x4}, {0x6, 0x110f}, {0x4, 0x101}, {0x1, 0x2}, {0x7, 0x2}, {0x1, 0x200}], 0x53, 0x0, 0x1, 0x1, 0x5}}, 0xfffffffc}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f024}) syz_io_uring_setup(0x2f7e, &(0x7f0000000080)={0x0, 0x50c6, 0x40, 0x2, 0x352}, &(0x7f0000000100), &(0x7f0000000140)) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x7, 0x0, 0x3}}) 5.391199245s ago: executing program 1 (id=6651): socket$kcm(0xa, 0x1, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), r1) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r2, 0x1, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x688200, 0x0) fchdir(r3) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) socket$kcm(0xa, 0x1, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), r1) (async) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r2, 0x1, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) (async) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x688200, 0x0) (async) fchdir(r3) (async) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) (async) 5.128167036s ago: executing program 1 (id=6652): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xb, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x80000000000009, 0x14d080) syz_open_dev$dri(0x0, 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00', 0x8}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x84900, 0x0) fremovexattr(r7, &(0x7f0000000000)=@known='system.posix_acl_access\x00') ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r6, 0x3b82, &(0x7f0000000000)={0x18, 0x0, 0x2, 0x0, &(0x7f0000000100)=[{0x12df, 0x2000000000000003}, {0x7ff, 0x2000000000000003}]}) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20040800}, 0x0) r8 = socket(0x15, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x271c, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000080)={0x2, 0x0, 0x81, 0x10001, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2b}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) memfd_create(&(0x7f00000001c0)='bond0\x00', 0x0) 4.95052777s ago: executing program 7 (id=6653): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @ioapic={0x8082801, 0x5fa, 0x9, 0x1ff, 0x0, [{0x6d, 0xef, 0x9, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0x6}, {0x1, 0x7f, 0x9, '\x00', 0x5}, {0x81, 0x1, 0x8, '\x00', 0x5}, {0xb, 0x50, 0x7f, '\x00', 0x5c}, {0x0, 0x0, 0x2, '\x00', 0x8}, {0x6, 0x9, 0x1, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0xa, 0x9, 0x0, '\x00', 0xfb}, {0x7, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0x1}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0x86, 0xc, '\x00', 0xf9}, {0x5, 0x4f}, {0x4, 0x4, 0x96, '\x00', 0x7}, {0xb, 0xff, 0x7, '\x00', 0x7f}, {0x3, 0x7, 0xd1, '\x00', 0x4}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x4c, 0xa, '\x00', 0x3}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x0, 0x6, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x3, 0xca, 0xdf, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x419, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x41, 0x2}}}}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$lan78xx(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002415000000152361564d498013"], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x3, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0xf}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x4e20, @remote}}, 0x0, 0x0, 0x4, 0x0, "a386bcb957f6ee650a88e81a5cb3b0852da5b6b12cf6ffffffffffff392be7124f3883a973ec229f5fab90b052c3572c8e868f4f1ff8e2f4bff94f46103f6fb8ed729eed0700000000000000de127097"}, 0xd8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000740)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @ioapic={0x6000, 0xe8, 0x7, 0x6, 0x0, [{0x9, 0x9, 0xff, '\x00', 0x2}, {0xaa, 0x3, 0x80, '\x00', 0x7}, {0x8, 0x4, 0x8}, {0x1, 0x6, 0x73, '\x00', 0xee}, {0x6, 0x2, 0x6, '\x00', 0x8}, {0x4, 0x6, 0xf0, '\x00', 0x1}, {0x3, 0xd, 0xf8, '\x00', 0x9}, {0x3d, 0x3, 0x1, '\x00', 0xf}, {0x1, 0x6, 0x9, '\x00', 0xd2}, {0x5, 0x2, 0x6, '\x00', 0x2}, {0x80, 0x0, 0xb, '\x00', 0x9}, {0x8a, 0x0, 0xd, '\x00', 0xfc}, {0x4, 0x2, 0xb, '\x00', 0x46}, {0x2, 0x40, 0x6, '\x00', 0x9}, {0x60, 0x8, 0x0, '\x00', 0x8}, {0x3, 0x79, 0x9, '\x00', 0x9}, {0x1e, 0x2, 0x4, '\x00', 0x3}, {0x6, 0x81, 0x5, '\x00', 0x80}, {0x5, 0x6, 0x9, '\x00', 0xc}, {0x4, 0x9, 0x6, '\x00', 0x4}, {0x0, 0x7, 0xc, '\x00', 0x9}, {0xa, 0x87, 0xa, '\x00', 0x6}, {0x1d, 0x0, 0xfe, '\x00', 0x8a}, {0xb, 0x2a, 0x6, '\x00', 0x8}]}}) 4.358881564s ago: executing program 8 (id=6654): socket$l2tp(0x2, 0x2, 0x73) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000200)) socket$unix(0x1, 0x1, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0xca352c92cb699c71, 0xffffffffffffffff, 0xd0a55000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x10, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102384, 0x18ff0) socket(0x9, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006506010100000000000000000100000005000100070000000900020073797a31000000000c00076808001300000000000500"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r3 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890c, &(0x7f0000000000)) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r6 = fspick(r5, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r7, 0x84, 0xb, 0x0, &(0x7f0000000140)) 4.308462098s ago: executing program 6 (id=6655): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='projid_map\x00') ioperm(0x1, 0xcdc5, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x40000b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) dup(r1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32]) shmctl$SHM_UNLOCK(0x0, 0xc) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000080)='y', 0x1}], 0x1) write(r0, &(0x7f0000000080)="240000001a007f0214f9f4070009040803000000000000050002000008000f40fe00000e", 0x24) get_mempolicy(0x0, 0x0, 0x4, &(0x7f0000001000/0x4000)=nil, 0x6) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000580)={'pcl812\x00', [0x8001, 0x6, 0x1, 0x4, 0xffffffb0, 0xcc7, 0x8, 0x7, 0x1, 0x7fff, 0x60, 0x1, 0x9, 0x2, 0x6, 0x9, 0x1, 0xff, 0x43, 0x40000003, 0x89, 0x10c, 0xf27, 0x1, 0xc, 0x8, 0x5, 0x40000006, 0x8, 0x10000, 0xfffffff4]}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000008, 0x8013, r1, 0x8000000) r5 = socket(0x25, 0x1, 0xa4a4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYRES32=r3, @ANYBLOB="432311ac1f484b3e1c6dc290257c6a116d1e0234490802ee369bcf97c6bfc07ed7615eaee8d10db699053afd4bda013b38ed0c5e2da03fde03419938ce910246e06a52fb1ecea260952fcfd326b94ea5bff335eab7fad396b45c129f42275b27bf70b918b6aef16a6c92127dd0e5b665ffb6950d8a79841b8d91898c18253737ead497a6cf0da4eb12bb27781cf98a8a3191af5a5f2274138a222d13cfc3e160cf3f6208e2e6bd270b35b575c039365b", @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 4.300103628s ago: executing program 3 (id=6656): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r2 = syz_open_dev$video(&(0x7f0000000040), 0x3ff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0xfffffffd) accept4(r5, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048000}, 0x4008010) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0x1f4, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@multicast2, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x0, 0xfffffffffffffff8}, {0xcf, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0xf6, 0x3, {{'deflate\x00'}, 0x570, "f9bd71297278f237b5f53646dbf7d8cd508a75ce5c5f3bfdb353621eccd96f31851e57a24925699f7a5269fe7b0b9c9845f4c067286173622078fd99056a0db82d22d4092bf7fa7a062b148c56f68ea0e15efc30342b491597b2065f7f4fa0761b574d6182769448b9a807263dedf095f5fa06a8711fd695e35f9d290fcc328540a2b6a8f98a569e08c88700d054b1a27ec131c3aef22dde8873867bc2fa26c80ac955fca6245df876538647c25b"}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000200)=0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r9, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000001280)="b9ffddc1ddcccdde75537d5326a4dfff70bf2dfe443b1b5e2a9080f3", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) 2.938949s ago: executing program 8 (id=6657): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r1, &(0x7f0000000540)={@val={0x0, 0x884c}, @void, @eth={@empty, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "850d19", 0x20, 0x6, 0xff, @remote, @mcast1, {[], @payload_direct={{{{0x20, 0x0, 0x1, 0x1, 0x1, 0x8, 0x0, 0x2, 0x1, 0x0, 0x2, 0xd, 0x3, 0x3, 0x1ff, 0x3, 0x3, 0x4e21, 0x4e22}, 0x4, 0x2}}}}}}}}}, 0x62) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[], 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0xc2}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.839669326s ago: executing program 3 (id=6658): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x0, @fd=r0, 0x1, 0x0, 0x0, 0x12}) io_uring_enter(r1, 0x1697, 0xb05c, 0xe, 0x0, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x12, 0x0, 0x0) gettid() syz_emit_ethernet(0x72, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c200000e0180c200000f86dd61002724003c3aff00000000000000000000000000000000ff02800000000000000000000000000101049078000000006d3103000f4e000120010000000000000000000000000001fc0100000000000000000000000000003a000c08680000000d000000"], 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) socket(0x10, 0x80002, 0x0) 2.342008478s ago: executing program 1 (id=6659): syz_emit_ethernet(0x7c, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000200)=0xb) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x404000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r7, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc006}, 0x0) 2.259234887s ago: executing program 3 (id=6660): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x4e22, 0x0, @local, 0x10}}, 0x0, 0x0, 0xb, 0x0, "9ecf3315567f14d56a87d134cc409e2a652dbbf6c50480937c6fa85af81bc6fc54b71f03985ac33e31d612d976a6efcda8853b8a4430503621f06679995d916cb4361795dd7dbae51d07384b7c2e6949"}, 0xd8) socket$netlink(0x10, 0x3, 0x4) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c00", @ANYRES32=r5, @ANYBLOB="040008"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendto$inet(r1, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) syz_emit_ethernet(0x96, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x60, 0x6, 0x0, @local, @local, {[], {{0x4e24, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, {[@eol]}}, {"a744e49d8437e90b5ce630eccb39da3d7b6bafe2caca6529bf69980b6991dee759ccbdadda11b2ac0be8c7f5eaa4def8efa3a92e60bfd82c49a147cd7df63570fd9a91a3dbb849bd"}}}}}}}, 0x0) 2.033901176s ago: executing program 1 (id=6661): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x6, 0x40, 0x9e5, 0x8000, 0x60ce, 0xd, 0x2, {0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x8001, 0xc3, 0x32, 0x0, 0x2}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) socket(0x15, 0x5, 0x0) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r4, &(0x7f000001aa40)=""/102392, 0x18ff8) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), 0xffffffffffffffff, 0x1}}, 0x18) writev(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x4b34, 0x3bf) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x24040808) socket$nl_netfilter(0x10, 0x3, 0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.14387678s ago: executing program 3 (id=6662): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x140) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(0x0, 0x0) syz_open_dev$cec(&(0x7f0000001140), 0x0, 0x100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 792.264881ms ago: executing program 7 (id=6663): recvmsg(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/183, 0xb7}], 0x1, &(0x7f00000003c0)=""/89, 0x59}, 0x2) prctl$PR_SET_ENDIAN(0x14, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) iopl(0x3) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) writev(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)="cd", 0x1}], 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB='\b\x00\x00\x00'], 0x4) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) 349.485606ms ago: executing program 3 (id=6664): syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="1201000300000020b804020500000000000000000000000100807f0904000000637b9707010000090501020000"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) renameat(r2, &(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='\x00') close(r2) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f00000000c0)={0x1, 0x6, 0xe2, &(0x7f0000000500)=""/226}) sendto(r5, &(0x7f0000000200)='9', 0x1, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f0000004600)}}, {{0x0, 0x0, &(0x7f0000005c40)=[{0x0}], 0x1}}], 0x2, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700}) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000100)={'wlan1\x00', @random="0100008dffff"}) ioctl$SIOCSIFHWADDR(r2, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r6, 0x40044590, 0x0) unshare(0x62000280) r7 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[], 0x0) mount$9p_tcp(&(0x7f0000000240), &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0x21f090, &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYBLOB="5f6504e9e65730092ce8721a798e9541c2629f34d2a318348e5c8875cf6ae8ade1359a0d1e428b595553b031", @ANYRESOCT=r7, @ANYRESHEX=r3]) socket$alg(0x26, 0x5, 0x0) 198.397844ms ago: executing program 6 (id=6665): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x200000000000000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x9004, 0x0, 0x4, 0x162}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x8, 0x1, {0x0, 0x0, r4}}) io_uring_enter(r5, 0x3517, 0x173d, 0x42, 0x0, 0x0) 0s ago: executing program 8 (id=6666): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) r4 = semget$private(0x0, 0x1, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x200100, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r6, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x1, "100056f200"}) ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x1) semctl$GETZCNT(r4, 0x2, 0xf, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r7 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x4c0f, 0x400, 0x3, 0x288}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r7, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0xffffffffffffffff) r10 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="700000001900010000000000000000001d01000005000d0001000000150003000000000000000000062e346aa0f998570000000015000200000000000000000003ef7506ecbef9700300000008000900", @ANYRES32=0x0, @ANYBLOB="0c000b00000000000000000008000e00", @ANYRESDEC=r10, @ANYBLOB="340e33b4c5099730"], 0x70}}, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) kernel console output (not intermixed with test programs): eftover after parsing attributes in process `syz.6.6254'. [ 1690.063935][ T981] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1690.467067][T30500] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1690.502660][T30500] qnx6: wrong signature (magic) in superblock #1. [ 1690.509449][ T981] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1690.519544][ T981] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1690.527576][ T981] usb 8-1: Product: syz [ 1690.537819][T30500] qnx6: unable to read the first superblock [ 1690.566784][ T981] usb 8-1: Manufacturer: syz [ 1690.571416][ T981] usb 8-1: SerialNumber: syz [ 1690.605773][ T981] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1690.824140][ T29] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1691.003632][T30507] Bluetooth: MGMT ver 1.23 [ 1692.139102][ T29] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 1692.146214][ T29] ath9k_htc: Failed to initialize the device [ 1692.832013][ T29] usb 8-1: ath9k_htc: USB layer deinitialized [ 1693.172448][T24536] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1693.209308][T24530] usb 8-1: USB disconnect, device number 25 [ 1693.365174][T30520] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30520 comm=syz.7.6260 [ 1693.445401][T24536] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1693.463236][T24536] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1693.490421][T24536] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1693.524976][T24536] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1693.916503][T24536] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1693.995784][T29448] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1694.043619][T29448] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1694.057831][T29448] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1694.084888][T24536] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1694.085172][T29448] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1694.103431][T29448] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1694.227416][T24536] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1694.271188][T24536] usb 2-1: Product: syz [ 1694.309885][T24536] usb 2-1: Manufacturer: syz [ 1694.355098][T24536] cdc_wdm 2-1:1.0: skipping garbage [ 1694.385237][T24536] cdc_wdm 2-1:1.0: skipping garbage [ 1694.420681][T24536] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1694.440018][T24536] cdc_wdm 2-1:1.0: Unknown control protocol [ 1694.959017][ T30] audit: type=1400 audit(2000002413.415:5136): avc: denied { read write } for pid=30513 comm="syz.1.6257" name="cdc-wdm0" dev="devtmpfs" ino=4975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1694.996126][ T29] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1695.031807][ C1] cdc_wdm 2-1:1.0: Unexpected error -71 [ 1695.032234][T24533] usb 2-1: USB disconnect, device number 67 [ 1695.039118][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1695.051052][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1695.057109][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1695.066985][ T30] audit: type=1400 audit(2000002413.415:5137): avc: denied { open } for pid=30513 comm="syz.1.6257" path="/dev/cdc-wdm0" dev="devtmpfs" ino=4975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1695.132492][T30542] nfs: Unknown parameter 'ÿÿÿÿ' [ 1695.252289][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 1695.265213][ T29] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1695.294081][ T29] usb 4-1: config 1 has no interface number 1 [ 1695.305166][ T29] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1695.706364][T30547] kvm: user requested TSC rate below hardware speed [ 1696.435071][T29448] Bluetooth: hci4: command tx timeout [ 1696.510043][ T29] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1697.296103][ T29] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1697.465444][ T29] usb 4-1: string descriptor 0 read error: -71 [ 1697.503577][ T29] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1697.536069][T21872] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1697.546983][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1697.563560][ T29] usb 4-1: can't set config #1, error -71 [ 1697.574580][ T29] usb 4-1: USB disconnect, device number 67 [ 1697.988259][T21872] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1698.132367][T21872] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1698.179707][T30529] chnl_net:caif_netlink_parms(): no params data found [ 1698.244061][T21872] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1698.370143][T30529] bridge0: port 1(bridge_slave_0) entered blocking state [ 1698.377270][T29448] Bluetooth: hci4: command tx timeout [ 1698.402448][T30529] bridge0: port 1(bridge_slave_0) entered disabled state [ 1698.426693][T30529] bridge_slave_0: entered allmulticast mode [ 1698.452065][T30529] bridge_slave_0: entered promiscuous mode [ 1698.475726][T30529] bridge0: port 2(bridge_slave_1) entered blocking state [ 1698.500720][T30529] bridge0: port 2(bridge_slave_1) entered disabled state [ 1698.508014][T30529] bridge_slave_1: entered allmulticast mode [ 1698.527976][T30529] bridge_slave_1: entered promiscuous mode [ 1698.605651][T30529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1698.689927][T30577] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6272'. [ 1698.720238][T30529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1698.738471][T30577] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6272'. [ 1698.769804][T30577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6272'. [ 1698.785068][ T30] audit: type=1400 audit(2000002417.425:5138): avc: denied { audit_read } for pid=30578 comm="syz.6.6273" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1698.898834][T30577] team0 (unregistering): Port device team_slave_0 removed [ 1699.069472][T30577] team0 (unregistering): Port device team_slave_1 removed [ 1699.327116][T30589] kvm: user requested TSC rate below hardware speed [ 1701.038091][T29448] Bluetooth: hci4: command tx timeout [ 1701.256040][T30587] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1701.258432][T30529] team0: Port device team_slave_0 added [ 1701.381669][T21872] bridge_slave_1: left allmulticast mode [ 1701.389742][T21872] bridge_slave_1: left promiscuous mode [ 1701.412500][T21872] bridge0: port 2(bridge_slave_1) entered disabled state [ 1701.483703][T21872] bridge_slave_0: left allmulticast mode [ 1701.528788][T21872] bridge_slave_0: left promiscuous mode [ 1701.549868][T21872] bridge0: port 1(bridge_slave_0) entered disabled state [ 1701.894250][T30598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6279'. [ 1702.342373][T30606] IPVS: set_ctl: invalid protocol: 2 224.0.0.2:20000 [ 1702.732121][T30611] nfs: Unknown parameter 'ÿÿÿÿ' [ 1703.015657][T29448] Bluetooth: hci4: command tx timeout [ 1704.013342][T21872] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1704.030368][T21872] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1704.061222][T21872] bond0 (unregistering): Released all slaves [ 1704.103946][T21872] bond1 (unregistering): Released all slaves [ 1704.398030][T30529] team0: Port device team_slave_1 added [ 1704.479532][T29448] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1704.696278][T24544] libceph: connect (1)[c::]:6789 error -101 [ 1704.702459][T24544] libceph: mon0 (1)[c::]:6789 connect error [ 1704.776719][T30623] ceph: No mds server is up or the cluster is laggy [ 1705.189469][T30640] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1705.276096][T30529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1705.357784][T30529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1705.433780][T30529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1705.468411][T30657] netlink: 264 bytes leftover after parsing attributes in process `syz.6.6286'. [ 1705.503865][T30657] netlink: 264 bytes leftover after parsing attributes in process `syz.6.6286'. [ 1705.576676][T30529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1705.583708][T24533] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1705.631132][T30529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1705.720717][T30529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1705.740065][T24532] usb 8-1: new full-speed USB device number 26 using dummy_hcd [ 1705.747781][T24533] usb 2-1: device descriptor read/64, error -71 [ 1705.889527][T30529] hsr_slave_0: entered promiscuous mode [ 1705.903684][T24532] usb 8-1: config 0 has an invalid interface number: 146 but max is 0 [ 1705.924119][T30529] hsr_slave_1: entered promiscuous mode [ 1705.931007][T24532] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1705.942635][T30529] debugfs: 'hsr0' already exists in 'hsr' [ 1705.948367][T30529] Cannot create hsr debugfs directory [ 1705.954057][T24532] usb 8-1: config 0 has no interface number 0 [ 1705.968768][T24532] usb 8-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC [ 1705.980462][T24533] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1706.022375][T24532] usb 8-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1706.231065][T24533] usb 2-1: device descriptor read/64, error -71 [ 1706.332713][T24532] usb 8-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1706.356493][T24532] usb 8-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 1706.378790][T24532] usb 8-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1706.402986][T24532] usb 8-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1706.421018][T24532] usb 8-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1706.430190][T24532] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1706.438413][T24533] usb usb2-port1: attempt power cycle [ 1706.454762][T24532] usb 8-1: Product: syz [ 1706.472822][T24532] usb 8-1: Manufacturer: syz [ 1706.487310][T24532] usb 8-1: SerialNumber: syz [ 1706.540312][T24532] usb 8-1: config 0 descriptor?? [ 1706.545846][T30656] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1706.594299][T24532] microtek usb (rev 0.4.3): will this work? Command EP is not usually 12 [ 1706.614729][T24532] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 1706.655076][T24532] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 1706.669643][T21872] hsr_slave_0: left promiscuous mode [ 1706.692794][T21872] hsr_slave_1: left promiscuous mode [ 1706.718563][T24532] scsi host1: microtekX6 [ 1706.726954][T21872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1706.742364][T21867] microtek usb (rev 0.4.3): error -90 submitting URB [ 1706.759255][T21872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1706.769045][T24533] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1706.777083][ T2840] microtek usb (rev 0.4.3): error -90 submitting URB [ 1706.791865][ T30] audit: type=1400 audit(2000002425.834:5139): avc: denied { shutdown } for pid=30668 comm="syz.3.6291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1706.807285][T24533] usb 2-1: device descriptor read/8, error -71 [ 1706.826298][ T2840] microtek usb (rev 0.4.3): error -90 submitting URB [ 1706.839262][T30656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1706.850449][T21872] veth1_macvtap: left promiscuous mode [ 1706.864401][ T2840] microtek usb (rev 0.4.3): error -90 submitting URB [ 1706.901484][T30656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1706.918291][T21872] veth0_macvtap: left promiscuous mode [ 1706.930709][T21872] veth1_vlan: left promiscuous mode [ 1706.937183][T21872] veth0_vlan: left promiscuous mode [ 1706.940487][T30677] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6292'. [ 1706.993126][T30673] can: request_module (can-proto-0) failed. [ 1707.163477][T24533] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1707.870455][T24533] usb 2-1: device descriptor read/8, error -71 [ 1707.997799][T24533] usb usb2-port1: unable to enumerate USB device [ 1708.364240][T30690] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6293'. [ 1708.547384][T21872] team0 (unregistering): Port device team_slave_1 removed [ 1708.611399][T21872] team0 (unregistering): Port device team_slave_0 removed [ 1708.865193][ T29] usb 8-1: USB disconnect, device number 26 [ 1708.916899][ T30] audit: type=1400 audit(2000002428.049:5140): avc: denied { execute } for pid=30699 comm="syz.3.6294" path="/proc/534/clear_refs" dev="proc" ino=115463 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 1709.056378][ T30] audit: type=1326 audit(2000002428.217:5141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30701 comm="syz.1.6296" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd1cb59c799 code=0x0 [ 1709.251606][T30709] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1709.648275][ T981] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1709.835155][ T30] audit: type=1400 audit(2000002428.994:5142): avc: denied { getopt } for pid=30701 comm="syz.1.6296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1709.858320][ T981] usb 4-1: Using ep0 maxpacket: 8 [ 1709.874745][ T981] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1709.903776][ T981] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1709.929189][T30529] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1709.937339][ T981] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1709.963799][ T981] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1709.977857][ T981] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1709.987354][ T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1710.178861][T30529] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1710.211726][T30717] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1710.225983][T30529] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1710.247549][ T981] usb 4-1: GET_CAPABILITIES returned 0 [ 1710.290817][ T981] usbtmc 4-1:16.0: can't read capabilities [ 1710.312618][T30529] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1710.684256][T30529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1710.718741][T30529] 8021q: adding VLAN 0 to HW filter on device team0 [ 1710.767289][T21872] bridge0: port 1(bridge_slave_0) entered blocking state [ 1710.774543][T21872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1710.834929][T21872] bridge0: port 2(bridge_slave_1) entered blocking state [ 1710.842128][T21872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1711.115695][T30742] tipc: Enabling of bearer rejected, failed to enable media [ 1711.537128][ T981] usb 4-1: USB disconnect, device number 68 [ 1711.934301][T30529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1712.296961][T30797] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6306'. [ 1712.825340][T30529] veth0_vlan: entered promiscuous mode [ 1712.885359][T30529] veth1_vlan: entered promiscuous mode [ 1712.941243][ T29] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1712.943494][T30529] veth0_macvtap: entered promiscuous mode [ 1712.974254][T30529] veth1_macvtap: entered promiscuous mode [ 1713.002341][T30529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1713.027345][T24531] usb 8-1: new full-speed USB device number 27 using dummy_hcd [ 1713.039042][T30529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1713.132998][T23610] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1713.150104][T23619] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1713.166631][T23619] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1713.349719][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1713.362307][ T29] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1713.372152][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1713.417406][ T29] usb 2-1: config 0 descriptor?? [ 1713.561442][T24531] usb 8-1: config 0 has an invalid interface number: 146 but max is 0 [ 1713.565501][T23610] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1713.569629][T24531] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1713.569652][T24531] usb 8-1: config 0 has no interface number 0 [ 1713.600377][T23610] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1713.617756][T24531] usb 8-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC [ 1713.626367][T23610] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1713.648915][T30810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1713.665769][T30810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1713.686383][ T29] usbhid 2-1:0.0: can't add hid device: -71 [ 1713.696586][ T29] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1713.713636][T10584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1713.717572][ T29] usb 2-1: USB disconnect, device number 72 [ 1713.735114][T24531] usb 8-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1713.835328][T10584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1713.854785][T24531] usb 8-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1713.900222][T24531] usb 8-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 1713.932033][T24531] usb 8-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1713.966308][T24531] usb 8-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1714.003017][T24531] usb 8-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1714.015589][T24531] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1714.049158][T30830] FAULT_INJECTION: forcing a failure. [ 1714.049158][T30830] name failslab, interval 1, probability 0, space 0, times 0 [ 1714.063175][T30830] CPU: 1 UID: 0 PID: 30830 Comm: syz.3.6314 Tainted: G L syzkaller #0 PREEMPT(full) [ 1714.063204][T30830] Tainted: [L]=SOFTLOCKUP [ 1714.063210][T30830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1714.063221][T30830] Call Trace: [ 1714.063228][T30830] [ 1714.063234][T30830] dump_stack_lvl+0x100/0x190 [ 1714.063268][T30830] should_fail_ex.cold+0x5/0xa [ 1714.063292][T30830] ? drm_atomic_state_init+0x190/0x490 [ 1714.063312][T30830] should_failslab+0xc2/0x120 [ 1714.063331][T30830] __kmalloc_noprof+0xe0/0x850 [ 1714.063361][T30830] drm_atomic_state_init+0x190/0x490 [ 1714.063380][T30830] ? kasan_save_track+0x14/0x30 [ 1714.063409][T30830] drm_atomic_state_alloc+0xd3/0x120 [ 1714.063428][T30830] drm_atomic_helper_set_config+0x59/0x190 [ 1714.063452][T30830] drm_mode_setcrtc+0xeca/0x1d50 [ 1714.063483][T30830] ? avc_has_extended_perms+0x484/0x1080 [ 1714.063503][T30830] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 1714.063540][T30830] ? drm_is_current_master+0x2c/0x40 [ 1714.063560][T30830] ? drm_is_current_master+0x2c/0x40 [ 1714.063583][T30830] ? do_raw_spin_unlock+0x145/0x1e0 [ 1714.063609][T30830] drm_ioctl_kernel+0x1f3/0x3e0 [ 1714.063627][T30830] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 1714.063646][T30830] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 1714.063673][T30830] drm_ioctl+0x5e6/0xc60 [ 1714.063693][T30830] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 1714.063711][T30830] ? __pfx_drm_ioctl+0x10/0x10 [ 1714.063738][T30830] ? selinux_file_ioctl+0x139/0x290 [ 1714.063760][T30830] ? selinux_file_ioctl+0xb4/0x290 [ 1714.063784][T30830] ? __pfx_drm_ioctl+0x10/0x10 [ 1714.063801][T30830] __x64_sys_ioctl+0x18e/0x210 [ 1714.063826][T30830] do_syscall_64+0x106/0xf80 [ 1714.063849][T30830] ? clear_bhb_loop+0x40/0x90 [ 1714.063870][T30830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1714.063882][T24531] usb 8-1: Product: syz [ 1714.063889][T30830] RIP: 0033:0x7f6f5a79c799 [ 1714.063906][T30830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1714.063921][T30830] RSP: 002b:00007f6f5b6b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1714.063937][T30830] RAX: ffffffffffffffda RBX: 00007f6f5aa15fa0 RCX: 00007f6f5a79c799 [ 1714.063947][T30830] RDX: 0000200000000240 RSI: 00000000c06864a2 RDI: 0000000000000004 [ 1714.063957][T30830] RBP: 00007f6f5b6b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1714.063966][T30830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1714.063975][T30830] R13: 00007f6f5aa16038 R14: 00007f6f5aa15fa0 R15: 00007fff5ee74678 [ 1714.063997][T30830] [ 1714.329616][T30839] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1714.350284][T24531] usb 8-1: Manufacturer: syz [ 1714.355275][T24531] usb 8-1: SerialNumber: syz [ 1714.381305][T24531] usb 8-1: config 0 descriptor?? [ 1714.387250][T30815] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1714.390222][ T29] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1714.396812][T24531] microtek usb (rev 0.4.3): will this work? Command EP is not usually 12 [ 1714.561669][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 1714.678719][T30845] trusted_key: encrypted_key: insufficient parameters specified [ 1714.693157][ T29] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1714.711867][T30815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1714.996773][ T29] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1715.004171][T30815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1715.021590][T24531] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 1715.021597][ T29] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1715.030686][T24531] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 1715.172073][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1715.236719][T30850] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1715.247076][T24531] scsi host1: microtekX6 [ 1715.258399][T23610] microtek usb (rev 0.4.3): error -90 submitting URB [ 1715.276405][ T29] usb 2-1: config 0 descriptor?? [ 1715.282189][T23610] microtek usb (rev 0.4.3): error -90 submitting URB [ 1715.358228][T30862] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6310'. [ 1715.369046][T30862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1715.377773][T30862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1715.463473][T24356] microtek usb (rev 0.4.3): error -90 submitting URB [ 1715.486368][T30810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1715.495804][T30810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1715.530672][T24356] microtek usb (rev 0.4.3): error -90 submitting URB [ 1716.051296][ T29] mcp2221 0003:04D8:00DD.0039: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 1716.238170][T30873] netlink: 'syz.3.6322': attribute type 1 has an invalid length. [ 1716.261355][T30873] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6322'. [ 1716.288097][T30873] netlink: 'syz.3.6322': attribute type 1 has an invalid length. [ 1716.306804][T30873] netlink: 'syz.3.6322': attribute type 8 has an invalid length. [ 1716.314904][T30873] netlink: 606 bytes leftover after parsing attributes in process `syz.3.6322'. [ 1716.324430][T30873] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6322'. [ 1716.512423][ T29] usb 8-1: USB disconnect, device number 27 [ 1716.676357][ T30] audit: type=1400 audit(2000002436.206:5143): avc: denied { lock } for pid=30878 comm="syz.7.6324" path="socket:[116023]" dev="sockfs" ino=116023 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1716.756444][T30883] tc_dump_action: action bad kind [ 1717.898420][ T981] usb 2-1: USB disconnect, device number 73 [ 1719.267838][T30910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6332'. [ 1719.590576][T30915] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6331'. [ 1720.205186][T30922] netlink: 216 bytes leftover after parsing attributes in process `syz.7.6335'. [ 1721.018773][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1721.035840][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1722.657320][T24531] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 1723.620458][T24531] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1723.630314][T24531] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1724.186887][T24531] usb 4-1: Product: syz [ 1724.201029][T30969] FAULT_INJECTION: forcing a failure. [ 1724.201029][T30969] name failslab, interval 1, probability 0, space 0, times 0 [ 1724.213674][T30969] CPU: 1 UID: 0 PID: 30969 Comm: syz.6.6344 Tainted: G L syzkaller #0 PREEMPT(full) [ 1724.213692][T30969] Tainted: [L]=SOFTLOCKUP [ 1724.213696][T30969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1724.213703][T30969] Call Trace: [ 1724.213707][T30969] [ 1724.213711][T30969] dump_stack_lvl+0x100/0x190 [ 1724.213733][T30969] should_fail_ex.cold+0x5/0xa [ 1724.213749][T30969] ? tomoyo_encode2+0xfb/0x3c0 [ 1724.213767][T30969] should_failslab+0xc2/0x120 [ 1724.213778][T30969] __kmalloc_noprof+0xe0/0x850 [ 1724.213795][T30969] ? d_absolute_path+0x136/0x1b0 [ 1724.213814][T30969] tomoyo_encode2+0xfb/0x3c0 [ 1724.213832][T30969] tomoyo_encode+0x29/0x50 [ 1724.213848][T30969] tomoyo_realpath_from_path+0x18c/0x690 [ 1724.213869][T30969] tomoyo_path_number_perm+0x23c/0x580 [ 1724.213883][T30969] ? tomoyo_path_number_perm+0x22e/0x580 [ 1724.213898][T30969] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1724.213926][T30969] ? find_held_lock+0x2b/0x80 [ 1724.213941][T30969] ? __fget_files+0x215/0x3d0 [ 1724.213953][T30969] ? hook_file_ioctl_common+0x146/0x410 [ 1724.213967][T30969] ? __fget_files+0x21f/0x3d0 [ 1724.213981][T30969] security_file_ioctl+0xd3/0x230 [ 1724.213998][T30969] __x64_sys_ioctl+0xb7/0x210 [ 1724.214021][T30969] do_syscall_64+0x106/0xf80 [ 1724.214036][T30969] ? clear_bhb_loop+0x40/0x90 [ 1724.214050][T30969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1724.214062][T30969] RIP: 0033:0x7fc72519c799 [ 1724.214071][T30969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1724.214083][T30969] RSP: 002b:00007fc7260c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1724.214094][T30969] RAX: ffffffffffffffda RBX: 00007fc725415fa0 RCX: 00007fc72519c799 [ 1724.214101][T30969] RDX: 0000200000000040 RSI: 00000000c0d05605 RDI: 0000000000000004 [ 1724.214108][T30969] RBP: 00007fc7260c4090 R08: 0000000000000000 R09: 0000000000000000 [ 1724.214114][T30969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1724.214121][T30969] R13: 00007fc725416038 R14: 00007fc725415fa0 R15: 00007ffef83d9148 [ 1724.214135][T30969] [ 1724.214145][T30969] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1724.523136][T24531] usb 4-1: Manufacturer: syz [ 1724.533818][T24531] usb 4-1: SerialNumber: syz [ 1724.548857][T24531] usb 4-1: config 0 descriptor?? [ 1724.568491][ T30] audit: type=1400 audit(2000002444.489:5144): avc: denied { ioctl } for pid=30976 comm="syz.6.6347" path="socket:[117478]" dev="sockfs" ino=117478 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1724.706493][T30983] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6349'. [ 1724.821240][T24531] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1724.935157][T30986] netlink: 'syz.8.6346': attribute type 1 has an invalid length. [ 1724.942965][T30986] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6346'. [ 1725.145214][ T30] audit: type=1400 audit(2000002445.003:5145): avc: denied { connect } for pid=30975 comm="syz.8.6346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1725.854481][T31001] netlink: 300 bytes leftover after parsing attributes in process `syz.7.6353'. [ 1726.282183][T31012] overlayfs: missing 'workdir' [ 1727.186632][T24531] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1727.203929][T24531] usb 4-1: USB disconnect, device number 69 [ 1727.572131][T24532] usb 8-1: new full-speed USB device number 28 using dummy_hcd [ 1728.057087][T24532] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1728.081851][T24532] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1728.095536][T24532] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1728.104823][T24532] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1728.646968][T24532] usb 8-1: GET_CAPABILITIES returned 0 [ 1728.676463][T24532] usbtmc 8-1:16.0: can't read capabilities [ 1728.839142][T24539] usb 8-1: USB disconnect, device number 28 [ 1729.419941][T31055] binder: 31048:31055 ioctl 80286722 0 returned -22 [ 1729.461396][T31055] QAT: Invalid ioctl 1075883590 [ 1729.467002][T31055] QAT: Invalid ioctl 1075883590 [ 1729.516681][T31055] QAT: Invalid ioctl 1075883590 [ 1729.524853][T31055] QAT: Invalid ioctl 1075883590 [ 1729.546815][T31059] QAT: Invalid ioctl 15240 [ 1729.594041][ T30] audit: type=1400 audit(2000526737.755:5146): avc: denied { audit_write } for pid=31048 comm="syz.6.6362" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1729.596647][T31059] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6362'. [ 1729.641127][T31055] QAT: Invalid ioctl 1075883590 [ 1729.649723][T31063] FAULT_INJECTION: forcing a failure. [ 1729.649723][T31063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1729.664347][T31055] QAT: Invalid ioctl 1075883590 [ 1729.727939][T31055] QAT: Invalid ioctl 1075883590 [ 1729.834501][T31063] CPU: 1 UID: 0 PID: 31063 Comm: syz.3.6366 Tainted: G L syzkaller #0 PREEMPT(full) [ 1729.834529][T31063] Tainted: [L]=SOFTLOCKUP [ 1729.834536][T31063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1729.834547][T31063] Call Trace: [ 1729.834553][T31063] [ 1729.834561][T31063] dump_stack_lvl+0x100/0x190 [ 1729.834594][T31063] should_fail_ex.cold+0x5/0xa [ 1729.834620][T31063] _copy_from_user+0x2e/0xd0 [ 1729.834641][T31063] fb_set_user_cmap+0x1df/0x4d0 [ 1729.834661][T31063] ? __pfx_fb_set_user_cmap+0x10/0x10 [ 1729.834679][T31063] ? __might_fault+0xc5/0x140 [ 1729.834703][T31063] ? __might_fault+0xc5/0x140 [ 1729.834736][T31063] do_fb_ioctl+0x2c0/0x7e0 [ 1729.834758][T31063] ? __pfx_do_fb_ioctl+0x10/0x10 [ 1729.834789][T31063] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1729.834838][T31063] ? selinux_file_ioctl+0x139/0x290 [ 1729.834867][T31063] fb_ioctl+0xe5/0x150 [ 1729.834886][T31063] ? __pfx_fb_ioctl+0x10/0x10 [ 1729.834907][T31063] __x64_sys_ioctl+0x18e/0x210 [ 1729.834935][T31063] do_syscall_64+0x106/0xf80 [ 1729.834957][T31063] ? clear_bhb_loop+0x40/0x90 [ 1729.834986][T31063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1729.835005][T31063] RIP: 0033:0x7f6f5a79c799 [ 1729.835020][T31063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1729.835037][T31063] RSP: 002b:00007f6f5b6b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1729.835055][T31063] RAX: ffffffffffffffda RBX: 00007f6f5aa15fa0 RCX: 00007f6f5a79c799 [ 1729.835067][T31063] RDX: 0000200000003240 RSI: 0000000000004605 RDI: 0000000000000003 [ 1729.835078][T31063] RBP: 00007f6f5b6b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1729.835088][T31063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1729.835098][T31063] R13: 00007f6f5aa16038 R14: 00007f6f5aa15fa0 R15: 00007fff5ee74678 [ 1729.835122][T31063] [ 1729.841503][T31055] QAT: Invalid ioctl 1075883590 [ 1729.936024][T31071] overlayfs: missing 'workdir' [ 1730.671267][T24532] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1730.803940][T24532] usb 4-1: device descriptor read/64, error -71 [ 1731.113440][T24532] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1731.259277][T31096] overlayfs: missing 'lowerdir' [ 1731.264919][T24532] usb 4-1: device descriptor read/64, error -71 [ 1731.409101][T24532] usb usb4-port1: attempt power cycle [ 1731.737900][T24532] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1732.024562][T24532] usb 4-1: device descriptor read/8, error -71 [ 1732.271750][T24532] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1732.519478][T24532] usb 4-1: device descriptor read/8, error -71 [ 1732.625233][T24532] usb usb4-port1: unable to enumerate USB device [ 1733.824098][ T30] audit: type=1400 audit(2000526742.204:5147): avc: denied { map } for pid=31117 comm="syz.7.6379" path="socket:[117636]" dev="sockfs" ino=117636 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1734.012965][T31121] wg1 speed is unknown, defaulting to 1000 [ 1734.019514][T31121] wg1 speed is unknown, defaulting to 1000 [ 1734.032300][T31121] wg1 speed is unknown, defaulting to 1000 [ 1734.138591][T31121] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1734.578083][T31121] wg1 speed is unknown, defaulting to 1000 [ 1734.608973][T31121] wg1 speed is unknown, defaulting to 1000 [ 1734.671143][T31121] wg1 speed is unknown, defaulting to 1000 [ 1734.703298][T31121] wg1 speed is unknown, defaulting to 1000 [ 1734.803114][T31116] delete_channel: no stack [ 1735.261140][T31121] wg1 speed is unknown, defaulting to 1000 [ 1735.383196][T31137] overlayfs: missing 'workdir' [ 1735.390946][T31121] wg1 speed is unknown, defaulting to 1000 [ 1735.450985][T31121] wg1 speed is unknown, defaulting to 1000 [ 1736.535038][T31146] qnx4: no qnx4 filesystem (no root dir). [ 1737.370377][T31161] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 1737.396419][T31161] fuse: Unknown parameter '0xffffffffffffffff00000000000000000011' [ 1737.727835][T31164] syz.3.6387 (31164): attempted to duplicate a private mapping with mremap. This is not supported. [ 1737.834989][T31144] nfs: Unknown parameter 'ÿÿÿÿ' [ 1737.927943][T31169] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1738.793419][T31185] netlink: 'syz.3.6390': attribute type 4 has an invalid length. [ 1738.801303][T31185] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6390'. [ 1738.868022][T31185] .`: renamed from bond0 (while UP) [ 1739.347441][T31191] netlink: 'syz.1.6391': attribute type 13 has an invalid length. [ 1739.571727][T31199] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6392'. [ 1739.675480][T31194] netlink: 'syz.1.6391': attribute type 1 has an invalid length. [ 1741.103747][T31211] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1741.112802][T31211] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1741.180260][T31212] overlayfs: failed to resolve './file2': -2 [ 1741.539870][T31194] Cannot find add_set index 65532 as target [ 1742.355956][T31220] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6396'. [ 1743.049890][T31230] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6398'. [ 1744.722751][T31236] nfs: Unknown parameter 'ÿÿÿÿ' [ 1745.029174][T31251] binder: 31250:31251 ioctl c0306201 200000000c80 returned -14 [ 1745.587588][T31260] loop6: detected capacity change from 0 to 2640 [ 1745.632994][T31262] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6407'. [ 1745.670984][T24586] buffer_io_error: 7 callbacks suppressed [ 1745.671000][T24586] Buffer I/O error on dev loop6, logical block 0, async page read [ 1745.695906][T24586] Buffer I/O error on dev loop6, logical block 0, async page read [ 1745.704387][T24586] Buffer I/O error on dev loop6, logical block 0, async page read [ 1745.713097][T24586] Buffer I/O error on dev loop6, logical block 0, async page read [ 1745.787635][T24586] Buffer I/O error on dev loop6, logical block 0, async page read [ 1745.947930][T24586] Buffer I/O error on dev loop6, logical block 0, async page read [ 1745.955805][T24586] Buffer I/O error on dev loop6, logical block 0, async page read [ 1746.006061][ T29] usb 8-1: new full-speed USB device number 29 using dummy_hcd [ 1746.056164][ T30] audit: type=1400 audit(2000526755.048:5148): avc: denied { ioctl } for pid=31269 comm="syz.1.6409" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1746.132537][T24586] Buffer I/O error on dev loop6, logical block 0, async page read [ 1746.157744][T24586] ldm_validate_partition_table(): Disk read failed. [ 1746.361838][ T29] usb 8-1: not running at top speed; connect to a high speed hub [ 1746.481474][T24586] Buffer I/O error on dev loop6, logical block 0, async page read [ 1746.489309][T24586] Buffer I/O error on dev loop6, logical block 0, async page read [ 1746.519563][ T29] usb 8-1: config 7 has an invalid interface number: 116 but max is 0 [ 1746.527732][ T29] usb 8-1: config 7 has no interface number 0 [ 1746.604446][T24586] Dev loop6: unable to read RDB block 0 [ 1746.624471][ T29] usb 8-1: config 7 interface 116 has no altsetting 0 [ 1746.643628][T24539] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1746.661573][T24586] loop6: unable to read partition table [ 1746.686435][T31275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6411'. [ 1746.700540][ T29] usb 8-1: New USB device found, idVendor=1f71, idProduct=3301, bcdDevice=ca.2d [ 1746.738315][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1746.749391][T31260] ldm_validate_partition_table(): Disk read failed. [ 1746.783961][ T29] usb 8-1: Product: syz [ 1747.033457][T24539] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 1747.087687][T31260] Dev loop6: unable to read RDB block 0 [ 1747.093317][ T29] usb 8-1: Manufacturer: syz [ 1747.093338][ T29] usb 8-1: SerialNumber: syz [ 1747.157611][T31260] loop6: unable to read partition table [ 1747.169023][T24539] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1747.210811][T31280] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31280 comm=syz.6.6408 [ 1747.211650][T31260] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 1747.266789][T24539] usb 2-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 1747.339907][T31280] netlink: 'syz.6.6408': attribute type 1 has an invalid length. [ 1747.411698][T24539] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1747.468410][T24539] usb 2-1: config 0 descriptor?? [ 1747.610708][ T29] usb-storage 8-1:7.116: USB Mass Storage device detected [ 1747.703797][ T29] usb 8-1: USB disconnect, device number 29 [ 1747.917593][T24539] holtek_mouse 0003:04D9:A04A.003A: unknown main item tag 0x0 [ 1747.946051][T24539] holtek_mouse 0003:04D9:A04A.003A: unknown main item tag 0x0 [ 1747.970231][T24539] holtek_mouse 0003:04D9:A04A.003A: unknown main item tag 0x0 [ 1747.989701][T24539] holtek_mouse 0003:04D9:A04A.003A: unknown main item tag 0x0 [ 1748.007441][T24539] holtek_mouse 0003:04D9:A04A.003A: unknown main item tag 0x0 [ 1748.046516][T24539] holtek_mouse 0003:04D9:A04A.003A: unknown main item tag 0x0 [ 1748.072539][T24539] holtek_mouse 0003:04D9:A04A.003A: unknown main item tag 0x0 [ 1748.085683][T24539] holtek_mouse 0003:04D9:A04A.003A: unknown main item tag 0x0 [ 1748.101687][T24539] holtek_mouse 0003:04D9:A04A.003A: unknown main item tag 0x0 [ 1748.126962][T24539] holtek_mouse 0003:04D9:A04A.003A: unknown main item tag 0x0 [ 1748.147088][T24539] holtek_mouse 0003:04D9:A04A.003A: item fetching failed at offset 14/235 [ 1748.219225][T24539] holtek_mouse 0003:04D9:A04A.003A: hid parse failed: -22 [ 1748.244295][T24539] holtek_mouse 0003:04D9:A04A.003A: probe with driver holtek_mouse failed with error -22 [ 1748.304158][T24539] usb 2-1: USB disconnect, device number 74 [ 1748.715675][T31280] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1749.812452][ T30] audit: type=1400 audit(2000526758.217:5149): avc: denied { create } for pid=31292 comm="syz.8.6415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1750.264473][ T30] audit: type=1400 audit(2000526758.248:5150): avc: denied { sys_admin } for pid=31292 comm="syz.8.6415" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1751.295895][T31295] nfs: Unknown parameter 'ÿÿÿÿ' [ 1751.312935][ T30] audit: type=1400 audit(2000526760.557:5151): avc: denied { bind } for pid=31317 comm="syz.3.6422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1751.370272][ T30] audit: type=1400 audit(2000526760.620:5152): avc: denied { getopt } for pid=31317 comm="syz.3.6422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1751.556720][T24531] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1751.798615][ T30] audit: type=1400 audit(2000526760.620:5153): avc: denied { write } for pid=31317 comm="syz.3.6422" path="socket:[116734]" dev="sockfs" ino=116734 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1751.875537][T24531] usb 9-1: Using ep0 maxpacket: 16 [ 1751.901923][T24531] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1751.945643][T24531] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1751.984511][T31326] bridge1: entered allmulticast mode [ 1752.011548][T24531] usb 9-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1752.014635][T31326] team0: Port device bridge1 added [ 1752.370470][T24531] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1752.393187][T24531] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1752.464317][T24531] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1752.495079][T24531] usb 9-1: config 0 descriptor?? [ 1752.615905][ T30] audit: type=1400 audit(2000526761.921:5154): avc: denied { bind } for pid=31330 comm="syz.3.6427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1752.780290][ T10] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1752.954159][ T10] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 1752.973241][ T10] usb 2-1: config 0 has an invalid descriptor of length 246, skipping remainder of the config [ 1753.000516][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1753.056568][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1753.088268][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1753.120953][ T10] usb 2-1: config 0 descriptor?? [ 1753.146332][ T30] audit: type=1400 audit(2000526762.487:5155): avc: denied { mount } for pid=31342 comm="syz.7.6432" name="/" dev="configfs" ino=1152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1753.199372][ T10] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1753.202905][ T30] audit: type=1400 audit(2000526762.519:5156): avc: denied { search } for pid=31342 comm="syz.7.6432" name="/" dev="configfs" ino=1152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1753.360482][T31332] netlink: 'syz.1.6428': attribute type 3 has an invalid length. [ 1753.387482][T31332] netlink: 208 bytes leftover after parsing attributes in process `syz.1.6428'. [ 1753.424217][T31332] netlink: 'syz.1.6428': attribute type 3 has an invalid length. [ 1753.443814][T31349] FAULT_INJECTION: forcing a failure. [ 1753.443814][T31349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1753.466054][T31332] netlink: 208 bytes leftover after parsing attributes in process `syz.1.6428'. [ 1753.476841][T31349] CPU: 1 UID: 0 PID: 31349 Comm: syz.7.6433 Tainted: G L syzkaller #0 PREEMPT(full) [ 1753.476869][T31349] Tainted: [L]=SOFTLOCKUP [ 1753.476876][T31349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1753.476887][T31349] Call Trace: [ 1753.476893][T31349] [ 1753.476900][T31349] dump_stack_lvl+0x100/0x190 [ 1753.476935][T31349] should_fail_ex.cold+0x5/0xa [ 1753.476960][T31349] _copy_from_user+0x2e/0xd0 [ 1753.476981][T31349] snd_seq_event_dup+0x6b5/0x8a0 [ 1753.477010][T31349] ? __pfx_snd_seq_event_dup+0x10/0x10 [ 1753.477030][T31349] ? mark_held_locks+0x40/0x70 [ 1753.477048][T31349] ? lockdep_hardirqs_on+0x78/0x100 [ 1753.477078][T31349] snd_seq_client_enqueue_event.constprop.0+0x20b/0x4a0 [ 1753.477101][T31349] ? __pfx_snd_seq_client_enqueue_event.constprop.0+0x10/0x10 [ 1753.477125][T31349] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1753.477154][T31349] snd_seq_write+0x388/0x6d0 [ 1753.477178][T31349] ? __pfx_snd_seq_write+0x10/0x10 [ 1753.477197][T31349] ? bpf_lsm_file_permission+0x9/0x10 [ 1753.477224][T31349] ? security_file_permission+0x76/0x210 [ 1753.477253][T31349] ? rw_verify_area+0xce/0x6d0 [ 1753.477281][T31349] vfs_write+0x2aa/0x1070 [ 1753.477298][T31349] ? __pfx_snd_seq_write+0x10/0x10 [ 1753.477317][T31349] ? __pfx_vfs_write+0x10/0x10 [ 1753.477332][T31349] ? find_held_lock+0x2b/0x80 [ 1753.477354][T31349] ? __fget_files+0x215/0x3d0 [ 1753.477373][T31349] ? __fget_files+0x215/0x3d0 [ 1753.477397][T31349] ? __fget_files+0x21f/0x3d0 [ 1753.477423][T31349] ksys_write+0x1f8/0x250 [ 1753.477440][T31349] ? __pfx_ksys_write+0x10/0x10 [ 1753.477463][T31349] do_syscall_64+0x106/0xf80 [ 1753.477487][T31349] ? clear_bhb_loop+0x40/0x90 [ 1753.477508][T31349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1753.477527][T31349] RIP: 0033:0x7f009d19c799 [ 1753.477544][T31349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1753.477561][T31349] RSP: 002b:00007f009e087028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1753.477579][T31349] RAX: ffffffffffffffda RBX: 00007f009d415fa0 RCX: 00007f009d19c799 [ 1753.477590][T31349] RDX: 000000000000ffc8 RSI: 0000200000000000 RDI: 0000000000000004 [ 1753.477607][T31349] RBP: 00007f009e087090 R08: 0000000000000000 R09: 0000000000000000 [ 1753.477618][T31349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1753.477628][T31349] R13: 00007f009d416038 R14: 00007f009d415fa0 R15: 00007ffe82e7ed08 [ 1753.477653][T31349] [ 1753.999406][T24531] usbhid 9-1:0.0: can't add hid device: -71 [ 1754.011755][T24531] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1754.052486][T24531] usb 9-1: USB disconnect, device number 2 [ 1754.596153][T31366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31366 comm=syz.3.6437 [ 1754.625202][T31366] netlink: 'syz.3.6437': attribute type 1 has an invalid length. [ 1754.701709][T31366] bond0: (slave gretap1): making interface the new active one [ 1754.721519][T31366] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 1754.752118][T31353] nfs: Unknown parameter 'ÿÿÿÿ' [ 1754.969843][T31376] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6440'. [ 1755.435740][T24532] usb 2-1: USB disconnect, device number 75 [ 1756.993134][T24544] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1757.019258][T31410] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6448'. [ 1757.073660][T31410] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6448'. [ 1757.158631][T31410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1757.175152][T24544] usb 8-1: device descriptor read/64, error -71 [ 1757.214654][T31410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1757.249111][T31410] bond0 (unregistering): Released all slaves [ 1757.450254][T24544] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1758.109364][T24544] usb 8-1: device descriptor read/64, error -71 [ 1758.186951][ T30] audit: type=1400 audit(2000526767.765:5157): avc: denied { create } for pid=31423 comm="syz.3.6454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1758.208315][T31408] nfs: Unknown parameter 'ÿÿÿÿ' [ 1758.219010][T24544] usb usb8-port1: attempt power cycle [ 1758.403157][T24530] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1758.951667][T24544] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1758.973907][T24530] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1759.004185][T24544] usb 8-1: device descriptor read/8, error -71 [ 1759.030005][T24530] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1759.083579][T24530] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 1536, setting to 1024 [ 1759.132428][T24530] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 1759.159669][T24530] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1759.270485][T24530] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1759.300962][T24544] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1759.333276][T24530] usb 2-1: Product: syz [ 1759.346946][T24544] usb 8-1: device descriptor read/8, error -71 [ 1759.347509][T24530] usb 2-1: Manufacturer: syz [ 1759.368990][T31444] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6456'. [ 1759.407480][T24530] usb 2-1: SerialNumber: syz [ 1759.502432][T24544] usb usb8-port1: unable to enumerate USB device [ 1759.711803][T24530] usb 2-1: config 0 descriptor?? [ 1759.728976][T31417] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1759.763571][T24530] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 1761.357465][T24530] scsi host1: usb-storage 2-1:0.0 [ 1761.534111][T24530] usb 2-1: USB disconnect, device number 76 [ 1761.691038][T31465] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6460'. [ 1762.384958][T31486] tmpfs: Too few inodes for current use [ 1764.329328][T31507] netlink: 'syz.7.6473': attribute type 10 has an invalid length. [ 1764.333913][T31505] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6474'. [ 1764.439834][T31505] syzkaller0: entered promiscuous mode [ 1764.468882][T31505] syzkaller0: entered allmulticast mode [ 1764.759127][T24544] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1764.940933][T24544] usb 4-1: Using ep0 maxpacket: 16 [ 1764.958227][T24544] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1764.987418][T24544] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1765.026373][T24544] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1765.065066][T24544] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1765.188041][T31521] nfs: Unknown parameter 'ÿÿÿÿ' [ 1765.196330][T24544] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1765.216690][T24544] usb 4-1: config 0 descriptor?? [ 1765.297656][T31528] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1766.367827][T31531] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1766.413522][T29448] Bluetooth: hci3: unexpected event for opcode 0x0c47 [ 1766.584146][T24544] hid_parser_main: 1 callbacks suppressed [ 1766.584159][T24544] shield 0003:0955:7214.003B: unknown main item tag 0x0 [ 1766.813380][T31539] syz.6.6479: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz6,mems_allowed=0-1 [ 1766.829395][T31539] CPU: 0 UID: 0 PID: 31539 Comm: syz.6.6479 Tainted: G L syzkaller #0 PREEMPT(full) [ 1766.829428][T31539] Tainted: [L]=SOFTLOCKUP [ 1766.829436][T31539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1766.829446][T31539] Call Trace: [ 1766.829454][T31539] [ 1766.829462][T31539] dump_stack_lvl+0x100/0x190 [ 1766.829499][T31539] warn_alloc.cold+0x95/0x1c1 [ 1766.829531][T31539] ? __pfx_warn_alloc+0x10/0x10 [ 1766.829565][T31539] ? __pfx___schedule+0x10/0x10 [ 1766.829593][T31539] ? kasan_save_stack+0x3f/0x50 [ 1766.829619][T31539] ? kasan_save_stack+0x30/0x50 [ 1766.829645][T31539] ? kasan_save_track+0x14/0x30 [ 1766.829674][T31539] ? xskq_create+0xfb/0x1d0 [ 1766.829703][T31539] __vmalloc_node_range_noprof+0x1252/0x1530 [ 1766.829734][T31539] ? xskq_create+0xfb/0x1d0 [ 1766.829762][T31539] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1766.829797][T31539] ? xskq_create+0xfb/0x1d0 [ 1766.829819][T31539] vmalloc_user_noprof+0x9e/0xe0 [ 1766.829842][T31539] ? xskq_create+0xfb/0x1d0 [ 1766.829865][T31539] xskq_create+0xfb/0x1d0 [ 1766.829888][T31539] xsk_setsockopt+0x743/0xab0 [ 1766.829912][T31539] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1766.829933][T31539] ? __rcu_read_unlock+0x26a/0x5e0 [ 1766.829957][T31539] ? selinux_socket_setsockopt+0x6a/0x80 [ 1766.829983][T31539] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1766.830004][T31539] do_sock_setsockopt+0xf3/0x1d0 [ 1766.830036][T31539] __sys_setsockopt+0x195/0x220 [ 1766.830065][T31539] __x64_sys_setsockopt+0xbd/0x160 [ 1766.830088][T31539] ? do_syscall_64+0x95/0xf80 [ 1766.830113][T31539] ? lockdep_hardirqs_on+0x78/0x100 [ 1766.830141][T31539] do_syscall_64+0x106/0xf80 [ 1766.830167][T31539] ? clear_bhb_loop+0x40/0x90 [ 1766.830189][T31539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1766.830208][T31539] RIP: 0033:0x7fc72519c799 [ 1766.830225][T31539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1766.830243][T31539] RSP: 002b:00007fc726061028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1766.830262][T31539] RAX: ffffffffffffffda RBX: 00007fc725416270 RCX: 00007fc72519c799 [ 1766.830274][T31539] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 1766.830285][T31539] RBP: 00007fc725232c99 R08: 0000000000000004 R09: 0000000000000000 [ 1766.830296][T31539] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1766.830307][T31539] R13: 00007fc725416308 R14: 00007fc725416270 R15: 00007ffef83d9148 [ 1766.830332][T31539] [ 1766.830359][T31539] Mem-Info: [ 1767.099347][T31539] active_anon:53129 inactive_anon:0 isolated_anon:0 [ 1767.099347][T31539] active_file:25515 inactive_file:41906 isolated_file:0 [ 1767.099347][T31539] unevictable:768 dirty:388 writeback:0 [ 1767.099347][T31539] slab_reclaimable:8875 slab_unreclaimable:138127 [ 1767.099347][T31539] mapped:45602 shmem:41301 pagetables:2052 [ 1767.099347][T31539] sec_pagetables:3 bounce:0 [ 1767.099347][T31539] kernel_misc_reclaimable:0 [ 1767.099347][T31539] free:1152728 free_pcp:11140 free_cma:0 [ 1767.145326][T31539] Node 0 active_anon:212516kB inactive_anon:0kB active_file:101800kB inactive_file:167252kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:153332kB dirty:1428kB writeback:0kB shmem:163668kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14476kB pagetables:8084kB sec_pagetables:12kB all_unreclaimable? no Balloon:0kB [ 1767.177963][T31539] Node 1 active_anon:0kB inactive_anon:0kB active_file:260kB inactive_file:372kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:29076kB dirty:124kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1767.209338][T31539] Node 0 DMA free:11240kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1767.240352][T31539] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 1767.246281][T31539] Node 0 DMA32 free:743300kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:212516kB inactive_anon:0kB active_file:101800kB inactive_file:167252kB unevictable:1536kB writepending:1428kB zspages:0kB present:3129332kB managed:2537116kB mlocked:0kB bounce:0kB free_pcp:32416kB local_pcp:16460kB free_cma:0kB [ 1767.280177][T31539] lowmem_reserve[]: 0 0 1 1 1 [ 1767.285161][T31539] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1048kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1767.315104][T31539] lowmem_reserve[]: 0 0 0 0 0 [ 1767.320127][T31539] Node 1 Normal free:3856372kB boost:0kB min:55832kB low:69788kB high:83744kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:260kB inactive_file:372kB unevictable:1536kB writepending:124kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:12112kB local_pcp:12112kB free_cma:0kB [ 1767.353454][T31539] lowmem_reserve[]: 0 0 0 0 0 [ 1767.358462][T31539] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11240kB [ 1767.373952][T31539] Node 0 DMA32: 3895*4kB (UME) 3377*8kB (UME) 3696*16kB (UME) 663*32kB (UME) 453*64kB (UME) 284*128kB (UME) 254*256kB (UME) 275*512kB (UME) 231*1024kB (UME) 45*2048kB (UM) 5*4096kB (U) = 743300kB [ 1767.393773][T31539] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1767.405968][T31539] Node 1 Normal: 6*4kB (UM) 2*8kB (UM) 2*16kB (UM) 5*32kB (UM) 3*64kB (M) 3*128kB (U) 7*256kB (U) 7*512kB (UM) 6*1024kB (UM) 5*2048kB (UM) 936*4096kB (UM) = 3856424kB [ 1767.423938][T31539] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1767.433522][T31539] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1767.444991][T31539] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1767.454626][T31539] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1767.464010][T31539] 108718 total pagecache pages [ 1767.468844][T31539] 0 pages in swap cache [ 1767.473010][T31539] Free swap = 124996kB [ 1767.477227][T31539] Total swap = 124996kB [ 1767.481395][T31539] 2097051 pages RAM [ 1767.485255][T31539] 0 pages HighMem/MovableOnly [ 1767.489943][T31539] 430895 pages reserved [ 1767.494407][T31539] 0 pages cma reserved [ 1767.548032][T24544] shield 0003:0955:7214.003B: unknown main item tag 0x0 [ 1767.555069][T24544] shield 0003:0955:7214.003B: unknown main item tag 0x0 [ 1767.562134][T24544] shield 0003:0955:7214.003B: unknown main item tag 0x0 [ 1767.569103][T24544] shield 0003:0955:7214.003B: unknown main item tag 0x0 [ 1767.579350][T31509] tipc: Started in network mode [ 1767.630412][T31509] tipc: Node identity be0858701346, cluster identity 4711 [ 1767.640999][T31509] tipc: Enabled bearer , priority 0 [ 1767.818349][ T29] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1767.834696][T24544] input: HID 0955:7214 Haptics as /devices/virtual/input/input80 [ 1767.874625][T24544] shield 0003:0955:7214.003B: Registered Thunderstrike controller [ 1767.901999][T24544] shield 0003:0955:7214.003B: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 1767.992013][ T29] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 1768.008139][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1768.027522][ T29] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1768.040037][ T29] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1768.053572][ T29] usb 8-1: Manufacturer: syz [ 1768.077332][T24532] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 1768.230630][ T29] usb 8-1: config 0 descriptor?? [ 1768.238187][ T981] usb 4-1: USB disconnect, device number 74 [ 1768.244099][T24536] shield 0003:0955:7214.003B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1768.392846][T31504] tipc: Resetting bearer [ 1768.422345][T24536] shield 0003:0955:7214.003B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1768.440195][T24536] shield 0003:0955:7214.003B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1768.462327][T24532] usb 9-1: config 0 has an invalid interface number: 146 but max is 0 [ 1768.511165][T24532] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1768.526385][ T29] rc_core: IR keymap rc-hauppauge not found [ 1768.534269][ T29] Registered IR keymap rc-empty [ 1768.543375][T31504] tipc: Disabling bearer [ 1768.549622][ T29] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1768.555687][T24532] usb 9-1: config 0 has no interface number 0 [ 1768.563083][ T29] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input81 [ 1768.589139][ T29] usb 8-1: USB disconnect, device number 34 [ 1768.599827][T24532] usb 9-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC [ 1768.639584][T24532] usb 9-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1768.669282][T24532] usb 9-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1768.695436][T24532] usb 9-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 1768.724296][T24532] usb 9-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1768.743080][T24532] usb 9-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1768.773607][T24532] usb 9-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1768.781104][T24536] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1768.793482][T24532] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1768.809702][T24532] usb 9-1: Product: syz [ 1768.813867][T24532] usb 9-1: Manufacturer: syz [ 1768.818434][T24532] usb 9-1: SerialNumber: syz [ 1768.840326][T24532] usb 9-1: config 0 descriptor?? [ 1768.845830][T31544] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1768.867536][T24532] microtek usb (rev 0.4.3): will this work? Command EP is not usually 12 [ 1768.875939][T24532] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 1768.902864][T24532] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 1768.925617][T24532] scsi host1: microtekX6 [ 1768.932338][T23610] microtek usb (rev 0.4.3): error -90 submitting URB [ 1768.943206][T24536] usb 2-1: Using ep0 maxpacket: 16 [ 1768.950066][T24536] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1768.960142][T24536] usb 2-1: config 1 has no interface number 1 [ 1768.963251][T23610] microtek usb (rev 0.4.3): error -90 submitting URB [ 1768.966540][T24536] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1768.983863][T24536] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1769.000021][T24536] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1769.009932][ T2840] microtek usb (rev 0.4.3): error -90 submitting URB [ 1769.030149][T24536] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1769.039422][ T2840] microtek usb (rev 0.4.3): error -90 submitting URB [ 1769.049604][T24536] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1769.071430][T24536] usb 2-1: Product: syz [ 1769.075616][T24536] usb 2-1: Manufacturer: syz [ 1769.109959][T24536] usb 2-1: SerialNumber: syz [ 1769.527529][T31544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1769.541032][T24536] usb 2-1: failed to enable PITCH for EP 0x82 [ 1769.547918][T31544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1769.568672][T24536] usb 2-1: 2:1: cannot set freq 11994917 to ep 0x82 [ 1769.744547][T31564] SET target dimension over the limit! [ 1770.366853][T31568] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6482'. [ 1770.378461][T31568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1770.387231][T31568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1770.463739][T24536] usb 2-1: USB disconnect, device number 77 [ 1770.898012][T24532] usb 8-1: new full-speed USB device number 35 using dummy_hcd [ 1771.403531][T24532] usb 8-1: config 0 has an invalid interface number: 146 but max is 0 [ 1771.564107][T24532] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1771.587572][T24530] usb 9-1: USB disconnect, device number 3 [ 1771.607814][T24532] usb 8-1: config 0 has no interface number 0 [ 1771.701061][T24532] usb 8-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC [ 1771.721523][T24532] usb 8-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1771.737085][T24532] usb 8-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1771.748936][T24532] usb 8-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 1771.767441][T24532] usb 8-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1771.821943][T31584] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1772.793981][T24532] usb 8-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1772.824705][T24532] usb 8-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1772.961290][T24532] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1773.089909][T24532] usb 8-1: Product: syz [ 1773.096178][T24532] usb 8-1: Manufacturer: syz [ 1773.101277][T24532] usb 8-1: SerialNumber: syz [ 1773.200734][T24532] usb 8-1: config 0 descriptor?? [ 1773.231567][T31572] raw-gadget.4 gadget.7: fail, usb_ep_enable returned -22 [ 1773.268486][T24532] microtek usb (rev 0.4.3): will this work? Command EP is not usually 12 [ 1773.279209][T24532] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 1773.313798][T24532] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 1773.657029][T24532] scsi host1: microtekX6 [ 1773.695595][T21867] microtek usb (rev 0.4.3): error -90 submitting URB [ 1773.736466][ T2840] microtek usb (rev 0.4.3): error -90 submitting URB [ 1773.756243][T24532] usb 8-1: USB disconnect, device number 35 [ 1773.776614][ T2840] microtek usb (rev 0.4.3): error -19 submitting URB [ 1773.794185][T31576] nfs: Unknown parameter 'ÿÿÿÿ' [ 1773.803542][T24356] microtek usb (rev 0.4.3): error -19 submitting URB [ 1775.441850][T31628] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6501'. [ 1775.740281][T31634] can0: slcan on ttyS3. [ 1776.157674][T31634] can0 (unregistered): slcan off ttyS3. [ 1776.177198][T31635] can0: slcan on ttyS3. [ 1776.475123][T31643] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1777.396043][T31630] can0 (unregistered): slcan off ttyS3. [ 1778.930479][T24531] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1778.989427][T31677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6512'. [ 1779.358449][T24531] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 1779.409613][T24531] usb 9-1: config 0 has an invalid descriptor of length 246, skipping remainder of the config [ 1779.488172][T24531] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1779.559405][T24531] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1779.573790][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1779.583409][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1779.673963][T24530] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1779.691020][T24531] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1779.711927][T24531] usb 9-1: config 0 descriptor?? [ 1779.732601][T31686] FAULT_INJECTION: forcing a failure. [ 1779.732601][T31686] name failslab, interval 1, probability 0, space 0, times 0 [ 1779.760643][T24531] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1779.797186][T31686] CPU: 1 UID: 0 PID: 31686 Comm: syz.1.6513 Tainted: G L syzkaller #0 PREEMPT(full) [ 1779.797218][T31686] Tainted: [L]=SOFTLOCKUP [ 1779.797224][T31686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1779.797234][T31686] Call Trace: [ 1779.797241][T31686] [ 1779.797248][T31686] dump_stack_lvl+0x100/0x190 [ 1779.797280][T31686] should_fail_ex.cold+0x5/0xa [ 1779.797303][T31686] should_failslab+0xc2/0x120 [ 1779.797323][T31686] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1779.797351][T31686] ? __alloc_skb+0x140/0x710 [ 1779.797378][T31686] __alloc_skb+0x140/0x710 [ 1779.797396][T31686] ? __alloc_skb+0x5b7/0x710 [ 1779.797415][T31686] ? __pfx___alloc_skb+0x10/0x10 [ 1779.797441][T31686] netlink_alloc_large_skb+0x69/0x150 [ 1779.797469][T31686] netlink_sendmsg+0x680/0xda0 [ 1779.797498][T31686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1779.797522][T31686] ? __might_fault+0x80/0x140 [ 1779.797556][T31686] ____sys_sendmsg+0x9e1/0xb70 [ 1779.797583][T31686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1779.797611][T31686] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1779.797650][T31686] ___sys_sendmsg+0x190/0x1e0 [ 1779.797670][T31686] ? __pfx____sys_sendmsg+0x10/0x10 [ 1779.797724][T31686] __sys_sendmsg+0x170/0x220 [ 1779.797749][T31686] ? __pfx___sys_sendmsg+0x10/0x10 [ 1779.797788][T31686] do_syscall_64+0x106/0xf80 [ 1779.797813][T31686] ? clear_bhb_loop+0x40/0x90 [ 1779.797835][T31686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1779.797852][T31686] RIP: 0033:0x7fd1cb59c799 [ 1779.797867][T31686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1779.797882][T31686] RSP: 002b:00007fd1cc47b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1779.797899][T31686] RAX: ffffffffffffffda RBX: 00007fd1cb815fa0 RCX: 00007fd1cb59c799 [ 1779.797909][T31686] RDX: 000000000400c014 RSI: 0000200000002000 RDI: 0000000000000004 [ 1779.797919][T31686] RBP: 00007fd1cc47b090 R08: 0000000000000000 R09: 0000000000000000 [ 1779.797929][T31686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1779.797940][T31686] R13: 00007fd1cb816038 R14: 00007fd1cb815fa0 R15: 00007fff0d215728 [ 1779.797964][T31686] [ 1779.855904][T24530] usb 4-1: Using ep0 maxpacket: 8 [ 1779.957908][T31664] netlink: 'syz.8.6508': attribute type 3 has an invalid length. [ 1780.118286][T31691] random: crng reseeded on system resumption [ 1780.166025][T31691] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6514'. [ 1780.206879][ T30] audit: type=1400 audit(2000526790.788:5158): avc: denied { write } for pid=31688 comm="syz.6.6514" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1780.422557][T31694] FAULT_INJECTION: forcing a failure. [ 1780.422557][T31694] name failslab, interval 1, probability 0, space 0, times 0 [ 1780.435495][T31694] CPU: 0 UID: 0 PID: 31694 Comm: syz.7.6515 Tainted: G L syzkaller #0 PREEMPT(full) [ 1780.435528][T31694] Tainted: [L]=SOFTLOCKUP [ 1780.435534][T31694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1780.435545][T31694] Call Trace: [ 1780.435553][T31694] [ 1780.435561][T31694] dump_stack_lvl+0x100/0x190 [ 1780.435594][T31694] should_fail_ex.cold+0x5/0xa [ 1780.435623][T31694] should_failslab+0xc2/0x120 [ 1780.435642][T31694] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1780.435668][T31694] ? __alloc_skb+0x140/0x710 [ 1780.435692][T31694] __alloc_skb+0x140/0x710 [ 1780.435709][T31694] ? __alloc_skb+0x5b7/0x710 [ 1780.435727][T31694] ? __pfx___alloc_skb+0x10/0x10 [ 1780.435756][T31694] netlink_alloc_large_skb+0x69/0x150 [ 1780.435785][T31694] netlink_sendmsg+0x680/0xda0 [ 1780.435812][T31694] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1780.435833][T31694] ? __might_fault+0x80/0x140 [ 1780.435861][T31694] ____sys_sendmsg+0x9e1/0xb70 [ 1780.435883][T31694] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1780.435906][T31694] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1780.435938][T31694] ___sys_sendmsg+0x190/0x1e0 [ 1780.435957][T31694] ? __pfx____sys_sendmsg+0x10/0x10 [ 1780.435997][T31694] ? __pfx_vfs_write+0x10/0x10 [ 1780.436013][T31694] ? do_sys_openat2+0x157/0x1e0 [ 1780.436038][T31694] __sys_sendmsg+0x170/0x220 [ 1780.436060][T31694] ? __pfx___sys_sendmsg+0x10/0x10 [ 1780.436094][T31694] do_syscall_64+0x106/0xf80 [ 1780.436117][T31694] ? clear_bhb_loop+0x40/0x90 [ 1780.436137][T31694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1780.436154][T31694] RIP: 0033:0x7f009d19c799 [ 1780.436168][T31694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1780.436183][T31694] RSP: 002b:00007f009e066028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1780.436201][T31694] RAX: ffffffffffffffda RBX: 00007f009d416090 RCX: 00007f009d19c799 [ 1780.436212][T31694] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1780.436222][T31694] RBP: 00007f009e066090 R08: 0000000000000000 R09: 0000000000000000 [ 1780.436232][T31694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1780.436242][T31694] R13: 00007f009d416128 R14: 00007f009d416090 R15: 00007ffe82e7ed08 [ 1780.436264][T31694] [ 1780.733151][T31664] netlink: 208 bytes leftover after parsing attributes in process `syz.8.6508'. [ 1780.756107][T24530] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 188, changing to 7 [ 1780.770212][T31664] netlink: 'syz.8.6508': attribute type 3 has an invalid length. [ 1780.778067][T31664] netlink: 208 bytes leftover after parsing attributes in process `syz.8.6508'. [ 1780.789622][T24530] usb 4-1: New USB device found, idVendor=0499, idProduct=100a, bcdDevice= 0.40 [ 1780.798719][T24530] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1780.806707][T24530] usb 4-1: Product:  [ 1780.826977][T24530] usb 4-1: Manufacturer: ä‘碦艞嶯ä€ï”õë¼å„æ¬å­»é¸‰ã¿†êºæˆ¢êŸ§å›œãªƒæ£³è‹¨âº¾áµê‡·åƒï‘ˆê…¯êƒ­êšï€â™œâµæŒ­ìˆƒä‰¡ê»§æ…¢å¢·æšŽà¶žî»—ë¼ã¾ì™æ¾ë´ê…¬å ê„€êžŒä¡›à¤¯è·¿ì‘¡éŸ’꘬弟怘⴯˞ᤱò¢’“采ä›ï¸‹ï°–냓á€ã••ï–æ¾™é¹ƒà¾­ì•á®ê¦£é¥”罄ꌀ뜌鿄齱ꦙᇞ隀⮞鬆䲑ㄶä˜ë©±Ú”âš‚ [ 1780.863214][T24530] usb 4-1: SerialNumber: 蘎㾃帺禟믷㛙鑡﹇䛜龭焧暟裘햯ꄪ䣣ﷺ㖨ã™â‘¯ï™•앢닣蠻᭾♑瘿 [ 1780.993955][T31698] FAULT_INJECTION: forcing a failure. [ 1780.993955][T31698] name failslab, interval 1, probability 0, space 0, times 0 [ 1781.009256][T31698] CPU: 1 UID: 0 PID: 31698 Comm: syz.6.6517 Tainted: G L syzkaller #0 PREEMPT(full) [ 1781.009284][T31698] Tainted: [L]=SOFTLOCKUP [ 1781.009290][T31698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1781.009300][T31698] Call Trace: [ 1781.009306][T31698] [ 1781.009311][T31698] dump_stack_lvl+0x100/0x190 [ 1781.009334][T31698] should_fail_ex.cold+0x5/0xa [ 1781.009349][T31698] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1781.009379][T31698] should_failslab+0xc2/0x120 [ 1781.009397][T31698] __kmalloc_noprof+0xe0/0x850 [ 1781.009425][T31698] tomoyo_realpath_from_path+0xb6/0x690 [ 1781.009449][T31698] tomoyo_path_number_perm+0x23c/0x580 [ 1781.009463][T31698] ? tomoyo_path_number_perm+0x22e/0x580 [ 1781.009479][T31698] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1781.009510][T31698] ? find_held_lock+0x2b/0x80 [ 1781.009532][T31698] ? __fget_files+0x215/0x3d0 [ 1781.009549][T31698] ? hook_file_ioctl_common+0x146/0x410 [ 1781.009571][T31698] ? __fget_files+0x21f/0x3d0 [ 1781.009589][T31698] security_file_ioctl+0xd3/0x230 [ 1781.009607][T31698] __x64_sys_ioctl+0xb7/0x210 [ 1781.009626][T31698] do_syscall_64+0x106/0xf80 [ 1781.009646][T31698] ? clear_bhb_loop+0x40/0x90 [ 1781.009667][T31698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1781.009684][T31698] RIP: 0033:0x7fc72519c799 [ 1781.009699][T31698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1781.009715][T31698] RSP: 002b:00007fc7260c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1781.009731][T31698] RAX: ffffffffffffffda RBX: 00007fc725415fa0 RCX: 00007fc72519c799 [ 1781.009738][T31698] RDX: 0000200000000240 RSI: 0000000000008915 RDI: 0000000000000004 [ 1781.009745][T31698] RBP: 00007fc7260c4090 R08: 0000000000000000 R09: 0000000000000000 [ 1781.009752][T31698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1781.009758][T31698] R13: 00007fc725416038 R14: 00007fc725415fa0 R15: 00007ffef83d9148 [ 1781.009772][T31698] [ 1781.010151][T31698] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1781.578522][T31703] can0: slcan on ttyS3. [ 1781.985900][T24530] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1781.993588][T24530] usb 4-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 1782.036993][T24530] usb 4-1: found format II with max.bitrate = 15584, frame size=4 [ 1782.058168][T24544] usb 9-1: USB disconnect, device number 4 [ 1782.094349][T31703] can0 (unregistered): slcan off ttyS3. [ 1782.106397][T31704] can0: slcan on ttyS3. [ 1782.144489][T24530] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1782.152810][T31707] ALSA: mixer_oss: invalid OSS volume '' [ 1782.248368][T31705] can0 (unregistered): slcan off ttyS3. [ 1782.376965][T24530] usb 4-1: USB disconnect, device number 75 [ 1782.720463][T27882] udevd[27882]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1783.380824][T24544] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1783.604443][T31735] overlayfs: failed to clone upperpath [ 1784.240428][T24544] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1784.277692][T24544] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1784.367839][T24544] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1784.408096][T24544] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1784.449069][T24544] usb 2-1: Product: syz [ 1784.463640][T24544] usb 2-1: Manufacturer: syz [ 1784.475447][T24544] usb 2-1: SerialNumber: syz [ 1784.514790][T24544] usb 2-1: config 0 descriptor?? [ 1784.868254][T31720] wg1 speed is unknown, defaulting to 1000 [ 1785.443083][T31755] nfs: Unknown parameter 'ÿÿÿÿ' [ 1785.602782][T31762] FAULT_INJECTION: forcing a failure. [ 1785.602782][T31762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1785.627501][T31762] CPU: 0 UID: 0 PID: 31762 Comm: syz.3.6529 Tainted: G L syzkaller #0 PREEMPT(full) [ 1785.627532][T31762] Tainted: [L]=SOFTLOCKUP [ 1785.627539][T31762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1785.627549][T31762] Call Trace: [ 1785.627555][T31762] [ 1785.627562][T31762] dump_stack_lvl+0x100/0x190 [ 1785.627595][T31762] should_fail_ex.cold+0x5/0xa [ 1785.627618][T31762] _copy_to_user+0x32/0xd0 [ 1785.627638][T31762] simple_read_from_buffer+0xcb/0x170 [ 1785.627659][T31762] proc_fail_nth_read+0x1af/0x230 [ 1785.627685][T31762] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1785.627712][T31762] ? rw_verify_area+0xce/0x6d0 [ 1785.627735][T31762] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1785.627759][T31762] vfs_read+0x1e4/0xb30 [ 1785.627788][T31762] ? __pfx_vfs_read+0x10/0x10 [ 1785.627812][T31762] ? __fget_files+0x215/0x3d0 [ 1785.627835][T31762] ? __fget_files+0x21f/0x3d0 [ 1785.627858][T31762] ksys_read+0x12a/0x250 [ 1785.627873][T31762] ? __pfx_ksys_read+0x10/0x10 [ 1785.627894][T31762] do_syscall_64+0x106/0xf80 [ 1785.627915][T31762] ? clear_bhb_loop+0x40/0x90 [ 1785.627936][T31762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1785.627953][T31762] RIP: 0033:0x7f6f5a75cfce [ 1785.627967][T31762] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1785.627984][T31762] RSP: 002b:00007f6f5b690fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1785.628001][T31762] RAX: ffffffffffffffda RBX: 00007f6f5b6916c0 RCX: 00007f6f5a75cfce [ 1785.628013][T31762] RDX: 000000000000000f RSI: 00007f6f5b6910a0 RDI: 0000000000000008 [ 1785.628024][T31762] RBP: 00007f6f5b691090 R08: 0000000000000000 R09: 0000000000000000 [ 1785.628034][T31762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1785.628045][T31762] R13: 00007f6f5aa16128 R14: 00007f6f5aa16090 R15: 00007fff5ee74678 [ 1785.628068][T31762] [ 1786.329898][T31764] can0: slcan on ttyS3. [ 1786.345793][T24544] usb 2-1: USB disconnect, device number 78 [ 1786.442738][T31764] can0 (unregistered): slcan off ttyS3. [ 1786.453418][T31766] can0: slcan on ttyS3. [ 1786.577629][T27344] udevd[27344]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1787.043973][T31768] bond4 (unregistering): Released all slaves [ 1787.221841][T31763] can0 (unregistered): slcan off ttyS3. [ 1787.730419][T31795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1788.224439][T31794] sp0: Synchronizing with TNC [ 1789.565465][T24544] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1789.874285][T31797] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6539'. [ 1789.978326][T24544] usb 8-1: Using ep0 maxpacket: 16 [ 1789.995691][T24544] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1790.025930][T24544] usb 8-1: config 1 has no interface number 1 [ 1790.032403][T24544] usb 8-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1790.082946][T24544] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1790.106058][T24544] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1791.284301][T24544] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1791.300267][T24544] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1791.308693][T24544] usb 8-1: Product: syz [ 1791.313000][T24544] usb 8-1: Manufacturer: syz [ 1791.319406][T24544] usb 8-1: SerialNumber: syz [ 1791.515834][ T30] audit: type=1326 audit(2000526802.740:5159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31829 comm="syz.1.6547" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1cb59c799 code=0x0 [ 1791.548781][T24532] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1791.594639][T24544] usb 8-1: failed to enable PITCH for EP 0x82 [ 1791.611902][T24544] usb 8-1: 2:1: cannot set freq 11994917 to ep 0x82 [ 1791.667045][T24544] usb 8-1: USB disconnect, device number 36 [ 1791.710833][T24532] usb 9-1: Using ep0 maxpacket: 16 [ 1791.722909][T24532] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1791.753114][T24532] usb 9-1: config 1 has no interface number 1 [ 1791.774514][T24532] usb 9-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1791.793150][T24532] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1791.828942][T24532] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1791.854616][T24532] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1791.872449][T24532] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1791.881944][T31834] nfs: Unknown parameter 'ÿÿÿÿ' [ 1791.900735][T24532] usb 9-1: Product: syz [ 1791.905017][T24532] usb 9-1: Manufacturer: syz [ 1791.909769][T24532] usb 9-1: SerialNumber: syz [ 1792.139455][T24532] usb 9-1: failed to enable PITCH for EP 0x82 [ 1792.162685][T24532] usb 9-1: 2:1: cannot set freq 11994917 to ep 0x82 [ 1792.209192][T31837] FAULT_INJECTION: forcing a failure. [ 1792.209192][T31837] name failslab, interval 1, probability 0, space 0, times 0 [ 1792.266876][T31837] CPU: 1 UID: 0 PID: 31837 Comm: syz.3.6549 Tainted: G L syzkaller #0 PREEMPT(full) [ 1792.266905][T31837] Tainted: [L]=SOFTLOCKUP [ 1792.266911][T31837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1792.266917][T31837] Call Trace: [ 1792.266922][T31837] [ 1792.266927][T31837] dump_stack_lvl+0x100/0x190 [ 1792.266949][T31837] should_fail_ex.cold+0x5/0xa [ 1792.266965][T31837] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1792.266983][T31837] should_failslab+0xc2/0x120 [ 1792.266995][T31837] __kmalloc_noprof+0xe0/0x850 [ 1792.267015][T31837] tomoyo_realpath_from_path+0xb6/0x690 [ 1792.267036][T31837] tomoyo_path_number_perm+0x23c/0x580 [ 1792.267050][T31837] ? tomoyo_path_number_perm+0x22e/0x580 [ 1792.267067][T31837] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1792.267095][T31837] ? find_held_lock+0x2b/0x80 [ 1792.267110][T31837] ? __fget_files+0x215/0x3d0 [ 1792.267122][T31837] ? hook_file_ioctl_common+0x146/0x410 [ 1792.267137][T31837] ? __fget_files+0x21f/0x3d0 [ 1792.267151][T31837] security_file_ioctl+0xd3/0x230 [ 1792.267168][T31837] __x64_sys_ioctl+0xb7/0x210 [ 1792.267187][T31837] do_syscall_64+0x106/0xf80 [ 1792.267203][T31837] ? clear_bhb_loop+0x40/0x90 [ 1792.267217][T31837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1792.267229][T31837] RIP: 0033:0x7f6f5a79c799 [ 1792.267239][T31837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1792.267250][T31837] RSP: 002b:00007f6f5b6b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1792.267262][T31837] RAX: ffffffffffffffda RBX: 00007f6f5aa15fa0 RCX: 00007f6f5a79c799 [ 1792.267269][T31837] RDX: 0000000000000000 RSI: 0000000000008915 RDI: 0000000000000004 [ 1792.267276][T31837] RBP: 00007f6f5b6b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1792.267287][T31837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1792.267294][T31837] R13: 00007f6f5aa16038 R14: 00007f6f5aa15fa0 R15: 00007fff5ee74678 [ 1792.267309][T31837] [ 1792.473170][T31837] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1793.335205][T24532] usb 9-1: USB disconnect, device number 5 [ 1795.348587][T31865] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6551'. [ 1795.365399][T24531] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1795.491355][T31869] ieee802154 phy0 wpan0: encryption failed: -22 [ 1795.562897][T24531] usb 9-1: Using ep0 maxpacket: 16 [ 1795.779115][T31876] can0: slcan on ttyS3. [ 1796.707978][T24531] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1796.722527][T31876] can0 (unregistered): slcan off ttyS3. [ 1796.817428][T24531] usb 9-1: config 1 has no interface number 1 [ 1796.856309][T24531] usb 9-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1796.901748][T24531] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1797.198843][T24531] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1797.264834][T31891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6563'. [ 1797.295688][T31889] netlink: 'syz.6.6561': attribute type 1 has an invalid length. [ 1797.534250][T24531] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1797.810797][T31894] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31894 comm=syz.7.6564 [ 1797.823320][T24531] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1797.844470][T24531] usb 9-1: Product: syz [ 1797.864987][T24531] usb 9-1: Manufacturer: syz [ 1797.940714][T24531] usb 9-1: SerialNumber: syz [ 1797.965411][T24531] usb 9-1: can't set config #1, error -71 [ 1798.033783][T24531] usb 9-1: USB disconnect, device number 6 [ 1798.276896][T31909] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6566'. [ 1798.285837][T31909] openvswitch: netlink: Flow actions attr not present in new flow. [ 1798.717087][T31882] nfs: Unknown parameter 'ÿÿÿÿ' [ 1799.119397][T31924] ieee802154 phy0 wpan0: encryption failed: -22 [ 1799.134296][T24544] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 1799.190760][T24531] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1799.524603][T24531] usb 4-1: Using ep0 maxpacket: 32 [ 1799.791038][T24531] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1799.855628][T24531] usb 4-1: config 0 has no interface number 0 [ 1799.881902][T24531] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1799.941132][T24531] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1799.992378][T24531] usb 4-1: Product: syz [ 1800.064671][T24531] usb 4-1: Manufacturer: syz [ 1800.595582][T24531] usb 4-1: SerialNumber: syz [ 1800.600258][ T981] libceph: connect (1)[c::]:6789 error -101 [ 1800.616732][T24531] usb 4-1: config 0 descriptor?? [ 1800.637422][ T981] libceph: mon0 (1)[c::]:6789 connect error [ 1800.654080][T31934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1800.719391][T31934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1800.801247][T31937] ceph: No mds server is up or the cluster is laggy [ 1801.093808][T24531] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1801.122860][T31922] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6571'. [ 1801.153949][T24531] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1801.218880][T24531] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1801.289534][T24531] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 1801.349360][T24531] usb 4-1: USB disconnect, device number 76 [ 1801.461129][T31931] wg1 speed is unknown, defaulting to 1000 [ 1802.153367][T31953] FAULT_INJECTION: forcing a failure. [ 1802.153367][T31953] name failslab, interval 1, probability 0, space 0, times 0 [ 1802.194693][T31953] CPU: 1 UID: 0 PID: 31953 Comm: syz.1.6578 Tainted: G L syzkaller #0 PREEMPT(full) [ 1802.194718][T31953] Tainted: [L]=SOFTLOCKUP [ 1802.194723][T31953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1802.194729][T31953] Call Trace: [ 1802.194734][T31953] [ 1802.194739][T31953] dump_stack_lvl+0x100/0x190 [ 1802.194762][T31953] should_fail_ex.cold+0x5/0xa [ 1802.194777][T31953] ? iovec_from_user+0x8d/0x140 [ 1802.194789][T31953] should_failslab+0xc2/0x120 [ 1802.194800][T31953] __kmalloc_noprof+0xe0/0x850 [ 1802.194817][T31953] ? find_held_lock+0x2b/0x80 [ 1802.194835][T31953] iovec_from_user+0x8d/0x140 [ 1802.194848][T31953] __import_iovec+0x81/0x640 [ 1802.194859][T31953] ? __might_fault+0x80/0x140 [ 1802.194875][T31953] ? __might_fault+0xc5/0x140 [ 1802.194892][T31953] import_iovec+0x101/0x130 [ 1802.194906][T31953] copy_msghdr_from_user+0x2ed/0x4f0 [ 1802.194919][T31953] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1802.194933][T31953] ? __pfx__kstrtoull+0x10/0x10 [ 1802.194950][T31953] ___sys_sendmsg+0x106/0x1e0 [ 1802.194963][T31953] ? __pfx____sys_sendmsg+0x10/0x10 [ 1802.194980][T31953] ? find_held_lock+0x2b/0x80 [ 1802.195004][T31953] __sys_sendmmsg+0x205/0x430 [ 1802.195020][T31953] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1802.195040][T31953] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1802.195063][T31953] ? fput+0x79/0x100 [ 1802.195077][T31953] ? ksys_write+0x1ac/0x250 [ 1802.195087][T31953] ? __pfx_ksys_write+0x10/0x10 [ 1802.195100][T31953] __x64_sys_sendmmsg+0x9c/0x100 [ 1802.195114][T31953] ? lockdep_hardirqs_on+0x78/0x100 [ 1802.195130][T31953] do_syscall_64+0x106/0xf80 [ 1802.195145][T31953] ? clear_bhb_loop+0x40/0x90 [ 1802.195159][T31953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1802.195171][T31953] RIP: 0033:0x7fd1cb59c799 [ 1802.195181][T31953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1802.195192][T31953] RSP: 002b:00007fd1cc47b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1802.195203][T31953] RAX: ffffffffffffffda RBX: 00007fd1cb815fa0 RCX: 00007fd1cb59c799 [ 1802.195210][T31953] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000003 [ 1802.195219][T31953] RBP: 00007fd1cc47b090 R08: 0000000000000000 R09: 0000000000000000 [ 1802.195225][T31953] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 1802.195231][T31953] R13: 00007fd1cb816038 R14: 00007fd1cb815fa0 R15: 00007fff0d215728 [ 1802.195246][T31953] [ 1802.703023][T24544] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1802.712853][T24544] usb 9-1: no configurations [ 1802.717601][T24544] usb 9-1: can't read configurations, error -22 [ 1803.117314][T24532] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1803.269429][T24532] usb 2-1: Using ep0 maxpacket: 16 [ 1803.289339][T24532] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1803.326760][T24532] usb 2-1: config 1 has no interface number 1 [ 1803.339484][T24532] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1803.375744][T24532] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1803.412843][T31962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6582'. [ 1803.464385][T24532] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1803.464766][T31965] FAULT_INJECTION: forcing a failure. [ 1803.464766][T31965] name failslab, interval 1, probability 0, space 0, times 0 [ 1803.515799][T24532] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1803.518475][T31965] CPU: 1 UID: 0 PID: 31965 Comm: syz.7.6583 Tainted: G L syzkaller #0 PREEMPT(full) [ 1803.518500][T31965] Tainted: [L]=SOFTLOCKUP [ 1803.518506][T31965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1803.518515][T31965] Call Trace: [ 1803.518520][T31965] [ 1803.518526][T31965] dump_stack_lvl+0x100/0x190 [ 1803.518556][T31965] should_fail_ex.cold+0x5/0xa [ 1803.518578][T31965] should_failslab+0xc2/0x120 [ 1803.518594][T31965] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1803.518617][T31965] ? __alloc_skb+0x140/0x710 [ 1803.518640][T31965] __alloc_skb+0x140/0x710 [ 1803.518657][T31965] ? __alloc_skb+0x5b7/0x710 [ 1803.518675][T31965] ? __pfx___alloc_skb+0x10/0x10 [ 1803.518700][T31965] netlink_alloc_large_skb+0x69/0x150 [ 1803.518725][T31965] netlink_sendmsg+0x680/0xda0 [ 1803.518751][T31965] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1803.518772][T31965] ? __might_fault+0x80/0x140 [ 1803.518800][T31965] ____sys_sendmsg+0x9e1/0xb70 [ 1803.518823][T31965] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1803.518847][T31965] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1803.518880][T31965] ___sys_sendmsg+0x190/0x1e0 [ 1803.518898][T31965] ? __pfx____sys_sendmsg+0x10/0x10 [ 1803.518939][T31965] __sys_sendmsg+0x170/0x220 [ 1803.518960][T31965] ? __pfx___sys_sendmsg+0x10/0x10 [ 1803.518994][T31965] do_syscall_64+0x106/0xf80 [ 1803.519014][T31965] ? clear_bhb_loop+0x40/0x90 [ 1803.519034][T31965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1803.519050][T31965] RIP: 0033:0x7f009d19c799 [ 1803.519063][T31965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1803.519078][T31965] RSP: 002b:00007f009e087028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1803.519094][T31965] RAX: ffffffffffffffda RBX: 00007f009d415fa0 RCX: 00007f009d19c799 [ 1803.519104][T31965] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1803.519114][T31965] RBP: 00007f009e087090 R08: 0000000000000000 R09: 0000000000000000 [ 1803.519123][T31965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1803.519132][T31965] R13: 00007f009d416038 R14: 00007f009d415fa0 R15: 00007ffe82e7ed08 [ 1803.519153][T31965] [ 1803.742185][T31971] ieee802154 phy0 wpan0: encryption failed: -22 [ 1803.830736][T24532] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1803.839977][T24532] usb 2-1: Product: syz [ 1804.196046][T24532] usb 2-1: Manufacturer: syz [ 1804.211903][T24532] usb 2-1: SerialNumber: syz [ 1804.457101][T24532] usb 2-1: failed to enable PITCH for EP 0x82 [ 1804.468180][T24532] usb 2-1: 2:1: cannot set freq 11994917 to ep 0x82 [ 1804.517450][T24539] usb 8-1: new full-speed USB device number 37 using dummy_hcd [ 1804.528039][T24532] usb 2-1: USB disconnect, device number 79 [ 1804.564939][T27882] udevd[27882]: setting owner of /dev/bus/usb/002/079 to uid=0, gid=0 failed: No such file or directory [ 1804.621851][T27344] udevd[27344]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1804.683529][T24539] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1804.715454][T24539] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1804.753278][T24539] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1804.768070][T24539] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1806.073508][T29448] Bluetooth: hci5: command 0x0406 tx timeout [ 1806.119290][T31991] nfs: Unknown parameter 'ÿÿÿÿ' [ 1806.139118][T24539] usb 8-1: usb_control_msg returned -32 [ 1806.182952][T24539] usbtmc 8-1:16.0: can't read capabilities [ 1807.439566][T24532] usb 8-1: USB disconnect, device number 37 [ 1807.845044][T24532] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1807.875239][T32020] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32020 comm=syz.8.6598 [ 1807.891343][ T794] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1808.008997][T24532] usb 8-1: Using ep0 maxpacket: 32 [ 1808.017575][T24532] usb 8-1: too many configurations: 17, using maximum allowed: 8 [ 1808.027516][T24532] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 1808.036020][T24532] usb 8-1: config 0 has no interface number 0 [ 1808.043587][T24532] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 1808.055573][T24532] usb 8-1: config 0 has no interface number 0 [ 1808.063563][T24532] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 1808.131111][ T794] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 1808.142575][ T794] usb 2-1: config 0 has an invalid descriptor of length 246, skipping remainder of the config [ 1808.156201][T24532] usb 8-1: config 0 has no interface number 0 [ 1808.169976][ T794] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1808.186624][T24532] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 1808.194623][T24532] usb 8-1: config 0 has no interface number 0 [ 1808.216625][ T794] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1808.227966][ T794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1808.236222][T24532] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 1808.247959][T24532] usb 8-1: config 0 has no interface number 0 [ 1808.256282][ T794] usb 2-1: config 0 descriptor?? [ 1808.267327][ T794] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1808.275521][T24532] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 1808.284954][T24532] usb 8-1: config 0 has no interface number 0 [ 1808.292852][T24532] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 1808.300848][T24532] usb 8-1: config 0 has no interface number 0 [ 1808.308139][T24532] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 1808.316264][T24532] usb 8-1: config 0 has no interface number 0 [ 1808.326053][T24532] usb 8-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1808.336065][T24532] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1808.344541][T24532] usb 8-1: Product: syz [ 1808.350541][T24532] usb 8-1: Manufacturer: syz [ 1808.355139][T24532] usb 8-1: SerialNumber: syz [ 1808.369481][T24532] usb 8-1: config 0 descriptor?? [ 1808.408429][T24532] etas_es58x 8-1:0.2: Starting syz syz (Serial Number syz) [ 1808.415807][ T794] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 1808.561535][ T794] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1808.573584][ T794] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1808.592023][ T794] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1808.601704][ T794] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1808.644231][T24532] etas_es58x 8-1:0.2: could not parse product info: '424242424242' [ 1808.814281][ T794] usb 9-1: usb_control_msg returned -32 [ 1808.821194][ T794] usbtmc 9-1:16.0: can't read capabilities [ 1809.294482][ T794] usb 9-1: USB disconnect, device number 9 [ 1809.367488][ C1] etas_es58x 8-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000. [ 1809.378466][ C1] etas_es58x 8-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 1809.386455][ C1] etas_es58x 8-1:0.2: es58x_split_urb() returned error -EBADMSG [ 1809.402618][ T5475] etas_es58x 8-1:0.2 can1: bit-timing not yet defined [ 1809.463485][ T981] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1809.590378][ C1] etas_es58x 8-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 1809.599575][ C1] etas_es58x 8-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 1809.608745][ C1] etas_es58x 8-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 1809.617894][ C1] etas_es58x 8-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 1809.627028][ C1] etas_es58x 8-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 1809.636165][ C1] etas_es58x 8-1:0.2 can0: es58x_write_bulk_callback: error -EPROTO [ 1809.666899][T24539] usb 8-1: USB disconnect, device number 38 [ 1809.686001][T24539] etas_es58x 8-1:0.2: Disconnecting syz syz [ 1809.713189][ T5475] etas_es58x 8-1:0.2 can1: es58x_open: Could not open the network device: -EINVAL [ 1809.750071][ T981] usb 4-1: Using ep0 maxpacket: 32 [ 1809.791936][ T981] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1809.801316][ T981] usb 4-1: config 0 has no interface number 0 [ 1809.837204][ T981] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1809.854437][ T981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1809.874486][ T981] usb 4-1: Product: syz [ 1809.878685][ T981] usb 4-1: Manufacturer: syz [ 1809.894574][ T981] usb 4-1: SerialNumber: syz [ 1809.908193][ T981] usb 4-1: config 0 descriptor?? [ 1809.916449][ T981] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1809.926286][ T981] usb 4-1: selecting invalid altsetting 1 [ 1809.932102][ T981] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1809.945774][ T981] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1809.972219][ T981] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1809.985346][ T981] usb 4-1: media controller created [ 1809.998404][ T981] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1810.110948][T32043] FAULT_INJECTION: forcing a failure. [ 1810.110948][T32043] name failslab, interval 1, probability 0, space 0, times 0 [ 1810.129509][T32043] CPU: 0 UID: 0 PID: 32043 Comm: syz.3.6602 Tainted: G L syzkaller #0 PREEMPT(full) [ 1810.129539][T32043] Tainted: [L]=SOFTLOCKUP [ 1810.129544][T32043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1810.129554][T32043] Call Trace: [ 1810.129560][T32043] [ 1810.129567][T32043] dump_stack_lvl+0x100/0x190 [ 1810.129602][T32043] should_fail_ex.cold+0x5/0xa [ 1810.129626][T32043] ? tomoyo_encode2+0xfb/0x3c0 [ 1810.129650][T32043] should_failslab+0xc2/0x120 [ 1810.129669][T32043] __kmalloc_noprof+0xe0/0x850 [ 1810.129694][T32043] ? d_absolute_path+0x136/0x1b0 [ 1810.129723][T32043] tomoyo_encode2+0xfb/0x3c0 [ 1810.129751][T32043] tomoyo_encode+0x29/0x50 [ 1810.129775][T32043] tomoyo_realpath_from_path+0x18c/0x690 [ 1810.129806][T32043] tomoyo_path_number_perm+0x23c/0x580 [ 1810.129828][T32043] ? tomoyo_path_number_perm+0x22e/0x580 [ 1810.129852][T32043] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1810.129898][T32043] ? find_held_lock+0x2b/0x80 [ 1810.129923][T32043] ? __fget_files+0x215/0x3d0 [ 1810.129941][T32043] ? hook_file_ioctl_common+0x146/0x410 [ 1810.129964][T32043] ? __fget_files+0x21f/0x3d0 [ 1810.129987][T32043] security_file_ioctl+0xd3/0x230 [ 1810.130014][T32043] __x64_sys_ioctl+0xb7/0x210 [ 1810.130043][T32043] do_syscall_64+0x106/0xf80 [ 1810.130068][T32043] ? clear_bhb_loop+0x40/0x90 [ 1810.130091][T32043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1810.130109][T32043] RIP: 0033:0x7f6f5a79c799 [ 1810.130125][T32043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1810.130141][T32043] RSP: 002b:00007f6f5b6b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1810.130159][T32043] RAX: ffffffffffffffda RBX: 00007f6f5aa15fa0 RCX: 00007f6f5a79c799 [ 1810.130177][T32043] RDX: 0000200000000400 RSI: 0000000000000707 RDI: 0000000000000004 [ 1810.130188][T32043] RBP: 00007f6f5b6b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1810.130199][T32043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1810.130210][T32043] R13: 00007f6f5aa16038 R14: 00007f6f5aa15fa0 R15: 00007fff5ee74678 [ 1810.130235][T32043] [ 1810.130254][T32043] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1810.207358][T32066] sp0: Synchronizing with TNC [ 1810.560550][ T30] audit: type=1400 audit(2000526822.730:5160): avc: denied { remount } for pid=32073 comm="syz.7.6605" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1810.598872][T24530] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 1810.815651][ T794] usb 2-1: USB disconnect, device number 80 [ 1810.847473][T24530] usb 9-1: config 0 has an invalid interface number: 133 but max is 0 [ 1810.871922][T24530] usb 9-1: config 0 has no interface number 0 [ 1810.894163][T24530] usb 9-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1810.927127][ T30] audit: type=1400 audit(2000526823.108:5161): avc: denied { unmount } for pid=27430 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1810.953738][T24530] usb 9-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1810.979507][T24530] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1811.476317][T32085] netlink: 'syz.1.6606': attribute type 21 has an invalid length. [ 1811.484317][T32085] IPv6: NLM_F_CREATE should be specified when creating new route [ 1811.492351][T32085] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1811.499616][T32085] IPv6: NLM_F_CREATE should be set when creating new route [ 1811.506936][T32085] IPv6: NLM_F_CREATE should be set when creating new route [ 1811.514319][T32085] IPv6: NLM_F_CREATE should be set when creating new route [ 1811.548845][T32085] netlink: 'syz.1.6606': attribute type 21 has an invalid length. [ 1811.557018][T32085] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1812.187026][T24530] usb 9-1: Product: syz [ 1812.191640][T24530] usb 9-1: Manufacturer: syz [ 1812.196240][T24530] usb 9-1: SerialNumber: syz [ 1812.205069][ T981] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1812.207510][T24530] usb 9-1: config 0 descriptor?? [ 1812.233735][ T981] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1812.258707][T32043] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1812.405935][ T981] usb 4-1: USB disconnect, device number 77 [ 1812.528630][T32099] i2c i2c-0: Invalid block write size 34 [ 1812.751913][ T30] audit: type=1800 audit(2000526825.017:5162): pid=32099 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.6609" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1812.847579][T24530] keyspan 9-1:0.133: Keyspan 1 port adapter converter detected [ 1812.872024][T32062] [U] è` [ 1812.894749][T24530] keyspan 9-1:0.133: unsupported endpoint type 0 [ 1812.921325][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 1812.938459][T24530] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 81 [ 1812.939102][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 1812.961350][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 1812.978558][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 1812.981826][T24530] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 1 [ 1812.985800][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 1812.999475][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 1813.006801][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 1813.014361][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 1813.021721][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 1813.122739][T24532] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1813.775741][T24530] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 2 [ 1813.915409][T24532] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1813.962361][T24532] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1813.969480][T24530] usb 9-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1813.994962][T24532] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1814.021624][T24532] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1814.043519][T24530] usb 9-1: USB disconnect, device number 10 [ 1814.075520][T24532] usb 4-1: Product: syz [ 1814.084571][T24530] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1814.103534][T24532] usb 4-1: Manufacturer: syz [ 1814.122269][T24532] usb 4-1: SerialNumber: syz [ 1814.133626][T24530] keyspan 9-1:0.133: device disconnected [ 1814.147516][T24532] usb 4-1: config 0 descriptor?? [ 1814.207163][T24532] usb 4-1: selecting invalid altsetting 0 [ 1814.439020][T32105] snd-usb-audio 4-1:0.0: Runtime PM usage count underflow! [ 1814.470240][ T981] usb 4-1: USB disconnect, device number 78 [ 1814.481299][T24530] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 1815.330474][T32140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1815.425782][T32140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1815.724432][ T981] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1816.359089][T32139] wg1 speed is unknown, defaulting to 1000 [ 1816.423472][ T981] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 1816.446158][ T981] usb 2-1: config 0 has an invalid descriptor of length 246, skipping remainder of the config [ 1816.476791][ T981] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1816.521129][ T981] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1816.617281][ T981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1816.822946][ T981] usb 2-1: config 0 descriptor?? [ 1816.843793][ T981] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1817.191735][T24532] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1817.411118][T24532] usb 4-1: Using ep0 maxpacket: 16 [ 1817.426683][T24532] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1817.455346][T24532] usb 4-1: config 1 has no interface number 1 [ 1817.488797][T24532] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1817.513110][T24532] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1817.541152][T24532] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1817.613155][T24532] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1817.634597][T24532] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1817.670396][T24532] usb 4-1: Product: syz [ 1817.684035][T24532] usb 4-1: Manufacturer: syz [ 1817.705642][T24532] usb 4-1: SerialNumber: syz [ 1818.096961][T24530] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1818.106224][T24530] usb 9-1: no configurations [ 1818.112132][T24530] usb 9-1: can't read configurations, error -22 [ 1818.255474][T24532] usb 4-1: failed to enable PITCH for EP 0x82 [ 1818.265053][T24532] usb 4-1: 2:1: cannot set freq 11994917 to ep 0x82 [ 1818.453843][T24532] usb 4-1: USB disconnect, device number 79 [ 1818.499930][ T10] usb 2-1: USB disconnect, device number 81 [ 1818.652833][T32178] overlayfs: failed to clone upperpath [ 1818.663037][T32179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6626'. [ 1819.073829][T32186] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32186 comm=syz.6.6629 [ 1819.121680][T32186] netlink: 'syz.6.6629': attribute type 1 has an invalid length. [ 1819.355736][ T981] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1819.736688][ T981] usb 8-1: Using ep0 maxpacket: 32 [ 1819.841849][ T981] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1819.946214][ T981] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1819.968585][ T981] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1820.018078][ T981] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1820.075461][T32195] nfs: Unknown parameter 'ÿÿÿÿ' [ 1820.087332][ T981] usb 8-1: config 0 descriptor?? [ 1820.244804][ T981] hub 8-1:0.0: USB hub found [ 1820.562377][ T981] hub 8-1:0.0: config failed, hub has too many ports! (err -19) [ 1820.895145][ T30] audit: type=1326 audit(2000526833.570:5163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32199 comm="syz.6.6632" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc72519c799 code=0x0 [ 1821.352734][ T981] usbhid 8-1:0.0: can't add hid device: -71 [ 1821.404619][ T981] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1821.480788][ T981] usb 8-1: USB disconnect, device number 39 [ 1821.585418][T24544] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 1821.852359][T32224] input: syz1 as /devices/virtual/input/input83 [ 1821.900013][ T794] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1822.071608][ T794] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 1822.079708][ T794] usb 4-1: config 0 has an invalid descriptor of length 246, skipping remainder of the config [ 1822.120040][T32229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1822.181911][T32229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1822.230316][ T794] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1822.321883][ T794] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1822.364891][ T794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1822.420249][ T794] usb 4-1: config 0 descriptor?? [ 1822.470034][ T794] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1823.429757][T32228] wg1 speed is unknown, defaulting to 1000 [ 1824.454722][T32247] FAULT_INJECTION: forcing a failure. [ 1824.454722][T32247] name failslab, interval 1, probability 0, space 0, times 0 [ 1824.472930][T32247] CPU: 0 UID: 0 PID: 32247 Comm: syz.6.6644 Tainted: G L syzkaller #0 PREEMPT(full) [ 1824.472958][T32247] Tainted: [L]=SOFTLOCKUP [ 1824.472964][T32247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1824.472974][T32247] Call Trace: [ 1824.472981][T32247] [ 1824.472988][T32247] dump_stack_lvl+0x100/0x190 [ 1824.473022][T32247] should_fail_ex.cold+0x5/0xa [ 1824.473045][T32247] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1824.473078][T32247] should_failslab+0xc2/0x120 [ 1824.473097][T32247] __kmalloc_noprof+0xe0/0x850 [ 1824.473128][T32247] tomoyo_realpath_from_path+0xb6/0x690 [ 1824.473160][T32247] tomoyo_path_number_perm+0x23c/0x580 [ 1824.473180][T32247] ? tomoyo_path_number_perm+0x22e/0x580 [ 1824.473203][T32247] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1824.473252][T32247] ? find_held_lock+0x2b/0x80 [ 1824.473272][T32247] ? __fget_files+0x215/0x3d0 [ 1824.473287][T32247] ? hook_file_ioctl_common+0x146/0x410 [ 1824.473306][T32247] ? __fget_files+0x21f/0x3d0 [ 1824.473325][T32247] security_file_ioctl+0xd3/0x230 [ 1824.473352][T32247] __x64_sys_ioctl+0xb7/0x210 [ 1824.473376][T32247] do_syscall_64+0x106/0xf80 [ 1824.473396][T32247] ? clear_bhb_loop+0x40/0x90 [ 1824.473413][T32247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1824.473428][T32247] RIP: 0033:0x7fc72519c799 [ 1824.473440][T32247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1824.473453][T32247] RSP: 002b:00007fc726082028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1824.473470][T32247] RAX: ffffffffffffffda RBX: 00007fc725416180 RCX: 00007fc72519c799 [ 1824.473480][T32247] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000c [ 1824.473488][T32247] RBP: 00007fc726082090 R08: 0000000000000000 R09: 0000000000000000 [ 1824.473496][T32247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1824.473505][T32247] R13: 00007fc725416218 R14: 00007fc725416180 R15: 00007ffef83d9148 [ 1824.473524][T32247] [ 1824.473534][T32247] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1824.920311][T24532] usb 4-1: USB disconnect, device number 80 [ 1825.768157][T32256] can0: slcan on ttyS3. [ 1825.885831][T32257] can0 (unregistered): slcan off ttyS3. [ 1825.949668][T24539] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1826.489109][T24539] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1826.512203][T24544] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1826.541948][T24539] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1826.570281][T24544] usb 9-1: no configurations [ 1826.606087][T24539] usb 4-1: Product: syz [ 1826.619487][T24544] usb 9-1: can't read configurations, error -22 [ 1826.638618][T24539] usb 4-1: Manufacturer: syz [ 1826.677071][T24539] usb 4-1: SerialNumber: syz [ 1826.780459][T24544] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 1826.802158][T24539] usb 4-1: config 0 descriptor?? [ 1826.864531][T24539] hub 4-1:0.0: bad descriptor, ignoring hub [ 1826.896154][T24539] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1826.969706][T24544] usb 9-1: device descriptor read/64, error -32 [ 1827.034140][T24539] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1827.105370][T24539] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1827.198908][T24544] usb usb9-port1: attempt power cycle [ 1827.250903][T24539] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1827.337695][T24539] usb 4-1: media controller created [ 1827.389546][T24539] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1827.582667][T24539] DVB: Unable to find symbol dib7000p_attach() [ 1827.630886][T32282] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 1827.638434][T24539] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1828.036664][T24530] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1828.219369][T24539] rc_core: IR keymap rc-dib0700-rc5 not found [ 1828.246874][T24539] Registered IR keymap rc-empty [ 1828.251865][T24539] dvb-usb: could not initialize remote control. [ 1828.297385][T24539] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1828.458730][T24530] usb 8-1: config 1 interface 0 has no altsetting 0 [ 1828.471621][T24539] usb 4-1: USB disconnect, device number 81 [ 1829.068017][T24530] usb 8-1: string descriptor 0 read error: -22 [ 1829.075954][T24530] usb 8-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.40 [ 1829.085150][T24530] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1829.135661][T24539] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1829.435582][T32297] nfs: Unknown parameter 'ÿÿÿÿ' [ 1829.599996][T24539] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1829.611981][T24530] samsung 0003:0419:0001.003C: unknown main item tag 0x6 [ 1829.665316][T24530] samsung 0003:0419:0001.003C: item 0 0 0 8 parsing failed [ 1829.723807][T24530] samsung 0003:0419:0001.003C: parse failed [ 1829.782316][T24539] usb 9-1: Using ep0 maxpacket: 8 [ 1829.797361][T24530] samsung 0003:0419:0001.003C: probe with driver samsung failed with error -22 [ 1829.802007][T24539] usb 9-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1829.883740][T24539] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1830.080917][T24539] usb 9-1: Product: syz [ 1830.105500][T24539] usb 9-1: Manufacturer: syz [ 1830.116784][T24539] usb 9-1: SerialNumber: syz [ 1830.246476][T24539] usb 9-1: config 0 descriptor?? [ 1830.265106][T24539] gspca_main: se401-2.14.0 probing 047d:5003 [ 1830.314960][T24530] usb 8-1: USB disconnect, device number 40 [ 1830.703988][T32301] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6657'. [ 1831.027758][T32317] netlink: 'syz.3.6662': attribute type 1 has an invalid length. [ 1831.337971][T24539] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 1831.388169][T24539] se401 9-1:0.0: probe with driver se401 failed with error -71 [ 1831.484643][T24539] usb 9-1: USB disconnect, device number 16 [ 1832.058171][T24530] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 1834.379899][T32332] [ 1834.382218][T32332] ===================================================== [ 1834.389117][T32332] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 1834.396539][T32332] syzkaller #0 Tainted: G L [ 1834.402482][T32332] ----------------------------------------------------- [ 1834.409378][T32332] syz.8.6666/32332 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1834.417073][T32332] ffffffff8fa16298 (disc_data_lock){.+.+}-{3:3}, at: sp_get+0x18/0xf0 [ 1834.425215][T32332] [ 1834.425215][T32332] and this task is already holding: [ 1834.432544][T32332] ffffffff9b4a7658 (&port_lock_key){-.-.}-{3:3}, at: uart_carrier_raised+0xfa/0x7c0 [ 1834.441901][T32332] which would create a new lock dependency: [ 1834.447758][T32332] (&port_lock_key){-.-.}-{3:3} -> (disc_data_lock){.+.+}-{3:3} [ 1834.455377][T32332] [ 1834.455377][T32332] but this new dependency connects a HARDIRQ-irq-safe lock: [ 1834.464789][T32332] (&port_lock_key){-.-.}-{3:3} [ 1834.464803][T32332] [ 1834.464803][T32332] ... which became HARDIRQ-irq-safe at: [ 1834.477286][T32332] lock_acquire+0x1cf/0x380 [ 1834.481848][T32332] _raw_spin_lock_irqsave+0x3a/0x60 [ 1834.487114][T32332] serial8250_handle_irq.part.0+0x28/0x550 [ 1834.492979][T32332] serial8250_default_handle_irq+0xc2/0x2a0 [ 1834.498946][T32332] serial8250_interrupt+0xf8/0x1d0 [ 1834.504121][T32332] __handle_irq_event_percpu+0x232/0x8e0 [ 1834.509811][T32332] handle_irq_event+0xab/0x1e0 [ 1834.514642][T32332] handle_edge_irq+0x375/0x970 [ 1834.519468][T32332] __common_interrupt+0xd8/0x2f0 [ 1834.524466][T32332] common_interrupt+0xb9/0xe0 [ 1834.529197][T32332] asm_common_interrupt+0x26/0x40 [ 1834.534276][T32332] pv_native_safe_halt+0xf/0x20 [ 1834.539186][T32332] default_idle+0x9/0x10 [ 1834.543489][T32332] default_idle_call+0x6c/0xb0 [ 1834.548307][T32332] do_idle+0x464/0x590 [ 1834.552436][T32332] cpu_startup_entry+0x4f/0x60 [ 1834.557261][T32332] start_secondary+0x21d/0x2d0 [ 1834.562088][T32332] common_startup_64+0x13e/0x148 [ 1834.567088][T32332] [ 1834.567088][T32332] to a HARDIRQ-irq-unsafe lock: [ 1834.574070][T32332] (disc_data_lock){.+.+}-{3:3} [ 1834.574087][T32332] [ 1834.574087][T32332] ... which became HARDIRQ-irq-unsafe at: [ 1834.586741][T32332] ... [ 1834.586746][T32332] lock_acquire+0x1cf/0x380 [ 1834.593900][T32332] _raw_read_lock+0x5f/0x70 [ 1834.598462][T32332] sp_get+0x18/0xf0 [ 1834.602323][T32332] ppp_synctty_ioctl+0x23/0x250 [ 1834.607228][T32332] tty_ioctl+0x1204/0x1690 [ 1834.611701][T32332] __x64_sys_ioctl+0x18e/0x210 [ 1834.616530][T32332] do_syscall_64+0x106/0xf80 [ 1834.621184][T32332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1834.627138][T32332] [ 1834.627138][T32332] other info that might help us debug this: [ 1834.627138][T32332] [ 1834.637347][T32332] Possible interrupt unsafe locking scenario: [ 1834.637347][T32332] [ 1834.645643][T32332] CPU0 CPU1 [ 1834.650982][T32332] ---- ---- [ 1834.656327][T32332] lock(disc_data_lock); [ 1834.660642][T32332] local_irq_disable(); [ 1834.667367][T32332] lock(&port_lock_key); [ 1834.674189][T32332] lock(disc_data_lock); [ 1834.681014][T32332] [ 1834.684435][T32332] lock(&port_lock_key); [ 1834.688908][T32332] [ 1834.688908][T32332] *** DEADLOCK *** [ 1834.688908][T32332] [ 1834.697019][T32332] 3 locks held by syz.8.6666/32332: [ 1834.702181][T32332] #0: ffff8880592af1c0 (&tty->legacy_mutex){+.+.}-{4:4}, at: tty_lock_interruptible+0x75/0xe0 [ 1834.712501][T32332] #1: ffffffff9b4a7658 (&port_lock_key){-.-.}-{3:3}, at: uart_carrier_raised+0xfa/0x7c0 [ 1834.722290][T32332] #2: ffff8880592af0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x21/0x90 [ 1834.731575][T32332] [ 1834.731575][T32332] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 1834.741948][T32332] -> (&port_lock_key){-.-.}-{3:3} { [ 1834.747130][T32332] IN-HARDIRQ-W at: [ 1834.751078][T32332] lock_acquire+0x1cf/0x380 [ 1834.757203][T32332] _raw_spin_lock_irqsave+0x3a/0x60 [ 1834.764031][T32332] serial8250_handle_irq.part.0+0x28/0x550 [ 1834.771459][T32332] serial8250_default_handle_irq+0xc2/0x2a0 [ 1834.778974][T32332] serial8250_interrupt+0xf8/0x1d0 [ 1834.785712][T32332] __handle_irq_event_percpu+0x232/0x8e0 [ 1834.792967][T32332] handle_irq_event+0xab/0x1e0 [ 1834.799356][T32332] handle_edge_irq+0x375/0x970 [ 1834.805742][T32332] __common_interrupt+0xd8/0x2f0 [ 1834.812304][T32332] common_interrupt+0xb9/0xe0 [ 1834.818599][T32332] asm_common_interrupt+0x26/0x40 [ 1834.825253][T32332] pv_native_safe_halt+0xf/0x20 [ 1834.831726][T32332] default_idle+0x9/0x10 [ 1834.837592][T32332] default_idle_call+0x6c/0xb0 [ 1834.843975][T32332] do_idle+0x464/0x590 [ 1834.849664][T32332] cpu_startup_entry+0x4f/0x60 [ 1834.856049][T32332] start_secondary+0x21d/0x2d0 [ 1834.862441][T32332] common_startup_64+0x13e/0x148 [ 1834.868999][T32332] IN-SOFTIRQ-W at: [ 1834.872958][T32332] lock_acquire+0x1cf/0x380 [ 1834.879077][T32332] _raw_spin_lock_irqsave+0x3a/0x60 [ 1834.885897][T32332] serial8250_handle_irq.part.0+0x28/0x550 [ 1834.893325][T32332] serial8250_default_handle_irq+0xc2/0x2a0 [ 1834.900840][T32332] serial8250_interrupt+0xf8/0x1d0 [ 1834.907574][T32332] __handle_irq_event_percpu+0x232/0x8e0 [ 1834.914827][T32332] handle_irq_event+0xab/0x1e0 [ 1834.921213][T32332] handle_edge_irq+0x375/0x970 [ 1834.927610][T32332] __common_interrupt+0xd8/0x2f0 [ 1834.934171][T32332] common_interrupt+0x60/0xe0 [ 1834.940465][T32332] asm_common_interrupt+0x26/0x40 [ 1834.947111][T32332] handle_softirqs+0x1af/0x9e0 [ 1834.953506][T32332] __irq_exit_rcu+0xef/0x150 [ 1834.959721][T32332] irq_exit_rcu+0x9/0x30 [ 1834.965585][T32332] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1834.972837][T32332] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1834.980435][T32332] console_flush_one_record+0xac3/0xe50 [ 1834.987603][T32332] console_unlock+0x103/0x260 [ 1834.993899][T32332] vprintk_emit+0x407/0x6b0 [ 1835.000034][T32332] _printk+0xcf/0x110 [ 1835.005650][T32332] kauditd_hold_skb.cold+0x3f/0x4e [ 1835.012408][T32332] kauditd_send_queue+0x232/0x2e0 [ 1835.019057][T32332] kauditd_thread+0x645/0xb30 [ 1835.025356][T32332] kthread+0x370/0x450 [ 1835.031046][T32332] ret_from_fork+0x754/0xd80 [ 1835.037260][T32332] ret_from_fork_asm+0x1a/0x30 [ 1835.043656][T32332] INITIAL USE at: [ 1835.047521][T32332] lock_acquire+0x1cf/0x380 [ 1835.053573][T32332] _raw_spin_lock_irqsave+0x3a/0x60 [ 1835.060305][T32332] serial8250_do_set_termios+0x330/0x1730 [ 1835.067570][T32332] serial8250_set_termios+0x73/0x90 [ 1835.074305][T32332] uart_set_options+0x316/0x5e0 [ 1835.080739][T32332] serial8250_console_setup+0x189/0x450 [ 1835.087820][T32332] univ8250_console_setup+0x1eb/0x2e0 [ 1835.094722][T32332] try_enable_preferred_console+0x2fd/0x530 [ 1835.102152][T32332] register_console+0x350/0xf50 [ 1835.108537][T32332] univ8250_console_init+0x6f/0x80 [ 1835.115185][T32332] console_init+0x423/0x620 [ 1835.121224][T32332] start_kernel+0x305/0x480 [ 1835.127266][T32332] x86_64_start_reservations+0x24/0x30 [ 1835.134256][T32332] x86_64_start_kernel+0x12b/0x130 [ 1835.140899][T32332] common_startup_64+0x13e/0x148 [ 1835.147370][T32332] } [ 1835.149837][T32332] ... key at: [] port_lock_key+0x0/0x40 [ 1835.157436][T32332] [ 1835.157436][T32332] the dependencies between the lock to be acquired [ 1835.157441][T32332] and HARDIRQ-irq-unsafe lock: [ 1835.170911][T32332] -> (disc_data_lock){.+.+}-{3:3} { [ 1835.176102][T32332] HARDIRQ-ON-R at: [ 1835.180050][T32332] lock_acquire+0x1cf/0x380 [ 1835.186187][T32332] _raw_read_lock+0x5f/0x70 [ 1835.192338][T32332] sp_get+0x18/0xf0 [ 1835.197775][T32332] ppp_synctty_ioctl+0x23/0x250 [ 1835.204247][T32332] tty_ioctl+0x1204/0x1690 [ 1835.210309][T32332] __x64_sys_ioctl+0x18e/0x210 [ 1835.216711][T32332] do_syscall_64+0x106/0xf80 [ 1835.222921][T32332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1835.230435][T32332] SOFTIRQ-ON-R at: [ 1835.234396][T32332] lock_acquire+0x1cf/0x380 [ 1835.240516][T32332] _raw_read_lock+0x5f/0x70 [ 1835.246649][T32332] sp_get+0x18/0xf0 [ 1835.252073][T32332] ppp_synctty_ioctl+0x23/0x250 [ 1835.258541][T32332] tty_ioctl+0x1204/0x1690 [ 1835.264580][T32332] __x64_sys_ioctl+0x18e/0x210 [ 1835.270976][T32332] do_syscall_64+0x106/0xf80 [ 1835.277189][T32332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1835.284698][T32332] INITIAL USE at: [ 1835.288569][T32332] lock_acquire+0x1cf/0x380 [ 1835.294606][T32332] _raw_write_lock_irq+0x36/0x50 [ 1835.301077][T32332] ppp_sync_close+0x1c/0x170 [ 1835.307197][T32332] tty_ldisc_close+0x114/0x1a0 [ 1835.313515][T32332] tty_ldisc_kill+0x8e/0x150 [ 1835.319638][T32332] tty_ldisc_release+0x107/0x2f0 [ 1835.326124][T32332] tty_release_struct+0x23/0xe0 [ 1835.332516][T32332] tty_release+0xd7a/0x1300 [ 1835.338564][T32332] __fput+0x3ff/0xb40 [ 1835.344089][T32332] task_work_run+0x150/0x240 [ 1835.350221][T32332] exit_to_user_mode_loop+0x100/0x4a0 [ 1835.357122][T32332] do_syscall_64+0x67c/0xf80 [ 1835.363245][T32332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1835.370668][T32332] INITIAL READ USE at: [ 1835.374982][T32332] lock_acquire+0x1cf/0x380 [ 1835.381449][T32332] _raw_read_lock+0x5f/0x70 [ 1835.387924][T32332] sp_get+0x18/0xf0 [ 1835.393704][T32332] ppp_synctty_ioctl+0x23/0x250 [ 1835.400529][T32332] tty_ioctl+0x1204/0x1690 [ 1835.406923][T32332] __x64_sys_ioctl+0x18e/0x210 [ 1835.413656][T32332] do_syscall_64+0x106/0xf80 [ 1835.420225][T32332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1835.428102][T32332] } [ 1835.430569][T32332] ... key at: [] disc_data_lock+0x18/0x1120 [ 1835.438516][T32332] ... acquired at: [ 1835.442296][T32332] lock_acquire+0x1cf/0x380 [ 1835.446939][T32332] _raw_read_lock+0x5f/0x70 [ 1835.451588][T32332] sp_get+0x18/0xf0 [ 1835.455534][T32332] ppp_sync_wakeup+0x18/0xc0 [ 1835.460266][T32332] tty_wakeup+0xe8/0x120 [ 1835.464656][T32332] tty_port_default_wakeup+0x47/0x60 [ 1835.470097][T32332] uart_handle_cts_change+0x1ea/0x300 [ 1835.475633][T32332] serial8250_modem_status+0x281/0x2f0 [ 1835.481235][T32332] serial8250_do_get_mctrl+0xbb/0x390 [ 1835.486750][T32332] serial8250_get_mctrl+0x5c/0x80 [ 1835.491921][T32332] uart_carrier_raised+0x22c/0x7c0 [ 1835.497176][T32332] tty_port_block_til_ready+0x470/0x8c0 [ 1835.502877][T32332] tty_port_open+0x13e/0x270 [ 1835.507614][T32332] uart_open+0x41/0x60 [ 1835.511825][T32332] tty_open+0x3dd/0xfa0 [ 1835.516143][T32332] chrdev_open+0x234/0x6a0 [ 1835.520739][T32332] do_dentry_open+0x6d8/0x1660 [ 1835.525676][T32332] vfs_open+0x82/0x3f0 [ 1835.529887][T32332] path_openat+0x208c/0x31a0 [ 1835.534626][T32332] do_file_open+0x20e/0x430 [ 1835.539274][T32332] do_sys_openat2+0x10d/0x1e0 [ 1835.544095][T32332] __x64_sys_openat+0x12d/0x210 [ 1835.549098][T32332] do_syscall_64+0x106/0xf80 [ 1835.553845][T32332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1835.559881][T32332] [ 1835.562184][T32332] [ 1835.562184][T32332] stack backtrace: [ 1835.568056][T32332] CPU: 0 UID: 0 PID: 32332 Comm: syz.8.6666 Tainted: G L syzkaller #0 PREEMPT(full) [ 1835.568072][T32332] Tainted: [L]=SOFTLOCKUP [ 1835.568077][T32332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1835.568083][T32332] Call Trace: [ 1835.568089][T32332] [ 1835.568094][T32332] dump_stack_lvl+0x100/0x190 [ 1835.568113][T32332] check_irq_usage+0x7aa/0x810 [ 1835.568133][T32332] ? check_noncircular+0x97/0x160 [ 1835.568151][T32332] ? __lock_acquire+0x14cf/0x2630 [ 1835.568160][T32332] __lock_acquire+0x14cf/0x2630 [ 1835.568173][T32332] lock_acquire+0x1cf/0x380 [ 1835.568183][T32332] ? sp_get+0x18/0xf0 [ 1835.568193][T32332] ? ldsem_down_read_trylock+0x11b/0x190 [ 1835.568210][T32332] ? __pfx_ldsem_down_read_trylock+0x10/0x10 [ 1835.568227][T32332] ? find_held_lock+0x2b/0x80 [ 1835.568242][T32332] ? __pfx_ppp_sync_wakeup+0x10/0x10 [ 1835.568253][T32332] _raw_read_lock+0x5f/0x70 [ 1835.568266][T32332] ? sp_get+0x18/0xf0 [ 1835.568275][T32332] sp_get+0x18/0xf0 [ 1835.568284][T32332] ? __pfx_ppp_sync_wakeup+0x10/0x10 [ 1835.568295][T32332] ppp_sync_wakeup+0x18/0xc0 [ 1835.568305][T32332] ? __pfx_ppp_sync_wakeup+0x10/0x10 [ 1835.568315][T32332] tty_wakeup+0xe8/0x120 [ 1835.568327][T32332] tty_port_default_wakeup+0x47/0x60 [ 1835.568343][T32332] uart_handle_cts_change+0x1ea/0x300 [ 1835.568356][T32332] serial8250_modem_status+0x281/0x2f0 [ 1835.568370][T32332] serial8250_do_get_mctrl+0xbb/0x390 [ 1835.568385][T32332] ? __pfx_serial8250_do_get_mctrl+0x10/0x10 [ 1835.568401][T32332] ? mctrl_gpio_enable_ms+0x60/0x150 [ 1835.568418][T32332] ? io_serial_out+0x65/0xb0 [ 1835.568430][T32332] ? __pfx_serial8250_enable_ms+0x10/0x10 [ 1835.568445][T32332] serial8250_get_mctrl+0x5c/0x80 [ 1835.568460][T32332] uart_carrier_raised+0x22c/0x7c0 [ 1835.568473][T32332] ? __pfx_uart_carrier_raised+0x10/0x10 [ 1835.568486][T32332] tty_port_block_til_ready+0x470/0x8c0 [ 1835.568505][T32332] ? __pfx_tty_port_block_til_ready+0x10/0x10 [ 1835.568522][T32332] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1835.568539][T32332] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1835.568553][T32332] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1835.568568][T32332] tty_port_open+0x13e/0x270 [ 1835.568584][T32332] ? __pfx_uart_open+0x10/0x10 [ 1835.568595][T32332] uart_open+0x41/0x60 [ 1835.568605][T32332] tty_open+0x3dd/0xfa0 [ 1835.568621][T32332] ? __pfx_tty_open+0x10/0x10 [ 1835.568635][T32332] ? chrdev_open+0x10b/0x6a0 [ 1835.568646][T32332] ? chrdev_open+0x10b/0x6a0 [ 1835.568658][T32332] ? __pfx_tty_open+0x10/0x10 [ 1835.568673][T32332] chrdev_open+0x234/0x6a0 [ 1835.568684][T32332] ? __pfx_chrdev_open+0x10/0x10 [ 1835.568696][T32332] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1835.568711][T32332] do_dentry_open+0x6d8/0x1660 [ 1835.568721][T32332] ? __pfx_chrdev_open+0x10/0x10 [ 1835.568733][T32332] vfs_open+0x82/0x3f0 [ 1835.568747][T32332] path_openat+0x208c/0x31a0 [ 1835.568761][T32332] ? __pfx_path_openat+0x10/0x10 [ 1835.568774][T32332] do_file_open+0x20e/0x430 [ 1835.568787][T32332] ? __pfx_do_file_open+0x10/0x10 [ 1835.568803][T32332] ? alloc_fd+0x476/0x790 [ 1835.568815][T32332] ? do_getname+0x191/0x390 [ 1835.568830][T32332] do_sys_openat2+0x10d/0x1e0 [ 1835.568844][T32332] ? __pfx_do_sys_openat2+0x10/0x10 [ 1835.568859][T32332] __x64_sys_openat+0x12d/0x210 [ 1835.568874][T32332] ? __pfx___x64_sys_openat+0x10/0x10 [ 1835.568890][T32332] do_syscall_64+0x106/0xf80 [ 1835.568905][T32332] ? clear_bhb_loop+0x40/0x90 [ 1835.568917][T32332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1835.568928][T32332] RIP: 0033:0x7fb553d9c799 [ 1835.568939][T32332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1835.568949][T32332] RSP: 002b:00007fb554ce0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1835.568960][T32332] RAX: ffffffffffffffda RBX: 00007fb554015fa0 RCX: 00007fb553d9c799 [ 1835.568967][T32332] RDX: 0000000000020040 RSI: 0000200000000140 RDI: 00000000ffffff9c [ 1835.568974][T32332] RBP: 00007fb553e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1835.568981][T32332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1835.568987][T32332] R13: 00007fb554016038 R14: 00007fb554015fa0 R15: 00007ffd304583e8 [ 1835.568997][T32332] [ 1836.431019][T22321] Bluetooth: hci5: unexpected event for opcode 0x7470 [ 1836.442891][T32341] tipc: Started in network mode [ 1836.448058][T32341] tipc: Node identity ca435f3c6656, cluster identity 4711 [ 1836.538588][T32341] tipc: Enabled bearer , priority 0 [ 1836.560713][T32344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1836.577303][T32344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1836.587710][T32340] syzkaller0: entered promiscuous mode [ 1836.601015][T32340] syzkaller0: entered allmulticast mode [ 1836.619891][T32335] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6666'. [ 1836.681887][T32331] tipc: Resetting bearer [ 1836.689199][T32331] tipc: Disabling bearer [ 1836.897411][T32342] wg1 speed is unknown, defaulting to 1000 [ 1837.042593][T24530] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1837.058528][T24530] usb 4-1: no configurations [ 1837.072663][T24530] usb 4-1: can't read configurations, error -22 [ 1837.204732][T24530] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 1838.110947][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1838.117305][ T1299] ieee802154 phy1 wpan1: encryption failed: -22