last executing test programs: 32m17.461848982s ago: executing program 32 (id=20): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d299", 0x6e}], 0x1}}], 0x1, 0x50) 24m6.051433408s ago: executing program 33 (id=1553): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000011c0)={0x1c, 0x4, 0x8, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20080040) 22m29.095882379s ago: executing program 34 (id=1794): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x400000b6}]}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0xb0, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x80, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x6c, 0x9, 0x0, 0x1, [@m_csum={0x68, 0x1, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xc8b9, 0x3, 0x1, 0x6, 0x6}, 0x69}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0x196, 0x4, 0x6, 0x7}, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0xb0}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r9, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e00003c000c00000000ff840000000000000000125ce882cbf490d908f1523f000000000000", 0x2e}], 0x1}, 0x4005) 21m33.606085417s ago: executing program 35 (id=1882): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000600)="cc7f186520255447", 0x8, 0x8004, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') syz_open_dev$video4linux(&(0x7f0000000000), 0xfffffffffffffffd, 0x800) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, 0x0) 16m25.848251321s ago: executing program 36 (id=3062): connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x101402, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 16m1.388724482s ago: executing program 37 (id=3166): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) 15m28.092852351s ago: executing program 38 (id=3136): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet6_buf(r0, 0x29, 0xca, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) recvmsg(r2, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x10000) 15m11.380491179s ago: executing program 39 (id=3340): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_BULK(r2, 0x5523, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80045510, &(0x7f0000000000)={0x0, 0x40000000}) 14m57.011929304s ago: executing program 40 (id=3405): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x28100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) recvmsg(r2, &(0x7f00000002c0)={0x0, 0xfffffffffffffdbf, 0x0}, 0x400121c1) 14m49.441916021s ago: executing program 41 (id=3452): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00) io_submit(0x0, 0x1, &(0x7f0000000800)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000080)=0x1, 0x4) 14m44.953882823s ago: executing program 42 (id=3482): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@rr={0x7, 0x1b, 0x17, [@multicast2, @multicast1, @broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x3b}, @rand_addr=0x64010101]}]}}}], 0x30}, 0x4000) 14m37.572849264s ago: executing program 43 (id=3496): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000400)={0x20, 0x18, 0x2, "9490"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000000500)={0x20, 0x6, 0x9a, "27a47e523b8e6c7ffe1f8b7f6fe5c1a3d550529de2773cec22833006a44f1e97c3cf9c7dbd525cd053d08a41c4453258cfa65a9c6884ead952d08b4fbf7e1c8ad5a0bec608ba6deeba953045808101b4bee1ccc9f47743fdff87b0f095b5f082b195919f211b84f7caee2a2dbc87d0f07785723e62b2b478bb734e41b9655be64881923008aa9e290e46f2440c72640d111ad3a8d28e71f3791d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14m33.92368605s ago: executing program 44 (id=3504): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r4, 0x25, 0x4, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8}}, 0x40) write$tun(r1, &(0x7f0000000300)=ANY=[], 0x4a) 14m32.879565296s ago: executing program 8 (id=3507): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffffff0000000000000000180300002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000850000001100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="200026bd7000fbdbdf256a0000000c009900d14500017b00000005000000004a09a000080211000000000211000001000070153ded3b4905126a8be48cffb417d07e018a8a43d3"], 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) io_getevents(0x0, 0x6, 0x6, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x3938700}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fanotify_init(0xf00, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000000d060104000000000000000001000008050005000100000005f00000210000000e0003006269746d61703a6970000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000084) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 14m31.957656193s ago: executing program 8 (id=3508): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 14m31.847401736s ago: executing program 8 (id=3509): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {0x5, 0x0, 0x0, 0x1000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x18000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x200, 0x0, 0x0, 0x0, 0x6, 0xd127, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x7, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0xfffffffc, 0xfffffffc, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x7, 0x100000, 0x2000, 0x0, 0x0, 0x2ee19903, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xe46, 0x0, 0xffffffff, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, 0x10001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2, 0x4], [0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400008, 0x0, 0x4, 0x0, 0x20, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xffffffff, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x526d, 0x0, 0x0, 0x0, 0x335, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x1000, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3bf, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x2d) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$usbfs(0x0, 0x76, 0x101b01) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_BULK(r3, 0x5523, 0x0) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80045510, &(0x7f0000000000)) r4 = socket$inet(0xa, 0x801, 0x84) syz_emit_ethernet(0x3e, &(0x7f0000001080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800470000300000000000069078ac141400ac1e0001070405008903010000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0300000090780000"], 0x0) listen(r4, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000180)={0x0, 0xc989, 0x0, 0xfff7ffdf, 0x173}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r6, 0x2b92, 0xf9d0, 0x4, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="ea", 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000004180)={0x2020}, 0x2020) 14m31.185327034s ago: executing program 8 (id=3510): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) 14m31.068690146s ago: executing program 8 (id=3511): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9f, 0x18, 0x76, 0x20, 0x17ef, 0x7203, 0x2e36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbc, 0x0, 0x2, 0x9e, 0x88, 0x33, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1042, 0x4, 0x354}, &(0x7f0000000100), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r1, 0xc, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="2003050000001fcb"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)={0x20, 0xe, 0x2, "02cf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000100)={0x40, 0xb, 0x48, "ff3268c267aeb0c2cdfc27bf4f72552a6831965bc8be232bf246e050a514ecab91b846fe94d9382cfe749358f63166623baa9e7cad7601d6f2f2db68644c8ce526fe94c6723e7810"}, 0x0, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x15}}) 14m30.678010938s ago: executing program 8 (id=3512): ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101343) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) 14m30.453332789s ago: executing program 45 (id=3512): ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101343) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) 14m26.939587118s ago: executing program 6 (id=3514): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84022, &(0x7f0000000080)={[{@inode32}]}) 14m25.923874105s ago: executing program 6 (id=3515): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001000)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 14m25.279935843s ago: executing program 6 (id=3516): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {0x5, 0x0, 0x0, 0x1000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x18000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x200, 0x0, 0x0, 0x0, 0x6, 0xd127, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x7, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0xfffffffc, 0xfffffffc, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x7, 0x100000, 0x2000, 0x0, 0x0, 0x2ee19903, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xe46, 0x0, 0xffffffff, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, 0x10001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2, 0x4], [0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400008, 0x0, 0x4, 0x0, 0x20, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xffffffff, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x526d, 0x0, 0x0, 0x0, 0x335, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x1000, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3bf, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x2d) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$usbfs(0x0, 0x76, 0x101b01) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_BULK(r3, 0x5523, 0x0) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80045510, &(0x7f0000000000)) r4 = socket$inet(0xa, 0x801, 0x84) syz_emit_ethernet(0x3e, &(0x7f0000001080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800470000300000000000069078ac141400ac1e0001070405008903010000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0300000090780000"], 0x0) listen(r4, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000180)={0x0, 0xc989, 0x0, 0xfff7ffdf, 0x173}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r6, 0x2b92, 0xf9d0, 0x4, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="ea", 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000004180)={0x2020}, 0x2020) 14m24.632400592s ago: executing program 6 (id=3517): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) 14m24.365073341s ago: executing program 6 (id=3518): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f00000001c0), 0x0, 0x12}, 0x20) 14m23.907312893s ago: executing program 6 (id=3519): syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000380), &(0x7f00000000c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20084}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x31, 0x800, 0x2) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000000306010800000000000000000600000705000100070000000500010007000000050001000700000005000100070000000900020073797a3000000000050001000700000005000100070000000900020073797a30000000000900020073797a30000000000900020073797a31"], 0x74}, 0x1, 0x0, 0x0, 0x80c1}, 0x50) 14m23.533204396s ago: executing program 46 (id=3519): syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000380), &(0x7f00000000c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20084}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x31, 0x800, 0x2) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000000306010800000000000000000600000705000100070000000500010007000000050001000700000005000100070000000900020073797a3000000000050001000700000005000100070000000900020073797a30000000000900020073797a30000000000900020073797a31"], 0x74}, 0x1, 0x0, 0x0, 0x80c1}, 0x50) 13m1.646718179s ago: executing program 5 (id=3689): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 12m59.07630554s ago: executing program 5 (id=3700): setreuid(0xffffffffffffffff, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x400, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x2, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x4, 0x400}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x8000000001cb, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = openat$kvm(0x0, &(0x7f00000002c0), 0xa600, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x2, 0x0, 0x0, @sint={0x7, 0x1ff}}]}) r6 = eventfd2(0x8, 0x1) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000140)={r6, 0x4}) write$eventfd(r6, &(0x7f0000000080)=0x430f, 0x8) 12m51.904349052s ago: executing program 5 (id=3716): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$inet(0x2, 0x5, 0x0) shutdown(r4, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, 0x0, &(0x7f00000002c0)) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f0000000200)={0x74, 0x0, 0x10}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r10, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x68}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, 0x0, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) setfsuid(0xffffffffffffffff) 12m50.393349614s ago: executing program 5 (id=3722): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x40000) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r6}}, 0x18) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) 12m48.641676974s ago: executing program 5 (id=3725): ftruncate(0xffffffffffffffff, 0x8800000) r0 = open(0x0, 0x4c27e, 0x53) close(r0) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{0x0}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb99529", 0xa) recvmmsg$unix(r4, 0x0, 0x0, 0x60, 0x0) 12m47.233514817s ago: executing program 5 (id=3728): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet6_buf(r0, 0x29, 0xca, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r2, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x10000) 12m30.521273489s ago: executing program 47 (id=3728): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet6_buf(r0, 0x29, 0xca, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r2, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x10000) 10m40.359842555s ago: executing program 2 (id=3940): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0xfffffffd, 0x6, 0xf, 0xf, "000000600000002b2400a14a5ea24f999600"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = getgid() r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) write$FUSE_INIT(r4, &(0x7f0000004300)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x0, 0x81}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000000000)="03684a7b99a4fde940f3ec0d105ea2c8267323117153aa4a4f099c3835a607cd5cbd77b83cc33d13bbb6c6bcae59db739af84a4b5d34bffc145f3cc27ed3d4f9d9b3103699a1e1cc4ddfb6c1afd07ddfc18e358cd62649479724ce867fefc0a15041bee9f6084842fb982d5c2cf1488d668b741c64f0a6fd2643e729ac5a56462a6b64d5a0a751fda4fadf63ba0dc2fd14ecbf546918db77095545b41ab170e5d6e8ec8bf9ce9b8d53b832e90c701fe52af7999f8fd509577ead1be27891ada8564167f2c7d2eea1c1c9c65d8e151c58ddee43ec34e74d330ec50cbbb2bb21892c7ca995066e3cbea8a69d94dc6bcef5f3c0ef630e774d092ea58627f3e09c66a9c7d1abcf4f8f8af87f4269df288aca9bbf758275ce9695256e764d185a91a7570fca3aab16c75ecaff6b8dda371c3226d6ec6e55c5c4d8cfc5c33892bacc956a3613bcfa849da1b5e070a7911d7488b3e628d9339718e8b821f1bb5d5c45f0316bb563d0a442801412dfd5a4d61ca657e04d6686f7d5863d57954400aeee8e79be8f3cc4cbb3d4b91269df039c3d3543e500b90a2bdc6eb60cc7afab7b5187d88fbd76e6212ea29e872b73f925287bdc808b4a4f8ec7f8aa08bc90b29e217c3eef69d8deae4141f4f9bd110b7bde9320e7b45f422e9a6111bcaf99c9911e46e219d3bab477926bd5d2e78d4cd0eca133c232b1e863fd7799dbf609f3670b323e5518e8f4bd36e9b3da2c68a28eaec9cac688b4dd0b73adc24a8c7acc264399b7facbc2f43e8e40b6cae9f8e956d1dbfe259f12bae75ad362c354050ffdd6e954f2d7615fafce888bd6f672a81c9fd4318caba765069c0a425e898bf7611b77f0fe61c27d318159dba42f011900246c64557d27b77aef928ab04a147baca37863cf998a2ac30b903c0314449ddb218887c309ec7184c8c733f5d4e7b2d79516e9531c9a5becf8294d6ccd777f285b13160e1c949d3069c6c66c0daa62bac679bc9b69825398d1c290d765e882fa2c8708b20ccec885ab6785dc22696b61c109ff84bc5407932c3e5bf12069a68b8e3333a26d3dd390ef9bc01b86013fbcb5c28a1f4d2b8084f1502fccc4027a124c3629d8f4a8befd14b597cebda5f94f36050a31b95087cbac347788a71a90e87f2187fae600aa42719c05c2859cb30ae0fd58a7bba681f7a6027a00583071def2c9a94456e5d9acb9fd2d11fdea524582489c02377bf7f590948985c769b3822cb6366681d79113c6a6c752f2475caba77b7b2e8f293d7fd9b991f63e254c98dec94f4f3def4fee9cdb56ff3ba7fe6a718cbe9a7f04710e257ea8a49d6605266048fc122d4f3173d4b04b3e282bd3c5198d7fcb72ec38e0b07dd8a541b2807e601e5a0a01f07a281e0e1a261c65977088a54597efd0997c59647aeebb2605a89705eeff3ec780e302e24b23a0cbe4f81367c3f118545f01328d22eb8e802667389143166a9db9477c9b58eb5c76a19b8f8b2692b0d356003f08ae54dfc820d8e357ecbf91fb7e212cbef1262171abaf2f613a5bb59b783cad476fec50d16ca0ac13c08a59a3097e6e3fde700a4b987d10311fc22d4aa210956cd859799f78010e4c0f25b715876aa253df15009490f71be3b0022875161f537c70b14bdb9e2d87a5a11b414a1198533c7de6fc4d22228133bc26b19d9f1e7627b14c72e3c39d3fa2186a42e50a0d1867dc312f94c7209d51475ed4aa80b2ccb0557a40422bf7317de2fdf3296727723a2d23babd5e23f7c3edf4942bb485b95a122e6aba41b8f80f684f84605462448d5a4fd66dfe9bbf80590b9999b4780d4f4f189a20f4400b2975df85b584c8c8f9fa3095f13aede1f52dac98be358b0a0d72bed4df71cd23973e326179580268c4e5d1be4b2ae2e1e2dba913998faa6088af128fc8fd3ae26203a898882b67d86d63f6ee8f8e216337330db6d928facf9d0ca273845ee5b33a0a136aeb48b7c52d3b95fe73efaf06197ec8753ee0349f19db8730917d0f18a2de9602d3b887bc583ff64dfee67e2bdf4d5cc1c341b89acd3dd5176d2c15ec2a77120b8a49591ca438ae36c52845e5dca550e539da9ba2a2eda49be316f3d6d4b7c83666bd4759940347c29dedd273adac722630a940e104316b4806553ded47132be4e31a50600f5a4dd56825b245b7aae853f56f79e0ec31f7b5db945ee3bb92865acb0d8828598e77446ee50ecd8bf5e7ccbd963445a09e3be215709b0b3bff2e9d12e6549924338f236b4ff973682e2e03fbf6b167e3b3a0f8c3f3c1e8d0e21a71937c918cabab50dd74c011a1a5531cfcf88a5df5fa58f17715f7c7b3a64d9dab6f20a596288969191420ed71daccbae7c1ec88bf74811b5e1f4bd306f3d810c4f3600df2903ffdf8db40ac7153fd93327a1065cf2c4590c8ba9f9391eb6aa600cb42aff8793e4721afeb3d470beda45dad9adfc6f4fdb24eafc63792f5015c656ca37cee82b7ee382bda31d786d6e03d4c8611c4ca464e2360ca747815c9eebd38c8fc7d5eea2db96b29d771a96dc5c884029077125bcc31980564555d21ecce5d0388e1bc1e618c7dfb31b02b1a6730db7eda387dd4ceb96f65178bb088e81133e5086f73c458f84139685ef930945a51979faeab539e4964244709dcb8b38f575d3a3ec1328a0df65fb34241db7cb3250b8ae0dbc44670d2b5cc3a1785d8d281c05256ef2beee3b202d8bce053e55ce1fb2bb208e65d488ae24484b00c2e343fc3544ca546406688022db6e29ceca9539ec095a2a2cfc5f516230f75fc961c5de1e8d33222331f57db02cac5f9208029c6114d041bb1cc7f959f77511f5790a564600c018afc253e5ecd5010bd769b45a04296ca09e87fb63bf3d3b51dd8b3f6d4426a03c0944d09dff654c5718ab1fef063caba34029be6811502e8bb785011dd1e34b0c192915adeeb40faad0725a8f9a62acf61b944a271d20567f350cdee22d76e3cc5966ba742d9c43823af19ba74c60da0df0c5f4e7e26af7224147774a1f8ae09f929066e1769ffb3c40ba9fed13d2670b9e865a155426ed5c83648c0ad34e46f5308b455e0835730fe529668b606f3f52b0d04534d0e14bc0ff0f742359550e6980ac9978455adb3de0f292af12a3700453e035a49eafe98fc0d7f26e42a6c41f380448607b7c96291f98fa6bbd7e32c249a49171f8fa81762a490a1ce5c39d66d35c6ed6c0679440c06197c2e24d48e1de81c711164c02820816afb5393d3d6c801c3c062ac46d1494f52c45ca36faf94894eec9d71e1be6c7256f4aee8dc080156b28623c821ef8d1826ebf0a41332620f42589270e142561374c825e828e2bd9ae41fd34959db48319d54ffe7a1b58ae8f7361cbaee8e26e0e7e1b7f125f8cd99788825efd01c38ec987904190a0ad52bc20cd36cc7209f9269ac87b2fa44d2456661d3056d893cf912c69ae6b2b83d0c781a6d6c33df1910867b71257ab74e244e3ebbac07445069418fe2e440a384e16feedf8e3165676e67866430eb6a8a5334620d8c2cda15b0328bb0c50630886353f95241cf4f3b647a4ff812c70e1b074c4befdc70fbfdbf868bcc81652034b5bfa831f1b686724046dcd17ac91ace83711e9ec7465d14c9d508bce93676a58ef7dae37221436865ad34ac2fd691e3b3e12aee6736dbdeec9b1c05fcedf8b9ced547259a1a40471ebe8b4bfda69d2f884da025e2809fb9f159150bbcb331ca3c502012a7fe76b4fc2771976aeb624ad7f2d72c707f5f19d8ded84581ac5afa697ff99d27d88c9588fe769839c9cc9d6786a0f814667527c53b6253b1825bfe17e7d734d96d61da0ae7349d0922774fa9b4baf332a4568e32cafa417ec659c4ad72cd656a1e2c59c8dee38890ed3acd8b4f8657de41f670106c38c38ba1a553f0f589a57c61f5105d70e0c0953459383cb9337ca972cda1d2cd3056eb07f21c1f5b995a04997fecf501bb201c67fd2afe4d44fedea595969b6b3706087b0f59d2ddbb099d60436a94f0ba33282b29f6e914fe92add4b33cf70b680b905cfa2b2ccb00b9967f99806e8d69783fd35a2d7fbb424e9fde2647609aecb0208bc3864bf95f05e50ba12123edaca8de927b338dfcb3cc597947c606c08315061a7fec98c48f480e2febd26fcc8dc12289aeb0adefa2c2be1766a5bc74ef1aab6c2cdbdfbf1810d956bc889c8e614b7b933ff6e336bb208db5b592775fe71c3ebfad5f47e0d074e1c0cb36761481ec677794f23c3698bd35875719f242e3fc939bc3668f9723f31effe189dabdf4ebbed073eab952c88f13059eee22230bc7724d7266b15726a0b0898cdd274e3e56d0a356166b5d16456249e9e92e84e39f61c0ecdf99ec2cd230440c03fd21cf68f27306628d35ea47367775f39d20a07f3959b38d49e3674061fc1018b647047ad39f77027878badd29927c5806f95aebde5f070fed28ed34052550678d3c6b677a3b5a46f76a98264c42206bf62caa95df5437092b68e025ee9ce2ad733b6db3ec97fd33cdc3b2f77ee90dd86d8bd289ae1a437c86f4153ddcff5e846347bfecc1499bb42980e4fa91790faee1b1991dfead5d7c460348631f0469b2b9e8f65207a00985511e0c41f441d9a3154f5a0298c172fd7135d4bf95c11cdf1769db1cc55f392aec309037599327a7c53c10a56d1ace8ad19186a2fc75dfa9d657c114eae99c1c1a6b4a58440718bea82290bd1c2a67048938c381648ea2b2c7110d748c9c8d782f20430b1427b51d7036e55b0997c6f75717db67a82c88d3647ee036b49392f0467d6010b32f9de3e5e79ef082c5bb975d11d2bf76a97f7159c11a7753db8a065d3126ccda9abbebd2c54374e389942c24b27435868fadb45bb060d3c1084b211e2afa8dfaa2d8dab8dc47fe10e6c32afece7c4976176a7c66d704125c0948c238c843b41b0246be1f50f8e07884cfe7ae8885ca06339a339c8d5978b079e0eb78facfa1dc67ca70733dfefc6c868ca149e0661b70e0134870a3107c8c46711fed14f892d6fc66d95306838688f13b19e904416a8d161cc33527878b38ad10b1c08db21457b2075608be7300d39748e4fcebe02b190f3e8ed32a0ef734b11ca43a21f5f809bba795f5aa0ea01050021d0f5213620af5b08fda6421a42b7c82804a20a6ef6d471babf76f46538327f943476d1d109a3f0dc531233d6f93d8dc27f4745735085f92adf63d617b373fba24f289035710e69eb80da12d36e8eaec22620ffaabadfb824bd5fc309a2c74959505856b5b890bba8f22bc571a9d87e93ba3b9aba6dcf26f7076c0c2e271641835ea25fd49d96c69d4fb8bb8731bd2cbc75146aed10d269f9060462339cde8830b535920be3dbf143eace0f1ea9469b95a64fbd7e5057eb880d4422cbf97cfc3f7140251d4923580ca2113f345cf24a66499ceffd2e39dc4fd74cf448638962957b409f0d218c165c13ffe107aa1dd1d9a02092cd46cf2b353dd2d2ca7b8a7ae8eda0ee18bba269bbffed0c7d400497aee4da0896cf6329d76ccea098fbef9075412d1c2a3644cf0f202b884303d204314ae92c56217b2feb5e7c1e15a99fbdd655fb8f6bbc3ab1259bf03b2ee17c5b7e9443695177ec5040eeff3fc36ceafe143393d76a3d735cfe6c9b632e52dbe64dc1265961e8a27ee9f76c0add9e0581e474d7678214f5b64c932903715befc6b766611f1d7e495573b9a3e009cfcb0ffef7ac57c3561badbfa41c119e541180aa2364de61a601699cd1bf3de01d15794b728e1444efd6ffa1e57d95489c8df91fbc057b66dd6d9f3a01b19f36bc99f0b54ed1f9905067dd1608bce47f5ff1981a25184aacd39e331d8ff3dfa7c012d7e667a69249cb4803b23f7eeaab8ed29c69ba3d2a1b88821ffefc5825650c53b6364f38e0a178312f5d29d5375423cceabc8e1c4e51a566ba3f9b176b858c8860440ff8ebdde725640d2dff6b9160bb69f188755b0ff766b410704cda4c33e1ae2c73b5799a00d2f55de73109728b350302b64df2ce3eaf2e0c6561009b60c2701ac493076305e97ed20c3b42f40b2bc7f13bba4ab8181e2085b07930c6f5579205dff696902be824e65ddc774e886e8d261fe74712a31e406b0f7725b4559d7ad0f27a1a870261aa5bb8a720e7c89ba933770d48821416de070df1abcc6eee1147c20bda090d940aeee2bd48c0f3d94675d9b9cf1a62ba50e31a7af0714dd8325d5fb7142e88c4d22ddb8f0278ee6ba88e361524e291b6d000f6523ad4188b021da9ef4a634ed09eb2002b9c726746c9ffc32f261edb448106aa1e2daaed865255fd1d296fedbbb2de3f7c1f15935e52006492b632ad125aa1e000c9d71bdb945792668e16b26122a3fd7cba1a40db8083068c5c48fd2aaa621c87d9f5621bba442fc26839030dbe4e37fda4046d6503bb03e0f928de25d4cd4e2a40ec93c9021dfcbb25f6e2c943cc85eba8123340d6364949581e8c8c2913d59dafe4297672c0b9e7418485f00cbcf672a588904beb3c074bebf339815b91c7c374ceed5a701e1ade8f5d87ca536120116307ac259577a8e12958425317c482d2c7089bf3d83e12318d1526107a050f3c094492de7255b22e18ca2ff261b3ed197f2f8e67b71b1c5a6a04b99158b58e9baad75201aabe13254617d0de0a9073af62491c67fc18d1ccbf7686a85a99b39e9d7d9c85a0777e47c9fd0e10c932c20f13ef287b44b9b706ec818aa0c48a10caac58a9b8355e84bc820698c2501f0c12e1b67df701cfcbe72dc47a2c87d43753ebfdb24cc838507e241d9fcd3d4955a373209ccda903a3ffced05e4232f2cca9bba197fdba8a9357cb1d6da6d9b4095027dc03e17d59ebc2d358e171da0044df102b193c79390ebcb58023b40c621df71e064b0056bfcf1eaee1eca85357cd1ac78feaa54bbbd85596977ba85003ea60d8685f4e3b756e4f81453077396590fa214f672929e81569442023667b798c24e06ee20dbf64cfccb51b2bca4e2a5b0df137bb37ab3e2854dc7e1b879866a72a5809b563596cc9fd3e53abdbccfd5dbc60662252ddc5c290d72230d79b7504b40fdb45ded2f02e926652c1e04ea4c1c488025ad1098adeebe98e385ab1caec4b9eb4d3bbd5ef3ddf1fd0d72784604a989558fd37f6d4fee20609090b3331e254fec98414a2c54589ee01c9429b7cb574b9167efede1d966a227bf2a8e422f38680d77d3c555cf1117e7d7e804ad730c36a78b7846473d6481bd0839bd3e6982ed47246c370a90b76e5b88de202346fb20b8b6b5ecb6a90b8478d17b175a1821df75b48ecc34866fe5c8960bf64d5ff92831bb9357474bec65e0dd1699b0f0340ee5ac5e9e9d3df66edca20201371fc21ad80aacd49c6b0abcfee9c876c15edcfccde823b55b61cb7b254487ef8c8781a22043f4adaf25df34580a6b3904fd014b50c59fa90eff75fa5fd32aaec9aa10df8a2b9b824952e475c964533942bbe30f4167a11fc15d548e0a31f911030569722f0c67e79e90483f6f0bee1c7f80face1a1b0f940c891be688cb16394f6c07fd29b5f248c211d1f76ec1292755d8bd963e191b3a8851472fbbd2cb732f4fd9fef3a8fb29aea097328173fdeaf56fa2279e86fb954306b040c960d0b601b3a741c96cf1f0bd1172f848585cb3b57d7d2e2a84914526f5a6f9895cf5aa4425b4dbf9f59037756a0321bba204a737e36277e86fd268f6047921f4f8fab69dfee137c07874f12f89084e7117e2c9221690a27f880f17d08d56f9dbc96ffef3920b55fb773dde72e1ba35f3e0c9872e339508281426ab04941df4885f7e0293149f1642c2573e2b6594b8fd953ae2468cf917cdaa0692cf461e3628860935def39af78af5e1540147ab1c70c3ab7f7c76abea0d8541feb43e632d7a2cc7bef15a4700304048ecf135968d0a9644ce899aad05b186a2224bab3836248cc6137472203ebceb29b3e87610df12417ee722f309c54b2e65591d8b929440f3ec43ee9ff8f7b7710668e4312610d1591303d5270394da0ab61e4515af5215dc81137f0dc90f951972731f8d98ceb8b4ea38da7d8dc153ccbae5068781eaf9a4a7b11b4319090261b61aa65a8536292eb5392020eb285b2db07f81e7f764d65037050f1e3748593474c6c1dc11cfcb56e1c916157280098a437265e1c682cbfed717e7275bc6c3bb6c6ef7f0f9fdd19ef82ff2c82284c3a061f57b21d3705aff97710108a7d1217a7ea3feda021d20f1fdca94bbef67e0aeaa3db6ccc2d060f7b33707fe19cb2d0232f1239373bb38e666cbbbf3a697c6d0e957ec6730f56034440e789a7a37304d09eb742f21019a77c608cf578162a55d0aea113c051b110b5281ed8b6638d2b31604e965cb019f2f106bc4e96d1313c70612f1ff18afdce7926270dd242c49cc53792f160d1e143e04d7eb3ca40828b153fac466bc53a084281987b47b806a4ef668859eb9035ef68e9c20bd6bb790fdf6f921569b4e97fae5b7edc761b4944c1d6d90f4df40bc3203ed838d4c61cdeb7a9bbb68d59b2cc00125eecaf06b759ac1b9dd68028225d0a60efa499e4436962362727011eef6cc55962dd4ffe2fd3892907e837045883cc9ba8892ab265a31924f3055d4dee68feff05d9f10ebdf1e8c1c1e7001b5b02a7fe26b9c0641e054ae37854187fb1bb6e9fae05b09e85a1e0e14bc801f2d8b9a178a9a72b147e137e0d83192664a88a3aca4fb6a4f0c5787b20c31bc5975dfbc8bcff8987573bd14b1ca434d93452e67ed01c60be99e535bb3f848888d224520b61cfc1de2d6b2ebef9f24674c31aada52784a0b7b60f351653c71d546cf951e6b4a0d917ac6afd0a713f41833f9f74a3a7d3c19b523299666da2b48676ca7aafebadef05b3bbf4b6b62834046f51d3d4582fb4c9de27a3f5e992853368e4f17f9dba27c8c4438307fc7405f53fb27cc81c1521452a1a5edb0cabdf7a73b1cab0675b619fd5a0fadb7147776e74695c042d9d8bfda045bcef7542b42249f34c7590605d0201a762390f2fee5f3cdb488426609c663c9fc4dc2a5277f3f589a14e6dcc202dfcd89bb148a368ff1792d230c19934143d2c260dbdfb334af863b856e415febd22fba01c568d8f48dba6d92f493cd1164a376f006d55db609cc2c9532a9f56da3b06e3db2a05f797eed57892e2fb677541324bcd763cf4669e7a871e322d0cc6e21befe3c767976f058dbe7a059d673c94c7ac5d49178bf19d32907b6fe66a92cc8ea30a858da43f74354390d6e97021da50812c59a78915e5b33221531bfa054c594ce3a2300e5a7d712773181901dfcf6922e980566fa62b1f2b669a27fbecce29e9be6d22058463e350163f33d18ce92a72d1b470857b6a37998aec5672521a8f0d66ab2bd01de516036ec47d1f63b95b437dc6d5a0168189d5a963cb0a80a9a5f20b03515396e3525f0ab13b0c1e5dd051b4c930da6d57ab6f7dd94ab3e689e0355af0b34871296152a76cce170d7b14d471ee4d9daa93de4ed755f30d45344f724288c17e4b22583158f1305ff55fecf7d526e207fa609886e14c9a168bf364b049409f63590f18a5515de8c1fd8c5a9710b6e33d2ecd01466b799f14be787612b8f17df0c05483a16097c0a504880249e28f1e067663c640a550a8c7ad9d090f7b2e902c5c20936869a5f3d3a014817f90babf847b43cf67ec23f120ae4abc63a418d1d99f359fc2c33a5bb34e1f5780576111a88c5ede834bc41e498548ddd128f9e884f4cd3e1bf1aaa1204079ce74e709306f38f2d6859128fc35d3a74c534ff1dccadfc8fe41f1be9510349af8710eb6d2dbc758be12b65622dad1cf48abc2fc409f5ed6a3af8d0b6548643c46dfba9db4e5827475e6e317c9c018a4dd5de391cc9cca85ec527537e26949e5091baca4f0b563d4c3969f15115e5ccdeb9e40788fe12f9d32d9488a70ae53b819726e4483ea6bbcb76f99775ca5e4f93c76edae462c08d596209f985aa55ef5e786701edcee8d831dd6dc0fee9ad01b6bdd63e886a5e55bdc593390c81e18dfd8c685b81306bad6b7a19a86b2bab5cbf4754708422e99f8f2497d798b3db565e709bcbba4c376c1c60b22b994fe8fdcb25215d505511cc1927f6a35344023d5da0a3ac0830e6aa80f5f7f0d94a67c99c6b22717078aecba2a599daa2acc054cda25e3965172e5fef464ec19aa71de5e84b6de30cc673fbab8c441ea37bfb3fc321a504371bc0996702e9be38db762e339ad7ad66dc2caa887e4ab60272d7963f85b14c941d31e545b85c640427302efe7142f0e0897a8c623ce57da213fbc2d1f90677142fd48cafca0b2934e572833ed6473218d0513dd1f6ecc578e5a1109ddae552b3be0cfe7246d7682a59fe9ae783a0f318d1800d5c466c80c5fd3facd0340f455f081068dd2cda5cda744018d902217152b6c05d37c090f8348b0471053152c2a4570fbab3f6dc30c8e49a63b88a00b3aac75180a633692e35ea976821694e133eb8bb4d31237d002fce1dd2ce55528dafcef2f0e00690562d144bb0e19576ce6ab72deac22067d8edac916b1b07e4eb57ff0b885b1b79f37dcf88135eedc17ffd948b61e4df4985033bcf891dd5b1448c8668947a271d93d03ce31216810a6bb45a6c5a12e290d97a60ad4b5c7384cf19421ac1ca64d346b50771e0b50e5caf1d9dfe056e8da247aa502ff04c8e29ca810a1d3ec7a89bc17dba2936f03a80228171f7999b3f2768617970efe57b14011c80666ac4999a568ebef74e2ca14df0ff6f0fcd47c538be96aaca1e65b53b98447101e49672b48167c0afc1afffe669b0f9718bd3305805c292db9738740b362564e4691cbdf061db1ed3f9db1f8bed82939f835d14f46818e3eb4e25f7a8d77d9d0d7913c45d8a81115c1a5e37b1d3bd1b7b5e6afaaefc81d9700bf83506fbf15457bc0f59f7008cc803efdcb6d39e388f6b28e80d47134265cc5438804b12d50e61a489da829dca05792d2ac182ba747331e88a7118f7dd38067f7d38f37be362260effacbc33863bb47aeebbadeae648a1090718266eedd2ed5a2c23f168759198aa92b2ac45c2a68ff212f29260e641a38541b066d39df4e95cd1c8e7e6ffae1b8017e6f629db3910b07496c8a81e4e66ac2321fd9e7ebfecf5bf6e922d7a79fb710a2d42dad1916c9b186c2c50c818fdb1afa19be867d943ee98f732fe3a01364281c0f6d0eb64a278721dc7bff5316256b0f4251abbd9b8ba7c7c12a3bf02a1fbc9ca94b965588fbc82343d07df8e06eaa5ed2137fec129351d80a9048a7d78b31ffaf2e388864a763c4af7aa53000e0bb2eb8ac0e4272cbb79dc6a7d65890f125c523c7cfddacdedbe87938aca915c92c807dab26be7d748827d4e3188676312ef1ac8460b29e8e715f4075e33104ce82e6785aadf17a7cf82d2a705e9f2d0fd25810ba33d76e54b48eda3effc01f37c89db38af81922fadc8c3361fe74ed51eac5e4437108106ffdedb339b406c082d62a8bf718989846d23f966e1ea39103010f767b3a6f0a0a2041b1dafcb787e69ffad75ed2a0081b92a4136ad5ae557c55a4b6219a390103428181ab36f329ad182a92957495c", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x6, {0x3, 0x0, 0x7fffffff, 0x1fffffffffffd, 0x400, 0xc, {0x1, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, r6, r7, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x408, &(0x7f0000000280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xc00}}, {@blksize={'blksize', 0x3d, 0x1e00}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0xb3}}, {@blksize={'blksize', 0x3d, 0x1400}}, {@default_permissions}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x400}}, {@allow_other}, {@default_permissions}], [{@subj_type={'subj_type', 0x3d, '/dev/ptmx\x00'}}, {@dont_measure}, {@fowner_eq={'fowner', 0x3d, r6}}, {@subj_role={'subj_role', 0x3d, '/dev/ptmx\x00'}}]}}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000002000)={0x48, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000021c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, &(0x7f0000002200)={0x48, 0xa, r8, 0x0, r9}) readv(r2, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/123, 0x7b}], 0x1) 10m39.555387265s ago: executing program 2 (id=3942): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000280)={0x7, 0x0, [{0x4000000d, 0xffffffff, 0x1, 0xffffff89, 0x200006, 0x4, 0x2}, {0x1, 0x4, 0x6, 0x8000, 0x27, 0x7, 0x9}, {0xb, 0x8, 0x3, 0x3ff, 0x7ffffdff, 0x8003, 0xffff}, {0x80000019, 0xe5f, 0x0, 0x7, 0xdf3, 0x6, 0x80000001}, {0x80000000, 0x2bb, 0x0, 0xd, 0xa, 0x7fd, 0x400}, {0x80000019, 0x100, 0x4, 0x6, 0x3, 0x2, 0x3}, {0x80000001, 0x8000002, 0x3, 0xfffffff7, 0xfffffff9, 0xff, 0x6}]}) 10m37.970929852s ago: executing program 2 (id=3945): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x85, 0x3, 0x200, 0x2, 0x5, 0x1}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000580)={0x20, 0x21, 0x55, {0x55, 0x2, "623768ea500038c7d1baecf8c8c98700a53df585f1c6c9da0ea64fe99bee9eea967e36f5a917ed6d7368a2949425081b54944ef9d352690675c3a652120a071bcaddf72d252dbe9f73e90c3f1fe132705cc553"}}, &(0x7f0000000080)={0x0, 0x3, 0x1d, @string={0x1d, 0x3, "cb74d59fa76796b73f8791700be6ec9a9147da05ada9500e94d56e"}}, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x8, "2181cefe"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0xdb4}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000240)={0x20, 0xd, 0xf9, "f1be13665b223d2f49694788b2444fcc12382009cc015b03a457982b2c7d13a725b468041538c82712d83fb09c35534f6a8ee23228a5fc402b1ec3e9ba1ce4625a0e5568114ee69c7cb85bf1a748cd53164ec9bcd636d4a54334568aa1dbefe2db39763786ca2057ab19b38684e5d2ea7ee1cf831f0c31d831767ddf05ddd3305c5473e4980e1d14e2c384f1ddacd6ebec2618c6ce9a4305eac80474a668699acdd7136ff38ff9865108dfbcd4c9e53eed457c37870bee6a422ce341daef379a2ad7a71899b13c99e9fa5ce76c8f369da5edc4383340250166e225f0ab75af972be9836732f1143ef6bcf54de4860168ea73f0f01605b9d055"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xc6}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x58}, &(0x7f00000003c0)={0x20, 0x1, 0xa3, "225a0ebf2546b0fecffae1790a3d7ed253427f5d33e97e2c355d72463825a4df49f66400878368721f1da6116c60c07f66647aec8036e111c0262e4c66ae1d2b450738b368317df8c31bfc72e1474256a851146b74be2bb97bc44e635ea51dc1a2667472ad4ecf55dc044e449a3a6291c8078ae6cfdd39c8d218da469fda2d54bed31220d5c45e89893efd0d212503e41b2ce1616672fd88b610781e4c946ba3ff0582"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0x3}}) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x21}, {r1, 0x60}], 0x2, 0x0, &(0x7f00000001c0)={[0x4]}, 0x8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000500)=0xd0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept4$packet(r2, 0x0, &(0x7f0000000640), 0x80000) syz_usb_control_io$uac1(r0, 0x0, 0x0) 10m32.878349684s ago: executing program 2 (id=3953): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000002080)={0x2020}, 0x2020) accept4$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x80000) bind$x25(r0, &(0x7f0000000600)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) 10m32.247255662s ago: executing program 2 (id=3956): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x1) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) sched_setscheduler(0x0, 0x3, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0) socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0xfffffffc, @rand_addr=' \x01\x00', 0xe79}, 0x1c) socket$netlink(0x10, 0x3, 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) 10m29.472567593s ago: executing program 2 (id=3960): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x40000) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r7) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) 10m13.151129619s ago: executing program 48 (id=3960): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x40000) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6}}, 0x10) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r7) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67100000000000560602000fff00006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffbd35010000000000840400000000000014000000100000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b848b00ea6553f304000000815dcf00c3ee7b042d1937ba52037fdedb2150e1918c30b6301f0212feb0cff9fc67357d81b2cc1a9e37d7b75c020b070000003eb22062bafaca036d9ec7db6671573e202e0a92ee4ba12b064981cc32d1ac0b9ecc8f604dca20563e1c1e7624cc3b88b330ad416c4c1d8c60589b6445a4ffff50df4d34bc5847bebb943a84cb56956931ba9cc39c4a9deea5d77aa843240000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) 5m47.954517607s ago: executing program 1 (id=4620): r0 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880)={0x0, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r5, r4, 0x0, 0x7ffff000) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005002000085000e00050000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x28, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setresuid(0x0, 0xee00, 0x0) r8 = io_uring_setup(0xaae, &(0x7f0000000380)={0x0, 0xbfffeffb, 0x800, 0x7, 0x2}) r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x160341) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x0, 0x80805513, 0x0}) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4091, 0xffb}], 0x1) 5m45.772829537s ago: executing program 1 (id=4628): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x800, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$panthor(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x42800) socket$igmp6(0xa, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000280), 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x0, @local}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 5m42.325202721s ago: executing program 1 (id=4636): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x21, 0x0, 0x4) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x109500, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r5, r5, &(0x7f0000000000)=0x2eb4, 0x2000007ff) sendmsg$kcm(r5, &(0x7f0000000180)={&(0x7f0000000300)=@isdn={0x22, 0xc, 0xd, 0xb2}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000000380)="d3b3ce7f575d9a14f578aea134e4e08631fec2cf023190d62f2cf855f1403ce7cc51096d15d335f70b0a9877356c1c99ac34aa27ea42bda4efb39bd638fa9d0715dff43f27614d0128cf9e82d05bb8223e6f1332a5", 0x55}, {&(0x7f0000000400)="3b1868399c42e288e9567107061311ce6e3208bf2acd221d154cf2573fd53874990f9dffac75420ad2b549b2c0ee5a254bb880188e3b1e92f21d91fd40e4e2f139a54ee3488a2b245e1da57b53c81d272b0edf", 0x53}, {&(0x7f0000001500)="f0230497f282af516a468dc9d13708b498aeb5b2e8a3c630ed0b49be0d2e72c40dc16924a4412691fede94228cfab0d869408f5e38c419faeb5c6724ef38082eb6fb68bdca90de5606124f54053b99a9af012bc7b6a5fb7693ae755aefd07f541e383b5561265c58ae0e9ceb4fb0a6240b4a1a1ab72c116d138b2964b2c27c8143589c83ac4151b87c13ed84278bffbe042235c8f7b31832ba105c3972b1efb27ef1dbf685e5678a7a730723a5ea9df697d25eb3c2b2ebf0216d0d1da1cbc71534b24c2ae7617f548794b624216fa6c92c77a09cd055178a37903d68e4e050e2eb41502a7f3f5395fd67", 0xea}], 0x4, &(0x7f00000000c0)=[{0x20, 0x111, 0x6, "49cde85607d3351db5da6dec"}], 0x20}, 0x40080) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) sendmsg$IPSET_CMD_RENAME(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, 0x5, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4005000}, 0x0) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe"], 0xffdd) 5m33.133676084s ago: executing program 1 (id=4657): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x85, 0x3, 0x200, 0x2, 0x5, 0x1}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x4, "225a0ebf"}, 0x0}) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x60}], 0x1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000500)=0xd0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept4$packet(r2, 0x0, &(0x7f0000000640), 0x80000) syz_usb_control_io$uac1(r0, 0x0, 0x0) 5m28.490342825s ago: executing program 1 (id=4666): socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20008850) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000002c0)={0x0, 0x0, 0x1, r2, 0x3}) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000200)={'tunl0\x00', 0x0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r5, &(0x7f000004b680)=""/102400, 0x19000) ioprio_set$pid(0x2, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2010, r6, 0x10000000) syz_io_uring_setup(0x519d, &(0x7f0000000000)={0x0, 0xcf0e, 0x8805, 0x1, 0x225, 0x0, r6}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)) syz_io_uring_submit(r8, r7, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f8000000160001002bbd7000fedbdf250a010101000000000000000000000000fe8800000000000000000000000001014e2300004e2200000a0080201d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000004d533"], 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) 5m16.086670395s ago: executing program 1 (id=4693): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x1, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2, 0x0, 0x1ff, 0x12d5e}}, 0x44) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$cgroup_int(r2, &(0x7f0000000040)=0x1f00, 0x12) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x4, r6}) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x40, 0xfe}, {0x20, 0xf2, 0x0, 0xffff7010}, {0x6, 0x0, 0x0, 0x2000000}]}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mremap(&(0x7f0000213000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mlock(&(0x7f0000655000/0x4000)=nil, 0x4000) 5m15.214508363s ago: executing program 49 (id=4693): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x1, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2, 0x0, 0x1ff, 0x12d5e}}, 0x44) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$cgroup_int(r2, &(0x7f0000000040)=0x1f00, 0x12) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x4, r6}) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x40, 0xfe}, {0x20, 0xf2, 0x0, 0xffff7010}, {0x6, 0x0, 0x0, 0x2000000}]}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mremap(&(0x7f0000213000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mlock(&(0x7f0000655000/0x4000)=nil, 0x4000) 14.684438218s ago: executing program 3 (id=5501): socket$netlink(0x10, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r0 = socket(0x1a, 0x2, 0x2b) socket$nl_generic(0x10, 0x3, 0x10) socket(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000400)=@gettfilter={0x6c, 0x2e, 0x314, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xa}, {0x6, 0x5}, {0xffff, 0xfff3}}, [{0x8, 0xb, 0x9615}, {0x8}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0xb82}, {0x8, 0xb, 0x7f}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x200}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0xb4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65d, 0x100, 0x8, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r9, 0x707, &(0x7f0000000800)={&(0x7f0000000380)}) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x10000, 0x0, {0x5}}) io_uring_enter(r6, 0x47f6, 0xb277, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r10, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x2404c041) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r11, 0x29, 0x46, &(0x7f0000000000)=0x4, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfffffffffffffed6, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010867656e657665000010000280060005004e200000ff000600776200688f6c687411ce3d7e82b5e00c20f3914a8f2d7c0e655f077105c8f8c0095a9dba3df0a0acad3eecd472bc346306de645923f780a0c2388cf18c94f6ef4f4f8778a48491feef586166f6aa3086a3af267fb08edd23c9375ede708799b620d8a359c68705edddf2b43692193a28ccfd08cf0528bbc6c4206a30a83f4906a67708bf14890c1055e748201d1a9477172b052d8fdbdb80d0c1776e"], 0x40}}, 0x40800) 13.168386885s ago: executing program 3 (id=5505): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40901, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0xf6, 0x0, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) write$tun(r1, &(0x7f00000003c0)=ANY=[], 0xfdef) sched_setscheduler(0x0, 0x5, &(0x7f0000000280)=0x4000a) r2 = getpid() sched_setaffinity(r2, 0x8, &(0x7f00000001c0)=0x41999ce7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x101200, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r5 = socket(0x23, 0x5, 0xb9) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r6, 0x0, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0xd810}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000050) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) sendmsg$inet(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0xf3a, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0), 0x4cbe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 12.155071401s ago: executing program 7 (id=5509): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x188}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x11, 0xffffffffffffffff, {0x1}}, './file0\x00'}) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neonbs\x00'}, 0x58) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x20493859, 0x0, 0x0, 0xffffffff, 0x0, 0x80000000, 0x0, 0x1}}) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100080}, 0xc, &(0x7f0000000340)={&(0x7f0000001480)={0x378, 0x1, 0x2, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_EXPECT_MASTER={0xd, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_HELP_NAME={0x5, 0x6, '\x00'}, @CTA_EXPECT_MASK={0x48, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASK={0x108, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1c4}, @CTA_EXPECT_NAT={0x148, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_NAT_TUPLE={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}]}, @CTA_EXPECT_NAT_TUPLE={0x88, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x39}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x378}, 0x1, 0x0, 0x0, 0x80}, 0x8010) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60", 0x9b}, {0x0}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957", 0x2d}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7a2", 0x22}, {0x0}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d595f50539", 0x23}, {&(0x7f0000000ac0)}], 0x7, 0x4d9e, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) r6 = socket$kcm(0x29, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000500)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r8 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r8, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) sendmsg$inet(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000700)='N', 0x1}], 0x1}, 0x4000) sendmsg$kcm(r8, 0x0, 0x10000810) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r8, r7}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000100)={r8}) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 12.007161522s ago: executing program 9 (id=5510): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[], 0x188}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000500)={{0x1, 0x1, 0x2c, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x4a2242, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x80000000000009) r3 = epoll_create(0x1000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x2010}) close(r1) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neonbs\x00'}, 0x58) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcfa, 0x20493859, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r7 = accept4(r6, 0x0, 0x0, 0x800) mlockall(0x2) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31", 0x97}, {0x0}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a311e577e1461a24", 0x3b}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7", 0x21}, {&(0x7f0000000a80)}], 0x6, 0x4d9e, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES16=r3, @ANYRES32=r7, @ANYRESHEX=r3, @ANYRES64=r1], 0xd4}}, 0x0) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380), 0x0, 0x8811}], 0x1, 0x2004c844) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x19, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000ab9000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000002c0)="0f01baf6ffffff0f01cff3ae66b88a000f00d0c4e1a17c0b8fc95890e9bbde949401df2e660f38806513f30fc733", 0x2e}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 11.895158359s ago: executing program 4 (id=5511): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket(0x14, 0x2, 0x4) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x0) 11.624678629s ago: executing program 9 (id=5512): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) syz_usbip_server_init(0x5) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000) dup(0xffffffffffffffff) pipe(&(0x7f0000000540)={0xffffffffffffffff}) r3 = syz_io_uring_setup(0xfc1, &(0x7f0000000340)={0x0, 0x8886, 0x10100, 0x0, 0x45, 0x0, r0}, &(0x7f0000000180)=0x0, &(0x7f0000000300)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r2, 0x0, 0x0, 0x0, 0xc884, 0x1}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000005, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r3, 0x7330, 0x0, 0x0, 0x0, 0x0) 11.461978451s ago: executing program 4 (id=5513): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x88203, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ddd0c0100a1a0401d4dd010203010902120001000000000904"], 0x0) sendmsg$inet(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000300)="4a61255008160547379a780ac395fbc3f600cd54059b6e51d30394c227718293e5afddd7b2c9817998aa30fdb0a6ab9648167dfd54fa93ac115711aaf2703a324641edb30c9768958610df85d67008fd3cb11c6d3225b8d0acb65e30d5528bba1b28d1b0d1313f2c46d7a0816a517ef340de132ea53735d0fbf50e14975094911797bd888bb9ff3fac8dfec9fe99eda2afbeae0cf931505a65716a529bd518ebb8b388cb88f379b591477e25085ba11bfeee273a5d654e1fdd9f4d277728b96e5b70a80aaa42f2dc3360c16372e0672859eda94bb1852d3f18449843a5bebb4629360d8587ca", 0xe6}], 0x1, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0x6d, 0x3, 0x8}]}}}], 0x30}, 0x24000081) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xfff2}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x3}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) 11.233966485s ago: executing program 7 (id=5514): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SNDRV_PCM_IOCTL_RESUME(0xffffffffffffffff, 0x4147, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40bebf54bcdbce, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) socket$inet6_sctp(0xa, 0x1, 0x84) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r7, &(0x7f0000002f00)={0xa, 0x4e24, 0x10000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3}, 0x1c) inotify_init() 9.931635483s ago: executing program 3 (id=5516): openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, 0x0}, 0x0) r2 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 9.579065747s ago: executing program 7 (id=5517): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r2}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r3, 0x234f, 0x2d59, 0x2, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a000000000000080080"], 0x26}}, 0x0) recvmsg$kcm(r6, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10000) socket$tipc(0x1e, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000800}, 0x44040) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x3c, r7, 0x431, 0x70bd28, 0x259fdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0xfc}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c810}, 0x20000000) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x4, @any, 0x8, 0x1}, 0xe) 8.831703553s ago: executing program 0 (id=5519): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@acquire={0x178, 0x17, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x41}}, @in6=@remote, {@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x16}, 0x4e21, 0x300, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x3a, 0x0, 0xee00}, {0x0, 0x0, 0x10001}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9}, [@tmpl={0x44, 0x5, [{{@in=@broadcast, 0x4d3, 0x3c}, 0xa, @in6=@loopback, 0x0, 0x2, 0x0, 0xac, 0x3, 0x1, 0x9}]}, @mark={0xc, 0x15, {0x35075b, 0x6}}]}, 0x178}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) 8.547265027s ago: executing program 7 (id=5520): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x14000) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000180)={0x200, 0x1, 0x0, 0x6, &(0x7f0000000140)=[{}]}) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, 0x0) r8 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002000000404c0500100000000000010902240001000080790904000702180001000921faff0501220500090581030002004001"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x8, "a952620d"}]}}, 0x0}, 0x0) ioctl$KVM_GET_REG_LIST(r4, 0xc008aeb0, &(0x7f0000000080)={0x2, [0x6, 0xd]}) r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 8.395358187s ago: executing program 0 (id=5521): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c005001c2603600e1208000f0000000401a8001600a4000140000000007fffffffb94dcf5c0461c1d6900094007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x20004000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x885}, 0x14) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x15, 0x4, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000500)={@empty}, &(0x7f0000000540)=0x14) sendmsg$nl_route(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4001000}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{&(0x7f00000007c0)=@nl=@kern={0x10, 0x0, 0x0, 0x10000}, 0x80, &(0x7f0000000180)=[{0x0}, {&(0x7f00000000c0)="502d48af408000be65e9879238dbc71989225cc9f8fa528969c493aa1ae1b3cd8bfed4815d72ac21b300cb58afc308", 0x2f}, {&(0x7f0000000100)="2981cc70501a91bd78afd88e2bd6b68b4d", 0x11}], 0x3}}], 0x1, 0x890) r4 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) write(r5, 0x0, 0x0) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000480)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000050000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140001007465616d300000000000000000000000080007"], 0xd8}, 0x1, 0x0, 0x0, 0x4008005}, 0x8d4) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b30, &(0x7f0000000080)={'wlan0\x00'}) 8.269369257s ago: executing program 9 (id=5522): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000010280)={0x0, 0x1347, 0x80, 0x0, 0x287}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) unshare(0x20000400) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2}) io_uring_enter(r5, 0x75fa, 0xe475, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) sendfile(r1, r0, 0x0, 0x578410ed) socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) 8.168283642s ago: executing program 0 (id=5523): sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)="251dacea8d92288796f711b9e81e6749d9f3be74bcae401f81b9c9d4ed467761f43d6cfa94b18bd06cae5367a67046a768d5a989475ef9bc1c06e2bb0223f9608537418eeacf9246e0e4e81bcf9e4d7a2e0e020a41f767384a446179c9fc70a0adce20633f9abbc689c13536823d87746f5a1f049f37f4f9eef2ae58c7beb93b8a98034ddeadac16770c15fc5060af9dd410d282b9aaaf232d3cdd271d6c87becdfaa47d1b779e8e8271470518f962323fc2e58006d0d8348df4c5e7dce68ac1c79b210f66e2bccc349bd019e4c72054f8944394c0ffcdd5b49e54aabe07a494c966d53ad317f633f2650d53", 0xec, 0x4, &(0x7f0000000140)={0xa, 0x4e23, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40000}, 0x1c) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_TSC_KHZ_vm(r0, 0xaea3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@map=r2, r1, 0x2f}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002b00)=ANY=[@ANYBLOB="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"/3910], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r3, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup=r1, r2, 0x2f, 0x20, 0x4, @void, @void, @void, @value=r4}, 0x20) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f00000000c0)={0xfe, 0x7d, 0x20f}) 8.019188063s ago: executing program 0 (id=5524): r0 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905243d19d4"], 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x20001) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x11, r0, 0x970b7000) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[], 0xfffffcd9) syz_usb_disconnect(r1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x7, 0x100, 0x7ffc, 0x0, 0x9, 0x100000000, 0x0, 0x4, 0x8, 0x0, 0xc3, 0x7f, 0x1, 0x0, 0x8000000, 0x0, 0x8, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x0, 0x3, 0x100000000, 0xffffffffffffffff, 0x0, 0x5, 0x4, 0x4, 0x10000002, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0xfffffffe, 0x12, 0x6, 0xfffffdfffffffffe, 0x4, 0x800000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0xb4e, 0xffffffff, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0xd87, 0x5, 0x41, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x80000000000, 0xdf9cd8e, 0x8000200, 0x6, 0x5, 0x0, 0x3ec, 0x0, 0xbb, 0x200000, 0x0, 0x0, 0xfffffffe, 0x7, 0x7ffffffd, 0x3, 0x0, 0xffffffffffff2328, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8, 0x4, 0x7, 0x0, 0xb, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff]}) 7.99739504s ago: executing program 3 (id=5525): fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1000, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0x10000) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='h\x00', @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf25010000000000000008410000004c001800000000696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x10) unshare(0x8010000) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x2, 0x7ffffff7, 0x31435641, 0x9, 0x8, [{0x1000000, 0x40}, {0xc, 0x8}, {0xe, 0xa0}, {0x10100, 0xfffffff0}, {0x9, 0x3}, {0x7fffffff, 0x8}, {0xfb60, 0x7}, {0x7, 0x10001}], 0x6, 0x78, 0x2, 0x1, 0x4}}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000000)={0x10, {"2ac78e02ff04856af9fb71f0d3fe13be", "3d684d00005fac27a639f8524c40f977", "ffff00ff000800"}, 0x3, 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x0, 0x2) write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="080008000700000000031400000045f0801600000000002f907800000000ffffffffa20022eb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0xfdef) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 7.937768916s ago: executing program 4 (id=5526): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000000)={0x0, 0x399a, 0x5, 0x1, 0x2}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000, 0x100, 0x1}, 0x20) arch_prctl$ARCH_SHSTK_ENABLE(0x5003, 0x2) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000001c0)=0x2, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x0, 0xee}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x400}, {}, {}, {}, {}, {0x0, 0x40000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6c2b}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10001}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) write$nbd(r1, &(0x7f0000000340)={0x1000000, 0x0, 0x0, 0x40, 0x9, "82b0cfc4337965941538be09000000000000000000007400a391793ba70d0000000000fdf700000000baffda6e4a4d83"}, 0x40) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r7, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYBLOB="cfc7ae4c84d5180a19"]) 6.69443618s ago: executing program 9 (id=5527): mkdir(&(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000240)='./file0\x00', 0x7c) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f0000000080)={'L-', 0x2}, 0x16, 0x2) mkdir(&(0x7f0000000300)='./bus\x00', 0x68) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000480)=ANY=[@ANYBLOB="59e5f703000000695b000000c00bb848"]) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000180)=0xe8) setxattr$security_capability(&(0x7f0000000100)='./file2\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x3, 0xffff}, {0x1, 0x71}], r1}, 0x18, 0x1) 5.848413965s ago: executing program 9 (id=5528): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @private=0xa010102}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key(&(0x7f0000000000)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) recvmsg$unix(r5, &(0x7f00000003c0)={0x0, 0xffffffffffffff04, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) shutdown(r4, 0x2) 5.846961701s ago: executing program 3 (id=5529): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000000c0)=0x2000000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000008c0)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000003c0)="be1c40114d26f4f247484a4893025f47b6b86c2dcc558d647f0c", 0x1a}], 0x1, 0x0, 0x0, 0x408d0}], 0x1, 0xc0001) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000006800010003001000fdffff7f00000000000000000c000200010000001500000a1d3b76fefa52ebc3ea62b7b0d9f689f63c5a3bbef0a3b5482e26d66041894eaeb36e538825f9c84cff9910147ee5"], 0x24}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x24, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_4={0x3, 0x1, 0x0, "8244b42a"}, @main=@item_4={0x3, 0x0, 0x9}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x5, "a90da5f6"}, @local=@item_4={0x3, 0x2, 0x0, "00000400"}]}}, 0x0}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}, @loopback}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x1000}}}}}}, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r7, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f00000002c0)=0xb9) getpid() mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0x1bf5f000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000100)={r8, 0x0, r6, 0x0, 0x80000}) 5.763086019s ago: executing program 4 (id=5530): ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x240448e1) timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) unshare(0x8000200) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x32) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) timer_settime(r0, 0x1, &(0x7f0000000440)={{0x77359400}, {0x77359400}}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0xf2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}], 0x1c) fstatfs(r2, &(0x7f0000000240)=""/199) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) sendmsg$inet_sctp(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000040)="05", 0x1}], 0x1, &(0x7f0000000340)=[@sndrcv={0x30, 0x84, 0x1, {0x4002, 0x0, 0x41, 0x8, 0x2, 0xffffffff, 0x3, 0x7fffffff}}], 0x30}, 0x0) timer_delete(r0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r4, &(0x7f0000000080)=""/237, 0xed, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r4, 0x80044dfe, &(0x7f00000000c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r4) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, r7, 0x800, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xd3db2e5e242787a5}, 0x40080) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@mpls_getroute={0x24, 0x1a, 0x200, 0x70bd29, 0x25dfdbfc, {0x1c, 0x80, 0x14, 0x3, 0xfe, 0x4, 0xff, 0x7, 0x2400}, [@RTA_OIF={0x8, 0x4, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x46800}, 0x4000000) 5.20012583s ago: executing program 7 (id=5531): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000080)=0xd68c) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x4, 0x0}}]}, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000100)={r5, 0x4, 0x0, 0x8}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r6 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20048000) fchdir(r7) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x804000000000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) 4.496165935s ago: executing program 0 (id=5532): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b02, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mlockall(0x1) mlockall(0x5) sched_setaffinity(r3, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) 4.09112595s ago: executing program 7 (id=5533): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') prlimit64(0x0, 0x1, &(0x7f00000004c0)={0xfffffffe, 0xdf2}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(r0, &(0x7f0000003540)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x4, 0x1, 0x3, {0xa, 0x4e23, 0x5, @local, 0xef}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)}, {&(0x7f0000000200)="8c9fd6538ffca4018a3fda79a054b7777946747bf18978c3a31ea4bddb4e1b6f9e3d343423f728c444d8cefb4fc8e9fe3b26e6", 0x33}], 0x2, &(0x7f0000000900)=ANY=[@ANYBLOB="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"/572], 0x1c8}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000006c0)="077692cb17da6acc006c6edf9f3b8ffc27b97ae0638cec3365babedae927d26e2d3b1b4021f379ddc3657cd9dd947d0f513ece8151084d661973de57dab0fb0d52b0b566a405d419aa158e952afe33f3ec57d1ff685f9be464bee89f691536f3b17c478ffa2968d843a9fc9276eb233f68ce80367e15c6ebe73d4e8f3f5e551b31e872822437128eef791cb9e712e5d4664b66decd4b4c0d2e6bf5fa691ac5a1d7c31628b501ba0037c6a5be6a97c4fb6386c586dc90033896efae35576a4d9d4836a43bd14dccaf6b885aea18f5fb986ce01f24a7c41cc795", 0xd9}, {&(0x7f0000000800)="94e51e8b47f8ac8e0ef9f0e10693193afc4a9f0d30fc9e1daa0bd6cdd2061d82d7ef19409cf88384fa84609236d85ca81cba98f88c7bd9cacb28953d5a24a64cd55932d66ccff0a48b6c85e5ae895004b7caba110960de1bea781762be10d74173d91c9ef73f979281136d913abe620bc94d84c9ae84cf2f74202d450bf4aeed9ac52e4060a95393aa47a0962a9f437551a8473f51d0e55fd0b65718cd33b3b9e93102e9b8c738564bde64db4a01e7ebe2d1cfe650b8", 0xb6}, {&(0x7f0000000380)="b28b", 0x2}, {&(0x7f0000000400)="1b4500dcb692bd585696515b6ed5ca4d83818baae092085c89b3f1b7f2d401253b06a3cf86f227e18e610653fc50fcac6c696ccdde59c1afea3d0f2b0821d4fdaa28f81e60f73561af304aced5a67042b6ce737fe3c91878628777eb60e3913bb736c5a70dd0b3858ab4a5e0406d", 0x6e}], 0x4, &(0x7f0000003700)=[{0x198, 0x101, 0x6, "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"}, {0x78, 0x29, 0x7, "44a918d65d15be91b1523fa92b906fabf4bf186ba627f915a026dac62d14d1a1623146a6301cca4cd60f436493d00948d0e09b7bd7c3156a24815fcab770072609a7c77ed02131de2831af602dd297fd4daed7139c8e001968c2fcb2071a0b1b0e9f1b475158"}, {0x20, 0x10a, 0x8, "23a57c294789fb7f6aab512b"}, {0xe0, 0x10d, 0x80000000, "2a7e3db135230e20a88da5653592b4a01cd72a5e929e0b72752f4c3d22020597836a71d7283e95df02f062f4afbc3a34725c6931b6a1e4f4b0c7b5f8fe63eadba888e575361e7d97a83ac931a233c100bcd066b636b86ef270b01f993292d9e96ca65194e7c9cac9cc291716e193cf7b06ecbde53d9cf2547cc952e5d913ba40f91583c97f2a5f90ac005916cd7ed6fde1ed695150f133001e1028dd441c7038d7b6e8e6eb3eccb9d95cddf657813330c32cb68ff9da12325212504224ac0649152e060a68368089269b9407"}], 0x310}}, {{&(0x7f0000000bc0)=@caif=@rfm={0x25, 0x10, "f15f01b820991f906d5c0949b762c4f6"}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000c40)="d097e82604fd7bd0829214080951575af62a35af00328da2f02e9f534c9588670e7a8f5dd73a5f5e2835abe9cef54c3f71a1cece51ffacbbc7cec86f0ad6f4429a809dd454eb04c663ac547d5d73fa0205cd4ef0a676c204082548d84efd825cfd2e5af7b23f37d2fd5cb93e41e8c6", 0x6f}, {&(0x7f0000000cc0)="366d756afc7aec3d95593f7858297f19bb00593e817e8c685bdb78039bbeed5eb184ea7698306301423c716bf150e0f8248760bf7547ed48a0ee348a2541a190f57cde20e38bce26c761ab695ac0b44c3be91b2506d478ed73668a7e0de0b31fc96d63b0b2c764b4a3aa8a5ca969561e207244c59c1989bf33512c04b36e4a7db971cb1bafdb52368a3c0631a3", 0x8d}, {&(0x7f0000000d80)="c5c08a26561fc7a6298af3b2a6914f6b12c0e91968a052e25dcb7911776102bda806d03111b5d4a08fcc25e492d515e58e2becd753c82125e8b203d9115bdf8de81f2617a95316c7fded5a89ec17e717aa2c75421cfc1f99cd2ad7e76f7a6db11f794631f82c6f0e5edb9768c71f2828ad97a9e76246f2a5e95fa4767b7ab6256461cc070808ec626de197627b5ec002842dd7827d175d8e58bed027c0d5f35fbb1bb5a1177d2513c9f8346fcedc2b88810afc96ddf2df95826920d6bde6425d605c3314d9517d3fd6e7fbdefb34a920f38d7e03efd19e44168b7d6c11dc5b", 0xdf}], 0x3}}, {{&(0x7f0000000ec0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x3, 0x2, 0x2, {0xa, 0x4e24, 0x7ff, @mcast2, 0x7}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000f40)="b25d763a5d0ad6641b6383f10d51b33fcab6fe45778c5f04466321f3b0f47675054d410d69ff5d30512ca9bdd85f886f7f73035823175bf2b96bd4cf07d442fd137722c3eb4b16e2d61b431ab133b3cf432fe480f987cce6dce40b2de2779984d1ca7388e744d45c66641e69197a68ea9e0473b25103fbe2a8db", 0x7a}, {&(0x7f0000000fc0)="8159dbf648068e8f74a0d40014f1808f0369f59e7ce0dbfe7ce6eeda8013d4e8691bbe79d1c73902ccd69fd1ba129b4080903c26aae143d52d516c1e380625d9eda43a85b0a125a8878762960b88c18a28e5184cddd93cc89b466892d5aec3ca1e5a37d3ec", 0x65}, {&(0x7f0000001040)="4362ad58413e206d1c79e1a20f2e27a8e11171a2e7f52d54422fd1918cb64f5cc20efb590b88a88e09871bfab6c62695795844d9dbf20e524724175f7bfb9ad5d25c5dbb69e339547aca7a5b2142e6c893b91b18d3364c7e3f360abdb9a074f6659304e8ae6ddf32b15f0083264fa0fa6e167d8e77ccd71d55e1889053f5c3683f2c6306eed2360bd04bbbe073de89de6f23a085abdd826176d6f8501d7d86", 0x9f}, {&(0x7f0000001100)="669074e67c943ce3ea2033f41ef419b2222350eae3ba6af4cfce7ded9cc397caadb561cc3849709980ec142318d6a5d8e4aeb87c6f910da959f111a24e1e1c1f0369d0fc92f3e8bf1fcd8ae627fc5f55aa1d2950511de3e19bf1b6089adbea715d8c8b6ca28144d9d21c136bfd96cf86ab9b0e721b0ca520d4d006b9a3a5a08cc536e13a42d629c10b5907259751190530564ec8998e18258f304e8f52495db8f891e770ce59a41cdb90a83418d9967d61d55a2463e6fe5dcda508bda4a0a6e8ac588d2cd7defe8ff0287570ee6ef12dfeccce9b5ad0542b115dfa60adaad0d332e11269d929d194ac3e8f996c4fc74372c728e283", 0xf5}, {&(0x7f0000001200)="5008218047893c9f74cd2e69b5e2e9e5566c5376a09da2c4aed26543ed51d63af66243f6df690afc893e676b9b166e3937ffb3fde6238f7ea792c08fafafe2f46b4b609d0b5c", 0x46}, {&(0x7f0000001280)="48cd2295e9faf8475e65c4f45219ffc8de965161144cc4b567d318769c9d3456be0faadf5487d98018d2910616c2d94cdea060550b9d0352a3e44c6ec96d6e", 0x3f}, {&(0x7f00000012c0)="a9b39c9de2467fb14a8fd0f70daafd3c061330ffffffffffffffffd87c9b3cde0f52c17431716d098a57ee90c54bcd40aa3aedb4dbf0c85952d45b3c44d6a2147a92805fdf00dcd42f6685b2178b934dbb80190ed0217cdfc5ccb17cec860955772964587025c72321f6260315ac0dd321bc214de9f3283a296e3fac24ffdcaa6136fdf5fca2724a0849da4258b847047ae7f418f4a3100cc76c0631a6ad5d4044759eb0d7bd1db1e3f04e8087", 0xad}, {&(0x7f0000001380)="3e89f0f7f6ca8bf5776525", 0xb}, {&(0x7f00000013c0)="9664f79b80fa9dd5de29ea7c7a804b86ea2650830bc0f24865dbec0ac647808f3cc413e59ef736e4e95bf10c904fc057a7a8f264494857a7fd056f559ee1708eadaad8a9c5a41df067c7fc2313a2511d10e21d3ac045f7d45721ff68abf0fa767afacffafcef9931d1a223292d748299c58c302d36a30f232876a366425fee52d73ae22c", 0x84}], 0x9}}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000001540)="e9a3e2e7dfe415308738a034af069577d50711774e6cce9091aadb192a29a27716e5b6ad42d4d1ee054289e8a17356766a53defca7947ea27a603e29799c5c520305bd0dfa5a010e47355bc2a2aa30eea8f0c3eeb04674", 0x57}, {&(0x7f00000015c0)="84081d1980fb355d332f737bf99a15cacac134b87e5e8dc121b2689d6be4685a85a435592461c62c69c3baad78e7221dc64ba5f65f7073b91af419b554dc326df1175e9bdb7c89ac8bf653f47fb264bcd8ee9827e03a5b178cd9febf124408d38380575bfaeb92e51c89024f3d5a888cba10685104d259ce14e19aeb32780735b98d553a1c165281abb8d80dcc5be346c0a50004ea19c0c761cb41a8706b85b4102327f6b97dba281babccf2378fedc983192adc50a1205611394e8d8ec8cc251be7b361512448cc14bc748a73e2c00b0e23d525567096ef6152e921e324b07a74fb56aafdae", 0xe6}, {&(0x7f00000016c0)="2acae73fb9902f3c2ef1d3ee30ae3f4993b00ed4948ea7145b", 0x19}, {&(0x7f0000001700)="96745b084f82fe01f5f567b6a685fcde4cacb24ab938c9f222fe6e3bef8858d9748491d7cec03cbe2805b64379cc6f8392a17351699f650eafe4181a69beefffa84bb611d23c1d303cd14a6195276b624882ba5338539339f5511493960b4a0ad088db9f18db09fe9b3400c94d0b4cd25f11e3d8a11f6647d9da82298fee913b814dd91a9bccc03bb584c72801f2312626dc99023af59d20b2fadb7ca58f5bf6f7a90f87b872e99bd5b5cd0cb8202c650e1c9c98aa5977cbe15492e77380f1d973b4c2a82f4a30aac889121cf03fd561b9d039c68b366e596dde", 0xda}, {&(0x7f0000001800)="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", 0x1000}], 0x5, &(0x7f0000003a40)=ANY=[@ANYBLOB="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"], 0x490}}, {{&(0x7f0000002d40)=@l2tp6={0xa, 0x0, 0xfffffff7, @empty, 0x80, 0x4}, 0x80, &(0x7f0000003340)=[{&(0x7f0000002dc0)="5192ff54987ea050f7b5a293c74970e58bbaa765f1a7f8d6242b879711519f9ad68b79ca1b5a488a20ce5cc5def0bad9f6fe3fef331bd5fa6232fca873f90835663c37c07ab7ccb1350c44c2c8620a6ccc72bd3235c7e97a49ff1f13074c5ff8f6c171ae8ec26cf753575544ac1d5a7a119a7f1c17e6d40700389c08eea0494ec9f38404f33e2ccf0200af06dfd358541444b39c5bf36c3cbc4da85b50bbd7275c9e", 0xa2}, {&(0x7f0000002e80)="86c32428b7c28758ca3a09d9bca86181af986dcccd970a78ae4985a96292e75bf65910736a887c91e19f0b7fcec08e97116faa5676b6ae479b85507b8462a5a6f5d050c4df683c18f44903a096e1bcdedd3095aa11fac58d67549fb5815c7afa9559c6ea36f6d1fbf5d496c79cf01ea7d938195cdeef032cda72001acff450e69f82fa0a4edf24388261f248d292266be6eefc293d1de6bad74419407b5a1ac18797528e769304e2391037bc42609c7f06cbc305a8319e62560e990e323fe5b20d31119dfca7e24e1def73b77be7be48a5bf", 0xd2}, {0x0}, {&(0x7f0000002fc0)}, {&(0x7f00000030c0)="eeb7c6fe31450318912fe09b1eeeb0c32ccf93fd112e1b3337a8894bf8120a406afeb3ad609b1f6d883646bd966f57ec2d7350c5", 0x34}, {&(0x7f0000003100)}, {&(0x7f0000003180)="d58c0398beeaf7deb652f14b436adef93afde3926e89f8e4d757e7521901832ee833cc29095875cf09e6131b33418979c8172d457b7802f7f502c487073179549696d806e39c537dc9246af192a849b59227eea3febbda3ed25339b2a168ab67d35ad4566948077ed00fa5eea41d49cc3a95e1ff999158b1e9068d581db904a98708450f0e572befa3ca", 0x8a}, {&(0x7f0000003240)="baf50dfd1a25394b3beeee34d1adfbc68283044d7a72d59dec5113a7a2f20045436a32c8396e79c90039caa88898289cad4a7628e4642cdc5990f388d0d204b43bbd191b2ba99517412c6058d3c8aff5e533d6cca155fce99a50fdfa64527a459f2f51070276f142fdcc26497c1b65d99b45e9bb01ce0e476becbf2c1a53ee0de304ef3032fd342410f525c227e0c3601ff49387099d2c3875e788c8690e79ac", 0xa0}, {&(0x7f0000003300)="5326d95f2bcc", 0x6}], 0x9, &(0x7f0000003400)=[{0xc0, 0x10c, 0x1, "d7419c1f57bcd284f23016665c4c5da1fd4d53fa01a88ea5c7b60d4c81c27ccef6838789b659e381dfca26915b1d4127637e3b06f117f6df7b7846b1a929e0c5fcc40ce4e846e2d86a85e9918bf794aa253bafba7a504d1fb36c778c06173b7cfcc3e32ae81ca5e8951a391b36db26562bda12e5ccdc90a9c64475b035e0ca9d59651f287b6cb468bb99be78915c1c0cb52752a2fec93ad1b7629c583889b3dfdcd4d79cb745003c00bb4efb3b712c"}, {0x48, 0x0, 0x4, "de698fa91f3ac1ffb5013bd3e2c8d51af77067acc7a0c1c52c35a3ad98ecb4f6dfa6e7edc90000070ff2147800"/55}], 0x108}}], 0x6, 0x80) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x200000) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e1e, 0x4, @dev={0xfe, 0x80, '\x00', 0xd}, 0x7ff}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add405000000000000000a117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000240)='wg2\x00', 0x4) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000036c0)=0xc) 3.83346432s ago: executing program 9 (id=5534): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0xc084) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f00000000c0)=0x1200) fsetxattr$security_evm(r2, 0x0, 0x0, 0x0, 0x3) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x6, 0xe12, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "645b6048a2e4931133f6d9919fd48557d76811cd874f3c107bbfc1c8831026d40798a2be4cc414e02216198977dc3d41ed0880c64c39e5f4059bae641ed15112"}}, 0x80}}, 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)="5fe0fe374ca2fb7f091667ccda4e740b1842cdaadf5b2730d562b68cdc33096803e48a2d4b3032c1c33fa18d55f3edeec136073a01cacec2aa4d9c1bc817967eb2328bcbc23c0a20b1e088c3ff655def1df3aa2ee13982c0940daa825c4f7e17641779f4aca96a24fc554c6c4611a7640103532991dad78967ec543f498cff3aa70a9e821fcfda29b53d92c04535a77e2a882903aa5194b44e5010ce53130b4761f796eb153273e379ddc88cf23f6c8f66779b3d376c50f9e9a82679e6", 0xbd}, {0x0}], 0x2, 0x0, 0x0, 0x4000}, 0x4044060) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0x9, 0x0, 0x0, 0x0, 0x10, 0x0, 0x1, 0x7f, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x84, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) sendmsg$nl_route(r0, 0x0, 0x8000002) 3.51740423s ago: executing program 4 (id=5535): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SNDRV_PCM_IOCTL_RESUME(0xffffffffffffffff, 0x4147, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40bebf54bcdbce, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) socket$inet6_sctp(0xa, 0x1, 0x84) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r7, &(0x7f0000002f00)={0xa, 0x4e24, 0x10000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3}, 0x1c) inotify_init() 1.989914467s ago: executing program 4 (id=5536): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x88203, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ddd0c0100a1a0401d4dd010203010902120001000000000904"], 0x0) sendmsg$inet(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000300)="4a61255008160547379a780ac395fbc3f600cd54059b6e51d30394c227718293e5afddd7b2c9817998aa30fdb0a6ab9648167dfd54fa93ac115711aaf2703a324641edb30c9768958610df85d67008fd3cb11c6d3225b8d0acb65e30d5528bba1b28d1b0d1313f2c46d7a0816a517ef340de132ea53735d0fbf50e14975094911797bd888bb9ff3fac8dfec9fe99eda2afbeae0cf931505a65716a529bd518ebb8b388cb88f379b591477e25085ba11bfeee273a5d654e1fdd9f4d277728b96e5b70a80aaa42f2dc3360c16372e0672859eda94bb1852d3f18449843a5bebb4629360d8587ca", 0xe6}], 0x1, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0x6d, 0x3, 0x8}]}}}], 0x30}, 0x24000081) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xfff2}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x3}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) 1.793691421s ago: executing program 3 (id=5537): r0 = syz_open_procfs(0x0, 0x0) lseek(r0, 0x1, 0x0) r1 = socket(0x2a, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000080)="672e670fc7baf5ceb9230200000f320fc5b0040000000f9a000000008b000f01cfc4e21d4501c74424ba00e40000660f38823d0e3000005224020f01c50000c744240600000000c4e17de69222ad2eec0fc76e04b8200fae8266bafc0c66b8004066ef", 0x63}], 0x1, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000300)=""/102392, 0x18ff8) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) 0s ago: executing program 0 (id=5538): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000404f045db6000006000001090224000100000000090400000103000300092100000001220500090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYRES8], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x20}, 0x94) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0xffffffff, 0x2}, 0xc) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000800000000e0ffffff82000400000000000000400006040000000000eb4765899f864d5ab181b6182bb4298619326abcad4102780febfd6733fdf2c4ce2cf8c6b5e49bb6ef217a"], 0x0, 0x32, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7ce8001602000000008cc01d76bcbb50e8000000", @ANYBLOB='\x00'/17, @ANYRES32=0x0], 0x50) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000003c0)={{0xa, 0x4e21, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf2}, {0xa, 0x4e21, 0x4, @mcast2, 0x7}, 0x0, {[0x5, 0x8, 0x0, 0x1, 0x8001, 0x3, 0x0, 0x4]}}, 0x5c) syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x40000, 0x0, 0x1000000, 0x0, 0xc5c4, 0x2}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000000)={0x6, {"e512864f2c63b42b1e937260904ce544", "b80b00", "98fed86df169f801002f69ff0008e800"}, 0x3ff, 0x5}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="20110800005110e1fbc057bbcc61dc56f17e35dc4dcd58a92aa78d038f521e4487ce68bf539a9ab7c8581df2e4aa798919759b61474cac911347462cc680a5f6f4720180557dc8d128633de2959efafffffffe2785c55725f4c1f04f5d93cf"], 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1}, 0x0, 0x0}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040), 0xc) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x10, 0x7, [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x3, 0x1, 0x2, 0x5, {0x9, 0x21, 0x3, 0xf, 0x1, {0x22, 0xff8}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x7, 0x4, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x1, 0xe, 0x1}}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x110, 0xf5, 0x2, 0x9, 0x20, 0x57}, 0x5, &(0x7f0000000540)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x44f}}, {0x31, &(0x7f00000005c0)=@string={0x31, 0x3, "61efec674d3fd5a114de3f28d5e04e22b75f92ba740e0fcb06c2b06384cb05e8227186276a293d63881d85f45019a5"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1404}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x407}}]}) writev(r5, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1) kernel console output (not intermixed with test programs): b:00007fe879c31028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1868.356757][T28859] RAX: ffffffffffffffda RBX: 00007fe879015fa0 RCX: 00007fe878d9c799 [ 1868.356770][T28859] RDX: 0000000000000001 RSI: 0000200000002800 RDI: 0000000000000006 [ 1868.356781][T28859] RBP: 00007fe879c31090 R08: 0000000000000000 R09: 0000000000000000 [ 1868.356794][T28859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1868.356805][T28859] R13: 00007fe879016038 R14: 00007fe879015fa0 R15: 00007ffd3f6fddb8 [ 1868.356833][T28859] [ 1870.751572][T28895] trusted_key: encrypted_key: insufficient parameters specified [ 1870.844108][T28892] SELinux: Context system_u:object_r:dmidecode_exec_t:s0 is not valid (left unmapped). [ 1870.854431][ T5863] usb 10-1: new high-speed USB device number 67 using dummy_hcd [ 1870.874256][ T29] audit: type=1400 audit(1772154894.281:2275): avc: denied { relabelto } for pid=28889 comm="syz.4.5118" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:dmidecode_exec_t:s0" [ 1870.990291][ T29] audit: type=1400 audit(1772154894.281:2276): avc: denied { associate } for pid=28889 comm="syz.4.5118" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dmidecode_exec_t:s0" [ 1871.023438][T28895] netlink: 'syz.3.5117': attribute type 10 has an invalid length. [ 1871.033759][T28895] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5117'. [ 1871.071750][ T5863] usb 10-1: Using ep0 maxpacket: 8 [ 1871.077083][T18288] IPVS: starting estimator thread 0... [ 1871.078683][ T5863] usb 10-1: config 6 has an invalid interface number: 8 but max is 1 [ 1871.091690][T28895] batman_adv: batadv0: Adding interface: vlan1 [ 1871.099473][T28895] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1871.135356][T28895] batman_adv: batadv0: Interface activated: vlan1 [ 1871.172915][ T5863] usb 10-1: config 6 has an invalid interface number: 21 but max is 1 [ 1871.183779][ T5863] usb 10-1: config 6 has no interface number 0 [ 1871.190536][ T5863] usb 10-1: config 6 has no interface number 1 [ 1871.196795][ T5863] usb 10-1: config 6 interface 8 has no altsetting 0 [ 1871.205406][ T5863] usb 10-1: config 6 interface 21 has no altsetting 0 [ 1871.237972][ T5863] usb 10-1: New USB device found, idVendor=413c, idProduct=81a3, bcdDevice=1d.fd [ 1871.256596][ T5863] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1871.276287][T28901] IPVS: using max 46 ests per chain, 110400 per kthread [ 1871.536053][ T5863] usb 10-1: Product: syz [ 1871.549764][T28906] FAULT_INJECTION: forcing a failure. [ 1871.549764][T28906] name failslab, interval 1, probability 0, space 0, times 0 [ 1871.556905][ T5863] usb 10-1: Manufacturer: syz [ 1871.572373][ T5863] usb 10-1: SerialNumber: syz [ 1871.601485][T28906] CPU: 1 UID: 0 PID: 28906 Comm: syz.0.5121 Tainted: G L syzkaller #0 PREEMPT(full) [ 1871.601519][T28906] Tainted: [L]=SOFTLOCKUP [ 1871.601525][T28906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1871.601537][T28906] Call Trace: [ 1871.601544][T28906] [ 1871.601552][T28906] dump_stack_lvl+0x100/0x190 [ 1871.601587][T28906] should_fail_ex.cold+0x5/0xa [ 1871.601610][T28906] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1871.601633][T28906] should_failslab+0xc2/0x120 [ 1871.601664][T28906] __kmalloc_noprof+0xe0/0x850 [ 1871.601695][T28906] tomoyo_realpath_from_path+0xb6/0x690 [ 1871.601723][T28906] tomoyo_path_number_perm+0x23c/0x580 [ 1871.601753][T28906] ? tomoyo_path_number_perm+0x22e/0x580 [ 1871.601785][T28906] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1871.601852][T28906] ? find_held_lock+0x2b/0x80 [ 1871.601878][T28906] ? __fget_files+0x215/0x3d0 [ 1871.601897][T28906] ? hook_file_ioctl_common+0x146/0x410 [ 1871.601943][T28906] ? __fget_files+0x21f/0x3d0 [ 1871.601967][T28906] security_file_ioctl+0xd3/0x230 [ 1871.601990][T28906] __x64_sys_ioctl+0xb7/0x210 [ 1871.602017][T28906] do_syscall_64+0x106/0xf80 [ 1871.602037][T28906] ? clear_bhb_loop+0x40/0x90 [ 1871.602060][T28906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1871.602079][T28906] RIP: 0033:0x7fe878d9c799 [ 1871.602095][T28906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1871.602113][T28906] RSP: 002b:00007fe879c31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1871.602131][T28906] RAX: ffffffffffffffda RBX: 00007fe879015fa0 RCX: 00007fe878d9c799 [ 1871.602144][T28906] RDX: 0000000000000000 RSI: 000000004008550c RDI: 0000000000000003 [ 1871.602160][T28906] RBP: 00007fe879c31090 R08: 0000000000000000 R09: 0000000000000000 [ 1871.602171][T28906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1871.602181][T28906] R13: 00007fe879016038 R14: 00007fe879015fa0 R15: 00007ffd3f6fddb8 [ 1871.602209][T28906] [ 1871.605781][T28906] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1873.999964][T28924] FAULT_INJECTION: forcing a failure. [ 1873.999964][T28924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1874.016278][T28924] CPU: 0 UID: 0 PID: 28924 Comm: syz.0.5125 Tainted: G L syzkaller #0 PREEMPT(full) [ 1874.016312][T28924] Tainted: [L]=SOFTLOCKUP [ 1874.016320][T28924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1874.016332][T28924] Call Trace: [ 1874.016339][T28924] [ 1874.016347][T28924] dump_stack_lvl+0x100/0x190 [ 1874.016390][T28924] should_fail_ex.cold+0x5/0xa [ 1874.016417][T28924] _copy_from_user+0x2e/0xd0 [ 1874.016445][T28924] ax25_setsockopt+0x3e4/0x1230 [ 1874.016477][T28924] ? __pfx_ax25_setsockopt+0x10/0x10 [ 1874.016513][T28924] ? __pfx_ax25_setsockopt+0x10/0x10 [ 1874.016542][T28924] do_sock_setsockopt+0xf3/0x1d0 [ 1874.016569][T28924] __sys_setsockopt+0x195/0x220 [ 1874.016603][T28924] __x64_sys_setsockopt+0xbd/0x160 [ 1874.016634][T28924] ? do_syscall_64+0x95/0xf80 [ 1874.016655][T28924] ? lockdep_hardirqs_on+0x78/0x100 [ 1874.016675][T28924] do_syscall_64+0x106/0xf80 [ 1874.016702][T28924] ? clear_bhb_loop+0x40/0x90 [ 1874.016729][T28924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1874.016750][T28924] RIP: 0033:0x7fe878d9c799 [ 1874.016769][T28924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1874.016789][T28924] RSP: 002b:00007fe879c31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1874.016809][T28924] RAX: ffffffffffffffda RBX: 00007fe879015fa0 RCX: 00007fe878d9c799 [ 1874.016823][T28924] RDX: 0000000000000003 RSI: 0000000000000101 RDI: 0000000000000004 [ 1874.016835][T28924] RBP: 00007fe879c31090 R08: 0000000000000004 R09: 0000000000000000 [ 1874.016848][T28924] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 1874.016861][T28924] R13: 00007fe879016038 R14: 00007fe879015fa0 R15: 00007ffd3f6fddb8 [ 1874.016890][T28924] [ 1874.207605][T23418] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1874.237758][T28936] FAULT_INJECTION: forcing a failure. [ 1874.237758][T28936] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1874.250964][T28936] CPU: 0 UID: 0 PID: 28936 Comm: syz.7.5129 Tainted: G L syzkaller #0 PREEMPT(full) [ 1874.250984][T28936] Tainted: [L]=SOFTLOCKUP [ 1874.250989][T28936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1874.250997][T28936] Call Trace: [ 1874.251001][T28936] [ 1874.251005][T28936] dump_stack_lvl+0x100/0x190 [ 1874.251028][T28936] should_fail_ex.cold+0x5/0xa [ 1874.251044][T28936] _copy_to_user+0x32/0xd0 [ 1874.251061][T28936] simple_read_from_buffer+0xcb/0x170 [ 1874.251084][T28936] proc_fail_nth_read+0x1af/0x230 [ 1874.251101][T28936] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1874.251117][T28936] ? rw_verify_area+0xce/0x6d0 [ 1874.251131][T28936] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1874.251145][T28936] vfs_read+0x1e4/0xb30 [ 1874.251163][T28936] ? __pfx_vfs_read+0x10/0x10 [ 1874.251178][T28936] ? __fget_files+0x215/0x3d0 [ 1874.251193][T28936] ? __fget_files+0x21f/0x3d0 [ 1874.251208][T28936] ksys_read+0x12a/0x250 [ 1874.251223][T28936] ? __pfx_ksys_read+0x10/0x10 [ 1874.251243][T28936] do_syscall_64+0x106/0xf80 [ 1874.251255][T28936] ? clear_bhb_loop+0x40/0x90 [ 1874.251269][T28936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1874.251281][T28936] RIP: 0033:0x7f0e3b75cfce [ 1874.251291][T28936] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1874.251302][T28936] RSP: 002b:00007f0e3c5e8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1874.251314][T28936] RAX: ffffffffffffffda RBX: 00007f0e3c5e96c0 RCX: 00007f0e3b75cfce [ 1874.251322][T28936] RDX: 000000000000000f RSI: 00007f0e3c5e90a0 RDI: 0000000000000004 [ 1874.251329][T28936] RBP: 00007f0e3c5e9090 R08: 0000000000000000 R09: 0000000000000000 [ 1874.251336][T28936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1874.251342][T28936] R13: 00007f0e3ba16038 R14: 00007f0e3ba15fa0 R15: 00007ffd810a6918 [ 1874.251358][T28936] [ 1874.610691][T23418] usb 5-1: Using ep0 maxpacket: 8 [ 1874.623770][T23418] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1874.633037][T23418] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1874.641852][T23418] usb 5-1: Product: syz [ 1874.646141][T23418] usb 5-1: Manufacturer: syz [ 1874.650756][T23418] usb 5-1: SerialNumber: syz [ 1874.692350][T23418] usb 5-1: config 0 descriptor?? [ 1874.711041][T23418] gspca_main: se401-2.14.0 probing 047d:5003 [ 1874.771862][T28942] FAULT_INJECTION: forcing a failure. [ 1874.771862][T28942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1874.864615][ T5863] usb 10-1: USB disconnect, device number 67 [ 1874.876013][T28942] CPU: 0 UID: 0 PID: 28942 Comm: syz.0.5131 Tainted: G L syzkaller #0 PREEMPT(full) [ 1874.876035][T28942] Tainted: [L]=SOFTLOCKUP [ 1874.876039][T28942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1874.876046][T28942] Call Trace: [ 1874.876051][T28942] [ 1874.876056][T28942] dump_stack_lvl+0x100/0x190 [ 1874.876079][T28942] should_fail_ex.cold+0x5/0xa [ 1874.876094][T28942] _copy_from_user+0x2e/0xd0 [ 1874.876113][T28942] copy_msghdr_from_user+0x9f/0x4f0 [ 1874.876132][T28942] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1874.876154][T28942] ___sys_sendmsg+0x106/0x1e0 [ 1874.876169][T28942] ? __pfx____sys_sendmsg+0x10/0x10 [ 1874.876202][T28942] __sys_sendmsg+0x170/0x220 [ 1874.876213][T28942] ? __pfx___sys_sendmsg+0x10/0x10 [ 1874.876234][T28942] do_syscall_64+0x106/0xf80 [ 1874.876249][T28942] ? clear_bhb_loop+0x40/0x90 [ 1874.876263][T28942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1874.876274][T28942] RIP: 0033:0x7fe878d9c799 [ 1874.876285][T28942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1874.876296][T28942] RSP: 002b:00007fe879c31028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1874.876308][T28942] RAX: ffffffffffffffda RBX: 00007fe879015fa0 RCX: 00007fe878d9c799 [ 1874.876316][T28942] RDX: 0000000004004000 RSI: 0000200000001b80 RDI: 0000000000000003 [ 1874.876323][T28942] RBP: 00007fe879c31090 R08: 0000000000000000 R09: 0000000000000000 [ 1874.876330][T28942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1874.876337][T28942] R13: 00007fe879016038 R14: 00007fe879015fa0 R15: 00007ffd3f6fddb8 [ 1874.876352][T28942] [ 1875.087093][T28929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1875.124303][T28929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1875.289886][T28945] FAULT_INJECTION: forcing a failure. [ 1875.289886][T28945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1875.381233][T28945] CPU: 1 UID: 0 PID: 28945 Comm: syz.9.5132 Tainted: G L syzkaller #0 PREEMPT(full) [ 1875.381265][T28945] Tainted: [L]=SOFTLOCKUP [ 1875.381272][T28945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1875.381284][T28945] Call Trace: [ 1875.381291][T28945] [ 1875.381299][T28945] dump_stack_lvl+0x100/0x190 [ 1875.381337][T28945] should_fail_ex.cold+0x5/0xa [ 1875.381366][T28945] _copy_from_user+0x2e/0xd0 [ 1875.381396][T28945] copy_msghdr_from_user+0x9f/0x4f0 [ 1875.381425][T28945] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1875.381467][T28945] ___sys_sendmsg+0x106/0x1e0 [ 1875.381496][T28945] ? __pfx____sys_sendmsg+0x10/0x10 [ 1875.381559][T28945] __sys_sendmsg+0x170/0x220 [ 1875.381580][T28945] ? __pfx___sys_sendmsg+0x10/0x10 [ 1875.381631][T28945] do_syscall_64+0x106/0xf80 [ 1875.381653][T28945] ? clear_bhb_loop+0x40/0x90 [ 1875.381680][T28945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1875.381701][T28945] RIP: 0033:0x7f0df8f9c799 [ 1875.381719][T28945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1875.381740][T28945] RSP: 002b:00007f0df9ecb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1875.381759][T28945] RAX: ffffffffffffffda RBX: 00007f0df9215fa0 RCX: 00007f0df8f9c799 [ 1875.381773][T28945] RDX: 0000000020000040 RSI: 00002000000057c0 RDI: 0000000000000003 [ 1875.381786][T28945] RBP: 00007f0df9ecb090 R08: 0000000000000000 R09: 0000000000000000 [ 1875.381804][T28945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1875.381816][T28945] R13: 00007f0df9216038 R14: 00007f0df9215fa0 R15: 00007ffd4590f828 [ 1875.381844][T28945] [ 1876.346337][T23418] gspca_se401: read req failed req 0x06 error -19 [ 1876.407205][T23418] usb 5-1: USB disconnect, device number 76 [ 1877.496927][ T29] audit: type=1400 audit(1772154900.483:2277): avc: denied { ioctl } for pid=28966 comm="syz.4.5139" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x5628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1877.958656][T28976] netlink: 'syz.4.5143': attribute type 23 has an invalid length. [ 1878.634746][T18288] libceph: connect (1)[c::]:6789 error -101 [ 1878.675383][T18288] libceph: mon0 (1)[c::]:6789 connect error [ 1878.737881][T28979] ceph: No mds server is up or the cluster is laggy [ 1879.082022][T28998] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5147'. [ 1879.390621][T28993] can: request_module (can-proto-0) failed. [ 1881.471148][T29022] netlink: 'syz.9.5155': attribute type 23 has an invalid length. [ 1881.888552][T29000] 9p: Bad value for 'rfdno' [ 1881.966443][T29025] FAULT_INJECTION: forcing a failure. [ 1881.966443][T29025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1881.987102][T29025] CPU: 1 UID: 0 PID: 29025 Comm: syz.4.5156 Tainted: G L syzkaller #0 PREEMPT(full) [ 1881.987137][T29025] Tainted: [L]=SOFTLOCKUP [ 1881.987145][T29025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1881.987158][T29025] Call Trace: [ 1881.987165][T29025] [ 1881.987174][T29025] dump_stack_lvl+0x100/0x190 [ 1881.987213][T29025] should_fail_ex.cold+0x5/0xa [ 1881.987241][T29025] _copy_to_user+0x32/0xd0 [ 1881.987292][T29025] simple_read_from_buffer+0xcb/0x170 [ 1881.987328][T29025] proc_fail_nth_read+0x1af/0x230 [ 1881.987357][T29025] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1881.987387][T29025] ? rw_verify_area+0xce/0x6d0 [ 1881.987413][T29025] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1881.987440][T29025] vfs_read+0x1e4/0xb30 [ 1881.987472][T29025] ? __pfx_vfs_read+0x10/0x10 [ 1881.987500][T29025] ? __fget_files+0x215/0x3d0 [ 1881.987527][T29025] ? __fget_files+0x21f/0x3d0 [ 1881.987556][T29025] ksys_read+0x12a/0x250 [ 1881.987588][T29025] ? __pfx_ksys_read+0x10/0x10 [ 1881.987626][T29025] do_syscall_64+0x106/0xf80 [ 1881.987647][T29025] ? clear_bhb_loop+0x40/0x90 [ 1881.987674][T29025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1881.987695][T29025] RIP: 0033:0x7f425d75cfce [ 1881.987714][T29025] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1881.987734][T29025] RSP: 002b:00007f425e5adfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1881.987754][T29025] RAX: ffffffffffffffda RBX: 00007f425e5ae6c0 RCX: 00007f425d75cfce [ 1881.987768][T29025] RDX: 000000000000000f RSI: 00007f425e5ae0a0 RDI: 0000000000000003 [ 1881.987781][T29025] RBP: 00007f425e5ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1881.987794][T29025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1881.987807][T29025] R13: 00007f425da16038 R14: 00007f425da15fa0 R15: 00007ffeb168eab8 [ 1881.987838][T29025] [ 1882.702741][ T9] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 1882.881020][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1882.896211][T23418] usb 10-1: new full-speed USB device number 68 using dummy_hcd [ 1882.916516][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1882.947088][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1882.989914][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1883.145232][T23418] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1883.172326][T23418] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1883.206899][T23418] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1883.233484][T23418] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1883.267844][ T9] usb 5-1: usb_control_msg returned -32 [ 1883.529023][T29035] 9p: Bad value for 'wfdno' [ 1883.555506][ T9] usbtmc 5-1:16.0: can't read capabilities [ 1883.651919][T29039] FAULT_INJECTION: forcing a failure. [ 1883.651919][T29039] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1883.683405][T29039] CPU: 1 UID: 0 PID: 29039 Comm: syz.4.5157 Tainted: G L syzkaller #0 PREEMPT(full) [ 1883.683439][T29039] Tainted: [L]=SOFTLOCKUP [ 1883.683446][T29039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1883.683458][T29039] Call Trace: [ 1883.683466][T29039] [ 1883.683475][T29039] dump_stack_lvl+0x100/0x190 [ 1883.683512][T29039] should_fail_ex.cold+0x5/0xa [ 1883.683529][T29039] _copy_to_user+0x32/0xd0 [ 1883.683547][T29039] simple_read_from_buffer+0xcb/0x170 [ 1883.683566][T29039] proc_fail_nth_read+0x1af/0x230 [ 1883.683587][T29039] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1883.683616][T29039] ? rw_verify_area+0xce/0x6d0 [ 1883.683642][T29039] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1883.683666][T29039] vfs_read+0x1e4/0xb30 [ 1883.683684][T29039] ? __pfx_vfs_read+0x10/0x10 [ 1883.683699][T29039] ? __fget_files+0x215/0x3d0 [ 1883.683713][T29039] ? __fget_files+0x21f/0x3d0 [ 1883.683732][T29039] ksys_read+0x12a/0x250 [ 1883.683762][T29039] ? __pfx_ksys_read+0x10/0x10 [ 1883.683799][T29039] do_syscall_64+0x106/0xf80 [ 1883.683814][T29039] ? clear_bhb_loop+0x40/0x90 [ 1883.683828][T29039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1883.683840][T29039] RIP: 0033:0x7f425d75cfce [ 1883.683851][T29039] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1883.683862][T29039] RSP: 002b:00007f425e58cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1883.683877][T29039] RAX: ffffffffffffffda RBX: 00007f425e58d6c0 RCX: 00007f425d75cfce [ 1883.683891][T29039] RDX: 000000000000000f RSI: 00007f425e58d0a0 RDI: 0000000000000004 [ 1883.683904][T29039] RBP: 00007f425e58d090 R08: 0000000000000000 R09: 0000000000000000 [ 1883.683917][T29039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1883.683929][T29039] R13: 00007f425da16128 R14: 00007f425da16090 R15: 00007ffeb168eab8 [ 1883.683955][T29039] [ 1883.915919][T23418] usb 10-1: usb_control_msg returned -32 [ 1884.005168][T19795] usb 5-1: USB disconnect, device number 77 [ 1884.042422][T23418] usbtmc 10-1:16.0: can't read capabilities [ 1884.590597][T29040] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1886.172790][ T29] audit: type=1400 audit(1772154907.442:2278): avc: denied { read write } for pid=29046 comm="syz.4.5162" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:dmidecode_exec_t:s0" [ 1886.210156][T18288] usb 10-1: USB disconnect, device number 68 [ 1886.399885][ T29] audit: type=1400 audit(1772154907.442:2279): avc: denied { open } for pid=29046 comm="syz.4.5162" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:dmidecode_exec_t:s0" [ 1886.726052][T29068] netlink: 'syz.9.5165': attribute type 10 has an invalid length. [ 1886.784350][T29069] netlink: 'syz.9.5165': attribute type 10 has an invalid length. [ 1887.101672][T29069] .`: (slave netdevsim0): Enslaving as an active interface with an up link [ 1887.241025][ T29] audit: type=1400 audit(1772154909.603:2280): avc: denied { mount } for pid=29076 comm="syz.3.5168" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1887.521977][T29077] geneve2: entered promiscuous mode [ 1887.533727][T29077] geneve2: entered allmulticast mode [ 1887.539192][T18288] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1887.556693][ T9449] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1887.566163][ T9449] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1887.576205][ T9449] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1887.586379][ T9449] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1887.814642][T18288] usb 5-1: device descriptor read/64, error -71 [ 1888.069475][T18288] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1888.082774][T29085] usb usb8: usbfs: process 29085 (syz.7.5169) did not claim interface 0 before use [ 1888.136947][T29091] can: request_module (can-proto-0) failed. [ 1888.244396][T18288] usb 5-1: device descriptor read/64, error -71 [ 1888.349021][T18601] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1888.371020][T18288] usb usb5-port1: attempt power cycle [ 1888.690684][T29091] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5170'. [ 1889.047578][T18288] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1889.075313][T18288] usb 5-1: device descriptor read/8, error -71 [ 1889.280133][T29103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5173'. [ 1889.341729][T18288] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1889.381924][T18288] usb 5-1: device descriptor read/8, error -71 [ 1889.517219][T18288] usb usb5-port1: unable to enumerate USB device [ 1891.262526][T29126] input: syz1 as /devices/virtual/input/input80 [ 1891.682886][ T29] audit: type=1400 audit(1772154913.737:2281): avc: denied { mount } for pid=29129 comm="syz.9.5181" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 1892.866215][ T29] audit: type=1400 audit(1772154914.850:2282): avc: denied { ioctl } for pid=29142 comm="syz.3.5184" path="socket:[121662]" dev="sockfs" ino=121662 ioctlcmd=0x942d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1895.125400][T29172] netlink: 57675 bytes leftover after parsing attributes in process `syz.9.5191'. [ 1895.172566][T29175] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5190'. [ 1895.401131][T29168] can: request_module (can-proto-0) failed. [ 1895.438152][ T29] audit: type=1400 audit(1772154917.273:2283): avc: denied { shutdown } for pid=29171 comm="syz.9.5191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1895.517595][ T29] audit: type=1326 audit(1772154917.338:2284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29174 comm="syz.3.5192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb50e79c799 code=0x7ffc0000 [ 1895.578976][ T29] audit: type=1326 audit(1772154917.338:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29174 comm="syz.3.5192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb50e79c799 code=0x7ffc0000 [ 1895.637594][ T29] audit: type=1326 audit(1772154917.338:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29174 comm="syz.3.5192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb50e79c799 code=0x7ffc0000 [ 1895.677575][ T29] audit: type=1326 audit(1772154917.338:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29174 comm="syz.3.5192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb50e79c799 code=0x7ffc0000 [ 1895.701652][ T29] audit: type=1326 audit(1772154917.338:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29174 comm="syz.3.5192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb50e79c799 code=0x7ffc0000 [ 1895.725715][ T29] audit: type=1326 audit(1772154917.338:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29174 comm="syz.3.5192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb50e79c799 code=0x7ffc0000 [ 1895.767415][ T29] audit: type=1326 audit(1772154917.338:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29174 comm="syz.3.5192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb50e79c799 code=0x7ffc0000 [ 1895.767420][T19795] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1896.761956][T25877] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 1896.779780][T29185] ALSA: mixer_oss: invalid OSS volume '' [ 1896.985773][T29198] openvswitch: netlink: VXLAN extension 111 out of range max 1 [ 1897.220673][ T24] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1897.320991][T29208] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5200'. [ 1897.547564][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 1897.559050][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1897.584508][ T24] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1897.604703][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1897.648040][ T24] usb 5-1: config 0 descriptor?? [ 1897.884495][ T24] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1897.914458][T29200] SELinux: failed to load policy [ 1898.223434][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 1898.223458][ T29] audit: type=1400 audit(1772154919.873:2304): avc: denied { ioctl } for pid=29213 comm="syz.7.5202" path="socket:[121770]" dev="sockfs" ino=121770 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1898.228541][T29216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1898.292434][T29216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1898.720775][ T9] usb 5-1: USB disconnect, device number 82 [ 1900.541410][T29268] FAULT_INJECTION: forcing a failure. [ 1900.541410][T29268] name failslab, interval 1, probability 0, space 0, times 0 [ 1901.326328][T29268] CPU: 1 UID: 0 PID: 29268 Comm: syz.7.5207 Tainted: G L syzkaller #0 PREEMPT(full) [ 1901.326363][T29268] Tainted: [L]=SOFTLOCKUP [ 1901.326371][T29268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1901.326383][T29268] Call Trace: [ 1901.326391][T29268] [ 1901.326399][T29268] dump_stack_lvl+0x100/0x190 [ 1901.326434][T29268] should_fail_ex.cold+0x5/0xa [ 1901.326461][T29268] should_failslab+0xc2/0x120 [ 1901.326492][T29268] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1901.326520][T29268] ? __alloc_skb+0x140/0x710 [ 1901.326553][T29268] __alloc_skb+0x140/0x710 [ 1901.326580][T29268] ? __alloc_skb+0x5b7/0x710 [ 1901.326609][T29268] ? __pfx___alloc_skb+0x10/0x10 [ 1901.326648][T29268] netlink_ack+0x117/0xb80 [ 1901.326681][T29268] netlink_rcv_skb+0x333/0x420 [ 1901.326703][T29268] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1901.326727][T29268] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1901.326762][T29268] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1901.326789][T29268] netlink_unicast+0x5aa/0x870 [ 1901.326816][T29268] ? __pfx_netlink_unicast+0x10/0x10 [ 1901.326847][T29268] netlink_sendmsg+0x8b0/0xda0 [ 1901.326876][T29268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1901.326896][T29268] ? PageHuge+0x170/0x180 [ 1901.326928][T29268] ____sys_sendmsg+0xa54/0xc30 [ 1901.326967][T29268] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1901.327002][T29268] ___sys_sendmsg+0x190/0x1e0 [ 1901.327029][T29268] ? __pfx____sys_sendmsg+0x10/0x10 [ 1901.327092][T29268] __sys_sendmsg+0x170/0x220 [ 1901.327114][T29268] ? __pfx___sys_sendmsg+0x10/0x10 [ 1901.327154][T29268] do_syscall_64+0x106/0xf80 [ 1901.327175][T29268] ? clear_bhb_loop+0x40/0x90 [ 1901.327202][T29268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1901.327223][T29268] RIP: 0033:0x7f0e3b79c799 [ 1901.327241][T29268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1901.327262][T29268] RSP: 002b:00007f0e3c5c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1901.327283][T29268] RAX: ffffffffffffffda RBX: 00007f0e3ba16090 RCX: 00007f0e3b79c799 [ 1901.327298][T29268] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1901.327311][T29268] RBP: 00007f0e3c5c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1901.327324][T29268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1901.327336][T29268] R13: 00007f0e3ba16128 R14: 00007f0e3ba16090 R15: 00007ffd810a6918 [ 1901.327370][T29268] [ 1901.770608][T29276] netlink: 'syz.0.5210': attribute type 10 has an invalid length. [ 1901.814075][ T29] audit: type=1326 audit(1772154923.232:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29273 comm="syz.4.5211" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f425d79c799 code=0x0 [ 1901.998367][T29276] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1902.034374][T29282] FAULT_INJECTION: forcing a failure. [ 1902.034374][T29282] name failslab, interval 1, probability 0, space 0, times 0 [ 1902.080569][T29282] CPU: 1 UID: 0 PID: 29282 Comm: syz.7.5213 Tainted: G L syzkaller #0 PREEMPT(full) [ 1902.080594][T29282] Tainted: [L]=SOFTLOCKUP [ 1902.080598][T29282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1902.080605][T29282] Call Trace: [ 1902.080610][T29282] [ 1902.080615][T29282] dump_stack_lvl+0x100/0x190 [ 1902.080639][T29282] should_fail_ex.cold+0x5/0xa [ 1902.080655][T29282] should_failslab+0xc2/0x120 [ 1902.080673][T29282] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1902.080688][T29282] ? do_getname+0x35/0x390 [ 1902.080702][T29282] ? fput+0x79/0x100 [ 1902.080716][T29282] do_getname+0x35/0x390 [ 1902.080730][T29282] __x64_sys_execveat+0xc5/0x130 [ 1902.080748][T29282] do_syscall_64+0x106/0xf80 [ 1902.080760][T29282] ? clear_bhb_loop+0x40/0x90 [ 1902.080774][T29282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1902.080788][T29282] RIP: 0033:0x7f0e3b79c799 [ 1902.080798][T29282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1902.080809][T29282] RSP: 002b:00007f0e3c5c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1902.080821][T29282] RAX: ffffffffffffffda RBX: 00007f0e3ba16090 RCX: 00007f0e3b79c799 [ 1902.080829][T29282] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1902.080836][T29282] RBP: 00007f0e3c5c8090 R08: 0000000000000100 R09: 0000000000000000 [ 1902.080843][T29282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1902.080849][T29282] R13: 00007f0e3ba16128 R14: 00007f0e3ba16090 R15: 00007ffd810a6918 [ 1902.080865][T29282] [ 1903.007189][T18288] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1903.206998][T18288] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1903.293883][T18288] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1903.304700][T18288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1903.430904][T18288] usb 5-1: config 0 descriptor?? [ 1903.467944][T18288] pwc: Askey VC010 type 2 USB webcam detected. [ 1903.489635][T29290] zonefs (nullb0) ERROR: Not a zoned block device [ 1903.541148][T29299] fuse: Unknown parameter ' [ 1903.541148][T29299] TracerPid: 0 [ 1903.541148][T29299] Uid: 0 0 0 0 [ 1903.541148][T29299] Gid: 0 0 0 0 [ 1903.541148][T29299] FDSize: 256 [ 1903.541148][T29299] Groups: 0 10 [ 1903.541148][T29299] NStgid: 1190 [ 1903.541148][T29299] NSpid: 1191 [ 1903.541148][T29299] NSpgid: 1190 [ 1903.541148][T29299] NSsid: 0 [ 1903.541148][T29299] Kthread: 0 [ 1903.541148][T29299] VmPeak: 102224 kB [ 1903.541148][T29299] VmSize: 102224 kB [ 1903.541148][T29299] VmLck: 0 kB [ 1903.541148][T29299] VmPin: 0 kB [ 1903.541148][T29299] VmHWM: 24088 kB [ 1903.541148][T29299] VmRSS: 24088 kB [ 1903.541148][T29299] RssAnon: 1420 kB [ 1903.541148][T29299] RssFile: 22668 kB [ 1903.541148][T29299] RssShmem: 0 kB [ 1903.541148][T29299] VmData: 36584 kB [ 1903.541148][T29299] VmStk: 132 kB [ 1903.541148][T29299] VmExe: 1772 kB [ 1903.541148][T29299] VmLib: 8 kB [ 1903.541148][T29299] VmPTE: 132 kB [ 1903.541148][T29299] VmSwap: 0 kB [ 1903.541148][T29299] HugetlbPages: 0 kB [ 1903.541148][T29299] CoreDumping: 0 [ 1903.541148][T29299] THP_enabled: 1 [ 1903.541148][T29299] untag_mask: 0xffffffffffffffff [ 1903.541148][T29299] Threads: 2 [ 1903.541148][T29299] SigQ: 0/12960 [ 1903.541148][T29299] SigPnd: 0000000000000000 [ 1903.541148][T29299] ShdPnd: 0000000000000000 [ 1903.541148][T29299] SigBlk: 0000000000000000 [ 1903.541148][T29299] SigIgn: fffffffefffaba35 [ 1903.541148][T29299] SigCgt: 0000000100010440 [ 1903.541148][T29299] CapInh: 0000000000000000 [ 1903.541148][T29299] CapPrm: 000001ffff77ffff [ 1903.541148][T29299] CapEff: 000001ffff77ffff [ 1903.541148][T29299] CapBnd: 000001ffffffffff [ 1903.541148][T29299] CapAmb: 0000000000000000 [ 1903.541148][T29299] NoNewPrivs: 0 [ 1903.541148][T29299] Seccomp: 0 [ 1903.541148][T29299] Seccomp_filters: 0 [ 1903.541148][T29299] Speculation_Store_Bypass: thread vulnerable [ 1903.541148][T29299] SpeculationIndirectBranch: conditional enabled [ 1903.757497][T29299] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1903.930136][T29302] kvm: user requested TSC rate below hardware speed [ 1903.967199][T18288] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1903.989162][T18288] pwc: recv_control_msg error -32 req 02 val 2700 [ 1903.997059][T18288] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1904.099475][T18288] pwc: recv_control_msg error -32 req 04 val 1000 [ 1904.894946][T18288] pwc: recv_control_msg error -71 req 04 val 1300 [ 1904.906238][T18288] pwc: recv_control_msg error -71 req 04 val 1400 [ 1904.923541][T18288] pwc: recv_control_msg error -71 req 02 val 2000 [ 1904.938375][T18288] pwc: recv_control_msg error -71 req 02 val 2100 [ 1904.954754][T18288] pwc: recv_control_msg error -71 req 04 val 1500 [ 1904.964863][T18288] pwc: recv_control_msg error -71 req 02 val 2500 [ 1904.988484][T18288] pwc: recv_control_msg error -71 req 02 val 2400 [ 1904.996209][T18288] pwc: recv_control_msg error -71 req 02 val 2600 [ 1905.017938][T18288] pwc: recv_control_msg error -71 req 02 val 2900 [ 1905.048122][T18288] pwc: recv_control_msg error -71 req 02 val 2800 [ 1905.073036][T18288] pwc: recv_control_msg error -71 req 04 val 1100 [ 1905.089493][T18288] pwc: recv_control_msg error -71 req 04 val 1200 [ 1905.130372][T18288] pwc: Registered as video103. [ 1905.163123][T18288] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input81 [ 1905.169914][T29317] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5222'. [ 1905.269980][T18288] usb 5-1: USB disconnect, device number 83 [ 1905.298655][T29311] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5222'. [ 1907.417307][T29337] tipc: Bearer : already 2 bearers with priority 10 [ 1907.424864][T29337] tipc: Bearer : trying with adjusted priority [ 1907.592702][T29337] tipc: Enabling of bearer rejected, failed to enable media [ 1907.659222][T29337] tipc: Enabling of bearer rejected, already enabled [ 1907.997091][T17936] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1908.671535][T17936] usb 5-1: Using ep0 maxpacket: 8 [ 1908.697824][T17936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1908.717552][T17936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1908.727604][T17936] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1908.742718][T17936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1908.756316][T17936] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1908.766666][T17936] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1908.775698][T17936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1908.797765][T17936] usb 5-1: config 0 descriptor?? [ 1908.828377][T29339] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1909.681463][T29357] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1909.696904][T29357] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1909.758262][T29357] ovl_remap_lower_ino: 8 callbacks suppressed [ 1909.758297][T29357] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 1909.772645][T29357] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 1909.783865][T29357] overlayfs: d_ino too big (246, ino=9223372036854777154, xinobits=3) [ 1909.793447][T29357] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 1909.804321][T29357] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 1909.816269][T29357] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 1909.827908][T29357] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 1909.838033][T29357] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 1909.848349][T29357] overlayfs: d_ino too big (dev, ino=4611686018427387912, xinobits=3) [ 1909.858514][T29357] overlayfs: d_ino too big (kernel, ino=4611686018427389298, xinobits=3) [ 1910.725167][T19795] usb 10-1: new high-speed USB device number 69 using dummy_hcd [ 1910.897482][T19795] usb 10-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1910.907674][T19795] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1910.916852][T19795] usb 10-1: Product: syz [ 1910.921231][T19795] usb 10-1: Manufacturer: syz [ 1910.926399][T19795] usb 10-1: SerialNumber: syz [ 1910.954494][T19795] usb 10-1: config 0 descriptor?? [ 1910.995224][T19795] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1911.006722][T17936] usb 5-1: USB disconnect, device number 84 [ 1911.009852][T25877] Bluetooth: hci4: Opcode 0x0c03 failed: -19 [ 1911.044784][T29368] xt_hashlimit: size too large, truncated to 1048576 [ 1911.046513][T29366] lo speed is unknown, defaulting to 1000 [ 1911.059175][T29366] lo speed is unknown, defaulting to 1000 [ 1911.270363][T25877] Bluetooth: hci2: command 0x0406 tx timeout [ 1911.358426][T29355] SELinux: failed to load policy [ 1911.578192][T18288] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1911.669700][T29378] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5238'. [ 1911.853147][T18288] usb 4-1: Using ep0 maxpacket: 16 [ 1911.871430][T18288] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=dd.d4 [ 1911.881860][T18288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1911.891355][T18288] usb 4-1: Product: syz [ 1911.899256][T18288] usb 4-1: Manufacturer: syz [ 1912.327734][T19795] gspca_sq905c: sq905c_read: usb_control_msg failed (-110) [ 1912.335010][T19795] sq905c 10-1:0.0: Reading version command failed [ 1912.351749][T19795] sq905c 10-1:0.0: probe with driver sq905c failed with error -110 [ 1912.363323][T18288] usb 4-1: SerialNumber: syz [ 1912.401585][T29382] tipc: Enabling of bearer rejected, failed to enable media [ 1912.415431][T29382] tipc: Enabling of bearer rejected, already enabled [ 1912.424768][T18288] usb 4-1: config 0 descriptor?? [ 1912.478809][ T24] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1912.530610][T18288] usb_ehset_test 4-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 1912.716130][ T24] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1912.718980][T17936] usb 4-1: USB disconnect, device number 119 [ 1912.725299][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1912.787606][ T24] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1912.794104][T23418] usb 10-1: USB disconnect, device number 69 [ 1912.796665][ T24] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1912.841563][ T24] usb 5-1: Manufacturer: syz [ 1912.956100][ T24] usb 5-1: config 0 descriptor?? [ 1913.066004][ T24] rc_core: IR keymap rc-hauppauge not found [ 1913.072543][ T24] Registered IR keymap rc-empty [ 1913.078252][ T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1913.098672][ T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input82 [ 1913.385540][ C1] igorplugusb 5-1:0.0: Error: urb status = -32 [ 1913.391146][T29378] binder_alloc: binder_alloc_mmap_handler: 29376 200000001000-200000c01000 already mapped failed -16 [ 1914.343698][T29397] netlink: 14 bytes leftover after parsing attributes in process `syz.9.5242'. [ 1914.375019][T29397] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1914.399014][T29400] isofs_fill_super: bread failed, dev=nbd9, iso_blknum=16, block=32 [ 1914.419978][T29397] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1914.446865][T29397] .` (unregistering): (slave netdevsim0): Releasing backup interface [ 1914.484609][T29397] .` (unregistering): Released all slaves [ 1914.507411][T17936] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1914.667699][T17936] usb 4-1: Using ep0 maxpacket: 32 [ 1914.678605][T17936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1914.702526][T17936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1914.735833][T17936] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1914.754692][T17936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1914.780059][T17936] usb 4-1: config 0 descriptor?? [ 1914.785575][T29406] openvswitch: netlink: Flow actions attr not present in new flow. [ 1914.802868][T29405] netlink: 88 bytes leftover after parsing attributes in process `syz.9.5244'. [ 1914.816723][T17936] hub 4-1:0.0: USB hub found [ 1915.033375][T17936] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1915.192585][T19795] usb 5-1: USB disconnect, device number 85 [ 1915.464446][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1915.472144][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1915.479458][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1915.486601][T17936] usbhid 4-1:0.0: can't add hid device: -32 [ 1915.492569][T17936] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 1915.514693][T29413] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5245'. [ 1915.693960][T17936] usb 4-1: USB disconnect, device number 120 [ 1917.331864][T29424] vlan3: entered promiscuous mode [ 1917.353857][T29424] vlan3: entered allmulticast mode [ 1917.367972][T29424] hsr_slave_1: entered allmulticast mode [ 1919.173239][T29453] IPVS: Error connecting to the multicast addr [ 1920.565552][T29479] kvm: user requested TSC rate below hardware speed [ 1920.668088][T17936] usb 10-1: new high-speed USB device number 70 using dummy_hcd [ 1920.853721][T23418] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1920.869155][T17936] usb 10-1: Using ep0 maxpacket: 8 [ 1920.883214][T17936] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1920.912654][T17936] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1920.926640][T17936] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1921.039077][T17936] usb 10-1: config 0 descriptor?? [ 1921.114089][T23418] usb 5-1: Using ep0 maxpacket: 8 [ 1921.127285][T23418] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1921.158571][T23418] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1921.169135][T23418] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1921.181796][T23418] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1921.298841][T17936] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1921.338631][T23418] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1921.361790][T23418] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1921.770079][T29491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1921.822661][T29491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1921.847357][T29479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1921.859191][T23418] usb 5-1: usb_control_msg returned -32 [ 1921.875464][T29479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1921.894217][T23418] usbtmc 5-1:16.0: can't read capabilities [ 1922.080007][T23418] usb 10-1: USB disconnect, device number 70 [ 1922.147754][T29494] loop5: detected capacity change from 0 to 4096 [ 1923.914903][T23418] usb 5-1: USB disconnect, device number 86 [ 1926.588661][T29533] FAULT_INJECTION: forcing a failure. [ 1926.588661][T29533] name failslab, interval 1, probability 0, space 0, times 0 [ 1926.621491][T29533] CPU: 0 UID: 0 PID: 29533 Comm: syz.4.5278 Tainted: G L syzkaller #0 PREEMPT(full) [ 1926.621523][T29533] Tainted: [L]=SOFTLOCKUP [ 1926.621529][T29533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1926.621541][T29533] Call Trace: [ 1926.621548][T29533] [ 1926.621556][T29533] dump_stack_lvl+0x100/0x190 [ 1926.621594][T29533] should_fail_ex.cold+0x5/0xa [ 1926.621621][T29533] should_failslab+0xc2/0x120 [ 1926.621653][T29533] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1926.621677][T29533] ? alloc_pipe_info+0x10e/0x590 [ 1926.621698][T29533] ? avc_has_perm+0x135/0x1e0 [ 1926.621731][T29533] alloc_pipe_info+0x10e/0x590 [ 1926.621753][T29533] splice_direct_to_actor+0x78f/0xa30 [ 1926.621783][T29533] ? __pfx_direct_splice_actor+0x10/0x10 [ 1926.621802][T29533] ? inode_has_perm+0x16d/0x1d0 [ 1926.621834][T29533] ? file_has_perm+0x27b/0x350 [ 1926.621863][T29533] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1926.621885][T29533] ? __pfx_file_has_perm+0x10/0x10 [ 1926.621920][T29533] do_splice_direct+0x174/0x240 [ 1926.621940][T29533] ? __pfx_do_splice_direct+0x10/0x10 [ 1926.621960][T29533] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1926.621992][T29533] ? bpf_lsm_file_permission+0x9/0x10 [ 1926.622021][T29533] ? security_file_permission+0x76/0x210 [ 1926.622047][T29533] ? rw_verify_area+0xce/0x6d0 [ 1926.622076][T29533] do_sendfile+0xadc/0xe20 [ 1926.622111][T29533] ? __pfx_do_sendfile+0x10/0x10 [ 1926.622140][T29533] ? __fget_files+0x21f/0x3d0 [ 1926.622168][T29533] __x64_sys_sendfile64+0x1d8/0x220 [ 1926.622190][T29533] ? ksys_write+0x1ac/0x250 [ 1926.622218][T29533] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1926.622249][T29533] do_syscall_64+0x106/0xf80 [ 1926.622270][T29533] ? clear_bhb_loop+0x40/0x90 [ 1926.622295][T29533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1926.622315][T29533] RIP: 0033:0x7f425d79c799 [ 1926.622331][T29533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1926.622349][T29533] RSP: 002b:00007f425e5ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1926.622368][T29533] RAX: ffffffffffffffda RBX: 00007f425da15fa0 RCX: 00007f425d79c799 [ 1926.622381][T29533] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1926.622393][T29533] RBP: 00007f425e5ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1926.622406][T29533] R10: 000000007ffff004 R11: 0000000000000246 R12: 0000000000000001 [ 1926.622418][T29533] R13: 00007f425da16038 R14: 00007f425da15fa0 R15: 00007ffeb168eab8 [ 1926.622445][T29533] [ 1927.143613][T23418] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1927.343230][T29543] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5281'. [ 1927.352372][T23418] usb 4-1: Using ep0 maxpacket: 8 [ 1927.376349][T23418] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1927.415460][T23418] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1927.500750][T29543] mac80211_hwsim hwsim72 wlan0: entered promiscuous mode [ 1927.516614][T23418] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1927.552790][T23418] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1927.577278][T23418] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1927.596785][T23418] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1928.067053][T23418] usb 4-1: GET_CAPABILITIES returned 0 [ 1928.073177][T23418] usbtmc 4-1:16.0: can't read capabilities [ 1928.321154][T29528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1928.466237][T29528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1929.124837][T29553] kvm: user requested TSC rate below hardware speed [ 1929.182064][T29556] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5284'. [ 1929.420909][ T9] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1929.602621][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1929.620754][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1929.648754][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1929.678225][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1929.701029][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1929.726543][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1930.115925][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1930.147361][ T24] usb 4-1: USB disconnect, device number 121 [ 1930.472360][ T9] usb 5-1: usb_control_msg returned -32 [ 1930.489026][ T9] usbtmc 5-1:16.0: can't read capabilities [ 1930.496221][T29553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1930.512112][T29553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1930.769176][T29566] netlink: 'syz.0.5286': attribute type 6 has an invalid length. [ 1930.798716][T29566] netlink: 'syz.0.5286': attribute type 6 has an invalid length. [ 1931.687556][T19795] usb 10-1: new full-speed USB device number 71 using dummy_hcd [ 1932.781988][T18288] usb 5-1: USB disconnect, device number 87 [ 1932.896105][T19795] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1932.918347][T19795] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1932.967247][T19795] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1933.017860][T19795] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1933.315545][T29589] overlayfs: failed to resolve './file0': -2 [ 1933.626732][T19795] usb 10-1: usb_control_msg returned -32 [ 1933.634716][T19795] usbtmc 10-1:16.0: can't read capabilities [ 1934.060937][T29603] overlayfs: failed to resolve './file0': -2 [ 1934.108551][T19795] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1934.498948][T19795] usb 4-1: Using ep0 maxpacket: 8 [ 1934.515236][T19795] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1934.544387][T19795] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1934.561395][T19795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1934.611192][T19795] usb 4-1: config 0 descriptor?? [ 1934.964827][T25877] Bluetooth: hci5: command 0x0406 tx timeout [ 1935.258029][T19795] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 1936.103736][T29597] usbtmc 10-1:16.0: send_request_dev_dep_msg_in returned -90 [ 1936.174317][T29597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1936.205703][T29597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1936.698456][T19795] usb 10-1: USB disconnect, device number 71 [ 1938.151536][T17936] usb 4-1: USB disconnect, device number 122 [ 1938.350899][T29647] netlink: 'syz.9.5309': attribute type 4 has an invalid length. [ 1939.032060][T17936] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1939.205631][T17936] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1939.257955][T17936] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1939.277272][T17936] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1939.298250][T17936] usb 5-1: config 220 has no interface number 2 [ 1939.308436][T17936] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1940.335823][T17936] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1940.342661][T17936] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1940.350435][T17936] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1940.360844][T17936] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1940.370609][T17936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1940.539806][T17936] usb 5-1: Product: syz [ 1940.544684][T17936] usb 5-1: Manufacturer: syz [ 1940.549886][T17936] usb 5-1: SerialNumber: syz [ 1940.848929][T29670] program syz.7.5315 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1940.875826][T29672] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 1940.882374][T29672] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1940.902577][T29672] vhci_hcd vhci_hcd.0: Device attached [ 1940.930667][T29672] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(10) [ 1940.937352][T29672] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1940.956376][T29672] vhci_hcd vhci_hcd.0: Device attached [ 1940.966968][T29672] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(12) [ 1940.973580][T29672] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1941.040862][T17936] usb 5-1: selecting invalid altsetting 0 [ 1941.053804][T17936] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1941.076086][T17936] uvcvideo 5-1:220.0: No valid video chain found. [ 1941.091011][T29672] vhci_hcd vhci_hcd.0: Device attached [ 1941.161384][ T5917] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 1941.174298][T17936] usb 5-1: selecting invalid altsetting 0 [ 1941.186818][T29679] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(15) [ 1941.193454][T29679] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1941.202167][T17936] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 1941.202461][T29681] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(18) [ 1941.217551][T29681] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1941.244602][T29681] vhci_hcd vhci_hcd.0: Device attached [ 1941.245943][T17936] usb 5-1: USB disconnect, device number 88 [ 1941.282908][T29679] vhci_hcd vhci_hcd.0: Device attached [ 1941.315237][T29672] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(20) [ 1941.321848][T29672] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1941.337718][T29672] vhci_hcd vhci_hcd.0: Device attached [ 1941.351865][T29672] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1941.497732][T29672] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1941.514264][T29683] vhci_hcd: connection closed [ 1941.514500][T29688] vhci_hcd: connection closed [ 1941.519329][T29677] vhci_hcd: connection closed [ 1941.519515][ T9459] vhci_hcd vhci_hcd.0: stop threads [ 1941.524543][T29673] vhci_hcd: connection reset by peer [ 1941.539709][T29675] vhci_hcd: connection closed [ 1941.540952][T29680] vhci_hcd: connection closed [ 1941.541232][ T9459] vhci_hcd vhci_hcd.0: release socket [ 1941.568885][ T9459] vhci_hcd vhci_hcd.0: disconnect device [ 1941.584149][ T9459] vhci_hcd vhci_hcd.0: stop threads [ 1941.595106][ T9459] vhci_hcd vhci_hcd.0: release socket [ 1941.635036][ T9459] vhci_hcd vhci_hcd.0: disconnect device [ 1941.651857][ T9459] vhci_hcd vhci_hcd.0: stop threads [ 1941.671870][ T9459] vhci_hcd vhci_hcd.0: release socket [ 1941.680782][ T9459] vhci_hcd vhci_hcd.0: disconnect device [ 1941.775393][ T9459] vhci_hcd vhci_hcd.0: stop threads [ 1941.791206][ T9459] vhci_hcd vhci_hcd.0: release socket [ 1941.808892][ T9459] vhci_hcd vhci_hcd.0: disconnect device [ 1941.819488][ T9459] vhci_hcd vhci_hcd.0: stop threads [ 1941.872106][ T29] audit: type=1326 audit(1772154960.666:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29692 comm="syz.4.5319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425d79c799 code=0x7ffc0000 [ 1941.905618][ T9459] vhci_hcd vhci_hcd.0: release socket [ 1941.905739][ T29] audit: type=1326 audit(1772154960.666:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29692 comm="syz.4.5319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425d79c799 code=0x7ffc0000 [ 1941.935268][ T9459] vhci_hcd vhci_hcd.0: disconnect device [ 1941.944880][ T9459] vhci_hcd vhci_hcd.0: stop threads [ 1941.979867][ T9459] vhci_hcd vhci_hcd.0: release socket [ 1941.995980][ T9459] vhci_hcd vhci_hcd.0: disconnect device [ 1942.026373][ T29] audit: type=1326 audit(1772154960.704:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29692 comm="syz.4.5319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f425d79c799 code=0x7ffc0000 [ 1942.069668][ T29] audit: type=1326 audit(1772154960.704:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29692 comm="syz.4.5319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425d79c799 code=0x7ffc0000 [ 1942.170660][ T29] audit: type=1326 audit(1772154960.704:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29692 comm="syz.4.5319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425d79c799 code=0x7ffc0000 [ 1942.333648][ T29] audit: type=1326 audit(1772154960.704:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29692 comm="syz.4.5319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f425d75cfce code=0x7ffc0000 [ 1942.399998][ T29] audit: type=1326 audit(1772154960.704:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29692 comm="syz.4.5319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425d79c799 code=0x7ffc0000 [ 1942.424170][ T29] audit: type=1326 audit(1772154960.704:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29692 comm="syz.4.5319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f425d79c799 code=0x7ffc0000 [ 1942.456059][ T29] audit: type=1326 audit(1772154960.704:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29692 comm="syz.4.5319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425d79c799 code=0x7ffc0000 [ 1942.481302][ T29] audit: type=1326 audit(1772154960.704:2315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29692 comm="syz.4.5319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f425d79c799 code=0x7ffc0000 [ 1945.070305][T29721] FAULT_INJECTION: forcing a failure. [ 1945.070305][T29721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1945.948773][T29721] CPU: 1 UID: 0 PID: 29721 Comm: syz.3.5326 Tainted: G L syzkaller #0 PREEMPT(full) [ 1945.948809][T29721] Tainted: [L]=SOFTLOCKUP [ 1945.948819][T29721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1945.948831][T29721] Call Trace: [ 1945.948838][T29721] [ 1945.948848][T29721] dump_stack_lvl+0x100/0x190 [ 1945.948884][T29721] should_fail_ex.cold+0x5/0xa [ 1945.948912][T29721] _copy_from_user+0x2e/0xd0 [ 1945.948947][T29721] copy_msghdr_from_user+0x9f/0x4f0 [ 1945.948976][T29721] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1945.949016][T29721] ___sys_sendmsg+0x106/0x1e0 [ 1945.949044][T29721] ? __pfx____sys_sendmsg+0x10/0x10 [ 1945.949105][T29721] __sys_sendmsg+0x170/0x220 [ 1945.949126][T29721] ? __pfx___sys_sendmsg+0x10/0x10 [ 1945.949164][T29721] do_syscall_64+0x106/0xf80 [ 1945.949185][T29721] ? clear_bhb_loop+0x40/0x90 [ 1945.949211][T29721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1945.949232][T29721] RIP: 0033:0x7fb50e79c799 [ 1945.949250][T29721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1945.949270][T29721] RSP: 002b:00007fb50f642028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1945.949290][T29721] RAX: ffffffffffffffda RBX: 00007fb50ea15fa0 RCX: 00007fb50e79c799 [ 1945.949304][T29721] RDX: 0000000004000010 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1945.949317][T29721] RBP: 00007fb50f642090 R08: 0000000000000000 R09: 0000000000000000 [ 1945.949329][T29721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1945.949341][T29721] R13: 00007fb50ea16038 R14: 00007fb50ea15fa0 R15: 00007fff6fce2ae8 [ 1945.949370][T29721] [ 1946.488746][T29732] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 1946.495298][T29732] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1946.539633][T29732] vhci_hcd vhci_hcd.0: Device attached [ 1946.891519][ T5917] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1946.946839][T29735] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(11) [ 1946.953512][T29735] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1947.000854][T29747] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(16) [ 1947.007502][T29747] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1947.056825][T29735] vhci_hcd vhci_hcd.0: Device attached [ 1947.062894][T29747] vhci_hcd vhci_hcd.0: Device attached [ 1947.101683][T29732] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(10) [ 1947.108317][T29732] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1947.156474][T19795] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 1947.221583][T29732] vhci_hcd vhci_hcd.0: Device attached [ 1947.354651][T29754] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(19) [ 1947.361338][T29754] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1947.699330][T29754] vhci_hcd vhci_hcd.0: Device attached [ 1947.782763][T29732] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(18) [ 1947.789392][T29732] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1948.016627][T29735] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1948.098819][T29747] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1948.121595][T29732] vhci_hcd vhci_hcd.0: Device attached [ 1949.033314][T18288] usb usb34-port1: attempt power cycle [ 1949.659100][T29756] vhci_hcd: connection closed [ 1949.659104][T29762] vhci_hcd: connection closed [ 1949.663939][T29748] vhci_hcd: connection closed [ 1949.664097][T29744] vhci_hcd: connection closed [ 1949.674723][T29738] vhci_hcd: connection closed [ 1949.732842][T29733] vhci_hcd: connection reset by peer [ 1949.756507][ T9453] vhci_hcd vhci_hcd.4: stop threads [ 1949.761728][ T9453] vhci_hcd vhci_hcd.4: release socket [ 1949.775858][ T9453] vhci_hcd vhci_hcd.4: disconnect device [ 1949.782812][ T9453] vhci_hcd vhci_hcd.4: stop threads [ 1949.850586][T29775] netlink: 'syz.9.5337': attribute type 10 has an invalid length. [ 1949.898755][ T9453] vhci_hcd vhci_hcd.4: release socket [ 1949.951585][ T9453] vhci_hcd vhci_hcd.4: disconnect device [ 1949.979808][ T9453] vhci_hcd vhci_hcd.4: stop threads [ 1949.989939][ T9453] vhci_hcd vhci_hcd.4: release socket [ 1949.996002][ T9453] vhci_hcd vhci_hcd.4: disconnect device [ 1950.002066][ T9453] vhci_hcd vhci_hcd.4: stop threads [ 1950.016785][ T9453] vhci_hcd vhci_hcd.4: release socket [ 1950.022970][ T9453] vhci_hcd vhci_hcd.4: disconnect device [ 1950.028914][ T9453] vhci_hcd vhci_hcd.4: stop threads [ 1950.034238][ T9453] vhci_hcd vhci_hcd.4: release socket [ 1950.039826][ T9453] vhci_hcd vhci_hcd.4: disconnect device [ 1950.047563][T18288] usb usb34-port1: unable to enumerate USB device [ 1950.056425][ T9453] vhci_hcd vhci_hcd.4: stop threads [ 1950.062279][ T9453] vhci_hcd vhci_hcd.4: release socket [ 1950.069004][ T9453] vhci_hcd vhci_hcd.4: disconnect device [ 1950.314130][T29782] loop5: detected capacity change from 0 to 7 [ 1951.312298][T29782] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 1951.322325][T29782] loop5: partition table partially beyond EOD, truncated [ 1951.329668][T29782] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 1951.548151][T28893] udevd[28893]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1952.116862][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 1952.116880][ T29] audit: type=1400 audit(1772154970.273:2352): avc: denied { bind } for pid=29791 comm="syz.4.5341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1952.393468][ T29] audit: type=1400 audit(1772154970.432:2353): avc: denied { listen } for pid=29791 comm="syz.4.5341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1952.676304][T19795] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1953.652828][T29811] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1953.679319][T29811] CIFS mount error: No usable UNC path provided in device string! [ 1953.679319][T29811] [ 1953.690117][T29811] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1954.079928][T29815] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5348'. [ 1954.107020][T29813] nbd: socks must be embedded in a SOCK_ITEM attr [ 1954.141868][T29813] block nbd0: shutting down sockets [ 1954.311358][T29822] netlink: 'syz.4.5349': attribute type 10 has an invalid length. [ 1954.419834][T29822] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1954.500915][T17936] usb 10-1: new high-speed USB device number 72 using dummy_hcd [ 1954.619113][ T91] usb usb42-port1: attempt power cycle [ 1954.685381][T17936] usb 10-1: Using ep0 maxpacket: 16 [ 1954.727188][T17936] usb 10-1: config 0 has an invalid interface number: 214 but max is 0 [ 1954.743206][T17936] usb 10-1: config 0 has no interface number 0 [ 1954.762585][T17936] usb 10-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 1954.794571][T29827] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 1954.801098][T29827] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1954.818327][T17936] usb 10-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1954.832364][T17936] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1954.840638][T29827] vhci_hcd vhci_hcd.0: Device attached [ 1954.846358][T17936] usb 10-1: Product: syz [ 1954.917068][T29831] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 1954.923756][T29831] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1954.931736][T17936] usb 10-1: Manufacturer: syz [ 1954.977615][T29835] ALSA: mixer_oss: invalid OSS volume '' [ 1955.041950][T29831] vhci_hcd vhci_hcd.0: Device attached [ 1955.157492][T19795] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 1955.266375][ T91] usb usb42-port1: unable to enumerate USB device [ 1955.296903][T29827] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(10) [ 1955.297577][T17936] usb 10-1: SerialNumber: syz [ 1955.303708][T29827] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1955.305788][T29827] vhci_hcd vhci_hcd.0: Device attached [ 1955.692507][T17936] usb 10-1: config 0 descriptor?? [ 1955.712430][T29838] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(15) [ 1955.719072][T29838] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1955.730545][T29838] vhci_hcd vhci_hcd.0: Device attached [ 1955.785204][T29827] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(13) [ 1955.791836][T29827] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1955.862211][T29827] vhci_hcd vhci_hcd.0: Device attached [ 1955.868609][T29831] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(21) [ 1955.875305][T29831] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1955.955153][T29831] vhci_hcd vhci_hcd.0: Device attached [ 1956.031456][T29831] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1956.042473][T29827] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1956.171855][T29839] vhci_hcd: connection closed [ 1956.172067][T29841] vhci_hcd: connection closed [ 1956.200777][T29832] vhci_hcd: connection closed [ 1956.209270][T29836] vhci_hcd: connection closed [ 1956.214576][T29828] vhci_hcd: connection reset by peer [ 1956.224847][T29845] vhci_hcd: connection closed [ 1956.318149][ T76] vhci_hcd vhci_hcd.0: stop threads [ 1956.809382][ T76] vhci_hcd vhci_hcd.0: release socket [ 1956.817958][ T76] vhci_hcd vhci_hcd.0: disconnect device [ 1956.826945][ T76] vhci_hcd vhci_hcd.0: stop threads [ 1956.832165][ T76] vhci_hcd vhci_hcd.0: release socket [ 1956.838336][ T76] vhci_hcd vhci_hcd.0: disconnect device [ 1956.922172][ T76] vhci_hcd vhci_hcd.0: stop threads [ 1956.933004][T17936] usbtouchscreen 10-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1956.966719][ T76] vhci_hcd vhci_hcd.0: release socket [ 1956.984357][ T76] vhci_hcd vhci_hcd.0: disconnect device [ 1956.997862][ T76] vhci_hcd vhci_hcd.0: stop threads [ 1957.015379][ T76] vhci_hcd vhci_hcd.0: release socket [ 1957.035702][ T76] vhci_hcd vhci_hcd.0: disconnect device [ 1957.049526][ T76] vhci_hcd vhci_hcd.0: stop threads [ 1957.090620][ T76] vhci_hcd vhci_hcd.0: release socket [ 1957.121136][T17936] usb 10-1: USB disconnect, device number 72 [ 1957.131274][ T29] audit: type=1400 audit(1772154974.978:2354): avc: denied { watch_mount } for pid=29855 comm="syz.7.5356" path="/355" dev="tmpfs" ino=1945 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1957.141756][ T76] vhci_hcd vhci_hcd.0: disconnect device [ 1957.189286][ T76] vhci_hcd vhci_hcd.0: stop threads [ 1957.223383][ T76] vhci_hcd vhci_hcd.0: release socket [ 1957.244377][ T76] vhci_hcd vhci_hcd.0: disconnect device [ 1958.522489][T29869] FAULT_INJECTION: forcing a failure. [ 1958.522489][T29869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1958.536085][ T29] audit: type=1400 audit(1772154976.278:2355): avc: denied { ioctl } for pid=29868 comm="syz.4.5361" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1958.576152][T29869] CPU: 0 UID: 0 PID: 29869 Comm: syz.4.5361 Tainted: G L syzkaller #0 PREEMPT(full) [ 1958.576174][T29869] Tainted: [L]=SOFTLOCKUP [ 1958.576178][T29869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1958.576185][T29869] Call Trace: [ 1958.576189][T29869] [ 1958.576195][T29869] dump_stack_lvl+0x100/0x190 [ 1958.576218][T29869] should_fail_ex.cold+0x5/0xa [ 1958.576234][T29869] _copy_to_user+0x32/0xd0 [ 1958.576251][T29869] simple_read_from_buffer+0xcb/0x170 [ 1958.576270][T29869] proc_fail_nth_read+0x1af/0x230 [ 1958.576286][T29869] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1958.576302][T29869] ? rw_verify_area+0xce/0x6d0 [ 1958.576316][T29869] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1958.576330][T29869] vfs_read+0x1e4/0xb30 [ 1958.576348][T29869] ? __pfx_vfs_read+0x10/0x10 [ 1958.576363][T29869] ? __fget_files+0x215/0x3d0 [ 1958.576377][T29869] ? __fget_files+0x21f/0x3d0 [ 1958.576392][T29869] ksys_read+0x12a/0x250 [ 1958.576408][T29869] ? __pfx_ksys_read+0x10/0x10 [ 1958.576428][T29869] do_syscall_64+0x106/0xf80 [ 1958.576440][T29869] ? clear_bhb_loop+0x40/0x90 [ 1958.576454][T29869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1958.576466][T29869] RIP: 0033:0x7f425d75cfce [ 1958.576476][T29869] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1958.576488][T29869] RSP: 002b:00007f425e5adfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1958.576499][T29869] RAX: ffffffffffffffda RBX: 00007f425e5ae6c0 RCX: 00007f425d75cfce [ 1958.576506][T29869] RDX: 000000000000000f RSI: 00007f425e5ae0a0 RDI: 0000000000000005 [ 1958.576513][T29869] RBP: 00007f425e5ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1958.576520][T29869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1958.576527][T29869] R13: 00007f425da16038 R14: 00007f425da15fa0 R15: 00007ffeb168eab8 [ 1958.576542][T29869] [ 1959.151748][ T91] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1959.344349][ T91] usb 5-1: Using ep0 maxpacket: 16 [ 1959.385023][ T91] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=dd.d4 [ 1959.411567][ T91] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1959.422077][ T91] usb 5-1: Product: syz [ 1959.426690][ T91] usb 5-1: Manufacturer: syz [ 1959.440998][ T91] usb 5-1: SerialNumber: syz [ 1959.582533][ T91] usb 5-1: config 0 descriptor?? [ 1959.633519][ T91] usb_ehset_test 5-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 1959.666230][T29884] FAULT_INJECTION: forcing a failure. [ 1959.666230][T29884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1959.777742][T29884] CPU: 1 UID: 0 PID: 29884 Comm: syz.9.5364 Tainted: G L syzkaller #0 PREEMPT(full) [ 1959.777774][T29884] Tainted: [L]=SOFTLOCKUP [ 1959.777781][T29884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1959.777802][T29884] Call Trace: [ 1959.777809][T29884] [ 1959.777818][T29884] dump_stack_lvl+0x100/0x190 [ 1959.777855][T29884] should_fail_ex.cold+0x5/0xa [ 1959.777883][T29884] _copy_to_user+0x32/0xd0 [ 1959.777906][T29884] simple_read_from_buffer+0xcb/0x170 [ 1959.777925][T29884] proc_fail_nth_read+0x1af/0x230 [ 1959.777941][T29884] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1959.777957][T29884] ? rw_verify_area+0xce/0x6d0 [ 1959.777971][T29884] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1959.777985][T29884] vfs_read+0x1e4/0xb30 [ 1959.778003][T29884] ? __pfx_vfs_read+0x10/0x10 [ 1959.778018][T29884] ? __fget_files+0x215/0x3d0 [ 1959.778033][T29884] ? __fget_files+0x21f/0x3d0 [ 1959.778050][T29884] ksys_read+0x12a/0x250 [ 1959.778066][T29884] ? __pfx_ksys_read+0x10/0x10 [ 1959.778085][T29884] do_syscall_64+0x106/0xf80 [ 1959.778097][T29884] ? clear_bhb_loop+0x40/0x90 [ 1959.778111][T29884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1959.778123][T29884] RIP: 0033:0x7f0df8f5cfce [ 1959.778133][T29884] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1959.778144][T29884] RSP: 002b:00007f0df9e18fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1959.778155][T29884] RAX: ffffffffffffffda RBX: 00007f0df9e196c0 RCX: 00007f0df8f5cfce [ 1959.778163][T29884] RDX: 000000000000000f RSI: 00007f0df9e190a0 RDI: 0000000000000004 [ 1959.778169][T29884] RBP: 00007f0df9e19090 R08: 0000000000000000 R09: 0000000000000000 [ 1959.778177][T29884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1959.778183][T29884] R13: 00007f0df9216128 R14: 00007f0df9216090 R15: 00007ffd4590f828 [ 1959.778199][T29884] [ 1960.075469][T29888] ALSA: mixer_oss: invalid OSS volume '' [ 1960.366558][ T91] usb 5-1: USB disconnect, device number 89 [ 1960.499673][T29892] netlink: 'syz.9.5366': attribute type 25 has an invalid length. [ 1960.531484][T29894] netlink: 'syz.9.5366': attribute type 25 has an invalid length. [ 1960.539605][T29894] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5366'. [ 1961.018290][T29892] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5366'. [ 1961.036525][T29899] FAULT_INJECTION: forcing a failure. [ 1961.036525][T29899] name failslab, interval 1, probability 0, space 0, times 0 [ 1961.058284][T29894] netlink: 'syz.9.5366': attribute type 25 has an invalid length. [ 1961.058350][T29892] netlink: 'syz.9.5366': attribute type 25 has an invalid length. [ 1961.066832][T29899] CPU: 0 UID: 0 PID: 29899 Comm: syz.7.5369 Tainted: G L syzkaller #0 PREEMPT(full) [ 1961.066862][T29899] Tainted: [L]=SOFTLOCKUP [ 1961.066869][T29899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1961.066881][T29899] Call Trace: [ 1961.066888][T29899] [ 1961.066896][T29899] dump_stack_lvl+0x100/0x190 [ 1961.066933][T29899] should_fail_ex.cold+0x5/0xa [ 1961.066960][T29899] should_failslab+0xc2/0x120 [ 1961.066992][T29899] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1961.067016][T29899] ? copy_mount_options+0x55/0x190 [ 1961.067047][T29899] copy_mount_options+0x55/0x190 [ 1961.067076][T29899] __x64_sys_mount+0x1ab/0x310 [ 1961.067100][T29899] ? __pfx___x64_sys_mount+0x10/0x10 [ 1961.067132][T29899] do_syscall_64+0x106/0xf80 [ 1961.067151][T29899] ? clear_bhb_loop+0x40/0x90 [ 1961.067176][T29899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1961.067197][T29899] RIP: 0033:0x7f0e3b79c799 [ 1961.067215][T29899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1961.067234][T29899] RSP: 002b:00007f0e3c5e9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1961.067254][T29899] RAX: ffffffffffffffda RBX: 00007f0e3ba15fa0 RCX: 00007f0e3b79c799 [ 1961.067267][T29899] RDX: 0000200000000440 RSI: 0000200000000100 RDI: 0000000000000000 [ 1961.067280][T29899] RBP: 00007f0e3c5e9090 R08: 0000200000000200 R09: 0000000000000000 [ 1961.067293][T29899] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 1961.067305][T29899] R13: 00007f0e3ba16038 R14: 00007f0e3ba15fa0 R15: 00007ffd810a6918 [ 1961.067333][T29899] [ 1961.075734][T29894] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5366'. [ 1961.085513][T28620] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1961.125518][T29898] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 1961.261298][T29898] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1961.280230][T29892] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5366'. [ 1961.307203][T29898] vhci_hcd vhci_hcd.0: Device attached [ 1961.322387][T29905] FAULT_INJECTION: forcing a failure. [ 1961.322387][T29905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1961.335808][T29905] CPU: 0 UID: 0 PID: 29905 Comm: syz.7.5370 Tainted: G L syzkaller #0 PREEMPT(full) [ 1961.335842][T29905] Tainted: [L]=SOFTLOCKUP [ 1961.335849][T29905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1961.335862][T29905] Call Trace: [ 1961.335870][T29905] [ 1961.335878][T29905] dump_stack_lvl+0x100/0x190 [ 1961.335916][T29905] should_fail_ex.cold+0x5/0xa [ 1961.335944][T29905] _copy_to_user+0x32/0xd0 [ 1961.335977][T29905] simple_read_from_buffer+0xcb/0x170 [ 1961.336007][T29905] proc_fail_nth_read+0x1af/0x230 [ 1961.336035][T29905] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1961.336062][T29905] ? rw_verify_area+0xce/0x6d0 [ 1961.336087][T29905] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1961.336113][T29905] vfs_read+0x1e4/0xb30 [ 1961.336145][T29905] ? __pfx_vfs_read+0x10/0x10 [ 1961.336173][T29905] ? __fget_files+0x215/0x3d0 [ 1961.336199][T29905] ? __fget_files+0x21f/0x3d0 [ 1961.336227][T29905] ksys_read+0x12a/0x250 [ 1961.336253][T29905] ? __pfx_ksys_read+0x10/0x10 [ 1961.336291][T29905] do_syscall_64+0x106/0xf80 [ 1961.336310][T29905] ? clear_bhb_loop+0x40/0x90 [ 1961.336334][T29905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1961.336353][T29905] RIP: 0033:0x7f0e3b75cfce [ 1961.336371][T29905] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1961.336391][T29905] RSP: 002b:00007f0e3c5e8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1961.336409][T29905] RAX: ffffffffffffffda RBX: 00007f0e3c5e96c0 RCX: 00007f0e3b75cfce [ 1961.336421][T29905] RDX: 000000000000000f RSI: 00007f0e3c5e90a0 RDI: 0000000000000007 [ 1961.336432][T29905] RBP: 00007f0e3c5e9090 R08: 0000000000000000 R09: 0000000000000000 [ 1961.336444][T29905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1961.336455][T29905] R13: 00007f0e3ba16038 R14: 00007f0e3ba15fa0 R15: 00007ffd810a6918 [ 1961.336486][T29905] [ 1961.357764][T28620] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1961.370740][T29906] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(14) [ 1961.547045][T29906] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1961.555759][T29906] vhci_hcd vhci_hcd.0: Device attached [ 1961.570876][T29898] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(10) [ 1961.577509][T29898] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1961.588837][T28620] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1961.616945][ T76] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1961.622425][T29898] vhci_hcd vhci_hcd.0: Device attached [ 1961.631971][T29902] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 1961.638847][T29902] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1961.777359][T29902] vhci_hcd vhci_hcd.0: Device attached [ 1961.791920][T29898] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(16) [ 1961.798523][T29898] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1961.806556][T29898] vhci_hcd vhci_hcd.0: Device attached [ 1961.816614][T29898] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(20) [ 1961.823191][T29898] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1962.308615][T29898] vhci_hcd vhci_hcd.0: Device attached [ 1962.334581][T29902] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1962.346197][T29898] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1962.354513][T19795] usb 33-1: device descriptor read/64, error -110 [ 1962.374114][T29921] vhci_hcd: connection closed [ 1962.374264][T29917] vhci_hcd: connection closed [ 1962.374340][T29909] vhci_hcd: connection closed [ 1962.383744][T28620] vhci_hcd vhci_hcd.0: stop threads [ 1962.385868][T29903] vhci_hcd: connection closed [ 1962.388506][T28620] vhci_hcd vhci_hcd.0: release socket [ 1962.393997][T29907] vhci_hcd: connection closed [ 1962.407031][T28620] vhci_hcd vhci_hcd.0: disconnect device [ 1962.419131][T28620] vhci_hcd vhci_hcd.0: stop threads [ 1962.419154][T28620] vhci_hcd vhci_hcd.0: release socket [ 1962.420740][T28620] vhci_hcd vhci_hcd.0: disconnect device [ 1962.420992][T28620] vhci_hcd vhci_hcd.0: stop threads [ 1962.421008][T28620] vhci_hcd vhci_hcd.0: release socket [ 1962.421081][T28620] vhci_hcd vhci_hcd.0: disconnect device [ 1962.426436][T28620] vhci_hcd vhci_hcd.0: stop threads [ 1962.426454][T28620] vhci_hcd vhci_hcd.0: release socket [ 1962.426529][T28620] vhci_hcd vhci_hcd.0: disconnect device [ 1962.435492][T28620] vhci_hcd vhci_hcd.0: stop threads [ 1962.435510][T28620] vhci_hcd vhci_hcd.0: release socket [ 1962.435552][T28620] vhci_hcd vhci_hcd.0: disconnect device [ 1962.438868][T29900] vhci_hcd: connection closed [ 1962.439909][T28620] vhci_hcd vhci_hcd.0: stop threads [ 1962.439929][T28620] vhci_hcd vhci_hcd.0: release socket [ 1962.440008][T28620] vhci_hcd vhci_hcd.0: disconnect device [ 1962.955446][T29933] FAULT_INJECTION: forcing a failure. [ 1962.955446][T29933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1963.000005][T29933] CPU: 0 UID: 0 PID: 29933 Comm: syz.7.5375 Tainted: G L syzkaller #0 PREEMPT(full) [ 1963.000038][T29933] Tainted: [L]=SOFTLOCKUP [ 1963.000046][T29933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1963.000059][T29933] Call Trace: [ 1963.000066][T29933] [ 1963.000075][T29933] dump_stack_lvl+0x100/0x190 [ 1963.000112][T29933] should_fail_ex.cold+0x5/0xa [ 1963.000140][T29933] _copy_to_user+0x32/0xd0 [ 1963.000172][T29933] simple_read_from_buffer+0xcb/0x170 [ 1963.000203][T29933] proc_fail_nth_read+0x1af/0x230 [ 1963.000231][T29933] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1963.000259][T29933] ? rw_verify_area+0xce/0x6d0 [ 1963.000284][T29933] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1963.000310][T29933] vfs_read+0x1e4/0xb30 [ 1963.000339][T29933] ? __pfx_vfs_read+0x10/0x10 [ 1963.000365][T29933] ? __fget_files+0x215/0x3d0 [ 1963.000392][T29933] ? __fget_files+0x21f/0x3d0 [ 1963.000421][T29933] ksys_read+0x12a/0x250 [ 1963.000449][T29933] ? __pfx_ksys_read+0x10/0x10 [ 1963.000487][T29933] do_syscall_64+0x106/0xf80 [ 1963.000509][T29933] ? clear_bhb_loop+0x40/0x90 [ 1963.000535][T29933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1963.000563][T29933] RIP: 0033:0x7f0e3b75cfce [ 1963.000581][T29933] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1963.000603][T29933] RSP: 002b:00007f0e3c5e8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1963.000622][T29933] RAX: ffffffffffffffda RBX: 00007f0e3c5e96c0 RCX: 00007f0e3b75cfce [ 1963.000636][T29933] RDX: 000000000000000f RSI: 00007f0e3c5e90a0 RDI: 0000000000000004 [ 1963.000649][T29933] RBP: 00007f0e3c5e9090 R08: 0000000000000000 R09: 0000000000000000 [ 1963.000662][T29933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1963.000674][T29933] R13: 00007f0e3ba16038 R14: 00007f0e3ba15fa0 R15: 00007ffd810a6918 [ 1963.000704][T29933] [ 1963.205286][T23418] usb usb34-port1: attempt power cycle [ 1963.291629][T19795] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1963.476429][T29944] FAULT_INJECTION: forcing a failure. [ 1963.476429][T29944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1963.495966][T29944] CPU: 1 UID: 0 PID: 29944 Comm: syz.4.5379 Tainted: G L syzkaller #0 PREEMPT(full) [ 1963.495996][T29944] Tainted: [L]=SOFTLOCKUP [ 1963.496003][T29944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1963.496013][T29944] Call Trace: [ 1963.496020][T29944] [ 1963.496028][T29944] dump_stack_lvl+0x100/0x190 [ 1963.496065][T29944] should_fail_ex.cold+0x5/0xa [ 1963.496091][T29944] _copy_from_iter+0x43a/0x1690 [ 1963.496124][T29944] ? __pfx__copy_from_iter+0x10/0x10 [ 1963.496152][T29944] ? find_held_lock+0x2b/0x80 [ 1963.496177][T29944] ? dev_get_by_index+0x180/0x380 [ 1963.496207][T29944] ? dev_get_by_index+0x180/0x380 [ 1963.496246][T29944] packet_sendmsg+0x1dbd/0x53c0 [ 1963.496275][T29944] ? avc_has_perm+0xda/0x1e0 [ 1963.496304][T29944] ? __pfx_avc_has_perm+0x10/0x10 [ 1963.496335][T29944] ? __lock_acquire+0x4a5/0x2630 [ 1963.496369][T29944] ? sock_has_perm+0x258/0x2f0 [ 1963.496399][T29944] ? __pfx_sock_has_perm+0x10/0x10 [ 1963.496433][T29944] ? __pfx_packet_sendmsg+0x10/0x10 [ 1963.496477][T29944] ____sys_sendmsg+0xa54/0xc30 [ 1963.496506][T29944] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1963.496545][T29944] ___sys_sendmsg+0x190/0x1e0 [ 1963.496581][T29944] ? __pfx____sys_sendmsg+0x10/0x10 [ 1963.496643][T29944] __sys_sendmsg+0x170/0x220 [ 1963.496664][T29944] ? __pfx___sys_sendmsg+0x10/0x10 [ 1963.496700][T29944] do_syscall_64+0x106/0xf80 [ 1963.496721][T29944] ? clear_bhb_loop+0x40/0x90 [ 1963.496747][T29944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1963.496768][T29944] RIP: 0033:0x7f425d79c799 [ 1963.496785][T29944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1963.496805][T29944] RSP: 002b:00007f425e5ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1963.496825][T29944] RAX: ffffffffffffffda RBX: 00007f425da15fa0 RCX: 00007f425d79c799 [ 1963.496838][T29944] RDX: 0000000000040015 RSI: 0000200000000180 RDI: 0000000000000003 [ 1963.496850][T29944] RBP: 00007f425e5ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1963.496862][T29944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1963.496875][T29944] R13: 00007f425da16038 R14: 00007f425da15fa0 R15: 00007ffeb168eab8 [ 1963.496904][T29944] [ 1963.791396][T29946] ALSA: mixer_oss: invalid OSS volume '' [ 1964.712240][T17936] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1965.052478][T23418] usb usb34-port1: unable to enumerate USB device [ 1965.135665][T17936] usb 4-1: Using ep0 maxpacket: 8 [ 1965.356834][T17936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1965.393110][T17936] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1965.404021][T17936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1965.464313][T17936] usb 4-1: config 0 descriptor?? [ 1965.721457][T17936] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1965.993926][T29981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1966.008800][T29981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1966.031941][T29980] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1966.303337][T17936] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1966.424703][T26133] usb 4-1: USB disconnect, device number 123 [ 1966.605938][T17936] usb 5-1: Using ep0 maxpacket: 16 [ 1966.664489][T29994] ALSA: mixer_oss: invalid OSS volume '' [ 1966.969052][T17936] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1966.991070][T17936] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1967.528661][T17936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1967.536928][T17936] usb 5-1: Product: syz [ 1967.542339][T17936] usb 5-1: Manufacturer: syz [ 1967.552434][T17936] usb 5-1: SerialNumber: syz [ 1967.719761][T17936] usb 5-1: config 0 descriptor?? [ 1967.937771][T17936] pegasus_notetaker 5-1:0.0: Invalid number of endpoints [ 1967.975873][T17936] pegasus_notetaker 5-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 1968.079350][ T29] audit: type=1400 audit(1772154985.211:2356): avc: denied { read } for pid=30002 comm="syz.9.5396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1968.331318][ T91] usb 5-1: USB disconnect, device number 90 [ 1974.631479][ T91] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1974.791697][ T91] usb 4-1: Using ep0 maxpacket: 8 [ 1974.814114][ T91] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1974.827992][ T91] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1974.848767][ T91] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1974.876206][ T91] usb 4-1: config 0 descriptor?? [ 1975.124178][ T91] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1975.389462][T30057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1975.400841][T30057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1975.702994][ T91] usb 4-1: USB disconnect, device number 124 [ 1976.485268][T30074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5415'. [ 1976.791844][T30074] : entered promiscuous mode [ 1978.447027][T30091] ubi: mtd0 is already attached to ubi31 [ 1978.454314][T30095] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(11) [ 1978.460961][T30095] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1978.470283][T30093] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 1978.476837][T30093] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1978.514831][T30095] vhci_hcd vhci_hcd.0: Device attached [ 1978.535856][T30091] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5421'. [ 1978.573990][T30093] vhci_hcd vhci_hcd.0: Device attached [ 1978.715316][T30095] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(13) [ 1978.721954][T30095] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1978.743158][T30104] rdma_rxe: rxe_newlink: failed to add lo [ 1978.758239][T30095] vhci_hcd vhci_hcd.0: Device attached [ 1978.790025][ T91] usb 47-1: new low-speed USB device number 4 using vhci_hcd [ 1979.226436][T30093] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(10) [ 1979.233044][T30093] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1979.268581][T30093] vhci_hcd vhci_hcd.0: Device attached [ 1979.325814][T30095] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(15) [ 1979.332459][T30095] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1979.375519][T30095] vhci_hcd vhci_hcd.0: Device attached [ 1979.401316][T30093] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(21) [ 1979.407950][T30093] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1979.519922][T30121] ALSA: mixer_oss: invalid OSS volume '' [ 1979.522227][T30112] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1979.952078][T30093] vhci_hcd vhci_hcd.0: Device attached [ 1980.610071][T30122] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1980.788042][T30117] vhci_hcd: connection closed [ 1980.788420][T17329] vhci_hcd vhci_hcd.7: stop threads [ 1980.804972][T17329] vhci_hcd vhci_hcd.7: release socket [ 1980.810423][T30094] vhci_hcd: connection reset by peer [ 1980.815906][T30098] vhci_hcd: connection closed [ 1980.816071][T30103] vhci_hcd: connection closed [ 1980.820748][T30107] vhci_hcd: connection closed [ 1980.832299][T30110] vhci_hcd: connection closed [ 1980.838110][T17329] vhci_hcd vhci_hcd.7: disconnect device [ 1980.850548][T17329] vhci_hcd vhci_hcd.7: stop threads [ 1980.856078][T17329] vhci_hcd vhci_hcd.7: release socket [ 1980.910248][T17329] vhci_hcd vhci_hcd.7: disconnect device [ 1980.916046][T17329] vhci_hcd vhci_hcd.7: stop threads [ 1980.923083][T17329] vhci_hcd vhci_hcd.7: release socket [ 1980.929704][T17329] vhci_hcd vhci_hcd.7: disconnect device [ 1980.936528][T17329] vhci_hcd vhci_hcd.7: stop threads [ 1980.945544][T17329] vhci_hcd vhci_hcd.7: release socket [ 1981.131240][T17329] vhci_hcd vhci_hcd.7: disconnect device [ 1981.140587][T17329] vhci_hcd vhci_hcd.7: stop threads [ 1981.146356][T17329] vhci_hcd vhci_hcd.7: release socket [ 1981.153212][T17329] vhci_hcd vhci_hcd.7: disconnect device [ 1981.159201][T17329] vhci_hcd vhci_hcd.7: stop threads [ 1981.165243][T17329] vhci_hcd vhci_hcd.7: release socket [ 1981.308427][T17329] vhci_hcd vhci_hcd.7: disconnect device [ 1981.975523][T30145] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5434'. [ 1981.986781][T30145] netlink: 116 bytes leftover after parsing attributes in process `syz.7.5434'. [ 1981.998158][T30145] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=30145 comm=syz.7.5434 [ 1982.071535][T30150] CIFS mount error: No usable UNC path provided in device string! [ 1982.071535][T30150] [ 1982.081771][T30150] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1982.500587][T30151] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5434'. [ 1982.557834][T30145] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=30145 comm=syz.7.5434 [ 1982.578623][T30152] ubi: mtd0 is already attached to ubi31 [ 1982.597403][T30152] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5435'. [ 1982.777678][T17936] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1982.959666][T17936] usb 4-1: Using ep0 maxpacket: 16 [ 1982.976592][T17936] usb 4-1: too many configurations: 180, using maximum allowed: 8 [ 1983.973789][T17936] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1983.982879][T17936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1983.991001][T17936] usb 4-1: Product: syz [ 1983.995579][T17936] usb 4-1: Manufacturer: syz [ 1984.000651][T17936] usb 4-1: SerialNumber: syz [ 1984.019355][T17936] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1984.025665][T17936] r8152-cfgselector 4-1: config 0 descriptor?? [ 1984.295631][ T91] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1984.442972][T17936] r8152-cfgselector 4-1: Unknown version 0x28c0 [ 1984.464894][T17936] r8152-cfgselector 4-1: bad CDC descriptors [ 1985.835954][T18288] usb usb48-port1: attempt power cycle [ 1986.001354][T17936] r8152-cfgselector 4-1: USB disconnect, device number 125 [ 1986.272020][T30192] ubi: mtd0 is already attached to ubi31 [ 1986.314840][T30192] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5446'. [ 1986.451406][T18288] usb usb48-port1: unable to enumerate USB device [ 1986.961998][T30207] FAULT_INJECTION: forcing a failure. [ 1986.961998][T30207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1986.962023][T30207] CPU: 0 UID: 0 PID: 30207 Comm: syz.7.5449 Tainted: G L syzkaller #0 PREEMPT(full) [ 1986.962039][T30207] Tainted: [L]=SOFTLOCKUP [ 1986.962043][T30207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1986.962050][T30207] Call Trace: [ 1986.962054][T30207] [ 1986.962059][T30207] dump_stack_lvl+0x100/0x190 [ 1986.962081][T30207] should_fail_ex.cold+0x5/0xa [ 1986.962097][T30207] _copy_from_user+0x2e/0xd0 [ 1986.962113][T30207] copy_msghdr_from_user+0x9f/0x4f0 [ 1986.962129][T30207] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1986.962151][T30207] ___sys_sendmsg+0x106/0x1e0 [ 1986.962167][T30207] ? __pfx____sys_sendmsg+0x10/0x10 [ 1986.962199][T30207] __sys_sendmsg+0x170/0x220 [ 1986.962210][T30207] ? __pfx___sys_sendmsg+0x10/0x10 [ 1986.962231][T30207] do_syscall_64+0x106/0xf80 [ 1986.962242][T30207] ? clear_bhb_loop+0x40/0x90 [ 1986.962257][T30207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1986.962268][T30207] RIP: 0033:0x7f0e3b79c799 [ 1986.962278][T30207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1986.962289][T30207] RSP: 002b:00007f0e3c5e9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1986.962300][T30207] RAX: ffffffffffffffda RBX: 00007f0e3ba15fa0 RCX: 00007f0e3b79c799 [ 1986.962308][T30207] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 1986.962315][T30207] RBP: 00007f0e3c5e9090 R08: 0000000000000000 R09: 0000000000000000 [ 1986.962322][T30207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1986.962328][T30207] R13: 00007f0e3ba16038 R14: 00007f0e3ba15fa0 R15: 00007ffd810a6918 [ 1986.962343][T30207] [ 1987.125273][T30212] binder: 30209:30212 ioctl 4018620d 0 returned -22 [ 1987.546700][T17936] usb 10-1: new full-speed USB device number 73 using dummy_hcd [ 1987.587007][T30215] FAULT_INJECTION: forcing a failure. [ 1987.587007][T30215] name failslab, interval 1, probability 0, space 0, times 0 [ 1987.587044][T30215] CPU: 1 UID: 0 PID: 30215 Comm: syz.4.5451 Tainted: G L syzkaller #0 PREEMPT(full) [ 1987.587073][T30215] Tainted: [L]=SOFTLOCKUP [ 1987.587080][T30215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1987.587091][T30215] Call Trace: [ 1987.587097][T30215] [ 1987.587105][T30215] dump_stack_lvl+0x100/0x190 [ 1987.587138][T30215] should_fail_ex.cold+0x5/0xa [ 1987.587165][T30215] should_failslab+0xc2/0x120 [ 1987.587201][T30215] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1987.587226][T30215] ? do_getname+0x35/0x390 [ 1987.587248][T30215] ? strncpy_from_user+0x19d/0x2d0 [ 1987.587277][T30215] do_getname+0x35/0x390 [ 1987.587304][T30215] __x64_sys_rename+0x66/0xb0 [ 1987.587329][T30215] do_syscall_64+0x106/0xf80 [ 1987.587349][T30215] ? clear_bhb_loop+0x40/0x90 [ 1987.587375][T30215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1987.587395][T30215] RIP: 0033:0x7f425d79c799 [ 1987.587412][T30215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1987.587431][T30215] RSP: 002b:00007f425e5ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 1987.587452][T30215] RAX: ffffffffffffffda RBX: 00007f425da15fa0 RCX: 00007f425d79c799 [ 1987.587466][T30215] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 00002000000001c0 [ 1987.587478][T30215] RBP: 00007f425e5ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1987.587491][T30215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1987.587503][T30215] R13: 00007f425da16038 R14: 00007f425da15fa0 R15: 00007ffeb168eab8 [ 1987.587527][T30215] [ 1987.731113][T17936] usb 10-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=5b.81 [ 1987.731134][T17936] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1987.767549][T17936] usb 10-1: config 0 descriptor?? [ 1987.784547][T17936] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 1987.784588][T17936] dvb-usb: bulk message failed: -22 (3/0) [ 1987.789846][T17936] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1987.807868][T30218] syzkaller0: entered promiscuous mode [ 1987.807881][T30218] syzkaller0: entered allmulticast mode [ 1987.810328][T17936] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 1987.810362][T17936] usb 10-1: media controller created [ 1987.810408][T17936] dvb-usb: bulk message failed: -22 (5/0) [ 1987.810443][T17936] dvb-usb: MAC address reading failed. [ 1987.811692][T17936] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1987.841694][T17936] dvb-usb: bulk message failed: -22 (6/0) [ 1987.841829][T17936] dvb-usb: bulk message failed: -22 (6/0) [ 1987.841876][T17936] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 1987.856451][T17936] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input87 [ 1987.859629][T17936] dvb-usb: schedule remote query interval to 100 msecs. [ 1987.859645][T17936] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 1988.058035][T17936] dvb-usb: bulk message failed: -22 (2/0) [ 1988.058083][T17936] dvb-usb: error while querying for an remote control event. [ 1988.165789][T17936] dvb-usb: bulk message failed: -22 (2/0) [ 1988.165820][T17936] dvb-usb: error while querying for an remote control event. [ 1988.283908][T17936] dvb-usb: bulk message failed: -22 (2/0) [ 1988.283936][T17936] dvb-usb: error while querying for an remote control event. [ 1988.401131][T17936] dvb-usb: bulk message failed: -22 (2/0) [ 1988.401152][T17936] dvb-usb: error while querying for an remote control event. [ 1988.555683][T17936] dvb-usb: bulk message failed: -22 (2/0) [ 1988.555716][T17936] dvb-usb: error while querying for an remote control event. [ 1988.684623][T30227] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1988.687762][T30227] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1988.792866][T17936] dvb-usb: bulk message failed: -22 (2/0) [ 1988.793668][T17936] dvb-usb: error while querying for an remote control event. [ 1988.905257][T17936] dvb-usb: bulk message failed: -22 (2/0) [ 1988.905372][T17936] dvb-usb: error while querying for an remote control event. [ 1989.033876][T17936] dvb-usb: bulk message failed: -22 (2/0) [ 1989.033907][T17936] dvb-usb: error while querying for an remote control event. [ 1989.172069][T17936] dvb-usb: bulk message failed: -22 (2/0) [ 1989.172102][T17936] dvb-usb: error while querying for an remote control event. [ 1989.363063][T17936] dvb-usb: bulk message failed: -22 (2/0) [ 1989.395249][T17936] dvb-usb: error while querying for an remote control event. [ 1989.513353][T17936] dvb-usb: bulk message failed: -22 (2/0) [ 1989.513376][T17936] dvb-usb: error while querying for an remote control event. [ 1989.634270][T17936] dvb-usb: bulk message failed: -22 (2/0) [ 1989.634291][T17936] dvb-usb: error while querying for an remote control event. [ 1989.736941][T30234] FAULT_INJECTION: forcing a failure. [ 1989.736941][T30234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1989.737014][T30234] CPU: 1 UID: 0 PID: 30234 Comm: syz.7.5457 Tainted: G L syzkaller #0 PREEMPT(full) [ 1989.737045][T30234] Tainted: [L]=SOFTLOCKUP [ 1989.737051][T30234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1989.737061][T30234] Call Trace: [ 1989.737068][T30234] [ 1989.737075][T30234] dump_stack_lvl+0x100/0x190 [ 1989.737108][T30234] should_fail_ex.cold+0x5/0xa [ 1989.737134][T30234] _copy_to_user+0x32/0xd0 [ 1989.737162][T30234] simple_read_from_buffer+0xcb/0x170 [ 1989.737194][T30234] proc_fail_nth_read+0x1af/0x230 [ 1989.737221][T30234] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1989.737250][T30234] ? rw_verify_area+0xce/0x6d0 [ 1989.737274][T30234] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1989.737301][T30234] vfs_read+0x1e4/0xb30 [ 1989.737357][T30234] ? __pfx_vfs_read+0x10/0x10 [ 1989.737385][T30234] ? __fget_files+0x215/0x3d0 [ 1989.737412][T30234] ? __fget_files+0x21f/0x3d0 [ 1989.737442][T30234] ksys_read+0x12a/0x250 [ 1989.737472][T30234] ? __pfx_ksys_read+0x10/0x10 [ 1989.737510][T30234] do_syscall_64+0x106/0xf80 [ 1989.737531][T30234] ? clear_bhb_loop+0x40/0x90 [ 1989.737558][T30234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1989.737579][T30234] RIP: 0033:0x7f0e3b75cfce [ 1989.737597][T30234] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1989.737617][T30234] RSP: 002b:00007f0e3c5e8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1989.737637][T30234] RAX: ffffffffffffffda RBX: 00007f0e3c5e96c0 RCX: 00007f0e3b75cfce [ 1989.737651][T30234] RDX: 000000000000000f RSI: 00007f0e3c5e90a0 RDI: 0000000000000004 [ 1989.737664][T30234] RBP: 00007f0e3c5e9090 R08: 0000000000000000 R09: 0000000000000000 [ 1989.737677][T30234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1989.737689][T30234] R13: 00007f0e3ba16038 R14: 00007f0e3ba15fa0 R15: 00007ffd810a6918 [ 1989.737720][T30234] [ 1989.748524][T17936] dvb-usb: bulk message failed: -22 (2/0) [ 1989.748553][T17936] dvb-usb: error while querying for an remote control event. [ 1989.867770][T17936] dvb-usb: bulk message failed: -22 (2/0) [ 1989.867791][T17936] dvb-usb: error while querying for an remote control event. [ 1989.983085][T17936] dvb-usb: bulk message failed: -22 (2/0) [ 1989.983118][T17936] dvb-usb: error while querying for an remote control event. [ 1990.108164][T17936] dvb-usb: bulk message failed: -22 (2/0) [ 1990.108195][T17936] dvb-usb: error while querying for an remote control event. [ 1990.119691][T30250] netlink: 176 bytes leftover after parsing attributes in process `syz.0.5461'. [ 1990.222010][T17936] dvb-usb: bulk message failed: -22 (2/0) [ 1990.222030][T17936] dvb-usb: error while querying for an remote control event. [ 1990.342504][T17936] dvb-usb: bulk message failed: -22 (2/0) [ 1990.342524][T17936] dvb-usb: error while querying for an remote control event. [ 1990.357470][T30254] xt_connbytes: Forcing CT accounting to be enabled [ 1990.357769][T30254] set match dimension is over the limit! [ 1990.456559][T17936] dvb-usb: bulk message failed: -22 (2/0) [ 1990.456579][T17936] dvb-usb: error while querying for an remote control event. [ 1990.582677][T17936] dvb-usb: bulk message failed: -22 (2/0) [ 1990.582699][T17936] dvb-usb: error while querying for an remote control event. [ 1990.733928][T17936] dvb-usb: bulk message failed: -22 (2/0) [ 1990.733966][T17936] dvb-usb: error while querying for an remote control event. [ 1990.856877][T30262] CIFS mount error: No usable UNC path provided in device string! [ 1990.856877][T30262] [ 1990.856934][T30262] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1991.547276][T17936] dvb-usb: bulk message failed: -22 (2/0) [ 1991.547307][T17936] dvb-usb: error while querying for an remote control event. [ 1991.600367][T18288] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1991.661805][T17936] dvb-usb: bulk message failed: -22 (2/0) [ 1991.661832][T17936] dvb-usb: error while querying for an remote control event. [ 1991.770608][T18288] usb 5-1: Using ep0 maxpacket: 16 [ 1991.773042][T18288] usb 5-1: too many configurations: 180, using maximum allowed: 8 [ 1991.789696][T17936] dvb-usb: bulk message failed: -22 (2/0) [ 1992.452060][T18288] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1992.463458][T23418] usb 10-1: USB disconnect, device number 73 [ 1992.509764][T17936] dvb-usb: error while querying for an remote control event. [ 1992.559975][T23418] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 1992.573029][T30270] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5468'. [ 1992.584228][T30270] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5468'. [ 1992.611087][T18288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1992.708022][T18288] usb 5-1: Product: syz [ 1992.721219][T18288] usb 5-1: Manufacturer: syz [ 1992.729581][T18288] usb 5-1: SerialNumber: syz [ 1992.785885][T18288] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1992.803024][T18288] r8152-cfgselector 5-1: config 0 descriptor?? [ 1992.968010][T23418] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1992.997605][T30286] input: syz0 as /devices/virtual/input/input88 [ 1993.038310][T18288] r8152-cfgselector 5-1: Unknown version 0x28c0 [ 1993.053510][T18288] r8152-cfgselector 5-1: bad CDC descriptors [ 1993.152813][T23418] usb 4-1: Using ep0 maxpacket: 16 [ 1993.174276][T23418] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=dd.d4 [ 1993.187637][T23418] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1993.322698][T23418] usb 4-1: Product: syz [ 1993.332810][T23418] usb 4-1: Manufacturer: syz [ 1993.343739][T23418] usb 4-1: SerialNumber: syz [ 1994.800302][T18288] r8152-cfgselector 5-1: USB disconnect, device number 91 [ 1994.918694][T23418] usb 4-1: config 0 descriptor?? [ 1994.933783][T23418] usb_ehset_test 4-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 1995.738397][T23418] usb 4-1: USB disconnect, device number 126 [ 1997.586849][T30297] uprobe: syz.0.5473:30297 failed to unregister, leaking uprobe ¨@[ 1997.638345][T30313] xt_l2tp: v2 doesn't support IP mode [ 1997.816962][T30319] ubi: mtd0 is already attached to ubi31 [ 1997.845993][T30319] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5481'. [ 1997.947530][T23418] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1998.245827][T23418] usb 4-1: device descriptor read/64, error -71 [ 1998.453737][ T29] audit: type=1326 audit(1772155013.629:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30326 comm="syz.4.5483" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f425d796517 code=0x0 [ 1998.503603][T23418] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1998.685164][T23418] usb 4-1: device descriptor read/64, error -71 [ 1998.815934][T23418] usb usb4-port1: attempt power cycle [ 1999.198455][T23418] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1999.237662][T23418] usb 4-1: device descriptor read/8, error -71 [ 1999.497889][T23418] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1999.533101][T23418] usb 4-1: device descriptor read/8, error -71 [ 1999.696994][T23418] usb usb4-port1: unable to enumerate USB device [ 2000.239924][T23418] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 2000.364335][T30360] ubi: mtd0 is already attached to ubi31 [ 2000.411454][T30360] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5492'. [ 2000.438650][T23418] usb 5-1: Using ep0 maxpacket: 16 [ 2000.447541][T23418] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=dd.d4 [ 2000.462465][T23418] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2000.500337][T23418] usb 5-1: Product: syz [ 2000.505221][T23418] usb 5-1: Manufacturer: syz [ 2000.509838][T23418] usb 5-1: SerialNumber: syz [ 2000.523024][T30366] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 2000.524939][T23418] usb 5-1: config 0 descriptor?? [ 2000.529556][T30366] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2000.544269][T30366] vhci_hcd vhci_hcd.0: Device attached [ 2000.553425][T23418] usb_ehset_test 5-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 2000.563948][T30366] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(10) [ 2000.570568][T30366] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2000.580864][T30366] vhci_hcd vhci_hcd.0: Device attached [ 2000.588861][T30366] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(12) [ 2000.595474][T30366] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2000.605403][T30366] vhci_hcd vhci_hcd.0: Device attached [ 2000.621066][T30366] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(14) [ 2000.627695][T30366] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2000.659345][T30366] vhci_hcd vhci_hcd.0: Device attached [ 2000.674176][T30366] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(16) [ 2000.680796][T30366] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2000.712987][T30366] vhci_hcd vhci_hcd.0: Device attached [ 2000.721266][T30366] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(20) [ 2000.728154][T30366] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2000.738126][T30366] vhci_hcd vhci_hcd.0: Device attached [ 2000.744909][T30366] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2000.772827][T30366] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2000.798188][ T91] usb 5-1: USB disconnect, device number 92 [ 2000.804322][T18288] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 2000.804343][T30380] vhci_hcd: connection closed [ 2001.129446][T30378] vhci_hcd: connection closed [ 2001.135228][T30374] vhci_hcd: connection closed [ 2001.138629][T30372] vhci_hcd: connection closed [ 2001.144674][T30370] vhci_hcd: connection closed [ 2001.149557][T30367] vhci_hcd: connection reset by peer [ 2001.155260][ T13] vhci_hcd vhci_hcd.3: stop threads [ 2001.173477][ T13] vhci_hcd vhci_hcd.3: release socket [ 2001.189666][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 2001.200637][ T13] vhci_hcd vhci_hcd.3: stop threads [ 2001.206753][ T13] vhci_hcd vhci_hcd.3: release socket [ 2001.219739][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 2001.230911][ T13] vhci_hcd vhci_hcd.3: stop threads [ 2001.237021][ T13] vhci_hcd vhci_hcd.3: release socket [ 2001.248587][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 2001.255458][ T13] vhci_hcd vhci_hcd.3: stop threads [ 2001.264268][ T13] vhci_hcd vhci_hcd.3: release socket [ 2001.269843][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 2001.279654][ T13] vhci_hcd vhci_hcd.3: stop threads [ 2001.288137][ T13] vhci_hcd vhci_hcd.3: release socket [ 2001.296595][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 2001.307352][ T13] vhci_hcd vhci_hcd.3: stop threads [ 2001.312595][ T13] vhci_hcd vhci_hcd.3: release socket [ 2001.319382][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 2001.346675][T30389] xt_hashlimit: size too large, truncated to 1048576 [ 2003.539326][ T29] audit: type=1400 audit(1772155018.352:2358): avc: denied { unmount } for pid=22780 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 2003.659086][T30418] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2003.686835][T30418] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 2003.724529][T30418] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2005.128435][T30443] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 2005.134989][T30443] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2005.177538][T30443] vhci_hcd vhci_hcd.0: Device attached [ 2005.207927][T30447] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(11) [ 2005.214572][T30447] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2005.302736][T30447] vhci_hcd vhci_hcd.0: Device attached [ 2005.328780][T30443] vhci_hcd vhci_hcd.0: pdev(9) rhport(2) sockfd(10) [ 2005.335402][T30443] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2005.474074][T30443] vhci_hcd vhci_hcd.0: Device attached [ 2005.516847][T30447] vhci_hcd vhci_hcd.0: pdev(9) rhport(3) sockfd(13) [ 2005.517396][T19795] usb 51-1: new low-speed USB device number 2 using vhci_hcd [ 2005.523478][T30447] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2005.659118][T30447] vhci_hcd vhci_hcd.0: Device attached [ 2006.276321][T18288] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 2006.553461][T23418] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 2006.685120][T30443] vhci_hcd vhci_hcd.0: pdev(9) rhport(4) sockfd(17) [ 2006.692723][T30443] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2006.994815][T30447] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(21) [ 2007.002292][T30447] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2007.024419][T30443] vhci_hcd vhci_hcd.0: Device attached [ 2007.087384][T30472] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2007.095712][T23418] usb 5-1: Using ep0 maxpacket: 16 [ 2007.126160][T23418] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=dd.d4 [ 2007.148937][T23418] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2007.172919][T30443] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2007.201224][T23418] usb 5-1: Product: syz [ 2007.219445][T23418] usb 5-1: Manufacturer: syz [ 2007.234152][T23418] usb 5-1: SerialNumber: syz [ 2007.240420][T30447] vhci_hcd vhci_hcd.0: Device attached [ 2007.253256][T23418] usb 5-1: config 0 descriptor?? [ 2007.635093][T23418] usb_ehset_test 5-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 2007.660524][T30462] vhci_hcd: connection closed [ 2007.660693][T30456] vhci_hcd: connection closed [ 2007.669553][T18597] vhci_hcd vhci_hcd.9: stop threads [ 2007.681003][T30448] vhci_hcd: connection closed [ 2007.682371][T30451] vhci_hcd: connection closed [ 2007.687092][T30466] vhci_hcd: connection closed [ 2007.693280][T30444] vhci_hcd: connection reset by peer [ 2007.733433][T18597] vhci_hcd vhci_hcd.9: release socket [ 2007.853685][T18597] vhci_hcd vhci_hcd.9: disconnect device [ 2008.004352][T18597] vhci_hcd vhci_hcd.9: stop threads [ 2008.014415][T18597] vhci_hcd vhci_hcd.9: release socket [ 2008.021663][T18597] vhci_hcd vhci_hcd.9: disconnect device [ 2008.033829][T18597] vhci_hcd vhci_hcd.9: stop threads [ 2008.039194][T18597] vhci_hcd vhci_hcd.9: release socket [ 2008.046379][T18597] vhci_hcd vhci_hcd.9: disconnect device [ 2008.053611][T18597] vhci_hcd vhci_hcd.9: stop threads [ 2008.060917][T18597] vhci_hcd vhci_hcd.9: release socket [ 2008.102809][T18597] vhci_hcd vhci_hcd.9: disconnect device [ 2008.134412][T30489] netlink: 'syz.0.5521': attribute type 21 has an invalid length. [ 2008.136146][T26133] usb 5-1: USB disconnect, device number 93 [ 2008.143972][ T5917] usb usb40-port1: attempt power cycle [ 2008.157928][T18597] vhci_hcd vhci_hcd.9: stop threads [ 2008.163159][T18597] vhci_hcd vhci_hcd.9: release socket [ 2008.169132][ T29] audit: type=1400 audit(1772155022.711:2359): avc: denied { bind } for pid=30488 comm="syz.0.5521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2008.211331][T18597] vhci_hcd vhci_hcd.9: disconnect device [ 2008.219502][T18597] vhci_hcd vhci_hcd.9: stop threads [ 2008.235938][T18597] vhci_hcd vhci_hcd.9: release socket [ 2008.253549][T18597] vhci_hcd vhci_hcd.9: disconnect device [ 2009.103841][ T5917] usb usb40-port1: unable to enumerate USB device [ 2010.858846][T30516] lo speed is unknown, defaulting to 1000 [ 2010.889854][T30516] lo speed is unknown, defaulting to 1000 [ 2011.113132][T26133] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 2011.300161][T26133] usb 5-1: Using ep0 maxpacket: 16 [ 2011.353425][T26133] usb 5-1: config 0 has no interfaces? [ 2011.430869][T26133] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2011.464021][T26133] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2011.631498][T26133] usb 5-1: Manufacturer: syz [ 2011.637924][T26133] usb 5-1: config 0 descriptor?? [ 2011.758091][T30528] o2cb: This node has not been configured. [ 2011.764374][T30528] o2cb: Cluster check failed. Fix errors before retrying. [ 2011.771753][T30528] (syz.7.5531,30528,1):user_dlm_register:674 ERROR: status = -22 [ 2011.779612][T30528] (syz.7.5531,30528,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 2011.797688][T30528] o2cb: This node has not been configured. [ 2011.804202][T30528] o2cb: Cluster check failed. Fix errors before retrying. [ 2011.811429][T30528] (syz.7.5531,30528,1):user_dlm_register:674 ERROR: status = -22 [ 2011.819479][T30528] (syz.7.5531,30528,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 2011.853442][ T29] audit: type=1400 audit(1772155026.069:2360): avc: denied { add_name } for pid=30522 comm="syz.7.5531" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2011.901396][T18288] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 2012.026509][ T29] audit: type=1400 audit(1772155026.069:2361): avc: denied { create } for pid=30522 comm="syz.7.5531" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 2012.047427][ T29] audit: type=1400 audit(1772155026.069:2362): avc: denied { associate } for pid=30522 comm="syz.7.5531" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2012.091275][T19795] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 2012.176713][T18288] usb 4-1: Using ep0 maxpacket: 16 [ 2012.190627][T18288] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2012.210413][T18288] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2012.226853][T18288] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2012.258791][T18288] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2012.277887][T18288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2012.305965][T18288] usb 4-1: config 0 descriptor?? [ 2012.385236][ T5917] usb 5-1: USB disconnect, device number 94 [ 2012.756166][T30525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2012.764978][T30525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2012.801846][T18288] microsoft 0003:045E:07DA.002C: item fetching failed at offset 31/34 [ 2012.818905][T18288] microsoft 0003:045E:07DA.002C: parse failed [ 2012.912955][T18288] microsoft 0003:045E:07DA.002C: probe with driver microsoft failed with error -22 [ 2014.290829][ T91] usb usb52-port1: attempt power cycle [ 2014.712406][T26133] usb 4-1: USB disconnect, device number 5 [ 2016.028319][ T91] usb usb52-port1: unable to enumerate USB device [ 2016.534549][T26133] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 2017.315898][T26133] usb 5-1: Using ep0 maxpacket: 16 [ 2021.059709][ C0] sched: DL replenish lagged too much [ 2022.857639][T26133] usb 5-1: device descriptor read/all, error -110 [ 2024.694946][T26133] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 2144.255719][T26133] usb 5-1: device descriptor read/64, error -32 [ 2170.891484][T26133] usb usb5-port1: attempt power cycle [ 2209.097675][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2209.104658][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P19441/1:b..l [ 2209.113364][ C0] rcu: (detected by 0, t=10503 jiffies, g=187889, q=3533 ncpus=2) [ 2209.121788][ C0] task:syz-executor state:R running task stack:24056 pid:19441 tgid:19441 ppid:19440 task_flags:0x400140 flags:0x00080000 [ 2209.137397][ C0] Call Trace: [ 2209.140685][ C0] [ 2209.143617][ C0] __schedule+0xfee/0x60e0 [ 2209.148065][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 2209.153295][ C0] ? __pfx___schedule+0x10/0x10 [ 2209.158163][ C0] ? mark_held_locks+0x40/0x70 [ 2209.162953][ C0] preempt_schedule_irq+0x50/0x90 [ 2209.168000][ C0] irqentry_exit+0x17b/0x670 [ 2209.172587][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2209.178571][ C0] RIP: 0010:lock_acquire+0x4a/0x380 [ 2209.183778][ C0] Code: 65 4c 8b 3d e0 b6 28 12 4c 89 7c 24 30 4d 89 cf 66 90 65 8b 05 fb b6 28 12 83 f8 07 0f 87 f0 00 00 00 48 0f a3 05 c6 9d f4 0e <0f> 82 c2 02 00 00 8b 35 ae d1 f4 0e 85 f6 0f 85 dd 00 00 00 48 8b [ 2209.204347][ C0] RSP: 0018:ffffc9000fd47240 EFLAGS: 00000297 [ 2209.210419][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000002 [ 2209.218387][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e7e93e0 [ 2209.226880][ C0] RBP: ffffffff8e7e93e0 R08: 0000000000000000 R09: 0000000000000000 [ 2209.234860][ C0] R10: 0000000000000200 R11: 000000000000f332 R12: 0000000000000002 [ 2209.242846][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2209.250861][ C0] ? unwind_next_frame+0x3be/0x1ea0 [ 2209.256073][ C0] ? unwind_next_frame+0x3be/0x1ea0 [ 2209.261281][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2209.267442][ C0] unwind_next_frame+0xd1/0x1ea0 [ 2209.272379][ C0] ? unwind_next_frame+0xbd/0x1ea0 [ 2209.277494][ C0] ? save_stack+0x162/0x1e0 [ 2209.282010][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2209.288177][ C0] arch_stack_walk+0x94/0xf0 [ 2209.292771][ C0] ? save_stack+0x162/0x1e0 [ 2209.297284][ C0] stack_trace_save+0x8e/0xc0 [ 2209.301962][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 2209.307336][ C0] ? __lock_acquire+0x4a5/0x2630 [ 2209.312282][ C0] ? __lock_acquire+0x4a5/0x2630 [ 2209.317242][ C0] save_stack+0x162/0x1e0 [ 2209.321607][ C0] ? __pfx_save_stack+0x10/0x10 [ 2209.326694][ C0] ? page_ext_put+0x3e/0xd0 [ 2209.331242][ C0] __reset_page_owner+0x84/0x190 [ 2209.336214][ C0] __free_frozen_pages+0x7e1/0x10d0 [ 2209.341431][ C0] ? __free_slab+0xd0/0x220 [ 2209.345962][ C0] ? tomoyo_realpath_from_path+0xb6/0x690 [ 2209.351689][ C0] qlist_free_all+0x47/0xe0 [ 2209.356199][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 2209.361668][ C0] __kasan_slab_alloc+0x69/0x90 [ 2209.366523][ C0] __kmalloc_noprof+0x2b9/0x850 [ 2209.371398][ C0] tomoyo_realpath_from_path+0xb6/0x690 [ 2209.376953][ C0] tomoyo_check_open_permission+0x2af/0x3c0 [ 2209.382856][ C0] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 2209.389298][ C0] ? do_file_open+0x20e/0x430 [ 2209.394089][ C0] ? do_syscall_64+0x106/0xf80 [ 2209.399046][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2209.405138][ C0] ? do_raw_spin_lock+0x128/0x260 [ 2209.410163][ C0] ? path_get+0x61/0x80 [ 2209.414329][ C0] tomoyo_file_open+0x6b/0x90 [ 2209.419018][ C0] security_file_open+0xb5/0x1e0 [ 2209.423959][ C0] do_dentry_open+0x5aa/0x1660 [ 2209.428734][ C0] ? security_inode_permission+0xbf/0x250 [ 2209.434462][ C0] vfs_open+0x82/0x3f0 [ 2209.438537][ C0] path_openat+0x208c/0x31a0 [ 2209.443137][ C0] ? __pfx_path_openat+0x10/0x10 [ 2209.448444][ C0] do_file_open+0x20e/0x430 [ 2209.452947][ C0] ? __pfx_do_file_open+0x10/0x10 [ 2209.458078][ C0] ? alloc_fd+0x476/0x790 [ 2209.462467][ C0] ? do_getname+0x191/0x390 [ 2209.467146][ C0] do_sys_openat2+0x10d/0x1e0 [ 2209.471826][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 2209.477033][ C0] __x64_sys_openat+0x12d/0x210 [ 2209.482001][ C0] ? __pfx___x64_sys_openat+0x10/0x10 [ 2209.487411][ C0] ? do_user_addr_fault+0x8d6/0x12f0 [ 2209.492722][ C0] do_syscall_64+0x106/0xf80 [ 2209.497324][ C0] ? clear_bhb_loop+0x40/0x90 [ 2209.502025][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2209.508008][ C0] RIP: 0033:0x7f0df8f9babc [ 2209.512439][ C0] RSP: 002b:00007ffd4590ea30 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 2209.520861][ C0] RAX: ffffffffffffffda RBX: 00007f0df9031f90 RCX: 00007f0df8f9babc [ 2209.528843][ C0] RDX: 0000000000090800 RSI: 00007ffd4590fbe0 RDI: 00000000ffffff9c [ 2209.537055][ C0] RBP: 00007ffd4590fbcc R08: 0000000000000000 R09: 0000000000000000 [ 2209.545028][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffd4590fbe0 [ 2209.553173][ C0] R13: 00007f0df9031f90 R14: 00000000001d2831 R15: 00007ffd4590fc20 [ 2209.561166][ C0]