last executing test programs: 10m47.296100228s ago: executing program 1 (id=1838): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="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"/471], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x8000) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000900)) fsopen(0x0, 0x1) fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) fadvise64(r3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000000)={0x100000002, 0x8000000000000001, 0xca, 0x9, 0x64ea, 0x4, 'r!\x00', 0x8, 0x5, 0x5, 0x4, 0xaf, 0xb, 0xf2}) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x400) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000040)={0x1, 0x3, 0xc3, 0x3, 0x7f}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="fdffffff000000000000", @ANYRES32=0x0], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r6, @ANYBLOB="05"], 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000440)={'sit0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x10, 0x0, 0x4, 0x10000000, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x4, 0x0, @loopback, @local}}}}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x2e76be}], 0x1}, 0x3) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 10m46.140062625s ago: executing program 1 (id=1841): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x8, 0x920) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r4, 0x40045731, &(0x7f0000000340)=0x800) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r5}, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0x11, &(0x7f0000000800)=ANY=[@ANYBLOB="18020000010000000000000002000400850000004f000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="000000000000087254f51954709064c76f0000b7050000037fa78185000000b20ad2377fa8000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="0400"}) close(r1) io_setup(0x4bff, &(0x7f0000000040)=0x0) openat$panthor(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) r10 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000700), 0x800, 0x0) io_submit(r9, 0x5, &(0x7f0000000b00)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f00000001c0)="ca3f5d3fd7051961cd332ceab1ccda39b898c5735fce8402059d2d550b690e28eed8169f0b777367c5fe4a34", 0x2c, 0x8000000000, 0x0, 0x3, r0}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1, r7, &(0x7f0000000380)="bf2a3aac6252a29072466b9b1538640d075c8ecad360f04d6d272f9c5e9cceed5ef1c9", 0x23, 0x7a, 0x0, 0x3, r2}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x7, 0xfff8, 0xffffffffffffffff, &(0x7f00000005c0)="32322c7d1228cc879bb4b60c4292710a1fe08c30a6dffc07742d8831168f38d9ba7393018b563fba967efad611e90ee4e0ded95f7f9cbc80eae1fed71771eda2d78eb211a7b31f8bea27cb8fd9304ee58d869122a0d834ebba65630cca5ab528f69947db84d6caa20df280cbda05d95fc6a15831ab36fbe802cfbbec37e7cc013200b43f3d6e25e40d86bff1caec8769c00de6159277de1f0df3165f8cd79c978c24751ff90a363cb07cc18cdc825314bf4a3d1dd16e48af356c4edcc5652483ec79ccc221153dc064ef66b087f85120aaff48bbdc85b7a8beb4", 0xda, 0xbae0, 0x0, 0x2, r0}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x8, 0x81, r10, &(0x7f0000000900)="066a557a45487495bb4b5a307b72fb933f3a0593b9b3706b8a220531cdb1a7acbfb2c23de63ed25ecb2e45d4f74b2e03fb9bdabf1a967125f2fb8a05ede79b046d7d56b1ff7c8b2746bf97fe51eccada0ef19c646d0e0e2dc7d29ccb1d68985dce08c03dd91bffeb4cde61880ec87879935049436145617e6a61359565215e7da92e379c4838184d45cbb3afe1e6af3f3713b6061ea9b402f068a75ed6a80de4adfe69c1fc435b956aa9b981", 0xac, 0x93}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x1, 0x40, r3, &(0x7f0000000a00)="d7883a79919a67b2570b3e9dabe30cb45afea2f2bbff695adcc52bcdd3f8ed4d262101396ee3d9b810dba7c40051c316842d87f027550c039ae099e00d8d84537f79c244fd1b482044922b9c089498d95375a27e80eeea128543b03c766492e89dc66bd496b29b5da349af878cf1b9f5336d395b3792e993a29bb0b1e7154971f133a48121197673059848b089dd7d8fb3f4ce5a4bb55d2f5c4c19117cf19db4ed2acf", 0xa3, 0x1, 0x0, 0x2}]) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000240)='}\x00', 0x0, r0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r12 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r12, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r12, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000100)={0x6}) 10m42.167264861s ago: executing program 1 (id=1850): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) ptrace(0x10, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) read$FUSE(r0, &(0x7f00000040c0)={0x2020}, 0x2020) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0xac098380, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r7, 0x4188aec6, &(0x7f0000002340)={0x1, [{0x2, 0x0, 0x80000001, 0x0}, {0x3, 0x0, 0x800, 0x0}, {0x3, 0x0, 0xffffff7a, 0x0}, {0x0, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0xc834, 0x0}, {0x2, 0x168, 0x13, &(0x7f0000000280)="3d772924b39ce6c320dd21b4e46b8da3104d023fb423e70eafe174da67de4e6993f7a4466935b802b2388549a9"}, {0x2, 0x0, 0xf, 0x0}, {0x0, 0x0, 0x89, 0x0}, {0x3, 0x0, 0x4096, 0x0}, {0x5, 0x0, 0xfffffffd, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x1, 0x0, 0xa, 0x0}, {0x0, 0x0, 0x8, 0x0}]}) 10m33.455509836s ago: executing program 1 (id=1864): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi2\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x2, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x8500, 0x1003, 0xffffffff, 0xf, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x9ea, 0x10, 0x4f000, 0x8, 0x6, 0x746f, 0x8, 0x5, 0x8, 0x0, 0x4, 0x7ffd]}) 10m32.917226406s ago: executing program 1 (id=1866): bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'team_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000040)={0x34, 0x2, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x5, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x5, 0x2}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8840}, 0xcc90) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x410cd}, 0x400c084) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800201000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000000c0)={0x5, r1}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000340), 0x13f, 0x4}}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffed3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c0c1}, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) r7 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040), 0x0, 0x40800) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x28, 0x2, 0x3, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8000}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2b}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x7}}]}, 0x28}}, 0x80) 10m30.932039676s ago: executing program 1 (id=1868): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) tkill(r4, 0xb) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$snapshot(r6, &(0x7f0000000140)="507c1a4d", 0x4) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000004000000a0000000900010073797a300000000034000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e61740014000000020a0500000000000000000000000004140000001100010000000000000000000000000a"], 0x90}}, 0x0) 10m16.613918379s ago: executing program 32 (id=1863): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x41, 0x104, 0xfffffffe, 0x9, 0x4, 0xfffffe0000000001, 0x8c38, 0x7fff}, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x3, 0x4000003) socketpair$unix(0x1, 0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x0, 0x0) unshare(0x24020400) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r3) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000680)={r6, 0x1ff, 0x0, 0x1, 0x3, [], [0x800020, 0x0, 0x0, 0x2], [0x0, 0x2, 0x1], [0x0, 0x0, 0xfffffffffefffff8, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000480)=r7) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) sync() socket(0x5, 0x803, 0x0) socket$packet(0x11, 0x2, 0x300) 10m14.80774035s ago: executing program 33 (id=1868): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) tkill(r4, 0xb) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$snapshot(r6, &(0x7f0000000140)="507c1a4d", 0x4) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000004000000a0000000900010073797a300000000034000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e61740014000000020a0500000000000000000000000004140000001100010000000000000000000000000a"], 0x90}}, 0x0) 9m38.780133518s ago: executing program 0 (id=1935): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000000206030000000000000000000100000014f507800800114000000000050015000000000005000100080000000500050002000000050004000200000016000300686173683a6e65742c706f72742c6e6574000000090002"], 0x64}}, 0x0) 9m38.671782636s ago: executing program 0 (id=1936): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x20, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {0x0, 0x1f000000, 0x2}, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) 9m38.529213494s ago: executing program 0 (id=1937): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r6, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0xfffffffffffffe84) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) r10 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f00000000c0)={0x1, 0xfff, 0x80, 0x84880}) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', r10) r11 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r10) keyctl$chown(0x4, r11, 0xee01, 0x0) 9m37.102145111s ago: executing program 0 (id=1939): syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC=r2, @ANYRES16=r1], 0x78) ioctl$SNDCTL_SEQ_SYNC(r3, 0x5101) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000002000010000000000fbdbdf250a106b00060000031f00020014000200fc0200000000000000000000000000011400010020010000000000000000000000000000baa1d66eb75912afd303cabcd1995932548e7fbe16acdc6bc2e6f060cec63ed75ff7856c72cd2295ef854ccecb5a0b0dcfbe70765db26d536d051300a3d998b5526d1882d9b02ce119935213dccf6eb1230671cb5b696f6034e1b2a40158b8e396"], 0x44}}, 0x40000) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) syz_open_dev$evdev(0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r1, 0x1, &(0x7f0000000240)) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) syz_io_uring_setup(0x3a, 0x0, 0x0, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000200), 0xfffffd9d) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 9m29.335310469s ago: executing program 0 (id=1945): r0 = socket$inet6(0xa, 0x2, 0x8000001) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) socket$netlink(0x10, 0x3, 0x4) r1 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000105804165000000000000109022400010000c04009040000010300000009210900000122a00009058103"], 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0x0, 0x1f0, 0x1f0, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x11, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x8082) socket$inet6_udp(0xa, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r3, @ANYBLOB="05"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000006ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x240448d5) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) r6 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x80, 0x0, 0x7, 0xf7effffe}, {0x16, 0x0, 0x0, 0x1000}]}, 0x10) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x4c, 0x14, 0x511, 0x0, 0x0, {0x2b, 0x0, 0x0, 0x1, {0x4e22, 0x0, [0x3], [0x0, 0x0, 0xfffffffd, 0x4]}, 0x4}}, 0x4c}, 0x1, 0x0, 0x0, 0x4000840}, 0x8004) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x40000) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r8, 0x118, 0x1, &(0x7f0000000000)=0x38f, 0x4) socket$inet_icmp(0x2, 0x2, 0x1) 9m25.714473926s ago: executing program 0 (id=1950): socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x7, 0x90, 0x0, 0xa}, 0x9c) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40081, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)=0xf9) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010027bd70010000000000050000", @ANYRES32=0x0, @ANYBLOB="000000000021000008001b00000000001c00"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 9m10.008269049s ago: executing program 34 (id=1950): socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x7, 0x90, 0x0, 0xa}, 0x9c) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40081, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)=0xf9) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010027bd70010000000000050000", @ANYRES32=0x0, @ANYBLOB="000000000021000008001b00000000001c00"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 8m15.068277364s ago: executing program 7 (id=2017): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140040006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 8m14.308482492s ago: executing program 4 (id=2019): syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC=r2, @ANYRES16=r1], 0x78) ioctl$SNDCTL_SEQ_SYNC(r3, 0x5101) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000002000010000000000fbdbdf250a106b00060000031f00020014000200fc0200000000000000000000000000011400010020010000000000000000000000000000baa1d66eb75912afd303cabcd1995932548e7fbe16acdc6bc2e6f060cec63ed75ff7856c72cd2295ef854ccecb5a0b0dcfbe70765db26d536d051300a3d998b5526d1882d9b02ce119935213dccf6eb1230671cb5b696f6034e1b2a40158b8e396"], 0x44}}, 0x40000) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) syz_open_dev$evdev(0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r1, 0x1, &(0x7f0000000240)) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) syz_io_uring_setup(0x3a, 0x0, 0x0, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000200), 0xfffffd9d) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 8m12.786150833s ago: executing program 7 (id=2020): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000003f0000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 8m12.514431987s ago: executing program 7 (id=2022): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) (async) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) (async) r2 = socket$inet(0x2, 0x3, 0x9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0xffffffff, 0x6, 0x0) (async) shutdown(r2, 0x0) (async) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x1}, 'port1\x00', 0x19f, 0x60004, 0xfffffffd, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x1}) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r3, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x4000) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8b, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) (async) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) (async) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0x0, 0x0) 8m2.606670601s ago: executing program 3 (id=2023): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = geteuid() mount$binderfs(0x0, 0x0, 0x0, 0x2076c10, &(0x7f0000000100)=ANY=[@ANYBLOB='max=', @ANYRESOCT=r0]) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb2993000) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000080)) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f00000000c0)={0x0, 0x8, 0xffffffffffffff00}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r2, 0x10001, 0x0) 8m1.788691484s ago: executing program 7 (id=2024): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_emit_ethernet(0x66, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a60030000000000000000000000000ffff00000000fe8000000000000000000000f03248c6e03670351230d296f10e0000aa0900000000000000223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3fea00000000000000d5"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r3, 0x40026f33, &(0x7f0000000500)=0x7) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f0000000000)={0x101, 0x0, 0x2, 0x1, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) syz_usb_control_io$uac2(r4, &(0x7f00000001c0)={0x14, 0x0, 0x0}, &(0x7f0000000500)={0x44, &(0x7f0000000200)={0x20, 0x6, 0x6, "4a630d548ce9"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xf8}, &(0x7f0000000300)={0x20, 0x81, 0x3, "a47e5b"}, &(0x7f0000000340)={0x20, 0x82, 0x2, "caaa"}, 0x0, &(0x7f0000000480)={0x20, 0x84, 0x4, "841490ee"}, &(0x7f00000004c0)={0x20, 0x85, 0x3, "1b1be1"}}) syz_usb_control_io$uac2(r4, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000400)={0x0, 0x9, 0x6, "4f3597940381"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000180)={0x20, 0x8, 0x1, "81"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = inotify_init() r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) timer_create(0xb33ac006f9a86d04, 0x0, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) close_range(r5, 0xffffffffffffffff, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f00000011c0)) 8m1.604291062s ago: executing program 3 (id=2025): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x2) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r5, 0x80047437, 0x10004000000006) dup3(r0, r4, 0x80000) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x80000) 8m0.915366222s ago: executing program 4 (id=2026): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x40000001, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req={0xfffffffd, 0x1, 0x6, 0x6}, 0x10) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x4, 0x0, 0xfffffffe, 0x0, 0x100}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) io_uring_setup(0xf08, 0x0) ppoll(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000500)=[@increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0x200, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004a40)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xae35}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xfff7, 0x8, 0x4}, {0x0, 0x5, 0x6}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440100001a00010027bd700000010000ac1e0101000000000000000000000000fc010000000000000000000000000001000107174e2201030a0020803a000000", @ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x10}, 0x844) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020003600e41b0000900ac0000001101a80016000b00014002000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) 8m0.229108069s ago: executing program 3 (id=2027): syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC=r2, @ANYRES16=r1], 0x78) ioctl$SNDCTL_SEQ_SYNC(r3, 0x5101) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000002000010000000000fbdbdf250a106b00060000031f00020014000200fc0200000000000000000000000000011400010020010000000000000000000000000000baa1d66eb75912afd303cabcd1995932548e7fbe16acdc6bc2e6f060cec63ed75ff7856c72cd2295ef854ccecb5a0b0dcfbe70765db26d536d051300a3d998b5526d1882d9b02ce119935213dccf6eb1230671cb5b696f6034e1b2a40158b8e396"], 0x44}}, 0x40000) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) syz_open_dev$evdev(0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r1, 0x1, &(0x7f0000000240)) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) syz_io_uring_setup(0x3a, 0x0, 0x0, 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000200), 0xfffffd9d) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 7m59.554364671s ago: executing program 4 (id=2028): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x40010, 0xffffffffffffffff, 0xb85ba000) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) open_by_handle_at(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500"], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0f000000040000000800000004"], 0x50) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x6, &(0x7f0000000040)=""/12, &(0x7f0000000080)=0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x2004000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) r7 = add_key$keyring(&(0x7f0000000080), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r7, 0x0, 0x0) 7m58.293095463s ago: executing program 4 (id=2029): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x12) r0 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045731, &(0x7f0000000300)) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) writev(0xffffffffffffffff, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}, {&(0x7f0000000440)="a4d3173622541f873057b0b5d3b4afeb7a2786050e2d4ae6569c71c162bf446a53ec80688076c87e603f2889bd81bf1b69545be5fa30b00cb44b781113c45f16519ff856e4560a4331c4097826f8977905c0be0cb5c1125a9ae52b49e3ff66f0fb1a2eebbd8b85916ccf444714e3442b8c99924be27293603b42e99b85439846b3f0d5af11b55825ca36a9003d79d461f928d87f48637fc8b778e95a1ff36635e2abfff292bdff9f97a855e128c6ed1a5156ba01adfe6e938e0694e49ad08f1220aa11adaaaeb6", 0xc7}], 0x3) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, r5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000005440)=[{{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000780)="7e5134186eb19e2e4a1154368b7920e0ba9358342e9472154c3b91aeaec2f21c743f69e46abd14843dc8f6bf8efd1dad9923690b4699b47f820eae857debe12b28cfa68d0a65bf997a805e3c482a7d5baf698a6dac862e0eb23301f0e3e2758ed2f9cf9d238110ba9d1715e2e2c1832b0ac0ff4fdb21aec13e7a4df6cec5b2d972ac65c3b9c08588c26757e521a0a9f713fd1ff00fc409821361e065a9f7b6a26cd53cdc4dd8d965b09d9387e3f1604299f1d18fb361340726ea8dc1c53321487ccc2c86e904219c01b78c8ecf973011d5e4b593f3b9bdb7840f50f782089d9c9725f1", 0xe3}, {&(0x7f0000000880)="6f9d60afc42755dfb64d3a3506e0876fa1297c732b82536e8c3bb59ea184437a78a5bcff88ed83d0f3fc43b60e0e56f1ca5539ceca680fbe053834a10d1669e8183608789907929980123ab04bd1928748f97e91af704f85801a99d10a86300dec04e897e506aefc0c2406842a0ff1e957c5caf938cdc9853a40d845332c018a939df9b88178a3e765581054a46a25f59562aedc8317bb7c68c50d4df438885363dbd1a0950c0eaf42615a4c93f0d5d00fbb78ae113612d6404b21a478f1143ef67574fe8e35edb254de712f50c2d2685e91496424fc8c7fe190706b0c47ac8ec1c9f9619ee7d7aeaf26", 0xea}], 0x2, &(0x7f00000012c0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYRES32=r5, @ANYRES32=r2, @ANYRES32, @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00'], 0x28, 0x800}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a40)="332175a651e18d563324965e3ea2fc30909067efbeef078483035680a5203365dc2665c217b74611f3ac3385f0223a4ca36815194f952b1d3f0e68d33a995b0e3ecb97c493b6f267a6f7cd3e3677ce4aef50f254f73d06bf02ec4e2c2af11c7b184811b93ce08b763a9d98c18f17a1d61f30c446e965f5d3317a61c1739fe0d98a672f3a9604da987a390e283979d22aa59b1215d82a02e877583ad13cd3e6e97f2512f7f0db6a3100da9e56956a893cd6ea5a609032f0b4ac122577424ca9a975ee7218634026d741cd7344e323fba95e4607be10aaec5170", 0xd9}, {&(0x7f0000000b40)="5b4fff4446576cad898821d3761c1bf5158aece8a0b6859d3b428b304b631fda8e4e4f31d3e8d68c66a9387bc2c395d57a474a396cbb046706937a7e28c2d7f89346c8e6be51559b10076bd4b00aed5aa24221ebf16bf5fdf3298c2bc6869fec42a8a7499c9aea1d", 0x68}, {&(0x7f0000000bc0)="510f8ab55342d7fa0bd26521767ae1f1276e877f3ce060f4417671a461e133f2a4618730c9a4d0ad1b0305cce2", 0x2d}, {&(0x7f0000000c00)="428448f38a8be45070a1883f834c229a96e147e44ad9a9a8587292f9c8baa93f8be44b", 0x23}, {&(0x7f0000000c40)="33f864d915ea9795f3c3d4f3fd8948bd41bc7dce86d40f0415e1ef5b0fcb87ad5a358375a4b4e09bd00b36e7d913af0be045612aee92597ebc517a7cabf269d945d1d82d76018326d5b83945a8443bcc36209fd952651cefebe26d6666f1ec04d1039afad6c85cde866330a93c775dd0", 0x70}, {&(0x7f0000000cc0)="c008d689e0441b68cb8596fe330c90af5d694783489704e68b706f66b95d3f2984a529044a3718c335e59aee84248bf24feefd40742655ff3cdc0b6b28129b2976314bf1e95c7213980c2b97ed", 0x4d}], 0x6, &(0x7f0000000e00)=[@rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, r4]}}], 0x20, 0x40080}}, {{&(0x7f0000000e40)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001100)=[{&(0x7f0000000ec0)="e62409578d7fad11e682b18a020d3e7de7b5cc6ae2d49cb3c6c04229b339dabcd5c5e04010ef8f8b1b8cf4d05a9e4f3055b339ea9e4591a43cb0499a874eebbad0c85a28285e5954ccb48ad32be2ac6f76733f8bdaae29be2f92807a800fb320a0c5ec4a55f85a1ce34704bc86578e0dd9845537588fce3b1042ceb4baa979ad383b322139ca061c5c353fc97a212fb5eff56427572e34e874a273d9cbb5b9a18581f152b38d6c0a8fe051dab079700d2ba8d58b3882ff", 0xb7}, {&(0x7f0000000f80)="5bb699b977446e124dbdb19b21d734d72ee1a6de38171de930af1206d28760e723fe7904a6c24ed62879706abcbd68809612ab180bc326f53766bc0d251f119d8ea4118c540fcc8ec3d5587a46c94f645a9e5ef6de408a4b4580d26e70d47f6d02ee", 0x62}, {&(0x7f0000001000)="7f", 0x1}, {&(0x7f0000001040)="2d4c16c741144df00bce84e7f6c0db91c2ee4912d10f64807e5c3eefbfd2ddf3bd37c0e028858495937430f6432d63c123e3d19de439187f20435fdb10498c5ed621ce71fdb12d1bc837c1cc30ee2799fc4f6ad94978f2138c6a", 0x5a}, {&(0x7f00000010c0)="827e3835d2289a0422e9557dbf9befdad8", 0x11}], 0x5, &(0x7f0000001180)=[@cred={{0x1c, 0x1, 0x2, {r7}}}, @cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x30, 0x1, 0x1, [r8, r2, 0xffffffffffffffff, 0xffffffffffffffff, r6, r3, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r7, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r2, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r7}}}], 0x120, 0x80}}, {{&(0x7f00000016c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001800)=[{&(0x7f0000001740)="7e03d06d17b3cef3ec09d4f1ed34f171ebb1b09bb6e35e12dc61290ad2835bd4f770b3d59e9491cb31dbf3bc5782aedcbf47640135159143e78612b3ae408d3c96c456ad3bf563d4894addef7c1b1ba7af6851eb82f7b17c1946eef04b", 0x5d}, {&(0x7f00000017c0)="60ecc0f84d053f59c219b87d2f37b3a2be4ccf9cb29aac2b3e3819f2c2cf17", 0x1f}], 0x2, &(0x7f0000001a80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}], 0x70, 0x800}}, {{&(0x7f0000001b00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005300)=[{&(0x7f0000001b80)="9acb938043b0edf68f49fc3a3928621cd70aaed151ba5c8265d196ff4073d3442068aaae32a4cb3b7fc79b7d96613c0bcc11f40e8e6b58f56bf2c34be0dbedf3cd58b4044b702a8451199c7b5f69d6e4ea2cf7def55e241aa7acb54d1f9a115f761ce9fd210ebfbea43e90874f56959bcb16103fbb7968677f72900bbc1216cc8f45c22d451e7d91a1174e2cff443dbdb73940bb2fb12fa619632839e7f074417f815d957bad03dab52254e10e02789d6d311e9c3ccce04fd250ec4554187ea69a4b8bcd234fc8599f8a2feb5a593301dc81afbc27f4f4b39a7ec880ac84167640df6fdb54a5e5aceda1cabebedd779b7a550affddb6", 0xf6}, {&(0x7f0000000600)="6c80633dc393ddd9569a08de2ecf0f303792e1b10000000000000000000000000000000000000000000000cee1ff15f311508305220e01a5d717da07b213926b16c994a1c0", 0x45}, {&(0x7f0000001cc0)="c4178e3d37c1c7f65c3195fec1e5ff9b2b3f9d70bb2456e8cb1085eec135396083d36939be482b31e7c9c3dd5e0058c7fad94bf813706d1ed3a8b95d42d1095926bf876316a4d12a5680e4cf46edd0b663482231c949c28689e4909b5b82ef73980d53100da27858a7dc4135070baff18c86cbace2bb8717d8f742986f0f00745e619b4ab035dfe031f7bcd4aa3758d5ead40c186a73ffe9df7fcbf15a1c423b88aa0fcfb4cf7631ce165dd18c8846328a702eec92b65df6fdce146904cc7f5e1fb0f8246356572f674c590c6f46e3c697784ec25d316fb9333ceea2e4b754eef2510cb74bf9b0784fd5a33a4a", 0xed}, {&(0x7f0000001dc0)="e24e77dfab1467741b40bb76137816c04e5a2ada9f6cd1bee16f", 0x1a}, {&(0x7f0000004140)="ddc07f8829be081f20ab32baf9ba0736e13cc672bee6ca5937c94fca45e1c8736a4b5ccde8f4a778e21070218a2a8a231716871fad37388fce99ad63112e5216dc264aad465d54356d6044453939c2dc3c879c4ae38cd21fbfd90c83c31db8fd7859f9226a5e0e6c90074aeea61db4094c2c189c3ab86f781d3a4fb2568da3d57bdc12686cef07a2a6a0d2a47dd797c29d05b18aee207c43efc519855adf34c73e076f32679f6ef4ce7723e61c36f7e2ebfe631b88923cab505b9c87851e6bffa098956e5f6b718ccad5c9c072086c233cd52889c5bd6d40eed28608603c33dfa26e8d2eae81bde7f11313a189bd94af8bf76d7878c924e285ca89c9fd4fbeefb0e648dfeb97f6baef3f22aa26c4261469770b0b564d0ed178c03562a654143a37bdbe752fe5dabf0dd148184af166deeaab2acba93d998c24d0b23ae0480702be916b921e8aed47ead48af9d917fcb1cac9eb613b849415fd64bc75da37faa8dbd8b3dbe75447f675a7a41c09b1dfed37d8ddcd8ca31d5698c1ef13b1847bb4611326f1e733cce0e53c0df86cb3d075dfd402d1f0d005ab74d0f653884d1d84935468f9ac20eac605764efd15f63ab6b7b19f7d8678ad106d261e0027523d0392dd8aeae63474f733683393c91e8d7a0014f7f60aa91ca76caa07c17c47b2a47b12c0fd95dd28e140d8b206d351964f22ddf7373e7e358d5d22e229ff5a491cf6be82dda6645bda407bc757de67538b6e0e05f8d70ffa4c121fa76e0432346df7300f835a19aa3f4031f472514839cb8e25b01082e630d46f86211dbb853bdeca048e794288e8aef498ebf3f6575c80197fdfc6bcf92a5a19a8b5f9086fdbd9714a52142044a3b5c12f1fb52fe26ddce5a24b71c1b2ad7ec0c571e9fed1254a3893a6c5c1331bff6708e3793d3ca793cbe932d32920c29b79929f1e26bec9ac9b2981482f4406730bb816308c4a2a5a0c2f9e4c857e3fa99f11f9121bcef4b210b1d409dc94e43d18b715c51edc5b892faa79c5a356ac9232831b89216cf40857127d64e6124cc3483e4e8599140a50a92c9cae1e122018a6595e0de60819d45692105fd7ac7304048109ff5ff73d351b59da0a6fe310ac36dd034c754966f423047d6563499cc522dcdf19777156704220b9d440c7599912c73954af8428db391c545f913fce22e78227abdb4f34c7d6377d0643666b6e787d62e942b4460c66615ecb5db2b3199a3b53dcbd2f8345507c55a8612f151b75f792c50a431da59aa3187a579c71bb5008ddbcdb64b00ff5635f4f025bc040cf1942c3c2453e6624377b505d1767ad6f038c7936226f9475868bbdcdc45a03d8c82ef06787f30633bf0b86a0cd75b451442e02c4fabb2b8aed7e60adf9eb7cfe07cbc6499990bd9c559c61f86f3691ce3f7b873df1e2d3dc59e46d35ecbdc0933f91d6d2b7999da5122648ce08d9258ef557740320bfd186f60f96d785bde02a238130519dfacf12a643c03ee4db43146971cc6b03c467091bfb880f80f1086f2a9d5c612a15d183031d4fb169a89971c5ce0da645d44ab9305492dec7cd2b44c9ac2706256c2a865915236b9e41acea3fd54050963fb51b6c5935da58ffc53841aa580ff19c7a756000b0c10c6f564d696ae30d430eaccb4bb39a618770e1417226994217437a1483dca1d8ea09b4d9bb0c391b1ec557e503fd38498772805625fd94e811fce1dec89bac0170791b32f77e5dd3d564d8a87e31cd384e4c3579c32e2dd4e944f4bf31b33f94c9f95285e2810903f12c5ca6ce28c581bb0baf246e5ea245069e7dfd5ea213b23b60c979aa6f1e21fd11a5cd445facc70db1783787077242f7d2cf825bffeb2bbbc2d5983fe89f0cad272a798c6be616eb770dc62ff392395f0c1b7a867fe29a5b433947beaf36706b7bbffe1fb13b62d2814ff3d0d2b415bf1a2bdcc98f2c3f52ccd1ad4dc80c1e435a8784606385077b4b778aed8c4a8ab78a63ba98d1bd7f771d22a2185b21c96562df9a2f3441771ba5821d87be1968351f48c81fab45da2fa95864681e01e977df19b2918a2008445881313ba44eed612b2cb843ce5beafda10cbba902bac46c564d5e3470fddb168bef13c4bd88a1f07bff7cc0f88869aa099c3d5780099184f93a581e81b59a5409c86bc8a6444e42575193221f86dde9697ab3b1e794c5b59a1404891b6fd70d3e3991a79bd7a615034465d8caff793cc203bd668acb6cfe235dbd00bbade51638c1dc630632399d6ac38016ee64564d7c454d42b630841b33e8755ef4b4ce581cd778d89582ee0a0920d1246880443bf80f444a44d6d4d490a121eb6067b1fc32f7f52f7e1aa919136d2dc821a269e2bf60e1fbb9f74e4f1e937fb520e03d70808d4c3f74bc4bde37e5e2b87fe6aa20b41747ec94645e3c80d8791cb2890da75bee22118f242655a26572c8b5f5be4af043c1067cf4e42d1746981279a9b3eac3da4d660111ac60e6ccad5ee432094a6cd8597da8cbccb09c474a305b5a10da8c4a0f63f0c221d4ff0ebe35c059a0a308e3847701c16214993d54905a690e4f69bfa0b046d0a6c19779dca0361cdf512970310f056ead0aedabc396a5034ec5713cc6eb935eb5b1f2e28e703f4f76de68bea35d6c0a2466f91192a9db6f2061fca1b4abe4fc37229931471772a7ef2f219581e8f7b77fffafd66430d02f8ef5b42f974bbc86cea7a413fc21d78b2373d1cb36decf8ac7d1438dfa99af388de1ef8690d58ef3575a6a981afe98bb3c81aac74bfc76e528c69d350594f4e1b82b6fa7e81aa1aa2479675ca20948f1dbd979083cea1dae6881dd26c5d64dbc710ac27a304e5106ab6f91d1df69cff921d00c65f2a887cb770e3f81fce19f5c4dafcc8a5f17961000ebf96566f5753589ba32f0b32d64d93a00eeb1a04855c89df9253a1f28c6ef238e40528123eb4567af5b2568a26b0a3cfd0ef5ae4d9d11326b403c35ee98a65e280a696cbc1f0fae5862ae9347f525e2afeb4a000f26daa480a6d48649a1bb4c7cb78c34b22fb85889dcb0529b40aab2d2369eba628749b42d68b33c1cbf9dcc824414af2f304a6c51f9729622162884f1046113b8cebca25c34ae2e3d1108273294c3a3e8fe05850a263cc84706130e8a43e0f70fb36713585823a0e17e64f031e76f5a6d14381db03bb3f12cf0767eb51a88480270faed0ed06e37ba05c7c77bee0befe779b79e306ba476ea45a055ca021087004a0c6aa15d59a56765d3a9aef4213a7bc84a7d02c71476f47cf54c81c47281197f83dce5a9540143518b2edc65607a563e14138e3ce6419b1dab1d3ad5d864facd9f302a8aa98b6ab4176a23cabb54937fa75c9f439ab9ddb96457fb6f5499c71630e93aa27212830a16fae1bdaa7fc069c67eac632b4c880b04cfe6b90c1d8e1c3e07c2487d60996be76b494c133ef07f669ade9e99c2418b6ca8ba2e07ab54337f10de8dc05d2980ccd977d493d25307449b0b1ad80c9b48356f2144276c7e571e6782acdbe8ad433d35a7bb8af869b6a39634eeda0b9798fe649f084ca02b9da32ed2e0d3ffaeb3be1d23c817aa208e936dbfd9074d0644cc980b08e8a59e1f07988eb7fb7904dd9cfac0631d0f1fbb868e1468a9551c4d8d9a47e4f9b52f5d8075edaaaf2e179ea06eb4de677bca0b5b5d56eee53f1ff1ba0d0c032b36c712b01ed5086c3493a2c91aae0cb44233f4ee6f3c8f7c5213352b26aaa5c69df3f0cd562929a3b150eeba505060d64a0ffda0ea1b2b569f775d4416e8935df3d58906c0a3e7835312772e9310393a3009d483ee63e8b11fcba3a8e47a3efa60db02b2d2db1ad4875ae8ea95b2249bc4cb63e1d7738c2107524e637bc5c2d5a3f82dabc441dfa122ae5694b127ae78da9c37b0a74432fe762958f6106c4676ed7fb36bd1ffe72bf7cb356581a9b4b77cd17609f4274476f516d637b02284dbcf78dc30efa26d08455e0f6cff2dcfacd1a3a4a511bfca7f428017eb273da05a2cc286cedfe638088ad4813dbe82b63e66ca687a31b1a19cdb1e8e1d55893d2669ebc4f96a2ec4269f44e6b835fc17f213b07fb1e189797f567a33f7941dbe93b58d405e8fcd9635e4b7e7dfd91acce042653e6dd01e3da0972e453a3b15c3e2f0c993d98593702d99f1038c207c480eb332e99c94fc8a281e71be956968e99e35fda904ad780c741cd4e30ecbaf35928de0825f511575d4b141bf40e60507be62dafb4d1c7ae59fa511684845386f42960cbfac58286d2c292db2267a6b34cc06f6db3f73f0c19398e210c33f5c7f84666de64d497098aa6d8338dd1fafb1600caf5086e782e8a1a076e2b0af84b5562ed7bc783c0a7a79a48d937f8e43553c2a29c10b27bd9ab32d86be4d93e2c899c4e3661c03cdc143a023d3e6ddc7ce576a046d964d1184a04a8eddab401da1e747f87f32b84435112de4117fc43ee5bc9032b7183f9885f38334172db8f73bceb37013ce73f876ec5131458227bd13820f9fe6b35b7acd6bb836ceb4ef197c3eacfb25f0307378af4c8bab109823a87fd6c6e207729d69bfbcc03bd843751d2bd22aec19413df45f8852ff09b87076d3867eadd9887bb927259ffb0f9146dc51ce607be56847d0851602557f31d99663171f137f4f40abc13ea15c4637b3a565d5da7ac9a25ba1e15f3b8bf53d7e56e05f691fb82964442005556dcd90444b752b709128fa74a3eff4efda5d767159594f5c8381b91cab9d27fb2245a73cbb2fd862d9694f5abc11dc857ccebad958b618774f371cebf9b90fd588548f917e4a28e00d62be91887ab621c68ecdc4f9706024296ed4264c7b703c5110ac93eab65f34d7c8d70a18c7739b203e6b59526790393ff3b5ac0001c1d36e0404defc7a4d771a1765fc16a98a4653243e2d40e52a71f48f1ef49918f43344e10caf15bb2f5578c391ec1cc03aefb8cff60209d2b812887ce6d773d8166f31d9238550b839c4ec7df8c51b51556ada37245429cc1b613a0079d9756a76198e76fb7ae74a9500bca87bda69ca32fc36c5ae2051db637fde2841afd0bdb5424a56a47310e4c0e2c871ce9e39f562c59653d39702ae4f26bdada2e01448015c381f96e6b3f0650e08dcaa2748d5cada229cb0dc08c226b3a14d5910ed55f4ec49bc2a395ebf23fec598a7b495663c47b3a80440f28afa7967f5e4a63329f099d17512831b28481d9c65794fa0f10803bcdf5401cf15df2140ff8672bd454e31e9b32033f2164bf75643c177f0a02494b94bcbd335667eba0e6729e99d603868f29341df1487dea9a3add35406c7fd06b2081ff16ca6eee66db85c16dfa0f4511c70c632d0bc43cce1fc745dc4c50a5cf25997370760581f7847f8c531d487231fca51a093d6c740516a74f288c2f6222a279aa3fabd1177072e45e59a258b6dd57a3bcb4c24054f982065360e580fb54b03c71a4797626dbc50ed87c55e955ed4289aafe9d00ecb0c26f573652a4a56db69f92d49ca10798d581c56e88777262159505641de9da17d43a9fbf14d907fe1873a8119bd2843b6eefdebd59bbcaa1443ec4fb61dfa8ba1616a87962718caf748e76cdc6a84cb9e568125ecc7ec2a49641b0f31a777b98b8f59438399cbca00a38d79ea0a8d9a2e722eba30ff76ace948dd491e5e468c1dcdf9b2635481fff6bf583b5074ac071878d320cf77034e175f9b0aa7ccdac5af45c274de533c149088c9199961f682bf97a8745e85987960f63793b254d87337dd440e6fbc1ada485ef79286be47bcd0705f0e0a7df53a0336d7b05f29", 0x1000}, {&(0x7f0000005140)="991a62a5d414433dcc7c449d04368ecb7ef7d90f24c8418f6f8818d2805c4eebb41608d91bc87095f97cc37b043148cc86ff6adedb44d9cdd7e3e1", 0x3b}, {&(0x7f0000005180)="cc21093285211a83aeeccf79a232a45d7bc9bef379b8a78fdad686fb4b66daa0f1b4848d36e1376052fde7dbeffe0644b73943417ecf978351ea8e2e9a5c42798ca7497dc9fab6a20ec7f94024d1585b1906e4a04798778615862addeb380d095333d627c4206d462955ee89cfd418d7ad8201742cdc54ed5375094373639891486d91c77311d87ac02e6b616a2086ed1ac436b780ba2c8525c8b1bcbb2fe5584dc6800e9815821a52c42cca6cfa310fe6db60c7e16fa8240c6e893e0b1a6467eb69a3c466d50883a842", 0xca}, {&(0x7f0000005280)="564d10814198b0fa029a2631b404fe4d01e0d1188a3fdbbb9e1981ba9a26a790782bdfd496e37a47dc203fe83ae79a1099434583b24178882dd4fd6e00677bdd9f8a56", 0x43}], 0x8, &(0x7f00000053c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r4]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, r1, 0xffffffffffffffff]}}], 0x50, 0xc0}}], 0x5, 0x404c810) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$cgroup_int(r5, &(0x7f0000000040)=0x1f00, 0x12) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x284001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x40, 0xfe}, {0x23, 0xf2, 0x0, 0xdfff7010}, {0x6, 0x0, 0x0, 0x2000000}]}, 0x10) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000080)}], 0x1) connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) getcwd(0x0, 0x2a) 7m58.016551526s ago: executing program 3 (id=2030): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) (async) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x1, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x1, 0x0) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x802, 0x0) writev(r5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x8, 0x1, 0x3, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x648, 0x320, 0x18c, 0x203, 0x320, 0x19030000, 0x578, 0x2e0, 0x2e0, 0x578, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {}, {0xfffc}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfb}, {}, {0x7a04}, {}, {}, {}, {0x40}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x4}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0x210, 0x258, 0x0, {}, [@common=@rt={{0x138}, {0x0, [0x7, 0x2fd3], 0x7, 0x10, 0x1, [@private1={0xfc, 0x1, '\x00', 0x1}, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x1b}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x1d}, @mcast1, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @dev={0xfe, 0x80, '\x00', 0x19}, @remote]}}, @common=@inet=@esp={{0x30}, {[0x4d2, 0x4d2]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000380)={0xc}) 7m57.380569231s ago: executing program 7 (id=2031): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x8000, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x8401) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000700)=@generic={&(0x7f0000000200)='./cgroup\x00'}, 0x14) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) request_key(0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x2) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000100)={0x1, {&(0x7f0000000000)=""/104, 0x68, &(0x7f00000000c0)=""/37, 0x1, 0x4}}, 0x48) r4 = syz_open_dev$loop(0x0, 0x47ffffb, 0x5bedc1) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, 0x0) ioctl$SG_IO(r1, 0x2285, 0x0) open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x153) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000007800)={0x0, 0x0, &(0x7f00000077c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000036007bc32dbd6000fddbdf2503d8032ffe0017e75d1d8777ea98c610d3447783bcddb3b835a0"], 0x14}}, 0x8040) r6 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r6, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x8, 0x101000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) 7m55.965881822s ago: executing program 4 (id=2032): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007a1ff00", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 7m55.084679108s ago: executing program 3 (id=2033): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000002040)=0x4, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000001d40)=0xe, 0x4) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/91, 0x5b}}, {{&(0x7f0000000000)=@isdn, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)=""/225}, {&(0x7f00000001c0)=""/65}, {&(0x7f0000000d40)=""/4096}, {&(0x7f0000000240)=""/99}, {&(0x7f00000002c0)=""/122}, {&(0x7f0000000340)=""/217}, {&(0x7f00000008c0)=""/35}, {&(0x7f0000000500)=""/227}, {&(0x7f0000000600)=""/1}]}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000700)=""/27}], 0x0, &(0x7f0000000780)=""/112}, 0x3c00}], 0x40000000000024a, 0x40002002, 0x0) 7m55.034544465s ago: executing program 4 (id=2034): syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC=r2, @ANYRES16=r1], 0x78) ioctl$SNDCTL_SEQ_SYNC(r3, 0x5101) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000002000010000000000fbdbdf250a106b00060000031f00020014000200fc0200000000000000000000000000011400010020010000000000000000000000000000baa1d66eb75912afd303cabcd1995932548e7fbe16acdc6bc2e6f060cec63ed75ff7856c72cd2295ef854ccecb5a0b0dcfbe70765db26d536d051300a3d998b5526d1882d9b02ce119935213dccf6eb1230671cb5b696f6034e1b2a40158b8e396"], 0x44}}, 0x40000) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) syz_open_dev$evdev(0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r1, 0x1, &(0x7f0000000240)) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) syz_io_uring_setup(0x3a, 0x0, 0x0, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000200), 0xfffffd9d) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 7m54.597735602s ago: executing program 7 (id=2035): mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000050900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c00048028000180090001006c61737400"], 0xc8}}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r1, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) fsopen(0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x98) creat(&(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x4e) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)='./file1\x00') bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e21, @multicast1}, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r7, 0x400448e6, &(0x7f0000000500)="d7") 7m54.284639498s ago: executing program 3 (id=2036): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000840)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xff, "1b1b740e0b5be8"}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x800) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000580)=@abs, 0x6e) socket$key(0xf, 0x3, 0x2) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x6}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000001000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32, @ANYBLOB], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r6, 0xc4c85513, &(0x7f0000000000)={0x2, 0x4, 0x1, 0x0, 'syz1\x00', 0x109a7}) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @empty}, {0xa, 0x0, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800083}, r9}}, 0x48) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000d097d0dcbccc77934500000000020020060400028063c6495c46b65ccafc9b47ccf67004475cdd2a540182fb85184e4540717e"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000240)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_flash={0x33, 0x8, './file0\x00'}}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001840)={r2, 0x6}) 7m13.805506401s ago: executing program 35 (id=2035): mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000050900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c00048028000180090001006c61737400"], 0xc8}}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r1, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) fsopen(0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x98) creat(&(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x4e) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)='./file1\x00') bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e21, @multicast1}, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r7, 0x400448e6, &(0x7f0000000500)="d7") 6m54.959079679s ago: executing program 36 (id=2036): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000840)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xff, "1b1b740e0b5be8"}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x800) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000580)=@abs, 0x6e) socket$key(0xf, 0x3, 0x2) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x6}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000001000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000004d632000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f000000000000000001000000000000000000000000000000000000002cbd70000035000002000000500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000210466d38547aa140db9a200000000c538c7cb7a", @ANYRES32, @ANYBLOB], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r6, 0xc4c85513, &(0x7f0000000000)={0x2, 0x4, 0x1, 0x0, 'syz1\x00', 0x109a7}) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @empty}, {0xa, 0x0, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800083}, r9}}, 0x48) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000d097d0dcbccc77934500000000020020060400028063c6495c46b65ccafc9b47ccf67004475cdd2a540182fb85184e4540717e"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000240)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_flash={0x33, 0x8, './file0\x00'}}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001840)={r2, 0x6}) 6m54.820674873s ago: executing program 37 (id=2034): syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC=r2, @ANYRES16=r1], 0x78) ioctl$SNDCTL_SEQ_SYNC(r3, 0x5101) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000002000010000000000fbdbdf250a106b00060000031f00020014000200fc0200000000000000000000000000011400010020010000000000000000000000000000baa1d66eb75912afd303cabcd1995932548e7fbe16acdc6bc2e6f060cec63ed75ff7856c72cd2295ef854ccecb5a0b0dcfbe70765db26d536d051300a3d998b5526d1882d9b02ce119935213dccf6eb1230671cb5b696f6034e1b2a40158b8e396"], 0x44}}, 0x40000) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) syz_open_dev$evdev(0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r1, 0x1, &(0x7f0000000240)) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) syz_io_uring_setup(0x3a, 0x0, 0x0, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000200), 0xfffffd9d) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 22.215096987s ago: executing program 6 (id=3424): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x3, 0x6, 0x41, @loopback, @local, 0x8, 0x7827, 0x3, 0x3}}) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r6, &(0x7f00000000c0)=""/144, 0x90, 0x5e) chdir(&(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00') truncate(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x6) ioctl$FS_IOC_GETFSUUID(r6, 0x80111500, &(0x7f00000001c0)) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x14, 0x0, 0x1, 0x2070bd2c, 0x25dfdc00}, 0x14}, 0x1, 0x0, 0x0, 0x4008145}, 0x8000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000080)=0x6, 0x4) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x5bc}) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000f56000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa08, 0x0) 13.092262153s ago: executing program 6 (id=3455): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000300)={0xffbfff40, 0x400040a, 0xffffffde, 0x2, 0x9, "007ffc00000000000000000000000000fdfdff", 0x7, 0x40403}) 11.958391957s ago: executing program 9 (id=3461): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0xd, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e22, @remote}, {0x2, 0x0, @remote}, 0x140, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x26}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prlimit64(0xffffffffffffffff, 0xa, &(0x7f00000002c0)={0x8000, 0x3a1e85ad}, 0x0) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x800) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000280)={'batadv0\x00', &(0x7f0000000180)=@ethtool_perm_addr={0x20, 0x23, "787bfb834421c6f2f60511cd83241cbd19c43ff3856b33078b949f65d9858e77e33dd9"}}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getsig(0x4202, r2, 0x40, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r4, @ANYBLOB="010000000040000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843e40108804400208024000100000000000100000000000000fdffff01000000000000000000000000000000001400040003000000ac1414bb00000000000000000600050000000000000100802400020073e591ec06154031d3954ac0e16752e72640f08b5281a8461d17d26d12f2bbb6060005000021000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39228c00098028000080060001000a0000001400020020010000000000000000000000000001050003000000000088000080060001000a0000001400020020010000000000000000000000000002050003000000001003800080060001008c0e000008000200ac1414aa05000300000000001c000080060001000200000008000200ac1414bb0500030000000000200004000e00000000000000fe800000000000000000000000000000000000009c0000802400020073961633df6dc9cb418b15afd0bae7b90f1e6cfed8bb423cf9285c474163154908000a00010000002400010000000000000000000000000000000000000000000000000000000000000000004800098028000080060001000a00000014000200fe8000000000000000000000000000bb05000300000000001c000080060001000200000008000200000000000500030000000000080005000100000008000100", @ANYRES32=r5], 0x22c}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4}) listen(0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x24044080) 11.135031681s ago: executing program 6 (id=3466): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000000)) 10.920825397s ago: executing program 9 (id=3467): openat$cuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) socket(0x10, 0x3, 0xd1f) openat$audio(0xffffffffffffff9c, 0x0, 0x2200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) listen(r2, 0x50) socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000fee000)=0x7fa, 0x4) 5.872767363s ago: executing program 2 (id=3469): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "84e5f43d"}]}}, 0x0}, 0x0) 5.190503473s ago: executing program 6 (id=3471): syz_usb_connect$cdc_ecm(0x2, 0x7c, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000102505a1a440000000010109026a00010100000909040000ff02020000053f060000052400fdff0d240f010000000000000300001d2413056648e5be27e87ebf64c49413c7b2dc109e4f21af41b220aed1052401"], 0x0) syz_usb_connect(0x5, 0x442, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x25, 0x24, 0x90, 0x8, 0x2040, 0x7240, 0xf6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x430, 0x2, 0x2, 0x2, 0x20, 0x2, "", [{{0x9, 0x4, 0xd3, 0x3, 0x7, 0xd9, 0x88, 0x0, 0x2, [], [{{0x9, 0x5, 0x80, 0x10, 0x40, 0x4, 0x6, 0xf4}}, {{0x9, 0x5, 0xc, 0x0, 0xaf98f89fd34a0dbf, 0x5, 0xc6, 0x6}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0x20, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0xfeb6}, @generic={0xa8, 0x6, "441af18ef44ee4dc20e9c7b404ffd288e31a9dd4d694f18e46d4e2a2ce261c22a2021677033b963c2f45ce9e5b258127e760fc30de768e7a48559df148116128270f905e34bb8e877a963ba4d0a271d13d2bc98f0acf1a6b0341571e7986ee627eb939aa16bffd6b1b86eb8f257864542d2ff7b03a8ec611a1a7b4d0c32919ebf1dfebc1001f86fed0942627c09175142979a3f42519cbec402bfad6d868041ef9259bcbd247"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0xce, 0x4, 0xab}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x6, 0x0, 0x0, [@generic={0x16, 0x24, "ea56c0ae110eb17f5becda2dd10c5d642b3602d4"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x66, 0x7}]}}, {{0x9, 0x5, 0xd, 0x8, 0x20, 0x6, 0x1, 0x85, [@generic={0x1e, 0x11, "9081dfaef2ac2d4c90572def9866b0451b1f71abc37a089fbb5dd230"}, @generic={0xcd, 0x5, "3105aaecd515c9aefff34eed38c9698abd53188419e4bed104a44f8ff80169c0fc40390cabb5a673456720503b733fbad414282e3c1336ce91f33e812697a86b70233e3c2a61b92b45dba6d820e599f531d76ac0cd5372d69dda9a3c0527080eb3b704f53de179229178e5ba29fa8cc407f3e81d2a89da3710a4d3cd8bc7d28886716e89e2e27223f92aed09dee1bf681bf6c610ad33904f2013fa60554ad30e4e4c05f7e22956fd7109cee1295c78fa36f80c56d79dc5c87ce73697cbbd402fb57cadbacb7324b27f8008"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x1f7, 0x8, 0x6, 0x3}}]}}, {{0x9, 0x4, 0x4, 0x4, 0x5, 0xbd, 0x23, 0x5d, 0x9, [@uac_as={[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x0, 0x2, 0x8, "62c6d22654"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x3, 0x1, 0x81, 0xff, "9b"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x0, 0x7f, 0x4}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xfff7, 0x1, 0x8, "f8f5cf167e18aa"}]}], [{{0x9, 0x5, 0xe, 0x19, 0x20, 0x8, 0x4, 0xc}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x2, 0xe3, 0x1, [@generic={0x1a, 0x31, "94fcb17e23eb6e532f2b94e245e90d6f94225e262ee71492"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x800}]}}, {{0x9, 0x5, 0x3, 0x8, 0x8, 0x0, 0x4, 0x1, [@generic={0xe7, 0x1, "9e5406bf82b5e28d1a2c45d7833ca776efdff4a8a190702dbec9bd6e0a3591256cbd878cadc9be3e34f0d5b7d1badff43bea5aee9149f62d654d0c2776cb93dbc2e6a9c2e8cf98b6f35246147bb5c7b7961089e97f92d83e7390b3e28c53f7e81d03b6e214e8cdb79ec0c068eaa2996d43a6598a0944dd82f2d623b706ccadcdd2072cbd4e11fd979d70bfc2649ac2824755f48460e717e188c3bc5742debc74f292dc49b8fd8c3ac701dde56fc4fd64c0368226875d2327de16d1dd2ba1b464530e592521a74dddf58cbfab395d3e8be75fce40397527f7b4ddfbbb39bec36283531a283d"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x20, 0xf7, 0x9, 0x6, [@generic={0xa4, 0x21, "7a87cd02d76e351fc4ffb26a5e3ad4f8b9fb36bc277f0f54fe2b6d7e651acaa8f2391e0d75ccad43d7719640b1dd2b8cdac39577cad5315ab46bed7caaa5fb1c8e42d0729328d6b2bb8a1606a6c4e501466687e1eb4a5b0d524b4665fe920259aae01db6fbda3e7ad3c61b47619fa8d320218c166c38b058f48f897cddfec31efeb27ade4e5a757e50918afcb0225418442b38599c87e7ff422a99b0bcbf5586614f"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x6e, 0x6}]}}, {{0x9, 0x5, 0x80, 0x8, 0x400, 0x2, 0x7, 0x3c, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xde, 0x3ff}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x7f, 0x4}]}}]}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x110, 0x6, 0x1, 0x6, 0x8, 0x78}, 0x5, &(0x7f0000000540)={0x5, 0xf, 0x5}, 0x1, [{0xa3, &(0x7f0000000580)=@string={0xa3, 0x3, "2703dd8e04d5ce49beaa9a6b2e13b6bb4fe34d0b7e9f7e6943663582b7e9171bbcbc83bd2114320910e72f9634706ca320d30abd85820efdd1cb3e04aee2bb7323c8507064df724222b962cb279d855a7c51745fa4db01805256939eea3e85b6e22b0aea94ca4556a1350437671f2a40ef02696894f9f2eff0ac11d07fd502d8244d733813b5461fccd6a9ed512328d22088a1b4185015a7fcbc1ed4df4ae44b09"}}]}) 4.972994798s ago: executing program 9 (id=3473): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000019840)={{'\x00', 0x2}, {0x2}, 0x120, 0x0, 0x0, 0x0, 0x0, &(0x7f0000019400)="d98b483ea8f75ec35758b3ac2f718a0eb13a9d65", 0x14, 0x0, &(0x7f0000019640)={0x2, 0x145, {0x1, 0xc, 0x94, "5fd798f4042c85d20b06574e44b442a929eea77d9b95052bce2b12de0d6b40e673779cdfcd46bcde4ce839d5662d2a850167f6c71ee76d82819bdb180be6b2e4f599546ff4e4d52bbeee4bb8a17256a3745563dc4acb9c08cf405519fafe43d9a29dcc7c6cfc859ce8c78f334f33be01875d57642e7ccf5183dc5bdec8c79806781c81c3d71713e23148440f6db435c43f04de86", 0xa4, "7f1cff9df9791cd2cd8aec9838e941f56343045a1ecf89065d73c7b78ab716c19041cb1a7d584be9bc4be518a1fb289de10f8b9cf9689f85e0f12dfd52e57d524a4c6096a71633f0dc199090432b12263e9cf979c44c4218236fc4a60d44cc5f2c84d9518b8ee784c602cf16daa8d8326da6853d018307d77c36c0931d05847a4422932ae3021d4735ae57cb3238322c4cdda85aa55c5a15e78cda96df28a8442098fe76"}, 0x8a, "e6fcf989a69a15a8c2addf70e5a8d9ebf316b1d378353963fb1a486269466abdabb762762e8b957d9e74df57302db04d6e28237887a87e3b1366aeec0dc93f54e006d39408e29fc7e4111d9b4bd02c2fba895601acf7a391c9f691b048a2bf96bcfad0ac6a5555819f0a3e0ac1c73438b340b0409bd77e7dc2cc3da2ebfcb9e126e2b90aa23942986850"}, 0x1db}) sched_setaffinity(0x0, 0x8, &(0x7f0000019300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000019580)=ANY=[@ANYBLOB="aaaac3aa4215cf6c044a08aaa10180c2000001fc0b030000e007020000b6dba7a7ff307ddff39b11c20a628f001a2793481a26d2a44b4c127d44ad6f2fc302432e4021167e5e8595ad85d82aaafca1c0daf37caac16b18c38898e4a5949936ae59dafca735e1b40aba699003d5a44b37dab44d438464137a3db34659be1979893cdf1463a9826d509786a0110586f874726f023ca74faf86ff135aabc6bebf"], &(0x7f0000000280)={0x0, 0x3, [0xbb6, 0x3f, 0x4b3, 0xec]}) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000040)) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x1cabe2) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/oops_count', 0x8a883, 0x2) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000080)={r5, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) 4.602977883s ago: executing program 8 (id=3474): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x7, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x6, 0x6e6bc0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000ffffff800000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 4.602747296s ago: executing program 5 (id=3475): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xa, 0x80}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000240)=[@increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x101040) readv(r3, &(0x7f0000000600)=[{&(0x7f0000000680)=""/192, 0xc0}], 0x61) 4.304129823s ago: executing program 2 (id=3476): mkdir(&(0x7f0000000200)='./file0\x00', 0x50) (async, rerun: 32) r0 = epoll_create1(0x80000) (async, rerun: 32) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0xc, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@afid={'afid', 0x3d, 0x2}}, {@debug={'debug', 0x3d, 0x1}}], [{@obj_role={'obj_role', 0x3d, 'trans=fd,'}}]}}) (async) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x2a, &(0x7f00000002c0)=[{&(0x7f0000000640)="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", 0x13}], 0x1}, 0x24000800) (async) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) (async) setsockopt$sock_void(r2, 0x1, 0x0, 0x0, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r4, &(0x7f0000001240), 0x0, 0x0, 0x3) (async, rerun: 32) accept4$phonet_pipe(r4, &(0x7f0000000740), &(0x7f0000000780)=0x10, 0x80800) (rerun: 32) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000480), &(0x7f0000000600)=0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xfff3}, {0x5, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x14e2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) (async, rerun: 64) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000b871eaa18b06f69324b63465834b9f69ebc12f73a93bee506a12dcf99ee722423402f8660182e460c6e8b17706347b519e08475dc01bcb329a88ce42553693da53baa8f322f1e7f4b6b44fac1509b9d50888ee9e1e7578f84c0a6e13be756d5c8073e14047cf0eaf6c2d52808cbc0edb07f33fa396ffdb3858611094e3fbc6fa503575d287c911270dcdde83dbced23befc72e4882f65f7135c9fc15b2d5c0211319c055e065608096a349", @ANYRES16=0x0, @ANYBLOB="020029bd7000fbdbdf251d9e91d5"], 0x14}, 0x1, 0x0, 0x0, 0x8110}, 0x4) (rerun: 64) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000280)={0x0, r2, 0x80000}) (async) r6 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (async) r7 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) clock_nanosleep(0x2, 0xffc99a3b, &(0x7f0000000100), &(0x7f0000000180)) sendmsg$nl_route(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@RTM_GETNSID={0x34, 0x5a, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_FD={0x8, 0x3, r6}, @NETNSA_FD={0x8, 0x3, r7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) (async) recvfrom(0xffffffffffffffff, &(0x7f0000000100)=""/220, 0xdc, 0x10000, &(0x7f0000000200)=@ll={0x11, 0x1a, r3, 0x1, 0xb}, 0x80) 4.08320898s ago: executing program 8 (id=3477): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x24000084) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0x2) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) keyctl$clear(0x7, 0xfffffffffffffffb) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r3, 0x9, 0x0) 4.043384387s ago: executing program 9 (id=3478): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_clone(0x81090000, &(0x7f0000000300)="ec189eb33358aac6faab5806fbc6f69f467c75f7f43df74b18d153de207a71f97b08b493c38c63f2144df3f8b21bbdac93dfa74600fb500e04e078cc0e18647098ba30489cafa2c258787d95e755d30c87f5a1f374445fab72d123c809d4469a81904e8c71fe5ae2d5715fee8c98d0ce5ce1977c88259a6fdf952f60124cd918e7ffb1af782278a3be041b9514c143b065c1a79ad12af05138a8de5626b2e401c71d4df879f303e71a33159803fe4c016b50c1668918a8ee8460c8bb2fb944afc0b65c1bec940978f88ca361bd8342fd11d14a80a81ed426", 0xd8, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)="e1695a5358d05909a72d7c5ec667f8829832c5209ad58d9d0c143b3cdc9a0e740002f98163325be90de9410f4b9912cf4045980ff986d5fbab90e8af3d1bd605a478cae0b34d9c51628c8743db5eb2f584ae807d028607ce7810c4d1665b373a325ca0de46e0a65d441e9fbf5a530769930c") r4 = getgid() r5 = accept4(r1, &(0x7f0000001b40)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000001bc0)=0x80, 0x80000) r6 = geteuid() read$FUSE(r1, &(0x7f0000001c00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r1, &(0x7f0000003c40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000005c80)={{{@in=@private, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000005d80)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000005dc0)={{0x1, 0x1, 0x18, r1, {0xee01, 0xee01}}, './file0\x00'}) r11 = getpgrp(0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f0000005e00)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r13 = getgid() r14 = accept4$rose(r1, &(0x7f0000007e40)=@full={0xb, @dev, @null, 0x0, [@bcast, @bcast, @null, @netrom, @null]}, &(0x7f0000007e80)=0x40, 0x80000) r15 = openat2(0xffffffffffffff9c, &(0x7f0000007ec0)='./file0\x00', &(0x7f0000007f00)={0x1, 0x92, 0x6}, 0x18) sendmmsg$unix(r1, &(0x7f0000008080)=[{{&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000180)="526f5c310dd9f84526e469a72b2b", 0xe}, {&(0x7f00000001c0)="647658bf5e03f964b29372157d78ad46b5e4ae495cbf31c1d55c2e0ba51d974059aead6bfcc88caeedf25c79c32e31ec5282a549f7ebeaffcf5ae041ce5e3a33f3253e75469d238951c39bb3fbcf9338460cf8264d987228d3b8ee2001a1530d82fb64449fd0556a96e0c0a79e0dbd0ab863acfa5b34d631803451ad75c3ee7cf92a243e54fe959ef0f4a04fb927bda4939a695df3ae671c83eedc8c3cc70851bbd2bb552f4264e3c58aee5aa8a414664d7c9d6ed050d295109588c6dab13eb16e07b40acd9f903dd050", 0xca}], 0x2, &(0x7f0000000500)=[@rights={{0x1c, 0x1, 0x1, [r0, r1, r1]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, r1, r2]}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r1, r0]}}, @rights={{0x1c, 0x1, 0x1, [r1, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee00, r4}}}, @rights={{0x24, 0x1, 0x1, [r0, r1, r0, r0, r1]}}], 0xe0, 0x4884}}, {{&(0x7f0000000600)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001ac0)=[{&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="224795729100fbcec94c2545cb28db27151013b9a43ee77f3c806414e016354cb665d9c4ffff1cc96623dfd3ac1576b8c2f83dfad47b0465059fc9ab5c263789a2650f3c5e34f5fb93a42e28615bfafc2a609dd02e9892", 0x57}, {&(0x7f0000001700)="34bd711de14a71b48bd6db727496f17da15b44db6cdf6f158eb0d185b33145ecd0aaf6c99e2110851a143668174c91caea457a81c62d7082fb66ced6e21548e2465628", 0x43}, {&(0x7f0000001780)="c1243c711b3813cdb05320f8d7982c6610272152142f6b3aede7ca98269069ff28098eded998846cb8d0971f2cd7b9087a4a7a352d44a94cc74c67bb1d84a503b37b0e8df03ea33677454ba5450dab9ae90847e7f0ea22e898478ba58f19a59dc3fe136e6f1d147931d84fe3b80a6de9ea255e17add9c83780883f2d19d3a576762f82da98ca3406a886dc521a8db4562db246d7445e3e326f597c9054ec40ee548e4b9e1c92691d2549aaa9e12522325823dc6acd8644e3d78cb50ca8486aaa19c2d8625ec902dfa896018ea101823be62975aea737a16b6efe3c8a2eb4670d84b9", 0xe2}, {&(0x7f0000001880)="5a18f99e34ecd589c18c9ee0e29dedb74a3f2c0156d445299e0faa75ce54ba3c11c7a0cc3db743756ac44e8a9f3e036c8699a5ec902c0ba89ab481406b21c3985295b993dcd2996d08897579892e2e5ad7a0980507b3f9724e5b635c2c26a7c9a0c8d39b73a572dde64d79dae741aae7eee80a6ebefb69", 0x77}, {&(0x7f0000001900)="9759c1b60a56410a1ea3ceebe8b062e01955d1c126f3dfd2696f341307fe5f6750154cf89d725588eb105f09fef57fe5d5436c815e62b80b", 0x38}, {&(0x7f0000001940)="6776eba05a45c5f8865eec7d4286970d06d58f1e27d53519f16d1112cbdc777e52d6ff237c457aee956e6ac8550d30fcd2813484707fba2c7b7ca145493e5f0cabe2a5d64d39a1c0ee", 0x49}, {&(0x7f00000019c0)="01088f4ed1e9a0a56d2905c1b396417cbf1d9967e049fbc04b2e04ef1efc21ac45d2d1307f35a1239a390a129f8252cfaeb5e401fa286156b4350215751975e11d8b228deb71e6147a2497cf1cf2484b83dba66486c8620c299afb949d659771233162f04d2d7b397ccbe65792f47dabb511b6e1cacdd47fc90f9d16585ce2fabb985e8fb6d302296e49bf7b13ca39c17cf7066e67127919620822e4af9bbf774c8a39075440dfb768e19b908226e11ca24f37781b27829b82995152fa729d05ef83dab5", 0xc4}], 0x8, &(0x7f0000007f40)=[@rights={{0x24, 0x1, 0x1, [r1, r1, r0, 0xffffffffffffffff, r5]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, r0, r0, r0]}}, @rights={{0x20, 0x1, 0x1, [r1, r1, r0, r1]}}, @rights={{0x20, 0x1, 0x1, [r14, r1, r0, r15]}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r1, r1]}}], 0x110, 0x20008806}}], 0x2, 0x81) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000008100)) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000008140)={'icmp6\x00'}, &(0x7f0000008180)=0x1e) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000008200), r1) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f00000082c0)={&(0x7f00000081c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000008280)={&(0x7f0000008240)={0x20, r16, 0x100, 0x70bd25, 0xab09, {{}, {@void, @void, @val={0xc, 0x99, {0x5, 0x25}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20004404}, 0x40) readv(r5, &(0x7f0000009700)=[{&(0x7f0000008300)=""/115, 0x73}, {&(0x7f0000008380)=""/4096, 0x1000}, {&(0x7f0000009380)=""/30, 0x1e}, {&(0x7f00000093c0)=""/247, 0xf7}, {&(0x7f00000094c0)=""/21, 0x15}, {&(0x7f0000009500)=""/237, 0xed}, {&(0x7f0000009600)=""/205, 0xcd}], 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000009780)) r17 = syz_open_dev$vcsu(&(0x7f00000097c0), 0x3, 0x1) write$usbip_server(r17, &(0x7f0000009800)=@ret_unlink={{0x4, 0x8f7, 0x0, 0x1, 0x9}, {0x1}}, 0x30) ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f0000009880)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r15, &(0x7f0000009940)={&(0x7f0000009840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000009900)={&(0x7f00000098c0)={0x30, r16, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x61}, @val={0x8, 0x3, r18}, @val={0xc, 0x99, {0x7fff, 0x67}}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000009980), 0x88080, 0x0) recvfrom$unix(r15, &(0x7f00000099c0)=""/68, 0x44, 0x40010000, &(0x7f0000009a40)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 3.454455266s ago: executing program 5 (id=3479): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xd4}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6b00}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) connect$llc(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0xe7e, 0x0) read$msr(r2, &(0x7f0000009b80)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x0, 0xffffffb0}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x9d}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) getrlimit(0xd, &(0x7f0000000080)) 3.304588195s ago: executing program 6 (id=3480): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 64) r0 = getpid() (rerun: 64) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) (async, rerun: 64) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x2) (async) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x5, 0x6, 0x5, 0x70bd2c, 0x25dfdbfe, {0x14, 0x0, 0xc2a4}, [@typed={0x14, 0x68, 0x0, 0x0, @ipv6=@local}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) (async) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) (async) setsockopt$sock_linger(r8, 0x1, 0x3c, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x1c, 0x0, &(0x7f0000000000)=[@register_looper, @register_looper, @increfs_done={0x40106308, 0x2}], 0xae3, 0x0, &(0x7f00000014c0)="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"}) 3.293261567s ago: executing program 2 (id=3481): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c003c003c00000006000000040000000000000e0400000000000000000000000100000d0400000004000000040000000000000000000010040000000000000000000002030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28) 2.807223874s ago: executing program 5 (id=3482): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 2.72713978s ago: executing program 9 (id=3483): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/xfrm_stat\x00') signalfd4(r1, &(0x7f0000000040)={[0x5]}, 0x8, 0x80000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) write$hidraw(r2, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='net/xfrm_stat\x00') (async) signalfd4(r1, &(0x7f0000000040)={[0x5]}, 0x8, 0x80000) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) (async) write$hidraw(r2, 0x0, 0x0) (async) 2.715905361s ago: executing program 8 (id=3484): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e65740000001f0c00078008000640"], 0x5c}}, 0x20084884) 2.226735731s ago: executing program 5 (id=3485): syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) getpid() r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x4008, 0x3, 0x218, 0x0, 0x32, 0x148, 0x0, 0x148, 0x180, 0x240, 0x240, 0x180, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010100, @rand_addr=0x64010102, 0xff, 0xff0000ff, 'syz_tun\x00', 'pim6reg\x00', {0xff}, {0xff}, 0x2e, 0x2, 0x14}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@addrtype={{0x30}, {0x1040, 0x224, 0x0, 0x1}}, @common=@unspec=@addrtype1={{0x28}, {0x1109, 0x0, 0x334}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x2, 0x94}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0x0, 'vlan0\x00', 'caif0\x00', {0xff}, {}, 0x2, 0x3, 0x19}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc49107"], 0x1c}}, 0x0) recvmmsg$unix(r4, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4070, 0xfe6}, {0x0}], 0x2}}], 0x2, 0x42, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57}, 0x48) socket$caif_stream(0x25, 0x1, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r5, 0x0, 0x4800) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4042, 0x17d) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001400), 0x101900, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) 2.205494129s ago: executing program 2 (id=3486): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "84e5f43d"}]}}, 0x0}, 0x0) 1.876825799s ago: executing program 9 (id=3487): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="98000000020103000000000000000000020000050800084000000000060012400004000006001240000400001c00198008000100400000000800010004000000"], 0x98}, 0x1, 0x0, 0x0, 0x2c040041}, 0x4040040) writev(0xffffffffffffffff, &(0x7f0000002100), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r3, 0x0, 0xe, 0x0, &(0x7f00000001c0)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x20024094, &(0x7f0000000040)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x2f) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0xc000) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0x180) unshare(0x40000000) syz_open_dev$sndctrl(&(0x7f0000000000), 0x8, 0xc0040) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x8}, 0x10) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000000100)=""/222, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) 1.876613117s ago: executing program 8 (id=3488): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xc5) ioctl$SIOCAX25ADDUID(r0, 0x89e1, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) syz_io_uring_setup(0xefe, &(0x7f0000000140)={0x0, 0xcc1c, 0x8}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000000)) 1.235517006s ago: executing program 8 (id=3489): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc}, 0x0, [0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3, 0x0, 0x40000000, 0xfeffffff, 0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x2f000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x40000000, 0x0, 0xfffffffc, 0x0, 0xffffffff, 0x0, 0xa, 0x0, 0x2d52c0], [0x0, 0x1, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000, 0x0, 0xf, 0x1, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfefffffd, 0x0, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], [0x88000001, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0x1, 0x0, 0x0, 0x3c63, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0xd12, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x800, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) 1.08344801s ago: executing program 6 (id=3490): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) io_uring_setup(0xb16, &(0x7f0000000540)={0x0, 0xc5cd, 0xbb5005ebe079ea09, 0x3, 0x2ff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, 0x0, 0x4) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@my=0x1, 0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x7, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4040800}, 0x20000010) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x3a8, 0x238, 0x11, 0x148, 0x238, 0x0, 0x310, 0x2a8, 0x2a8, 0x310, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x238, 0x0, {0x0, 0x8000000}, [@common=@inet=@socket2={{0x28}, 0x1}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x9, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffe}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}, 0x0, 0x0, 0x31}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x5, 0x2, 0x3, '\x00', 'syz0\x00', {0x81}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) socket$rds(0x15, 0x5, 0x0) 875.464747ms ago: executing program 5 (id=3491): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000080e372208c106801b284010203110902240001000010000904020002f8fd00000905060200020d0006090582020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) r1 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x2d, 0x0, 0x20, 0x4000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x2008004) r2 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a01020301090224f8010000000009040001020a16d10009050700000000000009055f6274ca65c1bfaec0bf8a1557358f5a46736f541fc7be3f20f80ad9f03803a6096cb6055303887add5b63a26bc387735bde6d3a67fc248226eb3437ac4a", @ANYRES32], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x8, &(0x7f00000002c0)=ANY=[]) 792.597244ms ago: executing program 2 (id=3492): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x103802) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x189482) close_range(r1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000044000000"], 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x78, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008050}, 0x20004000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x80000000}], 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="6ba425bd7000fb5bdf250100000006001c00951e000006001c004200000005002100fe00383aa8bf773516440000060003000700000005002200010000007b58788a6a97d1f6ff9834ab6fc93a69e34c51e414128eda16601e4398047960ddd669932c491fffc271dd4a12fa2ffcdb90501848caa3fa6a3757da25c0f55c4b8e57ef24644470d19f0892bd7974a5ad42b9ce"], 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000001c0)=@req3={0x1, 0x3, 0x47, 0x100, 0x1, 0x3, 0x5}, 0x1c) socket$vsock_stream(0x28, 0x1, 0x0) socket(0x200000000000011, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_clone3(&(0x7f0000000080)={0x204801600, &(0x7f00000001c0), 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) 475.957291ms ago: executing program 8 (id=3493): syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC=r2, @ANYRES16=r1], 0x78) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000002000010000000000fbdbdf250a106b00060000031f00020014000200fc0200000000000000000000000000011400010020010000000000000000000000000000baa1d66eb75912afd303cabcd1995932548e7fbe16acdc6bc2e6f060cec63ed75ff7856c72cd2295ef854ccecb5a0b0dcfbe70765db26d536d051300a3d998b5526d1882d9b02ce119935213dccf6eb1230671cb5b696f6034e1b2a40158b8e396"], 0x44}}, 0x40000) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) syz_open_dev$evdev(0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r1, 0x1, &(0x7f0000000240)) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) syz_io_uring_setup(0x3a, 0x0, 0x0, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 65.787386ms ago: executing program 2 (id=3494): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000019840)={{'\x00', 0x2}, {0x2}, 0x120, 0x0, 0x0, 0x0, 0x0, &(0x7f0000019400)="d98b483ea8f75ec35758b3ac2f718a0eb13a9d65", 0x14, 0x0, &(0x7f0000019640)={0x2, 0x145, {0x1, 0xc, 0x94, "5fd798f4042c85d20b06574e44b442a929eea77d9b95052bce2b12de0d6b40e673779cdfcd46bcde4ce839d5662d2a850167f6c71ee76d82819bdb180be6b2e4f599546ff4e4d52bbeee4bb8a17256a3745563dc4acb9c08cf405519fafe43d9a29dcc7c6cfc859ce8c78f334f33be01875d57642e7ccf5183dc5bdec8c79806781c81c3d71713e23148440f6db435c43f04de86", 0xa4, "7f1cff9df9791cd2cd8aec9838e941f56343045a1ecf89065d73c7b78ab716c19041cb1a7d584be9bc4be518a1fb289de10f8b9cf9689f85e0f12dfd52e57d524a4c6096a71633f0dc199090432b12263e9cf979c44c4218236fc4a60d44cc5f2c84d9518b8ee784c602cf16daa8d8326da6853d018307d77c36c0931d05847a4422932ae3021d4735ae57cb3238322c4cdda85aa55c5a15e78cda96df28a8442098fe76"}, 0x8a, "e6fcf989a69a15a8c2addf70e5a8d9ebf316b1d378353963fb1a486269466abdabb762762e8b957d9e74df57302db04d6e28237887a87e3b1366aeec0dc93f54e006d39408e29fc7e4111d9b4bd02c2fba895601acf7a391c9f691b048a2bf96bcfad0ac6a5555819f0a3e0ac1c73438b340b0409bd77e7dc2cc3da2ebfcb9e126e2b90aa23942986850"}, 0x1db}) sched_setaffinity(0x0, 0x8, &(0x7f0000019300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000019580)=ANY=[@ANYBLOB="aaaac3aa4215cf6c044a08aaa10180c2000001fc0b030000e007020000b6dba7a7ff307ddff39b11c20a628f001a2793481a26d2a44b4c127d44ad6f2fc302432e4021167e5e8595ad85d82aaafca1c0daf37caac16b18c38898e4a5949936ae59dafca735e1b40aba699003d5a44b37dab44d438464137a3db34659be1979893cdf1463a9826d509786a0110586f874726f023ca74faf86ff135aabc6bebf"], &(0x7f0000000280)={0x0, 0x3, [0xbb6, 0x3f, 0x4b3, 0xec]}) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000040)) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x1cabe2) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/oops_count', 0x8a883, 0x2) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000080)={r5, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) 0s ago: executing program 5 (id=3495): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) kernel console output (not intermixed with test programs): read_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1054.118283][T17386] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2861'. [ 1054.127658][T17386] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2861'. [ 1054.550304][T17388] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 16384, id = 0 [ 1055.106643][T17408] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2866'. [ 1055.145540][T17408] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2866'. [ 1056.487257][T17411] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2867'. [ 1056.509950][T17405] netlink: 'syz.2.2862': attribute type 2 has an invalid length. [ 1056.612511][T17410] netlink: 'syz.2.2862': attribute type 2 has an invalid length. [ 1056.723370][ T30] audit: type=1326 audit(2000000743.457:9672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17395 comm="syz.9.2864" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f147e99c819 code=0x0 [ 1057.472470][T17405] !: entered promiscuous mode [ 1057.671774][ T30] audit: type=1400 audit(2000000744.407:9673): avc: denied { setopt } for pid=17429 comm="syz.5.2870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1058.436811][T17416] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 1058.485158][T17442] netlink: 'syz.9.2876': attribute type 12 has an invalid length. [ 1058.493106][T17442] netlink: 'syz.9.2876': attribute type 29 has an invalid length. [ 1058.505195][T13030] Bluetooth: hci7: command 0x0405 tx timeout [ 1058.517655][T17442] netlink: 148 bytes leftover after parsing attributes in process `syz.9.2876'. [ 1058.541145][T17442] netlink: 'syz.9.2876': attribute type 2 has an invalid length. [ 1058.599399][T17442] netlink: 'syz.9.2876': attribute type 3 has an invalid length. [ 1058.655651][T17442] netlink: 3 bytes leftover after parsing attributes in process `syz.9.2876'. [ 1058.672234][ T30] audit: type=1400 audit(2000000745.438:9674): avc: denied { read } for pid=17448 comm="syz.2.2877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1058.694967][T17451] binder: BINDER_SET_CONTEXT_MGR already set [ 1058.700958][T17451] binder: 17449:17451 ioctl 4018620d 200000004a80 returned -16 [ 1058.845521][T17457] tipc: Enabling of bearer rejected, failed to enable media [ 1059.333580][T17455] syzkaller0: entered promiscuous mode [ 1059.339080][T17455] syzkaller0: entered allmulticast mode [ 1059.822612][T17471] PKCS8: Unsupported PKCS#8 version [ 1059.881328][T17465] tc_dump_action: action bad kind [ 1060.649810][T17481] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2885'. [ 1061.083679][T17483] overlayfs: failed to resolve './file1': -2 [ 1061.708325][T17501] loop7: detected capacity change from 0 to 7 [ 1061.715881][ C0] blk_print_req_error: 10 callbacks suppressed [ 1061.715898][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1061.731632][ C0] buffer_io_error: 10 callbacks suppressed [ 1061.731646][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1061.746900][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1061.756502][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1061.789978][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1061.799644][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1061.808998][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1061.818595][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1061.838989][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1061.848583][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1061.857575][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1061.867148][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1061.875164][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1061.884757][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1061.893747][T17501] ldm_validate_partition_table(): Disk read failed. [ 1061.910001][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1061.919619][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1061.954716][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1061.964322][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1062.002378][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1062.011964][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1062.025468][T17501] Dev loop7: unable to read RDB block 0 [ 1062.104326][T17501] loop7: unable to read partition table [ 1062.139478][T17501] loop7: partition table beyond EOD, truncated [ 1062.150352][T17501] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1064.802650][T17518] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2896'. [ 1064.974853][T17524] vlan3: entered allmulticast mode [ 1064.988329][T17524] bridge3: entered allmulticast mode [ 1065.267123][ T5809] Bluetooth: hci7: ACL packet for unknown connection handle 201 [ 1065.351540][T17535] FAULT_INJECTION: forcing a failure. [ 1065.351540][T17535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1065.434288][T17537] overlayfs: failed to resolve './file1': -2 [ 1065.472774][T17535] CPU: 0 UID: 0 PID: 17535 Comm: syz.2.2899 Tainted: G L syzkaller #0 PREEMPT(full) [ 1065.472802][T17535] Tainted: [L]=SOFTLOCKUP [ 1065.472808][T17535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1065.472818][T17535] Call Trace: [ 1065.472825][T17535] [ 1065.472832][T17535] dump_stack_lvl+0x100/0x190 [ 1065.472866][T17535] should_fail_ex.cold+0x5/0xa [ 1065.472891][T17535] _copy_from_iter+0x1f4/0x1690 [ 1065.472920][T17535] ? __pfx__copy_from_iter+0x10/0x10 [ 1065.472940][T17535] ? rcu_is_watching+0x12/0xc0 [ 1065.472962][T17535] ? trace_kmalloc+0x101/0x130 [ 1065.472981][T17535] ? __kasan_kmalloc+0xaa/0xb0 [ 1065.473010][T17535] ? __kmalloc_noprof+0x320/0x850 [ 1065.473041][T17535] kernfs_fop_write_iter+0x186/0x5f0 [ 1065.473070][T17535] vfs_write+0x6ac/0x1070 [ 1065.473089][T17535] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1065.473113][T17535] ? __pfx_vfs_write+0x10/0x10 [ 1065.473145][T17535] ksys_write+0x12a/0x250 [ 1065.473163][T17535] ? __pfx_ksys_write+0x10/0x10 [ 1065.473188][T17535] do_syscall_64+0x106/0xf80 [ 1065.473206][T17535] ? clear_bhb_loop+0x40/0x90 [ 1065.473228][T17535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.473247][T17535] RIP: 0033:0x7f8be159c819 [ 1065.473261][T17535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1065.473278][T17535] RSP: 002b:00007f8be2498028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1065.473295][T17535] RAX: ffffffffffffffda RBX: 00007f8be1815fa0 RCX: 00007f8be159c819 [ 1065.473307][T17535] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000003 [ 1065.473318][T17535] RBP: 00007f8be2498090 R08: 0000000000000000 R09: 0000000000000000 [ 1065.473329][T17535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1065.473339][T17535] R13: 00007f8be1816038 R14: 00007f8be1815fa0 R15: 00007ffc4a2d6558 [ 1065.473365][T17535] [ 1066.122542][T17547] overlayfs: missing 'lowerdir' [ 1066.190782][T17548] xt_hashlimit: size too large, truncated to 1048576 [ 1066.294254][T17550] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 1068.013690][T17566] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2909'. [ 1068.022816][T17566] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2909'. [ 1068.179068][T13042] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1068.328952][T13042] usb 3-1: Using ep0 maxpacket: 32 [ 1068.363481][T13042] usb 3-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1068.434528][T13042] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1068.460990][T13042] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 1068.508442][T13042] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.558572][T13042] usb 3-1: config 0 descriptor?? [ 1070.535525][T17578] netlink: 'syz.6.2912': attribute type 1 has an invalid length. [ 1070.545183][T17580] syzkaller0: entered promiscuous mode [ 1070.614182][T17589] netlink: 388 bytes leftover after parsing attributes in process `syz.9.2913'. [ 1070.648076][T17580] syzkaller0: entered allmulticast mode [ 1070.695432][T17578] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1071.097799][T17589] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2913'. [ 1071.295501][T13042] usbhid 3-1:0.0: can't add hid device: -71 [ 1071.305823][T13042] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1071.350240][T13042] usb 3-1: USB disconnect, device number 62 [ 1071.419164][T17597] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2914'. [ 1071.488519][ T9] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1071.650272][ T9] usb 7-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1071.667685][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.693948][ T9] usb 7-1: Product: syz [ 1071.720813][ T9] usb 7-1: Manufacturer: syz [ 1071.742012][ T9] usb 7-1: SerialNumber: syz [ 1071.871885][ T9] usb 7-1: config 0 descriptor?? [ 1071.983980][T17603] overlayfs: missing 'lowerdir' [ 1072.221954][T17604] xt_hashlimit: size too large, truncated to 1048576 [ 1072.297709][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803331cc00: rx timeout, send abort [ 1072.308162][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88803331cc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1072.705516][ T30] audit: type=1400 audit(2000000759.465:9675): avc: denied { read } for pid=5162 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1073.025888][ T30] audit: type=1400 audit(2000000759.465:9676): avc: denied { search } for pid=5162 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1073.085267][ T30] audit: type=1400 audit(2000000759.465:9677): avc: denied { search } for pid=5162 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1073.193562][ T30] audit: type=1400 audit(2000000759.465:9678): avc: denied { add_name } for pid=5162 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1073.274828][ T30] audit: type=1400 audit(2000000759.475:9679): avc: denied { create } for pid=5162 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1073.324352][ T30] audit: type=1400 audit(2000000759.475:9680): avc: denied { append open } for pid=5162 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1073.361363][ T30] audit: type=1400 audit(2000000759.475:9681): avc: denied { getattr } for pid=5162 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1073.632840][T17613] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2917'. [ 1073.940464][ T9] usb 7-1: f81604_read: reg: 105 failed: -ETIMEDOUT [ 1073.952351][ T9] f81604 7-1:0.0: Setting termination of CH#0 failed: -ETIMEDOUT [ 1073.971634][ T9] f81604 7-1:0.0: probe with driver f81604 failed with error -110 [ 1074.423479][T17598] vlan2: entered allmulticast mode [ 1074.428965][T17598] bridge3: entered allmulticast mode [ 1074.434766][T17599] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1074.436277][T17607] kthread_run failed with err -4 [ 1074.518758][T14964] usb 7-1: USB disconnect, device number 24 [ 1075.253970][T17632] overlayfs: failed to resolve './file1': -2 [ 1075.667213][T17631] loop7: detected capacity change from 0 to 7 [ 1075.673653][ C0] blk_print_req_error: 10 callbacks suppressed [ 1075.673663][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1075.689378][ C0] buffer_io_error: 10 callbacks suppressed [ 1075.689386][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1075.705578][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1075.715139][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1075.724547][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1075.734109][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1075.744090][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1075.753633][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1075.763595][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1075.773136][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1075.785376][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1075.794943][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1075.805172][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1075.814723][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1075.822595][T17631] ldm_validate_partition_table(): Disk read failed. [ 1075.833895][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1075.843443][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1075.855308][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1075.864874][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1075.875385][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1075.884936][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1075.895256][T17631] Dev loop7: unable to read RDB block 0 [ 1075.930088][T17642] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2921'. [ 1075.940240][T17631] loop7: unable to read partition table [ 1075.945984][T17631] loop7: partition table beyond EOD, truncated [ 1075.952114][T17631] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1076.045256][ T5817] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1076.143804][ T30] audit: type=1400 audit(2000000762.876:9682): avc: denied { bpf } for pid=17628 comm="syz.5.2921" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1076.364913][ T5817] usb 10-1: Using ep0 maxpacket: 32 [ 1076.431935][ T5817] usb 10-1: config 0 has an invalid interface number: 85 but max is 0 [ 1076.456989][ T5817] usb 10-1: config 0 has no interface number 0 [ 1076.463179][ T5817] usb 10-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1076.484174][ T5817] usb 10-1: config 0 interface 85 has no altsetting 0 [ 1076.593220][ T5817] usb 10-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1076.672717][ T5817] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.914445][ T30] audit: type=1326 audit(2000000763.567:9683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17660 comm="syz.8.2928" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa9b339c819 code=0x0 [ 1076.938698][ T5817] usb 10-1: Product: syz [ 1076.942989][ T5817] usb 10-1: Manufacturer: syz [ 1076.953374][ T5817] usb 10-1: SerialNumber: syz [ 1077.081312][ T30] audit: type=1400 audit(2000000763.737:9684): avc: denied { prog_load } for pid=17664 comm="syz.2.2929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1077.107490][ T5817] usb 10-1: config 0 descriptor?? [ 1077.531230][ T5817] appletouch 10-1:0.85: Could not find int-in endpoint [ 1077.541094][ T5817] appletouch 10-1:0.85: probe with driver appletouch failed with error -5 [ 1077.550330][ T5817] usbhid 10-1:0.85: couldn't find an input interrupt endpoint [ 1077.644279][ T9] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1077.680634][T17676] netlink: 276 bytes leftover after parsing attributes in process `syz.8.2931'. [ 1077.727502][ T5817] usb 10-1: USB disconnect, device number 25 [ 1077.864294][ T9] usb 7-1: no configurations [ 1077.869014][ T9] usb 7-1: can't read configurations, error -22 [ 1077.880323][T17678] binder: BINDER_SET_CONTEXT_MGR already set [ 1077.904249][T17678] binder: 17677:17678 ioctl 4018620d 200000004a80 returned -16 [ 1078.041898][ T9] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1078.328575][ T9] usb 7-1: no configurations [ 1078.328670][ T9] usb 7-1: can't read configurations, error -22 [ 1078.331176][ T9] usb usb7-port1: attempt power cycle [ 1079.142703][ T9] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1079.218622][ T9] usb 7-1: no configurations [ 1079.223297][ T9] usb 7-1: can't read configurations, error -22 [ 1079.272945][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1079.272960][ T30] audit: type=1326 audit(2000000766.048:9687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17695 comm="syz.5.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f858739c819 code=0x7ffc0000 [ 1079.383662][ T9] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1079.411119][ T30] audit: type=1326 audit(2000000766.048:9688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17695 comm="syz.5.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f858739c819 code=0x7ffc0000 [ 1079.461410][ T9] usb 7-1: no configurations [ 1079.466218][ T9] usb 7-1: can't read configurations, error -22 [ 1079.473588][ T9] usb usb7-port1: unable to enumerate USB device [ 1079.519943][T13042] hid-generic 0000:DC1E:000E.000B: unknown main item tag 0x0 [ 1079.543995][T13042] hid-generic 0000:DC1E:000E.000B: unknown main item tag 0x0 [ 1079.551504][ T30] audit: type=1326 audit(2000000766.048:9689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17695 comm="syz.5.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f858739c819 code=0x7ffc0000 [ 1079.576903][T13042] hid-generic 0000:DC1E:000E.000B: unknown main item tag 0x0 [ 1079.585559][T13042] hid-generic 0000:DC1E:000E.000B: unknown main item tag 0x0 [ 1079.592969][T13042] hid-generic 0000:DC1E:000E.000B: unknown main item tag 0x0 [ 1079.603296][T13042] hid-generic 0000:DC1E:000E.000B: unknown main item tag 0x0 [ 1079.610679][ T30] audit: type=1326 audit(2000000766.048:9690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17695 comm="syz.5.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f858739c819 code=0x7ffc0000 [ 1079.634318][T13042] hid-generic 0000:DC1E:000E.000B: unknown main item tag 0x0 [ 1079.643268][T13042] hid-generic 0000:DC1E:000E.000B: unknown main item tag 0x0 [ 1079.650716][T13042] hid-generic 0000:DC1E:000E.000B: unknown main item tag 0x0 [ 1079.658353][ T30] audit: type=1326 audit(2000000766.048:9691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17695 comm="syz.5.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f858739c819 code=0x7ffc0000 [ 1079.681874][T13042] hid-generic 0000:DC1E:000E.000B: unknown main item tag 0x0 [ 1079.696477][T13042] hid-generic 0000:DC1E:000E.000B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1079.714796][ T30] audit: type=1326 audit(2000000766.048:9692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17695 comm="syz.5.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f858739c819 code=0x7ffc0000 [ 1079.757284][T17705] fido_id[17705]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1079.770924][ T30] audit: type=1326 audit(2000000766.048:9693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17695 comm="syz.5.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f858739c819 code=0x7ffc0000 [ 1079.809626][ T30] audit: type=1326 audit(2000000766.048:9694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17695 comm="syz.5.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f858739c819 code=0x7ffc0000 [ 1079.856500][ T30] audit: type=1326 audit(2000000766.048:9695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17695 comm="syz.5.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f858739c819 code=0x7ffc0000 [ 1079.882840][ T30] audit: type=1326 audit(2000000766.048:9696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17695 comm="syz.5.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f858739c819 code=0x7ffc0000 [ 1080.804147][T17740] veth1_macvtap: left promiscuous mode [ 1080.809645][T17740] macsec0: entered allmulticast mode [ 1081.092511][T17744] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 1081.969365][T17741] veth1_macvtap: entered promiscuous mode [ 1081.996252][T17741] veth1_macvtap: entered allmulticast mode [ 1082.002602][T17741] macsec0: left allmulticast mode [ 1082.007657][T17741] veth1_macvtap: left allmulticast mode [ 1082.414798][T17753] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2952'. [ 1082.442992][T17753] vlan3: entered allmulticast mode [ 1082.448215][T17753] bridge3: entered allmulticast mode [ 1082.796121][T17758] FAULT_INJECTION: forcing a failure. [ 1082.796121][T17758] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.941824][T17758] CPU: 0 UID: 0 PID: 17758 Comm: syz.5.2953 Tainted: G L syzkaller #0 PREEMPT(full) [ 1082.941855][T17758] Tainted: [L]=SOFTLOCKUP [ 1082.941861][T17758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1082.941872][T17758] Call Trace: [ 1082.941878][T17758] [ 1082.941885][T17758] dump_stack_lvl+0x100/0x190 [ 1082.941920][T17758] should_fail_ex.cold+0x5/0xa [ 1082.941944][T17758] should_failslab+0xc2/0x120 [ 1082.941965][T17758] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 1082.941993][T17758] ? resume_store+0x1b8/0x460 [ 1082.942020][T17758] kstrndup+0x64/0x120 [ 1082.942038][T17758] resume_store+0x1b8/0x460 [ 1082.942060][T17758] ? __pfx_resume_store+0x10/0x10 [ 1082.942089][T17758] ? find_held_lock+0x2b/0x80 [ 1082.942112][T17758] ? sysfs_file_kobj+0xe4/0x290 [ 1082.942137][T17758] ? sysfs_file_kobj+0xe4/0x290 [ 1082.942163][T17758] ? __pfx_resume_store+0x10/0x10 [ 1082.942183][T17758] kobj_attr_store+0x58/0x80 [ 1082.942202][T17758] ? __pfx_kobj_attr_store+0x10/0x10 [ 1082.942221][T17758] sysfs_kf_write+0xf2/0x150 [ 1082.942249][T17758] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1082.942272][T17758] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1082.942301][T17758] vfs_write+0x6ac/0x1070 [ 1082.942320][T17758] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1082.942346][T17758] ? __pfx_vfs_write+0x10/0x10 [ 1082.942382][T17758] ksys_write+0x12a/0x250 [ 1082.942405][T17758] ? __pfx_ksys_write+0x10/0x10 [ 1082.942430][T17758] do_syscall_64+0x106/0xf80 [ 1082.942447][T17758] ? clear_bhb_loop+0x40/0x90 [ 1082.942470][T17758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.942488][T17758] RIP: 0033:0x7f858739c819 [ 1082.942504][T17758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1082.942519][T17758] RSP: 002b:00007f85882a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1082.942536][T17758] RAX: ffffffffffffffda RBX: 00007f8587615fa0 RCX: 00007f858739c819 [ 1082.942548][T17758] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000003 [ 1082.942558][T17758] RBP: 00007f85882a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1082.942568][T17758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1082.942576][T17758] R13: 00007f8587616038 R14: 00007f8587615fa0 R15: 00007fffdd371218 [ 1082.942601][T17758] [ 1084.494691][T17785] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2962'. [ 1084.533133][T17785] bond1: entered promiscuous mode [ 1084.538292][T17785] bond1: entered allmulticast mode [ 1084.605707][T17792] binder: 17791:17792 ioctl c0306201 200000000640 returned -22 [ 1084.976229][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 1084.976259][ T30] audit: type=1326 audit(2000000771.701:9748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17791 comm="syz.5.2963" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f858739c819 code=0x0 [ 1085.761836][T17800] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2964'. [ 1085.770880][T17800] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2964'. [ 1086.033520][ T30] audit: type=1400 audit(2000000772.821:9749): avc: denied { block_suspend } for pid=17806 comm="syz.9.2967" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1086.319925][T13042] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1086.484551][T13042] usb 7-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1086.514852][T13042] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.531120][T13042] usb 7-1: Product: syz [ 1086.539732][T13042] usb 7-1: Manufacturer: syz [ 1086.549760][T13042] usb 7-1: SerialNumber: syz [ 1086.677678][T13042] usb 7-1: config 0 descriptor?? [ 1086.742249][T17809] netlink: 'syz.8.2968': attribute type 1 has an invalid length. [ 1086.785029][T17820] netlink: 'syz.9.2970': attribute type 1 has an invalid length. [ 1086.797449][T17825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2971'. [ 1086.807405][T17825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2971'. [ 1086.881491][T17827] binder: 17826:17827 ioctl c0306201 200000000080 returned -14 [ 1086.900883][T17827] binder: 17826:17827 ioctl c0306201 2000000003c0 returned -14 [ 1086.929738][T13042] usb 7-1: ignoring: probably an ADSL modem [ 1086.941021][ T30] audit: type=1326 audit(2000000773.722:9750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17828 comm="syz.2.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8be159c819 code=0x7ffc0000 [ 1086.987520][ T30] audit: type=1326 audit(2000000773.722:9751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17828 comm="syz.2.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8be159c819 code=0x7ffc0000 [ 1087.605993][ T30] audit: type=1326 audit(2000000773.722:9752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17828 comm="syz.2.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f8be159c819 code=0x7ffc0000 [ 1087.633145][ T30] audit: type=1326 audit(2000000773.722:9753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17828 comm="syz.2.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8be159c819 code=0x7ffc0000 [ 1087.657340][ T30] audit: type=1326 audit(2000000773.722:9754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17828 comm="syz.2.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8be159c819 code=0x7ffc0000 [ 1087.689428][T13483] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1087.696836][ T30] audit: type=1326 audit(2000000773.722:9755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17828 comm="syz.2.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f8be159c819 code=0x7ffc0000 [ 1087.720663][ T30] audit: type=1326 audit(2000000773.722:9756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17828 comm="syz.2.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8be159c819 code=0x7ffc0000 [ 1087.732497][T17837] ubi: mtd0 is already attached to ubi16 [ 1087.744498][ T30] audit: type=1326 audit(2000000773.722:9757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17828 comm="syz.2.2972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8be159c819 code=0x7ffc0000 [ 1087.839521][T13483] usb 9-1: Using ep0 maxpacket: 16 [ 1087.846076][T13483] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1087.856435][T13483] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1087.877974][T13483] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1087.879197][T17814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1087.910866][T17814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1087.911969][T13483] usb 9-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1087.993655][T13042] cxacru 7-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1088.007620][T13483] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.009991][T13042] usb 7-1: USB disconnect, device number 29 [ 1088.048259][T13483] usb 9-1: config 0 descriptor?? [ 1088.299235][T17850] overlayfs: failed to resolve './file1': -2 [ 1090.138121][T13483] usbhid 9-1:0.0: can't add hid device: -71 [ 1090.155894][T13483] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1090.188498][T13483] usb 9-1: USB disconnect, device number 26 [ 1090.645847][T17865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2985'. [ 1090.670764][T17865] vlan3: entered allmulticast mode [ 1090.675958][T17865] bridge2: entered allmulticast mode [ 1090.743166][T17865] bridge2: port 1(bond2) entered blocking state [ 1090.831163][T17865] bridge2: port 1(bond2) entered disabled state [ 1090.851119][T17865] bond2: entered allmulticast mode [ 1090.869746][T17865] bond2: entered promiscuous mode [ 1091.091332][T17877] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 1091.197482][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1091.197497][ T30] audit: type=1400 audit(2000000777.914:9759): avc: denied { read } for pid=17875 comm="syz.9.2989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1091.203028][T17879] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2990'. [ 1091.549694][T17882] overlayfs: missing 'lowerdir' [ 1091.649267][T17882] xt_hashlimit: size too large, truncated to 1048576 [ 1091.741926][T17886] xt_socket: unknown flags 0xc [ 1092.019616][T17891] binder: BINDER_SET_CONTEXT_MGR already set [ 1092.027363][T17891] binder: 17888:17891 ioctl 4018620d 200000004a80 returned -16 [ 1092.539057][T17898] random: crng reseeded on system resumption [ 1092.616386][T17898] FAT-fs (nbd9): unable to read boot sector [ 1092.751316][T17895] overlayfs: failed to resolve './file1': -2 [ 1092.811863][T17904] random: crng reseeded on system resumption [ 1092.840369][T17904] FAT-fs (nbd6): unable to read boot sector [ 1093.094718][ T30] audit: type=1400 audit(2000000779.725:9760): avc: denied { bind } for pid=17902 comm="syz.6.2994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1094.227316][ T30] audit: type=1326 audit(2000000780.925:9761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17914 comm="syz.6.2998" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7febe199c819 code=0x0 [ 1094.497815][T17930] tc_dump_action: action bad kind [ 1095.203764][T17947] tmpfs: Unknown parameter 'grpquBSuota_block_hqrdlymit' [ 1095.907884][T17956] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3005'. [ 1096.972636][T17972] syzkaller0: entered promiscuous mode [ 1096.978225][T17972] syzkaller0: entered allmulticast mode [ 1097.386962][ T29] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1097.460686][T17990] FAULT_INJECTION: forcing a failure. [ 1097.460686][T17990] name failslab, interval 1, probability 0, space 0, times 0 [ 1097.555128][T17991] overlayfs: failed to resolve './file1': -2 [ 1097.564355][T17990] CPU: 0 UID: 0 PID: 17990 Comm: syz.6.3018 Tainted: G L syzkaller #0 PREEMPT(full) [ 1097.564383][T17990] Tainted: [L]=SOFTLOCKUP [ 1097.564390][T17990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1097.564401][T17990] Call Trace: [ 1097.564407][T17990] [ 1097.564414][T17990] dump_stack_lvl+0x100/0x190 [ 1097.564448][T17990] should_fail_ex.cold+0x5/0xa [ 1097.564473][T17990] should_failslab+0xc2/0x120 [ 1097.564493][T17990] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1097.564519][T17990] ? do_getname_kernel+0x5d/0x250 [ 1097.564546][T17990] do_getname_kernel+0x5d/0x250 [ 1097.564571][T17990] kern_path+0x1f/0x50 [ 1097.564589][T17990] lookup_bdev+0xd8/0x280 [ 1097.564610][T17990] ? __pfx_lookup_bdev+0x10/0x10 [ 1097.564633][T17990] ? __asan_memcpy+0x3c/0x60 [ 1097.564661][T17990] resume_store+0x1d6/0x460 [ 1097.564684][T17990] ? __pfx_resume_store+0x10/0x10 [ 1097.564714][T17990] ? find_held_lock+0x2b/0x80 [ 1097.564737][T17990] ? sysfs_file_kobj+0xe4/0x290 [ 1097.564762][T17990] ? sysfs_file_kobj+0xe4/0x290 [ 1097.564788][T17990] ? __pfx_resume_store+0x10/0x10 [ 1097.564809][T17990] kobj_attr_store+0x58/0x80 [ 1097.564828][T17990] ? __pfx_kobj_attr_store+0x10/0x10 [ 1097.564843][T17990] sysfs_kf_write+0xf2/0x150 [ 1097.564860][T17990] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1097.564874][T17990] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1097.564892][T17990] vfs_write+0x6ac/0x1070 [ 1097.564903][T17990] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1097.564919][T17990] ? __pfx_vfs_write+0x10/0x10 [ 1097.564939][T17990] ksys_write+0x12a/0x250 [ 1097.564949][T17990] ? __pfx_ksys_write+0x10/0x10 [ 1097.564964][T17990] do_syscall_64+0x106/0xf80 [ 1097.564974][T17990] ? clear_bhb_loop+0x40/0x90 [ 1097.564988][T17990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.565000][T17990] RIP: 0033:0x7febe199c819 [ 1097.565010][T17990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1097.565020][T17990] RSP: 002b:00007febe2924028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1097.565031][T17990] RAX: ffffffffffffffda RBX: 00007febe1c15fa0 RCX: 00007febe199c819 [ 1097.565038][T17990] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000003 [ 1097.565044][T17990] RBP: 00007febe2924090 R08: 0000000000000000 R09: 0000000000000000 [ 1097.565050][T17990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1097.565057][T17990] R13: 00007febe1c16038 R14: 00007febe1c15fa0 R15: 00007fffa38a5d58 [ 1097.565072][T17990] [ 1097.574285][ T29] usb 10-1: Using ep0 maxpacket: 8 [ 1098.267811][T17999] binder: BINDER_SET_CONTEXT_MGR already set [ 1098.274989][T17999] binder: 17998:17999 ioctl 4018620d 200000004a80 returned -16 [ 1098.465162][ T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1098.479786][T18002] netlink: 'syz.5.3022': attribute type 10 has an invalid length. [ 1098.534697][ T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1098.554033][T18005] netlink: 'syz.5.3022': attribute type 10 has an invalid length. [ 1098.594024][ T29] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1098.605028][T18002] team0: Port device dummy0 added [ 1098.625166][T18005] team0: Port device dummy0 removed [ 1098.632362][ T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1098.632999][T18005] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1098.662794][ T29] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1098.693405][ T29] usb 10-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1098.727028][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.743738][T13483] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1098.770378][ T29] usb 10-1: config 0 descriptor?? [ 1098.786458][T17976] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1098.964523][T13483] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1098.979084][T13483] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1098.991046][T13483] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1099.039685][T13483] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1099.067035][T13483] usb 7-1: Product: syz [ 1099.075748][T13483] usb 7-1: Manufacturer: syz [ 1099.090283][T13483] usb 7-1: SerialNumber: syz [ 1099.132004][T13483] usb 7-1: config 0 descriptor?? [ 1099.148231][T13483] usb 7-1: selecting invalid altsetting 0 [ 1099.277108][T18017] loop7: detected capacity change from 0 to 7 [ 1099.326685][ T9] usb 10-1: USB disconnect, device number 26 [ 1099.328764][ T5809] Bluetooth: hci0: Opcode 0x0c03 failed: -71 [ 1099.368205][ C0] blk_print_req_error: 10 callbacks suppressed [ 1099.368225][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1099.384051][ C0] buffer_io_error: 10 callbacks suppressed [ 1099.384067][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1099.398375][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1099.408017][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1099.457991][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1099.467589][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1099.550933][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1099.560524][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1099.606120][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1099.615734][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1099.626311][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1099.635866][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1099.656051][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1099.665602][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1099.673742][T18017] ldm_validate_partition_table(): Disk read failed. [ 1099.683342][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1099.692905][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1099.741210][T18022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18022 comm=syz.5.3028 [ 1099.794845][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1099.804496][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1099.994003][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1100.003604][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1100.043209][T18017] Dev loop7: unable to read RDB block 0 [ 1100.091966][T18017] loop7: unable to read partition table [ 1100.158973][ T30] audit: type=1326 audit(2000000786.948:9762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18003 comm="syz.6.3021" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7febe199c819 code=0x0 [ 1100.262987][ T9] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1100.280895][T18017] loop7: partition table beyond EOD, truncated [ 1100.323415][T18017] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1100.434397][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1100.450976][ T9] usb 6-1: config 0 has no interfaces? [ 1100.459388][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1100.476016][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.496022][ T9] usb 6-1: Product: syz [ 1100.504761][ T9] usb 6-1: Manufacturer: syz [ 1100.514635][ T9] usb 6-1: SerialNumber: syz [ 1100.525560][ T9] usb 6-1: config 0 descriptor?? [ 1100.998348][ T9] usb 6-1: USB disconnect, device number 22 [ 1101.688192][T18024] snd-usb-audio 7-1:0.0: Runtime PM usage count underflow! [ 1101.703241][T13483] usb 7-1: USB disconnect, device number 30 [ 1101.728669][T18044] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3032'. [ 1101.737766][T18044] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3032'. [ 1102.170684][T18055] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3036'. [ 1102.735318][T18072] FAULT_INJECTION: forcing a failure. [ 1102.735318][T18072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1102.748459][T18072] CPU: 1 UID: 0 PID: 18072 Comm: syz.9.3042 Tainted: G L syzkaller #0 PREEMPT(full) [ 1102.748486][T18072] Tainted: [L]=SOFTLOCKUP [ 1102.748492][T18072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1102.748502][T18072] Call Trace: [ 1102.748508][T18072] [ 1102.748515][T18072] dump_stack_lvl+0x100/0x190 [ 1102.748545][T18072] should_fail_ex.cold+0x5/0xa [ 1102.748569][T18072] _copy_from_user+0x2e/0xd0 [ 1102.748587][T18072] binder_ioctl+0x4f5/0x7610 [ 1102.748614][T18072] ? tomoyo_path_number_perm+0x188/0x580 [ 1102.748645][T18072] ? __pfx_binder_ioctl+0x10/0x10 [ 1102.748665][T18072] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1102.748693][T18072] ? do_vfs_ioctl+0x226/0x13e0 [ 1102.748720][T18072] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1102.748747][T18072] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1102.748783][T18072] ? hook_file_ioctl_common+0x146/0x410 [ 1102.748810][T18072] ? selinux_file_ioctl+0x139/0x290 [ 1102.748836][T18072] ? selinux_file_ioctl+0xb4/0x290 [ 1102.748863][T18072] ? __pfx_binder_ioctl+0x10/0x10 [ 1102.748881][T18072] __x64_sys_ioctl+0x18e/0x210 [ 1102.748904][T18072] do_syscall_64+0x106/0xf80 [ 1102.748918][T18072] ? clear_bhb_loop+0x40/0x90 [ 1102.748940][T18072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.748957][T18072] RIP: 0033:0x7f147e99c819 [ 1102.748972][T18072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1102.748987][T18072] RSP: 002b:00007f147f8e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1102.749004][T18072] RAX: ffffffffffffffda RBX: 00007f147ec15fa0 RCX: 00007f147e99c819 [ 1102.749015][T18072] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1102.749026][T18072] RBP: 00007f147f8e2090 R08: 0000000000000000 R09: 0000000000000000 [ 1102.749037][T18072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1102.749047][T18072] R13: 00007f147ec16038 R14: 00007f147ec15fa0 R15: 00007ffe17e04b28 [ 1102.749072][T18072] [ 1102.749080][T18072] binder: 18071:18072 ioctl c0306201 2000000001c0 returned -14 [ 1103.043802][T18079] netlink: 64 bytes leftover after parsing attributes in process `syz.9.3043'. [ 1103.158683][ T30] audit: type=1400 audit(2000000789.950:9763): avc: denied { accept } for pid=18078 comm="syz.9.3043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1105.773437][T18095] netlink: 'syz.6.3047': attribute type 10 has an invalid length. [ 1105.850383][T13042] usb 9-1: new low-speed USB device number 27 using dummy_hcd [ 1105.955119][T18103] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1106.035197][T18107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3046'. [ 1106.044179][T18107] openvswitch: netlink: Unknown nsh attribute 0 [ 1106.353010][T18108] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3050'. [ 1106.409862][T13042] usb 9-1: Invalid ep0 maxpacket: 64 [ 1106.619810][T13042] usb 9-1: new low-speed USB device number 28 using dummy_hcd [ 1107.009613][T13042] usb 9-1: device not accepting address 28, error -71 [ 1107.139678][T13042] usb usb9-port1: attempt power cycle [ 1107.588026][T18117] can: request_module (can-proto-4) failed. [ 1108.159600][T18146] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1108.538833][ T9] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1108.587522][T18152] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1108.766193][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1108.927095][ T9] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 1108.952165][ T9] usb 3-1: config 0 has no interface number 0 [ 1108.967792][ T9] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1108.987475][ T9] usb 3-1: config 0 interface 196 has no altsetting 0 [ 1108.999397][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1109.008802][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.016789][ T9] usb 3-1: Product: syz [ 1109.028014][ T9] usb 3-1: Manufacturer: syz [ 1109.032682][ T9] usb 3-1: SerialNumber: syz [ 1109.046274][ T9] usb 3-1: config 0 descriptor?? [ 1109.059159][T18137] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1109.122508][T18159] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3070'. [ 1110.231359][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1110.277959][T14964] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1111.363950][ T30] audit: type=1400 audit(2000000798.164:9764): avc: denied { remove_name } for pid=18136 comm="syz.2.3061" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1111.641927][ T30] audit: type=1400 audit(2000000798.194:9765): avc: denied { unlink } for pid=18136 comm="syz.2.3061" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1111.785208][T14964] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1111.796219][T14964] usb 9-1: config 0 has no interfaces? [ 1111.803164][T14964] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1111.806059][ T9] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 1111.812264][T14964] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.830982][T14964] usb 9-1: config 0 descriptor?? [ 1112.235874][ T9] ipheth 3-1:0.196: probe with driver ipheth failed with error -71 [ 1112.240078][T13030] Bluetooth: hci6: SCO packet for unknown connection handle 200 [ 1112.258015][ T5817] usb 9-1: USB disconnect, device number 30 [ 1112.320507][ T9] usb 3-1: USB disconnect, device number 63 [ 1112.502161][ T30] audit: type=1400 audit(2000000799.295:9766): avc: denied { ioctl } for pid=18184 comm="syz.5.3077" path="socket:[63660]" dev="sockfs" ino=63660 ioctlcmd=0x582c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1112.502849][T18185] netlink: 'syz.5.3077': attribute type 4 has an invalid length. [ 1112.537665][T18185] netlink: 17 bytes leftover after parsing attributes in process `syz.5.3077'. [ 1112.600247][T13455] usb 7-1: new low-speed USB device number 31 using dummy_hcd [ 1112.724250][ T5817] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1112.749254][T13455] usb 7-1: device descriptor read/64, error -71 [ 1112.917269][ T5817] usb 9-1: Using ep0 maxpacket: 16 [ 1113.144014][T13455] usb 7-1: new low-speed USB device number 32 using dummy_hcd [ 1113.163594][ T5817] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1113.203900][ T5817] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1113.216260][ T5817] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1113.236863][ T5817] usb 9-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1113.245900][ T5817] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.301990][T13455] usb 7-1: device descriptor read/64, error -71 [ 1113.459645][T13455] usb usb7-port1: attempt power cycle [ 1113.479430][ T5817] usb 9-1: config 0 descriptor?? [ 1113.826243][T13455] usb 7-1: new low-speed USB device number 33 using dummy_hcd [ 1113.856810][T13455] usb 7-1: device descriptor read/8, error -71 [ 1114.012236][T18227] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3090'. [ 1114.031572][T18227] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3090'. [ 1114.895999][ T5817] hid-picolcd 0003:04D8:F002.000C: No report with id 0xf4 found [ 1114.905391][ T5817] hid-picolcd 0003:04D8:F002.000C: No report with id 0xf3 found [ 1115.010172][T18225] overlayfs: failed to resolve './file1': -2 [ 1115.022796][ T5817] usb 9-1: USB disconnect, device number 31 [ 1115.065747][T13455] usb 7-1: new low-speed USB device number 34 using dummy_hcd [ 1115.106199][T13455] usb 7-1: device descriptor read/8, error -71 [ 1115.167691][T18232] binder: 18231:18232 ioctl 4018620d 0 returned -22 [ 1115.249988][T13455] usb usb7-port1: unable to enumerate USB device [ 1115.723056][T18243] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3095'. [ 1116.058716][T18248] binder: 18247:18248 unknown command 0 [ 1116.170786][T18248] binder: 18247:18248 ioctl c0306201 2000000001c0 returned -22 [ 1116.624674][T18253] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1116.719635][T18259] loop6: detected capacity change from 0 to 2640 [ 1116.728997][T18259] buffer_io_error: 10 callbacks suppressed [ 1116.729025][T18259] Buffer I/O error on dev loop6, logical block 0, async page read [ 1116.742777][T18259] Buffer I/O error on dev loop6, logical block 0, async page read [ 1116.750751][T18259] Buffer I/O error on dev loop6, logical block 0, async page read [ 1116.758766][T18259] Buffer I/O error on dev loop6, logical block 0, async page read [ 1116.766728][T18259] Buffer I/O error on dev loop6, logical block 0, async page read [ 1116.774860][T18259] Buffer I/O error on dev loop6, logical block 0, async page read [ 1116.782862][T18259] Buffer I/O error on dev loop6, logical block 0, async page read [ 1116.790805][T18259] Buffer I/O error on dev loop6, logical block 0, async page read [ 1116.798727][T18259] ldm_validate_partition_table(): Disk read failed. [ 1116.805436][T18259] Buffer I/O error on dev loop6, logical block 0, async page read [ 1116.813388][T18259] Buffer I/O error on dev loop6, logical block 0, async page read [ 1116.821468][T18259] Dev loop6: unable to read RDB block 0 [ 1116.827803][T18259] loop6: unable to read partition table [ 1116.834313][T18259] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 1117.918319][T18273] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1118.285154][T18276] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3104'. [ 1118.690677][T18283] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 1119.349754][T18285] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3107'. [ 1119.573888][ T30] audit: type=1400 audit(2000000806.228:9767): avc: denied { bind } for pid=18284 comm="syz.5.3107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1120.137485][T18302] binder: 18300:18302 ioctl c0306201 0 returned -14 [ 1120.461063][T18307] tipc: Cannot configure node identity twice [ 1120.956605][T13455] kernel read not supported for file /dsp1 (pid: 13455 comm: kworker/0:6) [ 1121.103238][T18320] Cannot find del_set index 2 as target [ 1121.129188][ T30] audit: type=1326 audit(2000000807.929:9768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18299 comm="syz.8.3111" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa9b339c819 code=0x0 [ 1121.172558][T14964] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1121.322460][T14964] usb 7-1: device descriptor read/64, error -71 [ 1121.562329][T14964] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1121.702379][T14964] usb 7-1: device descriptor read/64, error -71 [ 1121.752413][ T5817] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1121.812927][T14964] usb usb7-port1: attempt power cycle [ 1121.927095][ T5817] usb 9-1: Using ep0 maxpacket: 32 [ 1121.939992][ T5817] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 1121.958655][ T5817] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1121.974194][ T5817] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1121.988955][ T5817] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1122.008858][ T5817] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1122.032322][ T5817] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 1122.052260][ T5817] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1122.069365][ T5817] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1122.092032][ T5817] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1122.110031][ T5817] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.131895][ T5817] usb 9-1: config 0 descriptor?? [ 1122.137644][T18323] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1122.172645][T14964] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1122.213389][T14964] usb 7-1: device descriptor read/8, error -71 [ 1122.342172][T13483] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1122.348639][ T5817] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 32 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1122.451907][T14964] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1122.472431][T14964] usb 7-1: device descriptor read/8, error -71 [ 1122.511833][T13483] usb 3-1: Using ep0 maxpacket: 8 [ 1122.518628][T13483] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1122.529827][T13483] usb 3-1: config 4 interface 0 has no altsetting 0 [ 1122.540198][T13483] usb 3-1: string descriptor 0 read error: -22 [ 1122.551608][ C0] usblp0: nonzero read bulk status received: -71 [ 1122.559134][ T30] audit: type=1400 audit(2000000809.350:9769): avc: denied { read write } for pid=18321 comm="syz.8.3117" name="lp0" dev="devtmpfs" ino=4505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1122.664906][T13483] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1122.676850][T14964] usb usb7-port1: unable to enumerate USB device [ 1122.683935][T13483] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1123.125430][ T5809] Bluetooth: hci7: command 0x0405 tx timeout [ 1123.140732][ T30] audit: type=1400 audit(2000000809.350:9770): avc: denied { open } for pid=18321 comm="syz.8.3117" path="/dev/usb/lp0" dev="devtmpfs" ino=4505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1123.165524][T13483] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1123.182796][T13483] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1123.207017][T13483] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1123.215029][T13483] usb 3-1: media controller created [ 1123.247768][T13483] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1123.349507][T18326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1123.361176][T18326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1123.543656][T18339] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3120'. [ 1123.560412][T18340] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3120'. [ 1123.576108][T18339] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3120'. [ 1123.627123][T18340] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3120'. [ 1123.846732][T18347] pim6reg: entered allmulticast mode [ 1123.860842][T18349] pim6reg: left allmulticast mode [ 1123.895258][T18348] team0: entered allmulticast mode [ 1123.895278][T18348] team_slave_0: entered allmulticast mode [ 1123.895293][T18348] team_slave_1: entered allmulticast mode [ 1124.235713][T18356] binder: BINDER_SET_CONTEXT_MGR already set [ 1124.248055][T18356] binder: 18355:18356 ioctl 4018620d 200000004a80 returned -16 [ 1124.449989][ T9] usb 9-1: USB disconnect, device number 32 [ 1124.458911][ T9] usblp0: removed [ 1124.487359][T13483] usb 3-1: USB disconnect, device number 64 [ 1124.609079][ T5817] libceph: connect (1)[c::]:6789 error -101 [ 1124.615309][ T5817] libceph: mon0 (1)[c::]:6789 connect error [ 1124.741639][T18366] netlink: 'syz.5.3125': attribute type 10 has an invalid length. [ 1124.820711][T18366] team0: Device vxcan1 is up. Set it down before adding it as a team port [ 1124.892414][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1124.898497][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1125.409820][T18376] xt_TCPMSS: Only works on TCP SYN packets [ 1125.417123][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1125.436053][T18377] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1125.455468][T18363] ceph: No mds server is up or the cluster is laggy [ 1125.463945][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1125.932694][T18382] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 1126.523441][T18385] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3130'. [ 1126.962933][T18394] loop7: detected capacity change from 0 to 7 [ 1126.988543][T18392] tc_dump_action: action bad kind [ 1127.031999][ C1] blk_print_req_error: 10 callbacks suppressed [ 1127.032011][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1127.048413][ C1] buffer_io_error: 336 callbacks suppressed [ 1127.048427][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1127.069486][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1127.079055][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1127.087168][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1127.096707][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1127.104929][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1127.114492][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1127.125834][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1127.135380][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1127.149576][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1127.159121][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1127.169902][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1127.179483][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1127.188149][T13687] ldm_validate_partition_table(): Disk read failed. [ 1127.199432][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1127.208975][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1127.219412][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1127.228947][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1127.242456][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1127.252021][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1127.275435][T13687] Dev loop7: unable to read RDB block 0 [ 1127.301333][T13687] loop7: unable to read partition table [ 1127.308332][T13687] loop7: partition table beyond EOD, truncated [ 1127.368771][T18394] ldm_validate_partition_table(): Disk read failed. [ 1127.380382][T18394] Dev loop7: unable to read RDB block 0 [ 1127.386820][T18394] loop7: unable to read partition table [ 1127.393717][T18394] loop7: partition table beyond EOD, truncated [ 1127.400263][T18394] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1128.331175][T18410] loop7: detected capacity change from 0 to 7 [ 1128.353045][T18410] ldm_validate_partition_table(): Disk read failed. [ 1128.370756][T18410] Dev loop7: unable to read RDB block 0 [ 1128.385410][T18410] loop7: unable to read partition table [ 1128.412977][T18410] loop7: partition table beyond EOD, truncated [ 1128.419623][T18410] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1128.799134][ T29] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 1128.938685][ T29] usb 3-1: device descriptor read/64, error -71 [ 1129.048665][T14964] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1129.155237][T18417] netlink: 340 bytes leftover after parsing attributes in process `syz.9.3141'. [ 1129.218725][T18417] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3141'. [ 1129.288752][ T29] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 1129.328607][T14964] usb 9-1: Using ep0 maxpacket: 32 [ 1129.344884][T14964] usb 9-1: config 0 has no interfaces? [ 1129.360763][T14964] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1129.379324][T14964] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.387628][T14964] usb 9-1: Product: syz [ 1129.394859][T14964] usb 9-1: Manufacturer: syz [ 1129.401313][T14964] usb 9-1: SerialNumber: syz [ 1129.422373][T14964] usb 9-1: config 0 descriptor?? [ 1129.448942][ T29] usb 3-1: device descriptor read/64, error -71 [ 1129.569621][ T29] usb usb3-port1: attempt power cycle [ 1129.817354][ T9] usb 9-1: USB disconnect, device number 33 [ 1130.117870][ T29] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 1130.133817][T18435] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3147'. [ 1130.145364][T18435] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3147'. [ 1130.167681][T18435] [U]  [ 1130.518279][ T29] usb 3-1: device descriptor read/8, error -71 [ 1130.536495][T18438] binder: BINDER_SET_CONTEXT_MGR already set [ 1130.555788][T18438] binder: 18437:18438 ioctl 4018620d 200000004a80 returned -16 [ 1130.559514][ T30] audit: type=1400 audit(2000000817.364:9771): avc: denied { write } for pid=18436 comm="syz.6.3148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1131.839473][T18457] netlink: 76 bytes leftover after parsing attributes in process `syz.9.3155'. [ 1131.857437][T18457] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3155'. [ 1132.649149][T18468] hpfs: Bad magic ... probably not HPFS [ 1133.153228][T18460] overlayfs: failed to resolve './file1': -2 [ 1133.434198][T18477] overlayfs: failed to resolve './file1': -2 [ 1134.346731][T18494] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3164'. [ 1134.389513][T18483] overlayfs: failed to resolve './file1': -2 [ 1134.405963][T13455] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1134.627997][T13455] usb 6-1: Using ep0 maxpacket: 16 [ 1134.677244][T13455] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1134.802055][T13455] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1134.880783][T13455] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1134.936893][T13455] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1134.956332][T13455] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.007920][T13455] usb 6-1: config 0 descriptor?? [ 1135.095538][ T5885] usb 7-1: new full-speed USB device number 39 using dummy_hcd [ 1135.120217][T18501] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3169'. [ 1135.446981][T18501] bond2: entered promiscuous mode [ 1135.452113][T18501] bond2: entered allmulticast mode [ 1135.506954][ T5885] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1135.847667][ T5885] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1135.875260][T13455] hid-picolcd 0003:04D8:F002.000D: No report with id 0xf4 found [ 1135.887651][ T5885] usb 7-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 1135.908884][T13455] hid-picolcd 0003:04D8:F002.000D: No report with id 0xf3 found [ 1135.935439][ T5885] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.016765][ T5885] usb 7-1: config 0 descriptor?? [ 1136.047443][T14964] usb 6-1: USB disconnect, device number 23 [ 1136.703290][ T5885] hid_parser_main: 7 callbacks suppressed [ 1136.703303][ T5885] wacom 0003:056A:5000.000E: unknown main item tag 0x0 [ 1136.754710][ T5885] wacom 0003:056A:5000.000E: unknown main item tag 0x0 [ 1136.791954][ T5885] wacom 0003:056A:5000.000E: unknown main item tag 0x0 [ 1136.812134][ T5885] wacom 0003:056A:5000.000E: unknown main item tag 0x0 [ 1136.840493][ T5885] wacom 0003:056A:5000.000E: unknown main item tag 0x0 [ 1136.866664][ T5885] wacom 0003:056A:5000.000E: unknown main item tag 0x0 [ 1136.940805][T18519] overlayfs: missing 'lowerdir' [ 1137.094544][ T5885] wacom 0003:056A:5000.000E: unknown main item tag 0x0 [ 1137.217676][ T5885] wacom 0003:056A:5000.000E: unknown main item tag 0x0 [ 1137.254443][ T5885] wacom 0003:056A:5000.000E: unknown main item tag 0x0 [ 1137.261346][ T5885] wacom 0003:056A:5000.000E: unknown main item tag 0x0 [ 1137.402888][T18519] xt_hashlimit: size too large, truncated to 1048576 [ 1137.412829][ T5885] wacom 0003:056A:5000.000E: reserved main item tag 0xe [ 1137.433745][ T5885] wacom 0003:056A:5000.000E: ignoring exceeding usage max [ 1137.471314][ T5885] wacom 0003:056A:5000.000E: reserved main item tag 0xd [ 1137.500919][ T5885] wacom 0003:056A:5000.000E: item 0 2 0 11 parsing failed [ 1137.530112][ T5885] wacom 0003:056A:5000.000E: parse failed [ 1137.554138][ T5885] wacom 0003:056A:5000.000E: probe with driver wacom failed with error -22 [ 1138.049913][ T5885] usb 7-1: USB disconnect, device number 39 [ 1138.596729][T18525] overlayfs: missing 'lowerdir' [ 1138.760687][T18526] xt_hashlimit: size too large, truncated to 1048576 [ 1139.497746][T18547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1139.532890][T18547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1139.743467][T14964] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1139.976852][T14964] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1139.991489][T14964] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1140.276137][T14964] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1140.285316][T14964] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1140.299081][T14964] usb 7-1: Manufacturer: syz [ 1140.311515][T14964] usb 7-1: config 0 descriptor?? [ 1140.957080][T14964] uclogic 0003:256C:006D.000F: failed retrieving Huion firmware version: -22 [ 1140.967399][T14964] uclogic 0003:256C:006D.000F: failed probing parameters: -22 [ 1141.016616][T14964] uclogic 0003:256C:006D.000F: probe with driver uclogic failed with error -22 [ 1141.141428][T18579] loop7: detected capacity change from 0 to 7 [ 1141.149502][ C0] blk_print_req_error: 25 callbacks suppressed [ 1141.149518][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1141.165288][ C0] buffer_io_error: 49 callbacks suppressed [ 1141.165297][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1141.182559][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1141.192150][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1141.201727][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1141.211341][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1141.219610][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1141.221786][T13042] usb 7-1: USB disconnect, device number 40 [ 1141.229202][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1141.245399][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1141.254999][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1141.264025][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1141.273608][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1141.284521][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1141.294078][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1141.302089][T18579] ldm_validate_partition_table(): Disk read failed. [ 1141.310850][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1141.320440][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1141.359803][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1141.369482][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1141.647836][ T30] audit: type=1326 audit(2000000828.449:9772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18570 comm="syz.9.3186" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f147e99c819 code=0x0 [ 1141.674359][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1141.683948][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1141.692665][T18579] Dev loop7: unable to read RDB block 0 [ 1141.786152][T18579] loop7: unable to read partition table [ 1142.422256][T18574] overlayfs: failed to resolve './file1': -2 [ 1142.433283][T18579] loop7: partition table beyond EOD, truncated [ 1142.825410][T18579] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1143.509995][T18593] overlayfs: missing 'lowerdir' [ 1143.614698][T18595] netlink: 'syz.9.3189': attribute type 10 has an invalid length. [ 1143.628997][T18601] xt_hashlimit: size too large, truncated to 1048576 [ 1143.636933][T18595] team0: Device vxcan1 is of different type [ 1144.575296][T13042] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1144.920677][T13042] usb 3-1: Using ep0 maxpacket: 16 [ 1144.940879][T18622] netlink: 196 bytes leftover after parsing attributes in process `syz.9.3196'. [ 1144.946331][T13042] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1144.950031][T18622] netlink: 196 bytes leftover after parsing attributes in process `syz.9.3196'. [ 1145.019819][T13042] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1145.082024][T18622] netlink: 19 bytes leftover after parsing attributes in process `syz.9.3196'. [ 1145.125810][T13042] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1145.192400][T13042] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1145.226944][T13042] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.302712][T13042] usb 3-1: config 0 descriptor?? [ 1145.383730][T18637] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3201'. [ 1145.436380][T18637] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3201'. [ 1145.469071][T18637] netlink: 'syz.5.3201': attribute type 5 has an invalid length. [ 1145.680267][ T30] audit: type=1400 audit(2000000832.481:9773): avc: denied { write } for pid=18635 comm="syz.5.3201" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1145.850548][T18649] IPv6: sit1: Disabled Multicast RS [ 1145.859586][T18649] sit1: entered allmulticast mode [ 1146.137075][T13042] hid-picolcd 0003:04D8:F002.0010: No report with id 0xf4 found [ 1146.174674][T13042] hid-picolcd 0003:04D8:F002.0010: No report with id 0xf3 found [ 1146.237922][T13042] usb 3-1: USB disconnect, device number 69 [ 1146.256855][T18641] Cannot find del_set index 2 as target [ 1146.726986][T18660] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3205'. [ 1146.746958][T18660] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3205'. [ 1148.067998][T18672] netlink: 388 bytes leftover after parsing attributes in process `syz.9.3206'. [ 1148.388966][ T30] audit: type=1400 audit(2000000835.022:9774): avc: denied { setopt } for pid=18673 comm="syz.5.3210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1148.482572][T18672] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3206'. [ 1149.912847][ T5817] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 1150.180784][ T5817] usb 6-1: config 8 has an invalid interface number: 177 but max is 0 [ 1150.189039][ T5817] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1150.200358][ T5817] usb 6-1: config 8 has no interface number 0 [ 1150.206461][ T5817] usb 6-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1150.280273][T18692] ubi: mtd0 is already attached to ubi16 [ 1150.668132][ T5817] usb 6-1: config 8 interface 177 has no altsetting 0 [ 1150.675042][ T5817] usb 6-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1150.687258][ T5817] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.720091][ T5817] ir_toy 6-1:8.177: required endpoints not found [ 1150.747735][ T29] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1151.160401][ T5817] usb 6-1: USB disconnect, device number 24 [ 1151.267438][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 1151.325262][ T29] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1151.346603][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.373797][ T29] usb 3-1: Product: syz [ 1151.387429][ T29] usb 3-1: Manufacturer: syz [ 1151.398259][ T29] usb 3-1: SerialNumber: syz [ 1151.428560][ T29] usb 3-1: config 0 descriptor?? [ 1151.441842][ T29] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 1151.655868][ T30] audit: type=1400 audit(2000000838.474:9775): avc: denied { mounton } for pid=18687 comm="syz.2.3213" path="mnt:[4026532807]" dev="nsfs" ino=4026532807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1152.549349][T18713] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3219'. [ 1152.628060][T13042] usb 3-1: USB disconnect, device number 70 [ 1153.775102][ T30] audit: type=1400 audit(2000000840.585:9776): avc: denied { map } for pid=18738 comm="syz.6.3225" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1154.192136][T18747] netlink: 'syz.2.3227': attribute type 10 has an invalid length. [ 1154.822304][T18768] IPv6: NLM_F_CREATE should be specified when creating new route [ 1154.902114][T18768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3235'. [ 1155.180189][T18785] netlink: 'syz.6.3240': attribute type 2 has an invalid length. [ 1155.190173][ T30] audit: type=1400 audit(2000000842.006:9777): avc: denied { accept } for pid=18783 comm="syz.6.3240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1156.644947][ T5817] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1156.895145][ T5817] usb 3-1: Using ep0 maxpacket: 8 [ 1156.905865][ T5817] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1156.924947][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.958492][ T5817] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1156.974601][ T5817] pvrusb2: ********** [ 1156.978684][ T5817] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1157.019294][ T5817] pvrusb2: Important functionality might not be entirely working. [ 1157.047510][ T5817] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1157.110202][ T5817] pvrusb2: ********** [ 1157.188431][ T2338] pvrusb2: Invalid write control endpoint [ 1157.529715][ T2338] pvrusb2: Invalid write control endpoint [ 1157.562244][ T2338] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1157.594433][ T2338] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1157.601996][ T2338] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1157.614760][ T2338] pvrusb2: Device being rendered inoperable [ 1157.623484][T18793] netlink: 'syz.2.3243': attribute type 21 has an invalid length. [ 1157.633816][ T2338] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1157.640960][ T2338] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1157.656322][T18793] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3243'. [ 1157.666092][ T2338] pvrusb2: Attached sub-driver cx25840 [ 1157.671761][ T2338] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1157.713492][ T29] usb 3-1: USB disconnect, device number 71 [ 1157.754192][ T2338] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1157.775811][T18830] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3255'. [ 1157.784754][T18830] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3255'. [ 1157.793659][T18830] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3255'. [ 1158.465740][T18843] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3257'. [ 1158.882697][T18854] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3260'. [ 1159.092382][ T30] audit: type=1400 audit(2000000845.908:9778): avc: denied { write } for pid=18851 comm="syz.5.3260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1159.136501][T18857] overlayfs: missing 'lowerdir' [ 1159.181708][T18865] xt_hashlimit: size too large, truncated to 1048576 [ 1159.293506][ T30] audit: type=1400 audit(2000000845.908:9779): avc: denied { read } for pid=18851 comm="syz.5.3260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1161.390545][T18896] loop7: detected capacity change from 0 to 7 [ 1161.603797][ T30] audit: type=1400 audit(2000000848.429:9780): avc: denied { append } for pid=18889 comm="syz.5.3270" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1161.631007][ C1] blk_print_req_error: 10 callbacks suppressed [ 1161.631022][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1161.646748][ C1] buffer_io_error: 10 callbacks suppressed [ 1161.646759][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1161.721628][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1161.731224][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1161.739736][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1161.749316][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1161.761000][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1161.770579][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1161.781371][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1161.790954][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1161.807337][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1161.816917][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1161.840848][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1161.850426][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1161.858330][T18896] ldm_validate_partition_table(): Disk read failed. [ 1161.870400][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1161.879973][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1161.888828][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1161.898369][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1161.906741][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1161.916283][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1161.932607][T18896] Dev loop7: unable to read RDB block 0 [ 1162.013404][ T5817] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1162.411889][T18896] loop7: unable to read partition table [ 1162.502334][T18896] loop7: partition table beyond EOD, truncated [ 1162.531924][T18896] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1162.562053][ T5817] usb 3-1: Using ep0 maxpacket: 32 [ 1162.698789][T18912] overlayfs: missing 'lowerdir' [ 1162.821375][T18913] xt_hashlimit: size too large, truncated to 1048576 [ 1163.320931][ T5817] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1163.381403][ T5817] usb 3-1: config 0 has no interface number 0 [ 1163.405884][ T5817] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1163.443117][ T5817] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1163.461310][ T5817] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1163.472407][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.480475][ T5817] usb 3-1: Product: syz [ 1163.563897][ T5817] usb 3-1: Manufacturer: syz [ 1163.568504][ T5817] usb 3-1: SerialNumber: syz [ 1163.602278][ T5817] usb 3-1: config 0 descriptor?? [ 1163.620416][ T5817] appletouch 3-1:0.85: Could not find int-in endpoint [ 1163.635035][ T5817] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 1163.684553][ T5817] usbhid 3-1:0.85: couldn't find an input interrupt endpoint [ 1164.049437][ T5817] usb 3-1: USB disconnect, device number 72 [ 1164.322294][T18929] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3280'. [ 1165.059719][T18933] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3281'. [ 1165.100900][T18933] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3281'. [ 1165.491833][T18939] overlayfs: missing 'lowerdir' [ 1165.518763][T18949] xt_hashlimit: size too large, truncated to 1048576 [ 1165.571417][T18950] xt_hashlimit: size too large, truncated to 1048576 [ 1166.782819][ T30] audit: type=1400 audit(2000000853.602:9781): avc: denied { read write } for pid=18967 comm="syz.6.3289" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1166.888976][ T30] audit: type=1400 audit(2000000853.602:9782): avc: denied { open } for pid=18967 comm="syz.6.3289" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1166.919783][T18975] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3291'. [ 1167.148422][T18985] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3296'. [ 1167.157454][T18985] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3296'. [ 1167.272494][ T30] audit: type=1326 audit(2000000854.102:9783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18991 comm="syz.9.3298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147e99c819 code=0x7ffc0000 [ 1167.470029][ T5885] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1167.486433][ T30] audit: type=1326 audit(2000000854.102:9784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18991 comm="syz.9.3298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147e99c819 code=0x7ffc0000 [ 1167.519577][ T30] audit: type=1326 audit(2000000854.132:9785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18991 comm="syz.9.3298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147e99c819 code=0x7ffc0000 [ 1167.566986][ T30] audit: type=1326 audit(2000000854.132:9786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18991 comm="syz.9.3298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147e99c819 code=0x7ffc0000 [ 1167.595595][ T30] audit: type=1326 audit(2000000854.312:9787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18991 comm="syz.9.3298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147e99c819 code=0x7ffc0000 [ 1167.640449][ T30] audit: type=1326 audit(2000000854.312:9788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18991 comm="syz.9.3298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f147e99c582 code=0x7ffc0000 [ 1168.525755][ T30] audit: type=1326 audit(2000000854.312:9789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18991 comm="syz.9.3298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f147e99c617 code=0x7ffc0000 [ 1168.549540][ T30] audit: type=1326 audit(2000000854.312:9790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18991 comm="syz.9.3298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f147e959511 code=0x7ffc0000 [ 1168.578862][ T5885] usb 9-1: Using ep0 maxpacket: 8 [ 1168.595096][ T5885] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 1168.627474][ T5885] usb 9-1: config 0 has no interface number 0 [ 1168.636047][ T5885] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1168.658943][ T5885] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1168.669991][T19002] netlink: 'syz.6.3301': attribute type 10 has an invalid length. [ 1168.679597][ T5885] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1168.708707][ T5885] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1168.731957][ T5885] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1168.755663][ T5885] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.785299][ T5885] usb 9-1: config 0 descriptor?? [ 1168.815833][ T5885] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1168.875835][T19010] netlink: 'syz.9.3304': attribute type 1 has an invalid length. [ 1169.095595][ T5885] usb 9-1: USB disconnect, device number 34 [ 1169.101603][ C1] ldusb 9-1:0.55: usb_submit_urb failed (-19) [ 1169.200673][ T5885] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 1169.208583][T18982] ldusb: No device or device unplugged -19 [ 1169.226401][T19025] netlink: 188 bytes leftover after parsing attributes in process `syz.6.3308'. [ 1169.277848][T19025] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3308'. [ 1169.381880][T19033] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3312'. [ 1169.427224][T19033] macvlan2: entered allmulticast mode [ 1169.755548][T19033] mac80211_hwsim hwsim37 wlan0: entered allmulticast mode [ 1169.919340][T19042] vlan4: entered promiscuous mode [ 1169.924558][T19042] vlan4: entered allmulticast mode [ 1169.985165][T19042] hsr_slave_1: entered allmulticast mode [ 1170.041658][T19052] netlink: 196 bytes leftover after parsing attributes in process `syz.8.3317'. [ 1170.056290][T19052] netlink: 196 bytes leftover after parsing attributes in process `syz.8.3317'. [ 1170.076561][T19052] netlink: 19 bytes leftover after parsing attributes in process `syz.8.3317'. [ 1170.167829][T19031] netlink: 380 bytes leftover after parsing attributes in process `syz.9.3311'. [ 1170.204332][T19055] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3318'. [ 1170.254689][T19055] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3318'. [ 1170.819632][T19078] netlink: 'syz.6.3325': attribute type 10 has an invalid length. [ 1170.828278][T19078] veth0_vlan: left promiscuous mode [ 1170.836784][T19078] veth0_vlan: entered promiscuous mode [ 1170.849759][T19078] team0: Device veth0_vlan failed to register rx_handler [ 1171.569768][T19089] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3329'. [ 1171.579448][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1172.527575][T19093] loop7: detected capacity change from 0 to 7 [ 1172.726463][ C0] blk_print_req_error: 10 callbacks suppressed [ 1172.726482][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1172.742250][ C0] buffer_io_error: 10 callbacks suppressed [ 1172.742264][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1172.789604][T19095] vlan4: entered allmulticast mode [ 1172.849872][T19095] bridge5: entered allmulticast mode [ 1172.916842][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1172.926445][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1172.936163][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1172.945760][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1172.956951][ T5817] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1172.986721][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1172.996307][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1173.005430][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1173.014981][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1173.064827][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1173.074469][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1173.086508][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1173.096092][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1173.104165][T19093] ldm_validate_partition_table(): Disk read failed. [ 1173.114110][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1173.123720][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1173.138701][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1173.148292][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1173.156633][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1173.166189][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1173.174478][ T5817] usb 9-1: Using ep0 maxpacket: 32 [ 1173.180296][T19093] Dev loop7: unable to read RDB block 0 [ 1173.189626][ T5817] usb 9-1: config 0 has an invalid interface number: 85 but max is 0 [ 1173.206549][T19093] loop7: unable to read partition table [ 1173.212230][ T5817] usb 9-1: config 0 has no interface number 0 [ 1173.218629][T19093] loop7: partition table beyond EOD, truncated [ 1173.233692][ T5817] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1173.250727][T19093] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1173.310390][ T5817] usb 9-1: config 0 interface 85 has no altsetting 0 [ 1173.537192][ T5817] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1173.548672][T19117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19117 comm=syz.9.3335 [ 1173.563365][ T5817] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.577663][ T5817] usb 9-1: Product: syz [ 1174.005895][ T5817] usb 9-1: Manufacturer: syz [ 1174.010598][ T5817] usb 9-1: SerialNumber: syz [ 1174.054525][ T5817] usb 9-1: config 0 descriptor?? [ 1174.068527][ T5817] appletouch 9-1:0.85: Could not find int-in endpoint [ 1174.085393][ T5817] appletouch 9-1:0.85: probe with driver appletouch failed with error -5 [ 1174.103968][ T5817] usbhid 9-1:0.85: couldn't find an input interrupt endpoint [ 1174.162860][T19127] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3339'. [ 1174.253314][T19127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3339'. [ 1174.283464][ T5817] usb 9-1: USB disconnect, device number 35 [ 1176.402325][T19134] overlayfs: failed to resolve './file1': -2 [ 1176.411916][T19142] binder: BINDER_SET_CONTEXT_MGR already set [ 1176.417979][T19142] binder: 19141:19142 ioctl 4018620d 200000004a80 returned -16 [ 1176.429215][T19142] FAULT_INJECTION: forcing a failure. [ 1176.429215][T19142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1176.478904][T19142] CPU: 0 UID: 0 PID: 19142 Comm: syz.8.3343 Tainted: G L syzkaller #0 PREEMPT(full) [ 1176.478936][T19142] Tainted: [L]=SOFTLOCKUP [ 1176.478943][T19142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1176.478953][T19142] Call Trace: [ 1176.478959][T19142] [ 1176.478967][T19142] dump_stack_lvl+0x100/0x190 [ 1176.479002][T19142] should_fail_ex.cold+0x5/0xa [ 1176.479032][T19142] _copy_from_user+0x2e/0xd0 [ 1176.479054][T19142] kstrtouint_from_user+0xd6/0x1d0 [ 1176.479080][T19142] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1176.479103][T19142] ? __lock_acquire+0x4a5/0x2630 [ 1176.479126][T19142] ? lock_acquire+0x1cf/0x380 [ 1176.479150][T19142] proc_fail_nth_write+0x83/0x220 [ 1176.479178][T19142] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1176.479211][T19142] vfs_write+0x2aa/0x1070 [ 1176.479230][T19142] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1176.479258][T19142] ? __pfx_vfs_write+0x10/0x10 [ 1176.479275][T19142] ? __fget_files+0x215/0x3d0 [ 1176.479301][T19142] ? __fget_files+0x21f/0x3d0 [ 1176.479329][T19142] ksys_write+0x12a/0x250 [ 1176.479347][T19142] ? __pfx_ksys_write+0x10/0x10 [ 1176.479372][T19142] do_syscall_64+0x106/0xf80 [ 1176.479390][T19142] ? clear_bhb_loop+0x40/0x90 [ 1176.479413][T19142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1176.479432][T19142] RIP: 0033:0x7fa9b335d04e [ 1176.479448][T19142] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1176.479464][T19142] RSP: 002b:00007fa9b4195fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1176.479481][T19142] RAX: ffffffffffffffda RBX: 00007fa9b41966c0 RCX: 00007fa9b335d04e [ 1176.479493][T19142] RDX: 0000000000000001 RSI: 00007fa9b41960a0 RDI: 0000000000000006 [ 1176.479503][T19142] RBP: 00007fa9b4196090 R08: 0000000000000000 R09: 0000000000000000 [ 1176.479514][T19142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1176.479524][T19142] R13: 00007fa9b3616038 R14: 00007fa9b3615fa0 R15: 00007ffe18351d98 [ 1176.479549][T19142] [ 1176.971638][T19150] __nla_validate_parse: 2 callbacks suppressed [ 1176.971656][T19150] netlink: 276 bytes leftover after parsing attributes in process `syz.8.3348'. [ 1177.067074][T19155] loop5: detected capacity change from 0 to 7 [ 1177.075247][T19155] Dev loop5: unable to read RDB block 7 [ 1177.080818][T19155] loop5: unable to read partition table [ 1177.086550][T19155] loop5: partition table beyond EOD, truncated [ 1177.092678][T19155] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1177.174513][T19157] loop7: detected capacity change from 0 to 7 [ 1177.251290][ T30] kauditd_printk_skb: 88 callbacks suppressed [ 1177.251306][ T30] audit: type=1400 audit(2000000863.897:9879): avc: denied { append } for pid=19153 comm="syz.5.3350" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1177.454617][T19157] ldm_validate_partition_table(): Disk read failed. [ 1177.482136][T19157] Dev loop7: unable to read RDB block 0 [ 1178.011369][ C0] blk_print_req_error: 21 callbacks suppressed [ 1178.011388][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1178.027248][ C0] buffer_io_error: 21 callbacks suppressed [ 1178.027261][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1178.051624][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1178.061306][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1178.070695][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1178.080367][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1178.091641][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1178.101313][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1178.115842][T19157] loop7: unable to read partition table [ 1178.164698][T19157] loop7: partition table beyond EOD, truncated [ 1178.208770][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1178.218412][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1178.232167][T19157] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1178.245919][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1178.245952][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1178.270670][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1178.280355][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1178.289538][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1178.299147][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1178.308545][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1178.318132][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1178.916200][T19172] loop7: detected capacity change from 0 to 7 [ 1178.924016][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1178.933631][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1179.346227][T13042] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1179.367716][T19172] ldm_validate_partition_table(): Disk read failed. [ 1179.399250][T19172] Dev loop7: unable to read RDB block 0 [ 1181.832722][T19172] loop7: unable to read partition table [ 1181.842148][T13042] usb 3-1: Using ep0 maxpacket: 32 [ 1181.922315][T19172] loop7: partition table beyond EOD, truncated [ 1181.979082][T19172] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1182.686676][T19178] bond1: left promiscuous mode [ 1182.691602][T19178] bond2: left promiscuous mode [ 1183.636670][ C0] blk_print_req_error: 27 callbacks suppressed [ 1183.636688][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1183.652480][ C0] buffer_io_error: 27 callbacks suppressed [ 1183.652494][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1183.699123][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1183.708748][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1183.991130][T13042] usb 3-1: device descriptor read/all, error -71 [ 1184.055304][T19187] overlayfs: failed to resolve './file1': -2 [ 1184.213282][ T30] audit: type=1326 audit(2000000871.050:9880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19193 comm="syz.9.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147e99c819 code=0x7ffc0000 [ 1184.561039][ T30] audit: type=1326 audit(2000000871.090:9881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19193 comm="syz.9.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147e99c819 code=0x7ffc0000 [ 1185.159383][ T30] audit: type=1326 audit(2000000871.090:9882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19193 comm="syz.9.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147e99c819 code=0x7ffc0000 [ 1185.183475][ T30] audit: type=1326 audit(2000000871.090:9883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19193 comm="syz.9.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147e99c819 code=0x7ffc0000 [ 1185.300485][ T30] audit: type=1326 audit(2000000871.090:9884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19193 comm="syz.9.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f147e99c819 code=0x7ffc0000 [ 1186.486878][ T30] audit: type=1326 audit(2000000871.090:9885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19193 comm="syz.9.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147e99c819 code=0x7ffc0000 [ 1186.512509][ T30] audit: type=1326 audit(2000000871.090:9886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19193 comm="syz.9.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147e99c819 code=0x7ffc0000 [ 1186.886326][ T30] audit: type=1326 audit(2000000871.090:9887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19193 comm="syz.9.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147e99c819 code=0x7ffc0000 [ 1187.108289][ T30] audit: type=1326 audit(2000000871.090:9888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19193 comm="syz.9.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147e99c819 code=0x7ffc0000 [ 1187.306294][ T30] audit: type=1326 audit(2000000871.090:9889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19193 comm="syz.9.3359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147e99c819 code=0x7ffc0000 [ 1189.498350][T13042] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1189.658326][T13042] usb 7-1: Using ep0 maxpacket: 32 [ 1189.686974][T19224] loop6: detected capacity change from 0 to 2640 [ 1189.712629][T13042] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 1189.727428][T19224] Buffer I/O error on dev loop6, logical block 0, async page read [ 1189.741596][T13042] usb 7-1: config 0 has no interface number 0 [ 1189.752773][T13042] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1189.763802][T19224] Buffer I/O error on dev loop6, logical block 0, async page read [ 1189.775894][T13042] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1189.790857][T13042] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.799464][T19224] Buffer I/O error on dev loop6, logical block 0, async page read [ 1189.807365][T13042] usb 7-1: Product: syz [ 1189.813317][T13042] usb 7-1: Manufacturer: syz [ 1189.818049][T13042] usb 7-1: SerialNumber: syz [ 1189.858590][T13042] usb 7-1: config 0 descriptor?? [ 1189.980794][T19227] loop6: detected capacity change from 2640 to 524287999 [ 1189.989673][T19219] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1189.990158][T19224] Buffer I/O error on dev loop6, logical block 0, async page read [ 1190.028273][T19224] Buffer I/O error on dev loop6, logical block 0, async page read [ 1190.046741][T19224] Buffer I/O error on dev loop6, logical block 0, async page read [ 1190.060463][T19224] Buffer I/O error on dev loop6, logical block 0, async page read [ 1190.295097][T13455] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 1190.308745][T19214] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1190.342068][T19224] Buffer I/O error on dev loop6, logical block 0, async page read [ 1190.387973][T19224] ldm_validate_partition_table(): Disk read failed. [ 1190.394677][T19224] Buffer I/O error on dev loop6, logical block 0, async page read [ 1190.405830][T19224] Buffer I/O error on dev loop6, logical block 0, async page read [ 1190.414781][T19224] Dev loop6: unable to read RDB block 0 [ 1190.422884][T19224] loop6: unable to read partition table [ 1190.683492][T19224] loop_reread_partitions: partition scan of loop6 (irc VUXGZtM<I i8NN W@Q6%) failed (rc=-5) [ 1190.785150][T13455] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 1190.998757][T13455] usb 6-1: config 0 has no interface number 0 [ 1191.018250][T13455] usb 6-1: config 0 interface 41 has no altsetting 0 [ 1191.133243][T19239] loop7: detected capacity change from 0 to 7 [ 1191.204273][T13042] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1191.558276][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1191.576050][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1191.587971][T13455] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1191.599325][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1191.616916][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1191.630746][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1191.645480][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1191.657425][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1191.667403][T19239] ldm_validate_partition_table(): Disk read failed. [ 1191.745019][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1191.766219][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1191.784360][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1191.795745][T19239] Dev loop7: unable to read RDB block 0 [ 1191.824901][T13042] asix 7-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 1191.836209][T13455] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.846205][T13455] usb 6-1: Product: syz [ 1191.852312][T13042] asix 7-1:0.188: probe with driver asix failed with error -61 [ 1191.879831][T19239] loop7: unable to read partition table [ 1191.886381][T19239] loop7: partition table beyond EOD, truncated [ 1191.895134][T19239] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1191.970464][ T9] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1192.109884][T13455] usb 6-1: Manufacturer: syz [ 1192.135450][T13455] usb 6-1: SerialNumber: syz [ 1192.164814][T13042] usb 7-1: USB disconnect, device number 41 [ 1192.197164][T13455] usb 6-1: config 0 descriptor?? [ 1192.391755][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 1192.444850][ T9] usb 9-1: config 0 has an invalid interface number: 85 but max is 0 [ 1192.465117][ T9] usb 9-1: config 0 has no interface number 0 [ 1192.474160][ T9] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1192.507894][ T9] usb 9-1: config 0 interface 85 has no altsetting 0 [ 1192.761080][ T9] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1192.867833][T13455] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -32 [ 1192.931591][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.114881][T13455] usb 6-1: USB disconnect, device number 25 [ 1193.128614][ T9] usb 9-1: Product: syz [ 1193.151219][ T9] usb 9-1: Manufacturer: syz [ 1193.362922][ T9] usb 9-1: SerialNumber: syz [ 1193.417151][T19256] netlink: 'syz.9.3374': attribute type 10 has an invalid length. [ 1193.432357][ T9] usb 9-1: config 0 descriptor?? [ 1193.448863][ T9] appletouch 9-1:0.85: Could not find int-in endpoint [ 1193.455994][ T9] appletouch 9-1:0.85: probe with driver appletouch failed with error -5 [ 1193.617749][ T9] usbhid 9-1:0.85: couldn't find an input interrupt endpoint [ 1193.680251][T19259] overlayfs: failed to resolve './file1': -2 [ 1193.836645][ T9] usb 9-1: USB disconnect, device number 36 [ 1195.624724][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 1195.624743][ T30] audit: type=1404 audit(2000000882.456:9954): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 1195.711467][ T30] audit: type=1400 audit(2000000882.506:9955): avc: denied { create } for pid=19270 comm="syz.6.3380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 1195.747628][ T30] audit: type=1400 audit(2000000882.506:9956): avc: denied { create } for pid=19270 comm="syz.6.3380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 1195.772216][ T30] audit: type=1400 audit(2000000882.506:9957): avc: denied { create } for pid=19270 comm="syz.6.3380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 1195.793868][ T30] audit: type=1400 audit(2000000882.576:9958): avc: denied { read write } for pid=13663 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1195.820464][ T30] audit: type=1400 audit(2000000882.586:9959): avc: denied { prog_load } for pid=19271 comm="syz.2.3379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1195.923254][ T30] audit: type=1400 audit(2000000882.756:9960): avc: denied { read } for pid=19275 comm="syz.6.3383" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 1196.078344][ T30] audit: type=1400 audit(2000000882.806:9961): avc: denied { read write } for pid=19276 comm="syz.8.3382" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=0 [ 1196.266147][ T30] audit: type=1400 audit(2000000882.826:9962): avc: denied { prog_load } for pid=19277 comm="syz.5.3384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1196.348858][T19291] syzkaller0: entered promiscuous mode [ 1196.359057][ T30] audit: type=1400 audit(2000000882.836:9963): avc: denied { read } for pid=19277 comm="syz.5.3384" name="system" dev="devtmpfs" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 1196.388175][T19291] syzkaller0: entered allmulticast mode [ 1200.153120][T19342] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1200.843950][ T30] kauditd_printk_skb: 297 callbacks suppressed [ 1200.843967][ T30] audit: type=1400 audit(2000000887.689:10261): avc: denied { read write } for pid=13651 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1201.209591][ T30] audit: type=1400 audit(2000000888.049:10262): avc: denied { module_request } for pid=19346 comm="syz.5.3407" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 1201.352803][ T30] audit: type=1400 audit(2000000888.139:10264): avc: denied { read write } for pid=13655 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1201.642303][ T30] audit: type=1400 audit(2000000888.079:10263): avc: denied { allowed } for pid=19346 comm="syz.5.3407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 1202.016324][ T30] audit: type=1400 audit(2000000888.149:10265): avc: denied { read } for pid=19346 comm="syz.5.3407" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 1202.348096][ T30] audit: type=1400 audit(2000000888.149:10266): avc: denied { mounton } for pid=19346 comm="syz.5.3407" path="/272/file0" dev="tmpfs" ino=1491 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 1202.561876][ T30] audit: type=1400 audit(2000000888.169:10267): avc: denied { read } for pid=19357 comm="syz.8.3410" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 1202.805613][ T30] audit: type=1400 audit(2000000888.169:10268): avc: denied { create } for pid=19357 comm="syz.8.3410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1203.360251][ T30] audit: type=1400 audit(2000000888.179:10269): avc: denied { create } for pid=19357 comm="syz.8.3410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1203.601307][ T30] audit: type=1400 audit(2000000888.179:10270): avc: denied { create } for pid=19357 comm="syz.8.3410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1203.773319][T19388] syzkaller0: entered promiscuous mode [ 1203.778827][T19388] syzkaller0: entered allmulticast mode [ 1203.796303][ T9] IPVS: starting estimator thread 0... [ 1203.891119][T19391] IPVS: using max 37 ests per chain, 88800 per kthread [ 1205.410461][T19404] netlink: 'syz.5.3423': attribute type 10 has an invalid length. [ 1206.002109][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 1206.002126][ T30] audit: type=1400 audit(2000000892.851:10335): avc: denied { create } for pid=19410 comm="syz.5.3426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 1206.155038][ T30] audit: type=1400 audit(2000000892.881:10336): avc: denied { prog_load } for pid=19408 comm="syz.9.3425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1206.453923][ T30] audit: type=1400 audit(2000000892.901:10337): avc: denied { read write } for pid=19410 comm="syz.5.3426" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=0 [ 1206.569076][ T30] audit: type=1400 audit(2000000892.961:10338): avc: denied { read } for pid=19410 comm="syz.5.3426" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 1207.052334][ T30] audit: type=1400 audit(2000000893.071:10339): avc: denied { create } for pid=19410 comm="syz.5.3426" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 1207.138177][T19431] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1207.148052][ T30] audit: type=1400 audit(2000000893.081:10340): avc: denied { mounton } for pid=19410 comm="syz.5.3426" path="/278/bus" dev="tmpfs" ino=1525 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 1207.190784][T19432] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1207.213922][T19432] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 1207.234136][ T30] audit: type=1400 audit(2000000893.101:10341): avc: denied { read write } for pid=13651 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1207.406869][T19436] syzkaller0: entered promiscuous mode [ 1207.422986][T19436] syzkaller0: entered allmulticast mode [ 1211.145848][ T30] kauditd_printk_skb: 142 callbacks suppressed [ 1211.145871][ T30] audit: type=1400 audit(2000000897.854:10472): avc: denied { create } for pid=19483 comm="syz.2.3450" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 1212.836796][ T30] audit: type=1400 audit(2000000897.974:10473): avc: denied { read write } for pid=19483 comm="syz.2.3450" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 1213.281106][ T30] audit: type=1400 audit(2000000899.755:10474): avc: denied { create } for pid=19489 comm="syz.8.3453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 1213.818332][ T30] audit: type=1400 audit(2000000900.165:10475): avc: denied { read write } for pid=19489 comm="syz.8.3453" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 1214.115347][ T30] audit: type=1400 audit(2000000900.165:10476): avc: denied { create } for pid=19489 comm="syz.8.3453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 1214.367023][ T30] audit: type=1400 audit(2000000900.165:10477): avc: denied { create } for pid=19489 comm="syz.8.3453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 1214.481679][ T30] audit: type=1400 audit(2000000900.175:10478): avc: denied { read } for pid=19489 comm="syz.8.3453" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 1214.699947][ T30] audit: type=1400 audit(2000000900.175:10479): avc: denied { prog_load } for pid=19489 comm="syz.8.3453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1214.919406][ T30] audit: type=1400 audit(2000000900.185:10480): avc: denied { mounton } for pid=19489 comm="syz.8.3453" path="/283/file0" dev="tmpfs" ino=1523 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 1215.044159][ T30] audit: type=1400 audit(2000000900.185:10481): avc: denied { prog_load } for pid=19489 comm="syz.8.3453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1216.153713][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 1216.153731][ T30] audit: type=1400 audit(2000000902.996:10508): avc: denied { read } for pid=19509 comm="syz.5.3460" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 1216.464876][ T30] audit: type=1400 audit(2000000903.046:10509): avc: denied { prog_load } for pid=19513 comm="syz.8.3462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1216.654889][ T30] audit: type=1400 audit(2000000903.286:10510): avc: denied { read write } for pid=13651 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1216.772638][ T30] audit: type=1400 audit(2000000903.306:10511): avc: denied { read write } for pid=13652 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1221.796704][ T30] audit: type=1400 audit(2000000903.347:10512): avc: denied { read write } for pid=13663 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1221.961812][ T30] audit: type=1400 audit(2000000903.367:10513): avc: denied { map_create } for pid=19517 comm="syz.2.3463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1222.431948][ T30] audit: type=1400 audit(2000000903.367:10514): avc: denied { map_create } for pid=19517 comm="syz.2.3463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1222.650675][ T30] audit: type=1400 audit(2000000903.367:10515): avc: denied { create } for pid=19510 comm="syz.9.3461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1222.702969][T19542] futex_wake_op: syz.8.3472 tries to shift op by 144; fix this program [ 1222.711277][T19542] futex_wake_op: syz.8.3472 tries to shift op by 144; fix this program [ 1222.851445][ T30] audit: type=1400 audit(2000000903.367:10516): avc: denied { create } for pid=19510 comm="syz.9.3461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1222.911726][T19542] futex_wake_op: syz.8.3472 tries to shift op by 144; fix this program [ 1223.021179][ T30] audit: type=1400 audit(2000000903.537:10517): avc: denied { create } for pid=19510 comm="syz.9.3461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1223.233603][ T30] audit: type=1400 audit(2000000903.537:10518): avc: denied { create } for pid=19510 comm="syz.9.3461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1223.549162][ T30] audit: type=1400 audit(2000000903.647:10519): avc: denied { read } for pid=19517 comm="syz.2.3463" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 1223.686569][ T30] audit: type=1400 audit(2000000903.647:10520): avc: denied { read } for pid=19520 comm="syz.8.3464" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 1224.274937][ T30] audit: type=1400 audit(2000000903.667:10521): avc: denied { read } for pid=19520 comm="syz.8.3464" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 1226.120882][T19591] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1226.813992][ T30] kauditd_printk_skb: 81 callbacks suppressed [ 1226.814009][ T30] audit: type=1400 audit(2000000913.672:10603): avc: denied { read write } for pid=13655 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1226.990171][ T30] audit: type=1400 audit(2000000913.852:10604): avc: denied { read write } for pid=19599 comm="syz.5.3491" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 1227.479360][ T30] audit: type=1400 audit(2000000913.872:10605): avc: denied { create } for pid=19599 comm="syz.5.3491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=0 [ 1227.608858][ T30] audit: type=1400 audit(2000000913.872:10606): avc: denied { read write } for pid=19599 comm="syz.5.3491" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 1230.417959][ T30] audit: type=1400 audit(2000000913.912:10607): avc: denied { read write } for pid=19600 comm="syz.8.3489" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 1233.134122][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1234.824512][ T30] audit: type=1400 audit(2000000914.002:10608): avc: denied { create } for pid=19603 comm="syz.2.3492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 1270.761548][ T30] audit: type=1400 audit(2000000914.002:10609): avc: denied { read write } for pid=19603 comm="syz.2.3492" name="sg0" dev="devtmpfs" ino=789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=0 [ 1349.008425][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1349.015395][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P19561/1:b..l P19459/1:b..l [ 1349.024984][ C1] rcu: (detected by 1, t=10503 jiffies, g=81181, q=1332865 ncpus=2) [ 1349.033049][ C1] task:syz.2.3440 state:R running task stack:23000 pid:19459 tgid:19459 ppid:13655 task_flags:0x40064c flags:0x00080001 [ 1349.047430][ C1] Call Trace: [ 1349.050705][ C1] [ 1349.053613][ C1] __schedule+0xfee/0x6120 [ 1349.058018][ C1] ? __pfx___schedule+0x10/0x10 [ 1349.062845][ C1] ? rcu_is_watching+0x12/0xc0 [ 1349.067584][ C1] preempt_schedule_irq+0x50/0x90 [ 1349.072583][ C1] irqentry_exit+0x17b/0x670 [ 1349.077153][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1349.083107][ C1] RIP: 0010:unwind_next_frame+0x2e1/0x1ea0 [ 1349.088885][ C1] Code: 7e 09 00 00 41 89 d0 4f 8d 04 40 4f 8d 84 00 48 fc 6e 91 49 81 f8 06 3f 34 92 0f 87 62 09 00 00 29 ca 48 8d 3c bd 74 7a eb 90 <4c> 89 f9 48 89 c6 e8 34 f5 ff ff 48 89 c1 48 85 c9 0f 85 c5 01 00 [ 1349.108461][ C1] RSP: 0018:ffffc9000394eef0 EFLAGS: 00000216 [ 1349.114506][ C1] RAX: ffffffff9178759e RBX: 0000000000000001 RCX: 0000000000019439 [ 1349.122454][ C1] RDX: 0000000000000009 RSI: 00000000000a955f RDI: ffffffff90f1cb58 [ 1349.130395][ C1] RBP: ffffc9000394eff8 R08: ffffffff917875d4 R09: 0000000000000007 [ 1349.138335][ C1] R10: 0000000000000200 R11: 000000000000b83e R12: ffffc9000394f000 [ 1349.146281][ C1] R13: ffffc9000394efb0 R14: ffffc9000394efe5 R15: ffffffff81b83e2a [ 1349.154221][ C1] ? __unwind_start+0x2fa/0x7f0 [ 1349.159050][ C1] ? __unwind_start+0x2fb/0x7f0 [ 1349.163872][ C1] ? get_stack_info_noinstr+0x18/0x130 [ 1349.169304][ C1] __unwind_start+0x3d1/0x7f0 [ 1349.173955][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1349.180080][ C1] arch_stack_walk+0x73/0xf0 [ 1349.184656][ C1] ? __unwind_start+0x2fb/0x7f0 [ 1349.189478][ C1] stack_trace_save+0x8e/0xc0 [ 1349.194127][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1349.199471][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1349.204389][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1349.210167][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 1349.215333][ C1] save_stack+0x162/0x1e0 [ 1349.219637][ C1] ? __pfx_save_stack+0x10/0x10 [ 1349.224467][ C1] ? page_ext_put+0x3e/0xd0 [ 1349.228946][ C1] __reset_page_owner+0x84/0x190 [ 1349.233854][ C1] free_unref_folios+0xaea/0x1790 [ 1349.238853][ C1] ? rcu_is_watching+0x12/0xc0 [ 1349.243589][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1349.249376][ C1] folios_put_refs+0x53c/0x840 [ 1349.254115][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 1349.259376][ C1] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 1349.265673][ C1] shmem_undo_range+0x5e5/0x1570 [ 1349.270588][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 1349.275960][ C1] shmem_evict_inode+0x39e/0xbd0 [ 1349.280883][ C1] ? inode_wait_for_writeback+0x171/0x390 [ 1349.286576][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1349.292014][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 1349.298055][ C1] ? find_held_lock+0x2b/0x80 [ 1349.302703][ C1] ? evict+0x37e/0xad0 [ 1349.306743][ C1] ? evict+0x37e/0xad0 [ 1349.310787][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1349.316220][ C1] evict+0x3c2/0xad0 [ 1349.320096][ C1] ? find_held_lock+0x2b/0x80 [ 1349.324745][ C1] ? __pfx_evict+0x10/0x10 [ 1349.329135][ C1] ? iput.part.0+0x5fd/0xf50 [ 1349.333700][ C1] iput.part.0+0x605/0xf50 [ 1349.338089][ C1] ? __pfx_inode_just_drop+0x10/0x10 [ 1349.343344][ C1] iput+0x35/0x40 [ 1349.346952][ C1] dentry_unlink_inode+0x2a1/0x490 [ 1349.352034][ C1] __dentry_kill+0x1d0/0x600 [ 1349.356609][ C1] finish_dput+0x76/0x480 [ 1349.360913][ C1] dput.part.0+0x456/0x570 [ 1349.365302][ C1] dput+0x1f/0x30 [ 1349.368909][ C1] __fput+0x519/0xb40 [ 1349.372867][ C1] task_work_run+0x150/0x240 [ 1349.377453][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1349.382545][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 1349.387717][ C1] do_exit+0x8b8/0x2b60 [ 1349.391848][ C1] ? __pfx_do_exit+0x10/0x10 [ 1349.396409][ C1] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1349.402364][ C1] do_group_exit+0xd5/0x2a0 [ 1349.406849][ C1] get_signal+0x1ec7/0x21e0 [ 1349.411339][ C1] ? __pfx_get_signal+0x10/0x10 [ 1349.416165][ C1] arch_do_signal_or_restart+0x91/0x7a0 [ 1349.421683][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1349.427810][ C1] ? do_user_addr_fault+0x8d6/0x12f0 [ 1349.433069][ C1] irqentry_exit+0x1f8/0x670 [ 1349.437629][ C1] asm_exc_page_fault+0x26/0x30 [ 1349.442448][ C1] RIP: 0033:0x7f8be159c821 [ 1349.446831][ C1] RSP: 002b:00000000000000e0 EFLAGS: 00010217 [ 1349.452866][ C1] RAX: 0000000000000000 RBX: 00007f8be1815fa0 RCX: 00007f8be159c819 [ 1349.460805][ C1] RDX: 0000000000000000 RSI: 00000000000000e0 RDI: 0000000000002080 [ 1349.468747][ C1] RBP: 00007f8be1632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1349.476687][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1349.484635][ C1] R13: 00007f8be1816038 R14: 00007f8be1815fa0 R15: 00007ffc4a2d6558 [ 1349.492582][ C1] [ 1349.495576][ C1] task:syz.8.3477 state:R running task stack:24024 pid:19561 tgid:19561 ppid:13651 task_flags:0x400640 flags:0x00080000 [ 1349.509022][ C1] Call Trace: [ 1349.512279][ C1] [ 1349.515191][ C1] __schedule+0xfee/0x6120 [ 1349.519599][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1349.524962][ C1] ? __pfx___schedule+0x10/0x10 [ 1349.529799][ C1] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 1349.535850][ C1] preempt_schedule_notrace+0x5f/0xd0 [ 1349.541203][ C1] preempt_schedule_notrace_thunk+0x16/0x30 [ 1349.547075][ C1] rcu_is_watching+0x8e/0xc0 [ 1349.551640][ C1] ? unwind_next_frame+0x3be/0x1ea0 [ 1349.556812][ C1] lock_release+0x263/0x320 [ 1349.561288][ C1] unwind_next_frame+0x3c3/0x1ea0 [ 1349.566286][ C1] ? arch_stack_walk+0x73/0xf0 [ 1349.571026][ C1] __unwind_start+0x3d1/0x7f0 [ 1349.575677][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1349.581804][ C1] arch_stack_walk+0x73/0xf0 [ 1349.586367][ C1] ? stack_trace_save+0x8e/0xc0 [ 1349.591191][ C1] stack_trace_save+0x8e/0xc0 [ 1349.595852][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1349.601198][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1349.606108][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1349.611014][ C1] save_stack+0x162/0x1e0 [ 1349.615318][ C1] ? __pfx_save_stack+0x10/0x10 [ 1349.620147][ C1] ? page_ext_put+0x3e/0xd0 [ 1349.624626][ C1] __reset_page_owner+0x84/0x190 [ 1349.629533][ C1] __free_frozen_pages+0x7e1/0x10d0 [ 1349.634704][ C1] ? __free_slab+0xd0/0x220 [ 1349.639184][ C1] qlist_free_all+0x47/0xe0 [ 1349.643660][ C1] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1349.649094][ C1] __kasan_slab_alloc+0x69/0x90 [ 1349.653938][ C1] kmem_cache_alloc_noprof+0x241/0x6e0 [ 1349.659379][ C1] ? ptlock_alloc+0x1f/0x70 [ 1349.663856][ C1] ptlock_alloc+0x1f/0x70 [ 1349.668157][ C1] pte_alloc_one+0x82/0x3d0 [ 1349.672638][ C1] do_fault+0x88e/0x18e0 [ 1349.676851][ C1] __handle_mm_fault+0x1815/0x2b60 [ 1349.681950][ C1] ? mt_find+0x45e/0x8e0 [ 1349.686174][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 1349.691602][ C1] ? __pfx_mt_find+0x10/0x10 [ 1349.696181][ C1] handle_mm_fault+0x36d/0xa20 [ 1349.700929][ C1] __get_user_pages+0xf9c/0x34d0 [ 1349.705846][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 1349.711220][ C1] get_dump_page+0x27e/0x3d0 [ 1349.715797][ C1] ? __pfx_get_dump_page+0x10/0x10 [ 1349.720887][ C1] ? dump_user_range+0x73b/0xb50 [ 1349.725828][ C1] dump_user_range+0x18d/0xb50 [ 1349.730576][ C1] ? __pfx_dump_user_range+0x10/0x10 [ 1349.735854][ C1] ? __pfx_writenote+0x10/0x10 [ 1349.740601][ C1] elf_core_dump+0x2d5f/0x3d10 [ 1349.745360][ C1] ? __pfx_elf_core_dump+0x10/0x10 [ 1349.750456][ C1] ? kasan_save_stack+0x3f/0x50 [ 1349.755287][ C1] ? kasan_save_stack+0x30/0x50 [ 1349.760119][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 1349.764860][ C1] ? __kvmalloc_node_noprof+0x360/0xa00 [ 1349.770385][ C1] ? vfs_coredump+0x2105/0x5570 [ 1349.775213][ C1] ? asm_exc_page_fault+0x26/0x30 [ 1349.780215][ C1] ? 0xffffffffff600000 [ 1349.784361][ C1] ? vfs_coredump+0x27bc/0x5570 [ 1349.789186][ C1] vfs_coredump+0x27bc/0x5570 [ 1349.793844][ C1] ? __pfx_vfs_coredump+0x10/0x10 [ 1349.798844][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1349.803756][ C1] ? lock_acquire+0x1cf/0x380 [ 1349.808410][ C1] ? is_bpf_text_address+0x8a/0x1a0 [ 1349.813580][ C1] ? bpf_ksym_find+0x128/0x1c0 [ 1349.818315][ C1] ? __kernel_text_address+0xd/0x30 [ 1349.823485][ C1] ? unwind_get_return_address+0x59/0xa0 [ 1349.829090][ C1] ? arch_stack_walk+0xa6/0xf0 [ 1349.833839][ C1] ? __sigqueue_free+0xbe/0x2a0 [ 1349.838663][ C1] ? stack_trace_save+0x8e/0xc0 [ 1349.843486][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1349.848831][ C1] ? stack_depot_save_flags+0x27/0x9d0 [ 1349.854260][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1349.859189][ C1] ? proc_coredump_connector+0x2d3/0x4f0 [ 1349.864793][ C1] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1349.870748][ C1] ? rcu_is_watching+0x12/0xc0 [ 1349.875485][ C1] get_signal+0x1f2a/0x21e0 [ 1349.879968][ C1] ? __pfx_get_signal+0x10/0x10 [ 1349.884792][ C1] arch_do_signal_or_restart+0x91/0x7a0 [ 1349.890312][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1349.896440][ C1] ? do_user_addr_fault+0x8d6/0x12f0 [ 1349.901698][ C1] irqentry_exit+0x1f8/0x670 [ 1349.906259][ C1] asm_exc_page_fault+0x26/0x30 [ 1349.911079][ C1] RIP: 0033:0x7fa9b339c821 [ 1349.915463][ C1] RSP: 002b:00000000000000e0 EFLAGS: 00010217 [ 1349.921499][ C1] RAX: 0000000000000000 RBX: 00007fa9b3615fa0 RCX: 00007fa9b339c819 [ 1349.929439][ C1] RDX: 0000000000000000 RSI: 00000000000000e0 RDI: 0000000000002080 [ 1349.937383][ C1] RBP: 00007fa9b3432c91 R08: 0000000000000000 R09: 0000000000000000 [ 1349.945323][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1349.953286][ C1] R13: 00007fa9b3616038 R14: 00007fa9b3615fa0 R15: 00007ffe18351d98 [ 1349.961234][ C1] [ 1353.163855][T13800] kworker/0:8 (13800) used greatest stack depth: 17584 bytes left