last executing test programs: 12m24.759754996s ago: executing program 32 (id=1295): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0x80000000, 0xffff, 0x0, 0x3, 0x0, 0x10, 0x6, 0x0, 0x2, 0x0, 0xa, 0x0, 0x4}, {0xa, 0x0, 0x0, 0x0, 0x40, 0x2, 0x10, 0xfb, 0x7, 0x0, 0x4, 0x0, 0xfffffffffffffff7}, {0x200000, 0xa, 0x21, 0x5, 0x80, 0x2, 0x0, 0x0, 0x55, 0xb, 0x1, 0x0, 0x8080}], 0x3fd}) r0 = socket$key(0xf, 0x3, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = socket(0x2c, 0x3, 0x0) close(r1) syz_open_dev$vim2m(&(0x7f0000000180), 0x80000000, 0x2) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20048810) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x2000018c) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd00"], 0x70}}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000200)={&(0x7f0000000180)=[0x0, 0x0], 0x2}) r5 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r7, 0x4, 0x6, 0x4, 0x2, 0x47, @mcast1, @mcast1, 0x1, 0x8, 0x0, 0x66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r8, 0x0, 0x0, 0x0, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x0, 0x8, 0x2}}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000100)={&(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000280), 0x2, r4}) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 12m9.15023945s ago: executing program 33 (id=1327): mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000380)="ebe3a0e961837b796cfd1647e2080000000000000080b3720022205e81f4a7f71c197baae1efd7e8004a863f3d5cfe6cb55b", 0x32}, {&(0x7f00000006c0)="e8710e444d50a969ff678371e3214aeee71dee3819271482a4975a52c18b9b8b4db3945d1032005eabe97b4dc33a47d3a158da98255ccdd4c15eb6c9857345444d8456d30026b433a2efdd5b00186f35cdcdb93a4722bf356a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e8927d2a8103ef2f4b93766b756b66f74f46cf801704d27a8b96c34070", 0x8d}, {0x0}, {&(0x7f0000000300)}], 0x5}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r1, &(0x7f0000000000)='\"', 0x1) 6m9.778267803s ago: executing program 34 (id=2500): r0 = socket$nl_generic(0x10, 0x3, 0x10) gettid() getpid() r1 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) mkdirat(0xffffffffffffff9c, 0x0, 0x80) umount2(0x0, 0x4) getxattr(0x0, &(0x7f0000000180)=@known='user.incfs.size\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r4, 0x1, &(0x7f0000001d00)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0xfffc, r3, 0x0, 0x0, 0x0, 0x0, 0x4}]) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44e, 0x1215, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x586c, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)={0x20, 0x21, 0x5, {0x3, 0x29, "9652c5"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$NFC_CMD_ENABLE_SE(r5, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x14, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20040014}, 0x800) syz_genetlink_get_family_id$l2tp(0x0, r0) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000001080), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000080)=0x0) sendmsg$NFC_CMD_SE_IO(r5, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0xdc, r7, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_SE_APDU={0xb6, 0x19, "96506459ef358a20c22795da60e11a1164903173bab9716ec90abcc3a515e3f0732ef79b765e15c9f0cf43442f18773c574b71bb018f8678d8f1a436e345b222b8494cb5e79e6959aea77645b1753810e3f7afd02127fbe28fbc6d6164f83e5688e482f440786192551411b78fb21df238bef0e59bbb5bceaa772948494a2fe777fd55809bb57f78a8a7a1c79a44c2f7955656f7351d1bdbde05ab93e41f8e7b6fa1d0c6f8b60986364bf122610dc0b15616"}]}, 0xdc}, 0x1, 0x0, 0x0, 0xc0c1}, 0x20000041) 5m45.095194275s ago: executing program 35 (id=2599): syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}}, 0x4000010) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f00000000c0)={0x0, 0x2, 0x5, &(0x7f0000000080)={0x8, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 4m49.04322059s ago: executing program 36 (id=2792): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) clock_adjtime(0x0, &(0x7f0000000000)={0x66b6, 0x4100000000000000, 0x0, 0x7, 0x100000000, 0xfffffffffffffffd, 0x80000000077, 0x0, 0x0, 0x0, 0x83, 0x248a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000000000, 0x6, 0x5, 0x2000000, 0xf439}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000001c0)={@dev={0xfe, 0x80, '\x00', 0x2a}, 0x91ee, 0x1, 0x1, 0x0, 0x2, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r4 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r4}, &(0x7f0000044000)=0x0) timer_settime(r5, 0x236bd4336e4642df, &(0x7f0000000300)={{0x77359400}, {0x0, 0xe4c}}, 0x0) r6 = gettid() poll(0x0, 0x0, 0xffffffffffbffff8) timer_settime(0x0, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000340)=[{0x8, 0x0, [0x4, 0x8, 0x5, 0x7fff, 0x6913, 0xfffffff8, 0x7fffffff, 0x8, 0x2, 0x101, 0x7fff, 0xd7, 0x2, 0xfffffff5, 0x8, 0x7]}, {0x4, 0x0, [0x1, 0x5, 0x9, 0x1000, 0x40, 0x5, 0x7, 0xfffff94a, 0x9, 0x5, 0x1000, 0x5, 0x80, 0xff, 0x4911]}, {0x1, 0x0, [0x2, 0x3, 0x5, 0x2, 0xfffffffa, 0x2, 0x1, 0x80, 0x5, 0x3ff, 0x2, 0x9, 0x3, 0x3, 0x400, 0xe]}, {0x12, 0x0, [0x275, 0x18, 0x5, 0x800, 0x9, 0xe057, 0x56e, 0x4, 0xfffffffa, 0x4, 0x7, 0x28f3, 0xd7, 0x3c23, 0xa2, 0x7]}, {0x30, 0x0, [0x7, 0xff, 0x3, 0x4, 0x2, 0x27e, 0x3, 0x3, 0x6, 0x8, 0x40, 0x7ba, 0x7, 0xa6e, 0x8eb, 0xef9f]}], 0xffffffffffffffff, 0x1, 0x1, 0x168}}, 0x20) tkill(r6, 0x12) timer_settime(0x0, 0x236bd4336e4642df, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4m41.950798953s ago: executing program 37 (id=2818): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a0000000200", 0x6) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010103}, 0x1}}}, 0x84) 4m17.83316959s ago: executing program 38 (id=2889): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000600)=""/102400, 0x19000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x45, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380), 0x204000, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x8) write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2b, 'pids'}]}, 0x6) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x4e22, 0x3, 'sh\x00', 0x28, 0x5, 0x10000072}, 0x2c) r6 = socket$kcm(0xa, 0x2, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getpid() write$P9_RGETLOCK(r8, &(0x7f0000000300)=ANY=[], 0x2d) sendmsg$sock(r6, 0x0, 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="07ea000000040000b97230e2c7aeb252bebe23acdbaa8fe9acfa9afbae", @ANYRES32=r1, @ANYBLOB, @ANYRES32=r4, @ANYBLOB, @ANYRES64=0x0], 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0xfedd, &(0x7f00000001c0), 0x1, 0x0, 0x3152ca24e54db373, 0x8010}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000092501020000005e797a310000000005000100070000000400078000000000000000000020000000"], 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 4m4.830906193s ago: executing program 39 (id=2933): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001300)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000b1daed680d040000000000000000000000000000000000000400000000040000000000000803000000000000006100"], 0x0, 0x5a}, 0x20) r0 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x7ab3ab93c14219c3}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0xc201}) write$tun(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd000511000400"], 0x10da) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000004780), r6) 3m43.436569349s ago: executing program 9 (id=2995): syz_emit_vhci(&(0x7f0000000480)=ANY=[], 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002c0007412bbd00fa0000df25067c0000080001"], 0x20}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x3, 0x9) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x86) r3 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000180)={0x6, r3, 0x15, {0x6, 0x3}, 0x7f}, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x4915, &(0x7f0000000200)={0x0, 0x828a, 0x200, 0x3, 0x246, 0x0, r2}, &(0x7f00000002c0)=0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x108, &(0x7f0000000340)=0x7f, 0x0, 0x4) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETLE(r10, 0x400454dc, &(0x7f0000000040)=0x1) write$tun(r10, &(0x7f0000000080)={@val={0x0, 0x9100}, @val={0x1, 0x80, 0x20, 0x14, 0x8, 0xffff}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x2, 0x1, 0x24, 0x65, 0x0, 0x4, 0x21, 0x0, @dev={0xac, 0x14, 0x14, 0x16}, @local}, {{0x4e23, 0x4e24, 0x4, 0x1, 0x7, 0x0, 0x0, 0x9, 0x3, "61dace", 0x4, "245380"}}}}}, 0x32) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 3m41.758944341s ago: executing program 9 (id=3002): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)='\n\x00\x00\x00', 0x4) 3m41.732225321s ago: executing program 9 (id=3003): socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) unshare(0x20000400) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/pid_for_children\x00') sendmmsg$unix(r1, &(0x7f00000bd000), 0x8000000000001c8, 0x4000000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x10, 0xffffffff, 0x16}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3m40.27323049s ago: executing program 9 (id=3010): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$bind(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file1/file0\x00', &(0x7f00000002c0), 0x800000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x10c5408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000340)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6efc}], &(0x7f0000000440)='GPL\x00', 0xd, 0xe4, &(0x7f00000005c0)=""/228, 0x41000, 0x25, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f0000000480)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0x2, 0x0, 0xfffffffd}, 0x10, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000006c0)=[0xffffffffffffffff, r0, r0], &(0x7f0000000700)=[{0x0, 0x3, 0xc, 0x5}, {0x4, 0x1, 0x2, 0x1}, {0x2, 0x4, 0x1, 0xb}, {0x0, 0x4, 0xb, 0x9}], 0x10, 0x400}, 0x94) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x3}) 3m40.002898234s ago: executing program 9 (id=3013): syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x8, 0x10, 0x3, 0x5, {{0x6, 0x4, 0x0, 0x9, 0x18, 0x67, 0x0, 0x8, 0x2f, 0x0, @remote, @empty, {[@timestamp_addr={0x44, 0x4, 0x58, 0x1, 0xd}]}}}}}) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000), 0x10) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file2\x00', &(0x7f0000000180)='jffs2\x00', 0x4001, &(0x7f00000001c0)='ip_vti0\x00') setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2300, 0x0) unlink(&(0x7f0000000040)='./file0\x00') socket$kcm(0x29, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$sock(r2, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@mark={{0x14, 0x1, 0x24, 0x9}}], 0x18}}], 0x1, 0x24000010) 3m39.674188261s ago: executing program 9 (id=3015): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x10, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000100)=""/223, 0x0, 0xdf, 0x1, 0x4}, 0x28) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="4fce72000000000000000000000000a55fed5b82e641e7710000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="010000000500"/28], 0x50) r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r6, 0x2284, &(0x7f0000000080)) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfff}, 0x1c) r8 = syz_open_dev$vim2m(&(0x7f00000001c0), 0xfffffffffffffbd3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000000)={0x11, 0x1, 0x1, "a5ee5c0cf30f000080df48cd09ea4f1922fc336300000000008000", 0x33363248}) sendto$inet6(r7, &(0x7f00000001c0)='N', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e26, 0x0, @private2}, 0x1c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r5}, 0x8) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffff8}, [@alu={0x3, 0x0, 0xb, 0x5, 0xa}]}, &(0x7f0000000480)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x2, 0x0, 0x3}, 0x10, 0xf8d, 0xffffffffffffffff, 0x6, &(0x7f0000000640)=[r5, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000a80)=[{0x2, 0x1, 0x4000004, 0x8}, {0x3, 0x5, 0x3, 0x6}, {0x2, 0x2, 0x5, 0xb}, {0x3, 0x1, 0xb, 0x4}, {0x3, 0x5, 0x0, 0x4}, {0x3, 0x1, 0xe, 0x5}], 0x10, 0x10001}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r9, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="bc0000003af7d4a4e4c5e709cf6399d5f30f9774f3202e514002a4fd53c6869cef055668cbf21f920577552134c0449e976ac708c838f868da22244f361bc4d3eed1f821db392062bdbd0e4eb1cdae2057db69e3758b0d27c905b6bbafc56511b3080d0d4bb5a5f93522ee37c103af9c4cb6dfff3426", @ANYRES32=r10, @ANYBLOB="000427bd7000fbdbdf251300000054000980080001000100000008000100af09000008000100ae000000080002000004000008000100db0900000800010004000000080001000300000008000100070000000800020001010000080002008400000054000180380004001400010002004e20e00000010000000000000000200002000a008d8c00000080fc01000000000000000000000000000104000000080003006d0100000d0001007564703a73797a3200000000"], 0xbc}, 0x1, 0x0, 0x0, 0x8804}, 0x20000000) shutdown(r7, 0x1) 3m39.168083238s ago: executing program 40 (id=3015): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x10, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000100)=""/223, 0x0, 0xdf, 0x1, 0x4}, 0x28) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="4fce72000000000000000000000000a55fed5b82e641e7710000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="010000000500"/28], 0x50) r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r6, 0x2284, &(0x7f0000000080)) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfff}, 0x1c) r8 = syz_open_dev$vim2m(&(0x7f00000001c0), 0xfffffffffffffbd3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000000)={0x11, 0x1, 0x1, "a5ee5c0cf30f000080df48cd09ea4f1922fc336300000000008000", 0x33363248}) sendto$inet6(r7, &(0x7f00000001c0)='N', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e26, 0x0, @private2}, 0x1c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r5}, 0x8) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffff8}, [@alu={0x3, 0x0, 0xb, 0x5, 0xa}]}, &(0x7f0000000480)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x2, 0x0, 0x3}, 0x10, 0xf8d, 0xffffffffffffffff, 0x6, &(0x7f0000000640)=[r5, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000a80)=[{0x2, 0x1, 0x4000004, 0x8}, {0x3, 0x5, 0x3, 0x6}, {0x2, 0x2, 0x5, 0xb}, {0x3, 0x1, 0xb, 0x4}, {0x3, 0x5, 0x0, 0x4}, {0x3, 0x1, 0xe, 0x5}], 0x10, 0x10001}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r9, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="bc0000003af7d4a4e4c5e709cf6399d5f30f9774f3202e514002a4fd53c6869cef055668cbf21f920577552134c0449e976ac708c838f868da22244f361bc4d3eed1f821db392062bdbd0e4eb1cdae2057db69e3758b0d27c905b6bbafc56511b3080d0d4bb5a5f93522ee37c103af9c4cb6dfff3426", @ANYRES32=r10, @ANYBLOB="000427bd7000fbdbdf251300000054000980080001000100000008000100af09000008000100ae000000080002000004000008000100db0900000800010004000000080001000300000008000100070000000800020001010000080002008400000054000180380004001400010002004e20e00000010000000000000000200002000a008d8c00000080fc01000000000000000000000000000104000000080003006d0100000d0001007564703a73797a3200000000"], 0xbc}, 0x1, 0x0, 0x0, 0x8804}, 0x20000000) shutdown(r7, 0x1) 2m45.74669852s ago: executing program 8 (id=3187): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x400, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0x0, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad6000", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c"], 0x50}}, 0x20008844) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x401, 0x181, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3fd, 0x4000009, 0x200, 0xe2df, 0x9, 0x1, 0x4, 0x40000, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x15, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40090}, 0x0) syz_emit_vhci(0x0, 0x47) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) setsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$selinux_create(r2, &(0x7f0000000140)=@access={'system_u:object_r:etc_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 0x5}, 0x5e) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'bridge_slave_1\x00', 0x0}) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-arm)\x00'}, 0x58) socket$inet_sctp(0x2, 0x5, 0x84) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m44.617770177s ago: executing program 8 (id=3192): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setresuid(0xee00, 0xee01, 0x0) setreuid(0xee01, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000080)=0x7f) futex_waitv(&(0x7f0000002d40)=[{0x7, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x1) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000000)) socket$inet_mptcp(0x2, 0x1, 0x106) read$dsp(r4, &(0x7f0000000300)=""/79, 0x4f) pselect6(0x40, &(0x7f00000000c0)={0x7, 0xfffffffffffffffd, 0x9, 0x40, 0x1, 0xd}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x5, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0x8}, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 2m42.755294633s ago: executing program 8 (id=3197): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2a00000011200000", @ANYRES32, @ANYRES32, @ANYBLOB="4317d5", @ANYRES64=0x0], 0x20) syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r2, 0x3cf56150fdacbfe7, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4014) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000006c0)={0x4, 0x66, 0x0, 0x0, 0x132, 0x3}) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x50}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4014}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001"], 0xb8}}, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'netpci0\x00'}) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2a, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x6, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x2, 0x0, 0x6, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="3c00000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="340e000000b401001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r10], 0x3c}}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 2m38.925224621s ago: executing program 8 (id=3211): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x400002, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) getsockname(0xffffffffffffffff, &(0x7f0000000880)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000009c0)=0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}]}, &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x80, 0x3, 0x0, 0x9276, 0x0, 0x0, {0x1}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000002000)=ANY=[@ANYBLOB="6e85eeae94791d04e88a243546b7dc4fd4fb26769c25481c98dd061c29a6e6a09e1381075026abfd08c7e9e4"], 0x6) 2m37.361027744s ago: executing program 8 (id=3217): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) accept4(r0, 0x0, 0x0, 0x800) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) eventfd2(0xe5c, 0x80000) eventfd2(0x4001, 0x800) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r5, @ANYRES32=r5], 0x44}}, 0x2000800) 2m37.122781002s ago: executing program 8 (id=3218): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0, 0x50) mkdirat(r0, &(0x7f0000000200)='./file0\x00', 0x81) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) flock(r0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)={0x14, 0x14, 0x105, 0x70bc26, 0x25dfdb7b, {0x11}}, 0x14}, 0x1, 0x0, 0x0, 0x8002}, 0x2005c840) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x10c5408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r3, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="e6", 0x1}], 0x1}}], 0x1, 0x24040890) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0}) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pread64(r4, &(0x7f0000000040)=""/115, 0x73, 0xeb04) r5 = socket$inet6(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000c80)={'batadv_slave_0\x00', 0x0}) r7 = dup(r5) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd2c, 0x25dfdbfd, {0x2, 0x20, 0x0, 0x0, r6}, [@IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010301}, @IFA_FLAGS={0x8, 0x8, 0xa0}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000050}, 0x200000c4) execveat(r7, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000380)={[&(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00']}, &(0x7f0000000600)={[&(0x7f0000000440)='blkio.bfq.sectors_recursive\x00', &(0x7f0000000480)='overlay\x00', &(0x7f0000000500)='\xca\x00', &(0x7f0000000540)='\x00', &(0x7f00000005c0)=',[\x00']}, 0x800) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r9 = socket(0x2c, 0x3, 0x0) close(r8) syz_open_dev$vim2m(&(0x7f0000000180), 0x80000000, 0x2) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) chdir(&(0x7f00000001c0)='./bus\x00') 2m35.034639412s ago: executing program 3 (id=3227): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e80)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff24, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/vlan/config\x00') preadv(r1, &(0x7f0000001880), 0x0, 0x3fe, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x100) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000280)={0x84, @private=0xa010101, 0x15, 0x3, 'dh\x00', 0x1, 0xfffffffe, 0x7b}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'wrr\x00', 0x3, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d5f, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_print_times', 0x20082, 0x4) write$yama_ptrace_scope(r6, &(0x7f0000000140)='3\x00', 0x2) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r7, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x0, 0x101, 0x0, 0x100, 0x10000000, {0x40, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, r8, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m33.921265767s ago: executing program 3 (id=3229): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setresuid(0xee00, 0xee01, 0x0) setreuid(0xee01, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000006c0)=ANY=[], 0x18c) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) futex_waitv(&(0x7f0000002d40)=[{0x7, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x1) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)) socket$inet_mptcp(0x2, 0x1, 0x106) read$dsp(0xffffffffffffffff, &(0x7f0000000300)=""/79, 0x4f) pselect6(0x40, &(0x7f00000000c0)={0x7, 0xfffffffffffffffd, 0x9, 0x40, 0x1, 0xd}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x5, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0x8}, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 2m30.482231344s ago: executing program 3 (id=3245): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f00000000c0)={0x8, 0xc, 0x5}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000030000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x10000004, 0x8000, 0x7, 0x3, 0x3, 0x7ff, 0x3, 0x4}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000040)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) 2m29.922835701s ago: executing program 0 (id=3248): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x400000000e) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) recvmmsg(r1, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096, 0x171}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) write$binfmt_misc(r0, &(0x7f0000000040), 0xffc1) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) 2m29.54449145s ago: executing program 3 (id=3250): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002340)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x2}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x700, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) 2m29.48179313s ago: executing program 0 (id=3251): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x6, @multicast2, 0x4e22, 0x1, 'wrr\x00', 0x20, 0x1b53, 0xd}, 0x2c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003300)=ANY=[@ANYBLOB="3c1100003e00010329bd70a600dcdf25030000"], 0x113c}}, 0x8004) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x1, "100056f200"}) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x8001) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xdaf}}, './file0\x00'}) r6 = openat$sequencer2(0xffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @mcast1, 0x5}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00007df000/0x2000)=nil, 0x2000, 0x3000008, 0x30, 0xffffffffffffffff, 0xfdbd9000) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r7, r7, 0x0, 0x200000) 2m29.282841993s ago: executing program 3 (id=3252): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e80)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff24, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/vlan/config\x00') preadv(r1, &(0x7f0000001880), 0x0, 0x3fe, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'wrr\x00', 0x3, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d5f, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_print_times', 0x20082, 0x4) write$yama_ptrace_scope(r6, &(0x7f0000000140)='3\x00', 0x2) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r7, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x0, 0x101, 0x0, 0x100, 0x10000000, {0x40, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, r8, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m28.42024119s ago: executing program 2 (id=3253): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x400002, 0x0) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000100)={0x1, 0x0, 0x11, 0x11, 0x1a, &(0x7f0000000a00)}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000002040)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x80, 0x3, 0x0, 0x9276, 0x0, 0x0, {0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000002000)=ANY=[@ANYBLOB="6e85eeae94791d04e88a243546b7dc4fd4fb26769c25481c98dd061c29a6e6a09e1381075026abfd08c7e9e4"], 0x6) 2m28.358511754s ago: executing program 3 (id=3254): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[], 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'team0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001940)=ANY=[@ANYBLOB="380200004900010026bd700026ffffff0a001c6e0800000027af5aa534d6815c2e93f108000280b4e27551"], 0x38}}, 0x20048800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000300)={@rand_addr=' \x01\x00', @remote, @private1, 0x0, 0x0, 0x0, 0x500, 0x0, 0x80040306}) 2m28.158836843s ago: executing program 0 (id=3255): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setresuid(0xee00, 0xee01, 0x0) setreuid(0xee01, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000006c0)=ANY=[], 0x18c) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) futex_waitv(&(0x7f0000002d40)=[{0x7, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x1) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)) socket$inet_mptcp(0x2, 0x1, 0x106) read$dsp(0xffffffffffffffff, &(0x7f0000000300)=""/79, 0x4f) pselect6(0x40, &(0x7f00000000c0)={0x7, 0xfffffffffffffffd, 0x9, 0x40, 0x1, 0xd}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x5, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0x8}, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 2m27.056912839s ago: executing program 2 (id=3256): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000d0000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000001c0)="581f9239658ea95ed371ea3dd361", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x145, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x46, 0x0}, 0x4000804) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x38c}}, 0x0) socket$netlink(0x10, 0x3, 0x14) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000475000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r7 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000000c0), &(0x7f00000001c0)) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001180)={'syz0\x00', {0xaf0, 0xd033, 0x180}, 0x45, [0xfffffff7, 0x3, 0x2, 0x1, 0x80, 0xaf7, 0x8, 0x6, 0x7fff, 0x9, 0x42, 0x40, 0x3ff, 0x2, 0x1, 0x8000, 0x7ff, 0x20000003, 0x5, 0x5, 0x1, 0x4, 0x6, 0x2, 0x6, 0x6, 0x7, 0x1600000, 0xa, 0xfe, 0x3ff, 0xc6, 0x3, 0x8000, 0x1b, 0xb, 0x7, 0x0, 0xff, 0x4, 0x57, 0x6253, 0x7, 0xda, 0x67aa2099, 0xffffffff, 0x7, 0x8, 0x9, 0x9, 0xd, 0x6, 0x5, 0x9ec6, 0x7, 0x1, 0x7, 0xff, 0x7, 0x800, 0xfffffffa, 0x3, 0x6, 0x3], [0x3, 0x7ff, 0x7, 0xa, 0x3, 0x3, 0x3, 0x2, 0x2, 0x5, 0x0, 0xfffff283, 0x1ff8, 0x8, 0x100, 0xffffffff, 0x7, 0x3ff, 0xffffffff, 0x0, 0x400000, 0x9, 0x6, 0xe, 0x0, 0x100, 0x1, 0xd, 0x100, 0x800, 0xcb, 0x5, 0x5, 0x6, 0x0, 0x3, 0xe, 0x6, 0x81, 0x3, 0x2, 0x8, 0xfffffff7, 0x6, 0x8, 0x5, 0xd, 0xfffffffa, 0x2, 0x8e, 0x4, 0x8b7, 0xfffffffa, 0x1, 0xfbfffff9, 0x3, 0x9, 0x7, 0x3, 0x942, 0x4, 0x12000, 0x4fb2adfa, 0xdea0], [0x2, 0x3, 0xfffff001, 0xfffffffd, 0x8, 0xe6, 0x8, 0x2, 0xf441, 0x2, 0xfffffffd, 0x2, 0x10, 0x1000, 0x9, 0x2, 0xffffffff, 0x7, 0x0, 0xf361, 0x7, 0x3, 0x0, 0x5, 0x6, 0xff, 0x81, 0xf, 0x1, 0x9, 0x7, 0x0, 0x10001, 0x8e5c, 0x4, 0x9, 0x6, 0x1, 0x200, 0x7, 0x40, 0x7a2c, 0x200101, 0x9e38, 0x4c88, 0x6, 0xa8, 0x4, 0x8, 0x9, 0x2, 0x6, 0x5, 0x1, 0x1137, 0x8, 0xae, 0x4d70, 0x400, 0xfaa5, 0xffffff01, 0x15, 0x7a, 0x1], [0x0, 0x8, 0x9, 0x0, 0x6, 0x8, 0x9, 0x4, 0xfffffff8, 0x200, 0xf, 0x5, 0x3, 0x6727, 0x7fff, 0x9, 0x200, 0xfffffff7, 0xe3, 0x400, 0x0, 0x4, 0xdfd2, 0x39, 0x101, 0x9, 0x1, 0x1, 0xa, 0x7, 0x10001, 0x1, 0x6, 0x400, 0x0, 0x8, 0x2, 0x9, 0x9, 0x6, 0x200, 0x0, 0x2334, 0x6, 0x1, 0x2, 0x6f51, 0x81, 0x5, 0x0, 0x7, 0x3, 0x7, 0x34254b70, 0x4ad, 0x3, 0x8b21, 0x1, 0x9, 0x3, 0xc, 0xffff, 0x7, 0x8]}, 0x45c) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r7, 0x1e, &(0x7f0000000040)={r7}, 0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_usb_connect$uac1(0x3, 0xa2, 0x0, 0x0) 2m26.723562866s ago: executing program 0 (id=3257): mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) ptrace$ARCH_SHSTK_LOCK(0x1e, r2, 0x0, 0x5003) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x40900, 0x0) ioctl$IOC_PR_PREEMPT(r6, 0x401870cb, &(0x7f0000000340)={0x90, 0xfffffffffffffffe, 0x6, 0xfffffffb}) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140), 0x4) r7 = fsopen(0x0, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000380)=0x1c, 0x80000) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r8, 0x0, 0x0) 2m25.729960868s ago: executing program 0 (id=3260): prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x300) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) (fail_nth: 3) quotactl_fd$Q_SETINFO(r2, 0xffffffff80000601, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) 2m24.97676038s ago: executing program 0 (id=3261): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d80)="170000007a006bcd9e3fe3dc6e08170007000054250000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x31, &(0x7f0000000180)=0x6, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0x7}}) socket$pppoe(0x18, 0x1, 0x0) r3 = fsopen(&(0x7f0000000040)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) 2m22.734665159s ago: executing program 2 (id=3265): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000"], 0x0}, 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)="0bc3ff", 0x3}, {0x0, 0xb}], 0x2) ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f00000011c0)={0x3, 0xffffffff, 0x300, 0xed86, 0x5, 0xfffffffe}) 2m22.177899641s ago: executing program 2 (id=3266): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0xeb, 0x1, 0x1, "4340e764ff8fbea9add3f6e248d2a67e56a7435d0b8995dc639644cbfc61845d", 0x38415262}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x80, &(0x7f0000000080)=0x81, 0x0, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'pim6reg0\x00', &(0x7f00000000c0)=@ethtool_drvinfo={0x3, "f004ee24da861cd0cf84345b62407945b6c23369a78b7191206485404195fed8", "fe269be602d2c1e07ce70b0960eb9e0ecf19ccba725d3739ace3a9cb450bcbfd", "771073224dc34369d078ba7d4eb9e5a8950a8022ef50410690f96df813dfdc0b", "7235e0e45b10e225c03715610243c9185d61220a79a7ff335b05a63a63ae27d8", "c5298c6a4ac23c1de5a0b202cc9e386a5a83827f1505b9d359ee7ba4fe8cd701", "a83869e047427998d36909af", 0xf1, 0x400, 0x7, 0x6, 0x3}}) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x100010, 0xffffffffffffffff, 0x8000000) r2 = syz_io_uring_setup(0x7a5a, &(0x7f0000000200)={0x0, 0x5980, 0x4000, 0x1, 0x24e}, &(0x7f0000000280), &(0x7f00000002c0)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000300)=@IORING_OP_TEE={0x21, 0x24, 0x0, @fd_index=0x2, 0x0, 0x0, 0x3, 0x7, 0x0, {0x0, r4, r0}}) r5 = signalfd(r0, &(0x7f0000000340)={[0x7ff]}, 0x8) ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0x3) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000380)={"c14495a16b9c6fe4d98efbbab621b0ca68d0e98115233c257bd052e1c82a310b", r5, 0xffffffffffffffff}) socketpair(0x1, 0x4, 0x8, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = gettid() fcntl$lock(r6, 0x0, &(0x7f0000000400)={0x2, 0x4, 0x6, 0x3, r8}) ioctl$PPPIOCSMRU1(r5, 0x40047452, &(0x7f0000000440)=0x81) ioctl$VIDIOC_ENUM_DV_TIMINGS(r5, 0xc0945662, &(0x7f0000000480)={0x0, 0x0, '\x00', {0x0, @reserved}}) getsockopt$bt_BT_SNDMTU(r7, 0x112, 0xc, &(0x7f0000000540)=0x800, &(0x7f0000000580)=0x2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$EXT4_IOC_GETFSUUID(r5, 0x8008662c, &(0x7f0000000600)) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f0000000640)) ioctl$INCFS_IOC_FILL_BLOCKS(r5, 0x80106720, &(0x7f0000001b00)={0x7, &(0x7f0000001a00)=[{0x2, 0x29, &(0x7f0000000680)="76eaec4a17e1df6a13eaabb4b1e7fed85c18a6e4a4c75453ff545749f6101c6776d3e9243ff31551bf"}, {0x6, 0xd, &(0x7f00000006c0)="b1debebda81df8cb32719efe83"}, {0x6, 0x44, &(0x7f0000000700)="eb6bbc8c4d6159dce3096494770696a78c9094f667a54085236e73808773fc9dba5d8124295cd392e1c7750c0e740483c8252986d94daacd73b332a83d171b524a18686a", 0x1, 0x1}, {0x8, 0xe9, &(0x7f0000000780)="ecc0cdfc5d8bd0a0fb8d738232ed9d41ba943338d548c33d6e6ad85b876982f6fddd165bd0f206ab9104ff48c090334c48c5812c55ee2189fa09b56a892bb80f1021ddacb908c8f657ab5c414f8079bbfaffa21618ddd705ac2cdc992e0714f19fb765fff5adfd758a68dedc10f0ca0dcd3f4bcdc0a0e518492be128ea8a2a7fce3371529f639f11ff16dd525a276f41a4148c5b9155e4b217350c5e726eb00a8a6461888c9bec566b7fe9f54189f49cc32ef100b9485fe3090e5adde14ecbbd3ec9c03dbac7e9c5df6c3c20a11bc634887fa097f45098bd399c62a1bde150feecc09940ad21dd812c", 0x0, 0x1}, {0x6, 0x9d, &(0x7f0000000880)="c694fbd26f23aa03ad3a30504255153eb773029ef95d5a93000f76cfe4ce5f576459e09b2587a551629fc555fa2e3a22c76767b0b1839b0f3d5a7609721fb48017c4ada79d76073a7f2aa1ab24b33e5fe00236bb2abc98f97fa57203cf1821717cb064037b76bd5c74ae3cbaaa606c6c721e55af271e4a107c6d5f6bf6a352651e3818019cd36b0e8eec9b80ff3b8e5dc178413171c32b9f8772a541a7", 0x0, 0x1}, {0x0, 0xa4, &(0x7f0000000940)="1b15d4acffa60caa2f710fd88bfcd7b540468dbcbbaad594f6d3e28ca0d57c2e42dbac6df946e2e26a7383c6f3931192c9149404bdfae146e20f09c65aba49da3f12358cc4d8510b833b22cb105dafcb7e57e9ca1aa9b49eccbcc3bacd3033d3f041e9e174aa6f30f5b40e15c03a8891aa1e381ea24bea0935a1eaeb27f7771b1069f2cdcae5e05497c34102d286c822298c100297d475dcb5344bc038c333c3b33f9368", 0x1, 0x1}, {0x9, 0x1000, &(0x7f0000000a00)="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", 0x0, 0x1}]}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SG_GET_COMMAND_Q(r9, 0x2270, &(0x7f0000001b40)) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, &(0x7f0000001b80)={'c6xdigio\x00', [0x1, 0xb, 0x0, 0x6, 0xfff, 0x9, 0x2, 0x1000, 0xc, 0x8, 0x0, 0xfffffffe, 0x10, 0x8, 0xddce, 0x6, 0x800, 0x5, 0x3, 0xd1c, 0x3, 0xf54, 0x5, 0x52, 0x1, 0x92, 0x5, 0x1, 0x4, 0xfffffffe, 0xfffffffb, 0xff]}) sendmmsg$alg(r5, &(0x7f0000006680)=[{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001c40)="f9e756e2e93c1248ffe57a932149ebba4ef6af1f676fa5d2c42bbe4611a5cb33a65e77d6be9b85bc6dba8189967fe0ac748e19bbdece5227040ce3c9c08a294ab6356788f81bf823d972edeb4557ab36b2301798888d8461a1e622a4e3f4aa05aa691078e6a2edb93f", 0x69}, {&(0x7f0000001cc0)="2a620da548af65fba473da137e0dfcbc532580d76978c23074241c1cd1dad9addb79d33ec61c7a109b24105e000b1a4451e5c9dcca872fea93b11aa10820f667952bb98bacf74055b4b1c23b6f92363c127014e204e8", 0x56}, {&(0x7f0000001d40)="5860d0633b3315312534c301f6d410e474478168c25761393f912df60030820f12bde636005bb5bb05e1d7f527fd86c01a5b73ddcf88f689708f967ef5e69731b77c1b697b8eaff2", 0x48}, {&(0x7f0000001dc0)="9dc7cc988f5626bef59e3292bbf6724a32a1e3145c4a1862880f5075cd63e66f790e399a090fc52f68", 0x29}, {&(0x7f0000001e00)="6541ca8596f6d90e76eaf776b7190dc06781ee2cccd6452ee9fff47a72f634b76311b7e33d94fb7ada80b27ad80e4fa651af3617e28933f90d0306e25516a9d3511470ac5fb4eba0624daff8b19357e54d21b220f3cf61ed0695cc7398ce3ab959131306973c48cac0bbdda73dc82ee8d54c7bc73e2074e5583c00c9f3d70f59c5c8b34db87a44fc2e5183be01efb04dd34fbc26686e9672495f8789e6", 0x9d}, {&(0x7f0000001ec0)="ab9cf68615f60d46f82095ad0acd3131ecded1ad268d38286e17b334e70609788ada50ab9a6a2f1062a88cab7f970423938a05f6e877625dac2c8af7ed532b5e8471c7f6d04d69ef7d7178298101ec52535e1cead2c7762b604935a0b1021c3f89c68264300fe46dfce45b2f75cf784450", 0x71}, {&(0x7f0000001f40)="4003ea432afd0627fdf6ffc8939aebe71422b82e6bfb48f360ed8a56014fcc05d9edb363ea7f5277a59755604c1ce2dc7659", 0x32}, {&(0x7f0000001f80)="93c0749dd79f405332c0e53b796fca6fb474b405955d186f766c69555a575909ffb9a5e685ba80110549c636aed4d157441d7e8e606d12dc805225304f995b8845f6408a762e3abbd36efbfd1e76e870086502ccfeac03725326269e2a9e0b97667b5863c091b6eb7edbbda39007a96a097f95b824128216b6ba9b345577cbda88b9bc54dd6d9ea44365fca3dac0e4c225e3fc3e", 0x94}], 0x8, &(0x7f00000020c0)=[@iv={0x80, 0x117, 0x2, 0x6c, "09dfa8c1aab60cfced3321695c84b835c9eda45e4e63c4f2e0ecd8632592e48b12ea0349853e1d2f6ba10db7d7446a9d778b2d95a587585839fffdc601b4e06ee027279a1cfaa61970a38ba6f281f6c389afe1bb488591ba3d92937f454c7399fea7bd0110ae02e1da87f60d"}], 0x80, 0x20040800}, {0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000002140)="811eb757", 0x4}, {&(0x7f0000002180)="e6b4662b2ccd1255c49a5ea3383f9b884159fe7a2b9c1a3d1d91c8e8875a3129ae510abef68ddd07bfc1129834af6449a75f8f274b56344a804e2c80ceb0e8bfd9352000169623e3f925257419f50018a5a063da14279d79eacafe8472f9ec5ac76547b1bd5ee60de8cf917ef9bca93bcf08da52ac936437336757911e77e7d7ee3546e4e5ebee03a76550ced578761b0b093d96e3d10e9214f87b3f4abffbeb576ff972fcad1d0a50036391b19f232cb89cf2511772aa8542b2941637e2ba3ef84e1404d7d00321598cbad7565789844748849e07c4ceea2b6349ed94d719d138b9fdbb3c3f7fe5d3a3685d6cc51de96259e3a393dca33596e84796bc6bd01df14e5c8a37f8299dc5dce350f85ac558b1e3bb8e2823cddae95f8546b85bf8caf33ca1f2db1926703e6c5dcec2740e95142da381648ee33e53dca4ef0e8d0f56dd3a2003c523f6749eb20f11bb4720b22e8eaad406acf43b536f918fc9744c5922a55a09c09ae11d8bef14c4bb21cdbdb10b83c6401dccf8ea6821b7ae495505c415fe1adc23c29ff207d5538e3dedcf47f79a48b0e497f276fb8c766c001781b3718596f9a362c57d93d438e3dbc7a55561ee8f2a21bf9f2006beffc60616ef064056aea6f5e04929851791b912a29e001e3211428da519b501f9c3b6ff19333b544572d1292d2b6ee39913da38356734fdabdda714a2a478b72e7b486f0fa32780894f45a0947b7a0186be22e90175a549a6958935bf2b51a54bc4771ff5e25258fd2b31b3c9bf5cdf230ff59916404f85f7df846e996cbdb2065c757f761e43170f7e085a9b0503866800dabd82795738fd49b41d98fbf6bc6a66ecd0cf066795b9d7a21801b8d5b213cace65fd8eb2212085a5dbd7ffaf53d89b1fed4b7b0ebbca7a541e248bbafc0056661392fc64533d4a71116e42ee1e87a30377fdc60568f8b1ded4c891179b6fa56b6c19bc22174b99bd971d4d907c184631cf358e0a9d12abee102ea86fb285b8bb6f42e6f7e09203420a2c13b181173608a1ea91d4470318fd31904d7f05cfce3b2d1b253c78ea2843dfbc4224e923e4d3d6238cd62e6fa88ac41ef2a8dc48e01a6b9cc7401ad1a0c1f026d62d0e17bea0dc28fac3b94d7d668d5618b80b7ca21b00a43c2ad7f604ef009df423a5ccb7e60e6a4ffa4c41331e03546c0f260f72229268d97727bba35aac9032ee4a1d246caada73c7b4c23542debb5dd7da0c63c1b22881ea2223e1fa6ff3eb185bf8cb25c730f0ca5413fb9fcb4c166c0d229b102d825fa9b23d2e08375c78675eec0fe3766970378456026d67860cf5fd3042eb232a2b54b03cfe5dd20f1b00a82b3919b8c63b627c200c339fb4a83da441d368fe8de79a8e6453c8ba09181090693301117506fbf5fb6f2604aa1e1a86d4a574f67131886e8fb4fc952306480b7b3ccf52aecf96c10fe3cca6a53ad5f82107bf9a7b79edc5bd99c94a643ff967db0fe7315aa20896c97895a139505c459fd1d0437b2918f6cb900a0ca60b1ab1cf32a23534df907049c72e1d2b0cd8bcb8a7f01b769f4da52ae848c1a8cc233ea158e23136905901760044ef270a3375093f0e6d207fbc6e4a4c6a01090c02239e8382b6947bd9e74e5495c42f4fcb3b6aee643c077f76c233986a383709c97269971b874bc577b9314589a43d60fed05ec6cc66f0c0a834ce0b2005627cc85f641c13ba2991c10e87df165f8be5ce1372f99e1646795c8202c5e70b9e63fc154060c0b37a9ba36408b871ec46c31511e6cf47940ed959383f6c809547983da12ad71c71bc769a80206e88c4263aa2b8b1e7a9e80fd1e6e25bcc7aeaf335b6ed3f52d6f52885170070abaaf8f3d3f17e20977f291851839a990c82c2b5ead1737ca872bad44f701c0ec8c19a592511ea800b60bd5a70587a998da7ea5f50f5fca18b7d13a84dcdbc4eb5ad67b351a96c1ebcc37ff976ab2ba238f06bc655194b33aa1c3668e4390aebb1d9c11ac2187ec5ba8427f2bf53d0ec3e5532b853f598f250fdcf8c01ccb8f6519cbea4472fd9e58b2a8361c3ec325d8cf21ad72caa1cf4ca71a7d9b8746b6910e9db623a56d5c325cf3b3b13b3e4ef814f094ba340c6de98c0ce0711cd707da19133220a711fb1508d4313244ee19311f0ce64ad220220ca45b004465eb03badd406a13c966de415fa469c1127d77e7d4098e027e3cdf1cba06f24714d06ee8e6c2f9330d9f7c1a75164ddc2147b533966b41103645bb221a9f43014477e0ac0112ce1d071a519f09ee3ec5cbeffd00a5ee4a0a2318d264f5e0e8df132675e65334d24344817036025f98d96128b56170012a6adb9847b06ed1d21010c74a338da2abc239bb91c03ed985f81da059af5bd80cd3473e8b167f0b806822f9d981a5b813f9110ad40e36b736ed9a7f6a03e13448bc885d031c8bd6014bac46332a17b1a250ba1b35c023891279626bfb7d411f3e8655df55945dc63b615fb023984457e5916dfaab543d4c84e7ed40008e7d9c93deb7ddab6ccd8d9088add7f271cb52d2e637d81c9ed303570ac7a2cbb5bb237836a9cfa8af7d024d85d1faeb694ddcc7dae3b55c690e2e6e980f44fccd6990a938f461957825bcb0080271c34c526ac7727154a2af9b6b7cd8a4c86eb8a5558c51e729c7d36615b5a86dcde6e59cf841f425be274cf376ee073d38d34d84f2782da22886ada554e7fa49683370110f3e6982bd91cfa2f066fa49ba58126fa90158e9717618fbec1e7cf9de8ce5b9017a6de1ef3f311254a295efdc82a3f04bad1348eb139bef614c13c96f5ac4ea5c6963435a48df447b6d6c0e6669b230d41703e56d45d7838a07660a0117091952cb500e423afdd6dce230ae5e7408eb7fed24eafd1fab21261ca1b36ca52a4a67e106cc46266e050399cf5bd3b0b19378c59d87f724b3a9409ede517e43da5361571da3f5f2059330c378c420f2f059e2870bd7519ee875fe9f8b6f171f15d0abc1504aef86ae5c56ef04e62ba2e24938b5a9a29361570a9bafd2c3a8733c091f6955b8c57b2787dfe6d815d5b5caff1b0ab02104cad143f5bdf2d7ac21ca008e3585cd1e32fbb3e32119320eabc9db521f74af3defbc5ee601ab623a5659253db608634b0080072aa1ea6cf6ef32c4031bad76b45425220b23b5bc55b2e5e8d28ef1a4c92115fb784aad3c7ec0dac614c744fb9b1ab7b1268b7e335899e764ec9640bf773d84b11972150663b072d11626028e8958a9f96735152a77d029b0ff690e2fcefb46626813a7212d70865e93147963df52b234165f46158f0dd87335c98fb8bdc7484ccbca013a4cfb84f981f7acfcf98a5fcbdea21338e7b947584f73e4f682a5dc350ae68ccb7f959ca2647a793df65c442becef9cece89d7e351c1eed81bf22445a51a677859f6e3e6f714613255174e829c555c8d2f13f0397b6e5fe658d6dd8ffb28dcd37d4698b6ab9b729f7529658b873eb339b054b0e24a2d490c951ed8b17cbcea673c0f30bbea18fad223b1e6695bcc31fb843dc7c3b15f7415bae0147ac000250fe9f9347e850f0312a2b66d67ae36294056feed1d9f47e49f29d5abda81810d5388b6af99066357fb235802960cf867bf3834979845b8417f1cdca7b0eabfd14e1bd1bd0756e12b1e9436adab7ae7bed068be25ae2c80657c3bcaea72da1825dac8f413eac8a49aeecfe954ac25421c402515614e7b4d1f5ef27f7612cbe0f4071bce0a4b745646ed2162dc70241ac99f96099eff4937b36cf64546157c5bc3b709daa30e70ab996e4a672db94f93007f5c969b1afb68efa0917670818ed4e19e9c5f198e61eb2cd400465e3c79f4dfcd456ea4a272c1a02197e00e2bfa788d15f3de78436da4c77243ab8e826b7ae924ef70cfc2b28073872ad5296368c94d8e56e0ecb8735c62846267f454d5a02ea0d2059a3c61dd6bd5f5d272ab9abfc9492b139ca33f9692d87e249a9a3a9b3731f9ee48027466ea8bac2c5875402b9f362d2c60d7c9008facc45f2ec862261b97a94a2f4a2f46fb77b1a695643024bb85bd756a86faa0cf1f2de645fcdb91fb5a63676b61b42db09162a73465444693837c2d4373b0dc7508f47d1f0c861c329b851d6a1a42043942dcd5c903f15e8ddc769f6f873190cdf1612169877a70bc1ca7e661d76a09a6254abfebfa75efa7a54f15e533397638be3937732e6cb0076f1a30d49d869f3a94fe5e09afeae2c096c79f39caea19547f875c23cdf9f4465b9fcac2ca045c7de26567f0349cd2f3421bd257c7d713b2c99e7858c6b9c4567da247196827d243ba5b3ff7f07db274abe66abb45d8d47ce1fe5b5efaea4df8799ddbf6e6d088a327f656d51757240273402aaa331a6f390d3d9396b44172272474f4ef11363d15498cd9d9eec988350491ddc8b55a32589e2e1e0d449a59651284ab930acede40f9f4d9c1c77de9e48410130071c50c29d3ea653d415eab05ccb713c5882bf15b92e59b2e09cc576b4e6d4224c1fc6e23cd798a8143eaaf2ff59a9c4d9b07970c09bc4b94439fa04a8511bbd12a7b05f7760e9f6c103d9230cdbab063618159d52b3eaf4a3e0e60b7223e257c49f3cd8d5cf7dbce2ec9b48157a0659f82029d854ac5cd719f28bdab4f3542d933769ecac849932040c89d5250d9b7ec5230c6b4433f0ffae79a9a63f2dcbcd67b5353a64401b97b71e45c7fb91a8a0d2d0678f613c20d8658727863ec57161e638b97fbe6d284d841924149f1e410ec5cb38ef663e366f6fe7d8f017e0460ad636e98c177b1812eaf8ef728070a2b1a2a92c6074e71a0caa80464a29125214ed3a060b6be1d8e73fc62b41ade73591675d8b097d6ff43da7e6dfee232f818ea8e88ba9e20f113649030e7ef15989d8d5407f8e5d4730eeeb168a535ec6b0523473bd7b63aef01486fd59bfaaeec7d1d85582b965a1e4305b057d015adfafd23143df762c9a95dbcd05b41fb3c40a83fbf4d2c106a32c0dec08d5790f8f60fedd113d08fe76b2f55eb10e5da52369719433c1dc31587358d96306f42a165bfea26c96885ed7bb23d6697a20a7e23b1595c1a8ee8a5a20b686654a5f346595355f7475af87d6fe5db804cb8d403b71ae123c00979614ec3b87514858465c33bd7c46f655794dc3b2cafc3d30ca4c51ec9d435b2531db6a971ab6102a30f72c570f2ff0fa806a9cf9ab4f5fddd406c1b081e5b4488ad15f3a6cb2165285a081d8c30e412bdd56995f81cf094225627e72a21cc9e042af9cb022d1966ec80f26152e8865f9613f38153890bcdb7ba97fe10f1267cd0aa13b0c8c558b91f0bc2edeee29181ff81bf5c84645c5d9cccc0bf864e0599894765d7678927c68f687f65693b2d71fa89f4b304c970bc4c2b9443aaf56820d94b330072f58c5b6bec0d07c195483394d2b5f345ca28613cfd51c8206c7f9e93c39dc5f14bc74fc548a3a0fa4c2aa8eadf817139321ad5fc93abf8d65895cda5bd4be185043ef7070946904d58c18bd1c3f46f04801366d55d1cb08e078a24a996a3d722c74a27c6e9609b991d28dcf754d7321b5608e1bcbd9a80f3776af5226a1430270c2d59e935578b7f94b5572b5a31ee34380c6a560d6bf4793fbfda76a03b609476abf11227b7d44b99ba8e15b6ab277b9124426ef6ac0d8ce5ae8ead08b4bd2957edad5edddbe6d1b152dd3aee3987ad2b7972979264d862c7922958ffc599daf1623e8f94e5ab4d0f09a4b97b5bc967987117db28060db9713313456e98e3656c6fa5a9b831b88be6cc1f5ac84c7b6f4890860a57", 0x1000}, {&(0x7f0000003180)="19c0df8eb216baa49d9b3d0e36fa75dc5e63e2673c215a954c8cc28b05f1e35f48793a121d9f6031c68aabcdf3a298c9e92824b511eda0cd95e9184a3ea15fd4897685a059f8810534f055073a1d07d7577010122549e03eb96a54a5ea9bb9f8b4ac10829a603f986ffbfb281611f0783bd163739250efb174c5015da04f38af3f9d2fb8791eea6348bd90cf1a", 0x8d}, {&(0x7f0000003240)="e8a5166f53dc680f574ab896d84580a8804b0eabcc601dd3dc94c851e0bc1dff8bf4569557d74f721f54cbedcbf8e4042df5da8a50e1df52ce90a2cda0aff10947da50ffc195bdb5cb868495b67c0fcc1aad0eceb2465ef681fe5d98ce8a58f540d0ca2738f0eb6c703a276041b641a9b1629dca6d791540c801b092cc45580d1f9bbf614d0e9a1e01fa370acff581c4e2f7ed29cd1489e3bd121c2b0b6a5a1f8cb974c406d0a329a183d6d762364d8d320a016fe8116096", 0xb8}, {&(0x7f0000003300)="05574562f51cbd0a57554c3e4c2e952c5359033d7357f603d3afea3a2c05082f9d498a9506225c97ef030b9972b345f88ed30fe8480d087720be73d5f3ef6bcd0ba3319c9170ca6ef2ace9226b76af92eeebcbd74a", 0x55}], 0x5, &(0x7f0000003400)=[@iv={0x1018, 0x117, 0x2, 0x1000, "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"}], 0x1018, 0x4000}, {0x0, 0x0, &(0x7f00000045c0)=[{&(0x7f0000004440)="b8cc54747fcb907c8139ed5345c596c5e3c87c857dbcc3299c56f55f5c6df6015d6bac0eb87f10135a97e65c2977b9f042e417445c38be82660313e9e31b2412f2c3cf51067fc7c7a7208635eb3068791d8f90c0b22c37baa3aa7e1ae0188020a25c513213a82edad07c3fce9b06b44e5dd7117ed7c56b34a46e5c5f7914ed1cab6774f083d696af2a3a9671e31f229c7e4861cde6f094cee2f0cd738ef5a5f3271f3e630f3626ab08aaa58bd462c498bc93826fa810b7b43e", 0xb9}, {&(0x7f0000004500)="7fd9ea", 0x3}, {&(0x7f0000004540)="ebfe528ac341d08ed1cc6582b6a800b4e452f4a351947891b24d1811049c5b332c07d8876708580e618a735398ab40003a8713af26357b30669deefb2e6eacc39ef288f8020de1c9df2230af36b90faf34b0296b652458f5", 0x58}], 0x3, 0x0, 0x0, 0x14}, {0x0, 0x0, &(0x7f0000005800)=[{&(0x7f0000004600)="86dd4afb600f957e08be2fd4bafbaa6a3c2803c64718781c13d7c86483cccd1125621dbde4df51fae5f0b07c396375a1616366e0fd1e166ee7d25d3b7b71ccd2603b7092e6d9e756a06bc451cfe6504e18162990d0826c7aee2e5e3ef93a03b6d9edda677c3a6c49505523efba006e5d056406345bc7dd8211d810e4aab880d8d3e935f4e2d4c01e1cad8e800d32461463bee5571e34c2e9c67aac1468fd3b30fac64541850028305b3b0b1cf1f27d49e43450f2bd68a9faddbafa68a02fc6f521a264bbcc49ecc1c576184f76ce936cdbec5b034b844d89", 0xd8}, {&(0x7f0000004700)="e2b0224ba3c05c647cb42a3e5020cf622f7ca9b5fc5c4af20c272b81751e9c8edd3088a0b338dd40fd08e7dc60954376cf00b594d74e47ed8b7d8a4c33858a6841ec3846cf24b57641e45999493e2add439a271edf35a19732ae9d971d4f596f7b0cb5e5ae8eb5a92b76c301deea6d501afea50e22c7bf98de88e8365203ae234362e240e835753fa149c0c45192328b97fc7ca107cac3d1f68c8f2d2f18a25ba2b681a88fe43a4f369cd5e46c12d28a3c1b655c2a56eec94e7402771d6f4fc137afe802", 0xc4}, {&(0x7f0000004800)="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", 0x1000}], 0x3, &(0x7f0000005840)=[@assoc={0x18, 0x117, 0x4, 0x5}, @assoc={0x18}], 0x30, 0x100000c0}, {0x0, 0x0, &(0x7f0000005ac0)=[{&(0x7f0000005880)="711c7b981358675454eab0d5e2719e9e5bf76a738393221d5efde97c51babfe677c798c29b82445c6bf1df7a95f943fab90fe18b38a54a0d5a050b4db61a85fe236ae1836ce7a62185cb025ba50fd76e29e8968a1019cb59e88741ceafc0a8ed68a62cc08e69c8b6fcb699eae37cf848a0c601d7b630a8c6412b5be4125b77d09b244b28e2fd94de71ed4a1541afb313e28fbb157c03dd37f65a979b2192a5ceca0daaee7b86801b0f99f78e85cd2dfa2f", 0xb1}, {&(0x7f0000005940)="c6bbe8f0552c2d9e0945c8c3ce4763330e9c1d3bc64d0a95d12c06f1070d6ed7f4b2466a8fc1fb9f9a5577c4d5828c6fceb79821a7e64eb6264c4eb86dc38afe060cb670532d8ee59a0220", 0x4b}, {&(0x7f00000059c0)="dc58903999ce1e91623b9ad8c7455f44609e83dbf4146eb069fd583e9aee60b8dbafdf102d8ad2", 0x27}, {&(0x7f0000005a00)="132ac3196c6c8ce93861b7ea9666549df27550501076d2eec2269f660d71fb48d12c281140212406adf20a5226282b01e1d18912187b93b9ba93326260cc0e78b828fcae89ec879230684a0f72e1ab46a99e3256de62af7b2c8d4ac314fa7846820ef8f2ca9c1ed117327b3b2fda014df69adc5c8500c7375b7a26ef41c4cf03b1986885fced8289a8775cd893a48699408e302c1af24fa0f43005bd9863de3d4a1cf269438bdcfe1e0adf", 0xab}], 0x4, &(0x7f0000005b00)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0xc000}, {0x0, 0x0, &(0x7f0000005c40)=[{&(0x7f0000005b40)="dab3675796c4cb484d2a950163bfac60a7d85616a73ccee332ecf5ab0bb10405ee5f0fd1ef5f82b881992b986e91fe6bc409801adc61c9191a31f867f0897e84787d98cef8fde76868b1af1cc0e2a0d0e20ae10b4f31d288c499a76f55abff401523edd341dd9a2ebcb9375e15475e3dd7fe0d737f70e40982ef174cddb1916049496033780e737622ae221475c5b501515b403fed98ec65c0ede820769ba5c920482f60070c1c5dab1f8ab8be5301063235a65dce0905451c8ad85126d40e7783927fc35985d12c28ae11", 0xcb}], 0x1, &(0x7f0000005c80)=[@iv={0x48, 0x117, 0x2, 0x2d, "8f691639d6d1f31bca05d09cf647e9f448f098c1ec8d8e8eb4befbb3e850c53321bd33c01a9ba207208ce1fe94"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x10000}], 0x90, 0xc5}, {0x0, 0x0, &(0x7f00000060c0)=[{&(0x7f0000005d40)="9cdf6a0a164765fa92c94677520f83313cd8e1668f26598ddeded921bf6663a3d692a1374ca68affb0ff123064d32ea4e41db06babf367b7bbd23136ce5ec7a4e42b4b06f9651c2ae10823ca91a350bdc59a863cde8e5a3d125329b50fa7d4564b0d6ed19ce531cf277a6784d814f55d8af6917bdf020ce784cb5f5b1b55ee4db58f3ea96238afaf0ec0dda916c468195b88194d3d81b1cd7cc2107a2a32341778e6e02181d8d5456c848934db85fb4ba7bf080fbdb3bade793d80a03a3a743907498fb433a297f7931b600b41623acbfe90b4b72aac60ccf177ee182bc6811757", 0xe1}, {&(0x7f0000005e40)="9b6a3e7b0708eed681eefa4f548a36ffc39349e376dbee68e91d5ca8c665b1abe69ee38d2056a7ec78b7cb90fe8e49ad96f246840472a02f83ce939038f5eb2c719f047aeba4a3382459f66fd8e195b683cf9e20b8e4fddd0b173a853ba9e8f9b8d588691a7b7f92dda7b5de4c20fa2f38e55ac835920d29b8f1b322ad251d3ebe78baf2aba45194791828ef32add788ebcede98bfb1f8ecfc56acc45588defa", 0xa0}, {&(0x7f0000005f00)="28a8676c2f3d2637fa9de762c76dfce01e04babf1ebe39b23c5b39234709f6b810e2c3214e512840a796e8cbeaa370f021231d15e97e25e62fc3b6327e326cd6cf533ef381f1957ab327a035f575208ab86e2ec0292c8a929bd30bac11624936188a4578f54a616ddee5601563bc26438fa2db166659146dbea9da5b632871a43d54a5337d96788672e29c36a4c6b1a3b429179d91e1c0a86351eb1cd73c4ab14137edc26662a48cc65152918d33912be679", 0xb2}, {&(0x7f0000005fc0)="30c2151720dcb6a676bdcf1d368d2994a0734f6f0acc9d373c51c6d9536e8f5820228951bdb62b10769ee0ed917c0a60383b22effb8e8cac65180698d185c510fbddbcfe82d3e4232f76cd8e98d1e25cbf2afa91e106f389ed4b486dfad99d3b8e05cb1b25e9ed5b2c8a26c127288451c10ff778d7e17602d66334cb630b7831f5267e8bb404ba67cfd540179b8aa2eefd74837125543112813e535b9bb39a0fd7e0e330436549982d24cf99784bd7d7ee94a3ee24ec58ea921417b2db9bbfa2277e", 0xc2}], 0x4, &(0x7f0000006100)=[@iv={0xb0, 0x117, 0x2, 0x96, "3c916caf132b10f2ec555f157eb1e91816e24f1d7bd5456db70ab28ebc72516a475ea836cf8a23dff41c8ca7f406a246839c16a2b92505ee2de3bce3d66ff22df7720d33ee6856e4b12a126aa157dc7939bfa046f825f612b2fc1c15d5bc7784d520dfe72ffb5b0810ebb287e00664c103bd22e55f32ab8d2ecbcc5ae5e6bbfd4c6a93f13d74bdea69f14c95df178a67f3cd96867395"}, @iv={0x88, 0x117, 0x2, 0x73, "fab0353bca00ab5f76b563e9796c7ae243e3173c2018264187535c5435513d427431a49df520347a9056e070b4a0f14a1d16b1398c8da636ad6effc994779e45aa38d9f9034f15a23367fcc207e2d7350fdb8017a52cb7940d42d45437699611a1d1fe27473461e14b24f975fde911cb67250e"}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x150, 0x20000000}, {0x0, 0x0, &(0x7f0000006600)=[{&(0x7f0000006280)="a35c6e57370332bed92ff168c68ad116166490b44f6986b75fb2a1170590b9b5a1e7321a504f9ac2a144ebd2af543b02af0e05ceaff81fe9bb44fdbb04ebddfdf5eb2ca28c8b396ffeb20b603e3579d409ffcd8d3dc9b84f0473fcdda10bb4fe59d222980d32ba921dad7774ef8f77500d719f37edac7f096d7196bd0024c2eacd149c2a4f60c36abb01d8023dfd264f08d279d28c9d6b95a0ce67308fc42174e4d85e958a7864642d332aa1854d80282765", 0xb2}, {&(0x7f0000006340)="ce071c98851db0bc1c033c06d1abf037c93f3c1adfed8d3c61eba161d6604271dd002b016a05015842bbcf6afdd8892ba50819a9e09d490ac515178705ee2fdf374af3da1389f77ffb47444f1a6f1813039b43a977fdc3b05ad9484d56f67e2f18e662023e788995ea5a6b8e613c67a2e40d74db4b0b8baa1aa76c913ca6d542cec7818667c6820f40c0ea16db1ff8ba055834676c2d16d1e63bfb", 0x9b}, {&(0x7f0000006400)="9a5a973dc82b710376a79cdeafa49322ac81595560430b1643603d2256b87fd810c6f1ee9e688da0a46c629daa3e75c883", 0x31}, {&(0x7f0000006440)="e9abc54e10f6c0c508e3f20aafdd4b7cd93f77795dd85ddc0d7f042e81e37850f376a73228344ce706d31783ecc45545bf4a13ef28edefe072669b221f2e8c1b9cfcaf0f85a48ab38ab09c80986431797577e5df99ecb3164e8adb42db25b5c0186721832b42e09517239f4f16cb9fd7adb79e00d2c39a1bf5873ca5df79fc4dfb2c67a02f2e2d69470de3910e5dbe3c753dacc71365e3c1d50b5539ceb33ef3677aa86b301ea32d2ebfc6cbd37944b60c9c22806d6cf63ea1e28e25b7a0a9", 0xbf}, {&(0x7f0000006500)="1617ec893bf350b83ff1ae108d897b00189c499bbf99de57e721699d8c5616f71cd9ca0079b2f414354772160810b412e5231cd31af3c33eea9a285f60b38fe3545f4ff8a7644cb94444777c07017a2d", 0x50}, {&(0x7f0000006580)="fbd4bdbaf40f94973a16ba7b8b4bd8b7925132e50c4c916b4a9bc755677384d334e84b41d8f5b0911e7fe7636cc187deb76540ede305d210ccad95880e926d0fa96675809e4cc7d0f8289c357750e81d9713", 0x52}], 0x6, 0x0, 0x0, 0x800}], 0x8, 0x800) setsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f0000006840)=0x1, 0x4) read$nci(r9, &(0x7f0000006880)=""/184, 0xb8) clock_gettime(0x0, &(0x7f0000008400)={0x0, 0x0}) recvmmsg(r7, &(0x7f0000008340)=[{{0x0, 0x0, &(0x7f0000006d00)=[{&(0x7f0000006940)=""/171, 0xab}, {&(0x7f0000006a00)=""/244, 0xf4}, {&(0x7f0000006b00)=""/169, 0xa9}, {&(0x7f0000006bc0)=""/217, 0xd9}, {&(0x7f0000006cc0)=""/44, 0x2c}], 0x5}, 0xd0f}, {{0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000006d80)=""/14, 0xe}, {&(0x7f0000006dc0)=""/208, 0xd0}, {&(0x7f0000006ec0)=""/239, 0xef}, {&(0x7f0000006fc0)=""/207, 0xcf}, {&(0x7f00000070c0)=""/14, 0xe}], 0x5, &(0x7f0000007180)=""/128, 0x80}, 0x80000000}, {{&(0x7f0000007200)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000007300)=[{&(0x7f0000007280)=""/117, 0x75}], 0x1, &(0x7f0000007340)=""/4096, 0x1000}, 0xf}], 0x3, 0x40010101, &(0x7f0000008440)={r10, r11+60000000}) 2m22.121908146s ago: executing program 2 (id=3267): prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x300) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r1, 0xffffffff80000601, 0x0, 0x0) 2m21.795778578s ago: executing program 2 (id=3268): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x82042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000003000000004d1208812361a9a3b10000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x9, 0x0, 0x0, 0x7ffc0002}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xef, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="680000000206010100000000000000000000000005000100070000000900020073797a30000000001c00078005001500100000000800124000000000080008400000202113000300686173683a6e65742c696661636500000500050002000000050004"], 0x68}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000840)={{0x0, 0x2, 0xfffffffe, 0x3, 'syz1\x00', 0x2}, 0x3, 0x3, 0x55, 0x0, 0x3, 0x65a2, 'syz0\x00', &(0x7f0000000800)=['%\x00', '1![\xb0\xfd\x00', '+\x00'], 0xa}) r7 = semget(0x1, 0x4, 0x10) semtimedop(r7, &(0x7f0000000240), 0x0, &(0x7f0000000780)={0x77359400}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x2, 0x40000000000, 0xfffffffffffffffe, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4000004, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xe, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0x80000002000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xb, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10000000000, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x81, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x2, 0x100000000000, 0xffffffffffffffff, 0x3, 0x7, 0x0, 0x7, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) readahead(0xffffffffffffffff, 0x100, 0x96) socket$packet(0x11, 0x3, 0x300) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r8, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2m20.958449754s ago: executing program 41 (id=3218): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0, 0x50) mkdirat(r0, &(0x7f0000000200)='./file0\x00', 0x81) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) flock(r0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)={0x14, 0x14, 0x105, 0x70bc26, 0x25dfdb7b, {0x11}}, 0x14}, 0x1, 0x0, 0x0, 0x8002}, 0x2005c840) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x10c5408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r3, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="e6", 0x1}], 0x1}}], 0x1, 0x24040890) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0}) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pread64(r4, &(0x7f0000000040)=""/115, 0x73, 0xeb04) r5 = socket$inet6(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000c80)={'batadv_slave_0\x00', 0x0}) r7 = dup(r5) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd2c, 0x25dfdbfd, {0x2, 0x20, 0x0, 0x0, r6}, [@IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010301}, @IFA_FLAGS={0x8, 0x8, 0xa0}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000050}, 0x200000c4) execveat(r7, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000380)={[&(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00']}, &(0x7f0000000600)={[&(0x7f0000000440)='blkio.bfq.sectors_recursive\x00', &(0x7f0000000480)='overlay\x00', &(0x7f0000000500)='\xca\x00', &(0x7f0000000540)='\x00', &(0x7f00000005c0)=',[\x00']}, 0x800) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r9 = socket(0x2c, 0x3, 0x0) close(r8) syz_open_dev$vim2m(&(0x7f0000000180), 0x80000000, 0x2) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) chdir(&(0x7f00000001c0)='./bus\x00') 2m12.284100711s ago: executing program 42 (id=3254): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[], 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'team0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001940)=ANY=[@ANYBLOB="380200004900010026bd700026ffffff0a001c6e0800000027af5aa534d6815c2e93f108000280b4e27551"], 0x38}}, 0x20048800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000300)={@rand_addr=' \x01\x00', @remote, @private1, 0x0, 0x0, 0x0, 0x500, 0x0, 0x80040306}) 2m8.903380644s ago: executing program 43 (id=3261): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d80)="170000007a006bcd9e3fe3dc6e08170007000054250000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x31, &(0x7f0000000180)=0x6, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0x7}}) socket$pppoe(0x18, 0x1, 0x0) r3 = fsopen(&(0x7f0000000040)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) 2m5.41545888s ago: executing program 44 (id=3268): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x82042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000003000000004d1208812361a9a3b10000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x9, 0x0, 0x0, 0x7ffc0002}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xef, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="680000000206010100000000000000000000000005000100070000000900020073797a30000000001c00078005001500100000000800124000000000080008400000202113000300686173683a6e65742c696661636500000500050002000000050004"], 0x68}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000840)={{0x0, 0x2, 0xfffffffe, 0x3, 'syz1\x00', 0x2}, 0x3, 0x3, 0x55, 0x0, 0x3, 0x65a2, 'syz0\x00', &(0x7f0000000800)=['%\x00', '1![\xb0\xfd\x00', '+\x00'], 0xa}) r7 = semget(0x1, 0x4, 0x10) semtimedop(r7, &(0x7f0000000240), 0x0, &(0x7f0000000780)={0x77359400}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x2, 0x40000000000, 0xfffffffffffffffe, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4000004, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xe, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0x80000002000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xb, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10000000000, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x81, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x2, 0x100000000000, 0xffffffffffffffff, 0x3, 0x7, 0x0, 0x7, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) readahead(0xffffffffffffffff, 0x100, 0x96) socket$packet(0x11, 0x3, 0x300) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r8, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 8.556754786s ago: executing program 6 (id=3746): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x6f6}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x4d2, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x5, 0x5}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003f7a7e40720c12009622010203010902120001000000000904"], 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000700)={'veth0\x00', 0x0}) r6 = socket$pptp(0x18, 0x1, 0x2) syz_open_dev$usbmon(&(0x7f0000000900), 0xa, 0x2a200) syz_open_dev$usbmon(&(0x7f00000001c0), 0x8, 0x2) close_range(r6, 0xffffffffffffffff, 0x0) syz_usb_control_io$rtl8150(r2, &(0x7f00000002c0)={0x14, &(0x7f0000000100)={0x40, 0x11, 0xf9, {0xf9, 0x11, "4374457957a7229afe65a8cb9ff83275a22370c5ebcb55d87013d1443e410c6159d883b830ac0829ecc98b573080c1248629d019089c283eecbbb60fdf90f054cab17eb209db068f967d6f54609fa4a05ee6ac86a698699041ce9724c9aa9365ca04e12f8ee20f759f45fbaa06042bfcb0eba44a66c5b85c60a194b9cf3f5ae077837264281cd2b7aa8a8653f8fbcbdda209acaa4a7799b8d09488a916e6330797ee0f4cd0a258cd7c91055dd44c0fa680a43b6d628b0cc9b0c0564e899119ffedc398d9713d60d612bf5b531aedd8c51ca09035b1037c63e770d385c36bb10873106f342fa93faa728557a71e1e78b47e60704b036aee"}}, &(0x7f00000008c0)=ANY=[@ANYBLOB="0003a2000000a203547769cfb232892c7404e03799eefc2983b68b47c65f3f37b8a54059fd623d409c82a49fb0c7750d7cd2894bde732915b94984e5edc555c72efe8a4a0cdce19f491422ff84ad6dd57e457b1cc41a39fc1c7bf33ba17decbf0055455f326ef3426a29e41b34c1e02fd2ae3bec0bcbf1d64c49d3db7480bb6bf9bc7f769fcdf0804dfc78648e1cca557017e923721a9a07f4a0ab27a2081f9220667c91b03812a4544d835452f846ce2d25a8dcbcda2556f4d773698dbaf6113244128b2a5a66b151c3091780c687a271671f74444a48ea8e54f6d7b667828a0bf2d3683d6b2a6b758c3519a2e70b000000000000000000000000007b2cf7b424bd22643e17c5600b166a01beaae692edb2c48c91e654b9679454bd7a38b73f0d4fc7"]}, &(0x7f0000000600)={0x2c, &(0x7f0000000440)={0x20, 0xd, 0xfc, "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"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000580)={0xc0, 0x5, 0x2, "278c"}, &(0x7f00000005c0)=ANY=[@ANYBLOB="040d21"]}) r7 = socket$kcm(0x29, 0x0, 0x0) r8 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x40, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000280)={r3, r8}) write$usbip_server(r8, &(0x7f0000000640)=@ret_unlink={{0x4, 0x4, 0x0, 0x1, 0x3}, {0x5}}, 0x30) sendmsg$can_raw(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x1d, r5}, 0x10, &(0x7f00000003c0)={0x0, 0x10}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="200f0a0000007200000034a9cf77000069191149614d46c533f212b1e1f52b50c36262bf78045662dd7b114a23e8267182b90d78d0a0babaaabccf5c45914d7e382f0ee84e2493f5cc73c845b6622adce107dd48b84d637efd2a49494a585d67d4463219ef1da8679bc42a42d38af6205183eb427f75317bb894586bf7f593d9a8e80da4e1a1c49903152e900eb662ea6a7f8a7123e65a480148763eda012440e36f8e2290ed61822854f750294ffce56b9ad18e82"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.838660795s ago: executing program 7 (id=3750): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r3 = syz_io_uring_setup(0x2c0, &(0x7f0000000580)={0x0, 0xec1e, 0x8, 0x40000001, 0x40000333}, &(0x7f0000000500)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x0, 0x1}) io_uring_enter(r3, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 6.473154914s ago: executing program 7 (id=3751): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001300)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000b1daed680d040000000000000000000000000000000000000400000000040000000000000803000000000000006100"], 0x0, 0x5a}, 0x20) r0 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(0x0, 0x57) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x7ab3ab93c14219c3}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0xc201}) write$tun(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd000511000400"], 0x10da) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000004780), r6) 6.454312605s ago: executing program 6 (id=3752): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) ptrace$cont(0x7, r1, 0xc, 0x80) ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x82, 0x2003) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r3) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, 0x0) syz_open_procfs(0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0xffffffffffffffb6) 5.743027094s ago: executing program 6 (id=3756): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x98, 0x8, 0xfa04, 0x98, 0x6c02, 0x1e0, 0x194, 0x194, 0x1e0, 0x194, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) 4.561094077s ago: executing program 5 (id=3759): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000a80)=@gcm_128={{0x303}, "9ff3d6661480294c", "5fa3c0bf46782bbee21b09b7446edc75", "5bee93e1", "f11bb8cba3046ce3"}, 0x28) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) socket$inet(0x2, 0x3, 0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0xe0, 0x0, &(0x7f0000000740)=[@reply_sg={0x40486312, {0x1000003, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f00000003c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000ac0)=""/4096, 0x1000, 0x1, 0x19}, @fda={0x66646185, 0x4, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0x0, 0x2}}, &(0x7f00000000c0)={0x0, 0x28, 0x48}}, 0x1000}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@flat=@handle={0x73682a85, 0x100, 0x3}, @flat=@handle={0x73682a85, 0x1100, 0x3}, @fda={0x66646185, 0xfffffffffffffff9, 0x2, 0x35}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}}, @register_looper, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000900)={@flat=@binder={0x73622a85, 0x14, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000840)=""/170, 0xaa, 0x0, 0x31}, @ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/228, 0xe4, 0x0, 0x33}}, &(0x7f0000000300)={0x0, 0x18, 0x40}}}, @increfs], 0x0, 0x0, 0x0}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="f1bc6e6dfc34102200000f00000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r7, 0x40309410, 0x0) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 4.539247785s ago: executing program 6 (id=3761): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x88, r5, 0x300, 0x70bd2d, 0x3, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008045}, 0x4080000) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x15e}]]}, 0x30}}, 0x0) 4.432734329s ago: executing program 4 (id=3762): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffffe) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, 0x0) 3.932149641s ago: executing program 6 (id=3763): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) setpgid(0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SG_IO(r2, 0x2285, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0xff}, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r3 = socket(0x6, 0x80000, 0x9) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000140)={0x7fffffff, 0x200, 0x0, 0x6}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141100) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$I2C(&(0x7f0000000040), 0x7f9f, 0x0) r5 = userfaultfd(0x80801) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) ioctl$UFFDIO_API(r5, 0xc018aa3f, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000190c0)='oom_score\x00') read$sequencer(r6, &(0x7f00000003c0)=""/130, 0x82) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000000)=[{0x0}], 0x1) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000001055091472000000000006000000a1919a000000290400000403000000092100000001220500090581030002000000"], 0x0) 3.928477518s ago: executing program 7 (id=3764): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x400002, 0x0) ioctl$KDFONTOP_GET(r2, 0x4b72, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000880)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000009c0)=0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}]}, &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x80, 0x3, 0x0, 0x9276, 0x0, 0x0, {0x1}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000002000)=ANY=[@ANYBLOB="6e85eeae94791d04e88a243546b7dc4fd4fb26769c25481c98dd061c29a6e6a09e1381075026abfd08c7e9e4"], 0x6) 3.846824036s ago: executing program 4 (id=3765): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0x92, 0x0) 3.802128639s ago: executing program 4 (id=3766): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x4927, &(0x7f0000000080)={0x0, 0xe379, 0x20000, 0x0, 0x38}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100000000010400048008000c8004000b800800020001000000a00008801c000780080077144ebb0000080006", @ANYRES64=r0], 0xd0}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="d00000000002010400000000000000000a000000440001802c00018014000300fe80000000000000000000000000002014000400fe80000000000000000000000000002f0c000280e0fe01009800feff05000340000200003c0003800c00028005000100890000002c00018014000300fe80000000000000000000000000002a14000400fe8800000000000000000000000001013c0002802c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffe00000020c000280050001"], 0xd0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) 3.429439019s ago: executing program 5 (id=3767): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x3, 0x3ffdcf, 0xaf0}, 0x50) (fail_nth: 12) 3.094808397s ago: executing program 5 (id=3768): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setresuid(0xee00, 0xee01, 0x0) setreuid(0xee01, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000006c0)=ANY=[], 0x18c) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000080)=0x7f) futex_waitv(&(0x7f0000002d40)=[{0x7, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x1) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000000)) socket$inet_mptcp(0x2, 0x1, 0x106) read$dsp(r4, &(0x7f0000000300)=""/79, 0x4f) pselect6(0x40, &(0x7f00000000c0)={0x7, 0xfffffffffffffffd, 0x9, 0x40, 0x1, 0xd}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x5, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0x8}, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 3.081198629s ago: executing program 1 (id=3769): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001e40)=""/4096, 0x1000}], 0x1}, 0xe}], 0x1, 0x40000021, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x37, 0x0, 0x18) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001840), 0x3b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x20, 0x80, 0x3, 0x7, {{0x24, 0x4, 0x0, 0x5, 0x90, 0x66, 0x0, 0x7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@rr={0x7, 0x1b, 0xfb, [@local, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @timestamp_prespec={0x44, 0x34, 0x4c, 0x3, 0xd, [{@loopback, 0x97c977d7}, {@rand_addr=0x64010102, 0xfffffffa}, {@rand_addr=0x64010102, 0xff}, {@private=0xa010100, 0x682c}, {@loopback, 0xb242}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}, @timestamp_prespec={0x44, 0x2c, 0x78, 0x3, 0x8, [{@rand_addr=0x64010101, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@loopback, 0x2}, {@broadcast, 0xfff}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x8}]}]}}}}}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x9}, {}, {0x2}}}, 0x24}}, 0x40080) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 2.74220312s ago: executing program 4 (id=3770): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x6, 0x414000) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000000140)=0x10000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r0, 0x13, 0x1, 0x8, &(0x7f0000000180)=[0x0], 0x1, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map=r2, r3, 0x1b, 0x2010, 0x0, @value=r2, @void, @void, @void, r6}, 0x20) getsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000300)=""/71, &(0x7f0000000380)=0x47) r7 = socket$inet(0x2, 0x3, 0x4) sendmsg(r7, &(0x7f0000000540)={&(0x7f00000003c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e21, @loopback}, 0x3, 0x1, 0x2, 0x1}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000440)="5db206c6f1fc6b4b78b542ad0413029f6d81b20904a7e8f716281f44fa417a7ae3ab2db50e6f071d347da07887a46390f08de96afdc4877ec1742650d56898117c3e75045e6b67d8e743d905cc41808a94e1077c5708cba326b92f975f5eb54651", 0x61}, {&(0x7f00000004c0)="459bfa6e0ae70bf06f2ef9564403e9f5abde3168d703486af6be92aa3b32868e0a4dc63e", 0x24}], 0x2}, 0x20000004) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000700)={r3, &(0x7f0000000580)="6dbe36f177271c96d46ab64b069b1c8d3cb4cb5a6574436be0e757417a791a7d0cbc79b66d82aef45ab6542a789ae3b0059b2cc1f4a197977e73a679381517935d9ad2e080ec3c3016a54dec927562e75a29f98beae2e91bab2bdfd9bc47431f1ecaea4881355ac69cbf2ac842fa4d0bc51939623fa253e8452452f8b01341e67539f8cb2b45bace1207cce34b674a395f379de41ddde05d021e300db1a35cb0b78da1bac70514a7", &(0x7f0000000640)=""/169}, 0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$unix(r2, &(0x7f0000000740)=@abs={0x0, 0x0, 0x4e22}, 0x6e) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000007c0)=0x2, 0x4) ioctl$SIOCGETSGCNT(r2, 0x89e1, &(0x7f0000000800)={@loopback, @local}) listen(0xffffffffffffffff, 0x6eb) prlimit64(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x1, 0x8000}, &(0x7f0000000880)) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000003, 0x110, r4, 0x7000) connect$rxrpc(r3, &(0x7f00000008c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x24) fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000900), &(0x7f0000000940)='./file0\x00', 0x8, 0x2) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r8, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x30, r9, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004050}, 0x80) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000b00)={0x9}) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r5, 0xc0286687, &(0x7f0000000bc0)={0x3, 0xbb, 0x66, &(0x7f0000000b40)=""/102}) syz_open_dev$admmidi(&(0x7f0000000c00), 0xfff, 0x90000) 2.549132854s ago: executing program 4 (id=3771): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0) 1.764366772s ago: executing program 7 (id=3772): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@mpls_delroute={0xa0, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_NEWDST={0x84, 0x12}]}, 0xa0}}, 0x0) 1.633813586s ago: executing program 7 (id=3773): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x4008af25, &(0x7f000011f980)={0x0, 0x0, "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", "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"}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_unix(&(0x7f0000002600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e733d756e69782c00122592c374aa815b974ae1cce2ba10f5d272a3a64c7e305f83fe7bb3e10ef7ce2bccbe107398643bd73386cb646265dff47c7dffab0f231cd57640e4ba939af8ea58f4c089db7b1f6936b7dfa016f10c179e3ba87f7bdc625d02264f86332bda373d9d831208d8fcccddedc863ba4ab58ec8992225442d1ed27480342e34071e789be3e42fb024f3ba2e75d0881d472bb19e29f6504d08e4d4e13bf4bee7d3143a0296a4a96dea0ea805aee156b5d3d185b396d197d0fd8a5d45fadd820cdc6b3dc81a1a175094ed0b9ae29f012cc3e63ef6ba2508fe538a1c13c109f32bc09c2710b3655fcc1b9a17"]) io_uring_setup(0x7d93, &(0x7f0000000140)={0x0, 0xdf07, 0x200, 0x1, 0x91}) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4000002}, 0x2}}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f00000000c0), 0x8) sendto$inet6(r5, &(0x7f0000000040)='l', 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@getqdisc={0x28, 0x26, 0x300, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xfff2, 0x2}, {0xfff3, 0xfff3}, {0x0, 0x10}}, [{0x4}]}, 0x28}}, 0x0) socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000001c0)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x2}}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}, 0x4}}, 0x10) r10 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2}, 0x10) 1.54853262s ago: executing program 4 (id=3774): syz_emit_vhci(&(0x7f0000000480)=ANY=[], 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x1c00) 1.456243902s ago: executing program 5 (id=3775): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001480)=""/4122, 0x101a, 0x99) 1.216275259s ago: executing program 5 (id=3776): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0x92, 0x0) 1.015449154s ago: executing program 5 (id=3777): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x400000000000001, 0x12f80) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000500)=""/97, 0x61}], 0x1, 0x7fff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c0) openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000d44ebb40ec188832cf690102030109021b0001", @ANYRESDEC], 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r1, 0x0, 0x0, 0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x33fe0) read$FUSE(r4, &(0x7f0000001d00)={0x2020}, 0x2020) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010102000000000000000002000000240002800c000280040001003a00000014000180080001cd4bde2a0192000000000000000c001980080002"], 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 1.015246256s ago: executing program 1 (id=3778): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80802, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, 0x0) 957.436478ms ago: executing program 1 (id=3779): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x400002, 0x0) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000100)={0x1, 0x0, 0x11, 0x11, 0x1a, &(0x7f0000000a00)}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x80, 0x3, 0x0, 0x9276, 0x0, 0x0, {0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000002000)=ANY=[@ANYBLOB="6e85eeae94791d04e88a243546b7dc4fd4fb26769c25481c98dd061c29a6e6a09e1381075026abfd08c7e9e4"], 0x6) 708.29383ms ago: executing program 6 (id=3780): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0xf9, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) read(r5, &(0x7f0000000280)=""/149, 0x95) 685.001206ms ago: executing program 1 (id=3781): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 538.850938ms ago: executing program 7 (id=3782): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x400000000000001, 0x12f80) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000500)=""/97, 0x61}], 0x1, 0x7fff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000d44ebb40ec188832cf690102030109021b0001", @ANYRESDEC], 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r2, 0x0, 0x0, 0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x33fe0) read$FUSE(r5, &(0x7f0000001d00)={0x2020}, 0x2020) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010102000000000000000002000000240002800c000280040001003a00000014000180080001cd4bde2a0192000000000000000c001980080002"], 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 538.30333ms ago: executing program 1 (id=3783): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@mpls_delroute={0xa0, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_NEWDST={0x84, 0x12}]}, 0xa0}}, 0x0) 0s ago: executing program 1 (id=3784): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001d00)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): 612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1108.050099][ T8612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1108.062662][ T8612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1108.075207][ T8612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1108.098165][ T8612] veth1_macvtap: left promiscuous mode [ 1108.103859][ T8612] veth0_macvtap: left promiscuous mode [ 1108.109614][ T8612] veth1_vlan: left promiscuous mode [ 1108.115621][ T8612] veth0_vlan: left promiscuous mode [ 1108.369689][T19155] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3325'. [ 1109.098245][ T51] Bluetooth: hci2: command tx timeout [ 1109.158403][ T8612] team0 (unregistering): Port device team_slave_1 removed [ 1109.202043][ T911] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1109.277865][ T8612] team0 (unregistering): Port device team_slave_0 removed [ 1109.329050][ T30] audit: type=1400 audit(1563.587:1448): avc: denied { watch_reads } for pid=19159 comm="syz.7.3327" path="/25" dev="tmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1109.350896][ C1] vkms_vblank_simulate: vblank timer overrun [ 1109.383875][ T911] usb 2-1: Using ep0 maxpacket: 8 [ 1109.542380][ T911] usb 2-1: no configurations [ 1109.553096][ T911] usb 2-1: can't read configurations, error -22 [ 1109.697739][ T911] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1109.864836][ T911] usb 2-1: Using ep0 maxpacket: 8 [ 1109.875653][ T911] usb 2-1: no configurations [ 1109.880268][ T911] usb 2-1: can't read configurations, error -22 [ 1109.914404][ T911] usb usb2-port1: attempt power cycle [ 1110.036318][ T51] Bluetooth: hci7: command tx timeout [ 1110.091279][T19164] mac80211_hwsim hwsim100 wlan0: entered promiscuous mode [ 1110.101238][T19164] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1110.283393][ T911] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1110.346395][ T911] usb 2-1: Using ep0 maxpacket: 8 [ 1110.400960][ T911] usb 2-1: no configurations [ 1110.431174][ T911] usb 2-1: can't read configurations, error -22 [ 1110.558363][ T8612] IPVS: stop unused estimator thread 0... [ 1110.576336][T19040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1110.596270][ T911] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1110.647291][ T911] usb 2-1: Using ep0 maxpacket: 8 [ 1110.653495][ T911] usb 2-1: no configurations [ 1110.658688][ T911] usb 2-1: can't read configurations, error -22 [ 1110.667730][ T911] usb usb2-port1: unable to enumerate USB device [ 1110.722750][T19040] 8021q: adding VLAN 0 to HW filter on device team0 [ 1110.787741][ T8595] bridge0: port 1(bridge_slave_0) entered blocking state [ 1110.794878][ T8595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1110.939878][ T8612] bridge0: port 2(bridge_slave_1) entered blocking state [ 1110.946982][ T8612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1111.442136][ T30] audit: type=1400 audit(1565.533:1449): avc: denied { read } for pid=19173 comm="syz.7.3330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1111.629828][T19080] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1111.642424][T19080] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1111.652480][T19080] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1111.675167][T19080] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1111.831033][T19040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1111.883185][T19080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1111.910581][T19080] 8021q: adding VLAN 0 to HW filter on device team0 [ 1111.943380][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.950609][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1111.979749][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.986945][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1111.992211][ T5876] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1112.179596][ T5876] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1112.194476][ T5876] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1112.264509][ T51] Bluetooth: hci7: command tx timeout [ 1112.439843][ T5876] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1112.443387][T19040] veth0_vlan: entered promiscuous mode [ 1112.484117][ T5876] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1112.493298][ T5876] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.553977][T19040] veth1_vlan: entered promiscuous mode [ 1112.559384][ T5876] usb 7-1: config 0 descriptor?? [ 1112.597682][T19080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1112.617465][T19040] veth0_macvtap: entered promiscuous mode [ 1112.641710][T19040] veth1_macvtap: entered promiscuous mode [ 1112.702149][T19040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1112.742111][T19040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1112.773537][T17593] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.801819][T17593] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.827229][T17593] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.864680][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1112.871511][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1112.881759][T17593] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.998482][ T5876] plantronics 0003:047F:FFFF.0027: item 0 4 0 8 parsing failed [ 1113.010455][ T5876] plantronics 0003:047F:FFFF.0027: parse failed [ 1113.035101][ T5876] plantronics 0003:047F:FFFF.0027: probe with driver plantronics failed with error -22 [ 1113.063004][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1113.083481][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1113.177847][T19080] veth0_vlan: entered promiscuous mode [ 1113.201127][ T8597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1113.216454][T19185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1113.222197][ T8597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1113.225228][T19185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1113.237067][T19080] veth1_vlan: entered promiscuous mode [ 1113.311028][ T30] audit: type=1400 audit(1567.320:1450): avc: denied { cmd } for pid=19219 comm="syz.1.3335" path="socket:[89136]" dev="sockfs" ino=89136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1113.434398][T19080] veth0_macvtap: entered promiscuous mode [ 1113.476400][T19080] veth1_macvtap: entered promiscuous mode [ 1113.482377][ T30] audit: type=1400 audit(1567.395:1451): avc: denied { create } for pid=19219 comm="syz.1.3335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1113.505113][ T30] audit: type=1400 audit(1567.404:1452): avc: denied { bind } for pid=19219 comm="syz.1.3335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1113.550970][T19080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1113.567890][T19080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1113.766472][ T5855] IPVS: starting estimator thread 0... [ 1113.902342][ T8597] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.928374][T19228] IPVS: using max 43 ests per chain, 103200 per kthread [ 1113.994298][ T8597] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.006585][ T8597] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.022733][ T8597] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.179801][ T8603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1114.209633][ T8603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1114.531273][T19234] jffs2: Unknown parameter 'ip_vti0' [ 1114.585414][ T8595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1114.768500][ T8595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1115.101847][ T5855] usb 7-1: USB disconnect, device number 61 [ 1115.167779][T19239] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3338'. [ 1115.226425][T19239] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3338'. [ 1115.287386][T19239] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3338'. [ 1115.466623][ T911] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 1115.655847][ T911] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1115.833870][ T911] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1115.847955][ T911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1115.868132][ T911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64 [ 1115.893368][ T911] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1115.909205][ T911] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1115.922009][ T911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.931241][ T911] usb 2-1: Product: syz [ 1115.948394][ T911] usb 2-1: Manufacturer: syz [ 1115.953856][ T911] usb 2-1: SerialNumber: syz [ 1115.989609][ T911] usb 2-1: config 0 descriptor?? [ 1116.002739][T19241] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1116.023837][ T911] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input64 [ 1116.471714][T17118] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1116.619016][T19279] syzkaller0: entered promiscuous mode [ 1116.624964][T19279] syzkaller0: entered allmulticast mode [ 1116.650450][T17118] usb 6-1: config 49 has an invalid descriptor of length 54, skipping remainder of the config [ 1116.664706][T17118] usb 6-1: config 49 has 0 interfaces, different from the descriptor's value: 1 [ 1116.669214][T19283] input: syz0 as /devices/virtual/input/input65 [ 1116.682605][T17118] usb 6-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 1116.694705][T17118] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.708396][T17118] usb 6-1: Product: syz [ 1116.708891][ T30] audit: type=1400 audit(1570.491:1453): avc: denied { read } for pid=19282 comm="syz.6.3351" name="cgroup.procs" dev="cgroup" ino=410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:sendmail_exec_t:s0" [ 1116.729280][T17118] usb 6-1: Manufacturer: syz [ 1116.749597][ T911] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1116.759416][T17118] usb 6-1: SerialNumber: syz [ 1116.844513][T19285] jffs2: Unknown parameter 'ip_vti0' [ 1116.920616][ T911] usb 5-1: Using ep0 maxpacket: 16 [ 1116.937087][ T911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1116.951670][ T911] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1116.961553][ T911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.970322][ T5855] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1116.998817][ T911] usb 5-1: config 0 descriptor?? [ 1117.046163][ T30] audit: type=1400 audit(1570.809:1454): avc: denied { create } for pid=19268 comm="syz.5.3346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1117.285598][ T5855] usb 7-1: config 0 has an invalid interface number: 84 but max is 0 [ 1117.315708][ T5855] usb 7-1: config 0 has an invalid interface number: 66 but max is 0 [ 1117.343600][ T5855] usb 7-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 1117.353100][ T5855] usb 7-1: config 0 has no interface number 0 [ 1117.359442][ T5855] usb 7-1: config 0 has no interface number 1 [ 1117.369717][ T5855] usb 7-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 1117.381097][ T5855] usb 7-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1117.433773][ T30] audit: type=1400 audit(1570.827:1455): avc: denied { write } for pid=19268 comm="syz.5.3346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1117.461312][ T5855] usb 7-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30 [ 1117.483902][ T5855] usb 7-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32 [ 1117.494456][ T5855] usb 7-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0x12, changing to 0x2 [ 1117.506275][ T5855] usb 7-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 1117.519598][ T5855] usb 7-1: config 0 interface 66 altsetting 153 endpoint 0x86 has invalid maxpacket 34869, setting to 1024 [ 1117.532462][ T5855] usb 7-1: config 0 interface 66 altsetting 153 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1117.543436][ T5855] usb 7-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216 [ 1117.559057][ T5855] usb 7-1: config 0 interface 66 has no altsetting 0 [ 1117.589293][ T5855] usb 7-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 1117.613934][ T5855] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.622839][ T5855] usb 7-1: Product: syz [ 1117.628604][ T5855] usb 7-1: Manufacturer: syz [ 1117.633916][ T5855] usb 7-1: SerialNumber: syz [ 1117.657558][ T5855] usb 7-1: config 0 descriptor?? [ 1117.670207][ T5855] ljca 7-1:0.84: bulk endpoints not found [ 1117.740013][ T911] usbhid 5-1:0.0: can't add hid device: -71 [ 1117.747152][ T911] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1117.775326][ T911] usb 5-1: USB disconnect, device number 16 [ 1117.893753][T19283] input: syz1 as /devices/virtual/input/input66 [ 1117.970011][ T5855] ljca 7-1:0.66: probe with driver ljca failed with error -71 [ 1118.007487][ T5855] usb 7-1: USB disconnect, device number 62 [ 1118.178240][T17118] usb 6-1: USB disconnect, device number 104 [ 1118.686566][T19297] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 1118.693071][T19297] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1118.736095][T19297] vhci_hcd vhci_hcd.0: Device attached [ 1118.743120][T14378] usb 2-1: USB disconnect, device number 10 [ 1118.993805][T19308] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3358'. [ 1119.114965][ T5855] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 1119.187288][ T911] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 1119.206841][T19305] batadv_slave_0: entered promiscuous mode [ 1119.214050][T19305] batadv_slave_0: left promiscuous mode [ 1119.325467][T19314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3360'. [ 1119.413896][ T911] usb 5-1: config 0 has no interfaces? [ 1119.456360][T19323] jffs2: Unknown parameter 'ip_vti0' [ 1119.461700][ T911] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1119.481936][T19316] netlink: 'syz.7.3361': attribute type 7 has an invalid length. [ 1119.507539][ T911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.518538][T19316] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3361'. [ 1119.768292][ T911] usb 5-1: config 0 descriptor?? [ 1120.081130][T19298] usbip_core: unknown command [ 1120.088270][T17118] usb 5-1: USB disconnect, device number 17 [ 1120.096731][T19298] vhci_hcd: unknown pdu 0 [ 1120.117272][T19298] usbip_core: unknown command [ 1120.140522][T16466] vhci_hcd: stop threads [ 1120.149176][T16466] vhci_hcd: release socket [ 1120.155350][ T30] audit: type=1400 audit(1573.718:1456): avc: denied { setattr } for pid=19330 comm="syz.7.3365" name="ip6_tables_names" dev="proc" ino=4026533989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1120.158967][T16466] vhci_hcd: disconnect device [ 1120.233247][ T30] audit: type=1400 audit(1573.783:1457): avc: denied { mount } for pid=19330 comm="syz.7.3365" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1120.758798][T17123] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1121.037892][T17123] usb 7-1: config 49 has an invalid descriptor of length 54, skipping remainder of the config [ 1121.073223][T17123] usb 7-1: config 49 has 0 interfaces, different from the descriptor's value: 1 [ 1121.106238][T17123] usb 7-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 1121.114757][T19353] program syz.4.3371 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1121.132618][T17123] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.151466][T17123] usb 7-1: Product: syz [ 1121.163018][T17123] usb 7-1: Manufacturer: syz [ 1121.175455][T17123] usb 7-1: SerialNumber: syz [ 1122.072056][T19364] jffs2: Unknown parameter 'ip_vti0' [ 1122.801126][T17134] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1123.014167][T17134] usb 6-1: Using ep0 maxpacket: 32 [ 1123.021588][T17134] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1123.056016][T17134] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1123.085612][T17134] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.100392][T17134] usb 6-1: Product: syz [ 1123.116643][T17134] usb 6-1: Manufacturer: syz [ 1123.139561][T17134] usb 6-1: SerialNumber: syz [ 1123.159679][T17134] usb 6-1: config 0 descriptor?? [ 1123.235892][T17123] usb 7-1: USB disconnect, device number 63 [ 1123.619653][T17134] gs_usb 6-1:0.0: Configuring for 2 interfaces [ 1123.754295][T19386] FAULT_INJECTION: forcing a failure. [ 1123.754295][T19386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1123.769075][T19386] CPU: 1 UID: 0 PID: 19386 Comm: syz.7.3383 Not tainted syzkaller #0 PREEMPT(full) [ 1123.769100][T19386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1123.769110][T19386] Call Trace: [ 1123.769116][T19386] [ 1123.769122][T19386] dump_stack_lvl+0x16c/0x1f0 [ 1123.769142][T19386] should_fail_ex+0x512/0x640 [ 1123.769164][T19386] _copy_from_iter+0x29f/0x1720 [ 1123.769179][T19386] ? __alloc_skb+0x200/0x380 [ 1123.769194][T19386] ? __pfx__copy_from_iter+0x10/0x10 [ 1123.769207][T19386] ? netlink_autobind.isra.0+0x158/0x370 [ 1123.769235][T19386] netlink_sendmsg+0x820/0xdd0 [ 1123.769263][T19386] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1123.769295][T19386] ____sys_sendmsg+0xa98/0xc70 [ 1123.769310][T19386] ? copy_msghdr_from_user+0x10a/0x160 [ 1123.769330][T19386] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1123.769346][T19386] ___sys_sendmsg+0x134/0x1d0 [ 1123.769360][T19386] ? __pfx____sys_sendmsg+0x10/0x10 [ 1123.769377][T19386] ? __lock_acquire+0x622/0x1c90 [ 1123.769421][T19386] __sys_sendmsg+0x16d/0x220 [ 1123.769443][T19386] ? __pfx___sys_sendmsg+0x10/0x10 [ 1123.769468][T19386] do_syscall_64+0xcd/0xfa0 [ 1123.769479][T19386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1123.769490][T19386] RIP: 0033:0x7f94cd38f749 [ 1123.769500][T19386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1123.769511][T19386] RSP: 002b:00007f94ce186038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1123.769527][T19386] RAX: ffffffffffffffda RBX: 00007f94cd5e5fa0 RCX: 00007f94cd38f749 [ 1123.769539][T19386] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1123.769549][T19386] RBP: 00007f94ce186090 R08: 0000000000000000 R09: 0000000000000000 [ 1123.769559][T19386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1123.769568][T19386] R13: 00007f94cd5e6038 R14: 00007f94cd5e5fa0 R15: 00007ffc38c223a8 [ 1123.769590][T19386] [ 1123.963666][ C1] vkms_vblank_simulate: vblank timer overrun [ 1123.998336][T17134] gs_usb 6-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 1124.028685][T17134] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -121 [ 1125.521534][T19407] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3386'. [ 1125.558651][ T30] audit: type=1400 audit(1578.769:1458): avc: denied { execute } for pid=19405 comm="syz.6.3387" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1125.582119][ C1] vkms_vblank_simulate: vblank timer overrun [ 1125.631448][T17123] usb 6-1: USB disconnect, device number 105 [ 1126.874924][T19417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1127.187808][T19430] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1127.197346][T19430] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1127.365416][ T5876] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1127.547147][ T5876] usb 2-1: Using ep0 maxpacket: 8 [ 1127.601530][ T5876] usb 2-1: unable to get BOS descriptor set [ 1127.654682][ T5876] usb 2-1: config 0 has no interfaces? [ 1127.696393][ T5876] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1127.739294][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.772437][ T5876] usb 2-1: Product: syz [ 1127.779276][ T5876] usb 2-1: Manufacturer: syz [ 1127.784319][ T5876] usb 2-1: SerialNumber: syz [ 1127.795787][ T5876] usb 2-1: config 0 descriptor?? [ 1127.840777][T19440] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3396'. [ 1128.030754][T19427] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1128.037793][T19427] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1128.050669][T17118] usb 2-1: USB disconnect, device number 11 [ 1128.190166][ T5876] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1128.234273][ T30] audit: type=1400 audit(1581.276:1459): avc: denied { mounton } for pid=19451 comm="syz.7.3401" path="/proc/169/task" dev="proc" ino=90433 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1128.241924][T17123] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1128.321593][T19456] tipc: Started in network mode [ 1128.326540][T19456] tipc: Node identity , cluster identity 4711 [ 1128.332651][T19456] tipc: Failed to obtain node identity [ 1128.338949][T19456] tipc: Enabling of bearer rejected, failed to enable media [ 1128.348996][T19456] syzkaller0: entered promiscuous mode [ 1128.354547][T19456] syzkaller0: entered allmulticast mode [ 1128.365931][T19456] veth0_to_bridge: mtu less than device minimum [ 1128.382260][ T5876] usb 7-1: Using ep0 maxpacket: 32 [ 1128.389105][ T5876] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1128.398755][ T5876] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1128.407854][ T5876] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.416307][ T5876] usb 7-1: Product: syz [ 1128.420460][ T5876] usb 7-1: Manufacturer: syz [ 1128.427434][ T5876] usb 7-1: SerialNumber: syz [ 1128.433821][ T5876] usb 7-1: config 0 descriptor?? [ 1128.437625][T17123] usb 6-1: Using ep0 maxpacket: 32 [ 1128.452736][T17123] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1128.463345][T17123] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1128.473469][T17123] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1128.482756][T17123] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.492552][T17123] usb 6-1: config 0 descriptor?? [ 1128.631281][T19463] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1128.640596][T19463] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1128.837086][ T5855] usb 6-1: USB disconnect, device number 106 [ 1128.841508][T19465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1128.946590][T19468] ipt_REJECT: ECHOREPLY no longer supported. [ 1128.953644][ T5876] gs_usb 7-1:0.0: Configuring for 2 interfaces [ 1129.155876][ T5876] gs_usb 7-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 1129.165006][ T5876] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -121 [ 1129.301185][T17118] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1129.423457][T19472] netlink: 'syz.5.3409': attribute type 1 has an invalid length. [ 1129.452847][T17118] usb 5-1: device descriptor read/64, error -71 [ 1129.534328][ T30] audit: type=1400 audit(1582.492:1460): avc: denied { read } for pid=19471 comm="syz.5.3409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1129.562463][T19474] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3409'. [ 1129.728022][T17118] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1129.835540][T19478] FAULT_INJECTION: forcing a failure. [ 1129.835540][T19478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1129.869476][T19478] CPU: 0 UID: 0 PID: 19478 Comm: syz.1.3410 Not tainted syzkaller #0 PREEMPT(full) [ 1129.869508][T19478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1129.869519][T19478] Call Trace: [ 1129.869525][T19478] [ 1129.869531][T19478] dump_stack_lvl+0x16c/0x1f0 [ 1129.869547][T19478] should_fail_ex+0x512/0x640 [ 1129.869562][T19478] _copy_to_iter+0x29f/0x1710 [ 1129.869578][T19478] ? chacha_block_generic+0x211/0x330 [ 1129.869592][T19478] ? __pfx__copy_to_iter+0x10/0x10 [ 1129.869608][T19478] ? lockdep_hardirqs_on+0x7c/0x110 [ 1129.869618][T19478] ? crng_make_state+0x48e/0x6d0 [ 1129.869632][T19478] get_random_bytes_user+0x17f/0x3c0 [ 1129.869644][T19478] ? __pfx_get_random_bytes_user+0x10/0x10 [ 1129.869659][T19478] ? rcu_is_watching+0x12/0xc0 [ 1129.869677][T19478] ? import_ubuf+0x1b6/0x220 [ 1129.869690][T19478] __x64_sys_getrandom+0x183/0x290 [ 1129.869703][T19478] ? __pfx___x64_sys_getrandom+0x10/0x10 [ 1129.869721][T19478] do_syscall_64+0xcd/0xfa0 [ 1129.869733][T19478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.869744][T19478] RIP: 0033:0x7f307e98f749 [ 1129.869753][T19478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1129.869764][T19478] RSP: 002b:00007f307f821038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 1129.869774][T19478] RAX: ffffffffffffffda RBX: 00007f307ebe6090 RCX: 00007f307e98f749 [ 1129.869781][T19478] RDX: 0000000000000000 RSI: 00000000ffffff9a RDI: 0000200000000240 [ 1129.869788][T19478] RBP: 00007f307f821090 R08: 0000000000000000 R09: 0000000000000000 [ 1129.869794][T19478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1129.869800][T19478] R13: 00007f307ebe6128 R14: 00007f307ebe6090 R15: 00007ffdf4c71898 [ 1129.869814][T19478] [ 1130.058509][T17118] usb 5-1: device descriptor read/64, error -71 [ 1130.180832][T17118] usb usb5-port1: attempt power cycle [ 1130.551290][T17118] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1130.596569][T17118] usb 5-1: device descriptor read/8, error -71 [ 1130.838689][T19484] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1130.861088][T17118] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1130.894767][T17118] usb 5-1: device descriptor read/8, error -71 [ 1131.021605][T17118] usb usb5-port1: unable to enumerate USB device [ 1131.124896][ T24] usb 7-1: USB disconnect, device number 64 [ 1131.169319][ T30] audit: type=1400 audit(1584.017:1461): avc: denied { kexec_image_load } for pid=19486 comm="syz.6.3414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1131.469273][ T30] audit: type=1400 audit(1584.297:1462): avc: denied { read } for pid=19495 comm="syz.1.3417" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1131.494541][ T30] audit: type=1400 audit(1584.297:1463): avc: denied { open } for pid=19495 comm="syz.1.3417" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1131.713235][T19501] No control pipe specified [ 1133.159646][ T30] audit: type=1400 audit(1585.878:1464): avc: denied { read } for pid=19521 comm="syz.5.3423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1134.255359][T19540] FAULT_INJECTION: forcing a failure. [ 1134.255359][T19540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1134.272887][T19540] CPU: 0 UID: 0 PID: 19540 Comm: syz.6.3427 Not tainted syzkaller #0 PREEMPT(full) [ 1134.272911][T19540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1134.272921][T19540] Call Trace: [ 1134.272926][T19540] [ 1134.272933][T19540] dump_stack_lvl+0x16c/0x1f0 [ 1134.272954][T19540] should_fail_ex+0x512/0x640 [ 1134.272976][T19540] _copy_to_user+0x32/0xd0 [ 1134.273000][T19540] simple_read_from_buffer+0xcb/0x170 [ 1134.273028][T19540] proc_fail_nth_read+0x197/0x240 [ 1134.273050][T19540] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1134.273073][T19540] ? rw_verify_area+0xcf/0x6c0 [ 1134.273098][T19540] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1134.273120][T19540] vfs_read+0x1e4/0xcf0 [ 1134.273142][T19540] ? __pfx___mutex_lock+0x10/0x10 [ 1134.273160][T19540] ? __pfx_vfs_read+0x10/0x10 [ 1134.273191][T19540] ? __fget_files+0x20e/0x3c0 [ 1134.273217][T19540] ksys_read+0x12a/0x250 [ 1134.273233][T19540] ? __pfx_ksys_read+0x10/0x10 [ 1134.273249][T19540] ? fput+0x9b/0xd0 [ 1134.273274][T19540] do_syscall_64+0xcd/0xfa0 [ 1134.273294][T19540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.273312][T19540] RIP: 0033:0x7f123bd8e15c [ 1134.273328][T19540] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1134.273345][T19540] RSP: 002b:00007f123cc94030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1134.273361][T19540] RAX: ffffffffffffffda RBX: 00007f123bfe5fa0 RCX: 00007f123bd8e15c [ 1134.273373][T19540] RDX: 000000000000000f RSI: 00007f123cc940a0 RDI: 0000000000000004 [ 1134.273383][T19540] RBP: 00007f123cc94090 R08: 0000000000000000 R09: 0000000000000000 [ 1134.273394][T19540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1134.273405][T19540] R13: 00007f123bfe6038 R14: 00007f123bfe5fa0 R15: 00007ffef7749928 [ 1134.273428][T19540] [ 1134.414677][T19541] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 1134.484521][ T30] audit: type=1400 audit(1587.057:1465): avc: denied { connect } for pid=19539 comm="syz.1.3428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1135.015894][T19555] ipt_REJECT: ECHOREPLY no longer supported. [ 1135.715375][T17123] usb 6-1: new full-speed USB device number 107 using dummy_hcd [ 1136.980842][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 1137.276675][T17123] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1137.374820][T17123] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1137.424611][T17123] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1137.518553][T17123] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64 [ 1137.529965][T17123] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1137.545638][T17123] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1137.560329][T17123] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.574210][T17123] usb 6-1: Product: syz [ 1137.599392][T17123] usb 6-1: Manufacturer: syz [ 1137.614970][T17123] usb 6-1: SerialNumber: syz [ 1137.642719][T17123] usb 6-1: config 0 descriptor?? [ 1137.656179][T19559] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1137.684870][T17123] input: KB Gear Tablet as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input67 [ 1137.703239][ T5855] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1137.895709][ T5855] usb 5-1: Using ep0 maxpacket: 8 [ 1137.902531][ T5855] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1137.924882][ T5855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.948739][ T5855] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1137.962045][ T5855] pvrusb2: ********** [ 1137.966043][ T5855] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1137.978977][ T5855] pvrusb2: Important functionality might not be entirely working. [ 1137.990290][ T5855] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1138.001865][ T5855] pvrusb2: ********** [ 1138.046928][T19588] kvm: MONITOR instruction emulated as NOP! [ 1138.130766][T17118] usb 7-1: new full-speed USB device number 65 using dummy_hcd [ 1138.138094][T19590] kvm: emulating exchange as write [ 1138.314380][T17118] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1138.333928][T17118] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1138.356488][T17118] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1138.395035][T19572] CUSE: unknown device info "" [ 1138.400355][T19572] CUSE: zero length info key specified [ 1138.404076][T17118] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.432550][T17118] usb 7-1: config 0 descriptor?? [ 1138.459845][T17118] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1138.474996][T19592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3438'. [ 1138.480983][T17118] dvb-usb: bulk message failed: -22 (3/0) [ 1138.507602][ T2328] pvrusb2: Invalid write control endpoint [ 1138.531551][T17118] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1138.574507][T17118] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1138.609386][T17118] usb 7-1: media controller created [ 1138.627648][T17118] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1138.627809][ T2328] pvrusb2: Invalid write control endpoint [ 1138.649751][T17118] dvb-usb: bulk message failed: -22 (6/0) [ 1138.657006][T17118] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1138.668232][ T2328] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1138.707844][ T2328] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1138.708365][T17118] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input68 [ 1138.741609][T19582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1138.759141][T17118] dvb-usb: schedule remote query interval to 150 msecs. [ 1138.764901][T19582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1138.785469][T17118] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1138.793153][ T2328] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1138.857543][ T2328] pvrusb2: Device being rendered inoperable [ 1138.886460][ T2328] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 1138.920120][ T2328] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1138.967940][T17118] dvb-usb: bulk message failed: -22 (1/0) [ 1138.973704][ T2328] pvrusb2: Attached sub-driver cx25840 [ 1138.997261][T17118] dvb-usb: error while querying for an remote control event. [ 1139.001459][ T2328] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1139.065599][ T2328] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1139.182674][ T24] usb 6-1: USB disconnect, device number 107 [ 1139.200892][T17134] dvb-usb: bulk message failed: -22 (1/0) [ 1139.217421][T17134] dvb-usb: error while querying for an remote control event. [ 1139.333139][T19601] binder: BINDER_SET_CONTEXT_MGR already set [ 1139.369264][T19601] binder: 19599:19601 ioctl 4018620d 200000000040 returned -16 [ 1139.424435][T17134] dvb-usb: bulk message failed: -22 (1/0) [ 1139.448717][T17134] dvb-usb: error while querying for an remote control event. [ 1139.556173][T19605] netlink: 'syz.1.3447': attribute type 12 has an invalid length. [ 1139.672117][ T5876] dvb-usb: bulk message failed: -22 (1/0) [ 1139.689295][ T5876] dvb-usb: error while querying for an remote control event. [ 1139.909429][ T5876] dvb-usb: bulk message failed: -22 (1/0) [ 1139.929933][ T5876] dvb-usb: error while querying for an remote control event. [ 1140.129961][ T5876] dvb-usb: bulk message failed: -22 (1/0) [ 1140.143745][ T5876] dvb-usb: error while querying for an remote control event. [ 1140.291342][ T30] audit: type=1400 audit(1592.547:1466): avc: denied { accept } for pid=19621 comm="syz.7.3451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1140.375781][T17134] dvb-usb: bulk message failed: -22 (1/0) [ 1140.399269][T17134] dvb-usb: error while querying for an remote control event. [ 1140.469600][ T30] audit: type=1400 audit(1592.716:1467): avc: denied { mount } for pid=19621 comm="syz.7.3451" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1140.600247][T17134] dvb-usb: bulk message failed: -22 (1/0) [ 1140.606106][T17134] dvb-usb: error while querying for an remote control event. [ 1140.708160][T17134] usb 5-1: USB disconnect, device number 22 [ 1140.792712][ T5876] dvb-usb: bulk message failed: -22 (1/0) [ 1140.799448][ T5876] dvb-usb: error while querying for an remote control event. [ 1140.976547][T17134] dvb-usb: bulk message failed: -22 (1/0) [ 1140.983780][ T30] audit: type=1326 audit(1593.202:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19625 comm="syz.4.3452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5996d8f749 code=0x7ffc0000 [ 1140.983973][T19629] batadv_slave_0: entered promiscuous mode [ 1141.021898][T17134] dvb-usb: error while querying for an remote control event. [ 1141.069648][T19629] batadv_slave_0: left promiscuous mode [ 1141.088233][ T30] audit: type=1326 audit(1593.202:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19625 comm="syz.4.3452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f5996d8f749 code=0x7ffc0000 [ 1141.164254][ T30] audit: type=1326 audit(1593.202:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19625 comm="syz.4.3452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5996d8f749 code=0x7ffc0000 [ 1141.231116][T17134] dvb-usb: bulk message failed: -22 (1/0) [ 1141.238224][T17134] dvb-usb: error while querying for an remote control event. [ 1141.259612][ T30] audit: type=1326 audit(1593.202:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19625 comm="syz.4.3452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f5996d8f749 code=0x7ffc0000 [ 1141.347516][ T30] audit: type=1326 audit(1593.202:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19625 comm="syz.4.3452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5996d8f749 code=0x7ffc0000 [ 1141.473915][T19635] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20002 [ 1141.481782][ T5876] dvb-usb: bulk message failed: -22 (1/0) [ 1141.509095][ T5876] dvb-usb: error while querying for an remote control event. [ 1141.510203][ T30] audit: type=1326 audit(1593.202:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19625 comm="syz.4.3452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f5996d8f749 code=0x7ffc0000 [ 1141.692078][ T30] audit: type=1326 audit(1593.202:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19625 comm="syz.4.3452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5996d8f749 code=0x7ffc0000 [ 1141.739333][ T30] audit: type=1326 audit(1593.202:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19625 comm="syz.4.3452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5996d8f749 code=0x7ffc0000 [ 1141.798967][T17118] dvb-usb: bulk message failed: -22 (1/0) [ 1141.804719][T17118] dvb-usb: error while querying for an remote control event. [ 1142.044542][ T5876] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1142.063506][T17118] dvb-usb: bulk message failed: -22 (1/0) [ 1142.070644][T17118] dvb-usb: error while querying for an remote control event. [ 1142.225256][ T5876] usb 6-1: Using ep0 maxpacket: 32 [ 1142.254751][ T5876] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1142.269502][T17118] dvb-usb: bulk message failed: -22 (1/0) [ 1142.275266][T17118] dvb-usb: error while querying for an remote control event. [ 1142.294599][ T5876] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1142.305105][ T5876] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1142.321846][ T5876] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1142.331808][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1142.340176][ T5876] usb 6-1: Product: syz [ 1142.384352][ T5876] usb 6-1: Manufacturer: syz [ 1142.416791][ T5876] usb 6-1: SerialNumber: syz [ 1142.459878][ T5876] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input69 [ 1142.469376][T17118] dvb-usb: bulk message failed: -22 (1/0) [ 1142.475241][T17118] dvb-usb: error while querying for an remote control event. [ 1142.674239][T17118] dvb-usb: bulk message failed: -22 (1/0) [ 1142.680072][T17118] dvb-usb: error while querying for an remote control event. [ 1142.769960][T19582] warn_alloc: 1 callbacks suppressed [ 1142.769973][T19582] syz.6.3441: vmalloc error: size 283115520, failed to allocated page array size 552960, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1142.829112][T19582] CPU: 0 UID: 0 PID: 19582 Comm: syz.6.3441 Not tainted syzkaller #0 PREEMPT(full) [ 1142.829129][T19582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1142.829136][T19582] Call Trace: [ 1142.829142][T19582] [ 1142.829148][T19582] dump_stack_lvl+0x16c/0x1f0 [ 1142.829162][T19582] warn_alloc+0x248/0x3a0 [ 1142.829186][T19582] ? __pfx_warn_alloc+0x10/0x10 [ 1142.829212][T19582] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 1142.829226][T19582] ? __vmalloc_node_noprof+0xad/0xf0 [ 1142.829244][T19582] __vmalloc_node_range_noprof+0xfe2/0x1480 [ 1142.829274][T19582] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 1142.829303][T19582] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1142.829325][T19582] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 1142.829338][T19582] vmalloc_user_noprof+0x9e/0xe0 [ 1142.829352][T19582] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 1142.829365][T19582] vb2_vmalloc_alloc+0x135/0x3f0 [ 1142.829380][T19582] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 1142.829398][T19582] __vb2_queue_alloc+0x8c9/0x1280 [ 1142.829429][T19582] vb2_core_reqbufs+0xa90/0xfe0 [ 1142.829455][T19582] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1142.829489][T19582] __vb2_init_fileio+0x3f1/0x1100 [ 1142.829513][T19582] ? __pfx_ref_tracker_free+0x10/0x10 [ 1142.829540][T19582] vb2_core_poll+0x5ec/0x700 [ 1142.829562][T19582] vb2_poll+0x4b/0xe0 [ 1142.829581][T19582] vb2_fop_poll+0x10f/0x2c0 [ 1142.829602][T19582] ? __pfx_vb2_fop_poll+0x10/0x10 [ 1142.829619][T19582] v4l2_poll+0x163/0x320 [ 1142.829643][T19582] ? __pfx_v4l2_poll+0x10/0x10 [ 1142.829666][T19582] do_sys_poll+0x55c/0xdf0 [ 1142.829693][T19582] ? __pfx_do_sys_poll+0x10/0x10 [ 1142.829707][T19582] ? __lock_acquire+0x622/0x1c90 [ 1142.829746][T19582] ? futex_unqueue+0x13d/0x2c0 [ 1142.829778][T19582] ? __pfx_pollwake+0x10/0x10 [ 1142.829805][T19582] ? __pfx_pollwake+0x10/0x10 [ 1142.829822][T19582] ? __pfx_pollwake+0x10/0x10 [ 1142.829855][T19582] ? do_futex+0x122/0x350 [ 1142.829865][T19582] ? __pfx_do_futex+0x10/0x10 [ 1142.829875][T19582] ? set_user_sigmask+0x21b/0x2b0 [ 1142.829888][T19582] ? __pfx_set_user_sigmask+0x10/0x10 [ 1142.829903][T19582] __x64_sys_ppoll+0x254/0x2d0 [ 1142.829915][T19582] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 1142.829924][T19582] ? ksys_write+0x1ac/0x250 [ 1142.829935][T19582] ? __pfx_ksys_write+0x10/0x10 [ 1142.829949][T19582] do_syscall_64+0xcd/0xfa0 [ 1142.829962][T19582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.829973][T19582] RIP: 0033:0x7f123bd8f749 [ 1142.829982][T19582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1142.829993][T19582] RSP: 002b:00007f123cc94038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1142.830004][T19582] RAX: ffffffffffffffda RBX: 00007f123bfe5fa0 RCX: 00007f123bd8f749 [ 1142.830011][T19582] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 1142.830018][T19582] RBP: 00007f123be13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1142.830024][T19582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1142.830030][T19582] R13: 00007f123bfe6038 R14: 00007f123bfe5fa0 R15: 00007ffef7749928 [ 1142.830044][T19582] [ 1142.830054][T19582] Mem-Info: [ 1143.140518][T17118] dvb-usb: bulk message failed: -22 (1/0) [ 1143.151899][T17118] dvb-usb: error while querying for an remote control event. [ 1143.396948][T17118] dvb-usb: bulk message failed: -22 (1/0) [ 1143.408519][T17118] dvb-usb: error while querying for an remote control event. [ 1143.595008][ T5876] dvb-usb: bulk message failed: -22 (1/0) [ 1143.602729][ T5876] dvb-usb: error while querying for an remote control event. [ 1143.636408][T19582] active_anon:17514 inactive_anon:0 isolated_anon:0 [ 1143.636408][T19582] active_file:22284 inactive_file:41060 isolated_file:0 [ 1143.636408][T19582] unevictable:2805 dirty:483 writeback:0 [ 1143.636408][T19582] slab_reclaimable:13263 slab_unreclaimable:125778 [ 1143.636408][T19582] mapped:47264 shmem:2720 pagetables:1739 [ 1143.636408][T19582] sec_pagetables:0 bounce:0 [ 1143.636408][T19582] kernel_misc_reclaimable:0 [ 1143.636408][T19582] free:1033108 free_pcp:48011 free_cma:0 [ 1143.767031][T19582] Node 0 active_anon:65356kB inactive_anon:0kB active_file:89136kB inactive_file:164040kB unevictable:9684kB isolated(anon):0kB isolated(file):0kB mapped:189056kB dirty:1932kB writeback:0kB shmem:4344kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:8192kB kernel_stack:14516kB pagetables:6804kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1143.799508][T17118] dvb-usb: bulk message failed: -22 (1/0) [ 1143.816545][T17118] dvb-usb: error while querying for an remote control event. [ 1143.899525][T19582] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1144.003204][T19653] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3458'. [ 1144.352833][T17118] dvb-usb: bulk message failed: -22 (1/0) [ 1144.385360][T17118] dvb-usb: error while querying for an remote control event. [ 1144.394611][T19582] Node 0 DMA free:13036kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:2048kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:2048kB bounce:0kB free_pcp:248kB local_pcp:124kB free_cma:0kB [ 1144.427315][T19582] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 1144.433310][T19582] Node 0 DMA32 free:227456kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:70052kB inactive_anon:0kB active_file:89136kB inactive_file:164040kB unevictable:7680kB writepending:1936kB zspages:0kB present:3129332kB managed:2544852kB mlocked:6144kB bounce:0kB free_pcp:173368kB local_pcp:98404kB free_cma:0kB [ 1144.469186][T19582] lowmem_reserve[]: 0 0 1 1 1 [ 1144.474494][T19582] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1144.504745][T19582] lowmem_reserve[]: 0 0 0 0 0 [ 1144.513822][T19582] Node 1 Normal free:3897504kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:12220kB local_pcp:11976kB free_cma:0kB [ 1144.554460][T17134] usb 6-1: USB disconnect, device number 108 [ 1144.562154][T17118] dvb-usb: bulk message failed: -22 (1/0) [ 1144.568009][T17118] dvb-usb: error while querying for an remote control event. [ 1144.604249][T19582] lowmem_reserve[]: 0 0 0 0 0 [ 1144.614239][T17134] appletouch 6-1:1.0: input: appletouch disconnected [ 1144.657292][T19582] Node 0 DMA: 3*4kB (U) 2*8kB (U) 3*16kB (U) 3*32kB (U) 1*64kB (U) 2*128kB (U) 3*256kB (U) 3*512kB (U) 4*1024kB (U) 1*2048kB (U) 1*4096kB (M) = 13036kB [ 1144.677891][T19582] Node 0 DMA32: 2990*4kB (UME) 1271*8kB (UME) 937*16kB (UME) 1037*32kB (UME) 641*64kB (UME) 223*128kB (UME) 101*256kB (UME) 72*512kB (UME) 23*1024kB (UM) 1*2048kB (M) 0*4096kB = 228192kB [ 1144.699659][T19582] Node 0 Normal: 0*4kB [ 1144.738103][T17118] dvb-usb: bulk message failed: -22 (1/0) [ 1144.758683][T17118] dvb-usb: error while querying for an remote control event. [ 1144.767374][T19582] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1144.780227][T19582] Node 1 Normal: 122*4kB (UME) 47*8kB (UME) 46*16kB (UME) 185*32kB (UME) 57*64kB (UME) 28*128kB (UME) 5*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3897504kB [ 1144.811777][T19582] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1144.822544][T19582] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1144.831914][T19582] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1144.843673][T19582] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1144.857004][T19582] 64791 total pagecache pages [ 1144.862378][T19582] 0 pages in swap cache [ 1144.866712][T19582] Free swap = 124996kB [ 1144.870913][T19582] Total swap = 124996kB [ 1144.881661][T19582] 2097051 pages RAM [ 1144.887173][T19582] 0 pages HighMem/MovableOnly [ 1144.892001][T19582] 428748 pages reserved [ 1144.896503][T19582] 0 pages cma reserved [ 1144.928555][T19659] overlayfs: failed to get inode (-116) [ 1144.941323][T17118] dvb-usb: bulk message failed: -22 (1/0) [ 1144.947147][T17118] dvb-usb: error while querying for an remote control event. [ 1144.973665][T19659] overlayfs: failed to get inode (-116) [ 1144.991465][T19661] overlayfs: failed to get inode (-116) [ 1144.997300][T19661] overlayfs: failed to get inode (-116) [ 1145.144065][T17134] dvb-usb: bulk message failed: -22 (1/0) [ 1145.149912][T17134] dvb-usb: error while querying for an remote control event. [ 1145.373694][T17134] dvb-usb: bulk message failed: -22 (1/0) [ 1145.379813][T17134] dvb-usb: error while querying for an remote control event. [ 1145.550099][T17134] dvb-usb: bulk message failed: -22 (1/0) [ 1145.944435][T17134] dvb-usb: error while querying for an remote control event. [ 1146.154682][T17134] dvb-usb: bulk message failed: -22 (1/0) [ 1146.165111][T17134] dvb-usb: error while querying for an remote control event. [ 1146.386556][T17118] dvb-usb: bulk message failed: -22 (1/0) [ 1146.392539][T17118] dvb-usb: error while querying for an remote control event. [ 1146.502574][T17134] usb 7-1: USB disconnect, device number 65 [ 1146.651655][T17134] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1148.190164][ T51] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 1148.207135][T19705] fuse: Unknown parameter 'fd0000000000000000000000000000000000000000' [ 1148.868070][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 1148.868088][ T30] audit: type=1400 audit(1600.583:1533): avc: denied { setattr } for pid=19716 comm="syz.1.3474" name="SCTPv6" dev="sockfs" ino=93230 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1149.255590][T19732] netlink: 'syz.6.3469': attribute type 39 has an invalid length. [ 1151.699322][T19739] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.770525][T17118] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1151.943092][T17118] usb 5-1: Using ep0 maxpacket: 16 [ 1151.987385][T17118] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1152.010815][T17118] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1152.029253][T17118] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1152.056326][T17118] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.080805][T17118] usb 5-1: config 0 descriptor?? [ 1152.281576][T19739] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.521632][T19739] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.632101][T17118] hid (null): bogus close delimiter [ 1152.664819][T17118] mcp2221 0003:04D8:00DD.0028: bogus close delimiter [ 1152.715429][T17118] mcp2221 0003:04D8:00DD.0028: item 0 2 2 10 parsing failed [ 1152.738551][T19739] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.760321][T17118] mcp2221 0003:04D8:00DD.0028: can't parse reports [ 1152.794910][T17118] mcp2221 0003:04D8:00DD.0028: probe with driver mcp2221 failed with error -22 [ 1152.980701][ T8597] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.877059][T16466] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.948167][ T8595] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.074599][ T65] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.150413][T17119] usb 5-1: USB disconnect, device number 23 [ 1154.231495][ T30] audit: type=1400 audit(1605.596:1534): avc: denied { name_connect } for pid=19770 comm="syz.6.3487" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1154.258124][T19776] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3488'. [ 1154.370972][ T5807] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1154.513508][T19786] overlayfs: missing 'workdir' [ 1154.542439][ T5807] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1154.630104][ T5807] usb 2-1: Dual-Role OTG device on HNP port [ 1154.688457][ T5807] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=7a.b1 [ 1154.697712][T17134] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1154.759153][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.782976][ T5807] usb 2-1: Product: syz [ 1154.787832][ T5807] usb 2-1: Manufacturer: syz [ 1154.800297][ T5807] usb 2-1: SerialNumber: syz [ 1154.814625][ T5807] usb 2-1: config 0 descriptor?? [ 1154.849047][ T5807] usb_ehset_test 2-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 1154.915184][T17134] usb 6-1: Using ep0 maxpacket: 16 [ 1154.959136][T17134] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 1155.003445][T17134] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1155.041119][T17134] usb 6-1: config 0 has no interface number 0 [ 1155.065564][ T5855] usb 2-1: USB disconnect, device number 12 [ 1155.076319][T17134] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1155.139032][T17134] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.157536][T17134] usb 6-1: Product: syz [ 1155.168308][T17134] usb 6-1: Manufacturer: syz [ 1155.206463][T17134] usb 6-1: SerialNumber: syz [ 1155.226017][T17134] usb 6-1: config 0 descriptor?? [ 1156.197499][ T5807] libceph: connect (1)[c::]:6789 error -101 [ 1156.316606][ T30] audit: type=1400 audit(1607.448:1535): avc: denied { create } for pid=19795 comm="syz.6.3495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1156.380117][ T5807] libceph: mon0 (1)[c::]:6789 connect error [ 1156.389164][T19802] ceph: No mds server is up or the cluster is laggy [ 1156.417344][T19806] hfs: can't find a HFS filesystem on dev nullb0 [ 1156.850497][ T5855] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 1157.025421][ T5855] usb 7-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1157.051006][ T5855] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.070611][ T5855] usb 7-1: config 0 descriptor?? [ 1157.086220][ T5855] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1157.507997][ T5855] gspca_sunplus: reg_w_riv err -71 [ 1157.513300][ T5855] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 1157.522684][ T5855] usb 7-1: USB disconnect, device number 66 [ 1157.667162][T17134] uvcvideo 6-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1157.684011][ T30] audit: type=1400 audit(1608.814:1536): avc: denied { validate_trans } for pid=19830 comm="syz.1.3502" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1157.704144][T17134] uvcvideo 6-1:0.105: No valid video chain found. [ 1157.756853][T17134] usb 6-1: USB disconnect, device number 110 [ 1158.036675][ T5855] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1158.209288][ T5855] usb 2-1: Using ep0 maxpacket: 8 [ 1158.218351][T17134] usb 6-1: new full-speed USB device number 111 using dummy_hcd [ 1158.250057][ T5855] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1158.268138][ T5855] usb 2-1: config 4 interface 0 has no altsetting 0 [ 1158.278013][ T5855] usb 2-1: string descriptor 0 read error: -22 [ 1158.285345][ T5855] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1158.294658][ T5855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.309585][ T5855] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1158.355790][ T5855] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1158.380508][ T5855] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1158.387680][ T5855] usb 2-1: media controller created [ 1158.435741][ T5855] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1158.494503][T17134] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1158.663662][T17134] usb 6-1: not running at top speed; connect to a high speed hub [ 1158.685736][T17134] usb 6-1: config 1 has 3 interfaces, different from the descriptor's value: 16 [ 1159.015230][T19846] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1159.221337][T19845] netlink: 'syz.6.3507': attribute type 58 has an invalid length. [ 1159.229937][T17134] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 1159.260814][ T5855] usb 2-1: USB disconnect, device number 13 [ 1159.280841][T17134] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1159.290223][T17134] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.302018][T17134] usb 6-1: Product: syz [ 1159.306242][T17134] usb 6-1: Manufacturer: syz [ 1159.311267][T17134] usb 6-1: SerialNumber: syz [ 1159.322368][T19851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3508'. [ 1159.379540][T19853] FAULT_INJECTION: forcing a failure. [ 1159.379540][T19853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1159.393830][T19853] CPU: 0 UID: 0 PID: 19853 Comm: syz.4.3509 Not tainted syzkaller #0 PREEMPT(full) [ 1159.393855][T19853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1159.393866][T19853] Call Trace: [ 1159.393873][T19853] [ 1159.393880][T19853] dump_stack_lvl+0x16c/0x1f0 [ 1159.393905][T19853] should_fail_ex+0x512/0x640 [ 1159.393930][T19853] _copy_from_user+0x2e/0xd0 [ 1159.393952][T19853] copy_from_sockptr_offset+0x15c/0x1b0 [ 1159.393974][T19853] ? __pfx_copy_from_sockptr_offset+0x10/0x10 [ 1159.393997][T19853] ? bpf_lsm_capable+0x9/0x10 [ 1159.394016][T19853] ? security_capable+0x7e/0x260 [ 1159.394046][T19853] do_ipt_set_ctl+0x479/0xae0 [ 1159.394070][T19853] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 1159.394088][T19853] ? find_held_lock+0x2b/0x80 [ 1159.394110][T19853] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 1159.394130][T19853] ? lockdep_hardirqs_on+0x7c/0x110 [ 1159.394145][T19853] ? sockopt_release_sock+0x52/0x60 [ 1159.394168][T19853] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1159.394186][T19853] ? sockopt_release_sock+0x52/0x60 [ 1159.394220][T19853] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 1159.394240][T19853] nf_setsockopt+0x8d/0xf0 [ 1159.394257][T19853] ip_setsockopt+0xcb/0xf0 [ 1159.394278][T19853] udp_setsockopt+0x7d/0xd0 [ 1159.394296][T19853] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1159.394326][T19853] do_sock_setsockopt+0xf3/0x1d0 [ 1159.394355][T19853] __sys_setsockopt+0x1a0/0x230 [ 1159.394381][T19853] __x64_sys_setsockopt+0xbd/0x160 [ 1159.394398][T19853] ? do_syscall_64+0x91/0xfa0 [ 1159.394413][T19853] ? lockdep_hardirqs_on+0x7c/0x110 [ 1159.394428][T19853] do_syscall_64+0xcd/0xfa0 [ 1159.394446][T19853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.394464][T19853] RIP: 0033:0x7f5996d8f749 [ 1159.394479][T19853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1159.394497][T19853] RSP: 002b:00007f5997b3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1159.394515][T19853] RAX: ffffffffffffffda RBX: 00007f5996fe5fa0 RCX: 00007f5996d8f749 [ 1159.394526][T19853] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 1159.394537][T19853] RBP: 00007f5997b3f090 R08: 00000000000003a8 R09: 0000000000000000 [ 1159.394547][T19853] R10: 0000200000000c00 R11: 0000000000000246 R12: 0000000000000001 [ 1159.394557][T19853] R13: 00007f5996fe6038 R14: 00007f5996fe5fa0 R15: 00007ffdaaf63f58 [ 1159.394582][T19853] [ 1159.971655][ T5855] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1161.033084][T19874] netlink: 'syz.4.3516': attribute type 21 has an invalid length. [ 1161.040999][ T5855] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1161.041164][T19874] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3516'. [ 1161.083167][ T5855] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.167563][ T5855] usb 7-1: config 0 descriptor?? [ 1161.196237][T17134] usb 6-1: unit 5 not found! [ 1161.258279][T17134] usb 6-1: USB disconnect, device number 111 [ 1161.423633][T19855] hpfs: Bad magic ... probably not HPFS [ 1161.662028][ T5992] udevd[5992]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1161.761212][ T5855] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1161.768940][ T30] audit: type=1400 audit(1612.331:1537): avc: denied { create } for pid=19854 comm="syz.6.3510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1162.516841][ T5855] [drm:udl_init] *ERROR* Selecting channel failed [ 1162.693121][ T30] audit: type=1400 audit(1612.341:1538): avc: denied { write } for pid=19854 comm="syz.6.3510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1162.761873][ T5876] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1162.946430][ T5876] usb 2-1: too many configurations: 13, using maximum allowed: 8 [ 1162.962826][ T5855] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 1162.972195][ T5876] usb 2-1: config 0 has no interfaces? [ 1162.981858][ T5876] usb 2-1: config 0 has no interfaces? [ 1162.989704][ T5876] usb 2-1: config 0 has no interfaces? [ 1163.003417][ T5876] usb 2-1: config 0 has no interfaces? [ 1163.099320][ T5876] usb 2-1: config 0 has no interfaces? [ 1163.113294][ T5876] usb 2-1: config 0 has no interfaces? [ 1163.127190][ T5876] usb 2-1: config 0 has no interfaces? [ 1163.132301][ T5855] [drm] Initialized udl on minor 2 [ 1163.139284][ T5876] usb 2-1: config 0 has no interfaces? [ 1163.172821][ T5876] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1163.262796][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.579734][ T5876] usb 2-1: Product: syz [ 1163.584628][ T5855] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1163.601467][ T5855] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1163.609381][T17123] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1163.633491][ T5876] usb 2-1: Manufacturer: syz [ 1163.653640][T17123] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1163.668036][ T5855] usb 7-1: USB disconnect, device number 67 [ 1163.669157][ T5876] usb 2-1: SerialNumber: syz [ 1163.704896][ T5876] usb 2-1: config 0 descriptor?? [ 1163.998256][ T5876] usb 2-1: USB disconnect, device number 14 [ 1164.192075][T19899] infiniband syz2: set active [ 1164.196972][T19899] infiniband syz2: added veth0_vlan [ 1164.282222][T19899] RDS/IB: syz2: added [ 1164.290694][T19899] smc: adding ib device syz2 with port count 1 [ 1164.297597][T19899] smc: ib device syz2 port 1 has pnetid SY (user defined) [ 1164.790299][ T5876] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1164.943482][ T5876] usb 2-1: device descriptor read/64, error -71 [ 1165.210738][ T5876] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1165.381183][ T5876] usb 2-1: device descriptor read/64, error -71 [ 1165.509715][ T5876] usb usb2-port1: attempt power cycle [ 1167.639878][ T30] audit: type=1400 audit(1618.140:1539): avc: denied { ioctl } for pid=19957 comm="syz.6.3536" path="socket:[93949]" dev="sockfs" ino=93949 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1169.089494][T19978] Cannot find add_set index 1 as target [ 1169.134983][T19978] input: syz1 as /devices/virtual/input/input71 [ 1169.452330][ T30] audit: type=1400 audit(1619.833:1540): avc: denied { ioctl } for pid=19989 comm="syz.6.3544" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1170.092527][T20004] ipt_REJECT: ECHOREPLY no longer supported. [ 1170.692132][ T5876] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1170.828584][T20002] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1170.910239][ T5876] usb 7-1: device descriptor read/64, error -71 [ 1170.951777][ T30] audit: type=1400 audit(1621.236:1541): avc: denied { setopt } for pid=20011 comm="syz.4.3550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1171.196844][ T5876] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1171.283775][T17123] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1171.359375][ T5876] usb 7-1: device descriptor read/64, error -71 [ 1171.453372][T17123] usb 5-1: Using ep0 maxpacket: 8 [ 1171.461129][T17123] usb 5-1: config 0 has an invalid interface number: 78 but max is 0 [ 1171.471167][T17123] usb 5-1: config 0 has no interface number 0 [ 1171.482096][T17123] usb 5-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=f0.21 [ 1171.491394][T17123] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.499664][T17123] usb 5-1: Product: syz [ 1171.503866][T17123] usb 5-1: Manufacturer: syz [ 1171.506828][ T5876] usb usb7-port1: attempt power cycle [ 1171.508952][T17123] usb 5-1: SerialNumber: syz [ 1171.525465][T17123] usb 5-1: config 0 descriptor?? [ 1171.754676][T17123] usbhid 5-1:0.78: couldn't find an input interrupt endpoint [ 1171.766716][T17123] usb 5-1: USB disconnect, device number 24 [ 1171.881768][ T5876] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1171.902795][ T5876] usb 7-1: device descriptor read/8, error -71 [ 1172.801533][ T5876] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1172.830290][T20030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1172.846223][ T5876] usb 7-1: device descriptor read/8, error -71 [ 1172.919801][T20039] jffs2: Unknown parameter 'ip_vti0' [ 1172.966608][ T5876] usb usb7-port1: unable to enumerate USB device [ 1173.674969][ T30] audit: type=1400 audit(1623.724:1542): avc: denied { ioctl } for pid=20044 comm="syz.5.3561" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1173.687694][T20047] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1174.246522][T20053] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1174.971326][ T30] audit: type=1400 audit(1624.978:1543): avc: denied { ioctl } for pid=20060 comm="syz.5.3567" path="socket:[94820]" dev="sockfs" ino=94820 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1175.292083][ T30] audit: type=1400 audit(1624.996:1544): avc: denied { getopt } for pid=20060 comm="syz.5.3567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1175.372715][ T30] audit: type=1400 audit(1625.371:1545): avc: denied { setopt } for pid=20064 comm="syz.1.3566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1175.419658][T17119] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1175.448661][ T30] audit: type=1400 audit(1625.399:1546): avc: denied { name_connect } for pid=20064 comm="syz.1.3566" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1175.565444][ T30] audit: type=1400 audit(1625.548:1547): avc: denied { ioctl } for pid=20064 comm="syz.1.3566" path="socket:[95406]" dev="sockfs" ino=95406 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1175.590658][T17119] usb 6-1: Using ep0 maxpacket: 8 [ 1175.731032][T17119] usb 6-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 1175.748399][T17119] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1175.759255][T17119] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.815330][ T5876] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 1175.879151][T20075] ipt_REJECT: ECHOREPLY no longer supported. [ 1176.143594][ T24] usb 6-1: USB disconnect, device number 112 [ 1176.254985][ T5876] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=54.c3 [ 1176.273152][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.282961][ T5876] usb 2-1: config 0 descriptor?? [ 1176.297897][ T5876] usb_ehset_test 2-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 1176.349675][T17119] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1176.499334][T17119] usb 7-1: device descriptor read/64, error -71 [ 1176.509466][ T24] usb 2-1: USB disconnect, device number 18 [ 1176.758116][T17119] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1176.922215][T20084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1176.980379][T17119] usb 7-1: device descriptor read/64, error -71 [ 1177.065949][ T5876] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1177.098217][T17119] usb usb7-port1: attempt power cycle [ 1177.236961][ T5876] usb 6-1: Using ep0 maxpacket: 32 [ 1177.243514][ T5876] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1177.251834][ T5876] usb 6-1: config 0 has no interface number 0 [ 1177.257938][ T5876] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1177.266651][ T5876] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1177.275763][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.286686][ T5876] usb 6-1: Product: syz [ 1177.291137][ T5876] usb 6-1: Manufacturer: syz [ 1177.295732][ T5876] usb 6-1: SerialNumber: syz [ 1177.302756][ T5876] usb 6-1: config 0 descriptor?? [ 1177.328238][ T5876] smsc75xx v1.0.0 [ 1177.461504][T17119] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1177.506614][T17119] usb 7-1: device descriptor read/8, error -71 [ 1177.771482][T17119] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 1177.779440][T20099] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 1177.837537][T17119] usb 7-1: device descriptor read/8, error -71 [ 1177.975101][T17119] usb usb7-port1: unable to enumerate USB device [ 1178.112144][ T5876] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1178.143223][ T5876] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1178.545348][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.554154][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.385286][T20115] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 1179.469261][ T30] audit: type=1400 audit(1629.196:1548): avc: denied { mount } for pid=20114 comm="syz.1.3583" name="/" dev="pstore" ino=3319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 1179.809559][T20126] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3584'. [ 1179.836835][ T30] audit: type=1400 audit(1629.552:1549): avc: denied { accept } for pid=20119 comm="syz.6.3584" laddr=172.20.20.170 lport=44583 faddr=224.0.0.2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1179.973879][T17119] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1180.074621][T20131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1180.134137][T17119] usb 2-1: Using ep0 maxpacket: 32 [ 1180.140858][T17119] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1180.149319][T17119] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1180.158547][T17119] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.166650][T17119] usb 2-1: Product: syz [ 1180.170826][T17119] usb 2-1: Manufacturer: syz [ 1180.175413][T17119] usb 2-1: SerialNumber: syz [ 1180.182029][T17119] usb 2-1: config 0 descriptor?? [ 1180.324073][ T5876] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000300: -71 [ 1180.335113][ T5876] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write ADDR_FILTX: -71 [ 1180.345152][ T5876] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 1180.354774][ T5876] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1180.364534][ T5876] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 1180.375721][ T5876] usb 6-1: USB disconnect, device number 113 [ 1180.621591][T17119] gs_usb 2-1:0.0: Configuring for 2 interfaces [ 1180.898446][T17119] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 1180.907631][T17119] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -121 [ 1180.948575][T20139] input: syz1 as /devices/virtual/input/input72 [ 1181.049280][T17119] IPVS: starting estimator thread 0... [ 1181.224740][T20142] IPVS: using max 43 ests per chain, 103200 per kthread [ 1181.800840][T20151] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1181.800840][T20151] program syz.4.3592 not setting count and/or reply_len properly [ 1182.029873][T20151] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=25 sclass=netlink_tcpdiag_socket pid=20151 comm=syz.4.3592 [ 1182.436914][T17123] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 1182.452218][T17123] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1182.541586][T20169] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3596'. [ 1182.552226][T20169] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3596'. [ 1182.635877][ T5876] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 1182.819587][ T5876] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1182.833791][ T5876] usb 7-1: config 0 has no interface number 0 [ 1182.842338][ T5876] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1182.853535][ T5876] usb 7-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1182.872792][ T5876] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.902753][ T5876] usb 7-1: config 0 descriptor?? [ 1182.942733][ T5807] usb 2-1: USB disconnect, device number 19 [ 1183.271771][ T30] audit: type=1400 audit(1632.695:1550): avc: denied { connect } for pid=20185 comm="syz.1.3600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1183.379912][ T30] audit: type=1400 audit(1632.863:1551): avc: denied { bind } for pid=20185 comm="syz.1.3600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1183.443152][ T30] audit: type=1400 audit(1632.873:1552): avc: denied { listen } for pid=20185 comm="syz.1.3600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1183.472039][ T30] audit: type=1400 audit(1632.873:1553): avc: denied { accept } for pid=20185 comm="syz.1.3600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1183.504622][ T5876] prodikeys 0003:041E:2801.002A: bogus close delimiter [ 1183.544730][ T5876] prodikeys 0003:041E:2801.002A: item 0 0 2 10 parsing failed [ 1183.561298][ T5876] prodikeys 0003:041E:2801.002A: hid parse failed [ 1183.850360][ T5876] prodikeys 0003:041E:2801.002A: probe with driver prodikeys failed with error -22 [ 1183.918758][ T5876] usb 7-1: USB disconnect, device number 76 [ 1184.024565][T20196] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3602'. [ 1184.406283][T20210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1184.707156][ T30] audit: type=1400 audit(1634.098:1554): avc: denied { create } for pid=20218 comm="syz.6.3610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1185.276359][ T30] audit: type=1400 audit(1634.566:1555): avc: denied { bind } for pid=20218 comm="syz.6.3610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1186.032574][T20235] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3613'. [ 1186.059142][ T30] audit: type=1400 audit(1635.370:1556): avc: denied { ioctl } for pid=20234 comm="syz.4.3613" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1186.084434][T20235] openvswitch: netlink: Message has 4 unknown bytes. [ 1186.473360][T20243] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1186.563744][ T5876] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1186.666160][ T5812] Bluetooth: hci3: command 0x1003 tx timeout [ 1186.672131][ T51] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1186.773147][ T5876] usb 5-1: device descriptor read/64, error -71 [ 1188.194927][ T5876] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1189.850514][ T30] audit: type=1400 audit(1638.906:1557): avc: denied { ioctl } for pid=20263 comm="syz.7.3623" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x9423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1189.913216][T20267] veth1_to_bond: entered allmulticast mode [ 1190.012521][T20272] ipt_REJECT: ECHOREPLY no longer supported. [ 1190.269956][ T30] audit: type=1400 audit(1638.971:1558): avc: denied { accept } for pid=20263 comm="syz.7.3623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1190.301647][ T30] audit: type=1400 audit(1639.308:1559): avc: denied { read } for pid=20263 comm="syz.7.3623" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1190.332967][ T5807] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1190.420400][T20265] netlink: 84 bytes leftover after parsing attributes in process `syz.7.3623'. [ 1190.441892][ T30] audit: type=1400 audit(1639.308:1560): avc: denied { open } for pid=20263 comm="syz.7.3623" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1190.488663][ T30] audit: type=1400 audit(1639.308:1561): avc: denied { ioctl } for pid=20263 comm="syz.7.3623" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1190.515187][ T5807] usb 6-1: device descriptor read/64, error -71 [ 1190.635790][T20265] bond0: (slave bond_slave_1): Releasing backup interface [ 1190.742089][T20285] jffs2: Unknown parameter 'ip_vti0' [ 1190.749661][T20284] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1190.793149][ T5807] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1190.966793][ T5807] usb 6-1: device descriptor read/64, error -71 [ 1191.146076][ T5807] usb usb6-port1: attempt power cycle [ 1191.258213][T20295] FAULT_INJECTION: forcing a failure. [ 1191.258213][T20295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1191.316061][T20295] CPU: 0 UID: 3327 PID: 20295 Comm: syz.4.3629 Not tainted syzkaller #0 PREEMPT(full) [ 1191.316087][T20295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1191.316098][T20295] Call Trace: [ 1191.316104][T20295] [ 1191.316111][T20295] dump_stack_lvl+0x16c/0x1f0 [ 1191.316134][T20295] should_fail_ex+0x512/0x640 [ 1191.316160][T20295] strncpy_from_user+0x3b/0x2e0 [ 1191.316181][T20295] getname_flags.part.0+0x8f/0x550 [ 1191.316208][T20295] getname_flags+0x93/0xf0 [ 1191.316224][T20295] do_sys_openat2+0xb8/0x1d0 [ 1191.316247][T20295] ? __pfx_do_sys_openat2+0x10/0x10 [ 1191.316270][T20295] ? __fget_files+0x20e/0x3c0 [ 1191.316291][T20295] __x64_sys_openat+0x174/0x210 [ 1191.316315][T20295] ? __pfx___x64_sys_openat+0x10/0x10 [ 1191.316335][T20295] ? ksys_write+0x1ac/0x250 [ 1191.316360][T20295] do_syscall_64+0xcd/0xfa0 [ 1191.316376][T20295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.316392][T20295] RIP: 0033:0x7f5996d8f749 [ 1191.316406][T20295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1191.316421][T20295] RSP: 002b:00007f5997b3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1191.316437][T20295] RAX: ffffffffffffffda RBX: 00007f5996fe5fa0 RCX: 00007f5996d8f749 [ 1191.316447][T20295] RDX: 000000000000275a RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1191.316457][T20295] RBP: 00007f5997b3f090 R08: 0000000000000000 R09: 0000000000000000 [ 1191.316467][T20295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1191.316476][T20295] R13: 00007f5996fe6038 R14: 00007f5996fe5fa0 R15: 00007ffdaaf63f58 [ 1191.316498][T20295] [ 1191.559463][T20298] netlink: 'syz.1.3630': attribute type 17 has an invalid length. [ 1191.567334][T20298] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3630'. [ 1191.576367][T20298] macvtap0: entered allmulticast mode [ 1191.581718][T20298] veth0_macvtap: entered allmulticast mode [ 1191.588314][T20298] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 1191.744314][ T5807] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1191.994685][ T5807] usb 6-1: device descriptor read/8, error -71 [ 1192.143421][T20305] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1192.168304][ T30] audit: type=1400 audit(525929.081:1562): avc: denied { getopt } for pid=20304 comm="syz.6.3633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1192.364312][ T5807] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1192.428795][ T5807] usb 6-1: device descriptor read/8, error -71 [ 1192.578283][ T5807] usb usb6-port1: unable to enumerate USB device [ 1192.588721][T17123] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1192.749072][T17123] usb 5-1: Using ep0 maxpacket: 16 [ 1192.773692][T17123] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1192.792549][T17123] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1192.815090][T17123] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1192.834547][T17123] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.853659][T17123] usb 5-1: Product: syz [ 1192.864413][T17123] usb 5-1: Manufacturer: syz [ 1192.870354][T17123] usb 5-1: SerialNumber: syz [ 1193.114010][T17123] usb 5-1: 0:2 : does not exist [ 1193.181010][T17123] usb 5-1: USB disconnect, device number 27 [ 1193.269410][ T5992] udevd[5992]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1194.485395][ T30] audit: type=1400 audit(525931.252:1563): avc: denied { block_suspend } for pid=20342 comm="syz.1.3645" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1194.677303][ T30] audit: type=1400 audit(525931.429:1564): avc: denied { bind } for pid=20346 comm="syz.6.3646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1194.832753][ T30] audit: type=1400 audit(525931.429:1565): avc: denied { write } for pid=20346 comm="syz.6.3646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1195.740642][ T30] audit: type=1400 audit(525931.897:1566): avc: denied { listen } for pid=20351 comm="syz.6.3647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1196.627371][T20373] 9pnet_fd: Insufficient options for proto=fd [ 1196.647846][ T30] audit: type=1400 audit(525933.272:1567): avc: denied { setopt } for pid=20370 comm="syz.5.3653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1197.719089][ T30] audit: type=1400 audit(525934.264:1568): avc: denied { accept } for pid=20393 comm="syz.5.3660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1197.898935][T20399] batadv0: entered promiscuous mode [ 1198.062756][ T5855] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1198.193015][ T30] audit: type=1400 audit(525934.723:1569): avc: denied { accept } for pid=20409 comm="syz.5.3665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1198.243989][ T5855] usb 2-1: Using ep0 maxpacket: 16 [ 1198.264314][ T5855] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1198.291487][ T5855] usb 2-1: config 0 has no interface number 0 [ 1198.499369][ T5855] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1198.518485][ T5855] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1198.528653][ T5855] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1198.537799][ T5855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.590829][ T5855] usb 2-1: config 0 descriptor?? [ 1199.043623][T20397] netlink: 'syz.1.3661': attribute type 10 has an invalid length. [ 1199.104319][T20397] team0: Port device dummy0 added [ 1199.121579][T20425] syzkaller0: entered promiscuous mode [ 1199.127056][T20425] syzkaller0: entered allmulticast mode [ 1199.144923][T20425] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 1199.490237][T20436] ipt_REJECT: ECHOREPLY no longer supported. [ 1199.613055][T20397] openvswitch: netlink: Key type 4127 is out of range max 32 [ 1199.808916][T20438] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3672'. [ 1200.964680][ T51] block nbd4: Receive control failed (result -32) [ 1200.975866][T20440] block nbd4: shutting down sockets [ 1200.998749][ T5855] usbhid 2-1:0.1: can't add hid device: -71 [ 1201.004759][ T5855] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 1201.057304][ T5855] usb 2-1: USB disconnect, device number 20 [ 1201.063327][ T30] audit: type=1400 audit(525937.398:1570): avc: denied { connect } for pid=20443 comm="syz.5.3675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1201.162423][ T30] audit: type=1400 audit(525937.398:1571): avc: denied { write } for pid=20443 comm="syz.5.3675" laddr=::1 lport=28758 faddr=::1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1201.791985][ T5855] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1202.042332][ T51] Bluetooth: hci7: link tx timeout [ 1202.080736][ T51] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 1202.230859][ T5855] usb 5-1: Using ep0 maxpacket: 32 [ 1202.253447][ T5855] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1202.280550][ T5855] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1202.312819][ T5855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.346492][ T5855] usb 5-1: Product: syz [ 1202.352722][ T5855] usb 5-1: Manufacturer: syz [ 1202.361648][ T5855] usb 5-1: SerialNumber: syz [ 1202.396992][ T5855] usb 5-1: config 0 descriptor?? [ 1202.632258][T20472] sock: sock_timestamping_bind_phc: sock not bind to device [ 1202.859316][ T5855] gs_usb 5-1:0.0: Configuring for 2 interfaces [ 1203.117796][ T5876] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1203.318178][ T5855] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 1203.336968][ T5855] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -121 [ 1203.502271][ T5876] usb 2-1: Using ep0 maxpacket: 32 [ 1203.509165][ T5876] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1203.518101][ T5876] usb 2-1: config 0 has no interface number 0 [ 1203.524317][ T5876] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1203.533062][ T5876] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1203.542166][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.550381][ T5876] usb 2-1: Product: syz [ 1203.554555][ T5876] usb 2-1: Manufacturer: syz [ 1203.562905][ T5876] usb 2-1: SerialNumber: syz [ 1203.578080][ T5876] usb 2-1: config 0 descriptor?? [ 1203.586580][ T5876] smsc75xx v1.0.0 [ 1204.172033][ T5807] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 1204.296722][ T5812] Bluetooth: hci7: command 0x0406 tx timeout [ 1204.336313][ T5807] usb 7-1: Using ep0 maxpacket: 8 [ 1204.344854][ T5807] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1204.353508][ T5807] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1204.362519][ T5807] usb 7-1: config 1 has no interface number 1 [ 1204.368730][ T5807] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1204.381580][ T5807] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 61, changing to 7 [ 1204.394569][ T5807] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1204.403768][ T5876] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1204.414549][ T5807] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.422549][ T5876] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1204.431742][ T5807] usb 7-1: Product: syz [ 1204.436011][ T5807] usb 7-1: Manufacturer: syz [ 1204.440766][ T5807] usb 7-1: SerialNumber: syz [ 1205.296711][ T5807] usb 7-1: 2:1 : sample bitwidth 64 in over sample bytes 5 [ 1205.315119][ T5807] usb 7-1: 2:1 : unsupported sample bitwidth 64 in 5 bytes [ 1205.324015][T17118] usb 5-1: USB disconnect, device number 28 [ 1205.358389][ T5807] usb 7-1: USB disconnect, device number 77 [ 1205.386355][ T30] audit: type=1400 audit(525941.449:1572): avc: denied { ioctl } for pid=20497 comm="syz.4.3688" path="socket:[97859]" dev="sockfs" ino=97859 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1205.691915][T20501] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1205.849961][ T30] audit: type=1400 audit(525941.730:1573): avc: denied { mounton } for pid=20497 comm="syz.4.3688" path="mnt:[4026534877]" dev="nsfs" ino=4026534877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1206.014832][T20500] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 1206.200757][ T30] audit: type=1400 audit(525942.207:1574): avc: denied { map } for pid=20505 comm="syz.7.3690" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1206.386279][T20506] FAULT_INJECTION: forcing a failure. [ 1206.386279][T20506] name failslab, interval 1, probability 0, space 0, times 0 [ 1206.399568][ T5876] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1206.431024][ T5876] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1206.441059][ T30] audit: type=1400 audit(525942.207:1575): avc: denied { execute } for pid=20505 comm="syz.7.3690" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1206.528766][T20512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1206.769706][T20506] CPU: 1 UID: 0 PID: 20506 Comm: syz.7.3690 Not tainted syzkaller #0 PREEMPT(full) [ 1206.769730][T20506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1206.769741][T20506] Call Trace: [ 1206.769747][T20506] [ 1206.769754][T20506] dump_stack_lvl+0x16c/0x1f0 [ 1206.769775][T20506] should_fail_ex+0x512/0x640 [ 1206.769796][T20506] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1206.769824][T20506] should_failslab+0xc2/0x120 [ 1206.769843][T20506] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1206.769868][T20506] ? vm_area_dup+0x27/0x8d0 [ 1206.769895][T20506] ? vm_area_dup+0x27/0x8d0 [ 1206.769915][T20506] vm_area_dup+0x27/0x8d0 [ 1206.769940][T20506] __split_vma+0x18e/0x1070 [ 1206.769962][T20506] ? bpf_ksym_find+0x127/0x1c0 [ 1206.769987][T20506] ? __pfx___split_vma+0x10/0x10 [ 1206.770008][T20506] ? is_bpf_text_address+0x94/0x1a0 [ 1206.770042][T20506] vms_gather_munmap_vmas+0x1cb/0x1340 [ 1206.770066][T20506] ? _parse_integer_limit+0x17f/0x1d0 [ 1206.770094][T20506] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1206.770117][T20506] ? _kstrtoull+0x145/0x200 [ 1206.770141][T20506] ? __pfx__kstrtoull+0x10/0x10 [ 1206.770177][T20506] ? find_held_lock+0x2b/0x80 [ 1206.770202][T20506] do_vmi_align_munmap+0x286/0x7e0 [ 1206.770229][T20506] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1206.770287][T20506] do_vmi_munmap+0x204/0x3e0 [ 1206.770314][T20506] __vm_munmap+0x196/0x380 [ 1206.770340][T20506] ? __pfx___vm_munmap+0x10/0x10 [ 1206.770364][T20506] ? __kvm_handle_async_pf+0xa0/0xb0 [ 1206.770398][T20506] ? __pfx_ksys_write+0x10/0x10 [ 1206.770419][T20506] __x64_sys_munmap+0x59/0x80 [ 1206.770439][T20506] do_syscall_64+0xcd/0xfa0 [ 1206.770456][T20506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.770473][T20506] RIP: 0033:0x7f94cd38f749 [ 1206.770487][T20506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1206.770502][T20506] RSP: 002b:00007f94ce186038 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 1206.770518][T20506] RAX: ffffffffffffffda RBX: 00007f94cd5e5fa0 RCX: 00007f94cd38f749 [ 1206.770529][T20506] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000200000001000 [ 1206.770539][T20506] RBP: 00007f94ce186090 R08: 0000000000000000 R09: 0000000000000000 [ 1206.770548][T20506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1206.770558][T20506] R13: 00007f94cd5e6038 R14: 00007f94cd5e5fa0 R15: 00007ffc38c223a8 [ 1206.770581][T20506] [ 1206.789435][ T5876] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1206.789566][ T5876] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 1206.809677][ T5876] usb 2-1: USB disconnect, device number 21 [ 1206.838579][T20500] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3687'. [ 1207.088559][T20519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1207.765203][T20520] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1207.982327][T20502] tty tty1: ldisc open failed (-12), clearing slot 0 [ 1208.462628][ T30] audit: type=1400 audit(525944.321:1576): avc: denied { read } for pid=20537 comm="syz.6.3699" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1208.462818][T20541] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3700'. [ 1208.509325][ T30] audit: type=1400 audit(525944.321:1577): avc: denied { read } for pid=20537 comm="syz.6.3699" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1208.533016][ T30] audit: type=1400 audit(525944.321:1579): avc: denied { open } for pid=20537 comm="syz.6.3699" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1208.563271][T20539] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1208.565044][T20539] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1208.580458][T20539] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1208.580500][T20539] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1208.581058][T20539] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1208.581102][T20539] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1208.588659][T20539] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1208.589259][T20539] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1208.589288][T20539] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1208.592666][T20539] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1208.593211][T20539] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1208.593550][T20539] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1208.595921][T20539] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1208.603599][T20539] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1208.603629][T20539] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1208.609266][ T30] audit: type=1400 audit(525944.321:1578): avc: denied { open } for pid=20537 comm="syz.6.3699" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1209.249224][T20553] vti0: entered promiscuous mode [ 1209.426358][T20556] FAULT_INJECTION: forcing a failure. [ 1209.426358][T20556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1209.444271][T20556] CPU: 0 UID: 0 PID: 20556 Comm: syz.6.3705 Not tainted syzkaller #0 PREEMPT(full) [ 1209.444294][T20556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1209.444304][T20556] Call Trace: [ 1209.444310][T20556] [ 1209.444316][T20556] dump_stack_lvl+0x16c/0x1f0 [ 1209.444339][T20556] should_fail_ex+0x512/0x640 [ 1209.444355][T20556] _copy_from_user+0x2e/0xd0 [ 1209.444371][T20556] copy_msghdr_from_user+0x98/0x160 [ 1209.444386][T20556] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1209.444407][T20556] ___sys_sendmsg+0xfe/0x1d0 [ 1209.444422][T20556] ? __pfx____sys_sendmsg+0x10/0x10 [ 1209.444435][T20556] ? __lock_acquire+0x622/0x1c90 [ 1209.444462][T20556] __sys_sendmsg+0x16d/0x220 [ 1209.444476][T20556] ? __pfx___sys_sendmsg+0x10/0x10 [ 1209.444499][T20556] do_syscall_64+0xcd/0xfa0 [ 1209.444511][T20556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.444522][T20556] RIP: 0033:0x7f123bd8f749 [ 1209.444531][T20556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1209.444541][T20556] RSP: 002b:00007f123cc94038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1209.444552][T20556] RAX: ffffffffffffffda RBX: 00007f123bfe5fa0 RCX: 00007f123bd8f749 [ 1209.444559][T20556] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 1209.444565][T20556] RBP: 00007f123cc94090 R08: 0000000000000000 R09: 0000000000000000 [ 1209.444571][T20556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1209.444577][T20556] R13: 00007f123bfe6038 R14: 00007f123bfe5fa0 R15: 00007ffef7749928 [ 1209.444600][T20556] [ 1210.050782][T17118] usb 6-1: new full-speed USB device number 118 using dummy_hcd [ 1210.221473][ T30] audit: type=1400 audit(525945.968:1580): avc: denied { bind } for pid=20566 comm="syz.4.3707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1210.224088][T20567] input: syz0 as /devices/virtual/input/input73 [ 1210.259261][T17118] usb 6-1: config index 0 descriptor too short (expected 68, got 34) [ 1210.267506][T17118] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1210.281680][T17118] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1210.303421][T17118] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.320248][T17118] usb 6-1: Product: syz [ 1210.325001][T17118] usb 6-1: Manufacturer: syz [ 1210.325133][ T30] audit: type=1400 audit(525946.071:1581): avc: denied { write } for pid=20566 comm="syz.4.3707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1210.329624][T17118] usb 6-1: SerialNumber: syz [ 1210.337534][T17118] usb 6-1: config 0 descriptor?? [ 1210.366437][ T5876] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1210.514463][T20574] FAULT_INJECTION: forcing a failure. [ 1210.514463][T20574] name failslab, interval 1, probability 0, space 0, times 0 [ 1210.527287][T20574] CPU: 0 UID: 0 PID: 20574 Comm: syz.4.3709 Not tainted syzkaller #0 PREEMPT(full) [ 1210.527311][T20574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1210.527320][T20574] Call Trace: [ 1210.527330][T20574] [ 1210.527340][T20574] dump_stack_lvl+0x16c/0x1f0 [ 1210.527359][T20574] should_fail_ex+0x512/0x640 [ 1210.527380][T20574] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 1210.527407][T20574] should_failslab+0xc2/0x120 [ 1210.527428][T20574] kmem_cache_alloc_node_noprof+0x78/0x770 [ 1210.527454][T20574] ? __alloc_skb+0x2b2/0x380 [ 1210.527481][T20574] ? __alloc_skb+0x2b2/0x380 [ 1210.527501][T20574] ? __pfx_netlink_insert+0x10/0x10 [ 1210.527524][T20574] __alloc_skb+0x2b2/0x380 [ 1210.527544][T20574] ? __pfx___alloc_skb+0x10/0x10 [ 1210.527564][T20574] ? netlink_autobind.isra.0+0x158/0x370 [ 1210.527592][T20574] netlink_alloc_large_skb+0x69/0x140 [ 1210.527619][T20574] netlink_sendmsg+0x698/0xdd0 [ 1210.527646][T20574] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1210.527681][T20574] sock_write_iter+0x566/0x610 [ 1210.527700][T20574] ? __pfx_sock_write_iter+0x10/0x10 [ 1210.527726][T20574] ? bpf_lsm_file_permission+0x9/0x10 [ 1210.527744][T20574] ? security_file_permission+0x71/0x210 [ 1210.527767][T20574] ? rw_verify_area+0xcf/0x6c0 [ 1210.527795][T20574] vfs_write+0x7d3/0x11d0 [ 1210.527813][T20574] ? __pfx_sock_write_iter+0x10/0x10 [ 1210.527833][T20574] ? __pfx_vfs_write+0x10/0x10 [ 1210.527848][T20574] ? find_held_lock+0x2b/0x80 [ 1210.527885][T20574] ksys_write+0x1f8/0x250 [ 1210.527901][T20574] ? __pfx_ksys_write+0x10/0x10 [ 1210.527926][T20574] do_syscall_64+0xcd/0xfa0 [ 1210.527943][T20574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1210.527958][T20574] RIP: 0033:0x7f5996d8f749 [ 1210.527971][T20574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1210.527987][T20574] RSP: 002b:00007f5994ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1210.528005][T20574] RAX: ffffffffffffffda RBX: 00007f5996fe6090 RCX: 00007f5996d8f749 [ 1210.528016][T20574] RDX: 0000000000000026 RSI: 0000200000000140 RDI: 0000000000000009 [ 1210.528024][T20574] RBP: 00007f5994ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1210.528033][T20574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1210.528043][T20574] R13: 00007f5996fe6128 R14: 00007f5996fe6090 R15: 00007ffdaaf63f58 [ 1210.528067][T20574] [ 1211.040007][ T5812] Bluetooth: hci2: command 0x0c1a tx timeout [ 1211.061367][ T5876] usb 2-1: Using ep0 maxpacket: 16 [ 1211.066949][ T5812] Bluetooth: hci7: command 0x0406 tx timeout [ 1211.073725][ T5812] Bluetooth: hci6: command 0x0c1a tx timeout [ 1211.074570][ T5876] usb 2-1: config 0 has an invalid interface number: 115 but max is 0 [ 1211.079761][ T5812] Bluetooth: hci5: command 0x0c1a tx timeout [ 1211.087942][ T5876] usb 2-1: config 0 has no interface number 0 [ 1211.089890][ T5876] usb 2-1: New USB device found, idVendor=eb1a, idProduct=2875, bcdDevice=6f.3f [ 1211.094468][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 1211.100020][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.109166][ T5812] Bluetooth: hci1: command 0x0406 tx timeout [ 1211.115003][ T5876] usb 2-1: Product: syz [ 1211.115019][ T5876] usb 2-1: Manufacturer: syz [ 1211.115033][ T5876] usb 2-1: SerialNumber: syz [ 1211.117383][ T5876] usb 2-1: config 0 descriptor?? [ 1211.150554][T17118] imon_raw 6-1:0.0: IR endpoint missing [ 1211.164279][T17118] usb 6-1: USB disconnect, device number 118 [ 1211.408661][T20565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1211.434608][T20565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1211.448977][ T911] usb 2-1: USB disconnect, device number 22 [ 1211.628863][T17119] IPVS: starting estimator thread 0... [ 1211.746117][T20595] IPVS: using max 44 ests per chain, 105600 per kthread [ 1212.045850][ T30] audit: type=1400 audit(525947.680:1582): avc: denied { accept } for pid=20599 comm="syz.5.3716" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1212.128409][ T30] audit: type=1400 audit(525947.717:1583): avc: denied { append } for pid=20599 comm="syz.5.3716" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1212.226493][ T30] audit: type=1400 audit(525947.717:1584): avc: denied { open } for pid=20599 comm="syz.5.3716" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1212.252210][ T30] audit: type=1400 audit(525947.717:1585): avc: denied { ioctl } for pid=20597 comm="syz.6.3715" path="socket:[98123]" dev="sockfs" ino=98123 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1212.370281][ T30] audit: type=1400 audit(525947.727:1586): avc: denied { setopt } for pid=20597 comm="syz.6.3715" lport=50059 faddr=::ffff:172.20.255.187 fport=65532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1212.729522][ T5876] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1212.896930][ T5807] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 1212.954474][ T5876] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1213.024399][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.064533][ T5876] usb 5-1: Product: syz [ 1213.068755][ T5876] usb 5-1: Manufacturer: syz [ 1213.076341][ T5876] usb 5-1: SerialNumber: syz [ 1213.089003][ T5876] usb 5-1: config 0 descriptor?? [ 1213.096800][ T5807] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1213.108314][ T5807] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1213.119764][ T5876] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1213.135717][ T5807] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.146869][ T5807] usb 7-1: config 0 descriptor?? [ 1213.285493][ T5812] Bluetooth: hci4: command 0x0406 tx timeout [ 1213.287636][ T5810] Bluetooth: hci5: command 0x0c1a tx timeout [ 1213.291544][ T5812] Bluetooth: hci6: command 0x0c1a tx timeout [ 1213.297765][ T5810] Bluetooth: hci7: command 0x0406 tx timeout [ 1213.304219][ T5812] Bluetooth: hci2: command 0x0c1a tx timeout [ 1213.346881][ T5812] Bluetooth: hci1: command 0x0406 tx timeout [ 1213.646879][ T5807] keytouch 0003:0926:3333.002B: fixing up Keytouch IEC report descriptor [ 1213.710573][ T5807] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.002B/input/input74 [ 1214.450191][ T5876] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 1214.457753][ T5876] sq905c 5-1:0.0: probe with driver sq905c failed with error -110 [ 1214.515901][ T5807] keytouch 0003:0926:3333.002B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 1214.532313][ T5807] usb 7-1: USB disconnect, device number 78 [ 1214.742752][T20617] bridge0: port 2(bridge_slave_1) entered disabled state [ 1214.750319][T20617] bridge0: port 1(bridge_slave_0) entered disabled state [ 1214.938510][T20617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1214.991729][T20617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1215.527629][ T5812] Bluetooth: hci5: command 0x0c1a tx timeout [ 1215.534317][ T51] Bluetooth: hci6: command 0x0c1a tx timeout [ 1215.544230][T20621] Bluetooth: hci2: command 0x0c1a tx timeout [ 1215.876884][T17593] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.891416][ T5855] usb 5-1: USB disconnect, device number 29 [ 1215.920045][T17593] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.984859][T17593] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.038290][T17593] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.319712][T20664] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3729'. [ 1216.662392][ T30] audit: type=1400 audit(525952.002:1587): avc: denied { read } for pid=20661 comm="syz.5.3731" path="socket:[98986]" dev="sockfs" ino=98986 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1216.949414][T20672] ipt_REJECT: ECHOREPLY no longer supported. [ 1217.370174][ T30] audit: type=1400 audit(525952.657:1588): avc: denied { map } for pid=20678 comm="syz.1.3735" path="/dev/tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 1217.393007][ C0] vkms_vblank_simulate: vblank timer overrun [ 1217.558382][ T5855] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1217.610906][T20686] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.630848][ T30] audit: type=1400 audit(525952.900:1589): avc: denied { read write } for pid=20682 comm="syz.1.3737" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1217.642438][T20686] netlink: 'syz.5.3738': attribute type 3 has an invalid length. [ 1217.664964][ T30] audit: type=1400 audit(525952.928:1590): avc: denied { ioctl } for pid=20682 comm="syz.1.3737" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1217.665048][T20686] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1217.750957][ T5876] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 1217.809045][ T5855] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1217.809072][ T5855] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1217.809089][ T5855] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1217.809106][ T5855] usb 5-1: config 220 has no interface number 2 [ 1217.809140][ T5855] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1217.809156][ T5855] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1217.809167][ T5855] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1217.809177][ T5855] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1217.819033][ T5855] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1217.819064][ T5855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.819083][ T5855] usb 5-1: Product: syz [ 1217.819097][ T5855] usb 5-1: Manufacturer: syz [ 1217.819111][ T5855] usb 5-1: SerialNumber: syz [ 1217.964626][ T5876] usb 7-1: Using ep0 maxpacket: 32 [ 1217.971219][ T5876] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1217.982393][ T5876] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1217.992174][ T5876] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1218.001329][ T5876] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.011285][ T5876] usb 7-1: config 0 descriptor?? [ 1218.055201][ T5855] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1218.062802][ T5855] uvcvideo 5-1:220.0: No valid video chain found. [ 1218.069285][ T5855] usb 5-1: selecting invalid altsetting 0 [ 1218.087875][ T5855] usb 5-1: selecting invalid altsetting 0 [ 1218.093991][ T5855] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 1218.104701][ T5855] usb 5-1: USB disconnect, device number 30 [ 1218.388041][T20693] kvm: apic: phys broadcast and lowest prio [ 1218.394115][T20693] kvm: Disabled LAPIC found during irq injection [ 1218.450561][ T5876] savu 0003:1E7D:2D5A.002C: unbalanced collection at end of report description [ 1218.460079][ T5876] savu 0003:1E7D:2D5A.002C: parse failed [ 1218.468110][ T5876] savu 0003:1E7D:2D5A.002C: probe with driver savu failed with error -22 [ 1218.622214][T20699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3742'. [ 1218.744822][ T5876] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1218.814634][ T5855] usb 7-1: USB disconnect, device number 79 [ 1218.937262][ T5876] usb 2-1: Using ep0 maxpacket: 16 [ 1218.944398][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1218.955086][ T5876] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1218.964336][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.984529][ T5876] usb 2-1: config 0 descriptor?? [ 1219.000239][ T5876] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1219.033439][T17119] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1219.204539][T17119] usb 6-1: Using ep0 maxpacket: 32 [ 1219.211291][T17119] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1219.219910][T17119] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1219.233546][T17119] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.234155][T20697] fuse: Bad value for 'user_id' [ 1219.242391][T17119] usb 6-1: Product: syz [ 1219.246707][T20697] fuse: Bad value for 'user_id' [ 1219.250987][T17119] usb 6-1: Manufacturer: syz [ 1219.260466][T17119] usb 6-1: SerialNumber: syz [ 1219.267308][T17119] usb 6-1: config 0 descriptor?? [ 1219.708286][T17119] gs_usb 6-1:0.0: Configuring for 2 interfaces [ 1219.835176][ T5855] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 1219.922941][T17119] gs_usb 6-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 1219.931766][T17119] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -121 [ 1219.998641][ T5855] usb 7-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 1220.007953][ T5855] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.015929][ T5855] usb 7-1: Product: syz [ 1220.020484][ T911] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 1220.028155][ T5855] usb 7-1: Manufacturer: syz [ 1220.032732][ T5855] usb 7-1: SerialNumber: syz [ 1220.039411][ T5855] usb 7-1: config 0 descriptor?? [ 1220.209340][ T911] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1220.220204][ T911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.220246][ T30] audit: type=1400 audit(525955.323:1591): avc: denied { watch } for pid=20733 comm="syz.7.3748" path="/107/file1" dev="tmpfs" ino=593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1220.220314][ T30] audit: type=1400 audit(525955.323:1592): avc: denied { watch_sb watch_reads } for pid=20733 comm="syz.7.3748" path="/107/file1" dev="tmpfs" ino=593 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1220.275547][ T911] usb 5-1: config 0 descriptor?? [ 1220.323242][ T911] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1220.457909][ T5855] peak_usb 7-1:0.0: PEAK-System PCAN-USB FD v249 fw v204.139.94 (1 channels) [ 1220.676008][ T30] audit: type=1400 audit(525955.744:1593): avc: denied { write } for pid=20712 comm="syz.6.3746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1220.701201][ T5855] peak_usb 7-1:0.0 can0: sending command failure: -22 [ 1220.709640][ T5855] peak_usb 7-1:0.0 can0: sending command failure: -22 [ 1220.718668][ T5855] peak_usb 7-1:0.0 can0: sending command failure: -22 [ 1220.787083][ T5855] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -22 [ 1220.939685][ T5876] usb 7-1: USB disconnect, device number 80 [ 1221.018521][ T911] gp8psk: usb out operation failed. [ 1221.023927][ T911] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1221.034509][ T911] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1221.048784][ T911] usb 5-1: USB disconnect, device number 31 [ 1222.023162][ T5855] usb 2-1: USB disconnect, device number 23 [ 1222.075335][ T5876] usb 6-1: USB disconnect, device number 119 [ 1222.316449][T20758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3753'. [ 1223.073493][T20771] Device name cannot be null; rc = [-22] [ 1223.644308][T20782] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3759'. [ 1224.082475][T20787] netlink: 5 bytes leftover after parsing attributes in process `syz.6.3763'. [ 1224.091593][T20787] 0{X: renamed from gretap0 (while UP) [ 1224.105693][T20777] netlink: zone id is out of range [ 1224.114028][T20787] 0{X: entered allmulticast mode [ 1224.119709][T20787] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 1224.143505][T20777] netlink: zone id is out of range [ 1224.155933][T20777] netlink: zone id is out of range [ 1224.161288][T20777] netlink: zone id is out of range [ 1224.168528][T20777] netlink: zone id is out of range [ 1224.175198][T20777] netlink: zone id is out of range [ 1224.182176][T20777] netlink: zone id is out of range [ 1224.188301][T20777] netlink: zone id is out of range [ 1224.194949][T20777] netlink: zone id is out of range [ 1224.475563][T20798] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3766'. [ 1224.485119][T20798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3766'. [ 1224.505557][T20798] netlink: 'syz.4.3766': attribute type 3 has an invalid length. [ 1224.784070][ T5855] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 1224.965892][ T5855] usb 7-1: Using ep0 maxpacket: 16 [ 1224.974676][ T5855] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1224.987022][ T5855] usb 7-1: can't read configurations, error -61 [ 1225.136938][ T5855] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 1225.186160][ T30] audit: type=1400 audit(525959.973:1594): avc: denied { ioctl } for pid=20803 comm="syz.1.3769" path="socket:[100455]" dev="sockfs" ino=100455 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1225.297616][T20812] raw_sendmsg: syz.4.3770 forgot to set AF_INET. Fix it! [ 1225.407649][ T30] audit: type=1400 audit(525960.094:1595): avc: denied { map } for pid=20811 comm="syz.4.3770" path="socket:[99606]" dev="sockfs" ino=99606 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1225.430528][ C0] vkms_vblank_simulate: vblank timer overrun [ 1225.430697][ T5855] usb 7-1: Using ep0 maxpacket: 16 [ 1225.601739][ T5855] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1225.626572][ T5855] usb 7-1: can't read configurations, error -61 [ 1225.701105][T20821] Device name cannot be null; rc = [-22] [ 1226.135152][ T5855] usb usb7-port1: attempt power cycle [ 1226.615734][ T5855] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 1226.616815][T20832] 9pnet_fd: p9_fd_create_unix (20832): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1226.784070][ T5855] usb 7-1: Using ep0 maxpacket: 16 [ 1226.892030][ T5855] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1226.900716][ T5855] usb 7-1: can't read configurations, error -61 [ 1226.948631][ T30] audit: type=1400 audit(525961.619:1596): avc: denied { read write } for pid=20838 comm="syz.1.3778" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1226.973999][ T30] audit: type=1400 audit(525961.638:1597): avc: denied { open } for pid=20838 comm="syz.1.3778" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1227.000990][ T30] audit: type=1400 audit(525961.638:1598): avc: denied { ioctl } for pid=20838 comm="syz.1.3778" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x6617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1227.061179][ T5855] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 1227.087252][ T5855] usb 7-1: Using ep0 maxpacket: 16 [ 1227.101020][ T5855] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1227.117457][ T5855] usb 7-1: can't read configurations, error -61 [ 1227.131552][ T5855] usb usb7-port1: unable to enumerate USB device [ 1227.199914][T14378] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 1227.361847][T14378] usb 6-1: config 49 has an invalid descriptor of length 54, skipping remainder of the config [ 1227.453786][T14378] usb 6-1: config 49 has 0 interfaces, different from the descriptor's value: 1 [ 1227.500228][T14378] usb 6-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 1227.510201][T14378] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.518236][T14378] usb 6-1: Product: syz [ 1227.533170][T14378] usb 6-1: Manufacturer: syz [ 1227.935933][ T31] INFO: task kworker/1:8:15033 blocked for more than 143 seconds. [ 1227.955452][ T31] Not tainted syzkaller #0 [ 1227.962617][T14378] usb 6-1: SerialNumber: syz [ 1227.964345][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1228.009235][ T31] task:kworker/1:8 state:D stack:23416 pid:15033 tgid:15033 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1228.029772][ T31] Workqueue: usb_hub_wq hub_event [ 1228.034918][ T31] Call Trace: [ 1228.038245][ T31] [ 1228.041496][ T31] __schedule+0x1190/0x5de0 [ 1228.046110][ T31] ? device_del+0x64e/0x9f0 [ 1228.050689][ T31] ? device_unregister+0x1d/0xc0 [ 1228.055881][ T31] ? i2c_del_adapter+0x53e/0x6f0 [ 1228.060871][ T31] ? __pfx___schedule+0x10/0x10 [ 1228.069030][ T31] ? find_held_lock+0x2b/0x80 [ 1228.073726][ T31] ? schedule+0x2d7/0x3a0 [ 1228.078731][ T31] schedule+0xe7/0x3a0 [ 1228.082888][ T31] schedule_timeout+0x257/0x290 [ 1228.087791][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1228.093361][ T31] ? mark_held_locks+0x49/0x80 [ 1228.098365][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1228.103589][ T31] __wait_for_common+0x2fc/0x4e0 [ 1228.111634][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1228.117096][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1228.123532][ T31] ? __pfx_device_del+0x10/0x10 [ 1228.128486][ T31] ? kobject_put+0xab/0x5a0 [ 1228.133070][ T31] i2c_del_adapter+0x546/0x6f0 [ 1228.137990][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 1228.143375][ T31] ? kfree+0x2b8/0x6d0 [ 1228.147564][ T31] ? dvb_usbv2_exit.isra.0+0x3c6/0x9f0 [ 1228.153248][ T31] dvb_usbv2_exit.isra.0+0x45b/0x9f0 [ 1228.158632][ T31] dvb_usbv2_probe+0x1f61/0x3e50 [ 1228.163732][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 1228.169119][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1228.175063][ T31] ? __pm_runtime_set_status+0x13c/0xa80 [ 1228.180805][ T31] usb_probe_interface+0x303/0xa40 [ 1228.189196][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 1228.194969][ T31] really_probe+0x241/0xa90 [ 1228.201890][ T31] __driver_probe_device+0x1de/0x440 [ 1228.207415][ T31] driver_probe_device+0x4c/0x1b0 [ 1228.212661][ T31] __device_attach_driver+0x1df/0x310 [ 1228.218325][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 1228.224466][ T31] bus_for_each_drv+0x159/0x1e0 [ 1228.232407][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1228.245557][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1228.251964][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1228.268238][ T31] __device_attach+0x1e4/0x4b0 [ 1228.290563][ T31] ? __pfx___device_attach+0x10/0x10 [ 1228.318824][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 1228.324651][ T31] bus_probe_device+0x17f/0x1c0 [ 1228.329758][ T31] device_add+0x1148/0x1aa0 [ 1228.334767][ T31] ? __pfx_device_add+0x10/0x10 [ 1228.339920][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1228.348978][ T31] usb_set_configuration+0x1187/0x1e20 [ 1228.354848][ T31] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 1228.361296][ T31] usb_generic_driver_probe+0xb1/0x110 [ 1228.367936][ T31] usb_probe_device+0xef/0x3e0 [ 1228.373854][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 1228.380108][ T31] really_probe+0x241/0xa90 [ 1228.385328][ T31] __driver_probe_device+0x1de/0x440 [ 1228.390943][ T31] ? usb_driver_applicable+0x1c7/0x220 [ 1228.396612][ T31] driver_probe_device+0x4c/0x1b0 [ 1228.402039][ T31] __device_attach_driver+0x1df/0x310 [ 1228.407714][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 1228.413863][ T31] bus_for_each_drv+0x159/0x1e0 [ 1228.419130][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1228.425311][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1228.431156][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1228.437209][ T31] __device_attach+0x1e4/0x4b0 [ 1228.442424][ T31] ? __pfx___device_attach+0x10/0x10 [ 1228.448107][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 1228.453750][ T31] bus_probe_device+0x17f/0x1c0 [ 1228.458960][ T31] device_add+0x1148/0x1aa0 [ 1228.463762][ T31] ? __pfx_device_add+0x10/0x10 [ 1228.468975][ T31] ? add_device_randomness+0xb7/0xf0 [ 1228.474597][ T31] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 1228.480816][ T31] usb_new_device+0xd07/0x1a60 [ 1228.486100][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 1228.491322][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 1228.497190][ T31] ? mark_held_locks+0x49/0x80 [ 1228.502872][ T31] hub_event+0x2f34/0x4fe0 [ 1228.507736][ T31] ? __pfx_hub_event+0x10/0x10 [ 1228.512707][ T31] ? interval_tree_remove+0xae0/0xee0 [ 1228.518592][ T31] ? rcu_is_watching+0x12/0xc0 [ 1228.523599][ T31] process_one_work+0x9cf/0x1b70 [ 1228.528887][ T31] ? __pfx_hcd_resume_work+0x10/0x10 [ 1228.534471][ T31] ? __pfx_process_one_work+0x10/0x10 [ 1228.541912][ T31] ? assign_work+0x1a0/0x250 [ 1228.546872][ T31] worker_thread+0x6c8/0xf10 [ 1228.551713][ T31] ? __kthread_parkme+0x19e/0x250 [ 1228.557133][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1228.562659][ T31] kthread+0x3c5/0x780 [ 1228.566980][ T31] ? __pfx_kthread+0x10/0x10 [ 1228.572523][ T31] ? rcu_is_watching+0x12/0xc0 [ 1228.577710][ T31] ? __pfx_kthread+0x10/0x10 [ 1228.582646][ T31] ret_from_fork+0x675/0x7d0 [ 1228.587465][ T31] ? __pfx_kthread+0x10/0x10 [ 1228.592432][ T31] ret_from_fork_asm+0x1a/0x30 [ 1228.597460][ T31] [ 1228.600989][ T31] [ 1228.600989][ T31] Showing all locks held in the system: [ 1228.609038][ T31] 1 lock held by khungtaskd/31: [ 1228.614251][ T31] #0: ffffffff8e3c4760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1228.624503][ T31] 2 locks held by getty/5572: [ 1228.629541][ T31] #0: ffff88814d3370a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1228.639738][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1228.650285][ T31] 4 locks held by udevd/5992: [ 1228.655636][ T31] #0: ffff88805aaf2790 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12d0 [ 1228.665150][ T31] #1: ffff888066da3488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 1228.676053][ T31] #2: ffff888064e1a3c8 (kn->active#19){++++}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 1228.685689][ T31] #3: ffff88807a797198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1228.695217][ T31] 4 locks held by kworker/1:5/14378: [ 1228.700656][ T31] #0: ffff88801b756d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1228.711745][ T31] #1: ffffc90004377d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1228.723163][ T31] #2: ffff888144b9e198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 1228.732177][ T31] #3: ffff88807a797198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 1228.741535][ T31] 5 locks held by kworker/1:8/15033: [ 1228.747348][ T31] #0: ffff88801b756d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1228.759946][ T31] #1: ffffc9000f0bfd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1228.771509][ T31] #2: ffff888144f66198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 1228.781956][ T31] #3: ffff8880237ca198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 1228.793310][ T31] #4: ffff88801b702160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 1228.811307][ T31] 4 locks held by udevd/18644: [ 1228.816502][ T31] #0: ffff8880334540a0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12d0 [ 1228.825829][ T31] #1: ffff888058aaf488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 1228.835777][ T31] #2: ffff8880683b8008 (kn->active#19){++++}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 1228.845532][ T31] #3: ffff8880237ca198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1228.855049][ T31] 1 lock held by syz.3.3254/18824: [ 1228.860315][ T31] #0: ffff888144f66198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x8b0 [ 1228.869519][ T31] [ 1228.871975][ T31] ============================================= [ 1228.871975][ T31] [ 1228.881944][ T31] NMI backtrace for cpu 0 [ 1228.881959][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1228.881980][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1228.881991][ T31] Call Trace: [ 1228.881997][ T31] [ 1228.882004][ T31] dump_stack_lvl+0x116/0x1f0 [ 1228.882025][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1228.882050][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1228.882076][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1228.882100][ T31] watchdog+0xf3f/0x1170 [ 1228.882127][ T31] ? rcu_is_watching+0x12/0xc0 [ 1228.882150][ T31] ? __pfx_watchdog+0x10/0x10 [ 1228.882170][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1228.882189][ T31] ? __kthread_parkme+0x19e/0x250 [ 1228.882216][ T31] ? __pfx_watchdog+0x10/0x10 [ 1228.882237][ T31] kthread+0x3c5/0x780 [ 1228.882255][ T31] ? __pfx_kthread+0x10/0x10 [ 1228.882275][ T31] ? rcu_is_watching+0x12/0xc0 [ 1228.882296][ T31] ? __pfx_kthread+0x10/0x10 [ 1228.882314][ T31] ret_from_fork+0x675/0x7d0 [ 1228.882329][ T31] ? __pfx_kthread+0x10/0x10 [ 1228.882347][ T31] ret_from_fork_asm+0x1a/0x30 [ 1228.882383][ T31] [ 1228.882390][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1229.009903][ C1] NMI backtrace for cpu 1 [ 1229.009921][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1229.009938][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1229.009947][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1229.009974][ C1] Code: a7 6c 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 55 29 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1229.009988][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 1229.010001][ C1] RAX: 00000000054e7b0f RBX: 0000000000000001 RCX: ffffffff8b60d2a9 [ 1229.010010][ C1] RDX: 0000000000000000 RSI: ffffffff8da2c59c RDI: ffffffff8bf073c0 [ 1229.010019][ C1] RBP: ffffed1003ad0490 R08: 0000000000000001 R09: ffffed10170a6655 [ 1229.010028][ C1] R10: ffff8880b85332ab R11: 0000000000000001 R12: 0000000000000001 [ 1229.010036][ C1] R13: ffff88801d682480 R14: ffffffff908216d0 R15: 0000000000000000 [ 1229.010046][ C1] FS: 0000000000000000(0000) GS:ffff888124b05000(0000) knlGS:0000000000000000 [ 1229.010060][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1229.010076][ C1] CR2: 000020000001d000 CR3: 000000007a18b000 CR4: 00000000003526f0 [ 1229.010086][ C1] DR0: 0000000000000008 DR1: 0000000000000002 DR2: 0000000000000404 [ 1229.010095][ C1] DR3: ffffffffefffff14 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1229.010103][ C1] Call Trace: [ 1229.010109][ C1] [ 1229.010114][ C1] default_idle+0x13/0x20 [ 1229.010130][ C1] default_idle_call+0x6c/0xb0 [ 1229.010146][ C1] do_idle+0x38d/0x500 [ 1229.010166][ C1] ? __pfx_do_idle+0x10/0x10 [ 1229.010182][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 1229.010200][ C1] cpu_startup_entry+0x4f/0x60 [ 1229.010217][ C1] start_secondary+0x21d/0x2b0 [ 1229.010237][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1229.010258][ C1] common_startup_64+0x13e/0x148 [ 1229.010279][ C1] [ 1229.638726][T14378] usb 6-1: USB disconnect, device number 120 [ 1233.934645][ T5182] udevd[5182]: worker [18644] /devices/platform/dummy_hcd.8/usb9/9-1 is taking a long time