last executing test programs: 29m0.63054949s ago: executing program 3 (id=1819): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000001c0)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0x200000}, 0x1c) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) process_mrelease(r0, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r3, 0x0) listen(r1, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000740)=""/4100, 0x1004}], 0x1, 0x145, 0x80000000) 28m58.692238292s ago: executing program 3 (id=1825): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4940, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$packet(0x11, 0x3, 0x300) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000003c0), 0x4000000000001ec, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) get_robust_list(0x0, &(0x7f0000000400)=0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x13, 0x200, &(0x7f0000000d80)="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"}) 28m55.98712037s ago: executing program 3 (id=1834): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffff}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_MCE_KILL(0x4e, 0x1, 0x40000000) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001100)={0x1, @sdr={0x50323234, 0x1000}}) r7 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800020007000200060001c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000000000118500000086000000b708000000000000dbaaf8fff1000000b5080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r10}, 0xc) 28m54.117757153s ago: executing program 3 (id=1841): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4940, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$packet(0x11, 0x3, 0x300) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x5fd, 0x4) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2120, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = openat$incfs(0xffffffffffffff9c, 0x0, 0x400000, 0x110) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x800, 0x9) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000180)={0x6, 0x37d5, {r3}, {0xffffffffffffffff}, 0x9, 0x400003}) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x892031, &(0x7f0000000280)={'trans=unix,', {[{@noextend}, {@directio}, {@access_client}, {@access_client}, {@loose}], [{@pcr={'pcr', 0x3d, 0x14}}, {@subj_role={'subj_role', 0x3d, './cgroup.cpu/syz1\x00'}}, {@flag='async'}, {@uid_eq={'uid', 0x3d, r6}}, {@appraise_type}, {@smackfsroot}, {@dont_hash}]}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000005880)={0x0, 0x0, &(0x7f0000005840)={&(0x7f0000000000)=@getsa={0x28, 0x12, 0x1, 0x70bd2b, 0x25dfdbfd, {@in6=@mcast1, 0x4d4, 0x2, 0xff}}, 0x28}, 0x1, 0x0, 0x0, 0x1090}, 0x40080) syz_emit_ethernet(0x1046, 0x0, 0x0) setfsgid(0xee00) syz_open_procfs(0x0, 0x0) 28m50.003875715s ago: executing program 3 (id=1848): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000000140)={0x0, 0x0, 0x0}) r3 = syz_io_uring_setup(0x313f, &(0x7f0000000080)={0x0, 0xfffffffd, 0x10100, 0x3, 0x179}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x6000, @fd=r1, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000300)="00000000042000", 0x7}], 0x1}) io_uring_enter(r3, 0x4d10, 0x2, 0x2, 0x0, 0x0) ptrace(0x10, r0) r6 = io_uring_setup(0x1ad2, &(0x7f0000000740)={0x0, 0x1100, 0x0, 0xfffffffe, 0x3d0}) close(r6) r7 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1, 0x0, 0xc00}, 0x20) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x9200000000000000) ptrace$cont(0x18, r0, 0x8f, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYRES8=r8], 0x58}, 0x1, 0x0, 0x0, 0x4040040}, 0x4000000) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x1b, &(0x7f00000000c0)=0x70, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0) r10 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) fcntl$setlease(r10, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c45, 0x0) r11 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r11, 0x400, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') r13 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x42701, 0x192) write$RDMA_USER_CM_CMD_JOIN_MCAST(r13, &(0x7f0000000840)={0x2d, 0x98, 0xfa00, {0x0, 0x2, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x8, 0x56f6, {"b2c40f03a5fd88f643fd134c488c0798"}, 0x5, 0x6, 0xfffffffffffffffc}}}, 0xa0) preadv(r12, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4112, 0x1010}], 0x1, 0x800, 0x0) 28m49.064801269s ago: executing program 3 (id=1851): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000023c0)={0x4c, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x38, 0x11, 0x0, 0x1, [@nested={0x34, 0xcf, 0x0, 0x1, [@nested={0x2f, 0x146, 0x0, 0x1, [@generic="f5ef56146c91147563276660e594de86923b901b9c31b5127825f1868b4db9", @typed={0x8, 0x124, 0x0, 0x0, @u32=0x7}, @nested={0x4, 0xdf}]}]}]}]}, 0x4c}], 0x1, 0x0, 0x0, 0x84}, 0x300) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000400)=""/197, 0xc5, 0x11) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r3) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$PPPIOCGIDLE64(r3, 0x8010743f, &(0x7f0000000100)) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x40, 0x30, 0x3, "02eda1"}, 0x0, 0x0, 0x0, 0x0}) connect$vsock_stream(r4, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)={0x6, 0x0, [{0x80000008, 0xf, 0x4, 0xffffff4d, 0x25dc, 0x7, 0x80}, {0x80000008, 0x80, 0x3, 0xd, 0x3, 0x5, 0x81}, {0xc0000001, 0x8, 0x1, 0x3, 0x4, 0x7, 0x80}, {0x2, 0x3, 0x7, 0x9, 0x101, 0x4, 0x81}, {0x80000008, 0xffffffff, 0x5, 0xc9b7, 0x4, 0x6, 0x7}, {0x7, 0x5, 0x1, 0xb, 0x4, 0x4, 0xffffffff}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000009c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010004000000fedbdf250e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000fdffffff15000e001c"], 0x4c}}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 28m31.946632398s ago: executing program 32 (id=1851): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000023c0)={0x4c, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x38, 0x11, 0x0, 0x1, [@nested={0x34, 0xcf, 0x0, 0x1, [@nested={0x2f, 0x146, 0x0, 0x1, [@generic="f5ef56146c91147563276660e594de86923b901b9c31b5127825f1868b4db9", @typed={0x8, 0x124, 0x0, 0x0, @u32=0x7}, @nested={0x4, 0xdf}]}]}]}]}, 0x4c}], 0x1, 0x0, 0x0, 0x84}, 0x300) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000400)=""/197, 0xc5, 0x11) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r3) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$PPPIOCGIDLE64(r3, 0x8010743f, &(0x7f0000000100)) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x40, 0x30, 0x3, "02eda1"}, 0x0, 0x0, 0x0, 0x0}) connect$vsock_stream(r4, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)={0x6, 0x0, [{0x80000008, 0xf, 0x4, 0xffffff4d, 0x25dc, 0x7, 0x80}, {0x80000008, 0x80, 0x3, 0xd, 0x3, 0x5, 0x81}, {0xc0000001, 0x8, 0x1, 0x3, 0x4, 0x7, 0x80}, {0x2, 0x3, 0x7, 0x9, 0x101, 0x4, 0x81}, {0x80000008, 0xffffffff, 0x5, 0xc9b7, 0x4, 0x6, 0x7}, {0x7, 0x5, 0x1, 0xb, 0x4, 0x4, 0xffffffff}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000009c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010004000000fedbdf250e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000fdffffff15000e001c"], 0x4c}}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 16m53.311770431s ago: executing program 0 (id=4139): openat$iommufd(0xffffffffffffff9c, 0x0, 0x80, 0x0) r0 = syz_clone(0xc3000c80, &(0x7f0000000000)="c8a4453c51dbb0f4669dce400713bbc5764584d06ef6a7f1fc40897ecca5e9e2b5004d695a3501a60a6c8649f762c02224cf0bdb7ae3e94c8789b69a0f2d54533e451cc72d1d222740db8adb86c8a650012f381ec915993e5ef2cc2d5153fa0d17ec9e981277783f133fb2f7819af11bfca6c19091dd6079952eec9a1d2ed14f2e100c84abe89470cf9c5bdac58a654137ced20497b7b066f852eabb776a8d3e29d456bf2c0aeb35af2ff4359d6870a86513", 0xb2, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000300)="183e08e6bf52b793bea31691d227db3f5cf05e2ae3371b170ab35309833f66dd573b171595f76ff96cfb3141e56c108f9a1cf00efa7a3463162f76987c5fd9e111ca932d39902b288d89875a649691dd76670c81672adc31c7a893c65f6bf2058b22339130875129236b331a4d4f08baa0b4282dc8336455cfee84be5fa612a424a671389ff06532fba2e1735b92284f14c3f0149b9633616a02a0a5854166947c21246dc1f546f5790f4578359e6a871e42817d11b06f63bb1314a5cb9d1cd952") prlimit64(r0, 0x8, &(0x7f0000000200)={0x8, 0x808c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x23, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x50000) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f0000000240)=0xfffffffe) 16m52.892922099s ago: executing program 0 (id=4140): bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000020800b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, 0x0) write$dsp(r6, &(0x7f00000012c0), 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x1}, &(0x7f0000000140)=0x8) 16m51.918615921s ago: executing program 0 (id=4145): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="413d6ccbb2f3d950de52aa03d37d76", @ANYRES16=r1, @ANYBLOB="01002cbd7000fedbdf2526000000080003", @ANYRES32=r3, @ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r5 = dup(r4) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f0000000380), 0x4) setsockopt$RDS_FREE_MR(r6, 0x114, 0x3, &(0x7f00000007c0), 0x10) fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x4000000d, r5, 0x0) r7 = memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xed\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) fsetxattr(r7, &(0x7f0000000240)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0) fremovexattr(r7, &(0x7f00000000c0)=@known='user.incfs.id\x00') setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x258, 0x268, 0x311, 0x258, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x160, 0x230, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xd0, 0x138, 0xe4030000, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r8) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x541b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 16m51.791045994s ago: executing program 0 (id=4147): openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000240)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000340)=0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000014c0)={0x0, @nfc={0x27, r5, 0x1, 0x5}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, @nfc={0x27, r6, 0x0, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000380)='ip6_vti0\x00', 0xffffffffffffffff, 0x9, 0x90f}) (async) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000014c0)={0x0, @nfc={0x27, r5, 0x1, 0x5}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, @nfc={0x27, r6, 0x0, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000380)='ip6_vti0\x00', 0xffffffffffffffff, 0x9, 0x90f}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x800000, &(0x7f0000000040)={[{@huge_advise}]}) chdir(&(0x7f0000000140)='./file0\x00') (async) chdir(&(0x7f0000000140)='./file0\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x8, 0x12, r7, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) ftruncate(r7, 0x472e) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) syz_clone3(&(0x7f00000003c0)={0xad023080, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f00000003c0)={0xad023080, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001200130626bd7000fddbdf2506ff01fc4e244e2404000000faffffff060000000900000007004000080000005e00000007000000", @ANYRES32=0x0, @ANYBLOB="01000000040000000100000005800000080001"], 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) listen(r11, 0x5) (async) listen(r11, 0x5) ioctl$sock_inet_tcp_SIOCOUTQNSD(r11, 0x894b, 0x0) (async) ioctl$sock_inet_tcp_SIOCOUTQNSD(r11, 0x894b, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r12, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, r1, 0x924, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x240000c4}, 0x8004) 16m51.286159758s ago: executing program 0 (id=4150): r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, 0x0) 16m50.977511491s ago: executing program 0 (id=4151): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xe25}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x80}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x51}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x6}]}, 0x38}}, 0x0) 16m50.81628047s ago: executing program 33 (id=4151): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xe25}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x80}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x51}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x6}]}, 0x38}}, 0x0) 11m7.349690901s ago: executing program 1 (id=5339): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x2, 0x80100) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000900)={0x0, @reserved}) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) socket$nl_route(0x10, 0x3, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2845) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10089}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x10, r1) tkill(r1, 0x6) ptrace$peeksig(0x4209, r1, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 11m6.697809495s ago: executing program 1 (id=5342): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x7e, &(0x7f0000000080)="00000000000000027fadc6802ef0bd531b0232fed4b5963eff3ac51718e4a50400b6f8981a6693bf4ad9f86b78d75d9d1fd0d07b1b1639f31d7997f380fbd78c873a08cc3ba609c787705ad0dc86a459aff5464bd1d3414899bf9a2c5b19f67d9517491171de0ca4989df9d0a1d420422b2277b4ff1369eb9243feb214bba7d82e8cc51cfa6726ae47bc9d617443f30ad6", 0x91) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x0, &(0x7f0000000180)}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x103) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f00000004c0)=0xc) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x1002000, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d3030303030303030303030ea1c34846672b4f18aec9b825b03d6303030303030", @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB="2c6d61785f726561643d3078303030303030303030303030303030632c616c6c6f775f6f746865722c626c6b73697a653d3078303030303030303030303030306330302c64656661756c745f7065726d697373696f6e732c616c6c6f775f6f746865722c616c6c6f775f6f746865722c6d61785f726561643d3078303030303030303030303030303030342c64656661756c745f7065726d697373696f6e732c6673757569643d63356634355c30342d636239392d623931362d663034632d30326504383037392c6f626a5f726f6c653d726f6f746d6f64652c736d61636b66736861743d47504c002c00"]) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x4, 0x200081) ioctl$SNDRV_PCM_IOCTL_RESUME(r2, 0x4147, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7000001000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000140)) syslog(0x4, &(0x7f0000000000)=""/123, 0x7b) r5 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000300)={0x1, 0x3, 0xb4ad, 0x800}) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)=ANY=[], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x2}, 0x8) 11m6.277655675s ago: executing program 1 (id=5343): bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002dc0)={0x11, 0x3, &(0x7f0000002cc0)=ANY=[@ANYRESHEX], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) socket(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="14002c80080000009d03"], 0x30}, 0x1, 0x0, 0x0, 0x850}, 0x22000000) 11m6.012564176s ago: executing program 1 (id=5346): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00') getdents(r1, &(0x7f0000000040)=""/227, 0xe3) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f00000063c0)={{0x1, 0x0, 0x80, {0xc000, 0x0, 0x2}}, "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", "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"}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) stat(0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') getgroups(0x0, &(0x7f0000000140)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, 0x0, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r6}}) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x3, 0x1, 0x7d, 0x2, @vifc_lcl_addr=@private=0xa010102, @multicast2}, 0x10) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r8 = inotify_init1(0x80800) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a1) inotify_add_watch(r8, 0x0, 0x6000085) inotify_add_watch(r8, &(0x7f0000000180)='./file0\x00', 0x10000000) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRES64=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643dafec69c13a8d444ba7545a", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c38022dfb97cabe417620234cd618e192e9a39347df8c3ed161cddb513122db3130925d34401d09fc9fbdbc11020700cbde486bfbb3648ba4adee6645b33d429cdb6ad68560fa888b123aa0c3cd66d364d23456773dccb5ba6dbb61be0d48bb443ea39b4424e4420ac1e9571af2833f2658056ca0c6af3259f052f7af57644fcbdabcd6e48d84cd0222c3a87b79a9f08442be56461f443d35e72798b190cf30c36edc63db21ebec46e1de8397ca229a815cb99615f11091dbec"]) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000080)={0x50, 0x0, r9, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r7, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11m4.733972593s ago: executing program 1 (id=5348): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000006800010003001000fdffff7f00000000000000000c0002000100000015000000060002"], 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES8=r0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000400018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x18) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xfffffff3, 0x0, 0x0) r4 = socket(0x8, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') preadv(r5, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1, 0xc9, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x16}, [@call={0x5c}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e}, 0x3f) ioctl$IMGETCOUNT(r4, 0x400261f3, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) dup3(r7, r6, 0x0) getpeername$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) 11m3.99960891s ago: executing program 1 (id=5350): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x402000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x4fed0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) dup2(r2, r2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r4) sendmsg$NFC_CMD_ENABLE_SE(r4, 0x0, 0x4800) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x2000, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) fdatasync(r3) openat(0xffffffffffffff9c, 0x0, 0x80540, 0x188) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1b, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30}, 0x94) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 11m3.47953566s ago: executing program 34 (id=5350): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x402000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x4fed0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) dup2(r2, r2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r4) sendmsg$NFC_CMD_ENABLE_SE(r4, 0x0, 0x4800) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x2000, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) fdatasync(r3) openat(0xffffffffffffff9c, 0x0, 0x80540, 0x188) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1b, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30}, 0x94) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 13.67821986s ago: executing program 6 (id=7277): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x800, 0x2) writev(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)="ef", 0x1}], 0x1) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f00000003c0)=0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x11) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) ioctl$PPPOEIOCDFWD(r3, 0xb101, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f046}) 12.300449941s ago: executing program 6 (id=7283): r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x68) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_register(r2, &(0x7f0000000240)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x7f, 0x3a, 'pagemap\x00', 0x3a, '\x00', 0x3a, './file0', 0x3a, [0x4f, 0x46]}, 0x32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000008d82, 0x0) r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000040)=ANY=[], 0x118) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x1, &(0x7f0000000140)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) 11.096034058s ago: executing program 6 (id=7287): r0 = memfd_create(0x0, 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x2) fcntl$addseals(r0, 0x409, 0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000043004500feffffbffcdbdfd2c0bb25037c00000400d4800c0001800800b50040531109bee0636815e86d9a8eedfc6b675a80fd24e413", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0xc000) socket$rxrpc(0x21, 0x2, 0xa) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x180, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x40100000) 10.974300662s ago: executing program 6 (id=7288): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0cc5640, &(0x7f00000000c0)={0x2, @sdr={0x32314d54, 0x400ffff}}) mkdir(&(0x7f0000000000)='./file0\x00', 0x16e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) write$P9_RVERSION(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="1500000065fffffc7f00000800395032303030"], 0x41) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) listen(0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 10.052116799s ago: executing program 7 (id=7293): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x800, 0x2) writev(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)="ef", 0x1}], 0x1) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f00000003c0)=0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x11) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) ioctl$PPPOEIOCDFWD(r3, 0xb101, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f046}) 8.709055028s ago: executing program 2 (id=7296): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xf, &(0x7f0000000000), &(0x7f0000000080)=0x2) syz_emit_ethernet(0x2a, &(0x7f00000003c0)=ANY=[@ANYBLOB="20d187a547e943dfbfdf8e44d001b7dcfa0c2c04fb66389a7dad987adaf1191ae3a980", @ANYRES64=r0, @ANYRESOCT=r1, @ANYBLOB, @ANYRES8=r0], 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000000e060300000000000000140007000002050001"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x16b541, 0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000200)='debugfs\x00', 0x50046, &(0x7f0000000180)='^a\x00%[|\xd3\xe8Vb\x1f\xe4%\xb4r') ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(0xffffffffffffffff, 0x4048ae9b, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002240)=""/102400, 0x19000) syz_open_dev$loop(&(0x7f00000002c0), 0xffffffff7ffffffd, 0x140a62) r7 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_INSN(r7, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, &(0x7f0000000080), 0x0, 0x4}) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100108b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 8.708367136s ago: executing program 7 (id=7297): socket$kcm(0x10, 0x2, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$llc(0x1a, 0x6, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000002680)={0x11, 0x8, &(0x7f0000002000)=ANY=[@ANYRES8=r0, @ANYBLOB="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"], 0x0}, 0x94) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="2d5a8bfaec0503d4ee82255ccc79459d336c02f6846ffa083727a27fef8e41f33ff61428dc81376619b5746876cab40bea6b76e7a18d9f0f45c5f33c3f3e548879927a89cca1b9829ff887d45cae3a0012b8eec038b982c41410eb0cffe4204a0387ae9ad2d2eb6f904feaea4325a355611cfdb7ac6c3495a4bcfa6a2c3285bf50ca4a25c77f383bdb14c2f038ba311fefcbe3d334550fb18a5f462cec0e41bf00e3ef37c78bb0086cbdc72b561eb2e285a15002dbb8b7a858d33bdfef916ce90eca18739db369eb9aa302efdba714da8bbd0baaeb55eb585585542cdfe62755b7dd303c01c44de59f83de2b9edf1e60279b16bc7ee4c277e23701b7d58fdad36e8d91c111be46581f230b4cbbe8b9ad764cd3e067d7b7c5e1082a55c86f7cbc77e049085b2749b2ead86b176e4c8d2498a331f1118c5ed72ab0fc4228c8214e0e48fd1f265ccfd3311eff1f9548d1217c02de43ebc6c896afbf6065592ce3bafbc138524c4ffa429c33265cc8ebfc69e1adf360f97ec2edbab35cdc965dfadfa522a591734e25f91a44023ceeaac091534ec097d7a6f9a8efe84829719e41c101ee103c7b8c6d7fb630da2ffdd692d13e9212539b8484ea7fbccc74ecd6b44e08852505badf79984da7ffd06e78b05b453e89bbeb44fb0e72d527ee63aee52eebf2e4049705c41ead90017d7a512146287226941b20b4a603d1f5d9e6c559d55c5f6de7e9159e121dbbabdcdae8f359f66c218fb24d20c3b56ca3b4a2639b4b54e0775f29c731a3fd33331a76c280df2bea7fb0778648bc55257c42cb1a4ae173a21e33a782943d733e570595aea49f391ced7df117548032f44d611d1fcafe7c08fcca48ef9bb719d41c2cde9eca1727feb7bcc14757316a3fb315eb0adf3b60f5d6cfe231e4dca32f1cd2a74a68e44b1c09471f135d6abf0d7d417a42323923ced88d39902998a177bda4d7ac9e5479f0ae49f5fe51818fa13dd9131d219658ed2de42587f415396aa610998f2b166a053cd272ef751e5447122c03f33800268f63503a237fd62235c65fa995ced4facfc61959a7b64f7ef4bced8cbc10222a18aaee1fcc282163cafc4bf899a7de76ac61499fa1bdf6e6599a9b6e46d202230ee0be421b38ba66b85c7e5cb73e26085f8b62b4141f8728515f12019e1738bc5b278074c56be74033511b21e97a727c8a5f9c186af9777574f52d957082122dcadefe3c376f73a33e41094ad7cd404b50e963a200b57cbf4329e59c5b5a42f8700613e30af94109d5562262792e77df91e7e75c40080f8ca071449bc999762d483c30a4eee68e89be2d138a4b64af3c0211c3540227d85801dc16d1bb669a16b243fa98ef40edb5b5fe05c50f8702434c4d2663e874aec996463c6d946fd1391096b02198e88f5e568300d6c4848b4fe7273af633cc6fbf6a5e37feea56cfc20a0b42a5c6266c805823bac41f8d4eb43c6c4673a4b6a8dd303fe922ade7af649cb21c2919390a9ee62a08131ea21840adc9cc023e2aab908ea6bf2d41e52918ed6423677933cd1729cfda6423e540aae3f043a1296b6eb9350d38e07abed7d1ea7249b1b67d17322050d01589c9787f4e5a904c5cfb25e047f3e46de5222121c2af122bd3a3b2b0f35ea0a81d3a862d77217e992cc74f678617223cad5ba21afdc58e6af17e7b4ee3a506f34069d2931ac62d47f86f1983d7204a32544ae0b738cd5ab3efb940ad752ebbb59cd28d98cd6e0441f020ab2d68cbe90fa44be7f7191c2f5748c418dde668ee87d579baed4358b5c47e03a89ddb98fd4209fda85a277460ca20cc6de67c0f35e39d3fcfc070530140f648b50dbd3236d8e5b5e63be12191cd67b9ef128440d8794dc452b5a16f250c9e378d52b1132efc4b1ec8a7a3fd04ef82154de056ee5054fb15dff8df06bdca1dc8b1c1d4175c967445105954d10f0fc94acf39b68105d188593584333312eb6fad6371cdbbbf16e88bed86600d9dac851661dd3cc64f9bac0b2b81ad2564274b5bcc040f065f3fc055f7e254f8954304140782b9a2390bb61fd82d7a99ddf96468f3ef43113b767552969d71190265b76c1358c4e16a21ff959631a19c6f5a686b7884d75aca2810decbfd9fe0520f3b322a80838a2e633e1c2a79df01786f605750b84e2b04b7204ca6022973fca4ab0c8c67caee2349a6b839aa6bebc862f2f8246fc293e0f14a375581036becf081e4fd6b0cc2f7465fe7f932890884794215838558c0ae6de81efd624c5290bdf52e95e4d5b1eaf280d76eb0ceddf438bcf1d4b83e8eec3aaacbd7ea0421ac84f08a480ae48edb7c23c3f94dc59a44b3c5712800789fa3b2b938bed137505d2b247a4c4a9bd5ceddb900cb9a502d10dbd620a7ef84fbf49081d52419e5d08ddd5a1873f6d3ea6a822400ffdad29899bfaf73ce3d8ff182b3ca8ef1c39fc34b93767b9a13401427c440edd2e5f801655e60dc4c5b4ba84e504421b758e0b4c743fd1a1b6be27702e751960b431f1d7a7fd68a9ab198a5c6dbbee137283e6d6c69eedba5345e551e4421f3dfc1c957bbf413c48f64871521789487707278c69eb71c33a6999d7e497dc3d7d022f008addc112c116637f6d29c9247de134eb860cd3e5af369ee474883e7a20c40ba02160ec19dcb717cd3f4f3f0293195242fa814042ad751c774728a797a8c483e0562a2cca698053c1b66c0310affdb6e5767ab6db583ac415119f1760bed5f405c5cfb63b2ccfd5dc9d119fc82a86f98551d92f02410fdddd450f0a661ce041fa39aaba50cda470d3080dec7345a54abe2a7630a7fac84bf95c30a0dff1225f7b1aebb41daec68ceff2b0f502e7433f395aeea75c1ba88229b44fa5c6fa2647e44db139eca1f2b7142b6c23d4879603bb5617e94de0d5353d1b17dfb960eb1c11c67d0d1e1cae94699cc9397b79150dacbbc7361261d5445f237210d2ab8120fe721072394b77df46894595b8fd56f034318e90e3cad94f1655911b9bcc0bd15c628c0248e134295f3ff69cf8ea536b4b7a6c11b4e04955f9f1d9bac2ad39d81ec929b0d29999ae5a865bcc2cffc8fb42af6e486ca12a4c83461c6a72b3c88e4f3d1a9c1f13adc6defbf0110746e39b1d01a5129f996a2af48bc52f06a32764d8d8dd984c5dc4e8bca0ffbbc7e4cd226cc278b35ed16bed6e8aca4a1c18120eef0966dd5327f252462477d43cbd1497654ddd3358d24883d9ddde40f1bc8c5610370841b1cb13e84162cc6d0818987350c22362b12c0f315dbc5dbc33c224bf8d57410f2621b9c45d6857b0bed5aae750db0dd4c6cf50bfd6d5e0c816a9d8951402a1c50ad8169fd94427b42c58399c6d72b1f213e009af4f650e5ef67d2f48c7dc3ef74a8ee453ab84118f2f0e4ff2b8130169ccac37198b337205cae506e8d70acba86aab28caa8117b1231d9c4b631fa3aeceb3c236182e25299392f1ed986106071097314a9b9bd0f30d853e8b4044c00f04b45b2923b572a6a41cb5293cc8dfdbeff56a1375a33bac7b220056a6f6a292035b17a3c3fd55897548c68ad7886ef432cef353da3da8deaea09df078569c042258dfc0763d54be89302b11a6d24f4086028b82520fb6d967b78b611a7e9661a92b1a8f12d407d2289e85a82bd0b7c742055acd2396ba8d101e91ce2e9f387e909fe6da3109e1937b1e12515f23c8f1b739d4c40a287cae3bf59e901fff2ba0de0a36a304428e9febe42a01dea2eacae9416a72ddabb98d2e69c70ea9edfc57cd81fc4217ec353caf01a1a61b925102f866b4090b6447cfd8eeff2a3a49e30fe0a4fff77fe1a225dbdb2fac338526c7438631b69ead8781b86801f530b04b1544be2c22aff4ac89b0ce4353526905e59e18f7f01c221e42354a5269e0e28afa29f38bcab3923fe8d64fbf81433991b0bb9df6fc4c28ba175871d87bb5ce6cf5bf4572bb873c044f0aeb2981e34a005df55d354db0353f6433f76adde2c124793a1da43aca0e62a744992ed8efa8571a26857aa65a21cfc3507471ab75525cedb559c430b5d03a5c4e923f7fbec50d0eb10fc40b3d7986245f4c6888a53df7fe7fdcc11261e70d8cca04baff938f8446bd9048baba31085f20746c5f0e00d816dca934804ea2877cca51b5c0e31dfeefb9e91e41189d67412a09af16b4cb709e6fee71b2766a71c8397578516b656633bb620dfc8bc15de4ea5f75f6845ea44805442125adef9377e98b5d8e73f3a0bfbd330467daf10d9f7a95cd6fd4827fa1b062898fa454437bf185b9e0d98c9d10a5db80364bca446205739b23a1e7e860647ed30e2b72524da94a5f70dcbcd67d8df08f0d57583011d5487669c5a45905125186590322dbe481e820a6a6c29c136fa4301ade06baddca45f0d5ce913b5b763d293da4afaa450b17ff4933e4478fbba9ad9e6e5eafe9fdeb82b7d65bc92f6690d03a49923810558b5e0f5bf47e7d000a5e132217c174445565d57d29f02e71d7205b8ec10330fea51d972fc5c81b1b36775816082f979b5b1fe3601c9c8e8fa0c3504bfa30e3603d5a0f3a7cbd27d744b27cdbf318acbed70697519605453df106123e1a6148c9146154986e288d8a70b6fed1667cc1e0b199067c704a6d41ba751b53102ebca01b3ce90226847808646c95f3eb231b6af0b0f329bd997db5a4d3ff18edf0203e351fcfa8c8ae2be6953472bbb3f40bb6ab3f8f2128d11a3bba133f0204e2e0df189cc8d2cb8af81d0941a37c2165112ed452008930bcc607fa6fe3ad1def902d89c7330e6042f6f86c3a75665ec603b6e392b417a0d907d42e6534db72adbad4266c6601d7b8bf8d9cde807088f76b07c06840d0806eb89aa545292284bf050e732e547ed54417b3ec7e7a7c5e8454a56f5092ea8cb27e74e0672c2951647e29dadbdea86d2a4d9e53ab01c9d21e902fc9c6ff4c317b3c0398561364e880e2b079d79a27d6dcc3d586abc043477981bd36746f5570840536bef104a158e2461296717d247b6004565ffb8eb9bb5258c65032f0b472c4f3667a17e3ff65b45c91e2411b5990f054e0c2a05fc175d2db7fb32ca32e4c11b46f08bae1614e2add96133ab383c1e78f4e3f21ed3010a35c76ad88714b526d3a5ba799e6f7bf9d5696e7b42c8c264162a28831baaef180f40489ad681af6c0a674cc7b65e8b8ab704d15546f70ed1e67f7643bbc8d0b8482024b8f320b5bdccb1014f5e1a34c6c795428660f026d93dd5dcabf2330dc62894bfe48fde6b931ba55dc2a222a27a3906ba5b98476321b6d27217fd58ad93b616aac91b139729d91de6f8ef49402e2741b8dd821f4cbaf7c4662ac782b255dc438164e54c417044e9bf5e13a8247777726dacea4341d8ba03bad17070dd0f07da13179d29ac00aefa41aaf4688e99eb395205f6d6d71999b3718f7f2d618117334977a92b15ed52e45e7d5df7a22be9cf0e008c41257d99b2426068c48de100b8e3019b624ce2f2849c35b74fe5ecc4478b2968a97cfcb759fc73c8cd21bda084646dadee926a4f606768749a89e11be2a23985631c922a73ba93f3619dcc4621c8da57697420859210aa43ec06feb649b9f1362fe9553f9d552b77203085d9a4da629f03fbf339bd8ccae6c411f6d8f131232575d28af2a2690529080f02a5a74fe59d1255039f09b8d565a4838930f88d6129389f2312a2ebcf0fe7d8b6dea3484cea9a1628349218b8ccefdea2b6c37676acc2a082fb73b19705e98079c1de7776cb830e79c0081a2da4059714f19587d10223fc50ea8434f1c7919a77acd7c5b20ac9fe8ad9d348e2c5bdb57fac1ec0c31a1688e22aab4f1a81826f3a47bd364505d35975c105a152aa8e42b2422a100ad3d3184d286884552143051b79294aba34bfc5cc332f0b6aa3bf186776ceb8861336ed97b85b9a7d548bf7b7a907256c7c6a2427d92aff68ba18544b95a75564029387fd2569943f8d54e64cc621123105eb56bcfaea06e38af31a05ef38302d2b6178121d52309865c5ec1147159c07b4d4e1ece24f6a1f63a492c617870c96dcabf43b73055d749e465cdbb965b18091eee65bd423f249d934ae904c2129b93d116353fe014e1afbcab5f74766a806451855bc28494653b9a863b9707c2a0fce3eb4b55c4220078651a94d3b9c6e92f4995dd56ec17d144b07bfb1b955b557d14774e64f400e0075781381b33d73a60f6b96cddbda0962b2a609e6bca56a109847bc13798be711d3779d5a8c6541bd247fe3b7477a1378cdafece044db3f31810bc95f8fb4ae7a8815303faac03651a13924308c06c8e86506b7d186a717a1bda1d7cdea2b8b682d37f954f488a8e0d65f868a81b1af4b8f7331ba84414a7ada82e81e06e76ddfa0aca0ca9a53a5de0bcdcbb77284bab522ffb6f803e95f116ac1670c50acd36d80f170e8e7e05163f050dc89dd93bf9160a545174472376e1fcbb945e9294f796a09ca78452683b8bd39049d118acc24ef0dc18ef88899dd7c27a3585e914e6f6bc8bb1950c061c722134243cf151785bc19dada45b90d97cb83bc60885a908d0c13be9e54f1929fe1f76fb9886808caf0442aca4539a42078bfee82418d611f4c432fcbc5242c35a396c17c1b93b98b277a9c8ef0143643e120c0de4b7c6beb0a582789b81a9d3a0b8f96a332c89764283d84ec5e6b8350683a2b4eebcb214a7ad430ff9ebcfc1d850717a8d38b8e35e67fea4b8f14938cc3eeacbee30616c09e848ebae3cefb8f2a904f2b3d1252019ec914278942d9b914f95574031cf21f412aa7500f3955db7b9ef9403750058d75e53d16803d4463f7884df1e361d34ce646e20b3427a45cd307283f1ff00cca6c841fb9b06543bf1a254b21ff421331facb2f08a484904ea25e049597c8b0a2140e8ed2906d574e73165ec5591c89b5dc08e5943ff7399f76b1df90947a9479b1aab40abf8ebadfa1455b6dcac672f495a64b6230fd3fe948ce6c16cb87e11ac7affc9047ef33fa64585c1dce3bab4fecc0c7d81b5ea73aed3ef63fafc880b6e2ba09d0df6d626e817075d5f330d91cec4bcf4829c20192bc0ef7f728f52dd3e074bafda4f8cd8465311a9124baad61bd73ca76a0d0d1b80cb7a5e429067ed4707b64d38613008c8af3ffcedfeb8cda26def8bef7cf947af23939d18adbf56715f90c2df716eb037d536cd36bc2b832c57f4a319f392e1ab37e02dfb392bd52b02801665c8ea28edfcb153f267dcfbd671d4eaa0d56335f7ce5eccda6b9f74621a1b322f1f3a60b00196a65327b36419394e776b2e1c1479f5f902c5918adfa5b112bfaf786eeea1abae7c8c9d3e3fe737c23092143376808b5e26cf896fb5202572533facacaac10ec26cab819f74cd372c95d50a9b6560da69c1b22d5c15759b7ab1d8118e672bea9af7e8a30458ccaa1586ed2720d5465e139fe3dfc0bc95107061471cdf28a42aa8149848a147a1710407021d13e611b36ad3624de35c4dc5a02ba8ae724b2d8cd85f15094e1893c98052cee135d0c1c11a73297775fb517abbb471a8b100cb51d8815acac16703b56f8aadae334601a84fc306efa08aeb2afbad94632b5f209603cf5e5ca634bd74ed2e525580ddd2f2ee65241788f5e867b44d7ecd71f5858d269ffda98d93860d8f1c26c47df1199f95991b54808bc26c0ab67b40745b8dfed41838e2c5594413d2c6022abe3c1f132e9f7c8c69e50729325d37e7502519d53d7e1bf0bc8f62d216fc9c88b197cfa1571ce8368cc1b4b625559cab7e8397c6c7bf537bc8b9d604f4bdb04cab86d349e4a33f92eaa07378eac07ed8d51aea9c15ef4c4b0e0a16f9c794701a1b74b58beb15cc165a4dc1a13a0886f55cba2b977447b61c01e1295a4221e19321201f1df0d25c9e14bc4433678e48a5081de7c81f79a6370843bf0d6e3e5192c1ddc0bad14a11ada8006e4f6549da3a877a991351610eb0c5bb6228d266baa27eab2b9bf4455fc54aed3c74c12590835e498c11efdc63dde52a62d8f3a3c978152018182b3e4cbd00fff317d06f8e9475b4c7506dcc5547d8ace2b71024aa0e2220936d2bd05163b8f15bc429378fec52ac39d167200758884056dc14d3329b1d47f477a217eabb651fa97e05451cd6e861996648ab439c9aa6fa032e9083b8c0f87890c88c50dd5a6e6be8c4a4361f3b4c3181c570407dd1d2d835a87dd4b24f55a649c3e478bc002f30894d06411dc4dd8277f796976b8b2884ed371013225bbd95955827741331777da30b1b3370fb4d0bb914d97660f7e06759ba54b5697a4f7cfb67035867f39e53306eb55b31ba660769ce6993b2f44a7173576766ed20992d04e6b4aff20c138102537a142ceeac3804fb0a4eaddeddb6bcc69007c5531f0ba6851854d8d836a51e8d644c7b79e071f19986090d2404b562a17e1ec1da775c171373bcf5d2c3d7dd64a587d66e42b6963d892df898766648f37c8d10ca249e28368c388f4e70a80b2992a0a390a2d51a17a0c1774fec2d399a2b0a99c802012fff6300c4275d1305b9a9d0f8144df64da9016f16369e813dafc7cff55c5a60602141fcaa62d9fc0b93df6524d8692be3c7ded5354b63014686e98ef2b5947eda93e0cd232d3fdea943d3bc92a6f2835c55aca33dcd087b7260bc68def6ce96ef5d536b61006a595219382d8b8365eb92eab44e677109971bc4dfd077a56ff1f27e9b80edffb5ecac7bde5dc2a74c30a24b9cd1b0d4356ec424350e364d0dc929d657a8626a22111d4a0f360fe33be72a1f2c4f5c1b9843145ddff70d583a9b433cab33b10d93531aab7bb8a53c738aae79222481b135eca9441f47068299deabdc9c4f77e5d4ea286e8300eb5956368d0499691dbab1499baef30bb6c4a9bb0159635dc1774203fda828bf804e8f526ffb55abd8700915232964b7f219a7bb221efa6428089263ab753eb421a1952bc780289a85ebb9b510dec67a826ccce1cdfbb29a3a55f4e1068ca2c077544efac686d77c67c927430c3ac78c7c8b1f834be9a689fdab38f1401797dba32a284f5c5f9ed13d34d8a001cfeeeb7de12aaeae7706004f96a293e52106fd945428e7e98915070b1584a323bd8f00b9803ce189c9c0af032752d979df57a5098458c7de034db79f43d27bcb720078b05e5f364f2d789343fb6fc8b2cab810b1745fa36aaccf5d27fc7f06ab821268d83e697870632814319533373f24584b35b2ba9dd9b52a4a2e559c90b1b87549530a64fdbba5587242535fd0d600fa6e8497369a5587627182c62da4a47bc6ea99f7aaa765e3b74b7d9c48e779c8b13a2535d03ef8ac4bf3fc9e6eda5628034e7e453fbd6153b8b8e9f693c5dfa37f6a0a2542e6f86ebd2ae926822d7b31963c8879557dfa2a869ba3c5dc2dfcb60bc0a0c9816c2c4c58bdc09c2d76a007e68c38fd8b88709e5c49341630e333e13413c3e60c0d768d4c98bcb297e819ceb0f8b229d3037ac95639344bf42ee7f77922a6ac039837356dfd7c0ba3c5393548369bd71b4824326eaeb80a9c249504a08bfc164af220047cdf054d928a8d929a2fb621665122062dbd5cdde82b8289e0d510246e0bc30d34d8e96703f75c75328f99437be474315d8cb55066badbc0ee852c8ef28e1de7f5b58dda97742db5f708c6be3279d700ba147f1519485020336c260d825920870739fdb288f22b980fb7bcbf147b1a95fcc3d8d1899749d928eea8d47cccc1fbbdd5729a3f2f73d2ae352eb3e043405bcb7fa12b2a80d6a3f0178a18cbc5794fd65f0caddaff57616dfed94884a48b27b181c55200d9ecdfbb082dcd2952089938e134eecb40c2f95cb7808fc7da09282787edb1939e75bc8e284c01239a895246be025c8e0168ae83f5adc62f4f81ddbf6ba9b5fce3ddd111eb61c42777a8c303abe291aa9ef383ef1d6c26c4f8698375cc76a7e078ac948f2e84de084fdb380d38d2e1810ce8118999554c06f8d583bd37003b407dd7b41a3b14f10a5ae7c2e8fdd087cc322ddc399fe38cc542bc957b38b0fda34a3ee5c6a97d25629d26a75de211fe1cc4ca63880caa8f85f3bd489c39cf30eac81784e4456a775dee3045df2a1875623a4fbf227cf90cd237721a6dff29d26a16306e4033cc644e35cba3cc4e45cfd0cefc9c8d8a0f35bf31a8319b54fb549554c7089b9334a9867d51d71aae1f342d5602ef2d394e6c8a8aa6c15121d8c8b3abe3416367dcc276c048c65311ad70df0ecf0cf817a1a27e1dc50fedea83de8a8bb7746e23be2f335c9cda9a7f08d72b9debc35d49e9ec4c9815040c38c11375dd7f2897b20479343b86b51c317e0e90f9465d8c425857e1831931714284c60f68036134304558e53d2d42813a42a3017ab21feab6132f3a2f8c5670a1076dab6136cd6836b52d7ee54639758085438831dcd8157ccae47784a35364babff9299e4eaa389931199b4901f12185a0d228473d4a147d88e55bd11f8ed2957b7f2f3efb3e444f0aec9bef1f68cffbdac04698cc277706f2ffdd263586b84c645f1721ee3008b398918fdfb9b06b98078447c0edd7c058524825a1124e9af37fa9cb77302aded60eca394c866397c3bc18f8277d9277921abd06b61b1445f43cd7f0b5b2c023832f6d67f86d9b6ff9985edee1ec2572486b43d3be834d5b60d208b1187ca7cc8b17133f55314ee640268d5337d7dcdf1742cb543d63ae3c09e312ac05b5d585d9437bf16bd560ef739f12c878178757e1f675a8671becae2bf03f87de4bc40b4b7a3aa6e2f28f015332b10b9fe426ebd45d7a26e769bb05eb2866bb34c56b079a5bd23352bcb08c379b400512b0d8438ee5371171ccbf2921c1e150fffb5885286f933f4393088ba21c47b15d1a35de27dbd02e58859aa080f87d0a857e92d0f52c549c04cd9368c94a8024e184773cb3431d854c2855e93ac9f24d5e45d11c2acfb03755e7f279b368e2e31b3653a7d7e2e102ac67f363c195272e2896bec544f669f2d25ae8638ac30da6ed52404b32b8ee9f0f2909ef6b4e2db3a6ea88b8a6f2f2c025959efb7b94005eb307aae01af8a19ee6178270be09d93837793b43bcdab98b9c04b6bfea7ac2217c11aeec277bc199b67ac24b7352299e7fec85aa151029d14441b56bb6031cdc72a1a90ef537c6d2bce7ffc7c366a88f8bc87cd8ef4e91b5ad9d85ed84f9b85f029252ad5ff13d564d842ef310feaba90974e40889e7cb753eb44ef96bc4c25b021fe50e9957a9c3cc9904aa920fc8a8e82a826b945559b57591fa1a26c380afe65d930f9bd9a3d93f57324d28c2741e728cbd106dccdf66863e49db8a0df1398ba8594fa5102b8157e4b987f4339820df5a7aa2b1c47ed0211437ee3d81dcbffa500dc4b743d49028581234c7e9db2e951d5bf3e3c448ce58bf94a2f7ef95eda07daae00bef1794d27330927b2460778fdee580efe431ee244aae452cd60100b6c9f0cd5e79e170a7b149abfcc26b77d33c35311c95e3ba0752eabce3d1310a8aa45ecd1659e4e855919d153ebeb434581a6d352508771b030acd3fee51badf6767a7931bbba2cf195bd98fd096a6be14d7172cf1dbe3a82bae73a29223c623c090cbc5fffe8f3291", 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000002600)=0x5) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0xc407ac4692873a28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90224fc602f1a99000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x1fd, 0x0, 0xfffff000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x20000, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x4) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) 8.528751812s ago: executing program 6 (id=7298): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00'}, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$loop(0x0, 0x1, 0x8000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setuid(0x0) lsm_list_modules(&(0x7f0000000040), &(0x7f0000000000), 0x0) unshare(0x4e040200) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) fchdir(0xffffffffffffffff) open(&(0x7f0000000480)='.\x00', 0x48800, 0x50) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r3, &(0x7f0000000080)='V', 0x1) syz_usb_disconnect(0xffffffffffffffff) 8.346266005s ago: executing program 2 (id=7299): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e"], 0x9) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c45", 0x3) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) 8.345940127s ago: executing program 2 (id=7300): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x11855, 0x0, 0x0, &(0x7f0000000640)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r2, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440606769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca93d8d3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a05d786cbd49342c236537dbbeec666b07baab917252113a5b9a77283189b518f356debe42d80cf2d0687b9c64d0253a6a09286fded6e4f8557b8fb4f25ca4fb138af8945c74bbc98748eaaa030be5317646f195e6e085ac6ddb29542e3581961259987241f7e7061526a7afec8962e74215fea43703a4e543ee9d1a3c3f5f2a41977ece8fdadcf89ce331ce59bebae5f53513d0e10485d7ddbda60513bf339602510b3a23ea29a0d5d03a61e34d12942ea4a847c884b27b5344a456d02a55f8929cc567e7c792c01fab7a7b32780a14c361000609b817dd91507b04d875279527946fdb8fb92a512485e234d092c28f1d0a0498731ccc0eb10515d510e8945839307b46512ceca6f495fdd2c6ae5eb2ef3b2a40ebdc7edf0048e3fb5e3d97a9ea5113a6b70d20ad5c43f0df95d88c0f121a1884da21a21f0ba47420f8391a97921cc51871dbb272e43710fe71d5e342c3afd10608a8b02f00e8fbd8d570b6faace86c494ecea8913233391e7b7cec3d571bb3032181ed58e1b513e511f79ee562c8cde9b3b74c2e95dcde7fadb5a666bdc0c1684794620ce8cf0c0aee8e90b3ef6e7160d3f055cb4d1ced32e4edc15e7d102952d3237e6c02c591a95a182bf190c0124abc7f1225332ff1c5e1b94e4e9bf02c1a18bd7bfce20707f7298da322560bc1a4cf298d46f5bf8ff41da21e25aa17f65f9ee43ca890b5ef6a3ccf3efedf3ca60a9acef1352ad0c43e6cf375108cf0974ce89a99adba7e6a3f8949dc573440fafe0e3abdd0066057a2d868e8386080f18a421568d8e7a89536a4173861bd55245c8fcf7dcba18edce36d2e85b9630fbc218db9ebd16abb11ac06fdbf2bc3e6394d4c6e7ae71813d30772d487743a2856348fee09989ce03331e7848770fc91e62191c20fe5f4a73c5dae467dd612bdb63b1e50921d38271305d7412103d5a6214d6d534d1d530b9169f882b6926bbd338f0282a8bd9a44603934e5249e83f1d0947b39f82a7843d2b6f796d8abf7ff3e66cfd4519324d71cebbf6580dffc10d555e479e9acaa12c3c59e3732c181aa4223d0fcdac514e9d7c7963c2634964520286b028f60a4ae612b8e6049315139e884cbffd6836253094ad023329183496cf663366ad4d7f7f5f1bd2db9b0d33f106c041fba4494c7da404d45d8955e5459ca4a62862721ec1fa534fd95e262c5814426816e60000000000000000001aa4fb6f40ec24f42f6949cc28d2a0d4eb61cb1664627582d962523586539445b81e9759321652280ecb", 0xffe3, 0x6000000000000000, 0x0, 0x0) write$selinux_access(r2, &(0x7f0000000680)=ANY=[@ANYBLOB='system_u:object_r:net_conf_t:s0 /usr/scin/cupsd 00000000000000012352\x00'], 0x45) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="300000004000070129bd700000000000017c0000040042800c00018006000600800a00000c000280080014800c001900"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r6, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 7.5588312s ago: executing program 5 (id=7301): r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002) writev(r0, &(0x7f0000000c40)=[{0x0}, {0x0}, {0x0}], 0x3) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000380)={{0xd9, 0xfff, 0x4b, 0x8009}, 'syz0\x00', 0x11}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(0x0, 0xfffffffffffffffe, 0x2) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000180)=0x4) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) dup3(r2, r1, 0x80000) 6.103456438s ago: executing program 6 (id=7304): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newchain={0x34, 0x64, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x10, 0xd}, {0x0, 0x2}, {0xb, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x1ff}]}, 0x34}}, 0x20040000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 5.764256393s ago: executing program 7 (id=7306): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x30}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1) socket$inet_udp(0x2, 0x2, 0x0) socket(0x11, 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x15) syz_socket_connect_nvme_tcp() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x30800, 0x0) recvmsg$can_raw(r2, 0x0, 0x40002140) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000840}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) sched_setscheduler(0x0, 0x6, 0x0) rt_tgsigqueueinfo(0xffffffffffffffff, 0x0, 0x22, &(0x7f00000002c0)={0x41, 0x8004, 0x4a}) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r4, 0x2285, 0x0) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a66000000000000000000bbee07cb010052f436dd2a00"/42, 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f747082f52a9d212fad09cdb0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) syz_usb_connect(0x0, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x57, 0xc8, 0x27, 0x20, 0x1e2d, 0x69, 0x9fd3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9}}]}}, 0x0) 5.233413649s ago: executing program 5 (id=7307): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x800, 0x2) writev(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)="ef", 0x1}], 0x1) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f00000003c0)=0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x11) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) ioctl$PPPOEIOCDFWD(r3, 0xb101, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f046}) 4.516569045s ago: executing program 2 (id=7308): r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/cgroup\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r4, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/200, 0xc8}, {&(0x7f0000000280)=""/180, 0xb4}], 0x2, 0x91, 0x2) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_io_uring_setup(0xa2, &(0x7f00000002c0)={0x0, 0x305cc4, 0x800, 0x0, 0x20a}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) 3.859796733s ago: executing program 5 (id=7309): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x30}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1) socket$inet_udp(0x2, 0x2, 0x0) socket(0x11, 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x30800, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) sched_setscheduler(0x0, 0x6, 0x0) rt_tgsigqueueinfo(0xffffffffffffffff, 0x0, 0x22, &(0x7f00000002c0)={0x41, 0x8004, 0x4a}) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r3, 0x2285, 0x0) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a66000000000000000000bbee07cb010052f436dd2a00"/42, 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f747082f52a9d212fad09cdb0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d8", 0x29}], 0x2) 3.284271076s ago: executing program 2 (id=7310): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0cc5640, &(0x7f00000000c0)={0x2, @sdr={0x32314d54, 0x400ffff}}) mkdir(&(0x7f0000000000)='./file0\x00', 0x16e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) write$P9_RVERSION(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="1500000065fffffc7f00000800395032303030"], 0x41) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) listen(0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 3.205750267s ago: executing program 4 (id=7311): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x55, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13141, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x1}, 0x94) close(0xffffffffffffffff) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x7}) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_io_uring_setup(0x496, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000620000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x6, 0x10000, 0x800000, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0xfffffffffffffffe, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x241000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x190da) 3.18423398s ago: executing program 4 (id=7312): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r3, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast2, @local}, &(0x7f0000000180)=0xc) sendmsg$xdp(r0, &(0x7f0000000700)={&(0x7f0000000240)={0x2c, 0xb, r4, 0x3c}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)="ed50a4c2199127cb1823955f725fb44a2679ab1ca7951d26c982bb3bc1abb6209a9029792503714654ba68a4fe865d78b635da316bc5472a0ba2af1eed4dd11e5682c26447bac0f55273b34609f74dc4cfbc60681c8c5d21b6fcfd10b8bc8ea499060c340df7c7e54e8bd9278deb7ef10ca45a40b9b41530fc8a3645921ec63a65f7", 0x82}, {&(0x7f0000000280)="d7e6b10846749c16e66992bd110f44fbb0c6df69cd511c812e261ec48a279e37", 0x20}, {&(0x7f0000000580)="0b5c805fae6f7dbdf7cc853807f0500ba9a3d784a2af47ac2d9b12405677190896ac862bf8dc6174d8126f9269c9da37b40b442534d747e7b5749342a8cfa76245ee27305d89362f94ce3cb5db90f0c0eac5f3f1ed8a6a0842d3fd1ce1dd84bf86d22ea0b08b", 0x66}, {&(0x7f0000000600)="1ae7eefe06b8bda51d9b0f4ff9bbaac2a9203ea15c3e84b8dc8752f39d87e825a0bdca668d2c0f778d84002811c8ce728e2ab9eee988153dbede280a0949c39c18d53c2adf1311193a362c72b0c8b6f256d167c30757391404ab939966d16de3895db50f41466e0bccd3dc55643ae1a265629b29e592", 0x76}], 0x4, 0x0, 0x0, 0x20000004}, 0x20044040) 3.036297787s ago: executing program 5 (id=7313): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="8c0000000001010400000000ffffff8802000000240001801400018008000100ac1414bb08000200ac1414bb0c00028005000100000000002400028014000180080001000000004008000200ac1414bb0c0002800500010000000000080007400000000028000680080002007f000001080001"], 0x8c}, 0x1, 0x600000000000000, 0x0, 0x40}, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270000000000080001"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) syz_io_uring_complete(0x0) r4 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e28}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(r4, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r8 = accept$alg(r4, 0x0, 0x0) r9 = dup(r8) ftruncate(0xffffffffffffffff, 0x200004) sendfile(r9, 0xffffffffffffffff, 0x0, 0x80001d00c0d5) 2.93861792s ago: executing program 4 (id=7314): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x800) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0xbe09, 0x800, 0x0, 0x31e}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0xb, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x4, 0xfcc0, 0x41, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f00000000c0)={0x0, &(0x7f0000000080)=[@rdmsr={0x66, 0x18, {0x40000003}}], 0x18}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r8, 0x4068aea3, &(0x7f0000000280)={0xc7, 0x0, 0x1}) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) socket(0x25, 0x3, 0x800200ff) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) fchownat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xee01, 0x0, 0x1000) syz_fuse_handle_req(r0, &(0x7f00000042c0)="4a489b2b672028717e291f7bd39f2d91b883289c6d41be38181724c917744217efeaf2514f2b62e551d7ff0470c5b04c5cbc86955b353edfcf7dd37911378f298e70979f7d0841919d18119413518240dbcd9a37856ac270076f6b30e04b0785a7c5cafb619b5914358b2ed9d59d445b36f2ccf23ea594e6706f4afa16843469d36646262e0d108d234d1481599c3048898448df0b9f64967fa2a423d7203c695fe65ce24d41076a30120fcc316c1ccb60559221895b68b756f754456b900ce0fb68c47970bf6a6a4298a06a57a76f9b143280821114315da74e1dfb34f36d8084f3a1886905c283356ac305bdfcfae723516c39b265bc034970adef2811edd3697675506bc60046f99f6595553d5dd20c783fb5da4b034b9f049b019201995c3ab868352f4dc582f8fcd7a020943caa341ab7e4a0fd3bcfe7314bdf88c06841d2df559e5eb901a9f46d1df788f47cc9afbf6ca6ff8780c15e2319a7f9479a650e24a72e59dc37cb7121fc7ac32e5854cef78c9d150dfcc765de862b5566c96db7d65fed953b73ad06339c6ca7815188c3ba6982af4433cbcb3bb4daec540524cac8b3deb0c0d7c21278d62961bbc0ac575653b920869061f912ac194bc937357858fdf3fc3be4c33ffbb19eaddf0ae8b74510ec619e636d09fcd52c9e9e808b6f033b8113fb98301769e7e62474b746ba7ef86ad6546eb1705d4f07629785f96637459d799fe30ba1586c2b19210f3914ba328a25c05ff19323f756df71da79e5bf1395284d2bb92fb2ffd33d30a5b4cbeda9b1a1407eb2a56597eaac5d0b5407e240d6de155c05661f79c31c893f53af220e3aeeea9d85936f554824ad01c7114aebd4c728f8ffeb7e9eec4626d852e836c11570171550e295eb14ee0645473ec149dbc977f24d9f65e3f6f106b226293e6cba22d31a432ad9adaea336abdff85a59e78bf0d6d0e4dccfc72c6e94e0f264ff38487330de317ea8b774684167722152b5557a9bc5ed28eb81b690246e27444b3b989022553389f6c822e148dd4ffe6c3efa712b86ba1e7e2ec9cee70910b8e24720789118d3bb8cbe0660dd162c176146abddbf9ec37f2981747f63e54ef959cef9e1563a02f69ed8bc25020aa1d833a2498f2aa289348e4ffd4e0cefab664224a95aabd2074dae33c6abb029a76c7513b664c3b41c696b55e7a7442fa5731cf33b9a19a675140ea2d40a5ca9c925727a00ee319624f904aa8582800d4051ffc51fca739803877f30eee083130b516cf162369a0d4cb9360ca82bb07962f6a6e9d80547da7fea456cb7594785057eddca74247d0fb047d136a320005a9f6501596e0cb235f3fd83c80fc6d3a20599935915803ea1ff2ef86ce5cdbd105ffebf68c3514101a4745341e880fddc448732e0770c3e2989d0f69e4a73690b97b9801c832d3df7c26ff96a82cef2b1d2c3969307f73ba491a9e4ed7ac60c356d80d181cd3b3fb8b07099754aacb4db3d4bec550adda59635b4944bb7c60eb950b2c49541adfc349f5e602ced7dda7cf2e7e7561f428bc23bef33d2a77ef26ba8a0d64b67241533116c71cdec6ca0ab66eb1195921fa6baffe13f27c4e4437064fbaf973a60e0c4ba1b4fe31b60fb65cd53e628134a83a34b025abd6094944f00b4020d31e1e84073e3a4e369b47fb75ca3cc84fe350aadfaf9ae61f5f7acf7a813b9cbb511a9117e0690f6e4a4e712a58b39c881670b9eb392eacaefe819bcd9c6af03712ad02037eb42e6722a14fbd1a8d988dfb69ee067876b44479aa6271ab14155b3924f6902367e9ad4f5536266f0a00c0d59fd21d3923625d917afe516d1fcdf0638d66c223a605956bb2e7e56c03526fc68002ce19cf14f056f1adc20888784e62c32d81f2c7db62cffa35eb8bdf0be066c34b7531d8d2afad487ea34d42f07ceb15a5e7dc8ae393285941e820ae7812827c3d9b33beee54c5052eea4c0ba0a77e95aa9b19dbafb4dc6efe548979ef926640269f9486a4d32284fa7cb0f779082be1d8bf0f935216911be3cbc76c8b972f59505a9df398b8aaee3252b7896081f17dc80c1089b836c51a0761d1a8ebabae6a8cd0a83b0167864b12763a5515993f5000f2633c3d9aa73fb240d45b811390b381cda6df7ea1222a477f27891b28e27901ecbacf3229d8f20aba6f77cb67931a200b0d46c22bad550f2c7674a0f18c08ff11f575b45ecadb9b57eaa2a115f44d9d69a1ba6462613cc8d7c1628f9773d6aa5a034ddd9d0024b5f635369fe912455bba816cac72a960b3b1738d973eb4464f7264c8810f8ed8659aeca6836ff0956eb0862b628003fba029f548cb4bd67e0744a4cb03992012c903a9016c4e71c7f8f5e45e871c25c8040970d2cdfa72399a2c8597458cb0ca4418fb36597d20d80597b23ccdd9f5b7c66dd93c130de8829a7711aac25f82b5a4a103c0e2828c6d2db6201306067b0c10472cdb2c81b9aab62e95967cc7674ca7e7b4acd64a417984b1180f1236d3ec3fcd90f53e9f3224cab007e51619e91da001abffd90e798d48b177a0ee91a4987c8bf5fc231c72342200641cb51c6a2e7f57d0030cb77235e43830a214a2d0669927c2dae9c3c306511c1dc0118713b0f9e36569e08af161dd12c0b79257476296510a5a81d90e08d58f227b09fbd7df8712bb745e7cde96537895c726127a8d29d2baaaa6e6fd576792569bb0de42ebe11c2d47a881dbe94c1103b9cb5a8acde4c19c115fcf11af59fbcdbfc157165ba38fd88cb334cdbdaecbf56846f2d52f6d916beba34492d6bfd22295cfe62347aff71c415ea57a161dce25f00f9764b1afe0acb468512826f83781cfd7e2657950a9c10c7d92d1e04a4ab54a699f5c51c968ef2da5022c1a2884547a25a352b7b7f72a2c9c5df8927f68b390adb1081b70679b0c71da7c4199693b3fd7a3abbc0a4e34d1a7d186ff04da4b75744b578ca4b9bce5ac3c17732847646e3ccbe292b76d7343fe8a7744c3f7fb8c7143b15b20216c7082d2f4034e97e202e17b49522cf5d8c5b224e32e13e2d5f496a740e6fbfd976c75da75cdb858fe4a25e0fe15d514756bc09b349ac1194ccafe220b0bc3b27eacef1c5876334f6ee156cb8f30c42a082c0a72147d69eb586a326ab7ca1d171d7fcb777b0d2003848667d5cb3aca5a47ef5ba3ea018745fd8515d3e1d361953fd78d2523715ab29939892fba2dc548f218f2ea29112cec8618dbfdaa6972d17c9f06efcc6c0ccfe1fac71a59a07ab49f38aac5da21b1dab112542b5b192581234d2a74d08309811385f03076acbc74287d9f0e37a9f7b97c413652bfcbf327295163517c4d2daa70b84cdb880f645956833feda59c24405686a510b812605862b1e330af3204dbed01a65a51616cdc11357f0c603cb4c638c0948613b5de22f20be23459153e87ff8b0100d5c04edc009423e8106a05f90b12fd0657874d97ef5f2f839185a6dee96e5201d304ff291c6f27d08e35990406f138ae3e1591ce7489f5088afa0c8c5652561a3a3eecd89b6bec9a1dde85b5daba98e252e51d84f4eed648fb5193edd1be5368bfc2ef9eecd869691e6f926e7c549413fd9eff515a51e81499730cea9c576ff2595de95b6e3fd3c49d6b38023828ed9c49c731d690428d4d9c9a03d47081087762fb1031c281e2a48afe513f81132d54f2168d692890deb7353fd189794423abcc0065c42396e43531b687d2e4ea57993d517843870b855bf7de1078ca8c29f7c860199a74ff0fdbc31eaab87c9ab2ae65d1c8f7e8930ffb4df995f006007440321e041304a9dd69336def8a0d73c6688d7a79fbc1acd03b5b48b16a6747dedfa90ef4c0dbedd9a6d8658d926b5aa2035d03265ba9af321bd3dccd8b16e87c81f06b1b6a9436bee8369edce280fd09a6f1363c743511466267d6377400009b9708380982e0c58a0ad3bc6ad0a8cfd06e7483755e4bcbf4b1ef51bef14fd3201344c1b8f78d54c3fc91f36e6554deb227bc666506db29b74ec1cd6ecc88affeb8d7142179c5ebe6674f23d001598654ea5ad49040195fb70615e5b0ea791a42d782b75f8f822b8b07d8521c67925541de054ee1e2532a76b0a14e8679cdbc04a139a806178c21d16f8db9b8d19b1ea78510fdf14cd7af73e05edcafbe4e7cdb394b2245f17587a1479545a302314c63240c35353d6467fb49b6510850325a5f5e77f1c3d08f018a85c78f8907e11c5896f209675772cf1e88e8ed417a9401a50374c9df479128bb925898a2f65bab7e8047de8e1d66767b07fd7526dc6d81fdef6730124d1858f956cc6dcf3296fd06f31e45cff8e210491b908a9b443efad1a37363ac81bd739c72f77855b5f288816e38d6803d81726d4ef69e8fb4c7aae8fc66993f0062c7b3c52d47834977218251ade4a916689c34e1b8d301b1bfbcff14ad3a737d2872b8c565a8443d4f0d3e40767218b9d16a40147ae54ca8bf02479b2bfeaa401226ff141bd940bea2bb585e787b8ea65a096f6e09918e295293961a70212fc3ceca440eeeb00c30c16bc1cd4fd89b7e82444ed67776cf2c5664e82f3471f968c458ad3d004e23fd3a89f38cafe0354adc146d8263e7f853941b1421070ba3dc56829ae19783a5be0556a01ad54db1c7daa124098bfe88a906dffbb0ae5be182b743efae75dd0f244033fa7b59e13be3e9e884449f7dd8367a75dcbff20306abd6cbb721811e1cf69ed10e2eb6a9cf5630ff9f705fb5036cae6f0a81c944412474306aa3ddd37100b1d151da32931d6411a92a2b9b54cb834a12b88a89a77799ebe29718ae13a3ba71802b63981298bf391d34981724a994107f1073023f79961e9566d217e95a9187712a040191057579c975b0e18aa5c95e91743f6299f544924060ae91d992e7bfa77de0ef1061491375d069e4af9a755b14335484af581daa0d4c172883de51819832fd7e26645c834b094e7b86b7f1a93f3b3d34b5f7c17cad73eb3c1cb983623b90251ef8588b8bda62f9be3731e42ae08feb4d2b3f374f7bf8b94f3f00b9e569f407e5d38955fab28d95ff8e3d417eaf92626d2dc1bae5747e5bc42885c942d30ccec9596a796af544a00ec298b10843e482f895e1607eec81e808f2bb5f181cff52504761b7aaef48582904afee92afb0c91a54d025cd1b0ff6996a9752804105c6d0599069aa350e37933967e2a543339ed744a45622d5903c106cdaac1c91dd4959927cfb188bd45d60979e124c607d90ad30a1683d2d9ea30874c41ceae0f312241bb05de0c7222971a39b52a4aecc1b1b528d89cbdc4b461238dce9728954b9d69d592987ea11c70c653c9d63d9335efc18767683726f2527bc355abd018db3a8c35c51caec1b7d8cca460c16f84610564ebc1755cfd951a9ca78034ffcbddfb3d8a9c17b8e5260300e6b572edd993889ef3c5dbe97ef8de4237b67cb622c3242a2789dcf4306d233cc7c29d456f403da6d35c0fc05d6ec23a480ae17a85eb9c0ba5dcc1192e61dd6819bb22f13cd9dae41da18fb8a9dce352828f0128d2b1aaa5648ca0e516f9f7461a111c85d00f7d9d6f5772561568f45a03006c3b371ea38969ae545b245efe123d9790b2713969daab6f13b732fb220e1a84fe39e4ab033baa4b31167593a07d3f80e2f937b7cb99ba59c3087dfd04d255e0ce2c012543da401b6a6f074526abbdcfd5892fc66e9402367ceeebc29a05706b41e9ddd34fff19de040093340bfcd8593fc2130f05d9e07fe923b8abd572fa205b394d93520c787df9d2629cdf1443fc3178351327f1bf643cec7a57af41e6fecff51cb076eee3bcf98c7e66b149c1524a7069f60f84a73e54b433e32feed5fde55648c12fc22e8b19b6eff95235588bb8e9793abd50fe19d480a5c354cd74b811c231bb3712797d4db89208d4c6269a79fa4ff98386c012e4e8cad23c7fa2ae3f4d52bca514450606c7a016551ee51484aa8367a7019f719c1c79a5ed2ac72f1960a7973edff5251e083cb58b6d0c03affa457651513d061ce215de2a49f36885f256a4bc65a055fc13ebf6309a5180350166ee9a8e1fa349c372c94cf3557e98f25dc55f9664b3be3a34c2cc14e6943149c2e8a759169db1ddeac4bb573da6074ef33550c1debf8b5c4650c50e27246b47fbfe497ae5143abd86c3c06de2db24c7c3d27cfc8457e3de09ea1e020bbc3b622b0b72fd554cf4207ed0e1759f6d22634ca4834449c4ec166c0cafd44f976d6ab84e251b84a4e8174b0a95f9b58d8a83c6757847ec16d2b9a6a9c33b83e6a6ea56b9592ad75567cbb1704b0c7da3519cbe7424ab109d071456ed0f044140f4ae8d9063797154c6643562519d28c68f0a951f724cde608bcb7e570d07e5ea205639817b5c8185dec7e420080efd0e2c81abf01bb5dddeec32db0c25445b10ee5602d4422cbc12ab127ce051349abdbb6d200977043c74fe6e2271db8a8be6310a2cc69f0b05776af13556d0e699e5cd16f4c52451a448b326708a41fbd820a03f06bfce0b1aa2c709594a231beff5516c6d3fd98a9650844203ad6f7d3cb764548d32667f330046cfa1a4ef8f6e4ca519367a0b8bdb594c875589cdbacedf2f3573517e64c332e8a5c1427eaaf4aad0bafe0a5a9e987e764ab42b1ed9f5e705bf97ee6737ab28034c1155eaa93952dcc29bcca73de7d1e1e53163ba0c5ec814bb93cdf8cbea65513af785dce40227973d70bd5392058b0bb65d8898aa28e0b00944526f7066b2e0318fd32582c0f6ad51117094f5d9ce3e71d0b8e62fa976097c7b2e77dbc7c1c7b605188cc7f29a5d4112a8e98732c2da4c28d1fe37481e673fd4c70b1775d9917813109ba3b9a446d8a16aa69531237fa7a7c1c4ddea49df138c46166258c12ac9059bd435645e13f7e3c2246e6017b6b2008ae4749c25f7b75a08cdf92de013f70b4fa1c4fcd5a9c21aedc8ca33f23a7a926eb9d623a0966802ddd321298c37364c11e10b60d62e236ac4135d234f8e2ef68750a6cf5ff2ccb9478540b3d33cfd0e749900b51aaec89114eaeb8f8f070c363058f56674b508ce0dc9fd89dbf160b613d85a7a812b61601612428fd67cbd46a7592b7c6f924f8b96d8d836eda256c1f3814e37b364777ebc9a5c86386b87da520ea86966e1040b6b9b6b4a409aefe21bc464d3fa13c7f09fda8878ced61da4151cce08e749ebd175225adbf92710af796e26fed828fd5f4614e97801a50fcf2117818ed9fb805a1dc7271a10eb63c8afd0c1eb17cb8a04a7fbf44144f406d52adf2f4553b415cc25eee0810c29329252be7f31589217c0d20c0a6d2b4e3669e7d92caa2ddfd688b9f9ce429ee470d1625452bbf1b68b2d262f7869dcb3a8c08d0dba2b011534e339cf2dffea59e87819a3409c20cb600b93d11c9038153faa7df1d6b7196f3cfbf8931eecd65ea8b125bfc6420b8eeb82d999a556d66347ea83cda739a9b69fb3de7ad674777c3effc5524ed64d29905ae6347056ac385682dfcc77353c73fb65e5f4468489847cddc4fc47fb46287cd0b2a9823d2c26cc539c28232ce8b6a795e96ac4eeca09cda280fa1ef69f24b9a8250727e6e6b0859847239607afe16d50ceb67a9b593234e2f5a4d7783c2b0df1ee12a0f55981bb1cafdf7938f49346b97b83c3b608fbfa1e62f2d1caa294c7beb6ac21a35c5952039089079e999766dfccea81e3fea46146048b93d1f10681402f4f2af2c1458b3295403f9c9b0443d14489883a93a5b84395c271183ff9f9f708a83045b59c5a725d8d3f6593d72668d88cfffca42f218f4b41edab61db892ac4c2c6102750f0166afce267d87490c956fbc2318e0caf58cb8e2e7d67cd2163c63b9d2603a572c5506b21adc919e3d8df26e84493a946cb1be08192e405040f50d184d58c96bbac35ba63bcb04ef78a9aaf335d2f8cdce02bf6a2a4584916bda72bfa9b6a885075fcac768d88efaf5080fd3d15883d717819955b496b265f29ea2b3db307e00c87f19d0d3e594036788d5a5de1904963d7e113b2744bbc84e59304fc928c259f103b31fab8148d663de011881bcb6c08cc71b788dfc797f6acf3b66283890e74835e851a6ccc72609e07566a3add250e3b02572b56672608eacc39cacd2f9a7be222c508c4cd55c51fe6e82a3d6fe82eac30dcbf97f7ab98f974e2f92b4ada98096878ec1b8b37644323920464f59722536bbdb7d31d63a1b7f9cf659fe536cd3d6586ba30939cb05b33f43a877fec1e8c6890074279292476aafbb6215ad254c3bcf2989b012001fda36ebd5a343547e16bfcfc6f4b9cd1d124400609c176775faed22f4c5bf8fcf4387ea07217a88715c74a82c3b719499585f154ea4edfc0514591cb98bc678c451d30afc73883bed08339995467d611e92210978a075c9cffff04409a2af2516d5057f2c69b5ac8200a59279addce368b4408f76fcb500550f008be37c034e7c5636e51bbb5bdf1692736fe5698d9644fb1a84cc3bc9941bd1a7b8f20e9addf846e8ff0d3c829b8ded5f48faa5995137ccc078c8696c1ebbf36387a592f5d8a65e3f6c6f8cfac219d95fc49de210d7893924d84c6aa80cab893aa5953d86034e6408109f9459d7a6200d69efa298d93b8046339f024da5e7b1aa7f69b1a9f92fc02a9f75b507c629f05aa9efa778a4ac5c0697fe4aa254bb1dd4e63d5e3db6627cde671951670ce43eedc5097197d5bc22fd6a4a4178a6ed880e9f84cdc9af229bc6d36e79494aadb31c723af9dc176dd17a1063c5df330f38be6f649a25e60ab99556dc617e33cc7f6a2a999e341b0f9984af25c4eecd0c5cd81e7b0898c1eb688821d80ad3cc91fe64b522a5e205dd1f0a121589cc144e20735745796cf52f1a90e89dc0c1f7022d1cdf0dbdd6d9373886a217cf96839f30fcfada438bfd2f48d552257f39e8e5c77be1841f0250a7d1b46794f06442f7f23af68165182ab80eafc8862ebb8bccd0fbf00c179e14b011f0a4f3893c1809d28089b6c4fefac79a12ea1a8d853868f57da3fed46b29907dffcd44236e985cb18f2c62932dccd6d58c5ce747ccd78b76f9522813884935ff6328656cbe3ad33c9a90de333cad98fb66a5e23903616d669882b717601109c24738e90bae85867cdc96325cf9ebf194bd4fc3a71a5d49cf0875541e6733085eba05f2f3d8e43ea9a26ee0592e035e97739bc0a05d601981050449fcad222a3a8dd6c6b606d8d0fb0b1e30f91eb667b02a0685adc5a92c81ba089db2ea7b9750141999139a81f702712671ace2fdae3cb7b30bdd7c189444d37698a726e4a16fc84c4eea8f8ef7e6535f5d975d8eb6eec6c022f0df8ad57b5210501f0b5d15d2837bf44fb2d76d7489fe0ea6e5865b9900fde18624c9f5591b7b3f401626b78812eb5376ac313bcc7d2336e4bd0177cfda6f5a4ee57871ac761d1e837aa7060bbdd8b79f547850c62c8e8fae26d6bd3e1002ccbf44646ad0a68a33670c682ddf3f05a82fdeeb1317e5f23461108fd13451ccedf0c1d885e126cc3dbaf1a647f83cbb9a75fbd57b1ea545d381d4c9bfd6b5d35759f0bd131c7eabd0883eda365bf1bddd49573af8281089c2139bcfcde10dec500000b49bfd7d46181d107c87d1d08dcc64d0c4e1dae12ea2b3a8f5352ca6f07b07475701512d0ab4b5c7f28732ebed87fa9a78756c535e7f2179025d3991a05722b7217d5c9b75f54f9d3aadb0f0ec59ef051dab58c29799cd043a77a6cb213cc636c4f47a4397abe5702ccee23b28cd7819c3faf253e5bebb3d457f9cea486a9d6f8208a7be0132494564e32c377f5fce81ed7aac93078226ae32b5a5c443f7732b21494cc628961dc2d6e8bde3038bf8c75e36eb5a6d4f2261d40240c949933d5847e090bbe4d69f8aa0fdd0f1a5f04c991e8a050d995f5b77d88bc4452403574d774c6470dd595bdb0ac9130f2b400584d3f9adbd4cdf1d25c7d5acf1d3f6d0aab4a180aad7a12224a5920519f6e7fe9597317893af93120902114521a424d6b22a93ea50453d09f6a143ff2299e453eb75f0a3b01d63d2c9168a0acebc8dd56aa3f97a70ad4b2c53933ceb1058665dfb881c887adc6f03f604fac7c7868a2f98319f6551604a74489b8a9bb05434d7583dc76590c5349ed32e6976a546f63990ae08de68ec9ce5afeea537d92922ea1c57785c071b989fc7fc53a9fc5a602f495758ccccf3168d83b4053911c883ba4a8895d34ad4df8ba41e7fe9bbc499a0b2cca7426689ad6559296c152c2cb03f7e84145db3f2c993a10270d8305be4d5c50acaf0121c1cda027dd4499d0cc357cf9e4d68e2f08b70228848e915cbda9479efa49027e0b3eb8553a704a2aa03d5cbcddc9782df38b1a205e9f3d207f7b9d71b785834d15a94b8410a5df0bc1a10ac2d39493023d701d3a68809d279e3e5010e926f5f90a592bcff727bc8abf5d51052cc19f432c0e6ec11744ac760687702878589ce82e98f807de6db4583eb6af48a1c8083f423e3698dc8219c3b5b8c2e598ef470558b0c816a6155642d4180b2061a5c2ce81e05e80d2846e8304bda1b99b413d1fc5b35da65bd44865649754ce4b02b6456b02ab7fb6ac06a5e8eca7f3f02e96ae6ba5fb87300bb12793ca374bdcefb382544eaaac8b6465d96ba1fc1773bd25ef63c1f08843ea847901a66c33fb76df7a442bb0cb823a88d847fee8918eb1391891e4e571b462bfca1c4a1e2a0db0f0d771325bf87a4604e35e75c2dac5e887c697ec362afe6eb99c25490d8511085f1943cd26d34054f8204135797f881aa16898fb21cacc98725228f78b8faac5fbc2eadcb5a929c745fbf8ca099b1e376e1a554f58c8e269e41bf6efe0e33f019395194e281a1b3087f7a6aad8588746cd5c10e1a94ad7ceacb808f47022f0d4f11d43844130b653001f202ac34ab808b096804719914e8389f5e8e476228122ee04100513ad53d74db1085e1a6ec5a018bbedaf8b632972b14af35d6f846a4a3aeaf758d8e11f9b5f208b2dd417d9c37e7d50af4d950009f7f8080d67749d332edf786040b5c3e3b02b7cf53ce2c0c84611e21c67f01f14561014eca771eec25e86114c26cc6f4f1f08652877e99f33198aaec7c4f1bacd09d0e7555e0320a028b45fd1fd5e37817378ea8199b934132a20e6e3f50418da25c456be2f5e55174aa9209b24a5585ef530fc6f9686d9ad440601a232ef1974f2e5395486e765966562a5706fb667208a639793609869c34ea93e65d338bffb3c4899b16cabec1a490acd2e1b11cb75f64bf659045949e5cdfb766f53395872ddc07d7230f00b584cdca5ef0831d6fbf9907c580dee7b1d0a1d9c090cf21b07308b67b7a6bb36cee05afa234768e642356602b5430874b150929ac06e7ef675dd3439964d36bc9b91005dae2f1f1a6f8cfcb6a9c702b5db52f492d6079c8a0c4914c2d0c487e4760db1138d9c1e9d26ba3efcbce098a08471c92b0cd356d72176b3d29c7453d952b56ed9597350561fa67472e46dd1c0468f8c754f5a4148bbfb741f57b59530148d6e4c97af773ea0b36dc33e4fbd0f8f30dc8d050cd8071728127b1a9aa336c984b5385d9bac361e57505bfb2f", 0x2000, &(0x7f0000001180)={&(0x7f0000000080)={0x50, 0x0, 0x9, {0x7, 0x2b, 0x1, 0x20001, 0x3, 0x7, 0xf, 0x6f72, 0x0, 0x0, 0x40, 0x1000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000740)={0x50, 0x0, r9, {0x7, 0x2b, 0x2003, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x78, 0x0, 0x3, {0x2, 0xcd, 0x0, {0x0, 0x4, 0x4, 0x1000, 0xfffffffffffffff9, 0x4, 0xf79c000, 0x2, 0x4000005, 0x8000, 0x538, 0x0, r10, 0x7, 0x3ff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) 2.237541979s ago: executing program 7 (id=7315): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f00000270c0)=""/102400, 0x19000) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_access(r1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x30, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x100}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x30}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xc001200, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x0, 0x62, 0x0, 0x0, 0x6, 0x10000}, 0x28) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {0xff}}, 0x0, 0x128, 0x170, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x0, 0x8}, {0x1}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x40, 0x5, 0xf8f, 'snmp_trap\x00', {0x8}}}}, {{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @dev}, [0xffffff00, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xff000000], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x250, 0x280, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0xd, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x24b9, 0x8001, 0x1a, 0x6, 0x9, 0x8, 0x5, 0x18, 0xd8}, {0x7}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x520) io_uring_setup(0x2255, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 1.986003351s ago: executing program 5 (id=7316): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f00000270c0)=""/102400, 0x19000) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_access(r1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x30, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x100}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x30}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xc001200, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x0, 0x62, 0x0, 0x0, 0x6, 0x10000}, 0x28) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {0xff}}, 0x0, 0x128, 0x170, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x0, 0x8}, {0x1}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x40, 0x5, 0xf8f, 'snmp_trap\x00', {0x8}}}}, {{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @dev}, [0xffffff00, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xff000000], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x250, 0x280, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0xd, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x24b9, 0x8001, 0x1a, 0x6, 0x9, 0x8, 0x5, 0x18, 0xd8}, {0x7}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x520) io_uring_setup(0x2255, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 1.280674142s ago: executing program 4 (id=7317): socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x200, 0xfffffffffffffffd}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x7}, {}, 0x0, 0x0, 0x1, 0x0, 0xb6c76e5dce399e35}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x21, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x220000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="db46", 0x2}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(0xffffffffffffffff, &(0x7f00000002c0)="fc0000001c000704ab5b2509b86803000aab087a0400000001481193210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) 1.232817433s ago: executing program 5 (id=7318): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x13, @string={0x13, 0x3, "5e4a023a3a75b977f45e60ad1ae4e58e0e"}}, &(0x7f0000000180)={0x0, 0xf, 0xee, {0x5, 0xf, 0xee, 0x6, [@generic={0x65, 0x10, 0x4, "9c99b6aac1e910c90149e4ac8d0fe7fafa297c757b8f2d985d75089fe71cd125788c232d4a78e889cda438971b3fca575cdbb3345840d995a7470c936bea49ad3a9b2860029125205ba45022d333c373823324f39de426e47f206df2a6d99162d46e"}, @ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0x3, 0xf00, 0x9, [0xf, 0x1fe0000, 0x0, 0xc0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0xd4, 0x3, 0x101}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x9, 0x1}, @generic={0x54, 0x10, 0xa, "0da3d6c1ecd85a75a6f556631a27c242bc028ef94c485d20ca2ab5a3899c69db4b18f4bf2fa17c69d144ccb6e01f84c7ed87d03ad1c5853631de85a291f7c350be00b9601efd61c04a9f29af456488d9aa"}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x84, 0x83, 0x80, 0x5, "8d9adc03", "ae0a10be"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf1, 0xe0, 0x22, 0xf1, 0x6, 0x6, 0x9}}}, &(0x7f00000008c0)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x89, "524587d7f889d43f36e0d9a94f7235037b61186f7783ad044b3bdfbeffcf44d4d6e10f4744565bac18fde46e935da99595c82f7922a6416c5a0d5fddf69f12481789e5bcb115d394f6ee914b68292435e1a2254f2ea78a2d9b7077f055221b7cd88655077777d564dc57226eb35e6dbe790c2859a7b97e6c6d4cedc7fca12cd2ed9d308ecef11a943d"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x5e}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000540)={0x20, 0x0, 0x8, {0x1c00, 0x10, [0xf]}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0xd0d}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0xf}, &(0x7f0000000640)={0x40, 0xb, 0x2, "6dcd"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x9}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000700)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, &(0x7f0000000740)={0x40, 0x19, 0x2, "d7e9"}, &(0x7f0000000780)={0x40, 0x1a, 0x2}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0xc}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x5}}) 1.191165577s ago: executing program 7 (id=7319): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) read(r4, &(0x7f0000000080)=""/38, 0x26) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r6, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x3}}}}, [@NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x3800000, {0xa, 0xc4, 0x5}}}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x14, 0x49, [0xfac0c, 0xfac05, 0xfac0b, 0xfac05]}]]}, 0x50}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000004) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r1, {0xfff1}, {0xfff1}, {0x9}}}, 0x24}, 0x1, 0x3f000000, 0x0, 0x800}, 0x40000) 1.080186346s ago: executing program 2 (id=7320): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r1, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet(0x2, 0x3, 0x9) pipe2$watch_queue(&(0x7f0000000480), 0x80) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000140)={0x4000000}) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x4800) splice(r7, 0x0, r5, 0x0, 0x18, 0x7) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000000)={0x4000000, 0xd, 0x1}) pread64(r4, &(0x7f0000000180)=""/244, 0x20, 0x100000000) fsmount(r3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="2b637075b5e5fdc9"], 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) 1.074120585s ago: executing program 4 (id=7321): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x55, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13141, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x1}, 0x94) close(0xffffffffffffffff) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x7}) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_io_uring_setup(0x496, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000620000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x6, 0x10000, 0x800000, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0xfffffffffffffffe, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x241000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x190da) 925.79024ms ago: executing program 4 (id=7322): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040845}, 0x0) r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000680), 0x8) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2}, 0xfffffe85) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000600)="d1a75a1596128c62e1a54cdce27b10c886aba86c6984512723139121091f323ea7d8140bf18a01c9c26c276bf48f99f81646de6331281fd9fa888ba2f9edd17442ed87a5543871d04e112b1431283b80844b20f2166819c03d2a8a8d7187ea24b42b9f5f93da1b2f047d36c7911f92b3b86c34ead9e7a50185ebf33763038d85", 0x80}, {0x0}, {0x0}], 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x238}}], 0x1, 0x810) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(aegis128-generic)\x00'}, 0x58) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r7, 0x0, 0x0) r8 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9071, 0xffffffffffffffff, 0x0) getitimer(0x2, &(0x7f00000001c0)) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc75d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d29137a6267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d8f349e412c90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea05", 0xf91}], 0x1, 0x1, 0x1ff) syz_kvm_setup_cpu$x86(r5, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000880)=[@textreal={0x8, &(0x7f00000006c0)="0f015e00b800008ee066b9c102000066b8681f3d4b66ba00000000f30f092e672e0f381c9669b8ba4e66b9430b000066b8003000003e0f78c50f300f2047670fc72f660f3a22d8e1640f0f031df8", 0x4e}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 0s ago: executing program 7 (id=7323): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0cc5640, &(0x7f00000000c0)={0x2, @sdr={0x32314d54, 0x400ffff}}) mkdir(&(0x7f0000000000)='./file0\x00', 0x16e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) write$P9_RVERSION(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="1500000065fffffc7f00000800395032303030"], 0x41) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) listen(0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4040}, 0x0) kernel console output (not intermixed with test programs): obe with driver spca501 failed with error -22 [ 2296.407787][T27619] usb 3-1: USB disconnect, device number 35 [ 2296.540908][T13572] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2296.629755][T13572] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 2296.644317][T13572] usb 5-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 2296.653615][T13572] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2296.661703][T13572] usb 5-1: Product: syz [ 2296.669155][T13572] usb 5-1: Manufacturer: syz [ 2296.673978][T13572] usb 5-1: SerialNumber: syz [ 2296.692793][T13572] usb 5-1: config 0 descriptor?? [ 2296.701504][ T2364] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2296.713157][ T2364] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2296.730638][T13572] option 5-1:0.0: GSM modem (1-port) converter detected [ 2296.760281][T13572] usb 5-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 2296.877159][T27323] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 2296.886983][T27323] Bluetooth: hci2: Injecting HCI hardware error event [ 2296.897515][T27323] Bluetooth: hci2: hardware error 0x00 [ 2297.013944][T13572] usb 5-1: USB disconnect, device number 15 [ 2297.134268][T13572] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 2297.179742][T13572] option 5-1:0.0: device disconnected [ 2297.614849][T27619] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 2297.849235][T27619] usb 7-1: config 0 has an invalid interface number: 249 but max is 0 [ 2297.885997][T27619] usb 7-1: config 0 has no interface number 0 [ 2297.894618][ T2501] ip6_vti0 speed is unknown, defaulting to 1000 [ 2298.422078][T27619] usb 7-1: config 0 interface 249 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 2298.435415][T27619] usb 7-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 2298.448326][T27619] usb 7-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 2298.472319][T27619] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2298.499878][T27619] usb 7-1: config 0 descriptor?? [ 2298.524413][T27619] port100 7-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 2298.978491][ T9] usb 7-1: USB disconnect, device number 61 [ 2299.044862][ T2531] ip6_vti0 speed is unknown, defaulting to 1000 [ 2299.283098][T27323] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 2301.140398][ T2566] SELinux: failed to load policy [ 2302.155664][ T30] audit: type=1400 audit(2000004243.821:1691): avc: denied { setopt } for pid=2630 comm="syz.6.6719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2302.272744][ T30] audit: type=1400 audit(2000004243.933:1692): avc: denied { map } for pid=2630 comm="syz.6.6719" path="socket:[139432]" dev="sockfs" ino=139432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2302.300424][ T2631] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6719'. [ 2302.338773][ T30] audit: type=1400 audit(2000004243.961:1693): avc: denied { listen } for pid=2630 comm="syz.6.6719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2302.415252][ T30] audit: type=1400 audit(2000004243.961:1694): avc: denied { bind } for pid=2630 comm="syz.6.6719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2302.460798][ T2660] netlink: 'syz.4.6723': attribute type 10 has an invalid length. [ 2302.544812][ T2677] netlink: 'syz.4.6723': attribute type 10 has an invalid length. [ 2302.567864][ T2677] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6723'. [ 2302.611831][ T2660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2302.730086][ T30] audit: type=1400 audit(2000004244.345:1695): avc: denied { read append } for pid=2650 comm="syz.6.6722" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 2302.764403][ T2660] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 2302.884216][ T2677] batadv0: entered promiscuous mode [ 2302.889651][ T2677] batadv0: entered allmulticast mode [ 2302.934315][ T2677] bond0: (slave batadv0): Releasing backup interface [ 2302.949821][ T2677] bridge0: port 3(batadv0) entered blocking state [ 2302.957154][ T2677] bridge0: port 3(batadv0) entered disabled state [ 2303.208303][ T5957] kworker/0:8 (5957) used greatest stack depth: 15960 bytes left [ 2303.211103][ T9118] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 2303.226119][ T9118] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 2303.297219][ T2697] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6725'. [ 2303.309314][ T2697] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6725'. [ 2303.464112][ T2678] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2303.479365][ T2678] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2303.486471][ T2678] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2303.496885][ T2678] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2303.504397][ T2678] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2304.478683][ T2708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6727'. [ 2304.916576][T18278] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 2305.229370][T18278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2305.248415][T27323] Bluetooth: hci3: command 0x0c1a tx timeout [ 2305.271191][T18278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2305.413668][T18278] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 2305.423009][T18278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2305.451463][T18278] usb 3-1: config 0 descriptor?? [ 2305.592156][ T2741] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6732'. [ 2305.637215][ T2741] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6732'. [ 2305.665935][ T2741] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6732'. [ 2305.689695][T27323] Bluetooth: hci5: command 0x0405 tx timeout [ 2305.696434][T27323] Bluetooth: hci4: command 0x0406 tx timeout [ 2305.890585][T17554] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 2305.926917][ T2754] ip6_vti0 speed is unknown, defaulting to 1000 [ 2305.982661][T18278] hid (null): invalid report_count 18376 [ 2306.001943][T18278] uclogic 0003:5543:0042.0042: unknown main item tag 0x6 [ 2306.021720][T18278] uclogic 0003:5543:0042.0042: invalid report_count 18376 [ 2306.048648][T18278] uclogic 0003:5543:0042.0042: item 0 2 1 9 parsing failed [ 2306.065692][T18278] uclogic 0003:5543:0042.0042: parse failed [ 2306.072910][T17554] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2306.081497][T18278] uclogic 0003:5543:0042.0042: probe with driver uclogic failed with error -22 [ 2306.139188][T18278] libceph: connect (1)[c::]:6789 error -101 [ 2306.145752][T18278] libceph: mon0 (1)[c::]:6789 connect error [ 2306.149598][T17554] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2306.165584][ T2767] ceph: No mds server is up or the cluster is laggy [ 2306.210119][T17554] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2306.223263][T17554] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2306.232319][T17554] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2306.244371][T17554] usb 6-1: config 0 descriptor?? [ 2306.477231][ T2743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2306.493936][ T2743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2306.694109][T13572] libceph: connect (1)[c::]:6789 error -101 [ 2306.704769][T13572] libceph: mon0 (1)[c::]:6789 connect error [ 2306.770833][T27619] usb 3-1: USB disconnect, device number 36 [ 2307.177410][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 2307.213696][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 2307.221183][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 2307.230052][T17554] usbhid 6-1:0.0: can't add hid device: -32 [ 2307.236049][T17554] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 2307.563843][T17554] usb 6-1: USB disconnect, device number 11 [ 2307.909531][T27323] Bluetooth: hci5: command 0x0405 tx timeout [ 2307.915608][T21549] Bluetooth: hci4: command 0x0406 tx timeout [ 2308.186963][ T2804] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 2308.197596][ T2804] SELinux: failed to load policy [ 2309.597964][ T2876] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 2309.607798][ T2876] SELinux: failed to load policy [ 2310.593938][ T2886] ip6_vti0 speed is unknown, defaulting to 1000 [ 2312.741905][T27619] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 2312.924700][T27619] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2312.966288][T27619] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2312.976018][T27619] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2313.009694][T27619] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2313.018718][T27619] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2313.106620][T27619] usb 7-1: config 0 descriptor?? [ 2313.171229][T13572] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 2313.362489][ T2931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2313.363586][T13572] usb 3-1: Using ep0 maxpacket: 16 [ 2313.376036][ T2931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2313.400105][T13572] usb 3-1: config 125 has an invalid interface number: 165 but max is 0 [ 2313.409686][T13572] usb 3-1: config 125 has no interface number 0 [ 2313.516171][ T2977] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2313.516171][ T2977] program syz.4.6755 not setting count and/or reply_len properly [ 2313.741260][T27619] usbhid 7-1:0.0: can't add hid device: -71 [ 2313.749248][T27619] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 2313.761287][T27619] usb 7-1: USB disconnect, device number 62 [ 2313.771828][T13572] usb 3-1: config 125 interface 165 has no altsetting 0 [ 2313.789089][T13572] usb 3-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=d5.16 [ 2313.808482][T13572] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2313.882790][ T2989] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2313.882790][ T2989] program syz.5.6756 not setting count and/or reply_len properly [ 2314.153564][T27619] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 2314.171710][T13572] usb 3-1: string descriptor 0 read error: -71 [ 2314.183593][T13572] gspca_main: spca501-2.14.0 probing 0497:c001 [ 2314.196022][T13572] gspca_spca501: reg write: error -71 [ 2314.207343][T13572] spca501 3-1:125.165: Reg write failed for 0x02,0x07,0x05 [ 2314.225666][T13572] spca501 3-1:125.165: probe with driver spca501 failed with error -22 [ 2314.260776][T13572] usb 3-1: USB disconnect, device number 37 [ 2314.338755][T27619] usb 6-1: Using ep0 maxpacket: 32 [ 2314.348216][T27619] usb 6-1: config 0 has no interfaces? [ 2314.367774][T27619] usb 6-1: New USB device found, idVendor=1e2d, idProduct=0069, bcdDevice=9f.d3 [ 2314.495626][ T3008] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2314.495626][ T3008] program syz.6.6758 not setting count and/or reply_len properly [ 2314.750731][T27619] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2314.759281][T27619] usb 6-1: Product: syz [ 2314.768782][T27619] usb 6-1: Manufacturer: syz [ 2314.774832][T27619] usb 6-1: SerialNumber: syz [ 2314.788829][T27619] usb 6-1: config 0 descriptor?? [ 2315.016396][T27619] usb 6-1: USB disconnect, device number 12 [ 2315.134428][ T3020] input: syz0 as /devices/virtual/input/input118 [ 2315.507089][ T3035] lo speed is unknown, defaulting to 1000 [ 2315.513179][ T3035] lo speed is unknown, defaulting to 1000 [ 2315.521962][ T3035] lo speed is unknown, defaulting to 1000 [ 2315.577921][ T3035] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 2315.831053][ T3035] lo speed is unknown, defaulting to 1000 [ 2315.848654][ T3035] lo speed is unknown, defaulting to 1000 [ 2315.855950][ T3035] lo speed is unknown, defaulting to 1000 [ 2315.862955][ T3035] lo speed is unknown, defaulting to 1000 [ 2315.870120][ T3035] lo speed is unknown, defaulting to 1000 [ 2315.878465][ T3035] lo speed is unknown, defaulting to 1000 [ 2315.885495][ T3035] lo speed is unknown, defaulting to 1000 [ 2315.892461][ T3035] lo speed is unknown, defaulting to 1000 [ 2316.083496][ T3031] tipc: Started in network mode [ 2316.090289][ T3031] tipc: Node identity ac14140f, cluster identity 4711 [ 2316.150217][ T3050] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2316.150217][ T3050] program syz.6.6763 not setting count and/or reply_len properly [ 2316.171348][ T3031] tipc: New replicast peer: 255.255.255.255 [ 2316.181781][ T3031] tipc: Enabled bearer , priority 10 [ 2316.665155][ T5926] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 2316.676412][ C0] raw-gadget.2 gadget.6: ignoring, device is not running [ 2316.814822][ T5926] usb 7-1: device descriptor read/64, error -32 [ 2316.943209][T27619] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 2317.072632][ T5926] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 2317.104268][T27619] usb 5-1: Using ep0 maxpacket: 16 [ 2317.111981][T27619] usb 5-1: config 125 has an invalid interface number: 165 but max is 0 [ 2317.120625][T27619] usb 5-1: config 125 has no interface number 0 [ 2317.135298][T27619] usb 5-1: config 125 interface 165 has no altsetting 0 [ 2317.158170][T27619] usb 5-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=d5.16 [ 2317.183935][T27619] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2317.242619][ T5926] usb 7-1: Using ep0 maxpacket: 32 [ 2317.247841][T13572] tipc: Node number set to 2886997007 [ 2317.271008][ T5926] usb 7-1: config 0 has no interfaces? [ 2317.281642][ T5926] usb 7-1: New USB device found, idVendor=1e2d, idProduct=0069, bcdDevice=9f.d3 [ 2317.291032][ T5926] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2317.302437][ T5926] usb 7-1: Product: syz [ 2317.311785][ T5926] usb 7-1: Manufacturer: syz [ 2317.322522][ T5926] usb 7-1: SerialNumber: syz [ 2317.336287][ T5926] usb 7-1: config 0 descriptor?? [ 2317.634983][T13572] usb 7-1: USB disconnect, device number 64 [ 2319.096717][ T3100] ip6_vti0 speed is unknown, defaulting to 1000 [ 2319.252572][T17554] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 2319.412613][T17554] usb 3-1: Using ep0 maxpacket: 16 [ 2319.419945][T17554] usb 3-1: config 125 has an invalid interface number: 165 but max is 0 [ 2319.428048][ T3100] lo speed is unknown, defaulting to 1000 [ 2319.428991][T17554] usb 3-1: config 125 has no interface number 0 [ 2319.529111][ T3111] 9p: Bad value for 'rfdno' [ 2319.625597][T17554] usb 3-1: config 125 interface 165 has no altsetting 0 [ 2319.633320][T17554] usb 3-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=d5.16 [ 2319.673205][T17554] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2320.239230][T17554] usb 3-1: string descriptor 0 read error: -71 [ 2320.320181][T27619] usb 5-1: string descriptor 0 read error: -71 [ 2320.341962][ T3149] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2320.341962][ T3149] program syz.5.6775 not setting count and/or reply_len properly [ 2320.370875][T17554] gspca_main: spca501-2.14.0 probing 0497:c001 [ 2320.417978][T27619] gspca_main: spca501-2.14.0 probing 0497:c001 [ 2320.430108][T17554] gspca_spca501: reg write: error -71 [ 2320.435506][T17554] spca501 3-1:125.165: Reg write failed for 0x02,0x07,0x05 [ 2320.464087][T27619] gspca_spca501: reg write: error -71 [ 2320.469490][T27619] spca501 5-1:125.165: Reg write failed for 0x02,0x07,0x05 [ 2320.503091][T17554] spca501 3-1:125.165: probe with driver spca501 failed with error -22 [ 2320.515705][T27619] spca501 5-1:125.165: probe with driver spca501 failed with error -22 [ 2320.665818][T27619] usb 5-1: USB disconnect, device number 16 [ 2320.685519][T13572] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 2320.690433][T17554] usb 3-1: USB disconnect, device number 38 [ 2320.876307][ T3171] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2320.905071][T13572] usb 6-1: Using ep0 maxpacket: 32 [ 2321.145592][T13572] usb 6-1: config 0 has no interfaces? [ 2321.159749][T13572] usb 6-1: New USB device found, idVendor=1e2d, idProduct=0069, bcdDevice=9f.d3 [ 2321.169657][T13572] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2321.178093][T13572] usb 6-1: Product: syz [ 2321.182597][T13572] usb 6-1: Manufacturer: syz [ 2321.229670][T13572] usb 6-1: SerialNumber: syz [ 2321.266385][T13572] usb 6-1: config 0 descriptor?? [ 2321.572295][T17554] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 2321.643594][ T5926] usb 6-1: USB disconnect, device number 13 [ 2321.860924][T17554] usb 7-1: Using ep0 maxpacket: 8 [ 2321.961871][T17554] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2322.062755][T17554] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2322.094265][T17554] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2322.126859][T17554] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2322.167689][T17554] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2322.238198][T17554] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2322.758585][T17554] usb 7-1: usb_control_msg returned -32 [ 2322.764367][T17554] usbtmc 7-1:16.0: can't read capabilities [ 2323.047641][T27619] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 2323.223347][T27619] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2323.234718][T27619] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2323.250941][T27619] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2323.261325][T27619] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2323.307692][T27619] usb 6-1: config 0 descriptor?? [ 2323.333549][T27619] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2323.348268][T27619] dvb-usb: bulk message failed: -22 (3/0) [ 2323.372086][T27619] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2323.390252][T27619] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2323.406641][T27619] usb 6-1: media controller created [ 2323.418994][ T3218] SELinux: failed to load policy [ 2323.423823][T27619] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2323.470650][ T3227] loop3: detected capacity change from 0 to 7 [ 2323.472828][T27619] dvb-usb: bulk message failed: -22 (6/0) [ 2323.509871][T27619] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2323.523721][ T3227] Dev loop3: unable to read RDB block 7 [ 2323.539905][T27619] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input119 [ 2323.542568][ T3210] dibusb: i2c wr: len=8192 is too big! [ 2323.542568][ T3210] [ 2323.586336][ T3227] loop3: unable to read partition table [ 2323.588064][T27619] dvb-usb: schedule remote query interval to 150 msecs. [ 2323.631776][ T3227] loop3: partition table beyond EOD, truncated [ 2323.635060][T27619] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2323.646857][ T3227] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2323.689292][T27619] usb 6-1: USB disconnect, device number 14 [ 2323.720004][T27619] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2324.503909][T27619] usb 7-1: USB disconnect, device number 65 [ 2324.668353][ T3275] 9p: Bad value for 'rfdno' [ 2324.932251][ T3278] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2326.292238][ T3285] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 2326.808489][ T3295] 9p: Bad value for 'rfdno' [ 2326.908510][ T3296] netlink: 'syz.6.6789': attribute type 4 has an invalid length. [ 2326.916314][ T3296] netlink: 17 bytes leftover after parsing attributes in process `syz.6.6789'. [ 2331.315358][ T3332] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2331.422190][ T3334] overlayfs: failed to resolve './file1/file0': -2 [ 2331.711470][ T3332] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 2332.016897][T13572] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 2332.045029][ T3346] netlink: 'syz.5.6799': attribute type 4 has an invalid length. [ 2332.059789][ T3346] netlink: 'syz.5.6799': attribute type 1 has an invalid length. [ 2332.067897][ T3346] netlink: 228 bytes leftover after parsing attributes in process `syz.5.6799'. [ 2332.224340][ T3349] FAULT_INJECTION: forcing a failure. [ 2332.224340][ T3349] name failslab, interval 1, probability 0, space 0, times 0 [ 2332.258764][ T3349] CPU: 1 UID: 0 PID: 3349 Comm: syz.5.6800 Tainted: G L syzkaller #0 PREEMPT(full) [ 2332.258795][ T3349] Tainted: [L]=SOFTLOCKUP [ 2332.258801][ T3349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2332.258812][ T3349] Call Trace: [ 2332.258818][ T3349] [ 2332.258825][ T3349] dump_stack_lvl+0x16c/0x1f0 [ 2332.258852][ T3349] should_fail_ex+0x512/0x640 [ 2332.258876][ T3349] ? __kmalloc_cache_noprof+0x5f/0x800 [ 2332.258909][ T3349] should_failslab+0xc2/0x120 [ 2332.258934][ T3349] __kmalloc_cache_noprof+0x80/0x800 [ 2332.258962][ T3349] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2332.258984][ T3349] ? l2tp_tunnel_create+0x96/0x460 [ 2332.259008][ T3349] ? __nla_validate_parse+0x600/0x2880 [ 2332.259032][ T3349] ? l2tp_tunnel_create+0x96/0x460 [ 2332.259056][ T3349] l2tp_tunnel_create+0x96/0x460 [ 2332.259085][ T3349] l2tp_nl_cmd_tunnel_create+0x3ae/0x990 [ 2332.259111][ T3349] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 2332.259143][ T3349] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 2332.259171][ T3349] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2332.259204][ T3349] genl_family_rcv_msg_doit+0x209/0x2f0 [ 2332.259231][ T3349] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2332.259273][ T3349] ? bpf_lsm_capable+0x9/0x10 [ 2332.259294][ T3349] ? security_capable+0x7e/0x260 [ 2332.259315][ T3349] ? ns_capable+0xd7/0x110 [ 2332.259342][ T3349] genl_rcv_msg+0x55c/0x800 [ 2332.259371][ T3349] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2332.259397][ T3349] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 2332.259429][ T3349] netlink_rcv_skb+0x158/0x420 [ 2332.259452][ T3349] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2332.259478][ T3349] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2332.259512][ T3349] ? netlink_deliver_tap+0x1ae/0xd30 [ 2332.259537][ T3349] genl_rcv+0x28/0x40 [ 2332.259558][ T3349] netlink_unicast+0x5aa/0x870 [ 2332.259583][ T3349] ? __pfx_netlink_unicast+0x10/0x10 [ 2332.259614][ T3349] netlink_sendmsg+0x8c8/0xdd0 [ 2332.259641][ T3349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2332.259673][ T3349] ____sys_sendmsg+0xa5d/0xc30 [ 2332.259697][ T3349] ? copy_msghdr_from_user+0x10a/0x160 [ 2332.259714][ T3349] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2332.259750][ T3349] ___sys_sendmsg+0x134/0x1d0 [ 2332.259771][ T3349] ? __pfx____sys_sendmsg+0x10/0x10 [ 2332.259824][ T3349] __sys_sendmsg+0x16d/0x220 [ 2332.259844][ T3349] ? __pfx___sys_sendmsg+0x10/0x10 [ 2332.259882][ T3349] do_syscall_64+0xcd/0xf80 [ 2332.259907][ T3349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2332.259925][ T3349] RIP: 0033:0x7f0bdbd8f749 [ 2332.259941][ T3349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2332.259958][ T3349] RSP: 002b:00007f0bdcb72038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2332.259976][ T3349] RAX: ffffffffffffffda RBX: 00007f0bdbfe5fa0 RCX: 00007f0bdbd8f749 [ 2332.259988][ T3349] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000004 [ 2332.260000][ T3349] RBP: 00007f0bdcb72090 R08: 0000000000000000 R09: 0000000000000000 [ 2332.260009][ T3349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2332.260019][ T3349] R13: 00007f0bdbfe6038 R14: 00007f0bdbfe5fa0 R15: 00007ffe408c4228 [ 2332.260047][ T3349] [ 2332.603092][T13572] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2332.613723][T13572] usb 7-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 2332.624054][T13572] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2332.633384][T13572] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2332.738382][ T30] audit: type=1400 audit(2000004272.435:1696): avc: denied { ioctl } for pid=3358 comm="syz.5.6802" path="socket:[140273]" dev="sockfs" ino=140273 ioctlcmd=0xf510 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2333.792186][T13572] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 2334.286133][T13572] usb 3-1: Using ep0 maxpacket: 16 [ 2334.297293][T13572] usb 3-1: config 125 has an invalid interface number: 165 but max is 0 [ 2334.325231][T13572] usb 3-1: config 125 has no interface number 0 [ 2334.335602][T13572] usb 3-1: config 125 interface 165 has no altsetting 0 [ 2334.343879][T13572] usb 3-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=d5.16 [ 2334.447334][T13572] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2334.605954][ T3387] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2334.703122][ T3388] overlayfs: overlapping lowerdir path [ 2335.177786][ T3405] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2335.177786][ T3405] program syz.4.6805 not setting count and/or reply_len properly [ 2335.382829][T27744] usb 7-1: USB disconnect, device number 66 [ 2336.255547][ T3422] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2336.616648][T13572] usb 3-1: string descriptor 0 read error: -71 [ 2336.705700][T13572] gspca_main: spca501-2.14.0 probing 0497:c001 [ 2336.750870][T13572] gspca_spca501: reg write: error -71 [ 2336.782964][T13572] spca501 3-1:125.165: Reg write failed for 0x02,0x07,0x05 [ 2336.808828][T13572] spca501 3-1:125.165: probe with driver spca501 failed with error -22 [ 2336.824653][T13572] usb 3-1: USB disconnect, device number 39 [ 2338.230557][ T3459] netlink: 35 bytes leftover after parsing attributes in process `syz.4.6814'. [ 2338.457677][ T3457] ip6_vti0 speed is unknown, defaulting to 1000 [ 2340.347415][ T3470] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2340.347415][ T3470] program syz.6.6817 not setting count and/or reply_len properly [ 2340.537588][ T3476] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 2340.548071][ T3476] SELinux: failed to load policy [ 2341.725887][ T3457] lo speed is unknown, defaulting to 1000 [ 2341.833107][ T3505] loop3: detected capacity change from 0 to 7 [ 2341.839955][ T3498] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2341.849461][T21549] Bluetooth: hci5: unexpected event for opcode 0x080d [ 2341.857920][ T3505] Dev loop3: unable to read RDB block 7 [ 2341.863613][ T3505] loop3: unable to read partition table [ 2341.871789][ T3505] loop3: partition table beyond EOD, truncated [ 2341.895315][ T3505] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2343.825298][ T3555] netlink: 107460 bytes leftover after parsing attributes in process `syz.5.6826'. [ 2345.295341][ T3566] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2345.295341][ T3566] program syz.4.6828 not setting count and/or reply_len properly [ 2345.669559][T13572] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 2345.873889][T13572] usb 5-1: Using ep0 maxpacket: 32 [ 2345.918409][T13572] usb 5-1: config 0 has no interfaces? [ 2345.964275][T13572] usb 5-1: New USB device found, idVendor=1e2d, idProduct=0069, bcdDevice=9f.d3 [ 2346.045818][T13572] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2346.137983][T13572] usb 5-1: Product: syz [ 2346.143223][T21549] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 2346.154393][T21549] Bluetooth: hci5: Injecting HCI hardware error event [ 2346.165196][T21549] Bluetooth: hci5: hardware error 0x00 [ 2346.246433][T13572] usb 5-1: Manufacturer: syz [ 2346.251037][T13572] usb 5-1: SerialNumber: syz [ 2346.290258][T13572] usb 5-1: config 0 descriptor?? [ 2346.682309][ T935] usb 5-1: USB disconnect, device number 17 [ 2347.044536][ T3595] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6833'. [ 2347.102346][ T3595] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6833'. [ 2348.375836][T21549] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 2349.410726][ T3584] SELinux: failed to load policy [ 2350.084724][ T30] audit: type=1400 audit(2000004288.645:1697): avc: denied { ioctl } for pid=3609 comm="syz.6.6836" path="socket:[142554]" dev="sockfs" ino=142554 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 2350.435038][ T3625] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6838'. [ 2351.614270][ T3642] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2351.614852][ T3642] netlink: 188 bytes leftover after parsing attributes in process `syz.4.6842'. [ 2351.655768][ T30] audit: type=1400 audit(2000004290.114:1698): avc: denied { getopt } for pid=3638 comm="syz.4.6842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2352.136636][ T3652] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6844'. [ 2353.052340][ T3662] netlink: 84 bytes leftover after parsing attributes in process `syz.7.6845'. [ 2353.138002][ T3667] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6847'. [ 2353.200539][ T3667] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6847'. [ 2355.313961][ T3680] SELinux: failed to load policy [ 2355.553478][ T3700] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2356.330600][ T3713] openvswitch: netlink: Multiple metadata blocks provided [ 2356.349615][ T3697] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2356.349615][ T3697] program syz.4.6852 not setting count and/or reply_len properly [ 2357.001603][T18043] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 2357.109758][ T3726] input: syz0 as /devices/virtual/input/input120 [ 2357.236558][T18043] usb 5-1: Using ep0 maxpacket: 32 [ 2357.373257][T18043] usb 5-1: config 0 has no interfaces? [ 2357.472366][ T3739] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2357.872586][T18043] usb 5-1: New USB device found, idVendor=1e2d, idProduct=0069, bcdDevice=9f.d3 [ 2358.118597][ T3739] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 2358.245661][ T3746] netlink: 107460 bytes leftover after parsing attributes in process `syz.7.6860'. [ 2358.387220][ T3745] netlink: 'syz.2.6861': attribute type 21 has an invalid length. [ 2359.836718][T18043] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2359.851226][T18043] usb 5-1: Product: syz [ 2359.855497][T18043] usb 5-1: Manufacturer: syz [ 2359.860105][T18043] usb 5-1: SerialNumber: syz [ 2359.892273][T18043] usb 5-1: config 0 descriptor?? [ 2359.902276][T18043] usb 5-1: can't set config #0, error -71 [ 2359.930297][T18043] usb 5-1: USB disconnect, device number 18 [ 2359.930887][ T3758] loop3: detected capacity change from 0 to 7 [ 2359.996926][ T3717] Dev loop3: unable to read RDB block 7 [ 2360.012764][ T3717] loop3: unable to read partition table [ 2360.033908][ T3717] loop3: partition table beyond EOD, truncated [ 2360.059276][ T3758] Dev loop3: unable to read RDB block 7 [ 2360.100002][ T3758] loop3: unable to read partition table [ 2360.114516][ T3758] loop3: partition table beyond EOD, truncated [ 2360.134081][ T3758] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2360.518185][T21549] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 2360.518256][T27323] Bluetooth: hci6: command 0x1003 tx timeout [ 2360.745377][ T3783] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6864'. [ 2360.935253][ T3784] block nbd6: shutting down sockets [ 2361.777663][ T3796] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 2361.788228][ T3796] SELinux: failed to load policy [ 2363.033591][ T3804] netlink: 64 bytes leftover after parsing attributes in process `syz.7.6872'. [ 2363.057683][ T3807] netlink: 'syz.5.6876': attribute type 21 has an invalid length. [ 2364.285241][T13572] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 2364.601252][ T3840] 9p: Bad value for 'rfdno' [ 2364.835004][T13572] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2364.929302][T13572] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2365.083841][T13572] usb 7-1: config 0 descriptor?? [ 2365.184210][ T3827] SELinux: failed to load policy [ 2365.714902][ T3864] hugetlbfs: syz.2.6885 (3864): Using mlock ulimits for SHM_HUGETLB is obsolete [ 2365.866782][ T3868] block nbd2: not configured, cannot reconfigure [ 2365.969255][ T3873] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6888'. [ 2366.774670][ T30] audit: type=1326 audit(2000004304.276:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3869 comm="syz.5.6887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bdbd8f749 code=0x7fc00000 [ 2366.813154][T13572] usb 7-1: Cannot set autoneg [ 2366.818978][T13572] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 2366.849966][ T30] audit: type=1326 audit(2000004304.295:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3869 comm="syz.5.6887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0bdbd8f749 code=0x7fc00000 [ 2366.856961][ T3882] input: syz0 as /devices/virtual/input/input121 [ 2366.883220][T13572] usb 7-1: USB disconnect, device number 67 [ 2366.941761][ T30] audit: type=1326 audit(2000004304.295:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3869 comm="syz.5.6887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bdbd8f749 code=0x7fc00000 [ 2366.969795][ T30] audit: type=1326 audit(2000004304.295:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3869 comm="syz.5.6887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bdbd8f749 code=0x7fc00000 [ 2367.002220][ T30] audit: type=1326 audit(2000004304.295:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3869 comm="syz.5.6887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bdbd8f749 code=0x7fc00000 [ 2367.009038][ T3896] netlink: 'syz.4.6892': attribute type 21 has an invalid length. [ 2367.026346][ T30] audit: type=1326 audit(2000004304.295:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3869 comm="syz.5.6887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bdbd8f749 code=0x7fc00000 [ 2367.153301][ T30] audit: type=1326 audit(2000004304.295:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3869 comm="syz.5.6887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bdbd8f749 code=0x7fc00000 [ 2367.230211][ T30] audit: type=1326 audit(2000004304.295:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3869 comm="syz.5.6887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bdbd8f749 code=0x7fc00000 [ 2367.277362][ T30] audit: type=1326 audit(2000004304.295:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3869 comm="syz.5.6887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bdbd8f749 code=0x7fc00000 [ 2367.303581][ T30] audit: type=1326 audit(2000004304.295:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3869 comm="syz.5.6887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bdbd8f749 code=0x7fc00000 [ 2367.413479][ T935] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 2367.531233][T18043] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 2367.584603][ T935] usb 3-1: Using ep0 maxpacket: 16 [ 2367.594808][ T935] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 2367.605054][ T935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2367.618441][ T935] usb 3-1: Product: syz [ 2367.622695][ T935] usb 3-1: Manufacturer: syz [ 2367.628378][ T935] usb 3-1: SerialNumber: syz [ 2367.647901][ T935] usb 3-1: config 0 descriptor?? [ 2367.659854][ T935] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 2367.712840][T18043] usb 6-1: Using ep0 maxpacket: 32 [ 2367.720923][T18043] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2367.740725][T18043] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2367.760618][T18043] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2367.782667][T18043] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2367.809312][T18043] usb 6-1: config 0 descriptor?? [ 2367.832417][T18043] hub 6-1:0.0: USB hub found [ 2367.890929][ T935] usb 3-1: clie_3_5_startup: get config number failed: -71 [ 2367.910415][ T935] visor 3-1:0.0: probe with driver visor failed with error -71 [ 2367.935242][ T935] usb 3-1: USB disconnect, device number 40 [ 2368.041843][T18043] hub 6-1:0.0: 1 port detected [ 2368.233481][ T3939] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2368.817003][T18043] hub 6-1:0.0: activate --> -90 [ 2368.867943][ T3950] ip6_vti0 speed is unknown, defaulting to 1000 [ 2369.257484][ T3950] lo speed is unknown, defaulting to 1000 [ 2369.271034][T18043] usb 6-1-port1: cannot reset (err = -71) [ 2369.271213][T27744] usb 6-1: USB disconnect, device number 15 [ 2369.277658][T18043] usb 6-1-port1: attempt power cycle [ 2369.391498][T13572] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 2369.607051][T13572] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2369.619044][T13572] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2369.658520][T13572] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2369.710239][T13572] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2369.738408][T13572] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2369.832321][T13572] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 2369.859251][T13572] usb 7-1: invalid MIDI out EP 0 [ 2372.027459][T13572] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2372.310722][ T4023] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 2372.320776][ T4023] SELinux: failed to load policy [ 2372.653256][T13572] usb 7-1: USB disconnect, device number 68 [ 2373.025231][ T4058] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2373.970760][ T4067] zonefs (nullb0) ERROR: Not a zoned block device [ 2373.980998][ T4067] binder: 4059:4067 ioctl c0306201 200000000040 returned -22 [ 2374.862770][ T4071] hub 5-0:1.0: USB hub found [ 2374.867909][ T4071] hub 5-0:1.0: 1 port detected [ 2375.250019][ T4076] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2375.707025][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 2375.707038][ T30] audit: type=1326 audit(2000004312.610:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4074 comm="syz.5.6918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bdbd8f749 code=0x7ffc0000 [ 2375.924396][ T30] audit: type=1326 audit(2000004312.610:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4074 comm="syz.5.6918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bdbd8f749 code=0x7ffc0000 [ 2376.009494][ T935] usb 6-1: new low-speed USB device number 20 using dummy_hcd [ 2376.034941][ T4098] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2376.105201][T13572] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 2376.297355][ T30] audit: type=1326 audit(2000004312.610:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4074 comm="syz.5.6918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0bdbd8f749 code=0x7ffc0000 [ 2376.322605][ T30] audit: type=1326 audit(2000004312.610:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4074 comm="syz.5.6918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bdbd8f749 code=0x7ffc0000 [ 2376.415368][T13572] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2376.425651][ T30] audit: type=1326 audit(2000004312.610:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4074 comm="syz.5.6918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bdbd8f749 code=0x7ffc0000 [ 2376.454271][T13572] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2376.475062][ T935] usb 6-1: device descriptor read/64, error -71 [ 2376.510752][T13572] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2376.542497][T13572] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2376.565262][T13572] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2376.598732][T13572] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2376.616915][T13572] usb 3-1: invalid MIDI out EP 0 [ 2376.643537][ T4110] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6924'. [ 2376.881104][ T935] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 2376.948252][ T30] audit: type=1326 audit(2000004312.620:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4074 comm="syz.5.6918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0bdbd8f749 code=0x7ffc0000 [ 2377.612320][ T935] usb 6-1: device descriptor read/64, error -71 [ 2377.716033][T13572] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2377.745792][ T935] usb usb6-port1: attempt power cycle [ 2377.766307][ T30] audit: type=1326 audit(2000004312.620:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4074 comm="syz.5.6918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bdbd8f749 code=0x7ffc0000 [ 2377.790991][ T3888] udevd[3888]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2377.893176][ T30] audit: type=1326 audit(2000004312.620:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4074 comm="syz.5.6918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0bdbd8f749 code=0x7ffc0000 [ 2378.038794][ T30] audit: type=1326 audit(2000004312.620:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4074 comm="syz.5.6918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bdbd8f749 code=0x7ffc0000 [ 2378.099944][ T30] audit: type=1326 audit(2000004312.620:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4074 comm="syz.5.6918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0bdbd8f749 code=0x7ffc0000 [ 2378.236565][ T935] usb 6-1: new low-speed USB device number 22 using dummy_hcd [ 2378.287471][ T935] usb 6-1: device descriptor read/8, error -71 [ 2378.375230][T24657] libceph: connect (1)[c::]:6789 error -101 [ 2378.382259][T24657] libceph: mon0 (1)[c::]:6789 connect error [ 2378.405886][ T4131] ceph: No mds server is up or the cluster is laggy [ 2378.811031][ T4147] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2379.242088][T17386] usb 3-1: USB disconnect, device number 41 [ 2379.410445][ T4161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6927'. [ 2379.419543][ T4161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6927'. [ 2379.444053][ T4161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6927'. [ 2379.453718][ T4161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6927'. [ 2379.522542][ T9118] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2379.554042][ T9118] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2379.613743][ T4166] ip6_vti0 speed is unknown, defaulting to 1000 [ 2379.615912][ T9118] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2379.631162][ T9118] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2379.991896][ T4180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6930'. [ 2380.113785][ T4183] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2380.113785][ T4183] program syz.4.6932 not setting count and/or reply_len properly [ 2380.313197][ T4166] lo speed is unknown, defaulting to 1000 [ 2380.516493][ T4196] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2380.814105][ T4197] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2380.814105][ T4197] program syz.5.6934 not setting count and/or reply_len properly [ 2381.147996][ T4210] No source specified [ 2381.158442][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 2381.158457][ T30] audit: type=1400 audit(2000004317.718:1772): avc: denied { accept } for pid=4209 comm="syz.7.6937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2381.403552][ T4226] syzkaller1: tun_chr_ioctl cmd 1074025675 [ 2381.439002][ T4226] syzkaller1: persist disabled [ 2381.568277][T27744] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 2381.741718][T27744] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2381.770413][T27744] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2381.812388][T27744] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2381.852170][T27744] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2381.887052][T27744] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2381.928670][T27744] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 2382.069474][T27744] usb 7-1: invalid MIDI out EP 0 [ 2382.294623][ T4241] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2383.332631][ T3717] udevd[3717]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2383.367515][ T4270] input: syz0 as /devices/virtual/input/input122 [ 2383.389630][T27744] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2383.460250][ T30] audit: type=1400 audit(2000004319.878:1773): avc: denied { read } for pid=4280 comm="syz.2.6941" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 2383.520942][ T30] audit: type=1400 audit(2000004319.888:1774): avc: denied { ioctl } for pid=4280 comm="syz.2.6941" path="socket:[143224]" dev="sockfs" ino=143224 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2384.118692][ T4281] tmpfs: Unknown parameter 'usrquotauencer' [ 2384.320211][ T4290] batman_adv: batadv0: Adding interface: gretap1 [ 2384.331197][ T4290] batman_adv: batadv0: Interface activated: gretap1 [ 2384.532244][T18043] usb 7-1: USB disconnect, device number 69 [ 2384.598456][ T30] audit: type=1400 audit(2000004320.945:1775): avc: denied { map } for pid=4298 comm="syz.5.6945" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 2384.600840][T27744] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 2384.731432][T27744] hid-generic 0000:0000:0000.0043: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2384.842967][ T4312] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6945'. [ 2385.373979][ T4316] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2385.534774][ T4311] fido_id[4311]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2385.602386][ T4318] loop3: detected capacity change from 0 to 7 [ 2385.623975][ T4318] Dev loop3: unable to read RDB block 7 [ 2385.631069][ T4318] loop3: unable to read partition table [ 2385.642439][ T4318] loop3: partition table beyond EOD, truncated [ 2385.654064][ T4318] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2385.717019][ T4325] netlink: 107460 bytes leftover after parsing attributes in process `syz.5.6948'. [ 2386.038850][T17386] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 2386.235804][T17386] hid-generic 0000:0000:0000.0044: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2386.450934][ T4337] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6950'. [ 2387.498332][ T4350] FAULT_INJECTION: forcing a failure. [ 2387.498332][ T4350] name failslab, interval 1, probability 0, space 0, times 0 [ 2387.621428][ T4350] CPU: 0 UID: 0 PID: 4350 Comm: syz.7.6953 Tainted: G L syzkaller #0 PREEMPT(full) [ 2387.621462][ T4350] Tainted: [L]=SOFTLOCKUP [ 2387.621469][ T4350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2387.621479][ T4350] Call Trace: [ 2387.621486][ T4350] [ 2387.621494][ T4350] dump_stack_lvl+0x16c/0x1f0 [ 2387.621529][ T4350] should_fail_ex+0x512/0x640 [ 2387.621557][ T4350] ? fs_reclaim_acquire+0xae/0x150 [ 2387.621588][ T4350] should_failslab+0xc2/0x120 [ 2387.621614][ T4350] __kmalloc_noprof+0xeb/0x910 [ 2387.621643][ T4350] ? tomoyo_encode2+0x100/0x3e0 [ 2387.621674][ T4350] ? tomoyo_encode2+0x100/0x3e0 [ 2387.621698][ T4350] tomoyo_encode2+0x100/0x3e0 [ 2387.621726][ T4350] tomoyo_encode+0x29/0x50 [ 2387.621751][ T4350] tomoyo_realpath_from_path+0x18f/0x6e0 [ 2387.621783][ T4350] tomoyo_path_number_perm+0x245/0x580 [ 2387.621804][ T4350] ? tomoyo_path_number_perm+0x237/0x580 [ 2387.621828][ T4350] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2387.621877][ T4350] ? find_held_lock+0x2b/0x80 [ 2387.621906][ T4350] ? hook_file_ioctl_common+0x144/0x410 [ 2387.621940][ T4350] ? __fget_files+0x20e/0x3c0 [ 2387.621971][ T4350] security_file_ioctl+0x9b/0x240 [ 2387.621997][ T4350] __x64_sys_ioctl+0xb7/0x210 [ 2387.622022][ T4350] do_syscall_64+0xcd/0xf80 [ 2387.622047][ T4350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2387.622067][ T4350] RIP: 0033:0x7f7d58f8f749 [ 2387.622083][ T4350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2387.622101][ T4350] RSP: 002b:00007f7d59ee5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2387.622118][ T4350] RAX: ffffffffffffffda RBX: 00007f7d591e5fa0 RCX: 00007f7d58f8f749 [ 2387.622131][ T4350] RDX: 0000200000000100 RSI: 00000000c0205647 RDI: 0000000000000003 [ 2387.622142][ T4350] RBP: 00007f7d59ee5090 R08: 0000000000000000 R09: 0000000000000000 [ 2387.622153][ T4350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2387.622164][ T4350] R13: 00007f7d591e6038 R14: 00007f7d591e5fa0 R15: 00007ffee5bb8db8 [ 2387.622191][ T4350] [ 2387.628452][ T4350] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2387.960919][T21549] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 2388.529327][T27744] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 2388.710361][T27744] usb 7-1: Using ep0 maxpacket: 32 [ 2388.796664][T27744] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2388.809754][T27744] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2388.819685][T27744] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2388.829363][T27744] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2388.845470][T27744] usb 7-1: config 0 descriptor?? [ 2388.935157][T27744] hub 7-1:0.0: USB hub found [ 2388.969124][T18278] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 2388.981734][ T4375] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6956'. [ 2389.084542][ T30] audit: type=1400 audit(2000004325.145:1776): avc: denied { execmod } for pid=4358 comm="syz.7.6956" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=143610 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 2389.172508][T27744] hub 7-1:0.0: 1 port detected [ 2389.274528][T18278] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2389.300757][T18278] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2389.308202][ T4386] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2389.411398][T18278] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2389.495818][T18278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2389.660372][T18278] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2389.680303][T18278] usb 3-1: invalid MIDI out EP 0 [ 2389.817318][ T4038] udevd[4038]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2390.324154][ T4415] FAULT_INJECTION: forcing a failure. [ 2390.324154][ T4415] name failslab, interval 1, probability 0, space 0, times 0 [ 2390.337873][ T4415] CPU: 1 UID: 0 PID: 4415 Comm: syz.4.6962 Tainted: G L syzkaller #0 PREEMPT(full) [ 2390.337905][ T4415] Tainted: [L]=SOFTLOCKUP [ 2390.337912][ T4415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2390.337924][ T4415] Call Trace: [ 2390.337936][ T4415] [ 2390.337945][ T4415] dump_stack_lvl+0x16c/0x1f0 [ 2390.337976][ T4415] should_fail_ex+0x512/0x640 [ 2390.338008][ T4415] should_failslab+0xc2/0x120 [ 2390.338034][ T4415] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 2390.338056][ T4415] ? __d_alloc+0x35/0xa80 [ 2390.338078][ T4415] ? __d_alloc+0x35/0xa80 [ 2390.338093][ T4415] __d_alloc+0x35/0xa80 [ 2390.338114][ T4415] d_alloc+0x4a/0x1e0 [ 2390.338133][ T4415] lookup_one_qstr_excl+0x175/0x250 [ 2390.338157][ T4415] start_dirop+0x59/0xb0 [ 2390.338182][ T4415] simple_start_creating+0xf4/0x100 [ 2390.338210][ T4415] ? __pfx_simple_start_creating+0x10/0x10 [ 2390.338243][ T4415] ? simple_pin_fs+0xa3/0x190 [ 2390.338267][ T4415] debugfs_start_creating.part.0+0x86/0x1c0 [ 2390.338289][ T4415] __debugfs_create_file+0xb3/0x530 [ 2390.338313][ T4415] debugfs_create_file_full+0x41/0x60 [ 2390.338336][ T4415] ? __pfx_ip6erspan_tap_setup+0x10/0x10 [ 2390.338363][ T4415] ref_tracker_dir_debugfs+0x19d/0x2f0 [ 2390.338393][ T4415] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 2390.338421][ T4415] ? __pfx___schedule+0x10/0x10 [ 2390.338469][ T4415] ? lockdep_init_map_type+0x5c/0x270 [ 2390.338498][ T4415] alloc_netdev_mqs+0x314/0x1550 [ 2390.338532][ T4415] rtnl_create_link+0xc08/0xf60 [ 2390.338558][ T4415] rtnl_newlink+0xb3b/0x1f50 [ 2390.338588][ T4415] ? __pfx_rtnl_newlink+0x10/0x10 [ 2390.338622][ T4415] ? __pfx___schedule+0x10/0x10 [ 2390.338654][ T4415] ? rcu_is_watching+0x12/0xc0 [ 2390.338672][ T4415] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2390.338694][ T4415] ? lockdep_hardirqs_on+0x7c/0x110 [ 2390.338718][ T4415] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2390.338740][ T4415] ? rcu_preempt_deferred_qs_irqrestore+0x500/0xbc0 [ 2390.338774][ T4415] ? __pfx_rtnl_newlink+0x10/0x10 [ 2390.338796][ T4415] rtnetlink_rcv_msg+0x95e/0xe90 [ 2390.338819][ T4415] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2390.338839][ T4415] ? __lock_acquire+0x436/0x2890 [ 2390.338867][ T4415] ? ref_tracker_free+0x37c/0x830 [ 2390.338900][ T4415] netlink_rcv_skb+0x158/0x420 [ 2390.338923][ T4415] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2390.338947][ T4415] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2390.338989][ T4415] netlink_unicast+0x5aa/0x870 [ 2390.339016][ T4415] ? __pfx_netlink_unicast+0x10/0x10 [ 2390.339049][ T4415] netlink_sendmsg+0x8c8/0xdd0 [ 2390.339077][ T4415] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2390.339111][ T4415] ____sys_sendmsg+0xa5d/0xc30 [ 2390.339137][ T4415] ? copy_msghdr_from_user+0x10a/0x160 [ 2390.339157][ T4415] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2390.339185][ T4415] ? __lock_acquire+0x436/0x2890 [ 2390.339214][ T4415] ___sys_sendmsg+0x134/0x1d0 [ 2390.339235][ T4415] ? __pfx____sys_sendmsg+0x10/0x10 [ 2390.339254][ T4415] ? find_held_lock+0x2b/0x80 [ 2390.339316][ T4415] __sys_sendmsg+0x16d/0x220 [ 2390.339336][ T4415] ? __pfx___sys_sendmsg+0x10/0x10 [ 2390.339375][ T4415] do_syscall_64+0xcd/0xf80 [ 2390.339400][ T4415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2390.339420][ T4415] RIP: 0033:0x7f3821f8f749 [ 2390.339436][ T4415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2390.339455][ T4415] RSP: 002b:00007f38201b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2390.339475][ T4415] RAX: ffffffffffffffda RBX: 00007f38221e6180 RCX: 00007f3821f8f749 [ 2390.339487][ T4415] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 2390.339499][ T4415] RBP: 00007f38201b4090 R08: 0000000000000000 R09: 0000000000000000 [ 2390.339512][ T4415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2390.339529][ T4415] R13: 00007f38221e6218 R14: 00007f38221e6180 R15: 00007fff0aa234c8 [ 2390.339557][ T4415] [ 2390.777134][T18278] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2390.795762][T27744] hub 7-1:0.0: activate --> -90 [ 2390.967443][ T4420] input: syz0 as /devices/virtual/input/input123 [ 2392.812516][T27744] usb 7-1-port1: cannot reset (err = -110) [ 2392.837883][T27744] usb 7-1-port1: cannot reset (err = -32) [ 2392.847303][T27744] usb 7-1-port1: Cannot enable. Maybe the USB cable is bad? [ 2392.859165][T27744] usb 7-1-port1: cannot disable (err = -32) [ 2392.870318][ T5827] usb 7-1: USB disconnect, device number 70 [ 2392.877850][T27744] usb 7-1-port1: cannot reset (err = -71) [ 2392.886065][T18278] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 2392.894468][T27744] usb 7-1-port1: attempt power cycle [ 2392.978158][ T4438] netlink: 84 bytes leftover after parsing attributes in process `syz.6.6967'. [ 2393.063005][T18278] usb 6-1: Using ep0 maxpacket: 16 [ 2393.085261][T18278] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 2393.119938][T18278] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2393.156030][T18278] usb 6-1: Product: syz [ 2393.201251][T18278] usb 6-1: Manufacturer: syz [ 2393.227925][T18278] usb 6-1: SerialNumber: syz [ 2393.355296][T18278] usb 6-1: config 0 descriptor?? [ 2393.394027][T18278] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 2393.888709][T18278] usb 6-1: clie_3_5_startup: get config number failed: -71 [ 2393.949653][ T5827] usb 3-1: USB disconnect, device number 42 [ 2393.973015][T18278] visor 6-1:0.0: probe with driver visor failed with error -71 [ 2394.099627][T18278] usb 6-1: USB disconnect, device number 24 [ 2394.345826][ T4487] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2394.345826][ T4487] program syz.7.6970 not setting count and/or reply_len properly [ 2394.663101][ T4489] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2394.663101][ T4489] program syz.2.6969 not setting count and/or reply_len properly [ 2395.014472][ T4500] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2395.113139][T18278] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 2395.572665][T18278] usb 3-1: Using ep0 maxpacket: 32 [ 2395.898642][T18278] usb 3-1: config 0 has no interfaces? [ 2395.924894][ T4509] netlink: 84 bytes leftover after parsing attributes in process `syz.6.6973'. [ 2395.966129][T18278] usb 3-1: New USB device found, idVendor=1e2d, idProduct=0069, bcdDevice=9f.d3 [ 2396.004418][T18278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2396.022752][ T4514] FAULT_INJECTION: forcing a failure. [ 2396.022752][ T4514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2396.022860][T18278] usb 3-1: Product: syz [ 2396.085066][T18278] usb 3-1: Manufacturer: syz [ 2396.143327][T18278] usb 3-1: SerialNumber: syz [ 2396.186038][ T4514] CPU: 1 UID: 0 PID: 4514 Comm: syz.4.6974 Tainted: G L syzkaller #0 PREEMPT(full) [ 2396.186069][ T4514] Tainted: [L]=SOFTLOCKUP [ 2396.186075][ T4514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2396.186085][ T4514] Call Trace: [ 2396.186091][ T4514] [ 2396.186098][ T4514] dump_stack_lvl+0x16c/0x1f0 [ 2396.186125][ T4514] should_fail_ex+0x512/0x640 [ 2396.186153][ T4514] _copy_to_user+0x32/0xd0 [ 2396.186179][ T4514] video_usercopy+0xf43/0x16c0 [ 2396.186202][ T4514] ? __pfx___video_do_ioctl+0x10/0x10 [ 2396.186220][ T4514] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 2396.186247][ T4514] ? __pfx_video_usercopy+0x10/0x10 [ 2396.186285][ T4514] v4l2_ioctl+0x1bd/0x250 [ 2396.186304][ T4514] ? __pfx_v4l2_ioctl+0x10/0x10 [ 2396.186325][ T4514] __x64_sys_ioctl+0x18e/0x210 [ 2396.186349][ T4514] do_syscall_64+0xcd/0xf80 [ 2396.186382][ T4514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2396.186401][ T4514] RIP: 0033:0x7f3821f8f749 [ 2396.186416][ T4514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2396.186433][ T4514] RSP: 002b:00007f38201f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2396.186450][ T4514] RAX: ffffffffffffffda RBX: 00007f38221e5fa0 RCX: 00007f3821f8f749 [ 2396.186461][ T4514] RDX: 00002000000000c0 RSI: 00000000c0d05605 RDI: 0000000000000004 [ 2396.186470][ T4514] RBP: 00007f38201f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2396.186480][ T4514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2396.186491][ T4514] R13: 00007f38221e6038 R14: 00007f38221e5fa0 R15: 00007fff0aa234c8 [ 2396.186517][ T4514] [ 2396.453066][T18278] usb 3-1: config 0 descriptor?? [ 2397.496110][T24657] usb 3-1: USB disconnect, device number 43 [ 2398.434990][ T4555] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2399.185638][ T4570] netlink: 35 bytes leftover after parsing attributes in process `syz.7.6982'. [ 2399.521763][ T4578] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2399.898425][ T4581] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2400.366678][ T4581] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR [ 2402.127153][ T30] audit: type=1400 audit(2000004337.342:1777): avc: denied { mount } for pid=4609 comm="syz.5.6993" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 2402.230571][ T30] audit: type=1400 audit(2000004337.380:1778): avc: denied { read } for pid=4611 comm="syz.7.6992" path="socket:[144647]" dev="sockfs" ino=144647 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2402.280245][ T30] audit: type=1400 audit(2000004337.483:1779): avc: denied { getopt } for pid=4609 comm="syz.5.6993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2402.330011][ T4610] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4610 comm=syz.5.6993 [ 2402.339435][ T30] audit: type=1400 audit(2000004337.529:1780): avc: denied { bind } for pid=4614 comm="syz.4.6994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2402.428882][ T30] audit: type=1400 audit(2000004337.623:1781): avc: denied { mounton } for pid=4609 comm="syz.5.6993" path="/bus" dev="ramfs" ino=144668 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 2402.452237][ T4610] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2402.466191][ T4610] overlayfs: failed to set xattr on upper [ 2402.497863][ T4610] overlayfs: ...falling back to redirect_dir=nofollow. [ 2402.564320][ T4610] overlayfs: ...falling back to index=off. [ 2402.570284][ T4610] overlayfs: conflicting lowerdir path [ 2402.701492][ T30] audit: type=1400 audit(2000004337.876:1782): avc: denied { unmount } for pid=24478 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 2403.093226][ T4633] netlink: 'syz.4.6996': attribute type 10 has an invalid length. [ 2403.101788][ T4633] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6996'. [ 2403.112829][ T4633] batman_adv: batadv0: Adding interface: virt_wifi0 [ 2403.119440][ T4633] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2403.146171][ T4633] batman_adv: batadv0: Interface activated: virt_wifi0 [ 2403.739929][ T30] audit: type=1400 audit(2000004338.839:1783): avc: denied { bind } for pid=4644 comm="syz.2.6999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2403.842687][ T30] audit: type=1400 audit(2000004338.839:1784): avc: denied { setopt } for pid=4644 comm="syz.2.6999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2403.947771][ T30] audit: type=1400 audit(2000004339.045:1785): avc: denied { lock } for pid=4653 comm="syz.2.7003" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 2404.019708][ T4660] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6998'. [ 2404.092494][ T4662] netlink: 35 bytes leftover after parsing attributes in process `syz.4.7002'. [ 2404.440310][ T4636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2405.096655][ T935] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 2405.365201][ T935] usb 6-1: Using ep0 maxpacket: 8 [ 2405.377186][ T935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2405.397207][ T935] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2405.417125][ T935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2405.454705][ T935] usb 6-1: config 0 descriptor?? [ 2405.985370][ T30] audit: type=1400 audit(2000004340.757:1786): avc: denied { read } for pid=4691 comm="syz.6.7010" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 2406.148773][ T935] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2407.162820][ T4719] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2407.346913][ T9] usb 6-1: USB disconnect, device number 25 [ 2407.627755][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 2407.627776][ T30] audit: type=1800 audit(2000004342.478:1791): pid=4737 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.7015" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 2408.106737][ T30] audit: type=1400 audit(2000004342.702:1792): avc: denied { remove_name } for pid=21826 comm="syz-executor" name="binderfs" dev="tmpfs" ino=2885 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 2408.396677][ T4747] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7018'. [ 2408.414574][ T4740] hub 5-0:1.0: USB hub found [ 2408.419334][ T4740] hub 5-0:1.0: 1 port detected [ 2408.444258][ T30] audit: type=1400 audit(2000004342.712:1793): avc: denied { rmdir } for pid=21826 comm="syz-executor" name="545" dev="tmpfs" ino=2881 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 2408.636891][ T30] audit: type=1400 audit(2000004343.432:1794): avc: denied { cmd } for pid=4751 comm="syz.4.7019" path="socket:[143963]" dev="sockfs" ino=143963 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 2409.495643][ T4763] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2410.309996][ T4778] ip6_vti0 speed is unknown, defaulting to 1000 [ 2411.954632][ T4778] lo speed is unknown, defaulting to 1000 [ 2412.200340][ T9] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 2412.389156][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 2412.412274][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2412.440050][ T9] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2412.451403][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2412.473258][ T9] usb 7-1: config 0 descriptor?? [ 2412.787083][ T9] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2412.844943][ T4845] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2412.844943][ T4845] program syz.2.7031 not setting count and/or reply_len properly [ 2413.137269][ T9] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 2413.322806][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 2413.331795][ T9] usb 3-1: config 0 has no interfaces? [ 2413.339763][ T9] usb 3-1: New USB device found, idVendor=1e2d, idProduct=0069, bcdDevice=9f.d3 [ 2413.349078][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2413.357523][ T9] usb 3-1: Product: syz [ 2413.365786][ T9] usb 3-1: Manufacturer: syz [ 2413.370595][ T9] usb 3-1: SerialNumber: syz [ 2413.387140][ T9] usb 3-1: config 0 descriptor?? [ 2413.437254][ T935] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 2413.511422][T24657] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 2413.559715][ T9] usb 7-1: USB disconnect, device number 75 [ 2413.607607][ T935] usb 6-1: Using ep0 maxpacket: 16 [ 2413.635744][T27619] usb 3-1: USB disconnect, device number 44 [ 2413.643990][ T935] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2413.654949][ T935] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2413.669004][ T935] usb 6-1: config 1 has no interface number 1 [ 2413.675483][T24657] usb 5-1: Using ep0 maxpacket: 16 [ 2413.681401][ T935] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2413.695983][ T935] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2413.707756][T24657] usb 5-1: config 125 has an invalid interface number: 165 but max is 0 [ 2413.717846][T24657] usb 5-1: config 125 has no interface number 0 [ 2413.725284][T24657] usb 5-1: config 125 interface 165 has no altsetting 0 [ 2413.735510][ T935] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2413.746845][T24657] usb 5-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=d5.16 [ 2413.757619][ T935] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2413.765650][ T935] usb 6-1: Product: syz [ 2413.769975][T24657] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2413.780315][ T935] usb 6-1: Manufacturer: syz [ 2413.789951][ T935] usb 6-1: SerialNumber: syz [ 2414.063264][ T935] usb 6-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 2414.177294][ T935] usb 6-1: USB disconnect, device number 26 [ 2414.240415][ T4683] udevd[4683]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2415.237923][ T9] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 2416.388154][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 2416.403783][ T9] usb 7-1: config 125 has an invalid interface number: 165 but max is 0 [ 2416.412382][ T9] usb 7-1: config 125 has no interface number 0 [ 2416.421822][ T9] usb 7-1: config 125 interface 165 has no altsetting 0 [ 2416.538403][ T9] usb 7-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=d5.16 [ 2416.552995][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2416.670093][T24657] usb 5-1: string descriptor 0 read error: -71 [ 2416.690172][T24657] gspca_main: spca501-2.14.0 probing 0497:c001 [ 2416.708760][T24657] gspca_spca501: reg write: error -71 [ 2416.718788][T24657] spca501 5-1:125.165: Reg write failed for 0x02,0x07,0x05 [ 2416.737015][T24657] spca501 5-1:125.165: probe with driver spca501 failed with error -22 [ 2416.761200][T24657] usb 5-1: USB disconnect, device number 19 [ 2417.296451][ T30] audit: type=1400 audit(2000004351.523:1795): avc: denied { search } for pid=4966 comm="syz.2.7041" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 2417.415546][ T4975] ip6_vti0 speed is unknown, defaulting to 1000 [ 2417.691755][ T4975] lo speed is unknown, defaulting to 1000 [ 2418.543701][ T5013] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2418.543701][ T5013] program syz.4.7045 not setting count and/or reply_len properly [ 2418.605610][ T9] usb 7-1: string descriptor 0 read error: -71 [ 2418.687339][ T9] gspca_main: spca501-2.14.0 probing 0497:c001 [ 2418.714906][ T9] gspca_spca501: reg write: error -71 [ 2418.739396][ T9] spca501 7-1:125.165: Reg write failed for 0x02,0x07,0x05 [ 2418.761682][ T9] spca501 7-1:125.165: probe with driver spca501 failed with error -22 [ 2418.847484][T27619] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 2418.866922][ T9] usb 7-1: USB disconnect, device number 76 [ 2419.038442][T27619] usb 5-1: Using ep0 maxpacket: 32 [ 2419.060429][T27619] usb 5-1: config 0 has no interfaces? [ 2419.090821][T27619] usb 5-1: New USB device found, idVendor=1e2d, idProduct=0069, bcdDevice=9f.d3 [ 2419.121515][T27619] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2419.153842][T27619] usb 5-1: Product: syz [ 2419.166686][T27619] usb 5-1: Manufacturer: syz [ 2419.171295][T27619] usb 5-1: SerialNumber: syz [ 2419.215237][T27619] usb 5-1: config 0 descriptor?? [ 2419.511738][T27744] usb 5-1: USB disconnect, device number 20 [ 2419.619751][ T5052] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2419.619751][ T5052] program syz.2.7049 not setting count and/or reply_len properly [ 2420.059481][ T5059] netlink: 35 bytes leftover after parsing attributes in process `syz.5.7050'. [ 2420.139750][T24657] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 2420.791936][T24657] usb 3-1: Using ep0 maxpacket: 32 [ 2420.801079][T24657] usb 3-1: config 0 has no interfaces? [ 2420.875295][T24657] usb 3-1: New USB device found, idVendor=1e2d, idProduct=0069, bcdDevice=9f.d3 [ 2420.892870][T24657] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2420.905474][T24657] usb 3-1: Product: syz [ 2420.909755][T24657] usb 3-1: Manufacturer: syz [ 2420.914486][T24657] usb 3-1: SerialNumber: syz [ 2420.939651][T24657] usb 3-1: config 0 descriptor?? [ 2421.016921][ T5078] ip6_vti0 speed is unknown, defaulting to 1000 [ 2421.212830][ T5086] loop3: detected capacity change from 0 to 7 [ 2421.223438][ T4731] Dev loop3: unable to read RDB block 7 [ 2421.229012][ T4731] loop3: unable to read partition table [ 2421.237331][ T4731] loop3: partition table beyond EOD, truncated [ 2421.304066][ T5086] Dev loop3: unable to read RDB block 7 [ 2421.313453][ T5086] loop3: unable to read partition table [ 2421.320374][ T5086] loop3: partition table beyond EOD, truncated [ 2421.339142][ T5086] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2421.376750][T27744] usb 3-1: USB disconnect, device number 45 [ 2421.477230][ T5078] lo speed is unknown, defaulting to 1000 [ 2421.882652][T27744] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 2422.042559][T27744] usb 6-1: Using ep0 maxpacket: 16 [ 2422.054270][T27744] usb 6-1: config 125 has an invalid interface number: 165 but max is 0 [ 2422.085080][T27744] usb 6-1: config 125 has no interface number 0 [ 2422.112744][T27744] usb 6-1: config 125 interface 165 has no altsetting 0 [ 2422.137128][T27744] usb 6-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=d5.16 [ 2422.190219][T27744] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2424.215865][ T5172] netlink: 35 bytes leftover after parsing attributes in process `syz.4.7067'. [ 2424.501340][T27619] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 2424.683079][T27619] usb 3-1: Using ep0 maxpacket: 16 [ 2424.691134][T27619] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2424.701612][T27619] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2424.739321][T27619] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2424.749289][T27619] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2424.760303][T27619] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2424.814868][T27744] usb 6-1: string descriptor 0 read error: -71 [ 2424.823394][T27619] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2424.832464][T27619] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2424.850897][T27619] usb 3-1: Manufacturer: syz [ 2424.862368][T27744] gspca_main: spca501-2.14.0 probing 0497:c001 [ 2424.868461][T27619] usb 3-1: config 0 descriptor?? [ 2424.881552][ T5187] netlink: 84 bytes leftover after parsing attributes in process `syz.5.7069'. [ 2424.897919][T27744] gspca_spca501: reg write: error -71 [ 2424.903397][T27744] spca501 6-1:125.165: Reg write failed for 0x02,0x07,0x05 [ 2424.914236][T27744] spca501 6-1:125.165: probe with driver spca501 failed with error -22 [ 2424.939251][T27744] usb 6-1: USB disconnect, device number 27 [ 2425.878593][ T5213] fuse: Bad value for 'fd' [ 2426.364237][ T5213] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7068'. [ 2426.468361][T27619] rc_core: IR keymap rc-hauppauge not found [ 2426.476382][ T5213] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7068'. [ 2427.477094][T27619] Registered IR keymap rc-empty [ 2427.716082][T27619] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2427.742527][T27619] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2427.767634][T27619] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 2427.791594][T27619] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input124 [ 2427.821021][T27619] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2427.890484][T27619] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2427.911934][T27619] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2427.944272][T27619] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2427.977340][T27619] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2428.080918][T27323] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 2428.082073][ T5232] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2428.232174][T27619] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2428.264470][T27619] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2428.310074][T27619] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2428.362148][T27619] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2428.390801][ T5238] netlink: 84 bytes leftover after parsing attributes in process `syz.6.7074'. [ 2428.401148][T27619] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2428.427596][T27619] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2428.444568][T27619] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2428.920011][T27619] usb 3-1: USB disconnect, device number 46 [ 2430.486870][ T5285] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7080'. [ 2430.622100][ T5293] netlink: 35 bytes leftover after parsing attributes in process `syz.6.7081'. [ 2430.798253][T27744] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 2431.026393][T27744] usb 3-1: Using ep0 maxpacket: 16 [ 2431.077415][T27744] usb 3-1: config 125 has an invalid interface number: 165 but max is 0 [ 2431.229319][T27744] usb 3-1: config 125 has no interface number 0 [ 2431.235722][T27744] usb 3-1: config 125 interface 165 has no altsetting 0 [ 2431.243022][T27744] usb 3-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=d5.16 [ 2431.268486][T27744] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2433.262952][ T5296] SELinux: failed to load policy [ 2433.898181][T27744] usb 3-1: string descriptor 0 read error: -71 [ 2433.929102][T27744] gspca_main: spca501-2.14.0 probing 0497:c001 [ 2433.967727][T27744] gspca_spca501: reg write: error -71 [ 2433.979155][T27744] spca501 3-1:125.165: Reg write failed for 0x02,0x07,0x05 [ 2434.005723][T27744] spca501 3-1:125.165: probe with driver spca501 failed with error -22 [ 2434.048746][T27744] usb 3-1: USB disconnect, device number 47 [ 2434.261529][ T5318] vivid-000: ================= START STATUS ================= [ 2434.348833][ T5318] vivid-000: Radio HW Seek Mode: Bounded [ 2434.425443][ T30] audit: type=1400 audit(2000004367.546:1796): avc: denied { map } for pid=5309 comm="syz.2.7086" path="socket:[145714]" dev="sockfs" ino=145714 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 2434.461757][ T5318] vivid-000: Radio Programmable HW Seek: false [ 2434.472507][ T5318] vivid-000: RDS Rx I/O Mode: Block I/O [ 2434.483645][ T5318] vivid-000: Generate RBDS Instead of RDS: false [ 2434.511889][ T30] audit: type=1400 audit(2000004367.546:1797): avc: denied { accept } for pid=5309 comm="syz.2.7086" path="socket:[145714]" dev="sockfs" ino=145714 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 2434.513034][ T5318] vivid-000: RDS Reception: [ 2434.558273][ T5324] netlink: 84 bytes leftover after parsing attributes in process `syz.4.7085'. [ 2434.642463][ T30] audit: type=1400 audit(2000004367.546:1798): avc: denied { create } for pid=5309 comm="syz.2.7086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 2434.644101][ T5318] true [ 2434.786229][ T5318] vivid-000: RDS Program Type: 0 inactive [ 2435.220240][ T5318] vivid-000: RDS PS Name: inactive [ 2435.249010][ T5318] vivid-000: RDS Radio Text: inactive [ 2435.268870][ T5318] vivid-000: RDS Traffic Announcement: false inactive [ 2435.297915][ T5318] vivid-000: RDS Traffic Program: false inactive [ 2435.336384][ T5318] vivid-000: RDS Music: false inactive [ 2435.363562][ T5318] vivid-000: ================== END STATUS ================== [ 2436.485782][T27619] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 2436.816917][T27619] usb 3-1: Using ep0 maxpacket: 32 [ 2436.863870][T27619] usb 3-1: config index 0 descriptor too short (expected 6683, got 27) [ 2436.882232][T27619] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 2436.905859][T27619] usb 3-1: config 0 has no interface number 0 [ 2436.911992][T27619] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2437.464226][T27619] usb 3-1: config 0 interface 85 has no altsetting 0 [ 2437.493534][T27619] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 2437.518595][T27619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2437.554229][T27619] usb 3-1: Product: syz [ 2437.568410][T27619] usb 3-1: Manufacturer: syz [ 2437.582990][T27619] usb 3-1: SerialNumber: syz [ 2437.603703][T27619] usb 3-1: config 0 descriptor?? [ 2438.881489][T27619] appletouch 3-1:0.85: Geyser mode initialized. [ 2438.889751][T27619] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input125 [ 2439.134008][ T5827] usb 3-1: USB disconnect, device number 48 [ 2439.166146][ T5827] appletouch 3-1:0.85: input: appletouch disconnected [ 2440.048427][ T5827] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 2440.227246][ T5827] usb 3-1: Using ep0 maxpacket: 16 [ 2440.235712][ T5827] usb 3-1: config 125 has an invalid interface number: 165 but max is 0 [ 2440.244379][ T5827] usb 3-1: config 125 has no interface number 0 [ 2440.251460][ T5827] usb 3-1: config 125 interface 165 has no altsetting 0 [ 2440.258520][ T5827] usb 3-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=d5.16 [ 2440.267827][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2440.956503][ T5402] netlink: 84 bytes leftover after parsing attributes in process `syz.7.7099'. [ 2441.110238][ T5409] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2442.212901][ T5426] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7102'. [ 2442.677399][ T5427] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2444.956809][ T5827] usb 3-1: string descriptor 0 read error: -71 [ 2445.044746][ T5445] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2445.300654][ T5827] gspca_main: spca501-2.14.0 probing 0497:c001 [ 2445.317443][ T5827] gspca_spca501: reg write: error -71 [ 2445.324363][ T5827] spca501 3-1:125.165: Reg write failed for 0x02,0x07,0x05 [ 2445.348713][T21549] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 2445.355568][T27323] Bluetooth: hci6: command 0x1003 tx timeout [ 2445.389396][ T5827] spca501 3-1:125.165: probe with driver spca501 failed with error -22 [ 2445.514075][ T30] audit: type=1400 audit(2000004377.920:1799): avc: denied { bind } for pid=5452 comm="syz.4.7107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2445.535531][ T5827] usb 3-1: USB disconnect, device number 49 [ 2445.621340][ T30] audit: type=1400 audit(2000004377.920:1800): avc: denied { name_bind } for pid=5452 comm="syz.4.7107" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 2445.768072][ T30] audit: type=1400 audit(2000004377.920:1801): avc: denied { node_bind } for pid=5452 comm="syz.4.7107" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 2445.879656][ T5462] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2446.727857][ T5827] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 2446.889892][ T5827] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2446.902692][ T5827] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2446.917902][ T5827] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2446.927798][ T5827] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2446.939262][ T5827] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2446.952594][ T5827] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2446.961658][ T5827] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2446.970208][ T5827] usb 7-1: Product: syz [ 2446.974852][ T5827] usb 7-1: Manufacturer: syz [ 2446.985098][ T5827] cdc_wdm 7-1:1.0: skipping garbage [ 2446.990318][ T5827] cdc_wdm 7-1:1.0: skipping garbage [ 2446.999172][ T5827] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 2447.006079][ T5827] cdc_wdm 7-1:1.0: Unknown control protocol [ 2447.159102][ T5491] fuse: Bad value for 'group_id' [ 2447.172611][ T5491] fuse: Bad value for 'group_id' [ 2447.261734][ T30] audit: type=1400 audit(2000004379.529:1802): avc: denied { read write } for pid=5471 comm="syz.6.7108" name="cdc-wdm0" dev="devtmpfs" ino=5688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 2447.368059][ T30] audit: type=1400 audit(2000004379.529:1803): avc: denied { open } for pid=5471 comm="syz.6.7108" path="/dev/cdc-wdm0" dev="devtmpfs" ino=5688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 2447.489793][ T30] audit: type=1400 audit(2000004379.548:1804): avc: denied { map } for pid=5471 comm="syz.6.7108" path="/dev/cdc-wdm0" dev="devtmpfs" ino=5688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 2447.652592][T27619] usb 7-1: USB disconnect, device number 77 [ 2449.486551][ T5526] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7116'. [ 2449.784744][ T5926] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 2450.229394][ T5537] netlink: 'syz.2.7120': attribute type 21 has an invalid length. [ 2450.362076][ T5926] usb 5-1: Using ep0 maxpacket: 8 [ 2450.374581][ T5926] usb 5-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 2450.394041][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2450.424822][ T5926] usb 5-1: Product: syz [ 2450.441078][ T5926] usb 5-1: Manufacturer: syz [ 2450.445728][ T5926] usb 5-1: SerialNumber: syz [ 2450.487355][ T5926] usb 5-1: config 0 descriptor?? [ 2450.794177][ T5544] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2450.838679][ T5545] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7118'. [ 2451.043567][ T5528] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7118'. [ 2451.175178][ T5528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2451.225361][ T5528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2451.318508][ T30] audit: type=1400 audit(2000004383.355:1805): avc: denied { map } for pid=5553 comm="syz.2.7123" path="socket:[146878]" dev="sockfs" ino=146878 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2451.344641][ T30] audit: type=1400 audit(2000004383.355:1806): avc: denied { accept } for pid=5553 comm="syz.2.7123" path="socket:[146878]" dev="sockfs" ino=146878 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2451.560827][ T5926] usb 5-1: USB disconnect, device number 21 [ 2451.595735][ T4731] udevd[4731]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2452.264748][ T5626] input: syz0 as /devices/virtual/input/input126 [ 2452.543497][ T5926] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 2452.748324][ T5926] usb 6-1: Using ep0 maxpacket: 16 [ 2452.782079][ T5926] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 2452.791316][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2452.809439][ T5926] usb 6-1: Product: syz [ 2452.813972][ T5926] usb 6-1: Manufacturer: syz [ 2452.831808][ T5926] usb 6-1: SerialNumber: syz [ 2452.839720][ T5926] usb 6-1: config 0 descriptor?? [ 2452.848081][ T5926] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 2453.086017][ T5926] usb 6-1: clie_3_5_startup: get config number failed: -71 [ 2453.114591][ T5926] visor 6-1:0.0: probe with driver visor failed with error -71 [ 2453.139729][ T5926] usb 6-1: USB disconnect, device number 28 [ 2453.373204][ T5658] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7129'. [ 2453.594524][ T5827] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 2453.723076][ T5665] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2454.210775][ T5827] usb 5-1: Using ep0 maxpacket: 8 [ 2454.238082][ T5827] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 2454.280823][ T5827] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2454.309968][ T5827] usb 5-1: config 0 has no interface number 0 [ 2454.319485][ T5827] usb 5-1: config 0 interface 52 has no altsetting 0 [ 2454.330563][ T5827] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 2454.340959][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 2454.349287][ T5827] usb 5-1: Product: syz [ 2454.355683][ T5827] usb 5-1: SerialNumber: syz [ 2454.364479][ T5827] usb 5-1: config 0 descriptor?? [ 2454.642311][ T5678] ip6_vti0 speed is unknown, defaulting to 1000 [ 2454.777221][ T5694] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2454.830193][ T5827] usb 5-1: USB disconnect, device number 22 [ 2455.016912][T27619] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 2455.227788][T27619] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2455.247507][T27619] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2455.257261][T27619] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 2455.287871][ T5696] ip6_vti0 speed is unknown, defaulting to 1000 [ 2455.290302][T27619] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2455.305570][T27619] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2455.359315][T27619] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2455.450964][ T5827] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 2455.506457][T27619] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 2455.710187][ T5737] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7141'. [ 2455.748125][ T5827] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 2455.758169][ T5827] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2455.762244][ T5686] netlink: 'syz.2.7134': attribute type 4 has an invalid length. [ 2455.770237][ T5737] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7141'. [ 2455.787778][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 2455.794991][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 2455.814440][ T5827] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2455.835674][ T5827] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 2455.846506][ T5827] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2455.848147][ T5738] netlink: 'syz.2.7134': attribute type 4 has an invalid length. [ 2455.920700][ T5686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2455.957715][ T5686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2455.977904][ T5827] usb 7-1: Product: syz [ 2456.006562][ T5678] lo speed is unknown, defaulting to 1000 [ 2456.077562][ T5827] usb 7-1: Manufacturer: syz [ 2456.082290][ T5827] usb 7-1: SerialNumber: syz [ 2456.155497][ T5827] usb 7-1: config 0 descriptor?? [ 2456.185571][ T5709] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2456.268631][T27619] usb 3-1: USB disconnect, device number 50 [ 2456.403058][ T5696] lo speed is unknown, defaulting to 1000 [ 2456.955122][ T5799] netlink: 'syz.6.7139': attribute type 7 has an invalid length. [ 2457.063712][ T5813] input: syz0 as /devices/virtual/input/input127 [ 2457.181163][ T5822] FAULT_INJECTION: forcing a failure. [ 2457.181163][ T5822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2457.195181][ T5822] CPU: 1 UID: 0 PID: 5822 Comm: syz.2.7145 Tainted: G L syzkaller #0 PREEMPT(full) [ 2457.195210][ T5822] Tainted: [L]=SOFTLOCKUP [ 2457.195217][ T5822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2457.195228][ T5822] Call Trace: [ 2457.195235][ T5822] [ 2457.195242][ T5822] dump_stack_lvl+0x16c/0x1f0 [ 2457.195271][ T5822] should_fail_ex+0x512/0x640 [ 2457.195301][ T5822] _copy_from_iter+0x2a4/0x16c0 [ 2457.195333][ T5822] ? __alloc_skb+0x220/0x410 [ 2457.195359][ T5822] ? __alloc_skb+0x35d/0x410 [ 2457.195385][ T5822] ? __pfx__copy_from_iter+0x10/0x10 [ 2457.195413][ T5822] ? netlink_autobind.isra.0+0x158/0x370 [ 2457.195445][ T5822] netlink_sendmsg+0x820/0xdd0 [ 2457.195472][ T5822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2457.195505][ T5822] ____sys_sendmsg+0xa5d/0xc30 [ 2457.195530][ T5822] ? copy_msghdr_from_user+0x10a/0x160 [ 2457.195548][ T5822] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2457.195584][ T5822] ___sys_sendmsg+0x134/0x1d0 [ 2457.195605][ T5822] ? __pfx____sys_sendmsg+0x10/0x10 [ 2457.195654][ T5822] __sys_sendmsg+0x16d/0x220 [ 2457.195674][ T5822] ? __pfx___sys_sendmsg+0x10/0x10 [ 2457.195710][ T5822] do_syscall_64+0xcd/0xf80 [ 2457.195735][ T5822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2457.195754][ T5822] RIP: 0033:0x7feda478f749 [ 2457.195769][ T5822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2457.195787][ T5822] RSP: 002b:00007feda56ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2457.195805][ T5822] RAX: ffffffffffffffda RBX: 00007feda49e5fa0 RCX: 00007feda478f749 [ 2457.195818][ T5822] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 2457.195829][ T5822] RBP: 00007feda56ff090 R08: 0000000000000000 R09: 0000000000000000 [ 2457.195840][ T5822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2457.195851][ T5822] R13: 00007feda49e6038 R14: 00007feda49e5fa0 R15: 00007ffe0858df18 [ 2457.195877][ T5822] [ 2457.557748][T18278] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 2457.815928][T18278] usb 5-1: Using ep0 maxpacket: 16 [ 2457.825288][T18278] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 2457.834451][T18278] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2458.380935][T18278] usb 5-1: Product: syz [ 2458.385208][T18278] usb 5-1: Manufacturer: syz [ 2458.397470][T18278] usb 5-1: SerialNumber: syz [ 2458.413325][T18278] usb 5-1: config 0 descriptor?? [ 2458.428539][T18278] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 2458.718356][T18278] usb 5-1: clie_3_5_startup: get config number failed: -71 [ 2458.728840][ T5827] usb 7-1: USB disconnect, device number 78 [ 2458.738404][T18278] visor 5-1:0.0: probe with driver visor failed with error -71 [ 2458.761898][T18278] usb 5-1: USB disconnect, device number 23 [ 2459.282097][ T30] audit: type=1400 audit(2000004390.791:1807): avc: denied { map } for pid=5856 comm="syz.6.7148" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 2459.291474][ T5858] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2459.502232][ T5863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16405 sclass=netlink_route_socket pid=5863 comm=syz.6.7148 [ 2459.628405][ T5867] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2461.756427][ T5914] hub 5-0:1.0: USB hub found [ 2461.761987][ T5914] hub 5-0:1.0: 1 port detected [ 2462.356861][ T5926] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 2462.544125][ T5926] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2462.552485][ T5926] usb 3-1: not running at top speed; connect to a high speed hub [ 2462.561567][ T5926] usb 3-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 2462.575774][ T5926] usb 3-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=f4.4a [ 2462.585103][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2462.593249][ T5926] usb 3-1: Product: syz [ 2462.597771][ T5926] usb 3-1: Manufacturer: syz [ 2462.602389][ T5926] usb 3-1: SerialNumber: syz [ 2462.938797][ T5927] FAULT_INJECTION: forcing a failure. [ 2462.938797][ T5927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2462.977596][ T5927] CPU: 0 UID: 0 PID: 5927 Comm: syz.5.7157 Tainted: G L syzkaller #0 PREEMPT(full) [ 2462.977628][ T5927] Tainted: [L]=SOFTLOCKUP [ 2462.977635][ T5927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2462.977646][ T5927] Call Trace: [ 2462.977652][ T5927] [ 2462.977660][ T5927] dump_stack_lvl+0x16c/0x1f0 [ 2462.977693][ T5927] should_fail_ex+0x512/0x640 [ 2462.977726][ T5927] _copy_from_user+0x2e/0xd0 [ 2462.977754][ T5927] nr_setsockopt+0x2d6/0x470 [ 2462.977781][ T5927] ? __pfx_nr_setsockopt+0x10/0x10 [ 2462.977810][ T5927] ? selinux_socket_setsockopt+0x6a/0x80 [ 2462.977832][ T5927] ? __pfx_nr_setsockopt+0x10/0x10 [ 2462.977859][ T5927] do_sock_setsockopt+0xf3/0x1d0 [ 2462.977885][ T5927] __sys_setsockopt+0x1a0/0x230 [ 2462.977907][ T5927] __x64_sys_setsockopt+0xbd/0x160 [ 2462.977923][ T5927] ? do_syscall_64+0x91/0xf80 [ 2462.977946][ T5927] ? lockdep_hardirqs_on+0x7c/0x110 [ 2462.977969][ T5927] do_syscall_64+0xcd/0xf80 [ 2462.977991][ T5927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2462.978010][ T5927] RIP: 0033:0x7f0bdbd8f749 [ 2462.978026][ T5927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2462.978043][ T5927] RSP: 002b:00007f0bdcb72038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2462.978060][ T5927] RAX: ffffffffffffffda RBX: 00007f0bdbfe5fa0 RCX: 00007f0bdbd8f749 [ 2462.978072][ T5927] RDX: 0000000000000001 RSI: 0000000000000103 RDI: 0000000000000005 [ 2462.978082][ T5927] RBP: 00007f0bdcb72090 R08: 0000000000000004 R09: 0000000000000000 [ 2462.978092][ T5927] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 2462.978103][ T5927] R13: 00007f0bdbfe6038 R14: 00007f0bdbfe5fa0 R15: 00007ffe408c4228 [ 2462.978127][ T5927] [ 2463.180840][ T5926] usbsevseg 3-1:129.0: USB 7 Segment device now attached [ 2463.274793][ T5926] usb 3-1: USB disconnect, device number 51 [ 2463.281404][ T5926] usbsevseg 3-1:129.0: USB 7 Segment now disconnected [ 2463.985637][ T5950] ip6_vti0 speed is unknown, defaulting to 1000 [ 2464.221989][ T5950] lo speed is unknown, defaulting to 1000 [ 2464.700987][T27323] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 2465.051992][ T6010] netdevsim netdevsim2: Direct firmware load for lookup_extent_enter failed with error -2 [ 2465.062381][ T6010] netdevsim netdevsim2: Falling back to sysfs fallback for: lookup_extent_enter [ 2466.105806][ T6021] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 2466.126318][ T6021] SELinux: failed to load policy [ 2466.237624][ T6027] input: syz0 as /devices/virtual/input/input128 [ 2466.555877][ T6037] netlink: 107460 bytes leftover after parsing attributes in process `syz.5.7168'. [ 2466.666990][T18278] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 2466.880383][T18278] usb 5-1: Using ep0 maxpacket: 16 [ 2466.908966][T18278] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 2466.927780][T18278] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2466.947553][T18278] usb 5-1: Product: syz [ 2466.951804][T18278] usb 5-1: Manufacturer: syz [ 2466.964521][T18278] usb 5-1: SerialNumber: syz [ 2466.994359][T18278] usb 5-1: config 0 descriptor?? [ 2467.038310][T18278] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 2467.356393][T18278] usb 5-1: clie_3_5_startup: get config number failed: -71 [ 2467.424873][T18278] visor 5-1:0.0: probe with driver visor failed with error -71 [ 2467.437299][T18278] usb 5-1: USB disconnect, device number 24 [ 2467.899402][T21549] Bluetooth: hci4: connection err: -111 [ 2467.931571][T21549] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 2468.017093][ T6078] loop3: detected capacity change from 0 to 7 [ 2468.046578][ T6078] Dev loop3: unable to read RDB block 7 [ 2468.065852][ T6078] loop3: unable to read partition table [ 2468.076489][ T6078] loop3: partition table beyond EOD, truncated [ 2468.103692][ T6078] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2468.271426][ T6075] 9p: Bad value for 'wfdno' [ 2468.354644][T18278] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 2468.559453][T18278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 2468.572753][T18278] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 2468.587069][T18278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2468.620168][T18278] usb 3-1: Product: syz [ 2468.630197][T18278] usb 3-1: Manufacturer: syz [ 2468.635165][T18278] usb 3-1: SerialNumber: syz [ 2468.649293][T18278] usb 3-1: config 0 descriptor?? [ 2468.678656][T18278] hub 3-1:0.0: bad descriptor, ignoring hub [ 2468.686679][T18278] hub 3-1:0.0: probe with driver hub failed with error -5 [ 2468.705812][T18278] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input129 [ 2468.782186][T21549] Bluetooth: hci6: command 0x1003 tx timeout [ 2468.782755][T27323] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 2469.038597][T27323] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 2469.047427][T27323] Bluetooth: hci4: Injecting HCI hardware error event [ 2469.064208][T27323] Bluetooth: hci4: hardware error 0x00 [ 2471.287049][T27323] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 2471.690535][ T6080] bridge: RTM_NEWNEIGH with invalid ether address [ 2471.843847][T24657] usb 3-1: USB disconnect, device number 52 [ 2471.903205][ T6162] loop3: detected capacity change from 0 to 7 [ 2471.914533][ T6162] Dev loop3: unable to read RDB block 7 [ 2471.920119][ T6162] loop3: unable to read partition table [ 2471.936734][ T6162] loop3: partition table beyond EOD, truncated [ 2471.980939][ T6162] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2472.118017][T18278] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 2472.383942][ T6179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7188'. [ 2472.585014][T18278] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2472.826091][T18278] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2472.851355][T18278] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2472.861393][T18278] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2472.903964][ T6146] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2472.914793][T18278] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2473.731701][T18278] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 2473.902740][T18278] usb 7-1: Using ep0 maxpacket: 32 [ 2473.930151][T18278] usb 7-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 2473.940678][T18278] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2474.069377][T18278] usb 7-1: config 0 descriptor?? [ 2474.202617][ T30] audit: type=1400 audit(2000004404.635:1808): avc: denied { lock } for pid=6216 comm="syz.7.7191" path="socket:[148758]" dev="sockfs" ino=148758 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 2474.413059][T18278] gspca_main: sq930x-2.14.0 probing 041e:403c [ 2474.492241][ T6222] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7192'. [ 2474.539849][ T6222] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7192'. [ 2475.127653][ T6231] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7194'. [ 2475.516870][T27619] usb 6-1: USB disconnect, device number 29 [ 2475.688106][T18278] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 2475.694008][T18278] sq930x 7-1:0.0: probe with driver sq930x failed with error -71 [ 2475.712137][T18278] usb 7-1: USB disconnect, device number 79 [ 2476.158354][T27619] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 2476.511189][T27619] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2476.524805][T27619] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2476.661679][T27619] usb 6-1: config 0 descriptor?? [ 2478.030175][T27619] usb 6-1: Cannot set autoneg [ 2478.035252][T27619] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 2478.509103][T27619] usb 6-1: USB disconnect, device number 30 [ 2478.690523][ T6314] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7204'. [ 2478.716182][ T6314] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7204'. [ 2479.771819][T27619] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 2479.783742][ T6325] netlink: 107460 bytes leftover after parsing attributes in process `syz.7.7206'. [ 2479.969113][T27619] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2480.026767][T27619] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2480.061520][T27619] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2480.096136][T27619] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2480.157693][ T6319] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2480.199599][T27619] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2482.137962][T21549] Bluetooth: hci6: command 0x1003 tx timeout [ 2482.153588][T27323] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 2484.949180][ T6370] netlink: 3576 bytes leftover after parsing attributes in process `syz.2.7214'. [ 2486.154420][T24657] usb 6-1: USB disconnect, device number 31 [ 2486.356959][ T6397] netlink: 35 bytes leftover after parsing attributes in process `syz.7.7216'. [ 2486.582472][ T6411] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2486.699522][ T5827] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 2486.926017][ T5827] usb 3-1: Using ep0 maxpacket: 16 [ 2486.940262][ T5827] usb 3-1: config 125 has an invalid interface number: 165 but max is 0 [ 2486.959186][ T5827] usb 3-1: config 125 has no interface number 0 [ 2487.035878][ T5827] usb 3-1: config 125 interface 165 has no altsetting 0 [ 2487.058190][ T5827] usb 3-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=d5.16 [ 2487.077321][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2487.484362][ T6420] overlayfs: missing 'lowerdir' [ 2487.578900][ T5827] usb 3-1: string descriptor 0 read error: -71 [ 2487.596487][ T5827] gspca_main: spca501-2.14.0 probing 0497:c001 [ 2487.609123][ T5827] gspca_spca501: reg write: error -71 [ 2487.614935][ T5827] spca501 3-1:125.165: Reg write failed for 0x02,0x07,0x05 [ 2487.630277][ T5827] spca501 3-1:125.165: probe with driver spca501 failed with error -22 [ 2487.755686][ T5827] usb 3-1: USB disconnect, device number 53 [ 2488.002770][ T6435] SELinux: failed to load policy [ 2488.404347][ T6443] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7221'. [ 2489.128457][ T6448] netlink: 'syz.6.7223': attribute type 21 has an invalid length. [ 2489.384106][ T6461] netlink: 35 bytes leftover after parsing attributes in process `syz.7.7225'. [ 2489.730385][ T6465] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7227'. [ 2490.096935][ T5827] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 2490.823718][ T6483] ip6_vti0 speed is unknown, defaulting to 1000 [ 2491.007798][ T6483] lo speed is unknown, defaulting to 1000 [ 2491.067795][ T5827] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2491.078805][ T5827] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2491.088868][ T5827] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2491.098595][ T5827] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2491.109559][ T6468] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2491.120319][ T5827] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 2491.991739][T27619] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 2492.162676][T27619] usb 3-1: Using ep0 maxpacket: 16 [ 2492.187152][T27619] usb 3-1: config 125 has an invalid interface number: 165 but max is 0 [ 2492.221664][T27619] usb 3-1: config 125 has no interface number 0 [ 2492.229769][ T6531] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7233'. [ 2492.250074][ T6531] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7233'. [ 2492.378299][T27619] usb 3-1: config 125 interface 165 has no altsetting 0 [ 2492.415192][T27619] usb 3-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=d5.16 [ 2492.457287][T27619] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2492.951635][T27619] usb 3-1: string descriptor 0 read error: -71 [ 2492.978935][T27619] gspca_main: spca501-2.14.0 probing 0497:c001 [ 2492.997175][T27619] gspca_spca501: reg write: error -71 [ 2493.019131][T27619] spca501 3-1:125.165: Reg write failed for 0x02,0x07,0x05 [ 2493.047512][T27619] spca501 3-1:125.165: probe with driver spca501 failed with error -22 [ 2493.128610][T27619] usb 3-1: USB disconnect, device number 54 [ 2493.443784][ T6557] netlink: 'syz.5.7237': attribute type 21 has an invalid length. [ 2493.645896][T27619] usb 7-1: USB disconnect, device number 80 [ 2494.642779][T27619] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 2494.764313][ T6598] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2495.320606][ T6591] netlink: 35 bytes leftover after parsing attributes in process `syz.4.7240'. [ 2495.571417][T27619] usb 3-1: Using ep0 maxpacket: 16 [ 2495.586510][T27619] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2495.598931][T27619] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 2495.618772][T27619] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 2495.655818][T27619] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2495.700103][T27619] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 2495.716038][T27619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2495.786325][T27619] usb 3-1: Product: syz [ 2495.790570][T27619] usb 3-1: Manufacturer: syz [ 2495.818484][T27619] usb 3-1: SerialNumber: syz [ 2495.905780][T27619] usb 3-1: config 0 descriptor?? [ 2496.055200][T27619] xbox_remote_probe: Unexpected endpoint_in [ 2496.364045][T27619] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 2496.568447][T27619] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2496.579473][T27619] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2496.590854][T27619] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2496.600025][T27619] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 2496.608015][T27619] usb 6-1: Manufacturer: syz [ 2496.615966][T27619] usb 6-1: config 0 descriptor?? [ 2496.642289][T13572] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 2496.803856][T13572] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2496.814884][T13572] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2496.825898][T13572] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2496.839020][T13572] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 2496.847340][T13572] usb 7-1: Manufacturer: syz [ 2496.853772][T13572] usb 7-1: config 0 descriptor?? [ 2497.473821][ T6646] ip6_vti0 speed is unknown, defaulting to 1000 [ 2497.821108][T27619] uclogic 0003:256C:006D.0045: failed retrieving string descriptor #100: -71 [ 2497.838219][ T5926] usb 3-1: USB disconnect, device number 55 [ 2497.870097][T27619] uclogic 0003:256C:006D.0045: failed retrieving pen parameters: -71 [ 2497.883960][T27619] uclogic 0003:256C:006D.0045: failed probing pen v1 parameters: -71 [ 2497.892201][T27619] uclogic 0003:256C:006D.0045: failed probing parameters: -71 [ 2497.900189][T27619] uclogic 0003:256C:006D.0045: probe with driver uclogic failed with error -71 [ 2497.944649][T27619] usb 6-1: USB disconnect, device number 32 [ 2498.050042][ T6646] lo speed is unknown, defaulting to 1000 [ 2498.141854][T13572] uclogic 0003:256C:006D.0046: failed retrieving string descriptor #100: -71 [ 2498.551591][T13572] uclogic 0003:256C:006D.0046: failed retrieving pen parameters: -71 [ 2498.574713][T13572] uclogic 0003:256C:006D.0046: failed probing pen v1 parameters: -71 [ 2498.583529][T13572] uclogic 0003:256C:006D.0046: failed probing parameters: -71 [ 2498.591201][T13572] uclogic 0003:256C:006D.0046: probe with driver uclogic failed with error -71 [ 2498.604632][T13572] usb 7-1: USB disconnect, device number 81 [ 2498.903820][ T6718] netlink: 'syz.6.7252': attribute type 21 has an invalid length. [ 2499.074326][ T6733] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2499.429158][ T6746] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2500.024502][ T6754] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2500.757602][ T5827] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 2500.943772][ T5827] usb 3-1: Using ep0 maxpacket: 16 [ 2500.954439][ T5827] usb 3-1: config 125 has an invalid interface number: 165 but max is 0 [ 2500.963774][ T5827] usb 3-1: config 125 has no interface number 0 [ 2500.970188][ T5827] usb 3-1: config 125 interface 165 has no altsetting 0 [ 2501.321574][ T5827] usb 3-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=d5.16 [ 2501.388353][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2503.085535][ T6799] netlink: 'syz.4.7267': attribute type 21 has an invalid length. [ 2503.494877][ T6802] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7268'. [ 2503.525499][ T6802] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7268'. [ 2503.568699][ T6804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7269'. [ 2505.248543][ T5827] usb 3-1: string descriptor 0 read error: -71 [ 2505.256116][ T5827] gspca_main: spca501-2.14.0 probing 0497:c001 [ 2505.327030][ T6820] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7271'. [ 2505.714462][ T5827] gspca_spca501: reg write: error -71 [ 2505.801995][ T5827] spca501 3-1:125.165: Reg write failed for 0x02,0x07,0x05 [ 2505.809992][ T5827] spca501 3-1:125.165: probe with driver spca501 failed with error -22 [ 2505.835693][ T5827] usb 3-1: USB disconnect, device number 56 [ 2506.040237][ T6840] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2506.188395][T27619] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 2506.196354][ T6837] input: syz0 as /devices/virtual/input/input131 [ 2506.377081][T27619] usb 6-1: Using ep0 maxpacket: 8 [ 2506.453080][T27619] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2506.481979][T27619] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2506.499421][T27619] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2506.519107][T27619] usb 6-1: config 0 descriptor?? [ 2506.706933][ T6860] netlink: 'syz.4.7279': attribute type 21 has an invalid length. [ 2507.248193][T27619] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2507.821676][ T6879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7285'. [ 2508.158125][T27619] usb 6-1: USB disconnect, device number 33 [ 2509.031683][ T6905] netlink: 'syz.5.7290': attribute type 21 has an invalid length. [ 2509.615993][ T6918] fuse: Bad value for 'rootmode' [ 2509.732828][ T6918] netlink: 4804 bytes leftover after parsing attributes in process `syz.5.7292'. [ 2509.742184][ T6918] netlink: 4804 bytes leftover after parsing attributes in process `syz.5.7292'. [ 2510.813133][ T30] audit: type=1400 audit(2000004438.253:1809): avc: denied { listen } for pid=6917 comm="syz.5.7292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2511.001011][ T6929] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7294'. [ 2511.011482][ T6930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7296'. [ 2511.026081][ T6932] netlink: 107460 bytes leftover after parsing attributes in process `syz.7.7297'. [ 2511.068446][ T6929] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7294'. [ 2511.089773][ T6929] bridge0: port 3(team0) entered disabled state [ 2511.096320][ T6929] bridge0: port 2(bridge_slave_1) entered disabled state [ 2511.103465][ T6929] bridge0: port 1(bridge_slave_0) entered disabled state [ 2511.942189][ T6948] netlink: 'syz.2.7300': attribute type 4 has an invalid length. [ 2512.138485][ T6948] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2512.170350][ T6948] ip6_vti0 speed is unknown, defaulting to 1000 [ 2512.215820][ T6950] trusted_key: syz.2.7300 sent an empty control message without MSG_MORE. [ 2512.249653][ T6955] input: syz0 as /devices/virtual/input/input132 [ 2512.795809][ T6963] ip6_vti0 speed is unknown, defaulting to 1000 [ 2512.946801][ T6963] lo speed is unknown, defaulting to 1000 [ 2512.974662][ T5827] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 2513.130671][ T6988] netlink: 'syz.4.7302': attribute type 21 has an invalid length. [ 2513.291628][ T6948] lo speed is unknown, defaulting to 1000 [ 2513.299864][T27323] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 2513.374090][ T5827] usb 6-1: Using ep0 maxpacket: 16 [ 2513.384518][ T5827] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 2513.395872][ T5827] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2513.409811][ T5827] usb 6-1: Product: syz [ 2513.416636][ T5827] usb 6-1: Manufacturer: syz [ 2513.422180][ T5827] usb 6-1: SerialNumber: syz [ 2513.431265][ T5827] usb 6-1: config 0 descriptor?? [ 2513.455758][ T5827] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 2513.600749][ T7016] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7304'. [ 2513.610542][ T7016] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7304'. [ 2513.670352][ T5827] usb 6-1: clie_3_5_startup: get config number failed: -71 [ 2513.695558][ T5827] visor 6-1:0.0: probe with driver visor failed with error -71 [ 2513.732694][ T5827] usb 6-1: USB disconnect, device number 34 [ 2514.113693][ T7034] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2514.113693][ T7034] program syz.7.7306 not setting count and/or reply_len properly [ 2514.294538][T27323] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2514.304654][T27323] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2514.312821][T27323] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2514.322228][T27323] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2514.329893][T27323] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2514.428365][ T9118] smc: removing ib device syz1 [ 2514.442149][ T5827] syz1: Port: 1 Link DOWN [ 2514.589106][ T7033] ip6_vti0 speed is unknown, defaulting to 1000 [ 2516.510329][T21549] Bluetooth: hci6: command tx timeout [ 2516.586892][ T7074] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7312'. [ 2516.670836][ T7077] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7313'. [ 2516.715500][ T7077] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7313'. [ 2517.392789][ T7033] lo speed is unknown, defaulting to 1000 [ 2517.564299][ T7091] fuse: Bad value for 'fd' [ 2518.550977][ T7127] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7319'. [ 2518.728574][T21549] Bluetooth: hci6: command tx timeout [ 2518.782181][T13572] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 2518.801336][ T7148] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7319'. [ 2518.967669][T13572] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2518.996075][T13572] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2519.044473][T13572] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2519.081029][T13572] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 2519.121777][T13572] usb 6-1: Manufacturer: syz [ 2519.143272][ T7148] bridge_slave_1 (unregistering): left allmulticast mode [ 2519.145150][T13572] usb 6-1: config 0 descriptor?? [ 2519.153833][ T7148] bridge_slave_1 (unregistering): left promiscuous mode [ 2519.185433][ T7148] bridge0: port 2(bridge_slave_1) entered disabled state [ 2519.463816][ T7033] chnl_net:caif_netlink_parms(): no params data found [ 2519.896907][ T9118] ------------[ cut here ]------------ [ 2519.902978][ T9118] GID entry ref leak for dev syz1 index 2 ref=1 [ 2519.909286][ T9118] WARNING: drivers/infiniband/core/cache.c:806 at gid_table_release_one+0x1ad/0x450, CPU#1: kworker/u8:23/9118 [ 2519.921369][ T9118] Modules linked in: [ 2519.926107][ T9118] CPU: 1 UID: 0 PID: 9118 Comm: kworker/u8:23 Tainted: G L syzkaller #0 PREEMPT(full) [ 2519.937844][ T9118] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2519.942171][ T9118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2519.953075][ T9118] Workqueue: ib-unreg-wq ib_unregister_work [ 2519.958430][ T30] audit: type=1400 audit(2000004447.561:1810): avc: denied { write } for pid=5801 comm="syz-executor" path="pipe:[3989]" dev="pipefs" ino=3989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 2519.959048][ T9118] RIP: 0010:gid_table_release_one+0x1b6/0x450 [ 2519.988180][ T9118] Code: 4c 24 38 48 c1 e8 03 4d 01 fc 48 89 44 24 08 eb 54 48 89 34 24 e8 1a 73 4d f9 48 8d 3d 23 ba 23 08 48 8b 34 24 89 e9 44 89 f2 <67> 48 0f b9 3a e8 00 73 4d f9 48 89 d8 41 83 c6 01 48 c1 e8 03 42 [ 2520.008546][ T9118] RSP: 0018:ffffc9000e0dfac8 EFLAGS: 00010293 [ 2520.015087][ T9118] RAX: 0000000000000000 RBX: ffff888058468000 RCX: 0000000000000001 [ 2520.023080][ T9118] RDX: 0000000000000002 RSI: ffff88804d077460 RDI: ffffffff90952e30 [ 2520.031040][ T9118] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffed1008d44be0 [ 2520.039544][ T9118] R10: ffff888046a25f03 R11: 0000000000002ba1 R12: ffffed100b08d01b [ 2520.047685][ T9118] R13: ffff888020750000 R14: 0000000000000002 R15: dffffc0000000000 [ 2520.055672][ T9118] FS: 0000000000000000(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 2520.064590][ T9118] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2520.071568][ T9118] CR2: 0000200000054000 CR3: 000000003130b000 CR4: 00000000003526f0 [ 2520.079542][ T9118] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 2520.087525][ T9118] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2520.095497][ T9118] Call Trace: [ 2520.099120][ T9118] [ 2520.102044][ T9118] ib_device_release+0xef/0x1e0 [ 2520.106901][ T9118] ? __pfx_ib_device_release+0x10/0x10 [ 2520.112426][ T9118] device_release+0xa4/0x240 [ 2520.117026][ T9118] kobject_put+0x1ef/0x6f0 [ 2520.121491][ T9118] put_device+0x1f/0x30 [ 2520.125699][ T9118] process_one_work+0x9ba/0x1b20 [ 2520.131030][ T9118] ? __pfx_process_one_work+0x10/0x10 [ 2520.136386][ T9118] ? assign_work+0x1a0/0x250 [ 2520.140969][ T9118] worker_thread+0x6c8/0xf10 [ 2520.145542][ T9118] ? __pfx_worker_thread+0x10/0x10 [ 2520.150795][ T9118] kthread+0x3c5/0x780 [ 2520.154846][ T9118] ? __pfx_kthread+0x10/0x10 [ 2520.159498][ T9118] ? rcu_is_watching+0x12/0xc0 [ 2520.164848][ T9118] ? __pfx_kthread+0x10/0x10 [ 2520.169419][ T9118] ret_from_fork+0x983/0xb10 [ 2520.174021][ T9118] ? __pfx_ret_from_fork+0x10/0x10 [ 2520.179120][ T9118] ? __switch_to+0x7af/0x10d0 [ 2520.183980][ T9118] ? __pfx_kthread+0x10/0x10 [ 2520.188573][ T9118] ret_from_fork_asm+0x1a/0x30 [ 2520.193694][ T9118] [ 2520.196708][ T9118] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2520.203961][ T9118] CPU: 1 UID: 0 PID: 9118 Comm: kworker/u8:23 Tainted: G L syzkaller #0 PREEMPT(full) [ 2520.215132][ T9118] Tainted: [L]=SOFTLOCKUP [ 2520.219437][ T9118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2520.229466][ T9118] Workqueue: ib-unreg-wq ib_unregister_work [ 2520.235345][ T9118] Call Trace: [ 2520.238602][ T9118] [ 2520.241514][ T9118] dump_stack_lvl+0x3d/0x1f0 [ 2520.246093][ T9118] vpanic+0x640/0x6f0 [ 2520.250058][ T9118] ? gid_table_release_one+0x1ad/0x450 [ 2520.255498][ T9118] panic+0xca/0xd0 [ 2520.259203][ T9118] ? __pfx_panic+0x10/0x10 [ 2520.263696][ T9118] ? check_panic_on_warn+0x1f/0xb0 [ 2520.268795][ T9118] check_panic_on_warn+0xab/0xb0 [ 2520.273722][ T9118] __warn+0x108/0x3c0 [ 2520.277694][ T9118] __report_bug+0x2a0/0x520 [ 2520.282184][ T9118] ? gid_table_release_one+0x1ad/0x450 [ 2520.287628][ T9118] ? __pfx___report_bug+0x10/0x10 [ 2520.292632][ T9118] ? lockdep_hardirqs_on+0x7c/0x110 [ 2520.297824][ T9118] ? gid_table_release_one+0x1b6/0x450 [ 2520.303270][ T9118] report_bug_entry+0xe1/0x290 [ 2520.308018][ T9118] ? gid_table_release_one+0x1b6/0x450 [ 2520.313459][ T9118] handle_bug+0x18a/0x260 [ 2520.317778][ T9118] exc_invalid_op+0x17/0x50 [ 2520.322271][ T9118] asm_exc_invalid_op+0x1a/0x20 [ 2520.327103][ T9118] RIP: 0010:gid_table_release_one+0x1b6/0x450 [ 2520.333150][ T9118] Code: 4c 24 38 48 c1 e8 03 4d 01 fc 48 89 44 24 08 eb 54 48 89 34 24 e8 1a 73 4d f9 48 8d 3d 23 ba 23 08 48 8b 34 24 89 e9 44 89 f2 <67> 48 0f b9 3a e8 00 73 4d f9 48 89 d8 41 83 c6 01 48 c1 e8 03 42 [ 2520.352740][ T9118] RSP: 0018:ffffc9000e0dfac8 EFLAGS: 00010293 [ 2520.358788][ T9118] RAX: 0000000000000000 RBX: ffff888058468000 RCX: 0000000000000001 [ 2520.366741][ T9118] RDX: 0000000000000002 RSI: ffff88804d077460 RDI: ffffffff90952e30 [ 2520.374692][ T9118] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffed1008d44be0 [ 2520.382643][ T9118] R10: ffff888046a25f03 R11: 0000000000002ba1 R12: ffffed100b08d01b [ 2520.390593][ T9118] R13: ffff888020750000 R14: 0000000000000002 R15: dffffc0000000000 [ 2520.398561][ T9118] ? gid_table_release_one+0x1a6/0x450 [ 2520.404011][ T9118] ib_device_release+0xef/0x1e0 [ 2520.408858][ T9118] ? __pfx_ib_device_release+0x10/0x10 [ 2520.414302][ T9118] device_release+0xa4/0x240 [ 2520.418900][ T9118] kobject_put+0x1ef/0x6f0 [ 2520.423319][ T9118] put_device+0x1f/0x30 [ 2520.427459][ T9118] process_one_work+0x9ba/0x1b20 [ 2520.432389][ T9118] ? __pfx_process_one_work+0x10/0x10 [ 2520.437752][ T9118] ? assign_work+0x1a0/0x250 [ 2520.442332][ T9118] worker_thread+0x6c8/0xf10 [ 2520.446921][ T9118] ? __pfx_worker_thread+0x10/0x10 [ 2520.452015][ T9118] kthread+0x3c5/0x780 [ 2520.456159][ T9118] ? __pfx_kthread+0x10/0x10 [ 2520.460742][ T9118] ? rcu_is_watching+0x12/0xc0 [ 2520.465490][ T9118] ? __pfx_kthread+0x10/0x10 [ 2520.470066][ T9118] ret_from_fork+0x983/0xb10 [ 2520.474640][ T9118] ? __pfx_ret_from_fork+0x10/0x10 [ 2520.479737][ T9118] ? __switch_to+0x7af/0x10d0 [ 2520.484401][ T9118] ? __pfx_kthread+0x10/0x10 [ 2520.488975][ T9118] ret_from_fork_asm+0x1a/0x30 [ 2520.493743][ T9118] [ 2520.497055][ T9118] Kernel Offset: disabled [ 2520.501355][ T9118] Rebooting in 86400 seconds..